Internet crash and strange behavior of MikroTik Router RB750Gr3. Causes?

Question

Computer networks

Colleagues, again I ask for help)
Network: Provider <> BRB750Gr3 <> server.
On a server on VMware WKS, I'm making a new shared virtual machine on the 20th.
I do not change the Mac, the network is bridged.
The company started having problems with the Internet, it began to "disappear".
Today, the intensity of passions has reached a peak, the Internet disappears every minute or two.
I connect to the server, set pings 8.8.8.8, the provider's gateway, the Mikrotik itself.
At the time of the Internet failure, the ping breaks to 8.8.8.8, to the provider, and with pings to Mikrotik, the following picture occurs:

Similar was in the topic https://toster.ru/q/249319

On Mikrotik, I set all the logs to syslog, but I don’t see it there nothing special: I turn off the


virtual machine - everything becomes normal.
I run it without a network - everything is fine.
I regenerated her poppy, launched it with the network, deleted the reservation of her address from Mikrotik, made it on a new poppy - everything is fine.

I ask for help in understanding the situation, I want to figure out what happened and why I don’t see any messages from Mikrotik about the problem and the reasons.

Answer 1

Well, I'll start by saying that using default addressing is such a solution in itself.
On the topic of what happened, now there will be more fortune-telling on the coffee grounds, but as an option, in some mysterious way, your mac address of the VM coincided with mac Mikrotik. TTL 255 is usually on a Windows machine, and most likely you raised the VM on it or what TTL 255 gives
. There will be no messages here, because in order to get something, you need to configure something.
Change the addressing to something else if there is still an opportunity, show a lot of imagination.
Distribute addressing via DHCP by specifying add arp for leases , and in bridge replay-only .
On the router, make the arp and ip connectivity in the arp list for the gateway and what is static. Well, in an incomprehensible situation, do a wareshark dump

Answer 2

TTL 255 is usually on a Windows machine, and most likely you raised the VM on it or what TTL 255 gives.

Windows Server + VmWare WKS, that's right, I don't understand why the TTL changes "on the fly".
In Logging, I sent events of all types to the syslog, or are we talking about a different setting?
I will look into this, thanks.