我爱肉饼 发表于 2016-12-7 15:20:53

不吝赐教

现在话费保底消费多少就送宽带,拉条固定IP精品宽带送N条FTTH等(羊毛出在羊身上)。
经常面临着有1条上下对等的20M固定IP,N条FTTH上行只有2M,怎样通过合理利用这些宽带?大家有什么好方案呢?
当然领导也会要求台式走20M固定IP,wifi走FTTH,为了减少工作量用一个网口走台式,一个网口走wifi,都开启DHCP,如果只走一个网口还要到底下给电脑设置固定IP。这个时候就需要做策略路由,但发现双线策略路由后,不同的两个网段无法互相通信,局域网无法共享文件和打印机,有此感触又有解决过这个问题的,能不能站出来指导下大家。

       by RouterOS 6.37.3

/interface bridge
add name=bridge1
/interface ethernet
set [ find default-name=ether2 ] name=lan1
set [ find default-name=ether4 ] name=lan2
set [ find default-name=ether1 ] name=wan1
set [ find default-name=ether3 ] name=wan2
/interface pppoe-client
add add-default-route=yes disabled=no interface=wan1 name=pppoe-out1 \
    password=1 user=1
add add-default-route=yes default-route-distance=1 disabled=no interface=wan2 \
    name=pppoe-out2 password=2 user=2
/interface wireless
set [ find default-name=wlan1 ] disabled=no
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=pool1 ranges=192.168.1.10-192.168.1.20
add name=pool2 ranges=192.168.0.10-192.168.0.20
/ip dhcp-server
add address-pool=pool1 disabled=no interface=bridge1 name=server1
add address-pool=pool2 disabled=no interface=lan2 name=server2
/interface bridge port
add bridge=bridge1 interface=lan1
add bridge=bridge1 interface=wlan1
/ip address
add address=192.168.1.1/24 interface=bridge1 network=192.168.1.0
add address=192.168.0.1/24 interface=lan2 network=192.168.0.0
/ip dhcp-server network
add address=192.168.0.0/24 dns-server=218.85.152.99 gateway=192.168.0.1 \
    netmask=24
add address=192.168.1.0/24 dns-server=218.85.152.99 gateway=192.168.1.1 \
    netmask=24
/ip firewall mangle
add action=accept chain=prerouting dst-address=192.168.0.0/24 src-address=\
    192.168.1.0/24
add action=accept chain=prerouting dst-address=192.168.1.0/24 src-address=\
    192.168.0.0/24
add action=mark-routing chain=prerouting dst-address=!192.168.0.0/24 \
    new-routing-mark=a1 passthrough=yes src-address=192.168.1.0/24
add action=mark-routing chain=prerouting dst-address=!192.168.1.0/24 \
    new-routing-mark=a2 passthrough=yes src-address=192.168.0.0/24
/ip firewall nat
add action=accept chain=srcnat dst-address=192.168.1.0/24 src-address=\
    192.168.0.0/23
add action=accept chain=srcnat dst-address=192.168.0.0/23 src-address=\
    192.168.1.0/24
add action=masquerade chain=srcnat
/ip route
add distance=1 gateway=pppoe-out1 routing-mark=a1
add distance=1 gateway=pppoe-out2 routing-mark=a2
如此还是无法互访!

页: [1]
查看完整版本: 不吝赐教