ho installato in aeroporto una mikrotik crs109 per gestire 4 connessioni internet con load balancing e 2 rete locali ma con scarsi risultati.
vi posto lo script che ho eseguito
- Codice: Seleziona tutto
/ip address
add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=local
add address=192.168.1.2/24 network=192.168.1.0 broadcast=192.168.1.255 interface=telecom1
add address=192.168.13.2/24 network=192.168.13.0 broadcast=192.168.13.255 interface=fastweb
add address=192.168.4.2/24 network=192.168.4.0 broadcast=192.168.4.255 interface=wiland
add address=192.168.14.2/24 network=192.168.14.0 broadcast=192.168.14.255 interface=telecom2
/ip firewall mangle
add chain=input in-interface=telecom1 action=mark-connection new-connection-mark=telecom1_conn
add chain=input in-interface=fastweb action=mark-connection new-connection-mark=fastweb_conn
add chain=input in-interface=wiland action=mark-connection new-connection-mark=wiland_conn
add chain=input in-interface=telecom2 action=mark-connection new-connection-mark=telecom2_conn
add chain=output connection-mark=telecom1_conn action=mark-routing new-routing-mark=to_telecom1
add chain=output connection-mark=fastweb_conn action=mark-routing new-routing-mark=to_fastweb
add chain=output connection-mark=wiland_conn action=mark-routing new-routing-mark=to_wiland
add chain=output connection-mark=telecom2_conn action=mark-routing new-routing-mark=to_telecom2
add chain=prerouting dst-address=192.168.1.0/24 action=accept in-interface=local
add chain=prerouting dst-address=192.168.13.0/24 action=accept in-interface=local
add chain=prerouting dst-address=192.168.4.0/24 action=accept in-interface=local
add chain=prerouting dst-address=192.168.14.0/24 action=accept in-interface=local
add chain=prerouting dst-address-type=!local in-interface=local per-connection-classifier=both-addresses-and-ports:4/0 action=mark-connection new-connection-mark=telecom1_conn passthrough=yes
add chain=prerouting dst-address-type=!local in-interface=local per-connection-classifier=both-addresses-and-ports:4/1 action=mark-connection new-connection-mark=fastweb_conn passthrough=yes
add chain=prerouting dst-address-type=!local in-interface=local per-connection-classifier=both-addresses-and-ports:4/2 action=mark-connection new-connection-mark=wiland_conn passthrough=yes
add chain=prerouting dst-address-type=!local in-interface=local per-connection-classifier=both-addresses-and-ports:4/3 action=mark-connection new-connection-mark=telecom2_conn passthrough=yes
add chain=prerouting connection-mark=telecom1_conn in-interface=local action=mark-routing new-routing-mark=to_telecom1
add chain=prerouting connection-mark=fastweb_conn in-interface=local action=mark-routing new-routing-mark=to_fastweb
add chain=prerouting connection-mark=wiland_conn in-interface=local action=mark-routing new-routing-mark=to_wiland
add chain=prerouting connection-mark=telecom2_conn in-interface=local action=mark-routing new-routing-mark=to_telecom2
/ip route
add dst-address=0.0.0.0/0 gateway=192.168.1.1 routing-mark=to_telecom1 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.13.1 routing-mark=to_fastweb check-gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.4.1 routing-mark=to_wiland check-gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.14.1 routing-mark=to_telecom2 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.1.1 distance=1 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.13.1 distance=2 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.4.1 distance=3 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.14.1 distance=4 check-gateway=ping
/ip firewall nat
add chain=srcnat out-interface=telecom1 action=masquerade
add chain=srcnat out-interface=fastweb action=masquerade
add chain=srcnat out-interface=wiland action=masquerade
add chain=srcnat out-interface=telecom2 action=masquerade
da aggiungere per seconda rete
/ip address
add address=192.168.5.1/24 network=192.168.5.0 broadcast=192.168.5.255 interface=manutenzione
/ip firewall mangle
add chain=prerouting dst-address=192.168.1.0/24 action=accept in-interface=manutenzione
add chain=prerouting dst-address=192.168.13.0/24 action=accept in-interface=manutenzione
add chain=prerouting dst-address=192.168.4.0/24 action=accept in-interface=manutenzione
add chain=prerouting dst-address=192.168.14.0/24 action=accept in-interface=manutenzione
add chain=prerouting dst-address-type=!local in-interface=manutenzione per-connection-classifier=both-addresses-and-ports:4/0 action=mark-connection new-connection-mark=telecom1_conn passthrough=yes
add chain=prerouting dst-address-type=!local in-interface=manutenzione per-connection-classifier=both-addresses-and-ports:4/1 action=mark-connection new-connection-mark=fastweb_conn passthrough=yes
add chain=prerouting dst-address-type=!local in-interface=manutenzione per-connection-classifier=both-addresses-and-ports:4/2 action=mark-connection new-connection-mark=wiland_conn passthrough=yes
add chain=prerouting dst-address-type=!local in-interface=manutenzione per-connection-classifier=both-addresses-and-ports:4/3 action=mark-connection new-connection-mark=telecom2_conn passthrough=yes
add chain=prerouting connection-mark=telecom1_conn in-interface=manutenzione action=mark-routing new-routing-mark=to_telecom1
add chain=prerouting connection-mark=fastweb_conn in-interface=manutenzione action=mark-routing new-routing-mark=to_fastweb
add chain=prerouting connection-mark=wiland_conn in-interface=manutenzione action=mark-routing new-routing-mark=to_wiland
add chain=prerouting connection-mark=telecom2_conn in-interface=manutenzione action=mark-routing new-routing-mark=to_telecom2
- Codice: Seleziona tutto
ma noto che le connessioni non vanno tutte e quattro ho meglio non vengono bilanciate partono sempre una per volta.
nei vari tentativi che ho fatto vedo che alcune volte parto 2 connessioni assieme ma raramente.
dove ho sbagliato?
