Комментарии пользователя Олег

Не могу настроить резервирование инета в Mikrotik, в чем проблема?

Олег @efcadu Автор вопроса

Конфиг (внешние IP поменял)

# nov/20/2019 15:39:47 by RouterOS 6.45.1
#
# model = RB1100x4
# serial number =
/interface bridge
add name=bridge
/interface ethernet
set [ find default-name=ether1 ] speed=100Mbps
set [ find default-name=ether2 ] auto-negotiation=no speed=100Mbps
set [ find default-name=ether3 ] speed=100Mbps
set [ find default-name=ether4 ] speed=100Mbps
set [ find default-name=ether5 ] speed=100Mbps
/interface ethernet switch port
set 0 default-vlan-id=0
set 1 default-vlan-id=0
set 2 default-vlan-id=0
set 3 default-vlan-id=0
set 4 default-vlan-id=0
set 5 default-vlan-id=0
set 6 default-vlan-id=0
set 7 default-vlan-id=0
set 8 default-vlan-id=0
set 9 default-vlan-id=0
set 10 default-vlan-id=0
set 11 default-vlan-id=0
set 12 default-vlan-id=0
set 13 default-vlan-id=0
set 14 default-vlan-id=0
set 15 default-vlan-id=0
/interface list
add comment=defconf name=LAN
add name=WANM
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip ipsec policy group
add name=group1
/ip ipsec profile
set [ find default=yes ] dh-group=modp1024 enc-algorithm=aes-256,aes-128,3des
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=aes-256-cbc,aes-256-ctr,3des
/routing bgp instance
set default as=65123 disabled=yes ignore-as-path-len=yes
/interface bridge port
add bridge=bridge interface=ether3
add bridge=bridge interface=ether4
add bridge=bridge interface=ether5
add bridge=bridge interface=ether6
add bridge=bridge interface=ether7
add bridge=bridge interface=ether8
add bridge=bridge interface=ether9
add bridge=bridge interface=ether10
add bridge=bridge interface=ether11
add bridge=bridge interface=ether12
add bridge=bridge interface=ether13
#error exporting /interface detect-internet
/interface list member
add interface=bridge list=LAN
add interface=ether2 list=WANM
add interface=ether1 list=WANM
/ip address
add address=4.2.6.14/30 interface=ether1 network=4.5.6.12
add address=192.168.7.100/24 interface=ether3 network=192.168.7.0
add address=8.2.2.38/30 interface=ether2 network=8.2.2.36
/ip cloud
set ddns-enabled=yes ddns-update-interval=1m update-time=no
#error exporting /ip dns
#error exporting /ip dns static
/ip firewall address-list
add address=8.2.2.38 list=ag
add address=8.2.2.50 list=ag
add address=3.2.1.210 list=ag
add address=4.5.1.59 list=ag
add address=4.5.1.58 list=ag
add address=3.2.1.200 list=ag
add address=4.5.1.14 list=ag
/ip firewall filter
add action=accept chain=input comment=\
"defconf: accept established,related,untracked" connection-state=\
established,related,untracked
add action=accept chain=input comment="allow L2TP VPN (ipsec-esp)" \
in-interface-list=WANM protocol=ipsec-esp
add action=accept chain=input comment="allow L2TP VPN (500,4500,1701/udp)" \
dst-port=500,1701,4500 in-interface-list=WANM protocol=udp
add action=accept chain=input comment="Allow incoming OpenVPN" dst-port=1194 \
in-interface-list=WANM protocol=tcp
add action=drop chain=input comment="defconf: drop invalid" connection-state=\
invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="Accept all comming from trusted" \
in-interface-list=WANM src-address-list=ag
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
in-interface-list=!LAN
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \
connection-state=established,related
add action=accept chain=forward comment=\
"defconf: accept established,related, untracked" connection-state=\
established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" \
connection-state=invalid
add action=drop chain=forward comment=\
"defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \
connection-state=new in-interface-list=WANM
/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=WANM
/ip route
add distance=2 gateway=8.2.2.37
add distance=3 gateway=4.5.1.13
/ip service
set telnet disabled=yes
set ftp disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip ssh
set allow-none-crypto=yes forwarding-enabled=remote
/system clock
/system identity
set name=SV-R
/system logging
set 0 disabled=yes
add prefix=ppp topics=ppp,pptp,l2tp,ipsec,info
add prefix="s>>> " topics=script
add action=echo disabled=yes prefix=s topics=ddns
/system ntp client
set enabled=yes server-dns-names=ru.pool.ntp.org

Войдите на сайт