新人第一贴，有关部分常识及动态切换线路icmp掉线的问题

everest79

各位好，这是我在本论坛发的第一篇贴子，由于是初学，有着众多问题可能让大家扔鸡蛋，不过为避免在同一问题上做第二次小白，请您将解决方法或致错因素也扔给我，在此谢了

好了，转入正题，观摩学习了论坛大量贴子后我参考以下内容:

host2318的 [双线不同网关分流教程]
专卖精品等高手在 [光纤用户使用NAT方式多还是使用masquerade方式的多] 中的讨论
wwjun的 [双网关按源地址动态稳固分流]
bow在 [关于ros限速] 中的回答

做了一个自已的路由routeros2.9.27，忘了说，路由也是打置顶贴子里下载的，感谢loverouter感谢routerclub.con感谢CCTV
路由也按照我的设想实现了:

1.识别接入IP并分配相应网关   192.168.1.146-147 to 192.168.111.1  ; 192.168.1.148-149 to 192.168.222.1
2.模拟静态SRC NAT转发
3.识别网关通路并动态切换网关并修改SRC NAT地址源
4.针对IP地址集合进行不同要求限速

但我在使用当中发现线路切换&3后http访问正常但部分软件就会掉线，例如ping(icmp)，看以前的贴子QQ也会掉，所以想请教具体原因及解决方法
同时线路切换后我将当前的icmp连接清除后ping会恢复正常，QQ没条件测试
若我想在线路切换的同时删除icmp或某个特征连接，脚本应如何写？
再，假设以上脚本可行，如何识别只删除切换了网关的接入IP icmp连接(路由标识或连接标记+当前协议？)

按以下配置:
网关192.168.222.1掉线后
192.168.1.146 ping(icmp) www.163.com gateway 192.168.111.1 保留
192.168.1.168 ping(icmp) www.163.com gateway 192.168.222.1 删除

再问wwjun的 [双网关按源地址动态稳固分流]中通过nth来分辨新连接的奇偶，具体算法是什么？passthrough的作用又是什么？

最后请教ROS使用了大量脚本对性能有多大影响？较高配置（2.0+/1G/ATA）能否抵消这些影响？


以下是我路由的配置
RouterOS 2.9.27

1. 
   
2. 
   
3. / interface ethernet
   
4. set ether1 name="ether1_LAN"
   
5. set ether2 name="ether2_WAN1"
   
6. set ether3 name="ether3_WAN2"
   
7. 
   
8. / ip address
   
9. add address=192.168.1.254/24 network=192.168.1.0 broadcast=192.168.1.255 \
   
10.     interface=ether1_LAN comment="LAN" disabled=no
    
11. add address=192.168.111.110/24 network=192.168.111.0 broadcast=192.168.111.255 \
    
12.     interface=ether2_WAN1 comment="WAN1" disabled=no
    
13. add address=192.168.222.110/24 network=192.168.222.0 broadcast=192.168.222.255 \
    
14.     interface=ether3_WAN2 comment="WAN2" disabled=no
    
15. 
    
16. / ip firewall mangle
    
17. add chain=prerouting src-address=192.168.1.146/31 action=mark-routing \
    
18.     new-routing-mark=10 passthrough=yes comment="" disabled=no
    
19. add chain=prerouting src-address=192.168.1.148/31 action=mark-routing \
    
20.     new-routing-mark=20 passthrough=yes comment="" disabled=no
    
21. 
    
22. / ip firewall nat
    
23. add chain=srcnat routing-mark=10 action=src-nat to-addresses=192.168.111.110 \
    
24.     to-ports=0-65535 comment="wan1" disabled=no
    
25. add chain=srcnat routing-mark=20 action=src-nat to-addresses=192.168.111.110 \
    
26.     to-ports=0-65535 comment="wan2" disabled=no
    
27. 
    
28. / ip route
    
29. add dst-address=0.0.0.0/0 gateway=192.168.111.1 scope=255 target-scope=10 \
    
30.     routing-mark=10 comment="wan1" disabled=no
    
31. add dst-address=0.0.0.0/0 gateway=192.168.111.1 scope=255 target-scope=10 \
    
32.     routing-mark=20 comment="wan2" disabled=no
    
33. 
    
34. / system script
    
35. add name="wan1up" source="/ip route set wan1 gateway=192.168.111.1 \n/ip fir nat set wan1  to-
    
36. addresses=192.168.111.110" \
    
37.     policy=ftp,reboot,read,write,policy,test,winbox,password
    
38. add name="wan1down" source="/ip route set wan1 gateway=192.168.222.1 \n/ip fir nat set wan1  to-
    
39. addresses=192.168.222.110" \
    
40.     policy=ftp,reboot,read,write,policy,test,winbox,password
    
41. add name="wan2up" source="/ip route set wan2 gateway=192.168.222.1 \n/ip fir nat set wan2  to-
    
42. addresses=192.168.222.110" \
    
43.     policy=ftp,reboot,read,write,policy,test,winbox,password
    
44. add name="wan2down" source="/ip route set wan2 gateway=192.168.111.1 \n/ip fir nat set wan2  to-
    
45. addresses=192.168.111.110" \
    
46.     policy=ftp,reboot,read,write,policy,test,winbox,password
    
47. 
    
48. / tool netwatch
    
49. add host=192.168.111.1 timeout=30ms interval=1s up-script=wan1up \
    
50.     down-script=wan1down comment="" disabled=no
    
51. add host=192.168.222.1 timeout=30ms interval=1s up-script=wan2up \
    
52.     down-script=wan2down comment="" disabled=no
    
53. 
    
54. / queue simple
    
55. add name="queueA" target-addresses=192.168.1.146/32,192.168.1.147/32 \
    
56.     dst-address=0.0.0.0/0 interface=all parent=none direction=both priority=8 \
    
57.     queue=default-small/default-small limit-at=0/0 max-limit=64000/200000 \
    
58.     burst-limit=128000/400000 burst-threshold=64000/180000 burst-time=3s/10s \
    
59.     total-queue=default-small time=0s-1d,sun,mon,tue,wed,thu,fri,sat \
    
60.     disabled=no
    
61. add name="queueB" target-addresses=192.168.1.148/32,192.168.1.149/32 \
    
62.     dst-address=0.0.0.0/0 interface=all parent=none direction=both priority=8 \
    
63.     queue=default-small/default-small limit-at=0/0 max-limit=128000/256000 \
    
64.     burst-limit=256000/512000 burst-threshold=100000/200000 burst-time=3s/10s \
    
65.     total-queue=default-small time=0s-1d,sun,mon,tue,wed,thu,fri,sat \
    
66.     disabled=yes
    
67. 
    

复制代码

everest79

如果我修改/route与/system script两个地方的代码不知是否可行

/ ip route
add dst-address=0.0.0.0/0 gateway=192.168.111.1;192.168.222.1 scope=255 target-scope=10 \
    comment="wan" disabled=no

/ system script
add name="wan1up" source="/ip fir nat set wan1  to-
addresses=192.168.111.110" \
    policy=ftp,reboot,read,write,policy,test,winbox,password
add name="wan1down" source="/ip fir nat set wan1  to-
addresses=192.168.222.110" \
    policy=ftp,reboot,read,write,policy,test,winbox,password
add name="wan2up" source="/ip fir nat set wan2  to-
addresses=192.168.222.110" \
    policy=ftp,reboot,read,write,policy,test,winbox,password
add name="wan2down" source="/ip fir nat set wan2  to-
addresses=192.168.111.110" \
    policy=ftp,reboot,read,write,policy,test,winbox,password

[ 本帖最后由 everest79 于 2007-1-21 19:43 编辑 ]

everest79

各位老大，回贴呀，我这等着类

everest79

两动态ip+1静态ip 3网关分流+自动切换

1. 
   
2. / interface ethernet
   
3. set ether1 name="ether1_LAN"
   
4. set ether2 name="ether2_WAN1"
   
5. set ether3 name="ether3_WAN2"
   
6. set ether4 name="ether4_WAN3"
   
7. 
   
8. / interface pppoe-client
   
9. add name="pppoe-out1" max-mtu=1480 max-mru=1480 interface=ether2_WAN1 \
   
10.     user="adsl01" password="123456" profile=default service-name="" ac-name="" \
    
11.     add-default-route=no dial-on-demand=no use-peer-dns=yes \
    
12.     allow=pap,chap,mschap1,mschap2 disabled=no
    
13. add name="pppoe-out2" max-mtu=1480 max-mru=1480 interface=ether3_WAN2 \
    
14.     user="adsl02" password="654321" profile=default service-name="" ac-name="" \
    
15.     add-default-route=no dial-on-demand=no use-peer-dns=yes \
    
16.     allow=pap,chap,mschap1,mschap2 disabled=yes
    
17. 
    
18. 
    
19. / ip address
    
20. add address=192.168.1.254/24 network=192.168.1.0 broadcast=192.168.1.255 \
    
21.     interface=ether1_LAN comment="added by setup" disabled=no
    
22. add address=15.12.11.1/32 network=15.12.11.1 broadcast=15.12.11.1 \
    
23.     interface=ether3_WAN2 comment="" disabled=yes
    
24. add address=15.12.11.2/24 network=15.12.11.0 broadcast=15.12.11.255 \
    
25.     interface=ether1_LAN comment="wan" disabled=no
    
26. 
    
27. / ip route
    
28. add dst-address=0.0.0.0/0 gateway=192.168.100.186 scope=255 target-scope=10 \
    
29.     routing-mark=10 comment="wan1" disabled=no
    
30. add dst-address=0.0.0.0/0 gateway=192.168.100.186 scope=255 target-scope=10 \
    
31.     routing-mark=20 comment="wan2" disabled=no
    
32. add dst-address=0.0.0.0/0 gateway=192.168.100.186 scope=255 target-scope=10 \
    
33.     routing-mark=30 comment="wan3" disabled=no
    
34. / ip firewall mangle
    
35. add chain=prerouting src-address=192.168.1.146/31 action=mark-routing \
    
36.     new-routing-mark=10 passthrough=yes comment="wan1" disabled=no
    
37. add chain=prerouting src-address=192.168.1.148/31 action=mark-routing \
    
38.     new-routing-mark=20 passthrough=yes comment="wan2" disabled=no
    
39. add chain=prerouting src-address=192.168.1.150/31 action=mark-routing \
    
40.     new-routing-mark=30 passthrough=yes comment="wan3" disabled=no
    
41. / ip firewall nat
    
42. add chain=srcnat routing-mark=10 action=src-nat to-addresses=192.168.100.184 \
    
43.     to-ports=0-65535 comment="wan1" disabled=no
    
44. add chain=srcnat routing-mark=20 action=src-nat to-addresses=192.168.100.184 \
    
45.     to-ports=0-65535 comment="wan2" disabled=no
    
46. add chain=srcnat routing-mark=30 action=src-nat to-addresses=192.168.100.184 \
    
47.     to-ports=0-65535 comment="wan3" disabled=no
    
48. 
    
49. 
    
50. / system script
    
51. \n/ip firewall nat set \="/ip route set wan1 gateway=\$wan1
    
52. \n/system scheduler dis wan1stat" \
    
53.     policy=ftp,reboot,read,write,policy,test,winbox,password
    
54. \n:if \(\[/tool \2" source=":set chw1 \$wan2
    
55. \n:if \(\[/tool netwatch get wan3 \) do={
    
56. \n:set chw1 \$src3} else={
    
57. \n/ip route set \disable wan1}
    
58. \n/ip \ip route find dst-address=0.0.0.0/0 gateway=\$wan1\] gateway=\$chw1
    
59.     firewall nat set \[/ip firewall nat find action=src-nat to-addresses=\$src1\] \
    
60. \n/system scheduler enable wan1stat" \
    
61.     policy=ftp,reboot,read,write,policy,test,winbox,password
    
62. \n/ip firewall nat set \="/ip route set wan2 gateway=\$wan2
    
63. \n/system scheduler dis wan2stat" \
    
64.     policy=ftp,reboot,read,write,policy,test,winbox,password
    
65. \n:if \(\[/tool \3" source=":set chw2 \$wan3
    
66. \n:if \(\[/tool netwatch get wan1 \) do={
    
67. \n:set chw2 \$src1} else={
    
68. \n/ip route set \disable wan2}
    
69. \n/ip \ip route find dst-address=0.0.0.0/0 gateway=\$wan2\] gateway=\$chw2
    
70.     firewall nat set \[/ip firewall nat find action=src-nat to-addresses=\$src2\] \
    
71. \n/system scheduler enable wan2stat" \
    
72.     policy=ftp,reboot,read,write,policy,test,winbox,password
    
73. \n/ip firewall nat set \="/ip route set wan3 gateway=\$wan3
    
74. \n/system scheduler disable wan3stat" \
    
75.     policy=ftp,reboot,read,write,policy,test,winbox,password
    
76. \n:if \(\[/tool \1" source=":set chw3 \$wan1
    
77. \n:if \(\[/tool netwatch get wan2 \) do={
    
78. \n:set chw3 \$src2} else={
    
79. \n/ip route set \[/ip route find \
    
80. \n/ip firewall nat set \0 gateway=\$wan3\] gateway=\$chw3
    
81.     \[/ip firewall nat find action=src-nat to-addresses=\$src3\] \
    
82. \n/system scheduler enable wan3stat" \
    
83.     policy=ftp,reboot,read,write,policy,test,winbox,password
    
84. \n:global src3 \n" source=":global wan3 15.12.11.1
    
85. \n:global wan2 \one0.0.1
    
86. \n:global src1 \one
    
87. \n:global chs2 \55.0.0.1
    
88. \n:global \pp2 none
    
89. \n/tool netwatch disable \
    
90. \n/tool netwatch set wan3 host=\$wan3 \
    
91. \n/system scheduler enable \an1stat
    
92. \n" \stem scheduler enable wan3stat
    
93.     policy=ftp,reboot,read,write,policy,test,winbox,password
    
94. add name="wan1stat" source="/interface pppoe-client monitor pppoe-out1 once \
    
95. \n:set wan1 \[/ip \nnected"\) do={
    
96. \n:set src1 \et \[/ip address find interface=pppoe-out1\] network\]
    
97. \n/tool \ route get \[/ip route find dst-address=\$wan1\] pref-src\]
    
98. \n/tool \10h set wan1 host=\$wan1 disabled=no
    
99.     netwatch enable wan1}" \
    
100.     policy=ftp,reboot,read,write,policy,test,winbox,password
     
101. add name="wan2stat" source="/interface pppoe-client monitor pppoe-out2 once \
     
102. \n:set wan2 \[/ip \nnected"\) do={
     
103. \n:set src2 \et \[/ip address find interface=pppoe-out2\] network\]
     
104. \n/tool \ route get \[/ip route find dst-address=\$wan2\] pref-src\]
     
105. \n/tool \10h set wan2 host=\$wan2 disabled=no
     
106.     netwatch enable wan2}" \
     
107.     policy=ftp,reboot,read,write,policy,test,winbox,password
     
108. \n:if \(\[/tool netwatch get wan1 \pc 0
     
109. \n:if \(\[/tool netwatch get wan2 \$tmpc+1\)}
     
110. \n/tool \$tmpc>0\) do={set tmpc \(\$tmpc+1\)}
     
111. \n}" \ay 20h enable wan3
     
112.     policy=ftp,reboot,read,write,policy,test,winbox,password
     
113. add name="local886" source=":set ppp2 \$status" \
     
114.     policy=ftp,reboot,read,write,policy,test,winbox,password
     
115. 
     
116. 
     
117. / system scheduler
     
118. add name="startup" on-event=autorun start-time=startup interval=0s \
     
119.     comment="autorun" disabled=no
     
120. add name="startup1" on-event=wan1stat start-time=startup interval=0s comment="" \
     
121.     disabled=no
     
122. add name="startup2" on-event=wan2stat start-time=startup interval=0s comment="" \
     
123.     disabled=no
     
124. add name="wan1stat" on-event=wan1stat start-date=jan/01/1970 start-time=00:00:00 \
     
125.     interval=10s comment="wan1stat" disabled=yes
     
126. add name="wan2stat" on-event=wan2stat start-date=jan/01/1970 start-time=00:00:00 \
     
127.     interval=10s comment="wan2stat" disabled=no
     
128. add name="wan3stat" on-event=wan3stat start-date=jan/01/1970 start-time=00:00:00 \
     
129.     interval=20s comment="wan3stat" disabled=no
     
130. 
     
131. 
     
132. / queue simple
     
133. add name="queueA" target-addresses=192.168.1.146/32,192.168.1.147/32 \
     
134.     dst-address=0.0.0.0/0 interface=all parent=none direction=both priority=8 \
     
135.     queue=default-small/default-small limit-at=0/0 max-limit=64000/200000 \
     
136.     burst-limit=128000/400000 burst-threshold=64000/180000 burst-time=3s/10s \
     
137.     total-queue=default-small time=0s-1d,sun,mon,tue,wed,thu,fri,sat disabled=yes
     
138. add name="queueB" target-addresses=192.168.1.148/32,192.168.1.149/32 \
     
139.     dst-address=0.0.0.0/0 interface=all parent=none direction=both priority=8 \
     
140.     queue=default-small/default-small limit-at=0/0 max-limit=128000/256000 \
     
141.     burst-limit=256000/512000 burst-threshold=100000/200000 burst-time=3s/10s \
     
142.     total-queue=default-small time=0s-1d,sun,mon,tue,wed,thu,fri,sat disabled=no
     
143. add name="queueC" target-addresses=192.168.1.150/32,192.168.1.151/32 \
     
144.     dst-address=0.0.0.0/0 interface=all parent=none direction=both priority=8 \
     
145.     queue=default-small/default-small limit-at=0/0 max-limit=128000/256000 \
     
146.     burst-limit=256000/512000 burst-threshold=100000/200000 burst-time=3s/10s \
     
147.     total-queue=default-small time=0s-1d,sun,mon,tue,wed,thu,fri,sat disabled=yes
     
148. 
     
149. 
     
150. / tool netwatch
     
151. add host=192.168.100.186 timeout=30ms interval=1s up-script=wan1up \
     
152.     down-script=wan1down comment="wan1" disabled=no
     
153. add host=192.168.100.188 timeout=30ms interval=1s up-script=wan2up \
     
154.     down-script=wan2down comment="wan2" disabled=no
     
155. add host=15.12.11.1 timeout=30ms interval=1s up-script=wan3up down-script=wan3down \
     
156.     comment="wan3" disabled=no
     

复制代码

ssffzz1

因为ICMP不使用重传机制,这样一旦丢包就发现了.而别的协议也丢包,但有重传机制,所以就看不出来,你可以抓包看看.

everest79

谢谢ssffzz1的回答