日志
光纤上行多ADSL下行脚本分享
||
要做到光纤上行，多ADSL线路下行，有不少限制因素，下面的脚本经过多项目验证都是没有问题的，所以请不要对脚本的可用性怀疑。
下面的示例用的是北京联通的48线ADSL。有些没说到的内容大家自己想办法。
1.首先我们当然是要跟vlan交换机对接啦，那就先创建vlan吧，此处以联通示例，如果是多pcc，请自行解决。2.vlan搞定了，接下来就是建桥了，为什么要这么做，我想大家都应该明白吧3.下面呢，我们搞个profile给pppoe-client用，方便多pcc分离。4.现在我们该建拨号连接了。5.建个联通nat的地址池吧6.起nat了，这里的地址都是临时的，真正运行起来，会自动修改的哦7.做标记8.下面要做两个schedule，一个呢是去判断当前运行的出口数，做均衡；另外一个呢是看看每个线路是不是断线重拨了，如果重拨了，肯定是改了ip了。我们先做第一个。9.现在做第二个。
下面的示例用的是北京联通的48线ADSL。有些没说到的内容大家自己想办法。
1.首先我们当然是要跟vlan交换机对接啦，那就先创建vlan吧，此处以联通示例，如果是多pcc，请自行解决。
- :for i from=901 to=948 do= {/int vlan add interface=WAN name=("vlan".$i) vlan-id=$i}
- /int vlan set [find name=vlan901] comment=VLAN-CU
- /
- :for i from=901 to=948 do= {/int bridge add name=("bridge".$i) admin-mac=("01:88:".$i) auto-mac=no}
- :for i from=901 to=948 do= {/int bridge port add bridge=("bridge".$i) interface=("vlan".$i)}
- /int bridge set [find name=bridge901] comment=BRIDGE-CU
- /int bridge port set [find interface=vlan901] comment=BRIDGE-CU
- /
- /ppp profile add change-tcp-mss=default name=profile-CU only-one=default use-compression=no use-encryption=no use-mpls=no use-vj-compression=no dns-server=202.106.0.20,202.106.196.115
- /
- :for i from=901 to=948 do= {/int pppoe-client add name=("cu-pppoe-out".($i-900)) interface=("bridge".$i) profile=profile-CU}
- /interface pppoe-client set [find interface=bridge901] comment=PPPoE-CU
- /
- /ip firewall address-list add address=172.17.0.0/24 disabled=no list=NAT-CU
- /
- :for i from=901 to=948 do= {/ip firewall nat add action=src-nat chain=srcnat disabled=no connection-mark=("cu".($i-900)) to-addresses=("2.2.2.".($i-900))}
- /ip firewall nat set [find connection-mark="cu1"] comment=NAT-CU
- /
- :for i from=901 to=948 do= {/ip firewall mangle add action=mark-connection chain=prerouting disabled=no dst-address-type=!local new-connection-mark=("cu".($i-900)) passthrough=yes per-connection-classifier=("both-addresses-and-ports:48/".($i-901)) src-address-list=NAT-CU}
- :for i from=901 to=948 do= {/ip firewall mangle add action=mark-routing chain=prerouting connection-mark=("cu".($i-900)) disabled=no new-routing-mark=fiber_route passthrough=yes src-address-list=NAT-CU}
- /ip firewall mangle set [find new-connection-mark=cu1] comment=CONNECTION-CU
- /ip firewall mangle set [find connection-mark="cu1"] comment=ROUTING-CU
- /
- sys scheduler add name=scheduler-CU interval=00:01:00 on-event={
- :local status
- :local i "48"
- :local x "0"
- :local y "0"
- :local z "0"
- :set x [:len [/interface pppoe-client find running=yes profile=profile-CU]]
- :if ($x<$i) do={
- :for ii from=1 to=$i do={
- :set status [/interface get [find name=("cu-pppoe-out"."$ii")] running]
- :if ($status=true) do={
- /ip fir man set [find new-connection-mark=("cu"."$ii")] per-connection-classifier=("both-addresses-and-ports:"."$x"."/"."$y") disable=no;:set y ($y+1)} else={
- /ip fir man set [find new-connection-mark=("cu"."$ii")] disable=yes}}}
- :if ($x=$i) do={
- :set z [:len [/ip fir man find action="mark-connection" disabled=yes chain=prerouting]]
- :if ($z>0) do={
- :for ii from=1 to=$i do={
- /ip fi man set [find new-connection-mark=("cu"."$ii")] per-connection-classifier=("both-addresses-and-ports:"."$i"."/"."$y") disable=no;:set y ($y+1)}}}}
- sys scheduler add name=changeip-CU interval=00:01:00 on-event={
- :global ipa ""
- :global ipb ""
- :global pname ""
- /interface pppoe-client
- :for i from=1 to=48 do={
- :set pname ("cu-pppoe-out". $i)
- monitor $pname once do={
- :if ($status="connected" && $uptime<00:01:00) do={
- :set ipa [/ip address get [/ip address find interface=$pname dynamic=yes] address]
- :set ipa [:pick $ipa 0 [:find $ipa "/"]]
- :if ([:len [/ip fir nat find connection-mark=("cu".$i)]] > 0) do={
- :set ipb [/ip fir nat get [/ip fir nat find connection-mark=("cu".$i)] to-addresses]
- } else={/ip fir nat add action=src-nat chain=srcnat connection-mark=("cu".$i) to-addresses=$ipa comment=$pname;:set ipb $ipa}
- :if ($ipb != $ipa) do={
- /ip fir nat set [find connection-mark=("cu".$i)] to-addresses=$ipa disabled=no
- :log warning ("\D0\DE\B8\C4\5B" . $pname . "\5D\D3\B3\C9\E4\B5\BD" . $ipa)
- :beep length=3000ms frequency=1800
- }}}}}
渝公网安备 50011602500124号