不好意思,最近又遇到了一個新問題,
自己試了一天還是沒有辦法解決,
想來請教各位的協助
目前我的router裡面是有做PPPoE多撥,
主要對外是走中華非固固定IP(Route的Distance設為1)
另外有撥號四組的浮動IP,且沒有設定預設路由,Distance皆設為2
RoutingMark分別設為Dy1~Dy4。
而浮動IP的部分,第一組浮動IP直接給遊戲機用
設定方法是
並在NAT頁面分別設定srcnat masquerade和dstnat,
這樣遊戲機的NAT類型就可以為最高等級
不過剛剛在設定第二組浮動IP給NAS用的時候,
發現NAS雖然可以對外,但從外面卻無法從第二組IP連進來,
反而第一組IP可以,想詢問問題出在哪裡?
Mangle設定
/ip firewall mangle
add action=mark-routing chain=prerouting comment=\
"Switch\B9\EF\A5~\A8\ABhinet-dy1" new-routing-mark=to-dy1 passthrough=yes \
src-address=10.3.11.4
add action=mark-connection chain=prerouting in-interface=hinet-pppoe-dy2 \
new-connection-mark=dy2-conn passthrough=yes
add action=mark-connection chain=forward in-interface=hinet-pppoe-dy2 \
new-connection-mark=dy2-conn passthrough=yes
add action=mark-routing chain=output connection-mark=dy2-conn \
new-routing-mark=to-dy2 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=dy2-conn \
new-routing-mark=to-dy2 passthrough=yes
NAT設定
/ip firewall nat
add action=masquerade chain=srcnat comment="Switch\\B9\\EF\\A5~IP (hinet-dy1)" \
out-interface=hinet-pppoe-dy1 src-address=10.3.11.4
add action=dst-nat chain=dstnat in-interface=hinet-pppoe-dy1 to-addresses=\
10.3.11.4
add action=masquerade chain=srcnat comment="NAS\\B9\\EF\\A5~IP (hinet-dy2)" \
out-interface=hinet-pppoe-dy2 src-address=10.3.10.1
add action=dst-nat chain=dstnat disabled=yes in-interface=hinet-pppoe-dy2 \
to-addresses=10.3.10.1
add action=masquerade chain=srcnat comment="\\A4@\\AF\\EB\\B3]\\B3\\C6\\B9\\EF\\A5~IP" \
out-interface=hinet-pppoe-static src-address=10.3.0.0/19 to-addresses=\
111.242.78.140
add action=masquerade chain=srcnat comment="*****NAT LOOPBACK*****" \
dst-address=10.3.0.0/19 src-address=10.3.0.0/19
add action=dst-nat chain=dstnat comment="NAS \\BA\\F4\\AD\\B6\\A4\\B6\\AD\\B1" \
dst-port=8000 in-interface-list=!LAN protocol=tcp to-addresses=10.3.10.1 \
to-ports=8000
add action=dst-nat chain=dstnat dst-port=8001 in-interface-list=!LAN \
protocol=tcp to-addresses=10.3.10.1 to-ports=8001
add action=dst-nat chain=dstnat comment="NAS MariaDB" dst-port=3306 \
in-interface-list=!LAN protocol=tcp to-addresses=10.3.10.1 to-ports=3306
add action=dst-nat chain=dstnat comment="NAS \\A4U\\B8\\FC\\A4\\A4\\A4\\DF" \
dst-port=51417 in-interface-list=!LAN protocol=tcp to-addresses=10.3.10.1 \
to-ports=51417
add action=dst-nat chain=dstnat dst-port=51417 in-interface-list=!LAN \
protocol=udp to-addresses=10.3.10.1 to-ports=51417
add action=dst-nat chain=dstnat comment="NAS \\BA\\F4\\AD\\B6\\A6\\F8\\AAA\\BE\\B9" \
dst-port=80 in-interface-list=!LAN protocol=tcp to-addresses=10.3.10.1 \
to-ports=80
add action=dst-nat chain=dstnat dst-port=443 in-interface-list=!LAN protocol=\
tcp to-addresses=10.3.10.1 to-ports=443
遊戲機和NAS的IP分別為10.3.11.4以及10.3.10.1
蔣大胖胖胖胖胖胖!chiang fat fat fat fat fat fat