В общем, происходит какая-то дичь с 5ghz. Внезапно теряет интернет, при этом на 2ghz всё работает. Спасает либо перезагрузка роутера, либо отключение и включение 5ghz. Что может быть и куда копать?
P.S. сильно не пинайте, я с микротиком дружу совсем недавно и настраивал исключительно по мануалам в интернете. Надеюсь на вашу помощь. Конфиг прикрепляю ниже.
# jun/21/2021 15:20:18 by RouterOS 6.48.3
# software id = V5M5-20M9
#
# model = RB962UiGS-5HacT2HnT
# serial number = CC4F0CC7972F
/interface bridge add admin-mac=48:8F:5A:16:7F:EC auto-mac=no comment=defconf name
=bridgeLocal
/interface wireless set [ find default-name=wlan1 ] adaptive-noise-immunity=ap-and
-client-mode band=2ghz-b/g/n country=no_country_set disabled=no frequency=auto hw-
protection-mode=rts-cts installation=indoor mode=ap-bridge multicast-helper=full n
ame="wlan1 2g" preamble-mode=long ssid="MikroTik 2G" wireless-protocol=802.11 wps-
mode=disabled
/interface wireless nstreme set "wlan1 2g" enable-polling=no
/interface list add name=WAN
/interface list add name=LAN
/interface wireless security-profiles set [ find default=yes ] authentication-type
s=wpa-psk,wpa2-psk eap-methods="" group-key-update=1d mode=dynamic-keys supplicant
-identity=MikroTik
/interface wireless security-profiles add authentication-types=wpa-psk,wpa2-psk gr
oup-key-update=1d mode=dynamic-keys name="wlan2 5g-profile" supplicant-identity=Mi
kroTik
/interface wireless set [ find default-name=wlan2 ] adaptive-noise-immunity=ap-and
-client-mode band=5ghz-onlyac channel-width=20/40/80mhz-Ceee country=ukraine disab
led=no distance=indoors frequency=auto guard-interval=long hw-protection-mode=rts-
cts installation=indoor mode=ap-bridge multicast-helper=full name="wlan2 5g" secur
ity-profile="wlan2 5g-profile" ssid="MikroTik 5G" wds-default-bridge=bridgeLocal w
ds-mode=dynamic wireless-protocol=802.11 wmm-support=enabled wps-mode=disabled
/interface wireless nstreme set "wlan2 5g" enable-polling=no
/ip pool add name=dhcp ranges=192.168.88.162-192.168.88.190
/ip dhcp-server add add-arp=yes address-pool=dhcp disabled=no interface=bridgeLoca
l lease-time=3d name=dhcp1
/queue simple add burst-limit=90M/90M burst-threshold=90M/90M burst-time=2s/2s max
-limit=90M/90M name=queue1 queue=pcq-upload-default/pcq-download-default target=br
idgeLocal
/interface bridge port add bridge=bridgeLocal comment=defconf disabled=yes interfa
ce=ether1
/interface bridge port add bridge=bridgeLocal comment=defconf interface=ether2
/interface bridge port add bridge=bridgeLocal comment=defconf interface=ether3
/interface bridge port add bridge=bridgeLocal comment=defconf interface=ether4
/interface bridge port add bridge=bridgeLocal comment=defconf interface=ether5
/interface bridge port add bridge=bridgeLocal comment=defconf interface=sfp1
/interface bridge port add bridge=bridgeLocal interface="wlan2 5g"
/interface bridge port add bridge=bridgeLocal interface="wlan1 2g"
/ip firewall connection tracking set enabled=yes
/ip neighbor discovery-settings set discover-interface-list=LAN
/ip settings set icmp-rate-limit=0 tcp-syncookies=yes
/interface detect-internet set detect-interface-list=all
/interface list member add interface=ether1 list=WAN
/interface list member add interface=bridgeLocal list=LAN
/interface wireless cap set bridge=bridgeLocal discovery-interfaces=bridgeLocal in
terfaces="wlan1 2g,wlan2 5g"
/ip address add address=192.168.88.1/24 interface=ether2 network=192.168.88.0
/ip dhcp-client add comment=defconf disabled=no interface=ether1
/ip dhcp-server lease add address=192.168.88.186 client-id=1:1c:98:c1:2a:f1:3d mac
-address=1C:98:C1:2A:F1:3D server=dhcp1
/ip dhcp-server network add address=192.168.88.0/24 dns-server=1.1.1.1 gateway=192
.168.88.1 netmask=24
/ip dns set allow-remote-requests=yes cache-size=8192KiB max-concurrent-queries=10
00 max-concurrent-tcp-sessions=200 max-udp-packet-size=8192 servers=1.1.1.1,8.8.8.
8
/ip firewall filter add action=accept chain=input protocol=icmp
/ip firewall filter add action=accept chain=input connection-state=established
/ip firewall filter add action=accept chain=input connection-state=related
/ip firewall filter add action=drop chain=input dst-port=53 protocol=udp
/ip firewall filter add action=drop chain=input dst-port=53 protocol=tcp
/ip firewall filter add action=drop chain=input in-interface-list=!LAN
/ip firewall filter add action=drop chain=input comment="drop ftp brute forcer
st-port=21 protocol=tcp src-address-list=ftp_blacklist
/ip firewall filter add action=accept chain=output content="530 Login incorrec
st-limit=1/1m,9,dst-address/1m protocol=tcp
/ip firewall filter add action=add-dst-to-address-list address-list=ftp_blackl
address-list-timeout=3h chain=output content="530 Login incorrect" protocol=tc
/ip firewall filter add action=drop chain=input comment="drop ssh brute forcer
st-port=22 protocol=tcp src-address-list=ssh_blacklist
/ip firewall filter add action=add-src-to-address-list address-list=ssh_blackl
address-list-timeout=1w3d chain=input connection-state=new dst-port=22 protoco
p src-address-list=ssh_stage3
/ip firewall filter add action=add-src-to-address-list address-list=ssh_stage3
ress-list-timeout=1m chain=input connection-state=new dst-port=22 protocol=tcp
-address-list=ssh_stage2
/ip firewall filter add action=add-src-to-address-list address-list=ssh_stage2
ress-list-timeout=1m chain=input connection-state=new dst-port=22 protocol=tcp
-address-list=ssh_stage1
/ip firewall filter add action=add-src-to-address-list address-list=ssh_stage1
ress-list-timeout=1m chain=input connection-state=new dst-port=22 protocol=tcp
/ip firewall nat add action=masquerade chain=srcnat out-interface-list=WAN
/ip service set telnet disabled=yes
/ip service set ftp disabled=yes
/ip service set www disabled=yes
/ip service set ssh port=6022
/ip service set api disabled=yes
/ip service set api-ssl disabled=yes
/ip smb set allow-guests=no
/ip upnp set enabled=yes
/ip upnp interfaces add interface=bridgeLocal type=internal
/ip upnp interfaces add interface=ether1 type=external
/system clock set time-zone-name=Europe/Kiev
/system watchdog set automatic-supout=no watchdog-timer=no
/tool mac-server set allowed-interface-list=LAN
/tool mac-server mac-winbox set allowed-interface-list=LAN
# software id = V5M5-20M9
#
# model = RB962UiGS-5HacT2HnT
# serial number = CC4F0CC7972F
/interface bridge add admin-mac=48:8F:5A:16:7F:EC auto-mac=no comment=defconf name
=bridgeLocal
/interface wireless set [ find default-name=wlan1 ] adaptive-noise-immunity=ap-and
-client-mode band=2ghz-b/g/n country=no_country_set disabled=no frequency=auto hw-
protection-mode=rts-cts installation=indoor mode=ap-bridge multicast-helper=full n
ame="wlan1 2g" preamble-mode=long ssid="MikroTik 2G" wireless-protocol=802.11 wps-
mode=disabled
/interface wireless nstreme set "wlan1 2g" enable-polling=no
/interface list add name=WAN
/interface list add name=LAN
/interface wireless security-profiles set [ find default=yes ] authentication-type
s=wpa-psk,wpa2-psk eap-methods="" group-key-update=1d mode=dynamic-keys supplicant
-identity=MikroTik
/interface wireless security-profiles add authentication-types=wpa-psk,wpa2-psk gr
oup-key-update=1d mode=dynamic-keys name="wlan2 5g-profile" supplicant-identity=Mi
kroTik
/interface wireless set [ find default-name=wlan2 ] adaptive-noise-immunity=ap-and
-client-mode band=5ghz-onlyac channel-width=20/40/80mhz-Ceee country=ukraine disab
led=no distance=indoors frequency=auto guard-interval=long hw-protection-mode=rts-
cts installation=indoor mode=ap-bridge multicast-helper=full name="wlan2 5g" secur
ity-profile="wlan2 5g-profile" ssid="MikroTik 5G" wds-default-bridge=bridgeLocal w
ds-mode=dynamic wireless-protocol=802.11 wmm-support=enabled wps-mode=disabled
/interface wireless nstreme set "wlan2 5g" enable-polling=no
/ip pool add name=dhcp ranges=192.168.88.162-192.168.88.190
/ip dhcp-server add add-arp=yes address-pool=dhcp disabled=no interface=bridgeLoca
l lease-time=3d name=dhcp1
/queue simple add burst-limit=90M/90M burst-threshold=90M/90M burst-time=2s/2s max
-limit=90M/90M name=queue1 queue=pcq-upload-default/pcq-download-default target=br
idgeLocal
/interface bridge port add bridge=bridgeLocal comment=defconf disabled=yes interfa
ce=ether1
/interface bridge port add bridge=bridgeLocal comment=defconf interface=ether2
/interface bridge port add bridge=bridgeLocal comment=defconf interface=ether3
/interface bridge port add bridge=bridgeLocal comment=defconf interface=ether4
/interface bridge port add bridge=bridgeLocal comment=defconf interface=ether5
/interface bridge port add bridge=bridgeLocal comment=defconf interface=sfp1
/interface bridge port add bridge=bridgeLocal interface="wlan2 5g"
/interface bridge port add bridge=bridgeLocal interface="wlan1 2g"
/ip firewall connection tracking set enabled=yes
/ip neighbor discovery-settings set discover-interface-list=LAN
/ip settings set icmp-rate-limit=0 tcp-syncookies=yes
/interface detect-internet set detect-interface-list=all
/interface list member add interface=ether1 list=WAN
/interface list member add interface=bridgeLocal list=LAN
/interface wireless cap set bridge=bridgeLocal discovery-interfaces=bridgeLocal in
terfaces="wlan1 2g,wlan2 5g"
/ip address add address=192.168.88.1/24 interface=ether2 network=192.168.88.0
/ip dhcp-client add comment=defconf disabled=no interface=ether1
/ip dhcp-server lease add address=192.168.88.186 client-id=1:1c:98:c1:2a:f1:3d mac
-address=1C:98:C1:2A:F1:3D server=dhcp1
/ip dhcp-server network add address=192.168.88.0/24 dns-server=1.1.1.1 gateway=192
.168.88.1 netmask=24
/ip dns set allow-remote-requests=yes cache-size=8192KiB max-concurrent-queries=10
00 max-concurrent-tcp-sessions=200 max-udp-packet-size=8192 servers=1.1.1.1,8.8.8.
8
/ip firewall filter add action=accept chain=input protocol=icmp
/ip firewall filter add action=accept chain=input connection-state=established
/ip firewall filter add action=accept chain=input connection-state=related
/ip firewall filter add action=drop chain=input dst-port=53 protocol=udp
/ip firewall filter add action=drop chain=input dst-port=53 protocol=tcp
/ip firewall filter add action=drop chain=input in-interface-list=!LAN
/ip firewall filter add action=drop chain=input comment="drop ftp brute forcer
st-port=21 protocol=tcp src-address-list=ftp_blacklist
/ip firewall filter add action=accept chain=output content="530 Login incorrec
st-limit=1/1m,9,dst-address/1m protocol=tcp
/ip firewall filter add action=add-dst-to-address-list address-list=ftp_blackl
address-list-timeout=3h chain=output content="530 Login incorrect" protocol=tc
/ip firewall filter add action=drop chain=input comment="drop ssh brute forcer
st-port=22 protocol=tcp src-address-list=ssh_blacklist
/ip firewall filter add action=add-src-to-address-list address-list=ssh_blackl
address-list-timeout=1w3d chain=input connection-state=new dst-port=22 protoco
p src-address-list=ssh_stage3
/ip firewall filter add action=add-src-to-address-list address-list=ssh_stage3
ress-list-timeout=1m chain=input connection-state=new dst-port=22 protocol=tcp
-address-list=ssh_stage2
/ip firewall filter add action=add-src-to-address-list address-list=ssh_stage2
ress-list-timeout=1m chain=input connection-state=new dst-port=22 protocol=tcp
-address-list=ssh_stage1
/ip firewall filter add action=add-src-to-address-list address-list=ssh_stage1
ress-list-timeout=1m chain=input connection-state=new dst-port=22 protocol=tcp
/ip firewall nat add action=masquerade chain=srcnat out-interface-list=WAN
/ip service set telnet disabled=yes
/ip service set ftp disabled=yes
/ip service set www disabled=yes
/ip service set ssh port=6022
/ip service set api disabled=yes
/ip service set api-ssl disabled=yes
/ip smb set allow-guests=no
/ip upnp set enabled=yes
/ip upnp interfaces add interface=bridgeLocal type=internal
/ip upnp interfaces add interface=ether1 type=external
/system clock set time-zone-name=Europe/Kiev
/system watchdog set automatic-supout=no watchdog-timer=no
/tool mac-server set allowed-interface-list=LAN
/tool mac-server mac-winbox set allowed-interface-list=LAN