При этом еще некоторое количество удаленных микротиков (конфиг на всех примерно одинаковый), на них такой проблемы нет. Копался в конфиге, но так и не нашел причину. Конфиг:
Код: Выделить всё
# oct/04/2021 11:38:19 by RouterOS 6.48.4
# software id = RVB9-FWE7
#
# model = RB760iGS
# serial number = D4500E8C0F72
/interface bridge
add name=bridgeSVN vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] name=ether1-WAN
set [ find default-name=ether2 ] name=ether2-SVN
set [ find default-name=ether3 ] name=ether3-SVN
set [ find default-name=ether4 ] name=ether4-SVN
set [ find default-name=ether5 ] name=ether5-SVN
set [ find default-name=sfp1 ] disabled=yes
/interface l2tp-client
add connect-to=95.66.132.68 disabled=no name=l2tp-out1 user=argus_rozhkov
/interface vlan
add interface=bridgeSVN name=vlanLAN vlan-id=77
/interface list
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool1 ranges=192.168.71.100-192.168.71.199
add name=dhcp_pool2 ranges=192.168.77.100-192.168.77.199
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=bridgeSVN lease-time=1d \
name=dhcpSVN
add address-pool=dhcp_pool2 disabled=no interface=vlanLAN lease-time=1d name=\
dhcpLAN
/interface bridge port
add bridge=bridgeSVN interface=ether2-SVN
add bridge=bridgeSVN interface=ether3-SVN pvid=77
add bridge=bridgeSVN interface=ether4-SVN pvid=77
add bridge=bridgeSVN interface=ether5-SVN pvid=77
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/interface bridge vlan
add bridge=bridgeSVN tagged=ether2-SVN,bridgeSVN untagged=\
ether5-SVN,ether3-SVN,ether4-SVN vlan-ids=77
/interface list member
add interface=vlanLAN list=LAN
add interface=bridgeSVN list=LAN
/ip address
add address=192.168.71.254/24 interface=bridgeSVN network=192.168.71.0
add address=192.168.77.1/24 interface=vlanLAN network=192.168.77.0
/ip dhcp-client
add disabled=no interface=ether1-WAN
/ip dhcp-server network
add address=192.168.71.0/24 dns-server=192.168.71.254 gateway=192.168.71.254
add address=192.168.77.0/24 dns-server=192.168.77.1 gateway=192.168.77.1
/ip dns
set allow-remote-requests=yes
/ip firewall filter
add action=drop chain=forward connection-state=invalid
add action=drop chain=input connection-state=invalid
add action=accept chain=input protocol=icmp
add action=accept chain=input connection-state=established,related
add action=accept chain=input dst-port=53 in-interface-list=LAN protocol=tcp
add action=accept chain=input dst-port=53 in-interface-list=LAN protocol=udp
add action=accept chain=input dst-port=285 protocol=tcp src-address-list=\
ConnectWinbox3
add action=drop chain=input
add action=drop chain=forward connection-nat-state=!dstnat connection-state=\
new in-interface=ether1-WAN
/ip firewall mangle
add action=add-src-to-address-list address-list=ConnectWinbox1 \
address-list-timeout=1m chain=prerouting dst-port=920 protocol=tcp
add action=add-src-to-address-list address-list=ConnectWinbox2 \
address-list-timeout=1m chain=prerouting dst-port=328 protocol=tcp \
src-address-list=ConnectWinbox1
add action=add-src-to-address-list address-list=ConnectWinbox3 \
address-list-timeout=1h chain=prerouting dst-port=185 protocol=tcp \
src-address-list=ConnectWinbox2
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1-WAN
add action=dst-nat chain=dstnat dst-port=3080,3081,555,8080,5650 \
in-interface=ether1-WAN protocol=tcp to-addresses=192.168.71.200
add action=dst-nat chain=dstnat dst-address=91.230.146.14 dst-port=\
3080,3081,555,8080 in-interface-list=LAN protocol=tcp src-address=\
192.168.71.0/24 to-addresses=192.168.71.200
add action=masquerade chain=srcnat dst-address=192.168.71.200 dst-port=\
3080,3081,555,8080 out-interface-list=LAN protocol=tcp src-address=\
192.168.71.0/24
add action=dst-nat chain=dstnat dst-address=91.230.146.14 dst-port=\
3080,3081,555,8080 in-interface-list=LAN protocol=tcp src-address=\
192.168.77.0/24 to-addresses=192.168.71.200
add action=masquerade chain=srcnat dst-address=192.168.71.200 dst-port=\
3080,3081,555,8080 out-interface-list=LAN protocol=tcp src-address=\
192.168.77.0/24
/ip route
add distance=1 dst-address=10.1.1.0/24 gateway=192.168.9.1
add distance=1 dst-address=192.168.187.0/24 gateway=192.168.9.1
add distance=1 dst-address=192.168.188.0/24 gateway=192.168.9.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set winbox port=285
set api-ssl disabled=yes
/system clock
set time-zone-name=Europe/Moscow
/system identity
set name=MikroTik_Rozhkov