We have Mikrotik 951ui-2hnd. There is a PPOE user. And when trying to connect via WIFI to router, ppoe user gets constantly disconnected. Any suggestions what could be a problem?
It says that there is internet connection. But it is very slow or none at all.
sounds like poor / unstable wifi connection between the client and the router.
try connect by network cable to see what happens.
It is the same when connectin with cable.
Image of log Router log:
https://ibb.co/KD70ym9
OK, next
check pppoe client has correct authentication and credential
turn on ppp in system - logging, see more details as of why it won’t establish a connection.
pppoe client is connected.
log file with enabled ppp, and pppoe: https://ibb.co/74VZ5Sx
It seems that there is a big Tx transfer on pppoe-out1. Almost all of our available internet speed, even though no devices are connected to router. Thats why our internet is slow and we are getting disconnected. Is it posible that it is DDOS attack?
How can i secure this connection? I’ve read that you need to add firewall drop all on pppoe-ou1, how can I do that?
torch the interface and you can see what these traffic is that is the source and destination IP , port etc.
when in winbox, right click on the interface , then select torch
as for firewall , default firewall rule is pretty good out of the box.
basically, on input chain, you accept established and related
drop invliad
drop the rest
on forward chain,
accept established and related and make sure the in-interface is your wan interface (or make the dst-ip to be your public ip)
drop invalid
drop everything that is not dst-nated
this is a very good introduction
https://wiki.mikrotik.com/wiki/Manual:Securing_Your_Router
also, check if socks server is enabled, check proxy and check if there is a user been added and you don’t know about. these are the common places hacker would want to change.
As it turned out firewall wasnt even enabled. Option “Firewal Router” wasnt checked. When i enabled it tx transfer dropped to normal, and everything works fine.
Firewall enabled:
https://ibb.co/nCm8n9N