da Tony81 » mer 30 nov 2022, 20:35
Salve sto cercando di configurare un failover con wan di backup ma nn riesco a risolvere, se potete controllare la mia configurazione
- Codice: Seleziona tutto
/interface bridge
add name=bridge1
/routing table
add fib name=to_ISP1
add fib name=to_ISP2
/interface bridge port
add bridge=bridge1 ingress-filtering=no interface=ether3
add bridge=bridge1 ingress-filtering=no interface=ether4
add bridge=bridge1 ingress-filtering=no interface=ether5
/ip address
add address=192.168.1.1/24 interface=bridge1 network=192.168.1.0
add address=192.168.2.6/24 interface=ether1 network=192.168.2.0
add address=192.168.3.6/24 interface=ether2 network=192.168.3.0
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip firewall mangle
add action=mark-connection chain=output connection-mark=no-mark \
connection-state=new new-connection-mark=ISP1_conn out-interface=ether1
add action=mark-routing chain=output connection-mark=ISP1_conn \
new-routing-mark=to_ISP1 out-interface=ether1
add action=mark-connection chain=output connection-mark=no-mark \
connection-state=new new-connection-mark=ISP2_conn out-interface=ether2
add action=mark-routing chain=output connection-mark=ISP2_conn \
new-routing-mark=to_ISP2 out-interface=ether2
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
add action=masquerade chain=srcnat out-interface=ether2
/ip route
add dst-address=8.8.8.8 gateway=192.168.2.19 scope=10
add dst-address=8.8.4.4 gateway=192.168.3.17 scope=10
add check-gateway=ping distance=1 gateway=8.8.8.8 routing-table=to_ISP1 \
target-scope=11
add check-gateway=ping distance=2 gateway=8.8.4.4 routing-table=to_ISP1 \
target-scope=11
add check-gateway=ping distance=1 gateway=8.8.4.4 routing-table=to_ISP2 \
target-scope=11
add check-gateway=ping distance=2 gateway=8.8.8.8 routing-table=to_ISP2 \
target-scope=11
add dst-address=8.8.8.8 gateway=192.168.2.19 scope=10
add dst-address=208.67.222.222 gateway=192.168.2.19 scope=10
add dst-address=8.8.4.4 gateway=192.168.3.17 scope=10
add dst-address=208.67.220.220 gateway=192.168.3.17 scope=10
add check-gateway=ping dst-address=10.100.10.1 gateway=8.8.8.8 scope=10 \
target-scope=11
add check-gateway=ping dst-address=10.100.10.1 gateway=208.67.222.222 scope=\
10 target-scope=11
add check-gateway=ping dst-address=10.200.20.2 gateway=8.8.4.4 scope=10 \
target-scope=11
add check-gateway=ping dst-address=10.200.20.2 gateway=208.67.220.220 scope=\
10 target-scope=11
add distance=1 gateway=10.100.10.1 routing-table=to_ISP1 target-scope=12
add distance=2 gateway=10.200.20.2 routing-table=to_ISP1 target-scope=12
add distance=1 gateway=10.200.20.2 routing-table=to_ISP2 target-scope=12
add distance=2 gateway=10.100.10.1 routing-table=to_ISP2 target-scope=12