Есть роутер hap. На eth1 статический ip провайдера. Интернет работает. Для получения внешнего белого ip нужно создать pptp соединение и пустить весь трафик через него. Создаю соединение(status:connected), добавляю правило маскарад. Но внешний адрес по прежнему не статика(проверяю сервисом ping.eu). ЧЯДНТ?
конфиг:[admin@MikroTik] > /export compact
# feb/12/2019 16:19:19 by RouterOS 6.40.7
# software id = 4VXZ-PD40
#
# model = 951Ui-2nD
# serial number = ***
/interface bridge
add admin-mac=6C:3B:6B:DA:5F:83 auto-mac=no comment=defconf fast-forward=no \
name=bridge
/interface ethernet
set [ find default-name=ether1 ] mac-address=6C:3B:6B:DA:5F:82
set [ find default-name=ether2 ] mac-address=6C:3B:6B:DA:5F:83 name=\
ether2-master
set [ find default-name=ether3 ] mac-address=6C:3B:6B:DA:5F:84 master-port=\
ether2-master
set [ find default-name=ether4 ] mac-address=6C:3B:6B:DA:5F:85 master-port=\
ether2-master
set [ find default-name=ether5 ] mac-address=6C:3B:6B:DA:5F:86 master-port=\
ether2-master
/interface wireless
set [ find default-name=wlan1 ] name=wlan2 ssid=MikroTik
/interface pptp-client
add add-default-route=yes connect-to=172.28.28.214 disabled=no name=pptp-out1 \
password="****" user=****
/ip neighbor discovery
set ether1 discover=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=default-dhcp ranges=10.110.210.10-10.110.210.100
/ip dhcp-server
add address-pool=default-dhcp authoritative=after-2sec-delay interface=bridge \
name=defconf
/interface bridge port
add bridge=bridge comment=defconf interface=ether2-master
add bridge=bridge comment=defconf
/ip address
add address=10.110.210.1/24 comment=defconf interface=bridge network=\
10.110.210.0
/ip dhcp-client
add comment=defconf default-route-distance=2 dhcp-options=hostname,clientid \
disabled=no interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router
add address=10.110.210.254 name=vester.r-p-s.ru
/ip firewall filter
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept established,related" \
connection-state=established,related
add action=drop chain=input comment="defconf: drop all from WAN" disabled=yes \
in-interface=ether1
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related" \
connection-state=established,related
add action=drop chain=forward comment="defconf: drop invalid" connection-state=\
invalid disabled=yes
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new disabled=yes in-interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" out-interface=\
ether1
add action=dst-nat chain=dstnat dst-port=80,443,3333,2222,7777,3389,1433,21,20 \
in-interface=ether1 protocol=tcp to-addresses=10.110.210.254
add action=dst-nat chain=dstnat disabled=yes dst-address=10.110.210.1 dst-port=\
80,443,3333,2222,7777,3389,1433 protocol=tcp to-addresses=10.110.210.254
add action=dst-nat chain=dstnat dst-port=1935,3478 in-interface=ether1 \
protocol=tcp to-addresses=10.110.210.253
add action=dst-nat chain=dstnat disabled=yes dst-address=10.110.210.1 dst-port=\
1935,3478 protocol=tcp to-addresses=10.110.210.253
add action=dst-nat chain=dstnat dst-port=3478,10000-20000,49000-65535 \
in-interface=ether1 protocol=udp to-addresses=10.110.210.253
add action=dst-nat chain=dstnat disabled=yes dst-address=10.110.210.1 dst-port=\
3478,10000-20000,49000-65535 protocol=udp to-addresses=10.110.210.253
add action=masquerade chain=srcnat out-interface=pptp-out1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes port=8090
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/system clock
set time-zone-name=Europe/Kaliningrad
/system ntp client
set enabled=yes primary-ntp=52.178.161.41
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=bridge
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=bridge
Простой
