Роутер RB951G-2HnD RouterOS 6.47.6.
Несколько дней назад были перебои со светом в городе, в нашем районе всё было нормально, но так как комутатор стоит далеко, то на нём пропадал свет, из за чего по городу не было интернета где-то пол часа. после того как интернет появился на Микротике началась дичь, он подключает интернет. и через некоторое время, минуту-пару часов, разрывает PPPoE подключение, и так уже 3 дня. В нашем здании находится еще 5 абонентов подключенных к одному свичу, так вот у всех 5-ти роутеры Tp-Link, и у них (по заверению провайдера) подключения по 70 часов и ни единого разрыва. И только у нас с микротиком обрывы.
Собственно вот конфиг, на котором всё работало больше года.
[admin@MikroTik] > /export hide-sensitive
# oct/30/2020 19:32:10 by RouterOS 6.47.6
# software id = Z70K-G4BN
#
# model = 951G-2HnD
# serial number = 96500954D270
/interface lte
set [ find ] comment=Kyivstar name=lte1
/interface bridge
add admin-mac=B8:69:F4:31:88:6C auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] antenna-gain=0 band=2ghz-b/g/n channel-width=20/40mhz-XX country=\
no_country_set disabled=no distance=indoors frequency=auto frequency-mode=manual-txpower \
installation=indoor mode=ap-bridge ssid=comel_wifi_tortus station-roaming=enabled wireless-protocol=\
802.11
/interface ethernet
set [ find default-name=ether1 ] comment=Ethernet mac-address=E4:BE:ED:C8:14:94
set [ find default-name=ether2 ] comment=LAN1
set [ find default-name=ether3 ] comment=LAN2
set [ find default-name=ether4 ] comment=LAN3
set [ find default-name=ether5 ] comment=LAN4
/interface pppoe-client
add add-default-route=yes comment=WAN disabled=no interface=ether1 keepalive-timeout=disabled max-mru=\
1480 max-mtu=1480 name=pppoe-out1 use-peer-dns=yes user=******
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=dynamic-keys supplicant-identity=\
MikroTik
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
/port
set 0 baud-rate=9600 data-bits=8 flow-control=none name=usb1 parity=none stop-bits=1
set 1 baud-rate=9600 data-bits=8 flow-control=none name=usb2 parity=none stop-bits=1
/user group
set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,password,web,sniff,sensitive,ap\
i,romon,dude,tikapp"
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=wlan1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
add interface=pppoe-out1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=ether2 network=192.168.88.0
/ip dhcp-client
add comment=defconf interface=ether1
/ip dhcp-server lease
add address=192.168.88.3 mac-address=D8:CB:8A:DF:FF:E1 server=defconf
add address=192.168.88.2 mac-address=1C:1B:0D:E6:E8:AB server=defconf
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input dst-port=8291 protocol=tcp
add action=accept chain=input dst-port=34567 protocol=tcp
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept to local loopback (for CAPsMAN)" dst-address=\
127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=\
established,related
add action=accept chain=forward comment="defconf: accept established,related, untracked" \
connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=\
!dstnat connection-state=new in-interface-list=WAN
add action=drop chain=input comment="Deny invalid connections" connection-state=invalid
add chain=input comment="Permit icmp" protocol=icmp
add chain=input comment="Permit established connections" connection-state=established
add chain=input comment="Permit related connections" connection-state=related
add action=drop chain=input comment="Deny new connections" connection-state=new in-interface-list=!LAN
add action=drop chain=output comment="Deny 8.8.4.4 to reserved internet-channel" disabled=yes \
dst-address=8.8.8.8 out-interface=all-ppp protocol=icmp
add action=accept chain=input in-interface=lte1
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none \
out-interface-list=WAN
add action=masquerade chain=srcnat disabled=yes out-interface=*B
add action=masquerade chain=srcnat out-interface=ether1
add action=dst-nat chain=dstnat dst-address=78.154.187.219 dst-port=80 protocol=tcp to-addresses=\
192.168.88.2 to-ports=80
add action=dst-nat chain=dstnat dst-address=78.154.187.219 dst-port=8080 protocol=tcp to-addresses=\
192.168.88.2
add action=masquerade chain=srcnat out-interface=lte1
add action=netmap chain=dstnat dst-address=78.154.187.219 dst-port=6000 in-interface=pppoe-out1 protocol=\
tcp to-addresses=192.168.88.36 to-ports=6000
add action=netmap chain=dstnat dst-address=78.154.187.219 dst-port=34567 in-interface=pppoe-out1 \
protocol=tcp to-addresses=192.168.88.36 to-ports=34567
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set udplite disabled=yes
set dccp disabled=yes
/ip route
add comment=WAN disabled=yes distance=1 gateway=ether1
add comment=Kyivstar disabled=yes distance=1 gateway=*B
add check-gateway=ping distance=1 dst-address=8.8.8.8/32 gateway=pppoe-out1
/ip service
set winbox address=0.0.0.0/0
/ip upnp
set enabled=yes
/ip upnp interfaces
add interface=bridge type=internal
add interface=pppoe-out1 type=external
/system clock
set time-zone-name=Europe/Kiev
/system logging
add topics=system
add topics=firewall
add disabled=yes topics=debug
/system ntp client
set enabled=yes primary-ntp=78.27.191.182
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
/tool netwatch
add disabled=yes down-script="ip route set [find comment=\"WAN\"] disabled=yes\r\
\ninterface ppp-client disable [find comment=\"Kyivstar\"]\r\
\ndisabled=no" host=8.8.8.8 interval=5s up-script="ip route set [find comment=\"WAN\"] disabled=no\r\
\ninterface ppp-client disable [find comment=\"Kyivstar\"]\r\
\ndisabled=yes"
add down-script="/system routerboard usb power-reset duration=10s" host=192.168.0.1
[admin@MikroTik] >
# oct/30/2020 19:32:10 by RouterOS 6.47.6
# software id = Z70K-G4BN
#
# model = 951G-2HnD
# serial number = 96500954D270
/interface lte
set [ find ] comment=Kyivstar name=lte1
/interface bridge
add admin-mac=B8:69:F4:31:88:6C auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] antenna-gain=0 band=2ghz-b/g/n channel-width=20/40mhz-XX country=\
no_country_set disabled=no distance=indoors frequency=auto frequency-mode=manual-txpower \
installation=indoor mode=ap-bridge ssid=comel_wifi_tortus station-roaming=enabled wireless-protocol=\
802.11
/interface ethernet
set [ find default-name=ether1 ] comment=Ethernet mac-address=E4:BE:ED:C8:14:94
set [ find default-name=ether2 ] comment=LAN1
set [ find default-name=ether3 ] comment=LAN2
set [ find default-name=ether4 ] comment=LAN3
set [ find default-name=ether5 ] comment=LAN4
/interface pppoe-client
add add-default-route=yes comment=WAN disabled=no interface=ether1 keepalive-timeout=disabled max-mru=\
1480 max-mtu=1480 name=pppoe-out1 use-peer-dns=yes user=******
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=dynamic-keys supplicant-identity=\
MikroTik
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge name=defconf
/port
set 0 baud-rate=9600 data-bits=8 flow-control=none name=usb1 parity=none stop-bits=1
set 1 baud-rate=9600 data-bits=8 flow-control=none name=usb2 parity=none stop-bits=1
/user group
set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,password,web,sniff,sensitive,ap\
i,romon,dude,tikapp"
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=wlan1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
add interface=pppoe-out1 list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=ether2 network=192.168.88.0
/ip dhcp-client
add comment=defconf interface=ether1
/ip dhcp-server lease
add address=192.168.88.3 mac-address=D8:CB:8A:DF:FF:E1 server=defconf
add address=192.168.88.2 mac-address=1C:1B:0D:E6:E8:AB server=defconf
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan
/ip firewall filter
add action=accept chain=input dst-port=8291 protocol=tcp
add action=accept chain=input dst-port=34567 protocol=tcp
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept to local loopback (for CAPsMAN)" dst-address=\
127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=\
established,related
add action=accept chain=forward comment="defconf: accept established,related, untracked" \
connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=\
!dstnat connection-state=new in-interface-list=WAN
add action=drop chain=input comment="Deny invalid connections" connection-state=invalid
add chain=input comment="Permit icmp" protocol=icmp
add chain=input comment="Permit established connections" connection-state=established
add chain=input comment="Permit related connections" connection-state=related
add action=drop chain=input comment="Deny new connections" connection-state=new in-interface-list=!LAN
add action=drop chain=output comment="Deny 8.8.4.4 to reserved internet-channel" disabled=yes \
dst-address=8.8.8.8 out-interface=all-ppp protocol=icmp
add action=accept chain=input in-interface=lte1
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none \
out-interface-list=WAN
add action=masquerade chain=srcnat disabled=yes out-interface=*B
add action=masquerade chain=srcnat out-interface=ether1
add action=dst-nat chain=dstnat dst-address=78.154.187.219 dst-port=80 protocol=tcp to-addresses=\
192.168.88.2 to-ports=80
add action=dst-nat chain=dstnat dst-address=78.154.187.219 dst-port=8080 protocol=tcp to-addresses=\
192.168.88.2
add action=masquerade chain=srcnat out-interface=lte1
add action=netmap chain=dstnat dst-address=78.154.187.219 dst-port=6000 in-interface=pppoe-out1 protocol=\
tcp to-addresses=192.168.88.36 to-ports=6000
add action=netmap chain=dstnat dst-address=78.154.187.219 dst-port=34567 in-interface=pppoe-out1 \
protocol=tcp to-addresses=192.168.88.36 to-ports=34567
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set udplite disabled=yes
set dccp disabled=yes
/ip route
add comment=WAN disabled=yes distance=1 gateway=ether1
add comment=Kyivstar disabled=yes distance=1 gateway=*B
add check-gateway=ping distance=1 dst-address=8.8.8.8/32 gateway=pppoe-out1
/ip service
set winbox address=0.0.0.0/0
/ip upnp
set enabled=yes
/ip upnp interfaces
add interface=bridge type=internal
add interface=pppoe-out1 type=external
/system clock
set time-zone-name=Europe/Kiev
/system logging
add topics=system
add topics=firewall
add disabled=yes topics=debug
/system ntp client
set enabled=yes primary-ntp=78.27.191.182
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
/tool netwatch
add disabled=yes down-script="ip route set [find comment=\"WAN\"] disabled=yes\r\
\ninterface ppp-client disable [find comment=\"Kyivstar\"]\r\
\ndisabled=no" host=8.8.8.8 interval=5s up-script="ip route set [find comment=\"WAN\"] disabled=no\r\
\ninterface ppp-client disable [find comment=\"Kyivstar\"]\r\
\ndisabled=yes"
add down-script="/system routerboard usb power-reset duration=10s" host=192.168.0.1
[admin@MikroTik] >
11:58:33 pppoe,debug,packet ether1: rcvd PADI from F4:F2:6D:7F:1E:5B
11:58:33 pppoe,debug,packet session-id=0x0000
11:58:33 pppoe,debug,packet service-name=
11:58:33 pppoe,debug,packet host-uniq=32 39 30 45 33 43 45 41
11:58:33 pppoe,debug,packet vendor-specific=00 00 0d e9 01 13 4d 69 6b 72 6f 54 69 6b 20 65 74 68 20 30 2
f 31 30 3a 31 02 07 50 72 6f 6d 4e 49 49
11:58:33 pppoe,debug ether1: dropping PADI: no service to offer
11:58:34 pppoe,debug,packet ether1: rcvd PADI from 00:72:63:D5:03:2E
11:58:34 pppoe,debug,packet session-id=0x0000
11:58:34 pppoe,debug,packet service-name=
11:58:34 pppoe,debug,packet host-uniq=0x462f
11:58:34 pppoe,debug,packet vendor-specific=00 00 0d e9 01 13 4d 69 6b 72 6f 54 69 6b 20 65 74 68 20 30 2
f 31 33 3a 31 02 0b 5a 61 70 61 64 6e 75 79 20 32 34
11:58:34 pppoe,debug ether1: dropping PADI: no service to offer
11:58:35 pppoe,debug,packet ether1: rcvd PADI from C8:3A:35:18:92:98
11:58:35 pppoe,debug,packet session-id=0x0000
11:58:35 pppoe,debug,packet host-uniq=c8 3a 35 18 92 98 00 00
11:58:35 pppoe,debug,packet service-name=
11:58:35 pppoe,debug,packet vendor-specific=00 00 0d e9 01 1a 43 52 53 2d 33 32 36 2d 32 34 47 2d 32 53 2
b 20 65 74 68 20 30 2f 31 33 3a 31 02 07 50 6f 72 74 20 31 34
11:58:33 pppoe,debug,packet session-id=0x0000
11:58:33 pppoe,debug,packet service-name=
11:58:33 pppoe,debug,packet host-uniq=32 39 30 45 33 43 45 41
11:58:33 pppoe,debug,packet vendor-specific=00 00 0d e9 01 13 4d 69 6b 72 6f 54 69 6b 20 65 74 68 20 30 2
f 31 30 3a 31 02 07 50 72 6f 6d 4e 49 49
11:58:33 pppoe,debug ether1: dropping PADI: no service to offer
11:58:34 pppoe,debug,packet ether1: rcvd PADI from 00:72:63:D5:03:2E
11:58:34 pppoe,debug,packet session-id=0x0000
11:58:34 pppoe,debug,packet service-name=
11:58:34 pppoe,debug,packet host-uniq=0x462f
11:58:34 pppoe,debug,packet vendor-specific=00 00 0d e9 01 13 4d 69 6b 72 6f 54 69 6b 20 65 74 68 20 30 2
f 31 33 3a 31 02 0b 5a 61 70 61 64 6e 75 79 20 32 34
11:58:34 pppoe,debug ether1: dropping PADI: no service to offer
11:58:35 pppoe,debug,packet ether1: rcvd PADI from C8:3A:35:18:92:98
11:58:35 pppoe,debug,packet session-id=0x0000
11:58:35 pppoe,debug,packet host-uniq=c8 3a 35 18 92 98 00 00
11:58:35 pppoe,debug,packet service-name=
11:58:35 pppoe,debug,packet vendor-specific=00 00 0d e9 01 1a 43 52 53 2d 33 32 36 2d 32 34 47 2d 32 53 2
b 20 65 74 68 20 30 2f 31 33 3a 31 02 07 50 6f 72 74 20 31 34
19:27:27 pppoe,ppp,info pppoe-out1: terminating... - disconnected
19:27:27 pppoe,ppp,info pppoe-out1: disconnected
19:27:37 pppoe,ppp,info pppoe-out1: initializing...
19:27:37 pppoe,ppp,info pppoe-out1: connecting...
19:27:47 pppoe,ppp,info pppoe-out1: terminating... - disconnected
19:27:47 pppoe,ppp,info pppoe-out1: disconnected
19:27:57 pppoe,ppp,info pppoe-out1: initializing...
19:27:57 pppoe,ppp,info pppoe-out1: connecting...
19:28:07 pppoe,ppp,info pppoe-out1: terminating... - disconnected
19:28:07 pppoe,ppp,info pppoe-out1: disconnected
19:28:17 pppoe,ppp,info pppoe-out1: initializing...
19:28:17 pppoe,ppp,info pppoe-out1: connecting...
19:28:27 pppoe,ppp,info pppoe-out1: terminating... - disconnected
19:28:27 pppoe,ppp,info pppoe-out1: disconnected
19:28:37 pppoe,ppp,info pppoe-out1: initializing...
19:28:37 pppoe,ppp,info pppoe-out1: connecting...
19:28:47 pppoe,ppp,info pppoe-out1: terminating... - disconnected
19:28:47 pppoe,ppp,info pppoe-out1: disconnected
19:28:57 pppoe,ppp,info pppoe-out1: initializing...
19:28:57 pppoe,ppp,info pppoe-out1: connecting...
19:29:07 pppoe,ppp,info pppoe-out1: terminating... - disconnected
19:29:07 pppoe,ppp,info pppoe-out1: disconnected
19:29:17 pppoe,ppp,info pppoe-out1: initializing...
19:29:17 pppoe,ppp,info pppoe-out1: connecting...
19:29:28 pppoe,ppp,info pppoe-out1: terminating... - disconnected
19:29:28 pppoe,ppp,info pppoe-out1: disconnected
19:29:38 pppoe,ppp,info pppoe-out1: initializing...
19:29:38 pppoe,ppp,info pppoe-out1: connecting...
19:29:48 pppoe,ppp,info pppoe-out1: terminating... - disconnected
19:29:48 pppoe,ppp,info pppoe-out1: disconnected
19:29:58 pppoe,ppp,info pppoe-out1: initializing...
19:29:58 pppoe,ppp,info pppoe-out1: connecting...
19:27:27 pppoe,ppp,info pppoe-out1: disconnected
19:27:37 pppoe,ppp,info pppoe-out1: initializing...
19:27:37 pppoe,ppp,info pppoe-out1: connecting...
19:27:47 pppoe,ppp,info pppoe-out1: terminating... - disconnected
19:27:47 pppoe,ppp,info pppoe-out1: disconnected
19:27:57 pppoe,ppp,info pppoe-out1: initializing...
19:27:57 pppoe,ppp,info pppoe-out1: connecting...
19:28:07 pppoe,ppp,info pppoe-out1: terminating... - disconnected
19:28:07 pppoe,ppp,info pppoe-out1: disconnected
19:28:17 pppoe,ppp,info pppoe-out1: initializing...
19:28:17 pppoe,ppp,info pppoe-out1: connecting...
19:28:27 pppoe,ppp,info pppoe-out1: terminating... - disconnected
19:28:27 pppoe,ppp,info pppoe-out1: disconnected
19:28:37 pppoe,ppp,info pppoe-out1: initializing...
19:28:37 pppoe,ppp,info pppoe-out1: connecting...
19:28:47 pppoe,ppp,info pppoe-out1: terminating... - disconnected
19:28:47 pppoe,ppp,info pppoe-out1: disconnected
19:28:57 pppoe,ppp,info pppoe-out1: initializing...
19:28:57 pppoe,ppp,info pppoe-out1: connecting...
19:29:07 pppoe,ppp,info pppoe-out1: terminating... - disconnected
19:29:07 pppoe,ppp,info pppoe-out1: disconnected
19:29:17 pppoe,ppp,info pppoe-out1: initializing...
19:29:17 pppoe,ppp,info pppoe-out1: connecting...
19:29:28 pppoe,ppp,info pppoe-out1: terminating... - disconnected
19:29:28 pppoe,ppp,info pppoe-out1: disconnected
19:29:38 pppoe,ppp,info pppoe-out1: initializing...
19:29:38 pppoe,ppp,info pppoe-out1: connecting...
19:29:48 pppoe,ppp,info pppoe-out1: terminating... - disconnected
19:29:48 pppoe,ppp,info pppoe-out1: disconnected
19:29:58 pppoe,ppp,info pppoe-out1: initializing...
19:29:58 pppoe,ppp,info pppoe-out1: connecting...
В статистике провайдера картина такая:
Хотелось бы получить помощь с описанием конкретных действий, так как я в микротиках вообще не понимаю, настроил с помощью общедоступных инструкций, и всё работало, но сейчас провайдер утверждает что проблема в моём роутере, типа он подгорел (при том что в нашем районе даже свет не моргал).
Заранее спасибо за помощь.