Community discussions

MikroTik App
 
eddiem74
just joined
Topic Author
Posts: 9
Joined: Sat Oct 12, 2013 6:34 pm
Location: Dublin, Ireland

RB951G-2HnD: PPPoE Connection terminating, etc - DNS Changed

Sat Feb 15, 2014 3:21 pm

I am a home user who purchased a RB951G-2HnD after hearing great things about it. I managed to get a basic set-up in place following the user guide and some help on forums. My ISP router is set to bridge mode.

Today my son was complaining his PS3 was dropping connection a bit and when I checked I see the following the in the logs. I had seen this before but never paid much attention to it?

Is it normal or I need to make some further configuration changes/additions?
dns.JPG
Here is an export of my set-up:

[admin@MikroTik] > export
# feb/15/2014 13:03:08 by RouterOS 6.7
# software id = CCB8-P1HX
#
/interface bridge
add admin-mac=D4:CA:6D:BE:8D:FD auto-mac=no l2mtu=1598 name=bridge-local protocol-mode=rstp
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n channel-width=20/40mhz-ht-above disabled=no distance=indoors frequency=2427 l2mtu=2290 mode=ap-bridge ssid=\
MikroTik-BE8E01
/interface ethernet
set [ find default-name=ether1 ] name=ether1-gateway
set [ find default-name=ether2 ] name=ether2-master-local
set [ find default-name=ether3 ] master-port=ether2-master-local name=ether3-slave-local
set [ find default-name=ether4 ] master-port=ether2-master-local name=ether4-slave-local
set [ find default-name=ether5 ] master-port=ether2-master-local name=ether5-slave-local
/interface pppoe-client
add add-default-route=yes disabled=no interface=ether1-gateway max-mru=1484 max-mtu=1484 name=eircom-pppoe-out1 password=broadband1 use-peer-dns=yes user=\
eircom@eircom.net
/ip neighbor discovery
set wlan1 discover=no
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa2-psk eap-methods="" group-key-update=59m mode=dynamic-keys wpa-pre-shared-key=REMOVED \
wpa2-pre-shared-key=REMOVED
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m mac-cookie-timeout=3d
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=bridge-local name=default
/system logging action
set 0 memory-lines=100
set 1 disk-lines-per-file=100
/interface bridge port
add bridge=bridge-local interface=ether2-master-local
add bridge=bridge-local interface=wlan1
/ip address
add address=192.168.88.1/24 comment="default configuration" interface=wlan1 network=192.168.88.0
/ip dhcp-client
add comment="default configuration" dhcp-options=hostname,clientid interface=ether1-gateway
/ip dhcp-server network
add address=192.168.88.0/24 comment="default configuration" dns-server=192.168.88.1 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add chain=input comment="Allow ICMP" protocol=icmp
add chain=input comment="Allow WinBox" dst-port=8291 protocol=tcp
add action=add-src-to-address-list address-list=trying_to_rdp address-list-timeout=1d chain=input comment="List IP's who try RDP" dst-port=3389 protocol=tcp
add action=add-src-to-address-list address-list=trying_to_login address-list-timeout=1d chain=input comment="List IP's who try Remote Login" dst-port=20-23 \
protocol=tcp
add action=drop chain=input comment="Drop ftp brute forcers" dst-port=21 protocol=tcp src-address-list=ftp_blacklist
add action=drop chain=input comment="Drop ssh brute forcers" dst-port=22 protocol=tcp src-address-list=ssh_blacklist
add action=add-src-to-address-list address-list=ssh_blacklist address-list-timeout=1w3d chain=input connection-state=new dst-port=22 protocol=tcp \
src-address-list=ssh_stage3
add action=add-src-to-address-list address-list=ssh_stage3 address-list-timeout=1m chain=input connection-state=new dst-port=22 protocol=tcp \
src-address-list=ssh_stage2
add action=add-src-to-address-list address-list=ssh_stage2 address-list-timeout=1m chain=input connection-state=new dst-port=22 protocol=tcp \
src-address-list=ssh_stage1
add action=add-src-to-address-list address-list=ssh_stage1 address-list-timeout=1m chain=input connection-state=new dst-port=22 protocol=tcp
add action=drop chain=input comment="Drop invalid connections" connection-state=invalid
add chain=input comment="Allow already established connections" connection-state=established
add chain=input comment="Allow related connections " connection-state=related
add action=drop chain=input comment=PPPoE in-interface=eircom-pppoe-out1
add chain=input comment="Allow Lan" in-interface=!ether1-gateway src-address=192.168.88.0/24
add action=drop chain=forward comment="Drop ssh brute downstream" dst-port=22 protocol=tcp src-address-list=ssh_blacklist
add action=drop chain=forward comment="drop invalid connections" connection-state=invalid
add chain=forward comment="Allow already established connections" connection-state=established
add chain=forward comment="Allow related connections" connection-state=related
add action=drop chain=input comment="Drop everything else"
/ip firewall nat
add action=masquerade chain=srcnat comment="default configuration" out-interface=eircom-pppoe-out1 to-addresses=0.0.0.0
/ip service
set api disabled=yes
/ip upnp
set allow-disable-external-interface=no enabled=yes show-dummy-rule=no
/ip upnp interfaces
add interface=bridge-local type=internal
add interface=eircom-pppoe-out1 type=external
/system clock
set time-zone-name=Europe/Dublin
/system leds
set 0 interface=wlan1
/system logging
add topics=wireless,debug
/system ntp client
set enabled=yes mode=unicast primary-ntp=134.226.81.3
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=ether2-master-local
add interface=ether3-slave-local
add interface=ether4-slave-local
add interface=ether5-slave-local
add interface=wlan1
add interface=bridge-local
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=ether2-master-local
add interface=ether3-slave-local
add interface=ether4-slave-local
add interface=ether5-slave-local
add interface=wlan1
add interface=bridge-local

Thanks for looking!
You do not have the required permissions to view the files attached to this post.
 
User avatar
rickfrey
Trainer
Trainer
Posts: 609
Joined: Sun Feb 14, 2010 11:41 pm
Location: Van, Texas
Contact:

Re: RB951G-2HnD: PPPoE Connection terminating, etc - DNS Cha

Sun Feb 16, 2014 5:50 am

No, it not normal for the PPPoE connection to constantly drop. That is something that you should troubleshoot. I didn't see anything in your config that really stood out as possibly being the culprit. You're ISP may be having problems. If you have a Windows computers, you can set it up as a PPPoE client and observe whether or not it is dropping the connection too. You might also ask your ISP to check the logs and see if they observe your connection is going up and down as well. It could also be the wiring in your house or bad cable...
 
eddiem74
just joined
Topic Author
Posts: 9
Joined: Sat Oct 12, 2013 6:34 pm
Location: Dublin, Ireland

Re: RB951G-2HnD: PPPoE Connection terminating, etc - DNS Cha

Fri Feb 21, 2014 1:15 pm

No, it not normal for the PPPoE connection to constantly drop. That is something that you should troubleshoot. I didn't see anything in your config that really stood out as possibly being the culprit. You're ISP may be having problems. If you have a Windows computers, you can set it up as a PPPoE client and observe whether or not it is dropping the connection too. You might also ask your ISP to check the logs and see if they observe your connection is going up and down as well. It could also be the wiring in your house or bad cable...
In the past when I observed this I used to spot it in the logs in the middle of the night.

Here it is again from last night.
Start.JPG
It continued until it eventually connected again.
End.JPG
DNS changed is always mentioned, would my ISP be regularing changing or that message is misleading? Is there any way to add to the log or obtain in another if the DNS is in fact changing?
You do not have the required permissions to view the files attached to this post.
 
User avatar
rickfrey
Trainer
Trainer
Posts: 609
Joined: Sun Feb 14, 2010 11:41 pm
Location: Van, Texas
Contact:

Re: RB951G-2HnD: PPPoE Connection terminating, etc - DNS Cha

Fri Feb 21, 2014 5:14 pm

It definitely looks like there is a mismatch between your PPPoE client and their server. I can only guess what that might be. If it not doing this during the day, my first guess would be that it is on there end. Some ISPs have a very caviler attitude towards doing maintenance during the night...some have that problem during the day too. Just to make sure I am reading this right, you are saying that it works during the day without any problems. When it has problems, it is only at night and not consistently? That really sounds like its your ISP. Have you talked with you ISP about this? The DNS entries are a result of the "Use Peer DNS" value in the PPPoE client.
 
eddiem74
just joined
Topic Author
Posts: 9
Joined: Sat Oct 12, 2013 6:34 pm
Location: Dublin, Ireland

Re: RB951G-2HnD: PPPoE Connection terminating, etc - DNS Cha

Fri Feb 21, 2014 5:40 pm

It definitely looks like there is a mismatch between your PPPoE client and their server. I can only guess what that might be. If it not doing this during the day, my first guess would be that it is on there end. Some ISPs have a very caviler attitude towards doing maintenance during the night...some have that problem during the day too. Just to make sure I am reading this right, you are saying that it works during the day without any problems. When it has problems, it is only at night and not consistently? That really sounds like its your ISP. Have you talked with you ISP about this? The DNS entries are a result of the "Use Peer DNS" value in the PPPoE client.
Yes I had only ever seen this in the logs and always at night. Now I would not be checking logs daily or anything like that but when I do I would often spot an entry like this but generally it resolves itself within a few mins. As it happened during the night I assumed some sort of ISP reboot or something going on and as I was sleeping did not care about it.

Last Saturday I just happened to be on my laptop when my son mentioned he was dropping PS3 connection so I logged into the router and seen the same in the logs during the day. Perhaps the ISP working overtime on a Saturday? They have been rolling out fibre in our area so perhaps they are regularly making updates at the exchange or swapping connections around?

I have not contacted them yet as I was unsure if the issue was on my side as they don't really get into issues where their modem has been set to bridge mode.

Is there anything I should change with regard to the "Use Peer DNS" setting, should I change to some open DNS or?
 
User avatar
rickfrey
Trainer
Trainer
Posts: 609
Joined: Sun Feb 14, 2010 11:41 pm
Location: Van, Texas
Contact:

Re: RB951G-2HnD: PPPoE Connection terminating, etc - DNS Cha

Fri Feb 21, 2014 5:53 pm

From what you stated, it definitely looks like the problem is on there side, baring any phsical conncetion problems (that's a possibility too.) As far as the DNS is concerned, that is up to you. All that does, is tell the router what DNS servers to use. If you are using the MikroTik for a DNS proxy, then it will affect you as well. I use Open DNS at home with my MikroTik router for content filtering and I like ok. Its not an end all solution, but it works pretty well and the price is favorable :D
 
xtremeneo
just joined
Posts: 9
Joined: Mon Apr 07, 2014 4:09 pm

Re: RB951G-2HnD: PPPoE Connection terminating, etc - DNS Cha

Wed Jun 25, 2014 4:37 am

up for this...same thing happend to my ppoe-client terminate then dial....may connection is stable when i connected to my laptop :(