I’m having an issue with an RB1100AHx4 @ v6.48.6
Traffic dies after exactly 10 minutes, for about 10 seconds maybe less (see attachment)
Log says nothing but “user admin logged out from xxx.xxx.xxx.xxx via winbox” at “xx” time, as it also disconnects me from winbox
Only services running are api and winbox
STP on the only bridge is “none”
Need at least guidance to where to start looking.
Well since you mention [m/r]STP being disabled, it should be harmless to have RSTP enabled. If not, very well could be something else is causing the spanning tree to recalculate interrupting the monitoring. Just an idea.
enabled/disabled makes no difference, i even loose ping from my pc to the router, not just disconnects from winbox.
So perhaps try adding a netwatch from the router to something that should be ping-able. Not going to fix it, but at least confirm the problem is also the routing cannot get out.
I recall the route cache running a cleanup every 10 minutes in V6, but that the only thing I can think off the top of my head that match that timing in ROS. Also, the RB1100AHx4 has 3 switch chips, so a bridge spanning multiple switch chips may not be helpful if you don’t need that (e.g. port1-5 are switch1, port 6-10 are switch 2, and ports 11-13 are switch 3).
edit: port6-10, not part 5-10
How’s memory at the moment of disconnect (if it is possible to be tracked) ?
Is this new behavior ? What changed leading to this ?
Already tried moving to latest stable ROS6 version ?
https://www.youtube.com/watch?v=EhntSgDVzQ4&ab
Started recording a second before it dies, this is what it does, always at the exact same time X:10 minutes (like 1:10, 1:20, 1:30)
Everything dies and comes up between 5 and 10 seconds.
i even tried to disable most of the switches and interfaces, with no luck
Agree both dude and winbox seem to lose connection, on schedule 
. Since you obviously lose visibility, it’s hard to know if it just “winbox protocol” unexpectedly dropping OR if all packet processing freezes/drops as well. e.g. Dude would show 0 data if it couldn’t read the router, but that’s necessarily telling you 0 packets are passing (since Dude, like winbox, also loses it’s connection to even know). So it be good to know if your clients/users are also noticing general packet loss/ping drops in general internet traffic too.
If you monitor IP>Firewall>Connection when this happens, pay attention to the connection count before and after this happens – this “feels” like connection tracking is just dropping all your connections, and everything has to be re-tracked. May not be it, but firewall may be telling.
You’re likely running on the “long term” branch for a reason, but easy step to try.
network diagram and config!
/export hide-sensitive file=anynameyouwish ( minus serial number and any public WANIP information )
Is the forum not enough?
Is there a need to use external sites with advertisements and other crap?
Lots of stuff going on here…
# dec/21/2022 20:48:28 by RouterOS 6.48.6
# software id =
#
# model = RB1100x4
# serial number =
/interface bridge
add name=bridgeLAN
/interface ethernet
set [ find default-name=ether1 ] name=ether1-WAN1
set [ find default-name=ether2 ] name=ether2-switch-poe200
set [ find default-name=ether3 ] name=ether3-WAN2-Mati
set [ find default-name=ether4 ] name=ether4-switch-poe201
set [ find default-name=ether5 ] name=ether5-WAN3-Pachi
set [ find default-name=ether12 ] name=ether12-WAN5-Ger
set [ find default-name=ether13 ] name=ether13-WAN4-Benja
/interface vlan
add interface=ether1-WAN1 name=vlan_wan1_a vlan-id=101
add interface=ether1-WAN1 name=vlan_wan1_b vlan-id=102
/interface ethernet switch port
set 0 default-vlan-id=0
set 1 default-vlan-id=0
set 2 default-vlan-id=0
set 3 default-vlan-id=0
set 4 default-vlan-id=0
set 5 default-vlan-id=0
set 6 default-vlan-id=0
set 7 default-vlan-id=0
set 8 default-vlan-id=0
set 9 default-vlan-id=0
set 10 default-vlan-id=0
set 11 default-vlan-id=0
set 12 default-vlan-id=0
set 13 default-vlan-id=0
set 14 default-vlan-id=0
set 15 default-vlan-id=0
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=\
10.10.200.99-10.10.200.100,10.10.200.108/30,10.10.200.112/30
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridgeLAN name=servidorDHCP-WLAN
/queue simple
[erased queues]
add max-limit=768k/10M name="RESTO RED 110" target=10.10.110.0/24
add max-limit=10M/10M name="RESTO RED 100" target=10.10.100.0/24
add max-limit=1M/5M name="RESTO RED 200" target=10.10.200.0/24
/routing bgp instance
set default as=55 router-id=192.168.100.200
/user group
set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,pas\
sword,web,sniff,sensitive,api,romon,dude,tikapp"
/dude
set data-directory=disk1/dude enabled=yes
/interface bridge port
add bridge=bridgeLAN interface=ether2-switch-poe200
add bridge=bridgeLAN disabled=yes interface=ether3-WAN2-Mati
add bridge=bridgeLAN interface=ether4-switch-poe201
add bridge=bridgeLAN disabled=yes interface=ether5-WAN3-Pachi
add bridge=bridgeLAN interface=ether6
add bridge=bridgeLAN interface=ether7
add bridge=bridgeLAN interface=ether8
add bridge=bridgeLAN interface=ether9
add bridge=bridgeLAN interface=ether10
add bridge=bridgeLAN disabled=yes interface=ether12-WAN5-Ger
/ip address
add address=10.10.100.1/24 comment="IP Lan Equipos" interface=bridgeLAN \
network=10.10.100.0
add address=10.10.200.1/24 comment="IP Lan Clientes AC Seg1" interface=\
bridgeLAN network=10.10.200.0
add address=192.168.100.200/24 comment="lan 750" interface=ether1-WAN1 \
network=192.168.100.0
add address=192.168.15.200/24 interface=ether13-WAN4-Benja network=\
192.168.15.0
add address=10.10.110.1/24 comment="IP Lan Clientes LTU Seg1" interface=\
bridgeLAN network=10.10.110.0
add address=192.168.1.15/24 interface=ether5-WAN3-Pachi network=192.168.1.0
add address=10.10.105.1/29 comment="Ptps Wan3" interface=ether5-WAN3-Pachi \
network=10.10.105.0
add address=10.10.105.9/29 comment="Ptps Wan5" interface=ether12-WAN5-Ger \
network=10.10.105.8
add address=192.168.200.110/24 comment="Wan2 del 750" interface=vlan_wan1_b \
network=192.168.200.0
add address=192.168.80.120/24 comment="Wan1 del 750" interface=vlan_wan1_a \
network=192.168.80.0
/ip dhcp-client
add default-route-distance=3 disabled=no interface=ether3-WAN2-Mati \
use-peer-dns=no use-peer-ntp=no
add default-route-distance=2 disabled=no interface=ether5-WAN3-Pachi \
use-peer-dns=no use-peer-ntp=no
add default-route-distance=3 disabled=no interface=ether12-WAN5-Ger \
use-peer-dns=no use-peer-ntp=no
/ip dhcp-server lease
add address=10.10.200.100 client-id=1:c0:25:67:99:68:43 mac-address=\
C0:25:67:99:68:43 server=servidorDHCP-WLAN
add address=10.10.200.99 client-id=1:c0:25:67:99:67:a3 mac-address=\
C0:25:67:99:67:A3 server=servidorDHCP-WLAN
add address=10.10.200.110 client-id=1:c0:25:67:b8:24:bc mac-address=\
C0:25:67:B8:24:BC server=servidorDHCP-WLAN
add address=10.10.200.109 client-id=1:0:5f:67:b4:70:9 mac-address=\
00:5F:67:B4:70:09 server=servidorDHCP-WLAN
add address=10.10.200.111 client-id=1:c0:25:2f:fe:5f:ff mac-address=\
C0:25:2F:FE:5F:FF server=servidorDHCP-WLAN
add address=10.10.200.108 client-id=1:c0:25:2f:fe:6a:35 mac-address=\
C0:25:2F:FE:6A:35 server=servidorDHCP-WLAN
add address=10.10.200.113 client-id=1:c0:25:67:c8:71:5c mac-address=\
C0:25:67:C8:71:5C server=servidorDHCP-WLAN
add address=10.10.200.114 client-id=1:c0:25:2f:fe:6a:5d mac-address=\
C0:25:2F:FE:6A:5D server=servidorDHCP-WLAN
/ip dhcp-server network
add address=10.10.100.0/24 gateway=10.10.100.1 netmask=24
add address=10.10.200.0/24 dns-server=10.10.200.1,8.8.8.8,8.8.4.4 gateway=\
10.10.200.1
/ip dns
set allow-remote-requests=yes cache-size=8096KiB servers=8.8.8.8,8.8.4.4
/ip firewall address-list
[erased address-list]
/ip firewall filter
add action=accept chain=input comment="NTP Admitir solo a time.google.com" \
dst-port=123 protocol=tcp src-address=216.239.35.12
add action=accept chain=input dst-port=123 protocol=udp src-address=\
216.239.35.12
add action=accept chain=input comment="Dejar pasar Windors" src-address=\
192.168.2.100
add action=accept chain=forward comment="Deja Pasar Windors" src-address=\
192.168.2.100
add action=drop chain=input dst-port=123 protocol=udp
add action=accept chain=input comment=ucrm_accept_input src-address=\
192.168.2.197
add action=accept chain=forward comment=ucrm_accept_forward src-address=\
192.168.2.197
add action=jump chain=forward comment=ucrm_forward_first jump-target=\
ucrm_forward_first
add action=jump chain=forward comment=ucrm_forward_general jump-target=\
ucrm_forward_general
add action=jump chain=forward comment=ucrm_forward_drop jump-target=\
ucrm_forward_drop
add action=accept chain=ucrm_forward_general comment=\
ucrm_blocked_users_allow_dns dst-port=53 protocol=udp src-address-list=\
BLOCKED_USERS
add action=drop chain=ucrm_forward_drop comment=ucrm_blocked_users_drop \
dst-address=!192.168.2.197 src-address-list=BLOCKED_USERS
add action=accept chain=input comment=ucrm_suspend_accept_input src-address=\
192.168.2.197
add action=accept chain=forward comment=ucrm_suspend_accept_forward \
src-address=192.168.2.197
add action=jump chain=forward comment=ucrm_suspend_forward_first jump-target=\
ucrm_suspend_forward_first
add action=jump chain=forward comment=ucrm_suspend_forward_general \
jump-target=ucrm_suspend_forward_general
add action=jump chain=forward comment=ucrm_suspend_forward_drop jump-target=\
ucrm_suspend_forward_drop
add action=accept chain=ucrm_suspend_forward_general comment=\
ucrm_suspend_blocked_users_allow_dns dst-port=53 protocol=udp \
src-address-list=BLOCKED_USERS_Synced
add action=drop chain=ucrm_suspend_forward_drop comment=\
ucrm_suspend_blocked_users_drop dst-address=!192.168.2.197 \
src-address-list=BLOCKED_USERS_Synced
/ip firewall mangle
add action=accept chain=prerouting dst-address=192.168.2.197 in-interface=\
bridgeLAN
add action=accept chain=prerouting dst-address=192.168.2.100 in-interface=\
bridgeLAN
add action=accept chain=prerouting comment="Bypass al unms" disabled=yes \
dst-address=192.168.2.0/24
add action=accept chain=prerouting comment="Bypass al unms" disabled=yes \
src-address=192.168.2.0/24
add action=accept chain=prerouting comment="Conexiones Locales" dst-address=\
192.168.100.0/24
add action=accept chain=prerouting comment="Conexiones Locales" dst-address=\
192.168.80.0/24
add action=accept chain=prerouting comment=\
"Acepta Las Redes de los proveedores" dst-address=192.168.50.0/24
add action=accept chain=prerouting comment=\
"Acepta Las Redes de los proveedores VLAN 750" dst-address=\
192.168.200.0/24
add action=accept chain=prerouting comment=\
"Acepta Las Redes de los proveedores" dst-address=192.168.1.0/24
add action=accept chain=prerouting comment=\
"Acepta Las Redes de los proveedores" dst-address=192.168.15.0/24
add action=accept chain=prerouting comment=\
"Acepta Las Redes de los proveedores" dst-address=192.168.0.0/24
add action=mark-connection chain=prerouting comment=\
"Conecciones entrantes de los ISP" in-interface=vlan_wan1_a \
new-connection-mark=isp1_conn passthrough=yes
add action=mark-connection chain=prerouting in-interface=ether3-WAN2-Mati \
new-connection-mark=isp2_conn passthrough=yes
add action=mark-connection chain=prerouting in-interface=ether5-WAN3-Pachi \
new-connection-mark=isp3_conn passthrough=yes
add action=mark-connection chain=prerouting in-interface=ether13-WAN4-Benja \
new-connection-mark=isp4_conn passthrough=yes
add action=mark-connection chain=prerouting in-interface=ether12-WAN5-Ger \
new-connection-mark=isp5_conn passthrough=yes
add action=mark-connection chain=prerouting in-interface=vlan_wan1_b \
new-connection-mark=isp6_conn passthrough=yes
add action=mark-connection chain=prerouting comment=\
"Balanceo de clientes 4/0" dst-address-type=!local in-interface=bridgeLAN \
new-connection-mark=isp1_conn passthrough=yes per-connection-classifier=\
both-addresses:6/0
add action=mark-connection chain=prerouting comment=\
"Balanceo de clientes 4/1" dst-address-type=!local in-interface=bridgeLAN \
new-connection-mark=isp2_conn passthrough=yes per-connection-classifier=\
both-addresses:6/1
add action=mark-connection chain=prerouting comment=\
"Balanceo de clientes 4/2" dst-address-type=!local in-interface=bridgeLAN \
new-connection-mark=isp3_conn passthrough=yes per-connection-classifier=\
both-addresses:6/2
add action=mark-connection chain=prerouting comment=\
"Balanceo de clientes 4/3" dst-address-type=!local in-interface=bridgeLAN \
new-connection-mark=isp4_conn passthrough=yes per-connection-classifier=\
both-addresses:6/3
add action=mark-connection chain=prerouting comment=\
"Balanceo de clientes 4/3" dst-address-type=!local in-interface=bridgeLAN \
new-connection-mark=isp5_conn passthrough=yes per-connection-classifier=\
both-addresses:6/4
add action=mark-connection chain=prerouting comment=\
"Balanceo de clientes 4/3" dst-address-type=!local in-interface=bridgeLAN \
new-connection-mark=isp6_conn passthrough=yes per-connection-classifier=\
both-addresses:6/5
add action=mark-routing chain=prerouting comment=\
"Enrrutado de los paquetes marcados al ISP1" connection-mark=isp1_conn \
in-interface=bridgeLAN new-routing-mark=to_isp1 passthrough=yes
add action=mark-routing chain=prerouting comment=\
"Enrrutado de los paquetes marcados al ISP2" connection-mark=isp2_conn \
in-interface=bridgeLAN new-routing-mark=to_isp2 passthrough=yes
add action=mark-routing chain=prerouting comment=\
"Enrrutado de los paquetes marcados al ISP3" connection-mark=isp3_conn \
in-interface=bridgeLAN new-routing-mark=to_isp3 passthrough=yes
add action=mark-routing chain=prerouting comment=\
"Enrrutado de los paquetes marcados al ISP4" connection-mark=isp4_conn \
in-interface=bridgeLAN new-routing-mark=to_isp4 passthrough=yes
add action=mark-routing chain=prerouting comment=\
"Enrrutado de los paquetes marcados al ISP5" connection-mark=isp5_conn \
in-interface=bridgeLAN new-routing-mark=to_isp5 passthrough=yes
add action=mark-routing chain=prerouting comment=\
"Enrrutado de los paquetes marcados al ISP6" connection-mark=isp6_conn \
in-interface=bridgeLAN new-routing-mark=to_isp6 passthrough=yes
add action=mark-routing chain=output comment="Salidas del Balanceador" \
connection-mark=isp1_conn new-routing-mark=to_isp1 passthrough=yes
add action=mark-routing chain=output comment="Salidas del Balanceador" \
connection-mark=isp2_conn new-routing-mark=to_isp2 passthrough=yes
add action=mark-routing chain=output comment="Salidas del Balanceador" \
connection-mark=isp3_conn new-routing-mark=to_isp3 passthrough=yes
add action=mark-routing chain=output comment="Salidas del Balanceador" \
connection-mark=isp4_conn new-routing-mark=to_isp4 passthrough=yes
add action=mark-routing chain=output comment="Salidas del Balanceador" \
connection-mark=isp5_conn new-routing-mark=to_isp5 passthrough=yes
add action=mark-routing chain=output comment="Salidas del Balanceador" \
connection-mark=isp6_conn new-routing-mark=to_isp5 passthrough=yes
add action=accept chain=prerouting disabled=yes dst-address=192.168.50.0/24 \
in-interface=bridgeLAN
add action=accept chain=prerouting disabled=yes dst-address=192.168.1.0/24 \
in-interface=bridgeLAN
add action=accept chain=prerouting disabled=yes dst-address=192.168.15.0/24 \
in-interface=bridgeLAN
add action=mark-connection chain=prerouting comment="Balanceo de los ISP" \
connection-mark=no-mark disabled=yes dst-address-type=!local \
in-interface=bridgeLAN new-connection-mark=WAN1_conn passthrough=yes \
per-connection-classifier=both-addresses:6/0
add action=mark-connection chain=prerouting connection-mark=no-mark disabled=\
yes dst-address-type=!local in-interface=bridgeLAN new-connection-mark=\
WAN1_conn passthrough=yes per-connection-classifier=both-addresses:6/1
add action=mark-connection chain=prerouting connection-mark=no-mark disabled=\
yes dst-address-type=!local in-interface=bridgeLAN new-connection-mark=\
WAN2_conn passthrough=yes per-connection-classifier=both-addresses:6/2
add action=mark-connection chain=prerouting connection-mark=no-mark disabled=\
yes dst-address-type=!local in-interface=bridgeLAN new-connection-mark=\
WAN2_conn passthrough=yes per-connection-classifier=both-addresses:6/3
add action=mark-connection chain=prerouting connection-mark=no-mark disabled=\
yes dst-address-type=!local in-interface=bridgeLAN new-connection-mark=\
WAN4_conn passthrough=yes per-connection-classifier=both-addresses:6/4
add action=mark-connection chain=prerouting connection-mark=no-mark disabled=\
yes dst-address-type=!local in-interface=bridgeLAN new-connection-mark=\
WAN4_conn passthrough=yes per-connection-classifier=both-addresses:6/5
add action=mark-routing chain=prerouting comment="Definir Rutas" \
connection-mark=WAN1_conn disabled=yes in-interface=bridgeLAN \
new-routing-mark=to_WAN1 passthrough=no
add action=mark-routing chain=prerouting connection-mark=WAN2_conn disabled=\
yes in-interface=bridgeLAN new-routing-mark=to_WAN2 passthrough=no
add action=mark-routing chain=prerouting connection-mark=WAN3_conn disabled=\
yes in-interface=bridgeLAN new-routing-mark=to_WAN3 passthrough=no
add action=mark-routing chain=prerouting connection-mark=WAN4_conn disabled=\
yes in-interface=bridgeLAN new-routing-mark=to_WAN4 passthrough=no
add action=mark-routing chain=output comment=\
"Definir la salida de las conexiones" connection-mark=WAN1_conn disabled=\
yes new-routing-mark=to_WAN1 passthrough=no
add action=mark-routing chain=output connection-mark=WAN2_conn disabled=yes \
new-routing-mark=to_WAN2 passthrough=no
add action=mark-routing chain=output connection-mark=WAN3_conn disabled=yes \
new-routing-mark=to_WAN3 passthrough=no
add action=mark-routing chain=output connection-mark=WAN4_conn disabled=yes \
new-routing-mark=to_WAN4 passthrough=no
/ip firewall nat
add action=dst-nat chain=dstnat comment="Captura DDNS puntofutura" disabled=\
yes dst-address=181.166.165.151 dst-port=443 protocol=tcp to-addresses=\
192.168.2.197 to-ports=443
add action=redirect chain=dstnat comment="Captura DNS" dst-port=53 protocol=\
udp
add action=accept chain=srcnat disabled=yes dst-address=192.168.2.0/24 \
out-interface=ether1-WAN1
add action=masquerade chain=srcnat comment="Nateo de la VLAN1a" \
out-interface=vlan_wan1_a
add action=masquerade chain=srcnat comment="Nateo de la VLAN1b" \
out-interface=vlan_wan1_b
add action=masquerade chain=srcnat disabled=yes out-interface=ether1-WAN1 \
src-address=10.10.200.0/24
add action=masquerade chain=srcnat disabled=yes out-interface=ether1-WAN1 \
src-address=10.10.110.0/24
add action=masquerade chain=srcnat out-interface=ether3-WAN2-Mati
add action=masquerade chain=srcnat out-interface=ether5-WAN3-Pachi
add action=masquerade chain=srcnat out-interface=ether13-WAN4-Benja
add action=masquerade chain=srcnat out-interface=ether12-WAN5-Ger
add action=jump chain=dstnat comment=ucrm_first_dstnat jump-target=\
ucrm_first_dstnat
add action=jump chain=dstnat comment=ucrm_general_dstnat jump-target=\
ucrm_general_dstnat
add action=jump chain=dstnat comment=ucrm_last_dstnat jump-target=\
ucrm_last_dstnat
add action=jump chain=srcnat comment=ucrm_first_srcnat jump-target=\
ucrm_first_srcnat
add action=jump chain=srcnat comment=ucrm_general_srcnat jump-target=\
ucrm_general_srcnat
add action=jump chain=srcnat comment=ucrm_range_srcnat jump-target=\
ucrm_range_srcnat
add action=jump chain=srcnat comment=ucrm_last_srcnat jump-target=\
ucrm_last_srcnat
add action=dst-nat chain=ucrm_first_dstnat comment=ucrm_blocked_user_redirect \
dst-port=80 protocol=tcp src-address-list=BLOCKED_USERS to-addresses=\
192.168.2.197 to-ports=80
add action=jump chain=dstnat comment=ucrm_suspend_first_dstnat jump-target=\
ucrm_suspend_first_dstnat
add action=jump chain=dstnat comment=ucrm_suspend_general_dstnat jump-target=\
ucrm_suspend_general_dstnat
add action=jump chain=dstnat comment=ucrm_suspend_last_dstnat jump-target=\
ucrm_suspend_last_dstnat
add action=jump chain=srcnat comment=ucrm_suspend_first_srcnat jump-target=\
ucrm_suspend_first_srcnat
add action=jump chain=srcnat comment=ucrm_suspend_general_srcnat jump-target=\
ucrm_suspend_general_srcnat
add action=jump chain=srcnat comment=ucrm_suspend_range_srcnat jump-target=\
ucrm_suspend_range_srcnat
add action=jump chain=srcnat comment=ucrm_suspend_last_srcnat jump-target=\
ucrm_suspend_last_srcnat
add action=dst-nat chain=ucrm_suspend_first_dstnat comment=\
ucrm_suspend_blocked_user_redirect dst-port=80 protocol=tcp \
src-address-list=BLOCKED_USERS_Synced to-addresses=192.168.2.197 \
to-ports=80
/ip proxy
set enabled=yes port=11201
/ip route
add check-gateway=ping comment="To ISP1 Vlan1a 750" distance=1 gateway=\
192.168.80.1 routing-mark=to_isp1
add check-gateway=ping comment="To ISP2" distance=1 gateway=192.168.50.1 \
routing-mark=to_isp2
add check-gateway=ping comment="To ISP3" distance=1 gateway=192.168.1.1 \
routing-mark=to_isp3
add check-gateway=ping comment="To ISP4" distance=1 gateway=192.168.15.1 \
routing-mark=to_isp4
add check-gateway=ping comment="To ISP5" distance=1 gateway=192.168.0.1 \
routing-mark=to_isp5
add check-gateway=ping comment="To ISP6 Vlan1b 750" distance=1 gateway=\
192.168.200.1 routing-mark=to_isp6
add check-gateway=ping disabled=yes distance=2 gateway=192.168.100.1 \
routing-mark=to_WAN1
add check-gateway=ping disabled=yes distance=2 gateway=192.168.50.1 \
routing-mark=to_WAN2
add check-gateway=ping disabled=yes distance=2 gateway=192.168.1.1 \
routing-mark=to_WAN3
add check-gateway=ping disabled=yes distance=2 gateway=192.168.15.1 \
routing-mark=to_WAN4
add comment="Main Wan3 (cooperativa)" distance=1 gateway=192.168.1.1
add check-gateway=ping comment="Main 750" distance=2 gateway=192.168.100.1
add disabled=yes distance=1 gateway=192.168.0.1
add comment="Static Route para el otro router" disabled=yes distance=1 \
dst-address=192.168.2.0/24 gateway=192.168.100.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set winbox port=8292
set api-ssl disabled=yes
/ip traffic-flow
set enabled=yes
/ip traffic-flow target
add dst-address=192.168.2.197
/routing bgp network
add network=10.10.110.0/24
add network=10.10.200.0/24
add network=10.10.105.0/29
add network=10.10.105.8/29
add comment=Equipos network=10.10.200.244/32
/routing bgp peer
add name=750 remote-address=192.168.100.1 remote-as=50
/snmp
set enabled=yes
/system clock
set time-zone-name=America/Argentina/Buenos_Aires
/system identity
set name=MK2-RS
/system ntp client
set enabled=yes primary-ntp=216.239.35.12
/system scheduler
add interval=1d name=backup_binary on-event="/sys script run backup_binary" \
policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
start-date=aug/03/2020 start-time=03:30:00
add interval=1d name=backup_export on-event="/sys script run backup_export" \
policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
start-date=aug/03/2020 start-time=03:30:00
/system script
add dont-require-permissions=no name=backup_binary owner=admin policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\
system backup save name=([/system identity get name] . \"-\" . \\\
\n[:pick [/system clock get date] 7 11] . [:pick [/system clock get date] \
0 3] . [:pick [/system clock get date] 4 6]); \\\
\n/tool e-mail send to=\"[erased]\" subject=([/system identity \
get name] . \"_BACKUP//\" . \\\
\n[/system clock get date]) file=([/system identity get name] . \"-\" . [:\
pick [/system clock get date] 7 11] . \\\
\n[:pick [/system clock get date] 0 3] . [:pick [/system clock get date] 4\
\_6] . \".backup\"); :delay 10; \\\
\n/file rem [/file find name=([/system identity get name] . \"-\" . [:pick\
\_[/system clock get date] 7 11] . \\\
\n[:pick [/system clock get date] 0 3] . [:pick [/system clock get date] 4\
\_6] . \".backup\")]; \\\
\n:log info (\"System Backup emailed at \" . [/sys cl get time] . \" \" . \
[/sys cl get date])"
add dont-require-permissions=no name=backup_export owner=admin policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\
export file=([/system identity get name] . \"-\" . \\\
\n[:pick [/system clock get date] 7 11] . [:pick [/system clock get date] \
0 3] . [:pick [/system clock get date] 4 6]); :delay 2; \\\
\n/tool e-mail send to=\"[erased]\" subject=([/system identity \
get name] . \"_BACKUP//\" . \\\
\n[/system clock get date]) file=([/system identity get name] . \"-\" . [:\
pick [/system clock get date] 7 11] . \\\
\n[:pick [/system clock get date] 0 3] . [:pick [/system clock get date] 4\
\_6] . \".rsc\"); :delay 10; \\\
\n/file rem [/file find name=([/system identity get name] . \"-\" . [:pick\
\_[/system clock get date] 7 11] . \\\
\n[:pick [/system clock get date] 0 3] . [:pick [/system clock get date] 4\
\_6] . \".rsc\")]; \\\
\n:log info (\"System Backup emailed at \" . [/sys cl get time] . \" \" . \
[/sys cl get date])"
/system watchdog
set automatic-supout=no watchdog-timer=no
/tool graphing interface
add interface=bridgeLAN
/tool graphing resource
add
edit: while there are switch setting of the vlan-id=0, that may be normal in V6 - just never see it in V7.
is there anything i should see there or you just posted the config on
?
ive just disabled all ports and its still doing it... even disabled the vlans
CPU usage quite high for the amount of traffic passing over it. did you try to login using mac-telnet to see if it still disconnects you?
Yeah, I just posted your config since it is easier to read inline. The only thing that jumps out is I’d avoid using “masquerade” in the /ip/firewall/nat, if you can.
In older V6, there is some interactions masquerade and when the route table changes (which there would be with BGP). I’ve been using V7 for while, so can’t recall all the specific ending. But at some point it used be that “is every 10 minutes routing table is flushed for security reasons (to avoid possible DoS attacks)”, see https://wiki.mikrotik.com/wiki/ECMP_load_balancing_with_masquerade that talks about this in the in context of ECMP (but imagine all connection tracking).
ive got several wans with load balance, i cant remove the masquerade, or how would i do it?
Src-nat, one for each WAN interface, with explicitly set to-addresses (appropriate for each individual WAN interface).
Agree with @mkx - “action=src-nat” - all your WANs look to have fixed IPs.
I still have a 2017 MUM presentation burned in my head: “My ‘holy war’ against masquerade” from one of the MT guys, see https://www.youtube.com/watch?v=3LmQYIQ5RoA&t=1187s that might explain this better than I can. FWIW, V7 acts different here since there is no route cache.
deleted all masquerades
# dec/23/2022 01:11:14 by RouterOS 6.48.6
# software id =
#
# model = RB1100x4
# serial number =
/interface bridge
add name=bridgeLAN
/interface ethernet
set [ find default-name=ether1 ] name=ether1-WAN1
set [ find default-name=ether2 ] name=ether2-switch-poe200
set [ find default-name=ether3 ] name=ether3-WAN2-Mati
set [ find default-name=ether4 ] name=ether4-switch-poe201
set [ find default-name=ether5 ] name=ether5-WAN3-Pachi
set [ find default-name=ether6 ] name=ether6-WAN-TEL
set [ find default-name=ether12 ] name=ether12-WAN5-Ger
set [ find default-name=ether13 ] name=ether13-WAN4-Benja
/interface vlan
add interface=ether1-WAN1 name=vlan_wan1_a vlan-id=101
add interface=ether1-WAN1 name=vlan_wan1_b vlan-id=102
/interface ethernet switch port
set 0 default-vlan-id=0
set 1 default-vlan-id=0
set 2 default-vlan-id=0
set 3 default-vlan-id=0
set 4 default-vlan-id=0
set 5 default-vlan-id=0
set 6 default-vlan-id=0
set 7 default-vlan-id=0
set 8 default-vlan-id=0
set 9 default-vlan-id=0
set 10 default-vlan-id=0
set 11 default-vlan-id=0
set 12 default-vlan-id=0
set 13 default-vlan-id=0
set 14 default-vlan-id=0
set 15 default-vlan-id=0
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=\
10.10.200.99-10.10.200.100,10.10.200.108/30,10.10.200.112/30
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridgeLAN name=servidorDHCP-WLAN
/queue simple
[deleted queues]
/routing bgp instance
set default as=55 router-id=192.168.100.200
/user group
set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,pas\
sword,web,sniff,sensitive,api,romon,dude,tikapp"
/dude
set data-directory=disk1/dude enabled=yes
/interface bridge port
add bridge=bridgeLAN interface=ether2-switch-poe200
add bridge=bridgeLAN disabled=yes interface=ether3-WAN2
add bridge=bridgeLAN interface=ether4-switch-poe201
add bridge=bridgeLAN disabled=yes interface=ether5-WAN3
add bridge=bridgeLAN disabled=yes interface=ether6-WAN4
add bridge=bridgeLAN interface=ether7
add bridge=bridgeLAN interface=ether8
add bridge=bridgeLAN interface=ether9
add bridge=bridgeLAN interface=ether10
add bridge=bridgeLAN disabled=yes interface=ether12-WAN5
/ip address
[deleted ip address ]
/ip firewall mangle
add action=accept chain=prerouting dst-address=192.168.2.197 in-interface=\
bridgeLAN
add action=accept chain=prerouting dst-address=192.168.2.100 in-interface=\
bridgeLAN
add action=mark-routing chain=prerouting comment="Mangle de la cooperativa" \
new-routing-mark=to_coope passthrough=yes src-address-list=to_Coope
add action=mark-routing chain=prerouting comment="Mangle de Ger" \
new-routing-mark=to_mati passthrough=yes src-address-list=to_Mati
add action=mark-routing chain=prerouting comment="Mangle de Mati" \
new-routing-mark=to_Ger passthrough=yes src-address-list=to_Ger
add action=mark-routing chain=prerouting comment="Mangle de Benja" \
new-routing-mark=to_Benja passthrough=yes src-address-list=to_Benja
add action=accept chain=prerouting comment="Bypass al unms" disabled=yes \
dst-address=192.168.2.0/24
add action=accept chain=prerouting comment="Bypass al unms" disabled=yes \
src-address=192.168.2.0/24
add action=accept chain=prerouting comment="Conexiones Locales" disabled=yes \
dst-address=192.168.100.0/24
add action=accept chain=prerouting comment="Conexiones Locales" disabled=yes \
dst-address=192.168.80.0/24
add action=accept chain=prerouting comment=\
"Acepta Las Redes de los proveedores" disabled=yes dst-address=\
192.168.50.0/24
add action=accept chain=prerouting comment=\
"Acepta Las Redes de los proveedores VLAN 750" disabled=yes dst-address=\
192.168.200.0/24
add action=accept chain=prerouting comment=\
"Acepta Las Redes de los proveedores" disabled=yes dst-address=\
192.168.1.0/24
add action=accept chain=prerouting comment=\
"Acepta Las Redes de los proveedores" disabled=yes dst-address=\
192.168.15.0/24
add action=accept chain=prerouting comment=\
"Acepta Las Redes de los proveedores" disabled=yes dst-address=\
192.168.0.0/24
add action=mark-connection chain=prerouting comment=\
"Conecciones entrantes de los ISP" disabled=yes in-interface=vlan_wan1_a \
new-connection-mark=isp1_conn passthrough=yes
add action=mark-connection chain=prerouting disabled=yes in-interface=\
ether3-WAN2-Mati new-connection-mark=isp2_conn passthrough=yes
add action=mark-connection chain=prerouting disabled=yes in-interface=\
ether5-WAN3-Pachi new-connection-mark=isp3_conn passthrough=yes
add action=mark-connection chain=prerouting disabled=yes in-interface=\
ether13-WAN4-Benja new-connection-mark=isp4_conn passthrough=yes
add action=mark-connection chain=prerouting disabled=yes in-interface=\
ether12-WAN5-Ger new-connection-mark=isp5_conn passthrough=yes
add action=mark-connection chain=prerouting disabled=yes in-interface=\
vlan_wan1_b new-connection-mark=isp6_conn passthrough=yes
add action=mark-connection chain=prerouting comment=\
"Balanceo de clientes 4/0" disabled=yes dst-address-type=!local \
in-interface=bridgeLAN new-connection-mark=isp1_conn passthrough=yes \
per-connection-classifier=both-addresses:6/0
add action=mark-connection chain=prerouting comment=\
"Balanceo de clientes 4/1" disabled=yes dst-address-type=!local \
in-interface=bridgeLAN new-connection-mark=isp2_conn passthrough=yes \
per-connection-classifier=both-addresses:6/1
add action=mark-connection chain=prerouting comment=\
"Balanceo de clientes 4/2" disabled=yes dst-address-type=!local \
in-interface=bridgeLAN new-connection-mark=isp3_conn passthrough=yes \
per-connection-classifier=both-addresses:6/2
add action=mark-connection chain=prerouting comment=\
"Balanceo de clientes 4/3" disabled=yes dst-address-type=!local \
in-interface=bridgeLAN new-connection-mark=isp4_conn passthrough=yes \
per-connection-classifier=both-addresses:6/3
add action=mark-connection chain=prerouting comment=\
"Balanceo de clientes 4/3" disabled=yes dst-address-type=!local \
in-interface=bridgeLAN new-connection-mark=isp5_conn passthrough=yes \
per-connection-classifier=both-addresses:6/4
add action=mark-connection chain=prerouting comment=\
"Balanceo de clientes 4/3" disabled=yes dst-address-type=!local \
in-interface=bridgeLAN new-connection-mark=isp6_conn passthrough=yes \
per-connection-classifier=both-addresses:6/5
add action=mark-routing chain=prerouting comment=\
"Enrrutado de los paquetes marcados al ISP1" connection-mark=isp1_conn \
disabled=yes in-interface=bridgeLAN new-routing-mark=to_isp1 passthrough=\
yes
add action=mark-routing chain=prerouting comment=\
"Enrrutado de los paquetes marcados al ISP2" connection-mark=isp2_conn \
disabled=yes in-interface=bridgeLAN new-routing-mark=to_isp2 passthrough=\
yes
add action=mark-routing chain=prerouting comment=\
"Enrrutado de los paquetes marcados al ISP3" connection-mark=isp3_conn \
disabled=yes in-interface=bridgeLAN new-routing-mark=to_isp3 passthrough=\
yes
add action=mark-routing chain=prerouting comment=\
"Enrrutado de los paquetes marcados al ISP4" connection-mark=isp4_conn \
disabled=yes in-interface=bridgeLAN new-routing-mark=to_isp4 passthrough=\
yes
add action=mark-routing chain=prerouting comment=\
"Enrrutado de los paquetes marcados al ISP5" connection-mark=isp5_conn \
disabled=yes in-interface=bridgeLAN new-routing-mark=to_isp5 passthrough=\
yes
add action=mark-routing chain=prerouting comment=\
"Enrrutado de los paquetes marcados al ISP6" connection-mark=isp6_conn \
disabled=yes in-interface=bridgeLAN new-routing-mark=to_isp6 passthrough=\
yes
add action=mark-routing chain=output comment="Salidas del Balanceador" \
connection-mark=isp1_conn disabled=yes new-routing-mark=to_isp1 \
passthrough=yes
add action=mark-routing chain=output comment="Salidas del Balanceador" \
connection-mark=isp2_conn disabled=yes new-routing-mark=to_isp2 \
passthrough=yes
add action=mark-routing chain=output comment="Salidas del Balanceador" \
connection-mark=isp3_conn disabled=yes new-routing-mark=to_isp3 \
passthrough=yes
add action=mark-routing chain=output comment="Salidas del Balanceador" \
connection-mark=isp4_conn disabled=yes new-routing-mark=to_isp4 \
passthrough=yes
add action=mark-routing chain=output comment="Salidas del Balanceador" \
connection-mark=isp5_conn disabled=yes new-routing-mark=to_isp5 \
passthrough=yes
add action=mark-routing chain=output comment="Salidas del Balanceador" \
connection-mark=isp6_conn disabled=yes new-routing-mark=to_isp5 \
passthrough=yes
add action=accept chain=prerouting disabled=yes dst-address=192.168.50.0/24 \
in-interface=bridgeLAN
add action=accept chain=prerouting disabled=yes dst-address=192.168.1.0/24 \
in-interface=bridgeLAN
add action=accept chain=prerouting disabled=yes dst-address=192.168.15.0/24 \
in-interface=bridgeLAN
add action=mark-connection chain=prerouting comment="Balanceo de los ISP" \
connection-mark=no-mark disabled=yes dst-address-type=!local \
in-interface=bridgeLAN new-connection-mark=WAN1_conn passthrough=yes \
per-connection-classifier=both-addresses:6/0
add action=mark-connection chain=prerouting connection-mark=no-mark disabled=\
yes dst-address-type=!local in-interface=bridgeLAN new-connection-mark=\
WAN1_conn passthrough=yes per-connection-classifier=both-addresses:6/1
add action=mark-connection chain=prerouting connection-mark=no-mark disabled=\
yes dst-address-type=!local in-interface=bridgeLAN new-connection-mark=\
WAN2_conn passthrough=yes per-connection-classifier=both-addresses:6/2
add action=mark-connection chain=prerouting connection-mark=no-mark disabled=\
yes dst-address-type=!local in-interface=bridgeLAN new-connection-mark=\
WAN2_conn passthrough=yes per-connection-classifier=both-addresses:6/3
add action=mark-connection chain=prerouting connection-mark=no-mark disabled=\
yes dst-address-type=!local in-interface=bridgeLAN new-connection-mark=\
WAN4_conn passthrough=yes per-connection-classifier=both-addresses:6/4
add action=mark-connection chain=prerouting connection-mark=no-mark disabled=\
yes dst-address-type=!local in-interface=bridgeLAN new-connection-mark=\
WAN4_conn passthrough=yes per-connection-classifier=both-addresses:6/5
add action=mark-routing chain=prerouting comment="Definir Rutas" \
connection-mark=WAN1_conn disabled=yes in-interface=bridgeLAN \
new-routing-mark=to_WAN1 passthrough=no
add action=mark-routing chain=prerouting connection-mark=WAN2_conn disabled=\
yes in-interface=bridgeLAN new-routing-mark=to_WAN2 passthrough=no
add action=mark-routing chain=prerouting connection-mark=WAN3_conn disabled=\
yes in-interface=bridgeLAN new-routing-mark=to_WAN3 passthrough=no
add action=mark-routing chain=prerouting connection-mark=WAN4_conn disabled=\
yes in-interface=bridgeLAN new-routing-mark=to_WAN4 passthrough=no
add action=mark-routing chain=output comment=\
"Definir la salida de las conexiones" connection-mark=WAN1_conn disabled=\
yes new-routing-mark=to_WAN1 passthrough=no
add action=mark-routing chain=output connection-mark=WAN2_conn disabled=yes \
new-routing-mark=to_WAN2 passthrough=no
add action=mark-routing chain=output connection-mark=WAN3_conn disabled=yes \
new-routing-mark=to_WAN3 passthrough=no
add action=mark-routing chain=output connection-mark=WAN4_conn disabled=yes \
new-routing-mark=to_WAN4 passthrough=no
/ip firewall nat
add action=dst-nat chain=dstnat comment="Captura DDNS puntofutura" disabled=\
yes dst-address=181.166.165.151 dst-port=443 protocol=tcp to-addresses=\
192.168.2.197 to-ports=443
add action=redirect chain=dstnat comment="Captura DNS" dst-port=53 protocol=\
udp
add action=masquerade chain=srcnat comment="Masquerade General" disabled=yes \
to-addresses=181.12.169.90
add action=src-nat chain=srcnat comment="Masq Cooperativa" out-interface=\
ether5-WAN3-Pachi src-address-list=to_Coope to-addresses=192.168.1.15
add action=src-nat chain=srcnat comment="Masq Ger" out-interface=\
ether12-WAN5-Ger src-address-list=to_Ger to-addresses=192.168.0.240
add action=src-nat chain=srcnat comment="Masq Benja" out-interface=\
ether13-WAN4-Benja src-address-list=to_Benja to-addresses=192.168.15.200
add action=src-nat chain=srcnat comment="Masq Mati" out-interface=\
ether3-WAN2-Mati src-address-list=to_Mati to-addresses=192.168.50.200
add action=src-nat chain=srcnat comment="Masquerade Telecom" src-address=\
10.10.110.0/24 to-addresses=181.12.169.91
add action=src-nat chain=srcnat comment="Masquerade Telecom" src-address=\
10.10.200.0/24 to-addresses=181.12.169.90
add action=accept chain=srcnat disabled=yes dst-address=192.168.2.0/24 \
out-interface=ether1-WAN1
add action=masquerade chain=srcnat comment="Nateo de la VLAN1a" disabled=yes \
out-interface=vlan_wan1_a
add action=masquerade chain=srcnat comment="Nateo de la VLAN1b" disabled=yes \
out-interface=vlan_wan1_b
add action=masquerade chain=srcnat disabled=yes out-interface=ether1-WAN1 \
src-address=10.10.200.0/24
add action=masquerade chain=srcnat disabled=yes out-interface=ether1-WAN1 \
src-address=10.10.110.0/24
add action=masquerade chain=srcnat disabled=yes out-interface=\
ether3-WAN2-Mati
add action=masquerade chain=srcnat disabled=yes out-interface=\
ether5-WAN3-Pachi
add action=masquerade chain=srcnat disabled=yes out-interface=\
ether13-WAN4-Benja
add action=masquerade chain=srcnat disabled=yes out-interface=\
ether12-WAN5-Ger
add action=jump chain=dstnat comment=ucrm_first_dstnat jump-target=\
ucrm_first_dstnat
add action=jump chain=dstnat comment=ucrm_general_dstnat jump-target=\
ucrm_general_dstnat
add action=jump chain=dstnat comment=ucrm_last_dstnat jump-target=\
ucrm_last_dstnat
add action=jump chain=srcnat comment=ucrm_first_srcnat jump-target=\
ucrm_first_srcnat
add action=jump chain=srcnat comment=ucrm_general_srcnat jump-target=\
ucrm_general_srcnat
add action=jump chain=srcnat comment=ucrm_range_srcnat jump-target=\
ucrm_range_srcnat
add action=jump chain=srcnat comment=ucrm_last_srcnat jump-target=\
ucrm_last_srcnat
add action=dst-nat chain=ucrm_first_dstnat comment=ucrm_blocked_user_redirect \
dst-port=80 protocol=tcp src-address-list=BLOCKED_USERS to-addresses=\
192.168.2.197 to-ports=80
add action=jump chain=dstnat comment=ucrm_suspend_first_dstnat jump-target=\
ucrm_suspend_first_dstnat
add action=jump chain=dstnat comment=ucrm_suspend_general_dstnat jump-target=\
ucrm_suspend_general_dstnat
add action=jump chain=dstnat comment=ucrm_suspend_last_dstnat jump-target=\
ucrm_suspend_last_dstnat
add action=jump chain=srcnat comment=ucrm_suspend_first_srcnat jump-target=\
ucrm_suspend_first_srcnat
add action=jump chain=srcnat comment=ucrm_suspend_general_srcnat jump-target=\
ucrm_suspend_general_srcnat
add action=jump chain=srcnat comment=ucrm_suspend_range_srcnat jump-target=\
ucrm_suspend_range_srcnat
add action=jump chain=srcnat comment=ucrm_suspend_last_srcnat jump-target=\
ucrm_suspend_last_srcnat
add action=dst-nat chain=ucrm_suspend_first_dstnat comment=\
ucrm_suspend_blocked_user_redirect dst-port=80 protocol=tcp \
src-address-list=BLOCKED_USERS_Synced to-addresses=192.168.2.197 \
to-ports=80
/ip proxy
set enabled=yes port=11201
/ip route
add check-gateway=ping comment="To ISP1 Vlan1a 750" disabled=yes distance=1 \
gateway=192.168.80.1 routing-mark=to_isp1
add check-gateway=ping comment="To ISP2" disabled=yes distance=1 gateway=\
192.168.50.1 routing-mark=to_isp2
add check-gateway=ping comment="To ISP3" disabled=yes distance=1 gateway=\
192.168.1.1 routing-mark=to_isp3
add check-gateway=ping comment="To ISP4" disabled=yes distance=1 gateway=\
192.168.15.1 routing-mark=to_isp4
add check-gateway=ping comment="To ISP5" disabled=yes distance=1 gateway=\
192.168.0.1 routing-mark=to_isp5
add check-gateway=ping comment="To ISP6 Vlan1b 750" disabled=yes distance=1 \
gateway=192.168.200.1 routing-mark=to_isp6
add check-gateway=ping disabled=yes distance=2 gateway=192.168.100.1 \
routing-mark=to_WAN1
add check-gateway=ping disabled=yes distance=2 gateway=192.168.50.1 \
routing-mark=to_WAN2
add check-gateway=ping disabled=yes distance=2 gateway=192.168.1.1 \
routing-mark=to_WAN3
add check-gateway=ping disabled=yes distance=2 gateway=192.168.15.1 \
routing-mark=to_WAN4
add comment="To Cooperativa" distance=2 gateway=192.168.1.1 routing-mark=\
to_coope
add check-gateway=ping comment="To Mati" distance=1 gateway=192.168.50.1 \
routing-mark=to_mati
add check-gateway=ping comment="To Ger" distance=1 gateway=192.168.0.1 \
routing-mark=to_Ger
add check-gateway=ping comment="To Benja" distance=1 gateway=192.168.15.1 \
routing-mark=to_Benja
add check-gateway=ping comment=Telecom distance=1 gateway=181.12.169.89
add comment="Main Wan3 (cooperativa)" distance=2 gateway=192.168.1.1
add check-gateway=ping comment="Main 750" distance=4 gateway=192.168.100.1
add disabled=yes distance=1 gateway=192.168.0.1
add comment="Static Route para el otro router" disabled=yes distance=1 \
dst-address=192.168.2.0/24 gateway=192.168.100.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set winbox port=8292
set api-ssl disabled=yes
/ip traffic-flow
set enabled=yes
/ip traffic-flow target
add dst-address=192.168.2.197
/routing bgp network
add network=10.10.110.0/24
add network=10.10.200.0/24
add network=10.10.105.0/29
add network=10.10.105.8/29
add comment=Equipos network=10.10.200.244/32
/routing bgp peer
add name=750 remote-address=192.168.100.1 remote-as=50
/snmp
set enabled=yes
/system clock
set time-zone-name=America/Argentina/Buenos_Aires
/system identity
set name=MK2-RS
/system ntp client
set enabled=yes primary-ntp=216.239.35.12
/system package update
set channel=upgrade
/system scheduler
add interval=1d name=backup_binary on-event="/sys script run backup_binary" \
policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
start-date=aug/03/2020 start-time=03:30:00
add interval=1d name=backup_export on-event="/sys script run backup_export" \
policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
start-date=aug/03/2020 start-time=03:30:00
/system script
add dont-require-permissions=no name=backup_binary owner=admin policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\
system backup save name=([/system identity get name] . \"-\" . \\\
\n[:pick [/system clock get date] 7 11] . [:pick [/system clock get date] \
0 3] . [:pick [/system clock get date] 4 6]); \\\
\n/tool e-mail send to=\\" subject=([/system identity \
get name] . \"_BACKUP//\" . \\\
\n[/system clock get date]) file=([/system identity get name] . \"-\" . [:\
pick [/system clock get date] 7 11] . \\\
\n[:pick [/system clock get date] 0 3] . [:pick [/system clock get date] 4\
\_6] . \".backup\"); :delay 10; \\\
\n/file rem [/file find name=([/system identity get name] . \"-\" . [:pick\
\_[/system clock get date] 7 11] . \\\
\n[:pick [/system clock get date] 0 3] . [:pick [/system clock get date] 4\
\_6] . \".backup\")]; \\\
\n:log info (\"System Backup emailed at \" . [/sys cl get time] . \" \" . \
[/sys cl get date])"
add dont-require-permissions=no name=backup_export owner=admin policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\
export file=([/system identity get name] . \"-\" . \\\
\n[:pick [/system clock get date] 7 11] . [:pick [/system clock get date] \
0 3] . [:pick [/system clock get date] 4 6]); :delay 2; \\\
\n/tool e-mail send to=\"\" subject=([/system identity \
get name] . \"_BACKUP//\" . \\\
\n[/system clock get date]) file=([/system identity get name] . \"-\" . [:\
pick [/system clock get date] 7 11] . \\\
\n[:pick [/system clock get date] 0 3] . [:pick [/system clock get date] 4\
\_6] . \".rsc\"); :delay 10; \\\
\n/file rem [/file find name=([/system identity get name] . \"-\" . [:pick\
\_[/system clock get date] 7 11] . \\\
\n[:pick [/system clock get date] 0 3] . [:pick [/system clock get date] 4\
\_6] . \".rsc\")]; \\\
\n:log info (\"System Backup emailed at \" . [/sys cl get time] . \" \" . \
[/sys cl get date])"
/system watchdog
set automatic-supout=no watchdog-timer=no
/tool graphing interface
add interface=bridgeLAN
/tool graphing resource
add
i trimmed the output to show the death.
Pinging 192.168.100.200 with 1 byte of data:
[03:48:01] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:48:02] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:48:02] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:48:03] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:48:03] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:48:04] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:48:04] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:48:05] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:48:05] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:48:06] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:48:06] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:48:07] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:48:07] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:48:08] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:48:08] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:48:09] Reply from 192.168.100.200: byte=1 time=485ms TTL=64
[03:48:10] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:48:11] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:48:11] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:49:35] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:49:36] Reply from 192.168.100.200: byte=1 time=257ms TTL=64
[03:49:36] Reply from 192.168.100.200: byte=1 time=27ms TTL=64
[03:49:37] Reply from 192.168.100.200: byte=1 time=148ms TTL=64
[03:49:38] Reply from 192.168.100.200: byte=1 time=63ms TTL=64
[03:49:39] Reply from 192.168.100.200: byte=1 time=84ms TTL=64
[03:49:40] Reply from 192.168.100.200: byte=1 time=212ms TTL=64
[03:49:40] Reply from 192.168.100.200: byte=1 time=267ms TTL=64
[03:49:42] Request Timed Out.
[03:49:43] Request Timed Out.
[03:49:45] Request Timed Out.
[03:49:46] Request Timed Out.
[03:49:48] Request Timed Out.
[03:49:49] Request Timed Out.
[03:49:51] Request Timed Out.
[03:49:52] Request Timed Out.
[03:49:54] Request Timed Out.
[03:49:55] Request Timed Out.
[03:49:56] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:49:57] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:49:57] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:49:58] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:59:31] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:59:32] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:59:32] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:59:33] Reply from 192.168.100.200: byte=1 time=53ms TTL=64
[03:59:34] Reply from 192.168.100.200: byte=1 time=357ms TTL=64
[03:59:35] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:59:35] Reply from 192.168.100.200: byte=1 time=122ms TTL=64
[03:59:36] Reply from 192.168.100.200: byte=1 time=93ms TTL=64
[03:59:37] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:59:38] Reply from 192.168.100.200: byte=1 time=146ms TTL=64
[03:59:38] Reply from 192.168.100.200: byte=1 time=313ms TTL=64
[03:59:39] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:59:40] Reply from 192.168.100.200: byte=1 time=34ms TTL=64
[03:59:40] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:59:42] Request Timed Out.
[03:59:43] Request Timed Out.
[03:59:45] Request Timed Out.
[03:59:46] Request Timed Out.
[03:59:48] Request Timed Out.
[03:59:49] Request Timed Out.
[03:59:51] Request Timed Out.
[03:59:52] Request Timed Out.
[03:59:54] Request Timed Out.
[03:59:55] Request Timed Out.
[03:59:56] Reply from 192.168.100.200: byte=1 time=68ms TTL=64
[03:59:57] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:59:57] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:59:58] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[03:59:58] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:09:34] Reply from 192.168.100.200: byte=1 time=237ms TTL=64
[04:09:35] Reply from 192.168.100.200: byte=1 time=128ms TTL=64
[04:09:36] Reply from 192.168.100.200: byte=1 time=30ms TTL=64
[04:09:37] Reply from 192.168.100.200: byte=1 time=512ms TTL=64
[04:09:38] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:09:38] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:09:39] Reply from 192.168.100.200: byte=1 time=217ms TTL=64
[04:09:40] Request Timed Out.
[04:09:42] Request Timed Out.
[04:09:43] Request Timed Out.
[04:09:45] Request Timed Out.
[04:09:46] Request Timed Out.
[04:09:48] Request Timed Out.
[04:09:49] Request Timed Out.
[04:09:51] Request Timed Out.
[04:09:52] Request Timed Out.
[04:09:54] Request Timed Out.
[04:09:55] Reply from 192.168.100.200: byte=1 time=222ms TTL=64
[04:09:55] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:09:56] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:09:56] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:16] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:17] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:18] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:18] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:19] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:19] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:20] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:20] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:21] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:22] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:22] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:23] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:23] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:24] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:24] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:25] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:26] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:26] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:27] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:27] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:28] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:29] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:29] Reply from 192.168.100.200: byte=1 time=21ms TTL=64
[04:19:30] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:30] Reply from 192.168.100.200: byte=1 time=170ms TTL=64
[04:19:31] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:32] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:33] Reply from 192.168.100.200: byte=1 time=476ms TTL=64
[04:19:33] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:34] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:35] Reply from 192.168.100.200: byte=1 time=591ms TTL=64
[04:19:36] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:36] Reply from 192.168.100.200: byte=1 time=98ms TTL=64
[04:19:37] Reply from 192.168.100.200: byte=1 time=307ms TTL=64
[04:19:38] Reply from 192.168.100.200: byte=1 time=403ms TTL=64
[04:19:39] Reply from 192.168.100.200: byte=1 time=1ms TTL=64
[04:19:40] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:40] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:41] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:19:42] Request Timed Out.
[04:19:43] Request Timed Out.
[04:19:45] Request Timed Out.
[04:19:46] Request Timed Out.
[04:19:48] Request Timed Out.
[04:19:49] Request Timed Out.
[04:19:51] Request Timed Out.
[04:19:52] Request Timed Out.
[04:19:53] Destination Host Unreachable
[04:19:55] Request Timed Out.
[04:19:56] Request Timed Out.
[04:25:01] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:01] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:02] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:02] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:03] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:03] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:04] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:04] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:05] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:06] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:06] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:07] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:07] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:08] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:08] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:09] Reply from 192.168.100.200: byte=1 time=1ms TTL=64
[04:25:09] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:10] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:10] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:11] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:11] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:12] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:12] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:13] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:14] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:15] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:15] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:16] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:16] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:17] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:17] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:18] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:18] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:19] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:20] Reply from 192.168.100.200: byte=1 time=283ms TTL=64
[04:25:20] Reply from 192.168.100.200: byte=1 time=0ms TTL=64
[04:25:20] Reply from 192.168.100.200: byte=1 time=0ms TTL=64