buongiorno a tutti.....ho un problema di bilanciamento con il rb 2011 uas-rm...praticamente quando attivo la seconda connessione (WAN2) il router blocca tutto e non mi lascia navigare....se la disabilito e lascio solo WAN1 funziona alla grande....vi posto le config...
/interface ethernet
set 0 name="02 Switch Pc Salotto"
set 1 name="03 Ip Camera Entrata"
set 2 name="04 Switch Entrata"
set 3 name="Local 01"
set 4 name=WAN1
set 5 disabled=yes name=WAN2
set 6 name=ether05
set 7 name=ether08-slave-local
set 8 name=ether09-slave-local
set 9 name=ether10-slave-local
set 10 name=sfp1-gateway
/ip neighbor discovery
set "Local 01" discover=no
set sfp1-gateway discover=no
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m \
mac-cookie-timeout=3d
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name=dhcp_pool1 ranges=192.168.88.2-192.168.88.254
add name=dhcp_pool2 ranges=192.168.88.2-192.168.88.254
add name=dhcp_pool3 ranges=192.168.1.2-192.168.1.254
add name=dhcp_pool4 ranges=192.168.1.2-192.168.1.254
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=bridge-local name=dhcp1
/port
set 0 name=serial0
/interface bridge port
add bridge=bridge-local interface="02 Switch Pc Salotto"
add bridge=bridge-local interface="03 Ip Camera Entrata"
add bridge=bridge-local interface="04 Switch Entrata"
add bridge=bridge-local interface=ether05
add bridge=bridge-local interface="Local 01"
/ip address
add address=192.168.88.1/24 comment="default configuration" interface=\
bridge-local network=192.168.88.0
add address=192.168.1.9/24 interface=WAN1 network=192.168.1.0
add address=192.168.20.5/24 interface=WAN2 network=192.168.20.0
/ip dhcp-client
add comment="default configuration" dhcp-options=hostname,clientid interface=\
sfp1-gateway
/ip dhcp-server network
add address=192.168.88.0/24 comment="default configuration" dns-server=\
192.168.88.1 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add chain=input comment="default configuration" disabled=yes protocol=icmp
add chain=input comment="default configuration" connection-state=established \
disabled=yes
add chain=input comment="default configuration" connection-state=related \
disabled=yes
add action=drop chain=input comment="default configuration" disabled=yes \
in-interface=sfp1-gateway
add action=drop chain=input comment="default configuration" disabled=yes \
in-interface="Local 01"
add chain=forward comment="default configuration" connection-state=established \
disabled=yes
add chain=forward comment="default configuration" connection-state=related \
disabled=yes
add action=drop chain=forward comment="default configuration" connection-state=\
invalid disabled=yes
add action=drop chain=input src-address=192.168.88.245 time=\
14h-18h,mon,tue,wed,thu,fri,sat
/ip firewall mangle
add action=mark-connection chain=input in-interface=WAN1 new-connection-mark=\
ISP1_CONN passthrough=no
add action=mark-connection chain=input in-interface=WAN2 new-connection-mark=\
ISP2_CONN passthrough=no
add action=mark-routing chain=output connection-mark=ISP1_CONN \
new-routing-mark=TO_WAN1 passthrough=no
add action=mark-routing chain=output connection-mark=ISP2_CONN \
new-routing-mark=TO_WAN2 passthrough=no
add chain=prerouting dst-address=192.168.1.0/24 in-interface=bridge-local
add chain=prerouting dst-address=192.168.20.0/24 in-interface=bridge-local
add action=mark-connection chain=prerouting dst-address-type=!local \
in-interface=bridge-local new-connection-mark=ISP1_CONN \
per-connection-classifier=both-addresses-and-ports:2/0
add action=mark-connection chain=prerouting dst-address-type=!local \
in-interface=bridge-local new-connection-mark=ISP2_CONN \
per-connection-classifier=both-addresses-and-ports:2/1
add action=mark-routing chain=prerouting connection-mark=ISP1_CONN \
in-interface=bridge-local new-routing-mark=TO_WAN1
add action=mark-routing chain=prerouting connection-mark=ISP2_CONN \
in-interface=bridge-local new-routing-mark=TO_WAN2
/ip firewall nat
add action=masquerade chain=srcnat out-interface=WAN1
add action=masquerade chain=srcnat out-interface=WAN2
/ip route
add check-gateway=ping distance=1 gateway=192.168.1.1 routing-mark=TO_WAN1
add check-gateway=ping distance=1 gateway=192.168.20.20 routing-mark=TO_WAN2
add check-gateway=ping distance=1 gateway=192.168.1.1
add check-gateway=ping distance=2 gateway=192.168.20.20
/lcd
set current-interface="03 Ip Camera Entrata"
/system clock
set time-zone-name=Europe/Rome
/system ntp client
set enabled=yes mode=unicast primary-ntp=193.204.114.232 secondary-ntp=\
193.204.114.233
/tool mac-server
set [ find default=yes ] disabled=yes
add interface="02 Switch Pc Salotto"
add interface="03 Ip Camera Entrata"
add interface="04 Switch Entrata"
add interface=ether05
add interface=WAN1
add interface=WAN2
add interface=ether08-slave-local
add interface=ether09-slave-local
add interface=bridge-local
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface="02 Switch Pc Salotto"
add interface="03 Ip Camera Entrata"
add interface="04 Switch Entrata"
add interface=ether05
add interface=WAN1
add interface=WAN2
add interface=ether08-slave-local
add interface=ether09-slave-local
add interface=bridge-local
