chrisintaipei wrote:用 netwatch...(恕刪) 不會比較輕鬆,因為netwatch不能指定interface。當您有多個wan時,還是得為router加policy-routing,以確保封包能往不同wan送,進而得知連接的隧道是否有中斷的情形。
gfx wrote:腳本判斷線路有效的...(恕刪) 我是也有想到用ping配合像linux的awk指令把字串過濾出來如果是timeout字眼代表不通,如果time字眼就是通只是目前對routeros腳本編寫還不是很熟,所以暫時這樣我到沒有想說用標記的部份~
jeremy9678 wrote:我是也有想到用ping...(恕刪) 不得不說ROS在過濾做的很失敗。若在filter做字串過濾,常常弄的網頁無法正常瀏覽。web- proxy有較完整的字串功能,但問題是web- proxy也不是做的很好,掛上web- proxy一樣有瀏覽的問題。原本早些是以為rb450g硬體不夠強,但試過ROS x86主機也一樣。ROS字串過濾,真的只有汗顏的份
gfx wrote:不得不說ROS在過...(恕刪) 所以基本上看來我的方法不太可行囉~只好在努力的研究看看囉!ros有一個問題讓我也很悶,我買了4g網卡華為e3276,原本想說插在公司的crs109上使用結果它都抓不到,以為是不支援結果回家插我的ccr1036可以支援抓到,而公司軔體還6.27家裡6.26結果不同答案,也不知在買一支e3272官方有寫的去插crs109還是crs109根本就不支援4g網卡嗎???真是難攪的ros
jeremy9678 wrote:所以基本上看來我的...(恕刪) 還記得樓上我20/5M的朋友嗎?除了幫他做TVBOX/NAS的HTB外,他還提了一個要請求。他買了一台攜帶型的分享器,可以用USB share手機的3G。問我說若將攜帶型分享器也接到ROS主機,能不能做ADSL與手機3G的負載平衡[PCC]?其中一個重點是手機拔離攜帶型分享器,ROS腳本要跟著關閉PCC回復成單路上網;當然手機再接回上線,腳本得再修正會並開啟PCC。而手機3G下載極速只有6M,但ADSL是20M,不能只1:1去配PCC,而應該是1:3的比例分配,這都是要注意的。我說的這些情況,是否與您的類似?
gfx wrote:不得不說ROS在過濾做的很失敗。若在filter做字串過濾,常常弄的網頁無法正常瀏覽。...(恕刪) 不管任何一套 firewall, 要直接對網頁內容做 filter, 本來就常常會 block 到一些正常的網頁, 所以 UTM 才會利用網站分類的方式來過濾, 但花費的人力物力極大, 所以才需要收費.所以並非 ROS filter 功能不全, 實務上沒有一套簡單的方法可以做的好.
pctine wrote:不管任何一套 fir...(恕刪) 大家好, 剛購入 RB850GX2, 但是使用上遇到困難, 急需幫忙我的環境如下兩路中華電信 : 一路 300M/100M 固定IP, 一路 100M/40M PPPOE兩路我設定負載均衡PORT1 : WAN1 接 300M/100M 固定 IPPORT2 : WAN2 接 100M/40M PPPOEPORT3 : LAN1 接 HUB 設定 DHCP SERVERPORT4 : LAN2PORT5 : LAN3LAN 目前 DHCP SERVER 不正常, 且 IP 無法綁定 MACSHCP POOL 設為 192.168.0.10-192.168.0.250明明就綁定為 192.168.0.218, 而我的電腦永遠取得 POOL 最後一位 192.168.0.250下面是我的設定檔:------------------------------------------------------------------# mar/29/2015 22:12:25 by RouterOS 6.27# software id = 6A1T-IN9R#/interface ethernetset [ find default-name=ether3 ] name=lan1set [ find default-name=ether4 ] master-port=lan1 name=lan2set [ find default-name=ether5 ] master-port=lan1 name=lan3set [ find default-name=ether1 ] name=wan1set [ find default-name=ether2 ] name=wan2/interface pppoe-clientadd add-default-route=yes disabled=no interface=wan2 keepalive-timeout=\disabled name=pppoe-out2 password=xxxxxxxx user=xxxxxxx@hinet.net/ip neighbor discoveryset wan1 discover=no/ip pooladd name=dhcp ranges=192.168.0.10-192.168.0.250add name=dhcp_pool1 ranges=192.168.0.10-192.168.0.250/ip dhcp-serveradd address-pool=dhcp_pool1 disabled=no interface=lan1 lease-time=3d name=\dhcp1/portset 0 name=serial0/ip addressadd address=192.168.0.1/24 interface=lan1 network=192.168.0.0add address=59.125.XX.109/24 interface=wan1 network=59.125.XX.0/ip dhcp-clientadd comment="default configuration" dhcp-options=hostname,clientid disabled=\no interface=lan1/ip dhcp-server leaseadd address=192.168.0.112 client-id=DS151+_1 mac-address=00:11:32:3D:94:2Dadd address=192.168.0.113 client-id=DS1515+_2 mac-address=00:11:32:3D:94:2Eadd address=192.168.0.114 client-id=DS1515+_3 mac-address=00:11:32:3D:94:2Fadd address=192.168.0.115 client-id=DS1515+_4 mac-address=00:11:32:3D:94:30add address=192.168.0.151 client-id=Work01 mac-address=E0:3F:49:44:73:FCadd address=192.168.0.152 client-id=Work02 mac-address=14:DA:E9:EA:D1:12add address=192.168.0.153 client-id=Work03 mac-address=14:DA:E9:EA:C8:ECadd address=192.168.0.154 client-id=Work04 mac-address=14:DA:E9:EA:D1:10add address=192.168.0.155 client-id=Work05 mac-address=14:DA:E9:EA:D1:11add address=192.168.0.156 client-id=Work06 mac-address=14:DA:E9:EA:CF:3Aadd address=192.168.0.157 client-id=Work07 mac-address=14:DA:E9:EA:D1:15add address=192.168.0.218 client-id=test_2 mac-address=00:15:17:8A:C6:85 \server=dhcp1add address=192.168.0.219 client-id=test mac-address=BC:5F:F4:47:35:0C server=\dhcp1add address=192.168.0.116 client-id=QNAP mac-address=00:08:9B:C5:66:17/ip dhcp-server networkadd address=192.168.0.0/24 comment="default configuration" dns-server=\168.95.1.1,8.8.8.8 gateway=192.168.0.1 netmask=24/ip dnsset allow-remote-requests=yes servers=168.95.1.1/ip dns staticadd address=192.168.88.1 name=router/ip firewall filteradd chain=input comment="default configuration" protocol=icmpadd chain=input comment="default configuration" connection-state=\established,relatedadd action=drop chain=input comment="default configuration" in-interface=wan1add chain=forward comment="default configuration" connection-state=\established,relatedadd action=drop chain=forward comment="default configuration" \connection-state=invalidadd action=drop chain=forward comment="default configuration" \connection-nat-state=!dstnat connection-state=new in-interface=wan1/ip firewall mangleadd action=mark-connection chain=input in-interface=wan1 new-connection-mark=\WAN1_connadd action=mark-connection chain=input in-interface=pppoe-out2 \new-connection-mark=WAN2_connadd action=mark-routing chain=output connection-mark=WAN1_conn \new-routing-mark=to_WAN1add action=mark-routing chain=output connection-mark=WAN2_conn \new-routing-mark=to_WAN2add action=mark-connection chain=prerouting dst-address-type=!local \in-interface=lan1 new-connection-mark=WAN1_conn \per-connection-classifier=both-addresses-and-ports:2/0add action=mark-connection chain=prerouting dst-address-type=!local \in-interface=lan1 new-connection-mark=WAN2_conn \per-connection-classifier=both-addresses-and-ports:2/1add action=mark-routing chain=prerouting connection-mark=WAN1_conn \in-interface=lan1 new-routing-mark=to_WAN1add action=mark-routing chain=prerouting connection-mark=WAN2_conn \in-interface=lan1 new-routing-mark=to_WAN2/ip firewall natadd action=masquerade chain=srcnat out-interface=wan1add action=masquerade chain=srcnat out-interface=pppoe-out2/ip routeadd check-gateway=ping distance=1 gateway=59.125.xx.254 routing-mark=to_WAN1add check-gateway=ping distance=1 gateway=pppoe-out2 routing-mark=to_WAN2add distance=1 gateway=59.125.xx.254add check-gateway=ping distance=1 gateway=59.125.xx.254add check-gateway=ping distance=2 gateway=pppoe-out2/system clockset time-zone-name=Asia/Taipei/system routerboard settingsset cpu-frequency=533MHz/tool mac-serverset [ find default=yes ] disabled=yesadd interface=wan2add interface=lan1add interface=lan2add interface=lan3/tool mac-server mac-winboxset [ find default=yes ] disabled=yesadd interface=wan2add interface=lan1add interface=lan2add interface=lan3
gfx wrote:還記得樓上我20/5M...(恕刪) gfx大我是跟你說的差不多,但我是這樣1.不做pcc或nth2.是要讓公司自己的電腦特定協定或特定dst address走不同gw出去例如vpn ftp公司擋太兇有時需要工作需要等申請過都會花囉!3.我是想用4g網卡比較方便,後來有用平版手機crs109也是連不上所以在懷疑它根本usb不支援4g/3g usb網路卡