Come bilanciare due connessioni in uscita

[marepulito]

Ciao, ho provato anche a disattivare una opp. l'altra, ma l'HotSpot non funziona ancora, se suoi e mi dici come sportare la Conf. la posto così vedi dove potrebbe essere l'errore.

Saluti M.

[piciccia]

L'HotSpot ti ha installato una sua regola di masquerading. Quello che ti dico è di concentrarle tutte ed eliminare le superflue.

C.

[marepulito]

ciao Piciccia, questa è la configurazione del Firewall, come posso ovviare?:
# feb/13/2012 14:59:48 by RouterOS 5.12
# software id = S7IF-CMYE
#
/ip firewall address-list
add address=10.10.X.X-10.10.X.X disabled=no list=privati
/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s \
tcp-close-wait-timeout=10s tcp-established-timeout=1d tcp-fin-wait-timeout=\
10s tcp-last-ack-timeout=10s tcp-syn-received-timeout=5s \
tcp-syn-sent-timeout=5s tcp-syncookie=no tcp-time-wait-timeout=10s \
udp-stream-timeout=3m udp-timeout=10s
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" \
disabled=yes
/ip firewall mangle
add action=mark-connection chain=input disabled=no in-interface=Adsl_Privata \
new-connection-mark=ADSL_conn passthrough=yes
add action=mark-connection chain=input disabled=no in-interface=ADSL \
new-connection-mark=Adsl_Privata_conn passthrough=yes
add action=mark-routing chain=output connection-mark=ADSL_conn disabled=no \
new-routing-mark=to_ADSL passthrough=yes
add action=mark-routing chain=output connection-mark=Adsl_Privata_conn \
disabled=no new-routing-mark=to_Adsl_Privata passthrough=yes
add action=accept chain=prerouting disabled=no dst-address=192.168.X.X/24 \
in-interface=HotSpot
add action=accept chain=prerouting disabled=no dst-address=92.68.X.X/24 \
in-interface=HotSpot
add action=mark-connection chain=prerouting disabled=no dst-address-type=!local \
in-interface=HotSpot new-connection-mark=ADSL_conn passthrough=yes \
per-connection-classifier=both-addresses:2/0
add action=mark-connection chain=prerouting disabled=no dst-address-type=local \
in-interface=HotSpot new-connection-mark=Adsl_Privata_conn passthrough=yes \
per-connection-classifier=both-addresses:2/1
add action=mark-connection chain=prerouting disabled=no dst-address-type=!local \
in-interface=HotSpot new-connection-mark=ADSL_conn passthrough=yes \
per-connection-classifier=both-addresses:3/0
add action=mark-connection chain=prerouting disabled=no dst-address-type=!local \
in-interface=HotSpot new-connection-mark=Adsl_Privata_conn passthrough=yes \
per-connection-classifier=both-addresses:3/2
add action=mark-connection chain=prerouting disabled=no dst-address-type=!local \
in-interface=HotSpot new-connection-mark=ADSL_conn passthrough=yes \
per-connection-classifier=both-addresses:3/1
add action=mark-routing chain=prerouting connection-mark=ADSL_conn disabled=no \
in-interface=HotSpot new-routing-mark=to_ADSL passthrough=yes
add action=mark-routing chain=prerouting connection-mark=Adsl_Privata_conn \
disabled=no in-interface=HotSpot new-routing-mark=to_Adsl_Privata \
passthrough=yes
add action=mark-routing chain=prerouting disabled=no new-routing-mark=privati \
passthrough=yes src-address-list=privati
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" \
disabled=no
add action=masquerade chain=srcnat disabled=no out-interface=Adsl_Privata
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
disabled=no src-address=10.10.X.X/24
add action=masquerade chain=srcnat disabled=yes out-interface=ADSL
/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061 sip-direct-media=yes
set pptp disabled=no

Saluti M.

[piciccia]

piuttosto fai un export così:

Codice: Seleziona tutto

export compact file=conf

Saluti
C.

[marepulito]

Scusami, dove mette il file con il comando di cui sopra?
saluti M.

[Linkwave]

Lo trovi con Winbox sul menu FILE.
Lo trascini sul desktop ed hai fatto!

Lorenzo

[marepulito]

Ok fatto, in allegato il file.
saluti M.

[marepulito]

Ciao C. hai dato un'occhiata al file di Conf.?, è assolutamente instabile la rete, ma non riesco a verne a capo.

Grazie ed a presto, saluti, M.

[figheras]

Ciao C. hai dato un'occhiata al file di Conf.?, è assolutamente instabile la rete, ma non riesco a verne a capo.

Grazie ed a presto, saluti, M.

Attendi la risposta...non bisogna fare mai UP del proprio argomento.....
Ricordo inoltre che il forum non è un sito di "consulenza", per tanto se si riceverà una risposta bisognerà attenderla senza pretese.
Saluti

[marepulito]

Ok, chiedo scusa, attendo.

Grazie di tutto e buon lavoro.
Sauti, M.