|
马上注册,结交更多好友,享用更多功能,让你轻松玩转社区。
您需要 登录 才可以下载或查看,没有账号?注册
×
本帖最后由 csj1314 于 2010-9-19 11:39 编辑
12点半后 断光钎 策略切换到 ADSL NTH 负载
经常发生一些非常奇怪的问题 有时候只有一条有流量
光钎跟NTH 都在同一台ros上...
/ip route
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
219.129.168.xxx scope=30 target-scope=10
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
192.168.1.1 routing-mark=NTH_01 scope=30 target-scope=10
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
192.168.2.1 routing-mark=NTH_02 scope=30 target-scope=10
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
218.15.127.xxx routing-mark=NTH_04 scope=30 target-scope=10
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
192.168.3.1 routing-mark=NTH_03 scope=30 target-scope=10
add check-gateway=arp comment=check disabled=no distance=1 dst-address=\
172.172.172.172/32 gateway=219.129.168.xxx scope=30 target-scope=10
----------------------------------------------------------------------------
----------------------------------------------------------------------------
/ip firewall nat
add action=masquerade chain=srcnat comment="" connection-mark=NTH_01 \
disabled=no out-interface=tel:8817918
add action=masquerade chain=srcnat comment="" connection-mark=NTH_02 \
disabled=no out-interface=tel:8817023
add action=masquerade chain=srcnat comment="" disabled=no out-interface=\
tel:8817013
add action=masquerade chain=srcnat comment="" disabled=no out-interface=6M
add action=masquerade chain=srcnat comment="" disabled=no src-address=\
10.1.1.0/24
----------------------------------------------------------------------------
----------------------------------------------------------------------------
/ip firewall mangle
add action=change-mss chain=forward comment="" disabled=no new-mss=1400 \
protocol=tcp src-address=10.1.1.0/24 tcp-flags=syn
add action=change-mss chain=forward comment="" disabled=yes in-interface=\
tel:8817023 new-mss=1440 protocol=tcp tcp-flags=syn tcp-mss=1441-65535
add action=change-mss chain=forward comment="" disabled=yes new-mss=1440 \
out-interface=tel:8817023 protocol=tcp tcp-flags=syn tcp-mss=1441-65535
add action=change-mss chain=forward comment="" disabled=yes in-interface=\
tel:8817918 new-mss=1440 protocol=tcp tcp-flags=syn tcp-mss=1441-65535
add action=change-mss chain=forward comment="" disabled=yes new-mss=1440 \
out-interface=tel:8817918 protocol=tcp tcp-flags=syn tcp-mss=1441-65535
add action=change-mss chain=forward comment="" disabled=yes in-interface=wan \
new-mss=1452 protocol=tcp tcp-flags=syn
add action=change-mss chain=forward comment="" disabled=yes new-mss=1452 \
out-interface=wan protocol=tcp tcp-flags=syn
add action=mark-connection chain=prerouting comment=NTH connection-state=new \
disabled=yes new-connection-mark=NTH_01 nth=4,1 passthrough=yes \
src-address=10.1.1.0/24
add action=mark-routing chain=prerouting comment=NTH connection-mark=NTH_01 \
disabled=yes new-routing-mark=NTH_01 passthrough=no src-address=\
10.1.1.0/24
add action=mark-connection chain=prerouting comment=NTH connection-state=new \
disabled=yes new-connection-mark=NTH_02 nth=3,1 passthrough=yes \
src-address=10.1.1.0/24
add action=mark-routing chain=prerouting comment=NTH connection-mark=NTH_02 \
disabled=yes new-routing-mark=NTH_02 passthrough=no src-address=\
10.1.1.0/24
add action=mark-connection chain=prerouting comment=NTH connection-state=new \
disabled=yes new-connection-mark=NTH_03 nth=2,1 passthrough=yes \
src-address=10.1.1.0/24
add action=mark-routing chain=prerouting comment=NTH connection-mark=NTH_03 \
disabled=yes new-routing-mark=NTH_03 passthrough=no src-address=\
10.1.1.0/24
add action=mark-connection chain=prerouting comment=NTH connection-state=new \
disabled=yes new-connection-mark=NTH_04 nth=1,1 passthrough=yes \
src-address=10.1.1.0/24
add action=mark-routing chain=prerouting comment=NTH connection-mark=NTH_04 \
disabled=yes new-routing-mark=NTH_04 passthrough=no src-address=\
10.1.1.0/24 |
|