| Author |
Message |
|
|
Post subject: Dve brany a Queue (RB 600)
 Posted: 21.05.2008 - 08:01 #65143
|
|
Basic
Joined: Dec 08, 2006
Posts: 401
|
|
Zdravim.
Nedavno som kupil RB600 vytvoril som vo firewalle adress listy. Nastavil som prerouting pravidla jedna skupina ide jednou branou a druha skupina druhou.
Celkom dobre to zatial chodi.
Len sa chcem opytat ako mam nastavit queue? Chcem obe brany obmedzovat osobitne...
Dakujem za kazdu radu. |
|
|
| |
|
|
|
 |
|
|
|
Post subject: RE: Dve brany a Queue (RB 600)
Posted: 21.05.2008 - 13:03 #65163
|
|
Majster
Joined: Okt 31, 2006
Posts: 2062
Location: TT
|
|
| cez QT a mangluj si to podla toho cez ktory iface ti to ide ... |
|
|
| |
|
|
|
|
|
|
|
Post subject: RE: Dve brany a Queue (RB 600)
Posted: 21.05.2008 - 13:06 #65164
|
|
Basic
Joined: Dec 08, 2006
Posts: 401
|
|
Thomas wrote: ›cez QT a mangluj si to podla toho cez ktory iface ti to ide ...
Nevies mi prosim uvies priklad? |
|
|
| |
|
|
|
|
|
|
|
Post subject: RE: Dve brany a Queue (RB 600)
Posted: 22.05.2008 - 00:04 #65185
|
|
Majster
Joined: Aug 31, 2005
Posts: 2295
Location: Hájske
|
|
78 chain=forward in-interface=wlan1 dst-address=192.168.1.21 p2p=!all-p2p
dst-limit=0/5m,500,dst-address-and-port/1h connection-type=!ftp
action=mark-packet new-packet-mark=user3_down passthrough=no
napriklad takto to co je hrube podciarknute a sikme mozes mat ako jeden interface a ineho zakaznika das iny interface |
|
|
| |
|
|
|
|
|
|
|
Post subject: RE: Dve brany a Queue (RB 600)
Posted: 22.05.2008 - 08:24 #65188
|
|
Basic
Joined: Dec 08, 2006
Posts: 401
|
|
cobain wrote: ›78 chain=forward in-interface=wlan1 dst-address=192.168.1.21 p2p=!all-p2p
dst-limit=0/5m,500,dst-address-and-port/1h connection-type=!ftp
action=mark-packet new-packet-mark=user3_down passthrough=no
napriklad takto to co je hrube podciarknute a sikme mozes mat ako jeden interface a ineho zakaznika das iny interface
Dik budem skusat,
Etse jedna otazocka je v RB600 v.3,6 nieco vo firewalle defaultne nastavene ze sa nemozem na MK dostat z vonku? Do teras som tam mal RB 133 v 2.50 a na DSL routry som mal nastavena DMZ priamo na IP MK. teraz to mam tak isto ale z vonku sa nemozem dostat. Skusal som sa pripojit ne kabel medzi MK a ADSL (cez IP nie cez MAC  ) a na MK sa pripojim ale ak skusam z vonku nie, prava na pripojenie mam nastavene z rozsahu 0.0.0.0/0.. |
|
|
| |
|
|
|
|
|
|
|
Post subject: RE: Dve brany a Queue (RB 600)
Posted: 22.05.2008 - 19:15 #65227
|
|
Basic
Joined: Dec 08, 2006
Posts: 401
|
|
| poradte pls. co ma pridat do firewallu. Ked som pridal branu bez prerouting pravidiel mozem sa bez problemov pripojit.... ale vsetok trafik tecie iba cez jednu linku... dik moc |
|
|
| |
|
|
|
|
|
|
|
Post subject: Dve brany a Queue (RB 600)
Posted: 24.05.2008 - 09:09 #65315
|
|
Basic
Joined: Júl 12, 2003
Posts: 476
Location: nedaleko Turčianskych Teplíc
|
|
marsl wrote: ›Zdravim.
Nedavno som kupil RB600 vytvoril som vo firewalle adress listy. Nastavil som prerouting pravidla jedna skupina ide jednou branou a druha skupina druhou.
Celkom dobre to zatial chodi.
Len sa chcem opytat ako mam nastavit queue? Chcem obe brany obmedzovat osobitne...
Dakujem za kazdu radu.
Mozes mi sem hodit tie prerouting pravidla ? Riesim nieco podobne, spravil som to zatial pravidlami v route liste |
|
|
| |
|
|
|
|
|
|
|
Post subject: Dve brany a Queue (RB 600)
Posted: 24.05.2008 - 12:33 #65316
|
|
Basic
Joined: Dec 08, 2006
Posts: 401
|
|
Palino wrote: › marsl wrote: ›Zdravim.
Nedavno som kupil RB600 vytvoril som vo firewalle adress listy. Nastavil som prerouting pravidla jedna skupina ide jednou branou a druha skupina druhou.
Celkom dobre to zatial chodi.
Len sa chcem opytat ako mam nastavit queue? Chcem obe brany obmedzovat osobitne...
Dakujem za kazdu radu.
Mozes mi sem hodit tie prerouting pravidla ? Riesim nieco podobne, spravil som to zatial pravidlami v route liste
Jasne:
Code: › /ip firewall mangle
add action=mark-routing chain=prerouting comment="" disabled=no \
new-routing-mark=skupina1 passthrough=no src-address-list=Skupina1
add action=mark-routing chain=prerouting comment="" disabled=no \
new-routing-mark=skupina2 passthrough=no src-address-list=Skupina2
Code: ›
/ip firewall address-list
add address=192.168.xx.xx comment="xxxx" disabled=no \
list=Skupina1
/ip firewall address-list
add address=192.168.xx.xx comment="xxxxx" disabled=no \
list=Skupina2
Code: ›
/ip route
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 \
gateway=192.168.15.1 routing-mark=skupina2 scope=30 target-scope=10
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 \
gateway=192.168.14.1 routing-mark=skupina1 scope=30 target-scope=10
Ako ides riesit QoS? |
|
|
| |
|
|
|
|
|
|
|
Post subject: RE: Dve brany a Queue (RB 600)
Posted: 24.05.2008 - 17:36 #65317
|
|
Majster
Joined: Aug 31, 2005
Posts: 2295
Location: Hájske
|
|
Skorej by som predpokladal ze ta DMZ v ADSL routri je posahana...
ak by si totizto mal nieco v MK tak sa ani na tom kabli co je medzi ADSL a MK nepripojis na MK |
|
|
| |
|
|
|
|
|
|
Powered by PNphpBB2 © 2003-2005 The PNphpBB Group
Credits |
