cuiyl888 发表于 2010-9-29 17:50:31

ROS3.2电信固定IP双线分流问题???

本帖最后由 cuiyl888 于 2010-9-29 17:52 编辑

/ip address add address=192.168.1.250/255.255.255.0 interface=Lan comment=lan
/ip dns set primary-dns=218.30.19.40 secondary-dns=61.134.1.4 allow-remote-requests=yes
/ip firewall nat add action=masquerade chain=srcnat src-address=192.168.1.0/255.255.255.0
/ip firewall mangle add chain=forward protocol=tcp tcp-flags=syn action=change-mss new-mss=1500
/ip address add address=10.10.10.10/255.255.255.252 interface=Wan1 comment="1"
/ip firewall mangle add chain=prerouting src-address=192.168.1.1-192.168.1.110 action=mark-routing new-routing-mark=1 comment=1
/ip route add gateway=10.10.10.11 routing-mark=1 comment=1
/ip address add address=20.20.20.20/255.255.255.240 interface=Wan2 comment="2"
/ip firewall mangle add chain=prerouting src-address=192.168.1.111-192.168.1.254 action=mark-routing new-routing-mark=2 comment=2
/ip route add gateway=20.20.20.21 routing-mark=2 comment=2



现在问题是Wan1正常,Wan2电信测速很慢,迅雷下载正常,IE下载也不行。请教各位大虾什么问题。好像Wan2自动限速了一样

cuiyl888 发表于 2010-9-29 18:07:54

回复 1# cuiyl888


    刚才又tracert看了下Wan2跟踪不到路由。

wanken 发表于 2010-9-30 10:15:24

錯誤太多了
/ip firewall mangle add chain=forward protocol=tcp tcp-flags=syn action=change-mss new-mss=1500      <------改1440   1500是最大值理論上無法使用的

/ip firewall mangle add chain=prerouting src-address=192.168.1.1-192.168.1.110 action=mark-routing new-routing-mark=1 comment=1passthrough=yes <--加這個後續處理動作

/ip route add gateway=10.10.10.11 routing-mark=1 comment=1
改成這樣--->add dst-address=0.0.0.0/0 gateway=10.10.10.11comment="1"   check-gateway=pingrouting-mark=1

/ip address add address=192.168.1.250/255.255.255.0 interface=Lan comment=lan
192.168.1.250    <--改192.168.1.0才能與這一段銜接啊 /ip firewall nat add action=masquerade chain=srcnat src-address=192.168.1.0/255.255.255.0

那個Wan-2的改法一樣..........!

WGHBOY 发表于 2010-9-30 11:36:23

:lol
页: [1]
查看完整版本: ROS3.2电信固定IP双线分流问题???