I am using a RB751U-2HnD and have a problem where the router regularly restarts when using Skype from a machine on the LAN. I usually use Skype on a wireless connection from a Macbook. This is very frustrating but I must be doing something wrong as I cannot believe Mikrotik would fail at Skype! What happens is Skype call drops, no access to the web, then network comes back up (or I plug ethernet in) and when I login to Winbox the uptime corresponds to the recent crash.
I am running RouterOS 5.11 and believe I have enabled uPNP. Below shows the usual outputs, if any more would be helpful please let me know. It may be something to do with MTU or MSS (there are mangle rules to alter MSS than don’t seem to print from command line?
I don’t fully understand how to setup logging so the MT won’t loose records when restarting.
Any advice very much appreciated.
Crude Network Diagram
ADSL --[telephone]-- MODEM ----[cat5]----Mikrotik-----LAN (+ Wifi)
/ip address print detail
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; local LAN
address=192.168.88.1/24 network=192.168.88.0 interface=bridge-local
actual-interface=bridge-local1 D address=192.168.1.10/24 network=192.168.1.0 interface=ether1-gateway
actual-interface=ether1-gateway2 D address=111.xxx.xxx.xxx/32 network=111.xxx.xxx.xxx interface=pppoe-out1
actual-interface=pppoe-out1
/ip route print detail
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
0 ADS dst-address=0.0.0.0/0 gateway=111..xxx.xxx.xxx
gateway-status=111.xxx.xxx.xxx reachable pppoe-out1 distance=1 scope=30
target-scope=101 ADC dst-address=111..xxx.xxx.xxx/32 pref-src=111.69.245.4 gateway=pppoe-out1
gateway-status=pppoe-out1 reachable distance=0 scope=102 ADC dst-address=192.168.1.0/24 pref-src=192.168.1.10 gateway=ether1-gateway
gateway-status=ether1-gateway reachable distance=0 scope=103 ADC dst-address=192.168.88.0/24 pref-src=192.168.88.1 gateway=bridge-local
gateway-status=bridge-local reachable distance=0 scope=10
/interface print detail
Flags: D - dynamic, X - disabled, R - running, S - slave
0 R name=“wlan1” type=“wlan” mtu=1500 l2mtu=22901 R name=“ether1-gateway” type=“ether” mtu=1500 l2mtu=1600 max-l2mtu=4076
2 R name=“ether2-master-local” type=“ether” mtu=1500 l2mtu=1598 max-l2mtu=2028
3 R name=“ether3-slave-local” type=“ether” mtu=1500 l2mtu=1598 max-l2mtu=2028
4 name=“ether4-slave-local” type=“ether” mtu=1500 l2mtu=1598 max-l2mtu=2028
5 name=“ether5-alone” type=“ether” mtu=1500 l2mtu=1598 max-l2mtu=2028
6 R name=“bridge-local” type=“bridge” mtu=1500 l2mtu=1598
7 R name=“pppoe-out1” type=“pppoe-out” mtu=1492
/ip firewall exportjan/15/2012 17:51:02 by RouterOS 5.11
software id = XXXX-XXXX
/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s
tcp-close-wait-timeout=10s tcp-established-timeout=1d tcp-fin-wait-timeout=
10s tcp-last-ack-timeout=10s tcp-syn-received-timeout=5s
tcp-syn-sent-timeout=5s tcp-syncookie=no tcp-time-wait-timeout=10s
udp-stream-timeout=3m udp-timeout=10s
/ip firewall filter
add action=accept chain=forward disabled=no dst-address=192.168.1.1
in-interface=bridge-local out-interface=ether1-gateway
add action=accept chain=output comment=PPTP_GRE disabled=no protocol=gre
add action=accept chain=input comment=PPTP_GRE disabled=no protocol=gre
add action=accept chain=input comment=“default configuration - PPTP” disabled=
no dst-port=1723 in-interface=pppoe-out1 protocol=tcp
add action=accept chain=input comment=“default configuration” disabled=no
protocol=icmp
add action=accept chain=input comment=“default configuration” connection-state=
established disabled=no
add action=accept chain=input comment=
“This is to enable ODMON SNMP checking remotely.” disabled=no dst-port=161
protocol=udp src-address=188.124.160.10
add action=accept chain=input comment=“default configuration” connection-state=
related disabled=no
add action=drop chain=input comment=“default configuration” disabled=no
in-interface=pppoe-out1
/ip firewall mangle
add action=mark-packet chain=forward comment=VoIP disabled=no new-packet-mark=
VoIP passthrough=no src-address=192.168.88.200
add action=mark-packet chain=forward comment=VoIP disabled=no dst-address=
192.168.88.200 new-packet-mark=VoIP passthrough=no
/ip firewall nat
add action=redirect chain=dstnat comment=“For proxy” disabled=yes dst-port=80
protocol=tcp to-ports=8080
add action=masquerade chain=srcnat comment=“default configuration” disabled=no
out-interface=pppoe-out1
add action=masquerade chain=srcnat comment=
“This is required to access Vigor modem on 192.168.1.1” disabled=no
out-interface=ether1-gateway
/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=yes ports=5060,5061,50600 sip-direct-media=yes
set pptp disabled=no
/ip upnp print
enabled: yes
allow-disable-external-interface: yes
show-dummy-rule: yes