2 WAN + PPPOE SERVER

[rosario]

Salve a tutti, vorrei dividere le connessioni sulle due WAN da me disponibili. Vorrei far uscire gli indirizzi .100.x verso la WAN 1 e gli indirizzi .200.x verso la WAN 2. Gli utenti si collegano alla board mediante PPPOE. Il mark dei pacchetti sembra funzionare. Allego la configurazione. Grazie

Codice: Seleziona tutto

/interface ethernet
set [ find default-name=ether1 ] name=WAN1
set [ find default-name=ether3 ] name=WAN2
/ip pool
add name=pool1 ranges=192.168.100.2-192.168.100.200
add name=pool2 ranges=192.168.101.2-192.168.101.200
add name=pool3 ranges=192.168.200.2-192.168.200.200
add name=pool4 ranges=192.168.201.2-192.168.201.200
/ppp profile
set *0 local-address=pool3 remote-address=pool4
/interface pppoe-server server
add disabled=no interface=ether2 service-name=service1
/interface pptp-server server
set enabled=yes
/ip address
add address=10.10.21.115/24 comment="IP WAN1" interface=WAN1 network=10.10.21.0
add address=192.168.43.79/24 comment="IP WAN2" disabled=yes interface=WAN2 \
    network=192.168.43.0
add address=192.168.3.1/24 comment=LAN interface=ether2 network=192.168.3.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface=WAN2
/ip dns
set servers=8.8.4.4
/ip firewall mangle
add action=mark-connection chain=prerouting new-connection-mark=WAN1_conn \
    passthrough=yes src-address=192.168.101.0/24
add action=mark-connection chain=prerouting new-connection-mark=WAN2_conn \
    passthrough=yes src-address=192.168.201.0/24
add action=mark-routing chain=prerouting connection-mark=WAN1_conn \
    new-routing-mark=to_WAN1
add action=mark-routing chain=prerouting connection-mark=WAN2_conn \
    new-routing-mark=to_WAN2
/ip firewall nat
add action=masquerade chain=srcnat out-interface=WAN1
add action=masquerade chain=srcnat out-interface=WAN2
/ip route
add check-gateway=ping distance=1 gateway=WAN1 routing-mark=to_WAN1
add check-gateway=ping distance=1 gateway=WAN2 routing-mark=to_WAN2




[rosario]

Ping da pc verso Google non funzionante.

[ppraz]

/ip firewall mangle
add action=mark-connection chain=prerouting new-connection-mark=WAN1_conn \
passthrough=yes src-address=192.168.101.0/24
add action=mark-connection chain=prerouting new-connection-mark=WAN2_conn \
passthrough=yes src-address=192.168.201.0/24
add action=mark-routing chain=prerouting connection-mark=WAN1_conn \
new-routing-mark=to_WAN1
add action=mark-routing chain=prerouting connection-mark=WAN2_conn \
new-routing-mark=to_WAN2

Hai usato un doppio mangle, secondo me non funziona
Non usare le "mark-connection" ma solo le mark routing, io farei così:

Codice: Seleziona tutto

/ip firewall mangle
add action=mark-routing chain=prerouting src-address=192.168.101.0/24 \
    new-routing-mark=to_WAN1
add action=mark-routing chain=prerouting src-address=192.168.201.0/24 \
    new-routing-mark=to_WAN2


[abbio90]

seguo anche io