設備：Mikritik hEX
系統版本：6.36
環境：
1. 需設定兩個WAN，同樣是中華電信的固定IP，同一個光纖路由器不同port，所以gateway一樣
2. 同一個LAN
ether1-WAN：59.124.222.201 www.example.com NAT - 192.168.2.201
ether4-WAN：59.124.222.200 portal.example.com NAT - 192.168.2.200
ether2-LAN：192.168.2.194
3. DNS設定無誤，nslookup查到的都跟上面設定一樣
請問：
1. 設定兩個WAN port，同一個ISP，同一個gateway時，應該如何設定？
2. 設定NAT轉址時，兩個不同WAN轉址應該如何設定？
3. routing需特別注意的地方嗎？
謝謝
rtwin wrote:我把設定與說明寫在.txt文字檔內,您閱讀後相信應該有很大的幫助才是
請教各位先進：
設備...(恕刪)
下載
rtwin wrote:不重要,您只要新增bridge就好,裡面的細節全不要動它.
也少了fast-forword選項
/interface bridge port是設定:與bridge進行橋接的port,
但此先前部份port是用master-port與ether2-LAN橋接,
這些port先要全設成none,與ether2-LAN斷開關係,再與bridge橋接才不會出現重複橋接發生錯誤的狀況.
我自己目前是用6.40.5也沒升到最新,
但我知道一旦升到最新,os會把master-port取消然後新增bridge1把lan-port都橋接過去.
擔心讓router自己修,有些設定可能會牛頭對上馬嘴跑掉...
與其如此就自己先變更,這樣日後直升軔體也不怕出現後遺症.
若您暫不想動用bridge,那就把bridge的相關忽略:
/interface bridge
/interface bridge port
而與bridge相關的都是與dhcp有直接關係,
把interface=bridge換成interface=ether2-LAN即可.
ck.tseng wrote:
各位先進大家好. ...(恕刪)
https://support.microsoft.com/zh-tw/kb/947031
上面的案例對照一下看看
但若是分享器或交換器支援vlan,就容易的多.
以下是用RB450G+RB750GL建置:
因這兩台Router的內部交換機晶片可處理vlan標記,
所以就不再使用軟體的bridge ,而是用switch.
注意v.6.41後,switch改整合到bridge的設定內 ,所以以6.41做區隔分兩部份介紹:
| ＃v6.41前 #RB450G /interface ethernet set name=ether1 master-port=ether5 set name=ether2 master-port=ether5 set name=ether3 master-port=ether5 set name=ether4 master-port=ether5 /interface ethernet switch port set ether5 vlan-header=add-if-missing vlan-mode=secure set ether1 default-vlan-id=100 vlan-header=always-strip vlan-mode=secure set ether2 default-vlan-id=200 vlan-header=always-strip vlan-mode=secure set ether3 default-vlan-id=200 vlan-header=always-strip vlan-mode=secure set ether4 default-vlan-id=100 vlan-header=always-strip vlan-mode=secure set switch1_cpu vlan-mode=secure vlan-header=leave-as-is /interface ethernet switch vlan add ports=ether5,ether1,ether4,switch1-cpu switch=switch1 vlan-id=100 independent-learning=yes add ports=ether5,ether2,ether3 switch=switch1 vlan-id=200 independent-learning=yes /interface vlan add name=WAN vlan-id=100 interface=ether5 /ip address add address=192.168.88.1/24 interface=ether2 network=192.168.88.0 /ip dhcp-server add address-pool=dhcp-pool authoritative=after-2sec-delay interface=ether2 name=DHCP /interface pppoe-client add allow=pap interface=WAN keepalive-timeout=60 profile=default name=pppoe-out1 password=xxxx user=xxxx #RB750GL /interface ethernet set name=ether1 master-port=ether5 set name=ether2 master-port=ether5 set name=ether3 master-port=ether5 set name=ether4 master-port=ether5 /interface ethernet switch port set ether5 vlan-header=add-if-missing vlan-mode=secure set ether1 default-vlan-id=200 vlan-header=always-strip vlan-mode=secure set ether2 default-vlan-id=200 vlan-header=always-strip vlan-mode=secure set ether3 default-vlan-id=200 vlan-header=always-strip vlan-mode=secure set ether4 default-vlan-id=100 vlan-header=always-strip vlan-mode=secure /interface ethernet switch vlan add ports=ether5,ether4 switch=switch1 vlan-id=100 independent-learning=yes add ports=ether5,ether1,ether2,ether3 switch=switch1 vlan-id=200 independent-learning=yes /ip address add address=192.168.88.2/24 interface=ether2 network=192.168.88.0 |
| ＃v6.41後 #RB450G /interface bridge add name=bridge1 vlan-filtering=no /interface bridge port add bridge=bridge1 interface=ether5 add bridge=bridge1 interface=ether1 pvid=100 add bridge=bridge1 interface=ether2 pvid=200 add bridge=bridge1 interface=ether3 pvid=200 add bridge=bridge1 interface=ether4 pvid=100 /interface bridge vlan add bridge=bridge1 tagged=ether5,bridge1 untagged=ether1,ether4 vlan-ids=100 add bridge=bridge1 tagged=ether5 untagged=ether2,ether3 vlan-ids=200 /interface vlan add interface=bridge1 name=WAN vlan-id=100 /ip address add address=192.168.88.1/24 interface=ether2 network=192.168.88.0 /ip dhcp-server add address-pool=dhcp-pool authoritative=after-2sec-delay interface=ether2 name=DHCP /interface pppoe-client add allow=pap interface=WAN keepalive-timeout=60 profile=default name=pppoe-out1 password=xxxx user=xxxx /interface bridge set bridge1 vlan-filtering=yes #RB750GL /interface bridge add name=bridge1 vlan-filtering=no /interface bridge port add bridge=bridge1 interface=ether5 add bridge=bridge1 interface=ether1 pvid=200 add bridge=bridge1 interface=ether2 pvid=200 add bridge=bridge1 interface=ether3 pvid=200 add bridge=bridge1 interface=ether4 pvid=100 /interface bridge vlan add bridge=bridge1 tagged=ether5 untagged=ether4 vlan-ids=100 add bridge=bridge1 tagged=ether5 untagged=ether1,ether2,ether3 vlan-ids=200 /ip address add address=192.168.88.2/24 interface=ether2 network=192.168.88.0 /interface bridge set bridge1 vlan-filtering=yes |
雖然上述有v6.41前後的差別,但兩主機的os版本不同其實是不影響的.
只要對應的os設置正確,就算RB450G(v6.40.5)/RB750G(v6.41)也不影響使用.
內文搜尋
從 APP 打開
X