2wan e il loro utilizzo

[orgnemo]

Salve a tutti,

ho 2 wan e 2 bridge, seguendo i consigli che mi avete date in un mio post precedente, sto facendo un po di prove: 

sono partito da questo script

/ip firewall nat
add chain=srcnat out-interface=ether1 action=masquerade comment="lbpcc"
add chain=srcnat out-interface=ether10 action=masquerade comment="lbpcc"
 
/ip firewall mangle
 
add chain=prerouting dst-address=192.168.2.0/24 action=accept in-interface=bridge_stefano hotspot=auth comment="lbpcc-wan1"
add chain=prerouting dst-address=192.168.0.0/24 action=accept in-interface=bridge_stefano hotspot=auth comment="lbpcc-wan2"
 
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=ether1 new-connection-mark=CM-WAN1 passthrough=yes hotspot=auth comment="lbpcc"
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=ether10 new-connection-mark=CM-WAN2 passthrough=yes hotspot=auth comment="lbpcc"
 
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=bridge_stefano new-connection-mark=CM-WAN1 passthrough=yes per-connection-classifier=both-addresses-and-ports:2/0 dst-address-type=!local hotspot=auth comment="lbpcc"
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=bridge_stefano new-connection-mark=CM-WAN2 passthrough=yes per-connection-classifier=both-addresses-and-ports:2/1 dst-address-type=!local hotspot=auth comment="lbpcc"
 
add action=mark-routing chain=prerouting connection-mark=CM-WAN1 in-interface=bridge_stefano new-routing-mark=RM-WAN1 passthrough=yes hotspot=auth comment="lbpcc"
add action=mark-routing chain=prerouting connection-mark=CM-WAN2 in-interface=bridge_stefano new-routing-mark=RM-WAN2 passthrough=yes hotspot=auth comment="lbpcc"
 
add action=mark-routing chain=output connection-mark=CM-WAN1 new-routing-mark=RM-WAN1 passthrough=yes hotspot=auth comment="lbpcc"
add action=mark-routing chain=output connection-mark=CM-WAN2 new-routing-mark=RM-WAN2 passthrough=yes hotspot=auth comment="lbpcc"
 
 
/ip route
add check-gateway=ping distance=1 gateway=192.168.2.1 routing-mark=RM-WAN1 comment="WAN1"
add check-gateway=ping distance=1 gateway=192.168.0.1 routing-mark=RM-WAN2 comment="WAN2"
add check-gateway=ping distance=1 gateway=192.168.2.1 comment="WAN1"
add check-gateway=ping distance=2 gateway=192.168.0.1 comment="WAN2"

 

l'ho modificato in questo per far utilizzare la wan1 a bridge_stefano e wan2 a bridge_marco

/ip firewall nat
add chain=srcnat out-interface=ether1 action=masquerade comment="lbpcc"
add chain=srcnat out-interface=ether10 action=masquerade comment="lbpcc"
 
/ip firewall mangle
 
add chain=prerouting dst-address=192.168.2.0/24 action=accept in-interface=bridge_stefano hotspot=auth comment="wan1"
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=ether1 new-connection-mark=CM-WAN1 passthrough=yes hotspot=auth comment="wan1_stefano"
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=bridge_stefano new-connection-mark=CM-WAN1 passthrough=yes dst-address-type=!local hotspot=auth comment="wan1_stefano"
add action=mark-routing chain=prerouting connection-mark=CM-WAN1 in-interface=bridge_stefano new-routing-mark=RM-WAN1 passthrough=yes hotspot=auth comment="wan1_stefano"
 
add chain=prerouting dst-address=192.168.0.0/24 action=accept in-interface=bridge_marco hotspot=auth comment="wan2"
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=ether10 new-connection-mark=CM-WAN2 passthrough=yes hotspot=auth comment="wan2_marco"
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=bridge_marco new-connection-mark=CM-WAN2 passthrough=yes dst-address-type=!local hotspot=auth comment="wan2_marco"
add action=mark-routing chain=prerouting connection-mark=CM-WAN2 in-interface=bridge_marco new-routing-mark=RM-WAN2 passthrough=yes hotspot=auth comment="wan2_marco"
 
add action=mark-routing chain=output connection-mark=CM-WAN1 new-routing-mark=RM-WAN1 passthrough=yes hotspot=auth comment="wan1"
add action=mark-routing chain=output connection-mark=CM-WAN2 new-routing-mark=RM-WAN2 passthrough=yes hotspot=auth comment="wan2"
 
 
/ip route
add check-gateway=ping distance=1 gateway=192.168.2.1 routing-mark=RM-WAN1 comment="WAN1"
add check-gateway=ping distance=1 gateway=192.168.0.1 routing-mark=RM-WAN2 comment="WAN2"
add check-gateway=ping distance=1 gateway=192.168.2.1 comment="WAN1"
add check-gateway=ping distance=2 gateway=192.168.0.1 comment="WAN2"
 

 

purtroppo questo secondo scenario non funziona sembra che vengano completamente ignorati i mangle creati,  probabilmente sbaglio qualcosa.

Il mio scopo è quello di usare la wan2 (adsl tim che ha 5Mbs/0,48Mbs) per scopi specifici per lo streaming del televisore o altro, ma prima devo capire come funziona.

 

Grazie

[Andrea Annoni]

Devi metterli in ordine corretto......vengono  eseguiti dall'alto verso il basso....

[orgnemo]

Ho fatto delle prove spostando l'ordine come dagli esempi che ho trovato ma il problema persisteva, poi ho provato la configurazione che sta sulla wiki ufficiale e tutto ha funzionato subito forse qualche attributo faceva fallire, comunque sto provando il PCC su solo un bridge per vedere come va, l'altro l'ho lasciato com'era, per adesso sembra ok l'unica pecca in upload che quando ti capita la sessione con l'adsl che ha in upload 0,4Mbps stai a guardare la clessidra, ma le sessioni tengono.

 

Da quello che ho capito questo 

per-connection-classifier=both-addresses-and-ports:2/0

è il parametro per discriminare le sessioni ma è possibile cambiare peso? Questo sembrerebbe discriminare al 50% solo per connessione.

 

Grazie

[Andrea Annoni]

Si esatto, se sono due WAN  2/0 fa 50 e 50.

Puoi metterei i rapporti che vuoi. Sulla Wiki trovi come calcolare esattamente