Помогите. Есть capsman на rb3011, и штук 12 точек (cap). Всё летает. Но раз в день (два), скорость падает до минимума. В сети есть телевизоры, спутниковые ресиверы, и тд. # model = RouterBOARD 3011UiAS # serial number = 783D06989D74 /caps-man channel add band=2ghz-g/n control-channel-width=20mhz extension-channel=Ce name=\ channel1 tx-power=20 /interface bridge add fast-forward=no name=bridge1 /ip neighbor discovery set ether1 discover=no /caps-man datapath add bridge=bridge1 client-to-client-forwarding=yes local-forwarding=no name=\ datapath1 /caps-man security add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ name=security1 passphrase=123 /caps-man configuration add channel=channel1 datapath=datapath1 mode=ap name=cfg1 rx-chains=0,1,2 \ security=security1 ssid 123 tx-chains=0,1,2 /interface wireless security-profiles set [ find default=yes ] supplicant-identity=MikroTik /ip pool add name=dhcp_pool1 ranges=192.168.0.50-192.168.0.254 add name=dhcp_pool2 ranges=192.168.1.2-192.168.1.254 /ip dhcp-server add address-pool=dhcp_pool1 authoritative=after-2sec-delay disabled=no \ interface=bridge1 name=dhcp1 add address-pool=dhcp_pool2 authoritative=after-2sec-delay interface=ether9 \ name=dhcp2 /snmp community set [ find default=yes ] addresses=0.0.0.0/0 /caps-man manager set enabled=yes /caps-man provisioning add action=create-dynamic-enabled master-configuration=cfg1 /interface bridge port add bridge=bridge1 interface=ether2 add bridge=bridge1 interface=ether3 add bridge=bridge1 interface=ether4 add bridge=bridge1 interface=ether5 add bridge=bridge1 interface=ether6 add bridge=bridge1 interface=ether7 add bridge=bridge1 interface=ether8 add bridge=bridge1 interface=ether10 /ip address add address=192.168.0.1/24 interface=bridge1 network=192.168.0.0 add address=192.168.1.1/24 interface=ether9 network=192.168.1.0 /ip dhcp-client add default-route-distance=0 dhcp-options=hostname,clientid disabled=no \ interface=ether1 /ip dhcp-server lease add address=192.168.0.245 client-id=1:e4:8d:8c:b2:76:bb mac-address=\ E4:8D:8C:B2:76:BB server=dhcp1 add address=192.168.0.242 client-id=1:e4:8d:8c:72:d6:c6 mac-address=\ E4:8D:8C:726:C6 server=dhcp1 add address=192.168.0.140 client-id=1:64:d1:54:2d:f3:38 mac-address=\ 641:54:2D:F3:38 server=dhcp1 add address=192.168.0.138 client-id=1:6c:3b:6b:51:6e:c5 mac-address=\ 6C:3B:6B:51:6E:C5 server=dhcp1 add address=192.168.0.249 client-id=1:6c:3b:6b:51:69:35 mac-address=\ 6C:3B:6B:51:69:35 server=dhcp1 add address=192.168.0.246 client-id=1:6c:3b:6b:51:6c:4d mac-address=\ 6C:3B:6B:51:6C:4D server=dhcp1 add address=192.168.0.88 client-id=1:6c:3b:6b:7d:4a:8 mac-address=\ 6C:3B:6B:7D:4A:08 server=dhcp1 add address=192.168.0.87 client-id=1:64:d1:54:1a:17:b0 mac-address=\ 641:54:1A:17:B0 server=dhcp1 add address=192.168.0.54 client-id=1:e4:8d:8c:6b:ae:b8 mac-address=\ E4:8D:8C:6B:AE:B8 server=dhcp1 add address=192.168.0.248 client-id=1:0:5:cd:e3:df:a4 mac-address=\ 00:05:CD:E3F:A4 server=dhcp1 add address=192.168.0.253 client-id=1:6c:3b:6b:b7:b:85 mac-address=\ 6C:3B:6B:B7:0B:85 server=dhcp1 add address=192.168.0.52 client-id=1:6c:3b:6b:bd:6d:e mac-address=\ 6C:3B:6B:BD:6D:0E server=dhcp1 add address=192.168.0.65 client-id=1:6c:3b:6b:51:6d:75 mac-address=\ 6C:3B:6B:51:6D:75 server=dhcp1 /ip dhcp-server network add address=192.168.0.0/24 dns-server=192.168.0.1 gateway=192.168.0.1 add address=192.168.1.0/24 gateway=192.168.1.1 /ip dns set allow-remote-requests=yes /ip firewall filter add action=drop chain=input comment="close DNS port 53 udp" dst-port=53 \ in-interface=ether1 protocol=udp add action=drop chain=input comment="close DNS port 53 tcp" dst-port=53 \ in-interface=ether1 protocol=tcp add action=drop chain=input comment="close DNS port 123 udp" dst-port=123 \ in-interface=ether1 protocol=udp /ip firewall nat add action=masquerade chain=srcnat src-address=192.168.0.0/24 add action=masquerade chain=srcnat src-address=192.168.1.0/24 add action=netmap chain=dstnat dst-port=555 in-interface=ether1 protocol=tcp \ to-addresses=192.168.1.200 to-ports=555 add action=netmap chain=dstnat dst-port=8080 in-interface=ether1 protocol=tcp \ to-addresses=192.168.1.200 to-ports=8080 add action=netmap chain=dstnat dst-port=3080 in-interface=ether1 protocol=tcp \ to-addresses=192.168.1.200 to-ports=3080 add action=netmap chain=dstnat dst-port=3081 in-interface=ether1 protocol=tcp \ to-addresses=192.168.1.200 to-ports=3081 add action=dst-nat chain=dstnat comment=\ "\E7\E0\EA\EE\EB\FC\F6\EE\E2\EA\E0 \ED\E0 \F1\E5\E1\FF" disabled=yes \ dst-address=31.148.31.182 dst-port=0-65500 protocol=tcp to-addresses=\ 192.168.1.200 to-ports=0-65535 /ip service set telnet disabled=yes set ftp disabled=yes set www disabled=yes set ssh disabled=yes set api disabled=yes set api-ssl disabled=yes /system clock set time-zone-autodetect=no time-zone-name=Europe/Moscow /system identity set name=CapsMan /system logging add topics=wireless add topics=caps add topics=firewall /system package update set channel=bugfix /system routerboard settings set boot-os=router-os silent-boot=yes
у вас очень плохо настроен фаервол. Настройте для начала его: /ip firewall filter add chain=input comment="defconf: accept ICMP" protocol=icmp add chain=input comment="defconf: accept established,related" connection-state=\ established,related add chain=input comment="accept WinBox port" dst-port=8291 protocol=tcp add action=drop chain=input comment="defconf: drop all from WAN" in-interface=\ ether1 add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ connection-state=established,related add chain=forward comment="defconf: accept established,related" \ connection-state=established,related add action=drop chain=forward comment="defconf: drop invalid" connection-state=\ invalid add action=drop chain=forward comment=\ "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ connection-state=new in-interface=ether1 Еще я бы рекомендовал вам использовать настройку local forwarding.
Вот и снова скорость упала. В логах все как обычно. Ping speed показывает скорость до шлюза не более 4 mbps. Провайдер клянётся что у него всё ок.
