Проблема:
Собрал конфигурацию для Микротик для работы с Ростелекомм, но на одних точках PPPoE поднимается без проблем, а на других Микротик образует петлю на порту коммутатора РТК и порт затыкается...
В чем может быть дело или где напортачил не могу понять, помогите плз!
Код: Выделить всё
# oct/11/2017 11:25:05 by RouterOS 6.40.4
# software id = INYE-XLTT
#
# model = 951Ui-2nD
# serial number = 71A3010BEB5F
/interface bridge
add fast-forward=no name=br1-lan
/interface ethernet
set [ find default-name=ether1 ] name=eth1-wan
set [ find default-name=ether5 ] name=eth5-lan
/interface pppoe-client
add add-default-route=yes disabled=no interface=br1-lan keepalive-timeout=60 \
name=tap1-wan password=F4FZiRhK use-peer-dns=yes user=kd0001101999
/interface ethernet
set [ find default-name=ether2 ] master-port=\
eth5-lan name=eth2-lan
set [ find default-name=ether3 ] master-port=\
eth5-lan name=eth3-lan
set [ find default-name=ether4 ] master-port=\
eth5-lan name=eth4-lan
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk eap-methods="" mode=dynamic-keys name=\
wpa2-protected supplicant-identity=MikroTik wpa-pre-shared-key=\
synvos2017wlan wpa2-pre-shared-key=synvos2017wlan
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no l2mtu=2290 mode=\
ap-bridge name=wlan3 security-profile=wpa2-protected ssid=RodStor \
wireless-protocol=802.11
/interface wireless nstreme
set wlan3 enable-polling=no
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=dhcp-pc ranges=192.168.88.10-192.168.88.20
/ip dhcp-server
add address-pool=dhcp-pc authoritative=after-2sec-delay disabled=no \
interface=br1-lan lease-time=8h name=dhcp-pc
/interface bridge port
add bridge=br1-lan interface=eth5-lan
add bridge=br1-lan interface=eth1-wan
add bridge=br1-lan interface=wlan3
/ip address
add address=192.168.88.1/24 interface=br1-lan network=192.168.88.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=eth1-wan
/ip dhcp-server network
add address=192.168.88.0/24 dns-server=192.168.88.1 gateway=192.168.88.1 \
netmask=24
/ip dns
set allow-remote-requests=yes
/ip firewall filter
add action=accept chain=input dst-port=8291 in-interface=tap1-wan protocol=\
tcp
add action=accept chain=forward
add action=accept chain=input protocol=icmp
add action=accept chain=input connection-state=established,related
add action=drop chain=input in-interface=tap1-wan
add action=fasttrack-connection chain=forward connection-state=\
established,related
add action=accept chain=forward connection-state=established,related
add action=drop chain=forward connection-state=invalid
add action=drop chain=forward connection-nat-state=!dstnat connection-state=\
new in-interface=tap1-wan
add action=drop chain=input in-interface=tap1-wan
/ip firewall nat
add action=masquerade chain=srcnat out-interface=tap1-wan
add action=netmap chain=dstnat dst-port=5900 in-interface=tap1-wan protocol=\
tcp to-addresses=192.168.88.2 to-ports=5900
add action=netmap chain=dstnat dst-port=8291 in-interface=tap1-wan protocol=\
tcp to-addresses=192.168.88.1 to-ports=8291
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www-ssl disabled=no
set api disabled=yes
set api-ssl disabled=yes
/system clock
set time-zone-name=Asia/Vladivostok
/system ntp client
set enabled=yes primary-ntp=91.226.136.155 secondary-ntp=88.147.254.228
/system ntp server
set enabled=yes
/user add name=syadmin group=full password=synvos17mik
/user remove admin
