Hello.
I have install CHR on VDS, with trial license. A few days all work fine, but suddenly Winbox became disconnecting after 0 - 30 seconds after connect. Message: Router IP has been disconnected. How to find problem?
VDS? Are you installed it on virtual machine or real machine? VMware? Configurations? Export? Topology? Interfaces configured on your PC?
Regards.
I have installed it on virtual server KVM (https://iphoster.net/tarifs?vid=vds).
Export:
# nov/14/2019 05:18:44 by RouterOS 6.45.7
# software id =
#
#
#
/interface ethernet
set [ find default-name=ether1 ] disable-running-check=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip ipsec policy group
add name=ike2-policies
/ip ipsec profile
add dh-group=modp2048 enc-algorithm=aes-256,aes-128 name=ike2
/ip ipsec peer
add exchange-mode=ike2 name=ike2 passive=yes profile=ike2
/ip ipsec proposal
add enc-algorithms=aes-256-cbc,aes-128-cbc name=ike2 pfs-group=none
/ip pool
add name=vpn-pool ranges=10.1.10.2-10.1.10.24
/ip ipsec mode-config
add address-pool=vpn-pool address-prefix-length=32 name=ike2-conf
/ppp profile
add dns-server=1.1.1.1 local-address=10.1.10.1 name=vpn remote-address=\
vpn-pool
/interface l2tp-server server
set authentication=mschap2 ipsec-secret=*** use-ipsec=yes
/ip address
add address=***.**.**.177/24 interface=ether1 network=***.**.**.0
add address=10.1.10.1/24 interface=ether1 network=10.1.10.0
/ip dhcp-client
add disabled=no interface=ether1
/ip dns
set servers=1.1.1.1,8.8.8.8
/ip firewall filter
add action=accept chain=input protocol=icmp
add action=accept chain=input comment=\
"Accept established and related connections" connection-state=\
established,related
add action=drop chain=input comment="Drop invalid connections" \
connection-state=invalid
add action=drop chain=forward connection-state=invalid
add action=accept chain=input comment=Winbox dst-port=8291 protocol=tcp
add action=accept chain=input comment=Winbox dst-port=8292 protocol=tcp
add action=accept chain=forward comment="Accept established, related" \
connection-state=established,related
add action=drop chain=input in-interface=ether1
add action=drop chain=forward connection-state=new in-interface=ether1 \
src-address=!10.1.10.0/24
/ip firewall mangle
add action=change-mss chain=forward ipsec-policy=in,ipsec new-mss=\
clamp-to-pmtu passthrough=yes protocol=tcp tcp-flags=syn
add action=change-mss chain=forward ipsec-policy=out,ipsec new-mss=\
clamp-to-pmtu passthrough=yes protocol=tcp tcp-flags=syn
/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=all
/ip ipsec identity
add auth-method=digital-signature certificate=server1 generate-policy=\
port-strict mode-config=ike2-conf peer=ike2 policy-template-group=\
ike2-policies
/ip ipsec policy
add dst-address=10.1.10.0/24 group=ike2-policies proposal=ike2 src-address=\
0.0.0.0/0 template=yes
/ip route
add distance=1 gateway=***.**.**.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set winbox port=8292
set api-ssl disabled=yes
/ppp secret
add name=*** password=*** profile=vpn
add name=*** password=*** profile=vpn
/system clock
set time-zone-name=Europe/Paris
On PC Ethernet → RB750Gr3 → PPPoE.