denozord/MikrotikManager
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 104 Wiki Activity

fix(ipsec): обеспечить NAT и изоляцию политик для передачи данных

Browse Source
This commit is contained in:
Denozordec committed 2026-10-09 17:10:33 +07:00
1 parent 43b00e0740
commit 89de7e134b
17 files changed
+571 -25
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

docs/ux-ui/acceptance/ipsec-network-2026-10-09.json
+336
View File
@@ -0,0 +1,336 @@
{
"date": "2026-10-09",
"name": "mm-ipsec82-1791540186150",
"observations": [
{
"serverId": 1,
"active": [
{
".id": "*1",
"id": "CN=mm-ipsec82-1791540186150",
"state": "established",
"dynamic-address": "198.18.82.250",
"remote-address": "104.165.244.7",
"uptime": "0s"
}
],
"catalog": [
{
"name": "mm-ipsec82-1791540186150",
"commonName": "mm-ipsec82-1791540186150",
"staticIp": "198.18.82.250",
"online": true,
"activeAddress": "198.18.82.250",
"activeSince": "0s"
}
]
},
{
"serverId": 2,
"active": [
{
".id": "*1",
"id": "194.226.121.150",
"state": "established",
"remote-address": "194.226.121.150",
"uptime": "0s"
}
],
"catalog": []
}
],
"cleanup": [
{
"serverId": 1,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/pool": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/interface/bridge": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
},
{
"serverId": 2,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/pool": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/interface/bridge": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
}
],
"baselineRoutes": [
{
"serverId": 1,
"rows": [
{
".id": "*80000003",
"dst-address": "0.0.0.0/0",
"gateway": "194.226.121.1",
"routing-table": "main",
"dynamic": "false"
},
{
".id": "*80000004",
"dst-address": "0.0.0.0/0",
"gateway": "194.226.121.1",
"routing-table": "main",
"dynamic": "true"
},
{
".id": "*80000005",
"dst-address": "169.254.169.254/32",
"gateway": "194.226.121.1",
"routing-table": "main",
"dynamic": "true"
},
{
".id": "*20145010",
"dst-address": "194.226.121.0/24",
"gateway": "ether1",
"routing-table": "main",
"dynamic": "true"
}
]
},
{
"serverId": 2,
"rows": [
{
".id": "*80000003",
"dst-address": "0.0.0.0/0",
"gateway": "104.165.244.1",
"routing-table": "main",
"dynamic": "false"
},
{
".id": "*80000005",
"dst-address": "0.0.0.0/0",
"gateway": "104.165.244.1",
"routing-table": "main",
"dynamic": "true"
},
{
".id": "*20145020",
"dst-address": "104.165.244.0/24",
"gateway": "ether1",
"routing-table": "main",
"dynamic": "true"
},
{
".id": "*80000004",
"dst-address": "169.254.169.254/32",
"gateway": "104.165.244.2",
"routing-table": "main",
"dynamic": "true"
},
{
".id": "*20145010",
"dst-address": "195.195.195.195/32",
"gateway": "ether1",
"routing-table": "main",
"dynamic": "true"
}
]
}
],
"natRule": {
"outInterface": "ether1",
"ipsecPolicy": "out,none",
"noWanListRequired": true,
"repeatInitOneRule": true
},
"expectedAddress": "198.18.82.250",
"staticLeaseCorrect": true,
"catalogCorrect": true,
"pings": [
{
"serverId": 2,
"address": "198.18.82.1",
"source": "198.18.82.250",
"received": 3,
"sent": 3
},
{
"serverId": 1,
"address": "198.18.82.250",
"source": "198.18.82.1",
"received": 3,
"sent": 3
},
{
"serverId": 2,
"address": "8.8.8.8",
"source": "198.18.82.250",
"received": 3,
"sent": 3
}
],
"natEvidence": [
{
"src-address": "198.18.82.250",
"dst-address": "8.8.8.8",
"reply-src-address": "8.8.8.8",
"reply-dst-address": "194.226.121.150",
"srcnat": "true",
"seen-reply": "true"
}
],
"bandwidth": {
"durationSec": 3,
"capBitsPerSecondPerDirection": 1000000,
"protocol": "udp",
"source": "assigned client via own pref-src route",
"rows": [
{
"status": "connecting",
"tx-current": "0",
"rx-current": "0",
"tx-total-average": "0",
"rx-total-average": "0",
"lost-packets": "0"
},
{
"status": "running",
"duration": "0s",
"tx-current": "0",
"rx-current": "0",
"tx-total-average": "0",
"rx-total-average": "0",
"lost-packets": "0"
},
{
"status": "running",
"duration": "1s",
"tx-current": "913680",
"rx-current": "970080",
"tx-total-average": "913680",
"rx-total-average": "970080",
"lost-packets": "0"
},
{
"status": "running",
"duration": "2s",
"tx-current": "981360",
"rx-current": "970080",
"tx-total-average": "947520",
"rx-total-average": "970080",
"lost-packets": "0"
},
{
"status": "done testing",
"duration": "3s",
"tx-current": "970080",
"rx-current": "970080",
"tx-total-average": "955040",
"rx-total-average": "970080",
"lost-packets": "0"
}
]
},
"encryptedByteDelta": 816906,
"historyRestore": {
"groupsPreserved": true,
"natEgressPreserved": true,
"clientEnabled": true
},
"serverDelete": {
"ownedGroupRemoved": true,
"defaultPolicyPreserved": true
},
"routeRecheck": [
{
"serverId": 1,
"initialMatch": false,
"finalMatch": true,
"rows": [
{
".id": "*80000003",
"dst-address": "0.0.0.0/0",
"gateway": "194.226.121.1",
"routing-table": "main",
"dynamic": "false"
},
{
".id": "*80000004",
"dst-address": "0.0.0.0/0",
"gateway": "194.226.121.1",
"routing-table": "main",
"dynamic": "true"
},
{
".id": "*80000005",
"dst-address": "169.254.169.254/32",
"gateway": "194.226.121.1",
"routing-table": "main",
"dynamic": "true"
},
{
".id": "*20145010",
"dst-address": "194.226.121.0/24",
"gateway": "ether1",
"routing-table": "main",
"dynamic": "true"
}
]
},
{
"serverId": 2,
"initialMatch": true,
"finalMatch": true,
"rows": [
{
".id": "*80000003",
"dst-address": "0.0.0.0/0",
"gateway": "104.165.244.1",
"routing-table": "main",
"dynamic": "false"
},
{
".id": "*80000005",
"dst-address": "0.0.0.0/0",
"gateway": "104.165.244.1",
"routing-table": "main",
"dynamic": "true"
},
{
".id": "*20145020",
"dst-address": "104.165.244.0/24",
"gateway": "ether1",
"routing-table": "main",
"dynamic": "true"
},
{
".id": "*80000004",
"dst-address": "169.254.169.254/32",
"gateway": "104.165.244.2",
"routing-table": "main",
"dynamic": "true"
},
{
".id": "*20145010",
"dst-address": "195.195.195.195/32",
"gateway": "ether1",
"routing-table": "main",
"dynamic": "true"
}
]
}
]
}