kahnmao wrote:
我有一台CCR1016 預設SLAVE PORT是 LAN1
似乎沒辦法把他改到LAN12
CCR1016每個Port都是獨立的，不知道你說的預設Slave Port是指什麼？
Joe680830 wrote:
若可行,是否能請教routeros內有關vlan trunk的詳細設定?
這裡有詳細說明MikroTik VLAN
1. 請確認LAN interface advertise=yes
2. 刪除IPv6 Pool
3. 關閉DHCPv6 Server內的From Pool=IPv6 Pool。
4. 中華電信給的資料中LAN Port IP網段：2001:xxxx:116:0000::/56，需改為2001:xxxx:116::/64。
5. ND內的MTU不需要特別設定為1492，防火牆內的change-mss會自動調整。
6. /IP DNS 內加入DNSv6的IP，這樣DNS的資訊會自動推送給PC。
除了第六點有安全上的疑慮，照著原廠的指示做後一切正常。
匯入後請記得到LAN interface把Advertise選項打勾
/ipv6 dhcp-server
add disabled=no interface=LAN name=DHCPv6
/ipv6 address
add address=2001:xxxx:116::/64 interface=LAN
add address=2001:xxxx:116:ff00::1 interface=WAN
/ipv6 firewall mangle
add action=change-mss chain=forward new-mss=clamp-to-pmtu passthrough=no \
protocol=tcp tcp-flags=syn
/ipv6 nd
set [ find default=yes ] advertise-dns=yes other-configuration=yes
/ipv6 route
add distance=1 gateway=2001:xxxx:116:ff00::ffff
補充第6點的設定
# Google DNS
/ip dns
set allow-remote-requests=yes servers=\
8.8.8.8,8.8.4.4,2001:4860:4860::8888,2001:4860:4860::8844
#IPv4 防火牆規則
/ip firewall filter
add chain=input connection-state=established
add chain=input connection-state=related
add action=drop chain=input dst-port=53 in-interface=WAN protocol=udp \
src-address=0.0.0.0/0
add action=drop chain=input dst-port=53 in-interface=WAN protocol=tcp \
src-address=0.0.0.0/0
# IPv6 防火牆規則
/ipv6 firewall filter
add chain=input connection-state=established
add chain=input connection-state=related
add action=drop chain=input dst-port=53 in-interface=WAN protocol=udp \
src-address=::/0
add action=drop chain=input dst-port=53 in-interface=WAN protocol=tcp \
src-address=::/0
AKSN74 wrote:
另外想請教一下
ROS要怎麼設定從外進來的封包 發送給區網內的所有電腦(Broadcast)
最近在嘗試WOL廣播喚醒這部分 但我怎麼試都沒效果
包含把To address改成192.168.x.0/24 以及192.168.x.255
然後測試用手機喚醒 怎麼樣電腦就是沒辦法醒來
謝謝
/ip proxy access
add action=deny disabled=no dst-host=www.blocked-website.com dst-port="" \
redirect-to=101.11.11.240/nonpayment/nonpayment.htm
/ip proxy access
add action=deny disabled=no dst-host=opendns.blockdns.com dst-port="" \
redirect-to=101.11.11.240/nonpayment/nonpayment.htm
單車全記錄...................................
http://blog.xuite.net/chemyuan/bike
chemyuan wrote:
/ip proxy access
add action=deny disabled=no dst-host=www.blocked-website.com dst-port="" \
redirect-to=101.11.11.240/nonpayment/nonpayment.htm
/ip proxy access
add action=deny disabled=no dst-host=opendns.blockdns.com dst-port="" \
redirect-to=101.11.11.240/nonpayment/nonpayment.htm
將通往www.blocked-website.com及opendns.blockdns.com的連線改到101.11.11.240/nonpayment/nonpayment.htm
內文搜尋
從 APP 打開
X