Connection Lost

RouterOS Beginner Basics
1

I was trying to set up my new router. Not sure what I did wrong but every 30 seconds or so, I get this message.

Any suggestions?

image
image408×223 11.4 KB

# 2026-08-14 04:50:51 by RouterOS 7.23.3
# software id = XXXXXXX
#
# model = E60iUGS
# serial number = xxxxxxxx
/interface bridge
add admin-mac=XX:XX:XX:XX auto-mac=no comment=defconf name=bridge
/interface ethernet
set [ find default-name=ether1 ] name="ether1[Internet]"
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name=dhcp_pool1 ranges=192.168.0.2-192.168.0.254
/ip dhcp-server
add address-pool=dhcp_pool1 interface=bridge name=dhcp1
/disk settings
set auto-media-interface=bridge auto-media-sharing=yes auto-smb-sharing=yes
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=ether5
add bridge=bridge comment=defconf interface=sfp1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface="ether1[Internet]" list=WAN
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=\
    192.168.88.0
add address=192.168.0.1/24 interface=bridge network=192.168.0.0
/ip dhcp-client
add comment=defconf interface="ether1[Internet]" name=client1
/ip dhcp-server network
add address=192.168.0.0/24 gateway=192.168.0.1
add address=192.168.88.0/24 comment=defconf dns-server=192.168.88.1 gateway=\
    192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 comment=defconf name=router.lan type=A
/ip firewall filter
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment=\
    "defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1 \
    in-interface=lo src-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
    in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" \
    ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" \
    ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
    connection-state=established,related
add action=accept chain=forward comment=\
    "defconf: accept established,related, untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid
add action=drop chain=forward comment=\
    "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
    in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" \
    ipsec-policy=out,none out-interface="ether1[Internet]" \
    out-interface-list=WAN
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
add address=::1/128 comment="defconf: lo" list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
add address=100::/64 comment="defconf: discard only " list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
/ipv6 firewall filter
add action=accept chain=input comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
    invalid
add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\
    icmpv6
add action=accept chain=input comment="defconf: accept UDP traceroute" \
    dst-port=33434-33534 protocol=udp
add action=accept chain=input comment=\
    "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\
    udp src-address=fe80::/10
add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \
    protocol=udp
add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\
    ipsec-ah
add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\
    ipsec-esp
add action=accept chain=input comment=\
    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=input comment=\
    "defconf: drop everything else not coming from LAN" in-interface-list=\
    !LAN
add action=fasttrack-connection chain=forward comment="defconf: fasttrack6" \
    connection-state=established,related
add action=accept chain=forward comment=\
    "defconf: accept established,related,untracked" connection-state=\
    established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
    connection-state=invalid
add action=drop chain=forward comment=\
    "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
add action=drop chain=forward comment=\
    "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \
    hop-limit=equal:1 protocol=icmpv6
add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\
    icmpv6
add action=accept chain=forward comment="defconf: accept HIP" protocol=139
add action=accept chain=forward comment="defconf: accept IKE" dst-port=\
    500,4500 protocol=udp
add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\
    ipsec-ah
add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\
    ipsec-esp
add action=accept chain=forward comment=\
    "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=forward comment=\
    "defconf: drop everything else not coming from LAN" in-interface-list=\
    !LAN
/system clock
set time-zone-name=America/New_York
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
2

Unplug the power, hold in the reset button and plug in the power. Keep holding the reset until the user light flashes and it will be reset to factory settings.

3

Thanks, but is there any idea what setting I got wrong? or what will prevent it from happening again?

4

Look in the log to see whether there are disconnection events on the ethernet ports. If yes, then maybe your ethernet cable or plug is faulty.

5

Not an unusual occurrence as the config is conflicted due to the changes made. For a new person learning MT OS, the move to a different subnet is fraught with dangers..................

  1. You have duplicate address for the bridge itself. You need to disable the .88 address
  2. Your dhcp-server network for the new subnet is missing the dns server setting 192.168.0.1 and disable the old one .88
  3. Disable or remove the old default static DNS setting and add a new one.
    /ip dns
    set allow-remote-requests=yes servers=1.1.1.1,8.8.8.8
6

I'm not sure what I'm looking at. But this is the logs I got.

 
 
 2026-08-14 05:55:28 system,info,account user admin logged in from 192.168.0.249 
via winbox
 2026-08-14 05:56:05 system,info,account user admin logged out from 192.168.0.249
 via winbox
 2026-08-14 05:56:05 system,info,account user admin logged out from 192.168.0.249
 via winbox
 2026-08-14 05:56:07 system,info,account user admin logged in from 192.168.0.249 
via winbox
 2026-08-14 05:56:07 system,info,account user admin logged in from 192.168.0.249 
via winbox
 2026-08-14 05:56:32 dhcp,info dhcp1 deassigned 192.168.0.251 for 6C:63:F8:E5:3E:
2C
 2026-08-14 05:56:32 dhcp,info dhcp1 assigned 192.168.0.251 for 6C:63:F8:E5:3E:2C
 2026-08-14 05:56:40 dhcp,info dhcp1 deassigned 192.168.0.250 for 6C:63:F8:E5:51:
F7
 2026-08-14 05:56:40 dhcp,info dhcp1 assigned 192.168.0.250 for 6C:63:F8:E5:51:F7
 2026-08-14 05:56:45 system,info,account user admin logged out from 192.168.0.249
 via winbox
 2026-08-14 05:56:45 system,info,account user admin logged out from 192.168.0.249
 via winbox
 2026-08-14 05:56:47 system,info,account user admin logged in from 192.168.0.249 
via winbox
 2026-08-14 05:56:47 system,info,account user admin logged in from 192.168.0.249 
via winbox
 2026-08-14 05:57:21 system,info,account user admin logged out from 192.168.0.249
 via winbox
 2026-08-14 05:57:21 system,info,account user admin logged out from 192.168.0.249
 via winbox
 2026-08-14 05:57:22 system,info,account user admin logged in from 192.168.0.249 
via winbox
 2026-08-14 05:57:22 system,info,account user admin logged in from 192.168.0.249 
via winbox
 2026-08-14 05:58:09 system,info,account user admin logged in from 192.168.0.249 
via winbox
 2026-08-14 05:58:09 system,info,account user admin logged out from 192.168.0.249
 via winbox
 2026-08-14 05:58:09 system,info,account user admin logged out from 192.168.0.249
 via winbox
 2026-08-14 05:58:10 system,info,account user admin logged in from 192.168.0.249 
via winbox
 2026-08-14 05:58:49 system,info,account user admin logged in from 192.168.0.249 
via winbox
 2026-08-14 05:58:49 system,info,account user admin logged out from 192.168.0.249
 via winbox
 2026-08-14 05:58:49 system,info,account user admin logged out from 192.168.0.249
 via winbox
 2026-08-14 05:58:50 system,info,account user admin logged in from 192.168.0.249 
via winbox
 2026-08-14 05:59:30 system,info,account user admin logged out from 192.168.0.249
 via winbox
 2026-08-14 05:59:30 system,info,account user admin logged out from 192.168.0.249
 via winbox
 2026-08-14 05:59:44 system,info,account user admin logged in from 192.168.0.249 
via winbox
 2026-08-14 05:59:45 system,info,account user admin logged in from 192.168.0.249 
via winbox
 2026-08-14 06:00:26 system,info,account user admin logged out from 192.168.0.249
 via winbox
 2026-08-14 06:00:26 system,info,account user admin logged out from 192.168.0.249
 via winbox
 2026-08-14 06:00:46 system,info,account user admin logged in from 192.168.0.249 
via winbox
 2026-08-14 06:00:47 system,info,account user admin logged in from 192.168.0.249 
via winbox
 2026-08-14 06:01:48 system,info,account user admin logged out from 192.168.0.249
 via winbox
 2026-08-14 06:01:48 system,info,account user admin logged out from 192.168.0.249
 via winbox
 2026-08-14 06:02:10 system,info,account user admin logged in from 192.168.0.249 
via winbox
 2026-08-14 06:02:11 system,info,account user admin logged in from 192.168.0.249 
via winbox
 2026-08-14 06:02:11 system,info,account user admin logged in from 192.168.0.249 
via winbox
7

Maybe the problem is somewhere in your computer. Just start over. Reset to default settings and then (if you want to change the IP address):

  1. Bridge -> Ports, remove one port (does not matter which one) from the bridge
  2. plug your computer to this port, you will not get any IP address, but you should be able to connect via MAC address through WinBox (in case you are not successful, set any static IP address on your computer and try again logging in using MAC address in WinBox)
  3. go to IP->Addresses and change the IP address 192.168.88.1/24 to whatever you want (e.g., 192.168.0.1/24)
  4. go to IP->Pool and change the pool range to 192.168.0.10-192.168.0.254
  5. go to IP->DHCP Server, click Networks and change 192.168.88.0/24 to 192.168.0.0/24 and change the DNS Server address from 192.168.88.1 to 192.168.0.1
  6. go to IP->DNS and check whether you have any upstream DNS Servers (either in Servers or in Dynamic Servers field in case you have received configuration on ether1 via DHCP client) and ensure that you have "Allow Remote Requests" checked
  7. Now re-plug your computer to any bridge port (you can check which ports are inside the bridge using Bridge->Ports) and don't forget to change your computer configuration to receive IP configuration from DHCP Server

Now you should have received IP configuration from DHCP Server and you should be able to connect via WinBox/SSH/HTTP to 192.168.0.1.

:slight_smile: