|
楼主 |
发表于 2005-1-5 22:56:38
|
显示全部楼层
配置是奔腾233, 128M内存,双realteak8139c网卡,网络为固定ip接入网关为192.168.6.65,dns为192.168.100.18,外网网卡ip为192.168.6.100,内网ip为192.168.8.1,内网的其它ip为192.168.8.xrouteros为2.8.18,具体配置如下/ interface ethernet set out name="out" mtu=1500 arp=enabled disable-running-check=yes \ auto-negotiation=yes full-duplex=yes long-cable=no speed=100Mbps \ disabled=no set in name="in" mtu=1500 arp=reply-only disable-running-check=yes \ auto-negotiation=yes full-duplex=yes long-cable=no speed=100Mbps \ disabled=no / ip upnp set enabled=yes / ip upnp interfaces add interface=in type=internal disabled=no add interface=out type=external disabled=no / ip dns set primary-dns=192.168.6.65 allow-remote-requests=yes cache-size="2048 kB" cache-max-ttl=7d / ip firewall set input name="input" policy=accept comment="" set forward name="forward" policy=accept comment="" set output name="output" policy=accept comment="" / ip firewall rule input add protocol=icmp action=drop comment="" disabled=no / ip firewall mangle add protocol=tcp tcp-options=syn-only action=accept tcp-mss=1400 \ comment="" disabled=no / ip firewall src-nat add src-address=192.168.8.0/24 action=masquerade comment="" \ disabled=no / ip address add address=192.168.8.1/24 network=192.168.8.0 \ broadcast=192.168.8.255 interface=in comment="added by setup" \ disabled=no add address=192.168.6.100/24 network=192.168.6.0 \ broadcast=192.168.6.255 interface=out comment="" disabled=no / ip policy-routing / ip policy-routing rule add src-address=0.0.0.0/0 dst-address=0.0.0.0/0 flow="" \ interface=all action=lookup table=main comment="" disabled=no / ip policy-routing table main add dst-address=0.0.0.0/0 gateway=192.168.6.65 \ preferred-source=0.0.0.0 comment="" disabled=no / ip route add dst-address=0.0.0.0/0 preferred-source=0.0.0.0 \ gateway=192.168.6.65 distance=1 comment="" disabled=no / system script add name="start_limit" source="/queue simple enable \[/queue simple \ find\]" policy=ftp,read,write,policy,test add name="stop_limit" source="/queue simple disable \[/queue simple \ find\]" policy=ftp,read,write,policy,test add name="512000" source="/queue simple set \[/queue simple find\] \\n" policy=ftp,read,write,policy,test add name="256000" source="/queue simple set \[/queue simple find\] \\n" policy=ftp,read,write,policy,test / system scheduler add name="stop" on-event=stop_limit start-date=jan/02/2005 \ start-time=23:59:00 interval=1d comment="" disabled=no add name="start" on-event=start_limit start-date=jan/02/2005 \ start-time=07:00:00 interval=1d comment="" disabled=no / queue simple add name="192.168.8.2" target-address=0.0.0.0/0 \ dst-address=192.168.8.2/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.3" target-address=0.0.0.0/0 \ dst-address=192.168.8.3/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.4" target-address=0.0.0.0/0 \ dst-address=192.168.8.4/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.5" target-address=0.0.0.0/0 \ dst-address=192.168.8.5/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.6" target-address=0.0.0.0/0 \ dst-address=192.168.8.6/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.7" target-address=0.0.0.0/0 \ dst-address=192.168.8.7/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.8" target-address=0.0.0.0/0 \ dst-address=192.168.8.8/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.9" target-address=0.0.0.0/0 \ dst-address=192.168.8.9/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.10" target-address=0.0.0.0/0 \ dst-address=192.168.8.10/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.11" target-address=0.0.0.0/0 \ dst-address=192.168.8.11/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.12" target-address=0.0.0.0/0 \ dst-address=192.168.8.12/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.13" target-address=0.0.0.0/0 \ dst-address=192.168.8.13/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.14" target-address=0.0.0.0/0 \ dst-address=192.168.8.14/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.15" target-address=0.0.0.0/0 \ dst-address=192.168.8.15/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.16" target-address=0.0.0.0/0 \ dst-address=192.168.8.16/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.17" target-address=0.0.0.0/0 \ dst-address=192.168.8.17/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.18" target-address=0.0.0.0/0 \ dst-address=192.168.8.18/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.19" target-address=0.0.0.0/0 \ dst-address=192.168.8.19/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.20" target-address=0.0.0.0/0 \ dst-address=192.168.8.20/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.21" target-address=0.0.0.0/0 \ dst-address=192.168.8.21/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.22" target-address=0.0.0.0/0 \ dst-address=192.168.8.22/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.23" target-address=0.0.0.0/0 \ dst-address=192.168.8.23/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.24" target-address=0.0.0.0/0 \ dst-address=192.168.8.24/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.25" target-address=0.0.0.0/0 \ dst-address=192.168.8.25/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.26" target-address=0.0.0.0/0 \ dst-address=192.168.8.26/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.27" target-address=0.0.0.0/0 \ dst-address=192.168.8.27/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.28" target-address=0.0.0.0/0 \ dst-address=192.168.8.28/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.29" target-address=0.0.0.0/0 \ dst-address=192.168.8.29/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.30" target-address=0.0.0.0/0 \ dst-address=192.168.8.30/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.31" target-address=0.0.0.0/0 \ dst-address=192.168.8.31/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.32" target-address=0.0.0.0/0 \ dst-address=192.168.8.32/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no add name="192.168.8.45" target-address=0.0.0.0/0 \ dst-address=192.168.8.45/32 interface=out queue=default \ priority=8 limit-at=100000/100000 max-limit=512000/512000 \ disabled=no |
|