Не могу обновится. Последние рабочие релизы 6.46.6 и 6.47. Выше при обновлении исчезает выход в инет и каждые 5 секунд исчезает подключение к самом RoS. Сброс настроек не помогает, после установки параметров ситуация повторяется. В логах пусто. При отвале сначала сообщает, что не поддерживает подключение и нужно перейти в Legacy Mode, но через несколько секунд подключается.
Моя конфигурация:
Код: Выделить всё
# model = 951Ui-2nD
/interface bridge
add admin-mac=auto-mac=xx:xx:xx:xx:xx:xx no name=bridge
/interface ethernet
set [ find default-name=ether1 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
set [ find default-name=ether2 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full name=\
ether2
set [ find default-name=ether3 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
set [ find default-name=ether4-inet ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full mac-address=xx:xx:xx:xx:xx:xx
name=ether4-inet
set [ find default-name=ether5 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
/interface wireless
set [ find default-name=wlan1 ] antenna-gain=0 band=2ghz-b/g/n channel-width=\
20/40mhz-Ce country=no_country_set disabled=no distance=indoors \
frequency=auto frequency-mode=manual-txpower mode=ap-bridge ssid=Wi-Fi \
wireless-protocol=802.11 wps-mode=disabled
/interface list
add exclude=dynamic name=discover
add name=mactel
add name=mac-winbox
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk disable-pmkid=yes \
eap-methods="" mode=dynamic-keys supplicant-identity=MikroTik \
wpa2-pre-shared-key=**********
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip ipsec policy group
set [ find default=yes ] name="IPSec Group"
/ip ipsec profile
set [ find default=yes ] dh-group=modp1024 enc-algorithm=\
aes-256,aes-192,aes-128,3des
/ip ipsec proposal
set [ find default=yes ] auth-algorithms=sha256,sha1 enc-algorithms=\
aes-256-cbc,aes-128-cbc,3des pfs-group=none
/ip pool
add name=default-dhcp ranges=192.168.1.10-192.168.1.254
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=bridge lease-time=12h \
name=DHCP
/snmp community
set [ find default=yes ] addresses=0.0.0.0/0
/user group
set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,pas\
sword,web,sniff,sensitive,api,romon,dude,tikapp"
/interface bridge port
add bridge=bridge comment=defconf interface=ether2-master
add bridge=bridge comment=defconf interface=wlan1
add bridge=bridge interface=ether1
add bridge=bridge interface=ether3
add bridge=bridge interface=ether5
/ip neighbor discovery-settings
set discover-interface-list=discover
/interface list member
add interface=wlan1 list=discover
add interface=bridge list=discover
add interface=bridge list=mactel
add interface=bridge list=mac-winbox
/ip address
add address=192.168.1.1/24 comment=defconf interface=bridge network=192.168.1.0
/ip dhcp-client
add add-default-route=special-classless comment=defconf disabled=no \
interface=ether4-inet use-peer-dns=no use-peer-ntp=no
/ip dhcp-server lease
add address=192.168.1.2 client-id=xx:xx:xx:xx:xx:xx mac-address=\
xx:xx:xx:xx:xx:xx server=DHCP
add address=192.168.1.5 always-broadcast=yes client-id=xx:xx:xx:xx:xx:xx \
mac-address=xx:xx:xx:xx:xx:xx server=DHCP
/ip dhcp-server network
add address=192.168.1.0/24 dns-server=10.0.1.1 gateway=192.168.1.1 netmask=24 \
ntp-server=192.168.1.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.4,8.8.8.8
/ip ipsec policy
set 0 dst-address=0.0.0.0/0 src-address=0.0.0.0/0
/ip proxy
set always-from-cache=yes src-address=192.168.1.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www address=192.168.1.0/24 port=8080
set ssh address=192.168.1.0/24 disabled=yes
set api disabled=yes
set winbox address=192.168.1.0/24
set api-ssl disabled=yes
/ip ssh
set allow-none-crypto=yes forwarding-enabled=remote
/system clock
set time-zone-name=Europe/Rome
/system identity
set name=Home
/system logging
add topics=critical
add disabled=yes topics=debug
add disabled=yes topics=event
/system package update
set channel=long-term
/tool bandwidth-server
set enabled=no
/tool mac-server
set allowed-interface-list=mactel
/tool mac-server mac-winbox
set allowed-interface-list=mac-winbox
/ip firewall filter
add action=accept chain=input protocol=icmp
add action=accept chain=input connection-state=established,related
add action=accept chain=input dst-port=1701 ipsec-policy=in,ipsec protocol=\
udp
add action=drop chain=input dst-port=1701 protocol=udp
add action=drop chain=input comment="drop all from WAN" \
in-interface=ether4-inet
add action=drop chain=forward comment=\
"drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new in-interface=ether4-inet
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related
add action=accept chain=forward comment="accept established,related" \
connection-state=established,related
add action=accept chain=forward in-interface=bridge
add action=accept chain=forward out-interface=bridge
add action=drop chain=forward comment="drop invalid" \
connection-state=invalid log=yes log-prefix=DROP
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" \
out-interface=ether4-inet