Настраивал по инструкции отсюда .
Интернет приходит на порт ether11.
Комп подключаю к порту ether2 (VLAN10, 192.168.10.0/24)
IP адрес комп получает, трассировка дальше шлюза (192.168.10.1) не идет.
На Микротике интернет есть. из консоли пингую все что угодно.
Подскажите, пожалуйста, что не правильно настроил? Вот конфиг:
Код: Выделить всё
# model = RB1100x4
/interface bridge
add comment=OFFICE fast-forward=no name=bridge-vlan10-office
add arp=reply-only comment=GUESTS fast-forward=no name=bridge-vlan30-guests
/interface ethernet
set [ find default-name=ether1 ] comment=Dummy
set [ find default-name=ether2 ] comment=OFFICE name=ether2-office
set [ find default-name=ether3 ] name=ether3-office
set [ find default-name=ether4 ] name=ether4-office
set [ find default-name=ether5 ] name=ether5-office
set [ find default-name=ether6 ] comment=Dummy
set [ find default-name=ether7 ] comment=Servers name=ether7-servers
set [ find default-name=ether8 ] comment=Management name=ether8-management
set [ find default-name=ether9 ] comment=TRUNK name=ether9-trunk
set [ find default-name=ether10 ] comment=OTHER
set [ find default-name=ether11 ] comment=WAN name=ether11-wan
set [ find default-name=ether12 ] comment=Other
/interface vlan
add interface=ether9-trunk name=vlan10-trunk-to-R2 vlan-id=10
add interface=ether9-trunk name=vlan30-trunk-to-R2 vlan-id=30
/interface ethernet switch port
set 0 default-vlan-id=0
set 1 default-vlan-id=0
set 2 default-vlan-id=0
set 3 default-vlan-id=0
set 4 default-vlan-id=0
set 5 default-vlan-id=0
set 6 default-vlan-id=0
set 7 default-vlan-id=0
set 8 default-vlan-id=0
set 9 default-vlan-id=0
set 10 default-vlan-id=0
set 11 default-vlan-id=0
set 12 default-vlan-id=0
set 13 default-vlan-id=0
set 14 default-vlan-id=0
set 15 default-vlan-id=0
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=pool-vlan10-office ranges=192.168.10.100-192.168.10.150
add name=pool-vlan30-guests ranges=192.168.30.100-192.168.30.200
/ip dhcp-server
add address-pool=pool-vlan10-office disabled=no interface=\
bridge-vlan10-office name=dhcp-vlan10-office
add add-arp=yes address-pool=pool-vlan30-guests disabled=no interface=\
bridge-vlan30-guests name=dhcp-vlan30-guests
/interface bridge port
add bridge=bridge-vlan10-office comment="OFFICE access port" interface=\
ether2-office
add bridge=bridge-vlan10-office comment="VLAN 10" interface=\
vlan10-trunk-to-R2
add bridge=bridge-vlan30-guests comment="VLAN 30" interface=\
vlan30-trunk-to-R2
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add interface=ether11-wan list=WAN
add interface=bridge-vlan10-office list=LAN
add disabled=yes interface=bridge-vlan30-guests list=LAN
/ip address
add address=192.168.10.1/24 comment=OFFICE interface=bridge-vlan10-office \
network=192.168.10.0
add address=192.168.70.1/24 comment=SERVERS disabled=yes network=192.168.70.0
add address=192.168.80.1/24 comment=MANAGEMENT disabled=yes network=\
192.168.80.0
add address=192.168.30.1/24 comment=GUESTS interface=bridge-vlan30-guests \
network=192.168.30.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=ether11-wan
/ip dhcp-server network
add address=192.168.10.0/24 comment=OFFICE dns-server=192.168.10.1 gateway=\
192.168.10.1 netmask=24
add address=192.168.30.0/24 comment=GUESTS dns-server=192.168.30.1 gateway=\
192.168.30.1 netmask=24
/ip dns
set allow-remote-requests=yes
/ip firewall address-list
add address=192.168.10.24 list=Net
/ip firewall nat
add action=masquerade chain=srcnat comment=defconf:masquerade dst-address=\
192.168.10.0/24 ipsec-policy=out,none out-interface-list=WAN
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/system clock
set time-zone-name=Europe/Moscow
/system identity
set name=R1