@sanquan 后面我又试了下发现放在端口映射前后都一样，得在规则里添加忽略端口

@ZRS @hefish 问题已解决 是 FullCone 规则的问题，放到端口映射后就正常了

@hefish @ZRS
```
[admin@MikroTik] /ip/firewall/nat> print
Flags: X - disabled, I - invalid; D - dynamic
0 ;;; FullCone
chain=srcnat action=endpoint-independent-nat randomise-ports=no
protocol=udp log=no log-prefix=""

1 chain=dstnat action=endpoint-independent-nat randomise-ports=no
protocol=udp log=no log-prefix=""

2 ;;; Hairpin NAT
chain=srcnat action=masquerade src-address=192.168.1.0/24
dst-address=192.168.1.0/24 out-interface-list=LAN log=no log-prefix=""

3 ;;; defconf: masquerade IPv4
chain=srcnat action=masquerade out-interface-list=WAN log=no
log-prefix=""

4 ;;; onuconf: access to ONU
chain=srcnat action=masquerade src-address-list=local_lan_ipv4
dst-address-list=local_onu_ipv4 out-interface-list=ONU

5 ;;; Test
chain=dstnat action=dst-nat to-addresses=192.168.1.52 protocol=udp
dst-port=12345 log=no log-prefix=""

6 chain=dstnat action=dst-nat to-addresses=192.168.1.52 protocol=tcp
dst-port=12345 log=no log-prefix=""
```
还需要哪的配置吗

@iijboom 升级 i225 固件之后问题解决了

@ChangeTheWorld 是删除后新建的

@yinmin 电脑直接拨号只能跑到 600 左右，光猫拨号正常 1300