|
马上注册成为ROSABC会员,随时发帖回复。
您需要 登录 才可以下载或查看,没有账号?会员注册
x
帮忙看看那里设置有问题??客户机是pppoe拔号。。
/ip address
add address=192.168.20.200/24 broadcast=192.168.20.255 comment="" disabled=no
interface=lan network=192.168.20.0
/ip route
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=
pppoe-out2 routing-mark=wan2
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=
pppoe-out3 routing-mark=wan3
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=
pppoe-out4 routing-mark=wan4
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=
pppoe-out1 routing-mark=wan1
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=
pppoe-out2
/ip firewall mangle
add action=mark-connection chain=prerouting comment="" connection-state=new
disabled=yes dst-port=443 new-connection-mark=v2 passthrough=yes
protocol=tcp src-address-list=user
add action=mark-routing chain=prerouting comment="" connection-mark=v7
disabled=yes dst-port=443 new-routing-mark=v2 passthrough=no protocol=tcp
src-address-list=user
add action=mark-connection chain=prerouting comment=1 connection-state=new
disabled=no new-connection-mark=wan1 nth=4,1 passthrough=yes
src-address-list=user
add action=mark-routing chain=prerouting comment="" connection-mark=wan1
disabled=no new-routing-mark=wan1 passthrough=no src-address-list=user
add action=mark-connection chain=prerouting comment=2 connection-state=new
disabled=no new-connection-mark=wan2 nth=3,1 passthrough=yes
src-address-list=user
add action=mark-routing chain=prerouting comment="" connection-mark=wan2
disabled=no new-routing-mark=wan2 passthrough=no src-address-list=user
add action=mark-connection chain=prerouting comment=3 connection-state=new
disabled=no new-connection-mark=wan3 nth=2,1 passthrough=yes
src-address-list=user
add action=mark-routing chain=prerouting comment="" connection-mark=wan3
disabled=no new-routing-mark=wan3 passthrough=no src-address-list=user
add action=mark-connection chain=prerouting comment=5 connection-state=new
disabled=no new-connection-mark=wan4 nth=1,1 passthrough=yes
src-address-list=user
add action=mark-routing chain=prerouting comment="" connection-mark=wan4
disabled=no new-routing-mark=wan4 passthrough=no src-address-list=user
add action=change-mss chain=forward comment="" disabled=yes new-mss=1440
protocol=tcp tcp-flags=syn
/ip firewall nat
add action=masquerade chain=srcnat comment=1 disabled=no out-interface=
pppoe-out1
add action=masquerade chain=srcnat comment=3 disabled=no out-interface=
pppoe-out2
add action=masquerade chain=srcnat comment=2 disabled=no out-interface=
pppoe-out3
add action=masquerade chain=srcnat comment=4 disabled=no out-interface=
pppoe-out4
/ppp profile
set default change-tcp-mss=yes comment="" name=default only-one=default
use-compression=default use-encryption=default use-vj-compression=default
add change-tcp-mss=default comment="" dns-server=202.96.128.86,202.96.128.166
local-address=23.25.16.56 name="D5FDB3A3BFCDBBA7BBFAD3"
only-one=yes remote-address="D5FDB3A3BFCDBBA7BBFAD3"
use-compression=yes use-encryption=yes use-vj-compression=yes
add change-tcp-mss=default comment="" dns-server=202.96.128.86,202.96.128.166
local-address=26.65.45.89 name=GANE only-one=yes remote-address=GANE
use-compression=yes use-encryption=yes use-vj-compression=yes
add change-tcp-mss=default comment="" dns-server=202.96.128.86,202.96.128.166
local-address=10.12.13.14 name="CEE5D3C3CFDFC2B7" only-one=yes
remote-address="CEE5D3C3CFDFC2B7" use-compression=default
use-encryption=yes use-vj-compression=default
add change-tcp-mss=default comment="" dns-server=202.96.128.86,202.96.128.166
local-address=11.11.0.1 name=profile11qrtr only-one=default
remote-address=pool1 use-compression=yes use-encryption=yes
use-vj-compression=yes
set default-encryption change-tcp-mss=yes comment="" name=default-encryption
only-one=default use-compression=default use-encryption=yes
use-vj-compression=default |
|