kekele 发表于 2012-9-23 00:57:59

固定+adsl双线pcc ,可以正常上网,内网不能访问网关

固定+adsl双线pcc ,可以正常上网,内网不能访问网关,也ping不通,下面是pcc策略,求指导


0   ;;; Change MSS
   chain=forward action=change-mss new-mss=1440 tcp-flags=syn protocol=tcp
   out-interface=pppoe-out1

1   chain=input action=mark-connection new-connection-mark=wan1_pcc_1 passthrough=yes
   in-interface=wan1

2   chain=output action=mark-routing new-routing-mark=rout_1 passthrough=yes
   connection-mark=wan1_pcc_1

3   chain=input action=mark-connection new-connection-mark=wan2_pcc_2 passthrough=yes
   in-interface=pppoe-out1

4   chain=output action=mark-routing new-routing-mark=rout_2 passthrough=yes
   connection-mark=wan2_pcc_2

5   ;;; PCC_1
   chain=prerouting action=mark-connection new-connection-mark=wan1_pcc_1 passthrough=yes
   src-address=192.168.0.0/24 per-connection-classifier=both-addresses:2/0

6   chain=prerouting action=mark-routing new-routing-mark=rout_1 passthrough=yes
   src-address=192.168.0.0/24 connection-mark=wan1_pcc_1

7   ;;; PCC_2
   chain=prerouting action=mark-connection new-connection-mark=wan2_pcc_2 passthrough=yes
   src-address=192.168.0.0/24 per-connection-classifier=both-addresses:2/1

8   chain=prerouting action=mark-routing new-routing-mark=rout_2 passthrough=yes
   src-address=192.168.0.0/24 connection-mark=wan2_pcc_2

tempxp 发表于 2012-10-5 10:33:33

要先mark connection 后mark routing
页: [1]
查看完整版本: 固定+adsl双线pcc ,可以正常上网,内网不能访问网关