Good day
My DHCP client is constantly searching. Can’t delete. can’t change interface. If add new client with VLAN or Bridge will lose
internet connection
I don’t know why is address dynamic?
Any one to explain me how to resolve this. Thank you in advance.
Disable Internet detection and try again:
Sorry I don't understand how to do that, it is over my knowledge. 
this is my cod
interface/detect-internet/state/print
NAME STATE STATE-CHANGE-TIME CLOUD-RTT
0 ether1[WAN] wan 2023-09-08 11:38:55
1 pppoe-out1 internet 2023-09-08 11:39:49 68ms
Those command from link I don't understand, witch one to use?
Are you using Winbox?
/Interface/Detect Internet → select all to “none”
Everything the same, only now it is not dynamic.
Thank you for helping in this hour, now I go too bed.
Good day again
Here is my configuration export, so maybe someone can find anything wrong
Thank you in advance.
/export hide-sensitive
# 2023-09-10 15:06:15 by RouterOS 7.11
# software id = 2Q2C-PP2H
#
# model = C53UiG+5HPaxD2HPaxD
# serial number = xxxxxxxxx
/container mounts
add dst=etc/pihole name=etc_pihole src=/usb1-part1/etc
add dst=etc/dnsmasq.d name=dnsmasq_pihole src=/usb1-part1/etc-dnsmasq.d
/disk
set usb1 type=hardware
add parent=usb1 partition-number=1 partition-offset=512 partition-size="31 482 445 312" type=partition
/interface bridge
add admin-mac=xx:xx:xx:xx:xx:xx auto-mac=no comment=defconf name=bridge
add name=dokers
/interface ethernet
set [ find default-name=ether1 ] name="ether1[WAN]"
/interface wifiwave2
set [ find default-name=wifi1 ] channel.skip-dfs-channels=10min-cac configuration.country=Croatia .mode=ap .ssid=\
yoss-net disabled=no security.authentication-types=wpa2-psk,wpa3-psk
set [ find default-name=wifi2 ] channel.skip-dfs-channels=10min-cac configuration.country=Croatia .mode=ap .ssid=\
yoss-net disabled=no security.authentication-types=wpa2-psk,wpa3-psk
/interface veth
add address=192.168.10.2/24 gateway=192.168.10.1 gateway6="" name=veth1-pihole
/interface vlan
add interface="ether1[WAN]" name=VLAN vlan-id=995
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
/interface wifiwave2 security
add authentication-types=wpa2-psk,wpa3-psk disabled=no name=sec1
add authentication-types=wpa2-psk disabled=no name=guest
/ip pool
add name=dhcp ranges=192.168.5.100-192.168.5.254
/ip dhcp-server
add address-pool=dhcp interface=bridge lease-time=10m name=DHCP_LAN
/ppp profile
set *0 use-ipv6=no
set *FFFFFFFE use-ipv6=no
/interface pppoe-client
add add-default-route=yes disabled=no interface=VLAN name=pppoe-out1 profile=default-encryption use-peer-dns=yes user=\
PPPOE_xxxxxxxxx
/container
add envlist=pihole_envs interface=veth1-pihole mounts=etc_pihole,dnsmasq_pihole root-dir=usb1-part1/pihole
/container config
set registry-url=https://registry-1.docker.io tmpdir=usb1-part1/pull
/container envs
add key=TZ name=pihole_envs value=Europe/Zagreb
add key=WEBPASSWORD name=pihole_envs value=xxxxxxxxx
add key=DNSMASQ_USER name=pihole_envs value=xxxxxxxxx
/dude
set enabled=yes
/interface bridge port
add bridge=bridge interface=ether2
add bridge=bridge interface=ether3
add bridge=bridge interface=ether4
add bridge=bridge interface=ether5
add bridge=bridge interface=wifi1
add bridge=bridge interface=wifi2
add bridge=dokers interface=veth1-pihole
/ip neighbor discovery-settings
set discover-interface-list=all
/ipv6 settings
set disable-ipv6=yes
/interface detect-internet
set wan-interface-list=WAN
/interface list member
add interface=bridge list=LAN
add interface="ether1[WAN]" list=WAN
add interface=pppoe-out1 list=WAN
/ip address
add address=192.168.5.5/24 interface=bridge network=192.168.5.0
add address=192.168.10.1/24 interface=dokers network=192.168.10.0
/ip dhcp-client
add interface="ether1[WAN]"
/ip dhcp-server lease
add address=192.168.5.1 client-id=1:c0:74:ad:33:8f:3e comment=telephon mac-address=C0:74:AD:33:8F:3E server=DHCP_LAN
/ip dhcp-server network
add address=192.168.5.0/24 dns-server=1.1.1.1 gateway=192.168.5.5 netmask=24
/ip dns
set servers=192.168.10.2,9.9.9.9
/ip dns static
add address=192.168.5.5 comment=defconf name=router.lan
/ip firewall address-list
add address=192.168.5.10-192.168.5.30 list=allowed_to_router
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related \
hw-offload=yes
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new in-interface-list=WAN
add action=drop chain=input comment="drop ftp brute forcers" dst-port=21 protocol=tcp src-address-list=ftp_blacklist
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
add action=masquerade chain=srcnat src-address=192.168.0.0/24
add action=dst-nat chain=dstnat comment=Container dst-address=192.168.5.5 dst-port=888 protocol=tcp to-addresses=\
192.168.10.2 to-ports=80
/ip firewall service-port
set tftp disabled=yes
set h323 disabled=yes
/ip service
set telnet disabled=yes
/ip ssh
set always-allow-password-login=yes forwarding-enabled=local host-key-size=4096
/ipv6 firewall address-list
add address=::/128 comment="defconf: unspecified address" list=bad_ipv6
add address=::1/128 comment="defconf: lo" list=bad_ipv6
add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6
add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6
add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6
add address=100::/64 comment="defconf: discard only " list=bad_ipv6
add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6
add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6
add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6
/ipv6 firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMPv6" protocol=icmpv6
add action=accept chain=input comment="defconf: accept UDP traceroute" port=33434-33534 protocol=udp
add action=accept chain=input comment="defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=udp \
src-address=fe80::/10
add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 protocol=udp
add action=accept chain=input comment="defconf: accept ipsec AH" protocol=ipsec-ah
add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=ipsec-esp
add action=accept chain=input comment="defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=input comment="defconf: drop everything else not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6
add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" hop-limit=equal:1 protocol=icmpv6
add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=icmpv6
add action=accept chain=forward comment="defconf: accept HIP" protocol=139
add action=accept chain=forward comment="defconf: accept IKE" dst-port=500,4500 protocol=udp
add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=ipsec-ah
add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=ipsec-esp
add action=accept chain=forward comment="defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec
add action=drop chain=forward comment="defconf: drop everything else not coming from LAN" in-interface-list=!LAN
/system clock
set time-zone-name=Europe/Zagreb
/system leds
set 0 interface="ether1[WAN]" type=interface-status
set 1 type=interface-status
set 2 type=interface-status
set 3 type=interface-status
set 4 type=interface-status
set 5 type=interface-status
/system note
set show-at-login=no
/system ntp client
set enabled=yes
/system ntp client servers
add address=time.nist.gov
/tool graphing interface
add allow-address=192.168.5.10/32
/tool graphing queue
add allow-address=192.168.5.10/32
/tool graphing resource
add allow-address=192.168.5.10/32
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
seventy two old beginner learning 