We have a RB750GL on a 120 mbps cable connection (DHCP client).
It is used only for very simple NAT functionality, the config is almost the same as the default config.
It has been working for a long time perfectly on RouterOS 5.18. It was very reliable, we never had to reboot it.
Last week I upgraded the software to RouterOS 6.7 and the firmware to 3.10.
Since this time, the internet became very unstable in the office. Some pages do appear, some pages do not, restarting the cable modem does help sometimes.
The CPU, RAM, bandwidth are all used very minimal, the CPU is avg: 0%, max: 8%.
The other thing I changed last week was to set DNS to Google’s public DNS, but it can’t be a problem, can it be?
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
The log lines which I suspect are connected to the internet are:
jan/07/2014 15:11:14 dhcp,critical,error dhcp-client on ether1-gateway lost IP address 178.48.105.165 - received NAK from dhcp server 0.0.0.0
jan/07/2014 15:12:02 dhcp,critical,error dhcp-client on ether1-gateway lost IP address 192.168.100.10 - lease expired
jan/07/2014 15:13:28 dhcp,critical,error dhcp-client on ether1-gateway lost IP address 192.168.100.10 - lease expired
note: these ^ lines might be because collages were power-cycling the cable modem.
Is it possible that these lines are connected to the new OS version?
Here is export compact:
# jan/07/2014 21:53:54 by RouterOS 6.7
# software id = ZRZ7-X4SW
#
/interface ethernet
set [ find default-name=ether1 ] name=ether1-gateway
set [ find default-name=ether2 ] name=ether2-master-local
set [ find default-name=ether3 ] master-port=ether2-master-local name=\
ether3-slave-local
set [ find default-name=ether4 ] master-port=ether2-master-local name=\
ether4-slave-local
set [ find default-name=ether5 ] master-port=ether2-master-local name=\
ether5-slave-local
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des
/ip pool
add name=dhcp_pool1 ranges=192.168.0.100-192.168.0.199
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=ether2-master-local name=\
dhcp1
/ppp profile
add dns-server=192.168.0.254 local-address=192.168.0.254 name=vpn \
remote-address=dhcp_pool1 use-encryption=required
/system logging action
set 0 memory-lines=100
set 1 disk-file-count=20
/interface pptp-server server
set default-profile=vpn enabled=yes max-mru=1460 max-mtu=1460
/ip address
add address=192.168.0.254/24 comment="default configuration" interface=\
ether2-master-local network=192.168.0.0
/ip dhcp-client
add comment="default configuration" dhcp-options=hostname,clientid disabled=\
no interface=ether1-gateway
/ip dhcp-server network
add address=192.168.0.0/24 dns-server=192.168.0.254 gateway=192.168.0.254
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip dns static
add address=192.168.0.1 name=grafit
add address=192.168.0.254 name=router
/ip firewall filter
add chain=input comment="default configuration" protocol=icmp
add chain=input comment="default configuration" connection-state=established
add chain=input comment="default configuration" connection-state=related
add chain=input dst-port=1723 protocol=tcp
add chain=input protocol=gre
add action=drop chain=input comment="default configuration" in-interface=\
ether1-gateway
/ip firewall nat
add action=masquerade chain=srcnat comment="default configuration" \
out-interface=ether1-gateway
add action=dst-nat chain=dstnat comment=mstsc dst-port=9876 in-interface=\
ether1-gateway protocol=tcp to-addresses=192.168.0.1 to-ports=3389
add action=dst-nat chain=dstnat comment=ftp disabled=yes dst-port=21 \
in-interface=ether1-gateway protocol=tcp to-addresses=192.168.0.1
add action=dst-nat chain=dstnat comment=ftp disabled=yes dst-port=5000-5100 \
in-interface=ether1-gateway protocol=tcp to-addresses=192.168.0.1
add action=dst-nat chain=dstnat comment=http dst-port=9999 in-interface=\
ether1-gateway protocol=tcp to-addresses=192.168.0.1 to-ports=80
add action=dst-nat chain=dstnat comment=utorrent dst-port=6662 in-interface=\
ether1-gateway protocol=tcp to-addresses=192.168.0.1
add action=dst-nat chain=dstnat comment=utorrent dst-port=6662 in-interface=\
ether1-gateway protocol=udp to-addresses=192.168.0.1
add action=dst-nat chain=dstnat comment=ssh dst-port=25515 in-interface=\
ether1-gateway protocol=tcp to-addresses=192.168.0.1
add action=dst-nat chain=dstnat comment=utwebui dst-port=9998 in-interface=\
ether1-gateway protocol=tcp to-addresses=192.168.0.1
/ip firewall service-port
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
/ip proxy
set max-cache-size=none parent-proxy=0.0.0.0
/ip service
set ftp disabled=yes
set ssh disabled=yes
set api disabled=yes
set winbox disabled=yes
set api-ssl disabled=yes
/ppp secret
add name=xxx password=xxx
/system clock
set time-zone-name=Europe/Budapest
/system logging
set 0 action=disk
set 1 action=disk
set 2 action=disk
set 3 action=disk
/system ntp client
set enabled=yes mode=unicast primary-ntp=148.6.0.1
/tool graphing interface
add
/tool graphing resource
add
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=ether2-master-local
add interface=ether3-slave-local
add interface=ether4-slave-local
add interface=ether5-slave-local
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=ether2-master-local
add interface=ether3-slave-local
add interface=ether4-slave-local
add interface=ether5-slave-local