MikroTik

bingo220

cAP ac (ROS 6.43.12, 6.44b75) 1. Create a Wireless virtual interface: Winbox: "Wireless" > "WiFi Interfaces" > "+" > "Virtual" > ... 2. Add a graph for this virtual interface: Winbox: "Tools" > "Graphing" > "Interface Rules" > &qu...

bingo220

Have same problem.
RB850Gx2, ROS 6.32.3

bingo220

something like this: /ip firewall address-list add list=ip_wan1 address=192.168.1.5 /ip firewall mangle add action=mark-routing chain=prerouting new-routing-mark=static-wan1 src-address-list=ip_wan1 passthrough=no /ip route add distance=1 dst-address=0.0.0.0/0 gateway=pppoe-out1 routing-mark=static...

bingo220

any help ... please

1. configure the modem (linksys wag 120n) in bridge mode
2. set up external IP on the RB (ppp.., dhcp, static, or what required your ISP)

bingo220

1. configure the modem (linksys wag 120n) in bridge mode
2. set up external IP on the RB (ppp.., dhcp, static, or what required your ISP)

bingo220

http://download2.mikrotik.com/routeros/ ... e-6.27.npk
copy to the RB and do
/system package downgrade

bingo220

Try instead "dst-address=197.XXX.XXX.XXX" to use "in-interface=NAMEofWANinterface"

bingo220

InoX , thank you for the reply. I have some doubts. Wikipedia says: offline-time > 0 - the router will go into hibernate mode according the min-runtime setting and 10% of battery power event. In this case, the router will wait until the UPS reports that the battery power is below 10% If I understoo...

bingo220

Hi All! There is a need to monitor the state of the power supply (220V). I plugged usb-cable from UPS to RB. Also to this UPS are connected cameras, switches etc. I made setup and now I can control some UPS parameters. But have problem. I don't know what arguments I need to write to Winbox>System>UP...

bingo220

exactly, the alone vlan can use the full bandwidth of internet.
upd: I was guided this manual, but it is russian.

bingo220

I did it using Queue Tree (share bandwidth of 2 WAN between 24 VLAN).
Your situation is easier.
My example.

bingo220

It's possible that the ip-stream uses UDP protocol.
You need to switch to TCP protocol, if the camera has this setting.
Anyway, I couldn't use the cameras remotely until switched to TCP.

bingo220

The most complete reset is NetInstall.
Video guide.

bingo220

http://forum.mikrotik.com/viewtopic.php ... 08#p464008

bingo220

Start with:
/ip firewall filter

bingo220

Would this work with default configuration or do i need to erase entire config and start over?

You can test it with default config.

bingo220

I think you need something like this: /ip firewall address-list add list=static-wan1 address=10.0.1.2-10.0.1.245 comment="LAN-IPs to WAN1" add list=static-wan2 address=10.0.1.246-10.0.1.254 comment="LAN-IPs to WAN2" /ip firewall mangle add action=mark-routing chain=prerouting src...

bingo220

I once showed my scripts for "no-ip" service, it may interest you.
http://forum.mikrotik.com/viewtopic.php ... 44#p419745

bingo220

is it easier to understand?
http://forum.mikrotik.com/viewtopic.php ... 03#p427103

bingo220

http://download2.mikrotik.com/winbox.exe

bingo220

if i'm right you need to block (udp)5678.

bingo220

1. Winbox can be downloaded directly from the router.
2. http://download2.mikrotik.com/winbox.exe

bingo220

At first, if I understood right, you have a double NAT (why do you use a tp-link?).
At second, do you have a public addresses on each computers? 193.x.x.x and 194.x.x.x aren't local addresses.

bingo220

Make more then one DHCP server (for each VLAN a DHCP server) It's possible. I use 24 DHCP servers for 24 VLANs with managed switch. Add a DHCP POOL but only known mac addresses can get a IP from the pool? I don't want to bind a specific IP to a MAC addres but use the DHCP POOL and only allow know M...

bingo220

Scrummy , I made an access to the ADSL-modem from WAN and from LAN (using access rights). I'll just show my config. ADSL-modem is in bridge mode. modem's Web-port was changed from 80 to 9080 mikrotik's ethernet port connected to modem has a name "eth2", and ip 172.16.18.22/30 modem's ip =...

bingo220

hossain2004a, I have no ping problem (just checked).
Try to use the other hosts.
I think public NTP servers are good choice.

bingo220

I think it is because your connection is marked, in my example default-routes are non-marked.

bingo220

Try do it with "no-ip" ddns.
I think it has to work, because I can send even fake-ip to the server.
http://forum.mikrotik.com/viewtopic.php ... 44#p419745

bingo220

I use like wrote here http://forum.mikrotik.com/viewtopic.php ... 20#p427103

bingo220

http://wiki.mikrotik.com/wiki/Advanced_ ... _Scripting

bingo220

/ip firewall filter add chain=forward prot=tcp dst-port=25 src-address-list=spammer act=drop comment="Block port-25 for SPAMMERS from spammer-list" add chain=forward prot=tcp dst-port=25 connection-limit=30,32 limit=50,5 src-address-list=!spammer action=add-src-to-address-list address-lis...

bingo220

I do it like this http://forum.mikrotik.com/viewtopic.php?f=13&t=77013
I followed this guide, but it's in russian http://asp24.com.ua/blog/dinamicheskij- ... -mikrotik/

bingo220

/ip firewall address-list add list=blocked-comp address=192.168.1.20-192.168.1.35 comment="Blocked computers" /ip firewall filter add chain=forward src-address-list=blocked-comp dst-address-list=allow-www protocol=tcp dst-port=80 action=accept comment="Allow http for some sites"...

bingo220

tpfresh , I use the same script. It's already corrected for you. Three steps... At first, add the routes: /ip route add dst-address=213.180.193.58 gateway=49.48.216.1 scope=10 comment="Static PING way by ISP1-host1" add dst-address=198.41.213.157 gateway=49.48.216.1 scope=10 comment="...

bingo220

/ip firewall address-list add list=blocked-comp address=192.168.1.20-192.168.1.35 comment="Blocked computers" add list=allow-www address=159.148.147.196 comment="Allow http://www.mikrotik.com" /ip firewall filter add chain=forward src-address-list=blocked-comp dst-address-list=a...

bingo220

I think you need to disable DHCP-server on the Tenda LAN-setup. Then setup Tenda LAN ip-address as dhcp-client. Next step - connect Mikrotik-ether3 to LAN-port of Tenda.
I'll repeat again, don't use the WAN port of Tenda. Use LAN-port.

bingo220

I would have made it easier System-Sheduler: Name: enable-eth Start Date: Jan/04/1970 Start Time: 05:30:00 Interval: 7d 00:00:00 On Event: /interface enable ether2 Policy: write,test,read System-Sheduler: Name: disable-eth Start Date: Jan/04/1970 Start Time: 21:45:00 Interval: 7d 00:00:00 On Event: ...

bingo220

I use 3 hosts for each ISP to check the availability of the Internet. This script changes the gateways in the routes if they are changed in the pppoe. ##### Script Settings ##### :local Wan1Name "pppoe1" :local Wan2Name "pppoe2" :local ComW1H1 "Static PING way by ISP1-host1&...

bingo220

:local vpnIP [/ip address get [find interface="vpn_Interface"] address]; :for i from=( [:len $vpnIP] - 1) to=0 do={:if ( [:pick $vpnIP $i] = "/") do={:set vpnIP [:pick $vpnIP 0 $i]}}; /ip firewall address-list add list="MY NETWORK" address=$vpnIP; /ip firewall address-...

bingo220

miramanee, this is a standard rules. You can use it without problem.

bingo220

Change 192.168.88.0/24 if you are using different subnet. /ip firewall filter add chain=input connection-state=invalid action=drop comment="Drop input invalid connection packets" add chain=input connection-state=established action=accept comment="Allow input established connections&qu...

bingo220

...I just want it to allow all ports...

For allow all ports you need no rules.

bingo220

I haven't time to test. /ip firewall mangle add action=mark-packet chain=forward comment="Mark forward from WAN1 to Server" in-interface=wan1 protocol=tcp dst-port=22,25,80,443 new-packet-mark=w1-srv add action=mark-packet chain=forward comment="Mark forward from WAN2 to Server" ...

bingo220

I ve rb2100

What is rb2100?

how can i connect a usb printer

Not sure, but you can try metarouter+OpenWRT
http://wiki.mikrotik.com/wiki/Manual:Metarouter

bingo220

pennytone,
Try to change a port. I think that 80 is busy by RB (web interface).
Or change www-port in "Winbox-IP-Services".

bingo220

http://www.youtube.com/watch?v=GIijZ6_i55g

bingo220

chain=srcnat action=masquerade out-interface= pppoe-out1 log=no log-prefix="" chain=dstnat action=dst-nat to-addresses=192.168.88.252 to-ports=9987 protocol=udp in-interface= ether1-gateway dst-port=9987 log=no log-prefix="" Feel the difference? Your internet connection is "...

bingo220

...Can someone could give me some hints...? a little hint: 8) 4 WAN = "wan1-pppoe","wan2-pppoe","wan3-pppoe","wan4-pppoe" 1 LAN = "lan" /ip route add check-gateway=arp comment="WAN 4 - Distance 1" disabled=no distance=1 dst-address=0.0.0.0...

bingo220

I would suggest next steps:
1. Terminal> /export file=file_name
2. Edit the created file.
3. Use this file on the new RB.

bingo220

first way: WinBox>Ip>Firewall>Address Lists
second way: Terminal> /ip fi addr export
third,fourth... script, log, etc.

bingo220

Copy all text and paste it into terminal, then lift both of these rules in the top (Winbox>Ip>Firewall>Filter Rules). / ip firewall filter add action=drop chain=forward comment=\ "Block port-25 for SPAMMERS from spammer-list (rule-1)" dst-port=25 \ protocol=tcp src-address-list=spammer add...

bingo220

If I understood right, you need reboot the router 1 time for a day:

/system scheduler
add interval=1d name=auto_reboot on-event="/system reboot" policy=\
    ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api \
    start-date=oct/10/2014 start-time=03:00:00

bingo220

/ ip firewall filter add action=drop chain=forward comment=\ "Block port-25 for SPAMMERS from spammer-list (rule-1)" dst-port=25 \ protocol=tcp src-address-list=spammer add action=add-src-to-address-list address-list=spammer address-list-timeout=\ 3d chain=forward comment=\ "Add SPAM...

bingo220

If I understood right,
"LIMIT" has to be a numbers.
Wiki says: "LIMIT should be a value of 100 or..."

bingo220

http://wiki.mikrotik.com/wiki/Forwardin ... nternal_IP

bingo220

Log in modem's web interface - static routes and add the route for 192.168.253.0/255.255.255.0
Just look the active routes, you have route for 192.168.254.0, make same.

bingo220

clients on guest wifi network are unable to access internet...

assume ...
modem has an address in the subnet 192.168.254.x
requests come from a subnet 192.168.253.x
modem rejects those requests.
I think you should add to the modem a local route.

bingo220

The first step, I propose to set up ppp-session on the RB. ADSL-modem has to be in the bridge-mode.

bingo220

I use these rules: /ip firewall mangle add action=mark-connection chain=input comment="Mark WINBOX incoming (isp2)" \ dst-port=8291 in-interface=wan2 new-connection-mark=winbox-isp2 \ passthrough=no protocol=tcp src-address-list=remote-admin add action=mark-routing chain=output comment=&qu...

bingo220

Because default gateway is WAN1.

bingo220

Any ideas?

http://wiki.mikrotik.com/wiki/How_to_Bl ... sing_Proxy

bingo220

1. Create the bridge on RB411 (eth+wlan) with ip-address=192.168.0.2/24
2. Add the default route on the RB411 with gateway=192.168.0.1

I think that's enough.

bingo220

http://www.mikrotik.com/download/router ... 13.torrent

bingo220

You have very different connections.
I would use a failover method, not a loadbanacing.
http://forum.mikrotik.com/viewtopic.php ... 20#p427103

bingo220

Many people use it and do not complain :) Just try it. Ok, I'll try explain about second method. Make sure that your internet-connections don't use "Add default route". To avoid problems, use the public DNS on the router, like 8.8.8.8. Choose four ping-hosts for check an internet accessibi...

bingo220

Both my ISP use a PPPoE connections. PPPoE automatically adds the default-route. Because of it I need to disable this (uncheck "use-default-route"). If your connections is not added the default-route, you can skip this step. I suggest you start with a simple method http://wiki.mikrotik.com...

bingo220

In the both interfaces uncheck "use-default-route"
next step:
simplest method http://wiki.mikrotik.com/wiki/Two_gateways_failover
the best method (for me) http://wiki.mikrotik.com/wiki/Advanced_ ... _Scripting

bingo220

Read my answer (config) here http://forum.mikrotik.com/viewtopic.php ... 99#p409010
Maybe it will be useful.

bingo220

Sometimes I have the situation when pppoe-session is connected, but hasn't an internet. To fix it the pppoe must be reconnected. Made a script for myself. Maybe someone has the same problem. script's steps: 1. Check pppoe-session status connected (if not connected - stop script) 2. Ping "8.8.8....

bingo220

I have 24 vlans with 24 dhcp servers, as yet works fine.
CCR-1016, ROS 6.11.

bingo220

By :local WANInter "WriteHereWanInterfaceName" What name must i set there? the name from ether1 for example? I use name "pppoe2-isp2" If you don't use a ppp-session you need to use name of interface - ether1 etc. The fake ip makes that you do not need to visit their re-activatio...

bingo220

I've never used "freedns.afraid.org". I use "no-ip.com" (".biz" domain). I'll show my script. System-Scripts: Name: noip Policy: write,test,read Source: ##############Script Settings################## :local NOIPUser "WriteHereName" :local NOIPPass "Write...

bingo220

subseven, port 80 takes "www" service.
It has to be closed if you followed this post:

You should consider disabling the www service for your wan port under IP -> Services:

/ip service
set www address=192.168.88.0/24

or even disable it completely:

/ip service
set www disabled=yes

bingo220

I put in all the rules but now not only port 80 is open (tcp). Now even port 53 (udp) is open

udp 53 is open because of:

add chain=input protocol=udp action=accept comment=”Allow UDP”

Disable it if you need.

bingo220

/ip firewall filter add chain=input protocol=icmp action=accept comment=”Allow Ping” add chain=forward protocol=icmp action=accept add chain=input connection-state=established action=accept comment=”Accept established connections” add chain=forward connection-state=established action=accept add cha...

bingo220

Maybe it's really bug.
I found this question http://forum.mikrotik.com/viewtopic.php ... 8&#p416264

Have anyone tried DHCP server on VLAN yet ? Any comments ?

Try to downgrade routerboard to ROS 6.7

bingo220

I'm not sure but try to delete those bridges:

/interface bridge port
add bridge=bridge-local disabled=yes interface=ether2
add bridge=bridge-local disabled=yes interface=ether3

then add "authoritative" options to dhcp servers and reboot router.

bingo220

/ip dhcp-server
add authoritative=yes address-pool=dhcp_vlan1_pool disabled=no interface=vlan1 name=dhcp_vlan1
add authoritative=yes address-pool=dhcp_vlan2_pool disabled=no interface=vlan2 name=dhcp_vlan2

bingo220

I showed the part of my own configuration.
24 vlans are using the 24 dhcp servers and it works fine.

bingo220

Sample: /interface vlan add name=vlan1 vlan-id=1001 interface=eth2 add name=vlan2 vlan-id=1002 interface=eth3 /ip address add address=192.168.1.1/24 interface=vlan1 add address=192.168.2.1/24 interface=vlan2 /ip pool add name=pool1 ranges=192.168.1.10-192.168.1.254 add name=pool2 ranges=192.168.2.1...

bingo220

I think so... /ip firewall address-list add list=stat-isp1 address=192.168.2.52 /ip firewall mangle add action=mark-routing chain=prerouting comment="Mark STATIC route to ISP1" dst-address-type=!local in-interface=BRIDGE new-routing-mark=to_ISP1 src-address-list=stat-isp1 Move this mangle-...

bingo220

http://www.youtube.com/watch?v=lMDZ9uiMOoc

bingo220

http://robert.penz.name/484/howto-use-a ... onnection/

bingo220

i think you need to configure dsl modem in bridge mode.

bingo220

I have no wifi on the RB now. This config doesn't use a wifi module. Follow this guide: System - Reset Configuration (check "No Default Configuration) - Yes Plug ISP1 to port-1 Plug ISP2 to port-2 Plug computer to port-5 (5=master; 3+4=slave) Winbox (connect by mac-address) login:admin passwor...

bingo220

Теоретически, проблем быть не должно. 1. Проверьте, что убраны галочки "use-default-route" на обоих интерфейсах pppoe. 2. Убеждаемся, что в ДНС записаны общедоступные серверы, дабы к ним был доступ с обоих подключений. 3. Нормальная реакция, если не разорвались старые сессии (фактически же...

bingo220

In the both pppoe-interfaces uncheck "use-default-route". (thx c0d3rSh3ll ) In the "IP-Services" disable unnecessary services. Delete all firewall rules. Delete all NAT rules. /ip route add distance=1 gateway=PPPoE1 comment="Default route to WAN1 (distance1)" add distan...

bingo220

simplest method http://wiki.mikrotik.com/wiki/Two_gateways_failover
the best method (for me) http://wiki.mikrotik.com/wiki/Advanced_ ... _Scripting

bingo220

1) Hide all ip-addresses in your previous post (cameras etc.)!!!
2) Add those rules to top and try ping.

add chain=input action=accept protocol=icmp comment="Allow input Ping"
add chain=forward action=accept protocol=icmp comment="Allow forward Ping"

bingo220

boo9 , I have no problem. 25 DHCP-servers work fine. My config (mikrotik eth12-port is connected to D-Link port-26) D-LINK SETUP: config vlan default delete 1-24 create vlan k01 tag 1001 config vlan k01 add untagged 1 config vlan k01 add tagged 26 create vlan k02 tag 1002 config vlan k02 add untagg...

bingo220

My config has 24 vlans on eth12-port. eth12-port has dhcp-server (192.168.200.0/24) vlan01 has dhcp-server (192.168.201.0/24) vlan02 has dhcp-server (192.168.202.0/24) ... vlan24 has dhcp-server (192.168.224.0/24) ----------------------------------------------- Network scheme is here http://forum.mi...

bingo220

IP-ARP

bingo220

http://wiki.mikrotik.com/wiki/Advanced_ ... _Scripting
example http://forum.mikrotik.com/viewtopic.php?f=13&t=78601

bingo220

I think the minimal protection has to look so: /ip firewall filter add chain=input protocol=icmp action=accept comment=”Allow Ping” add chain=forward protocol=icmp action=accept add chain=input connection-state=established action=accept comment=”Accept established connections” add chain=forward conn...

bingo220

I'm not sure, but can try to change gateway-ip to the interface-name. /ip route add dst-address=0.0.0.0/0 gateway=WAN1 routing-mark=to_WAN1 check-gateway=ping add dst-address=0.0.0.0/0 gateway=WAN2 routing-mark=to_WAN2 check-gateway=ping add dst-address=0.0.0.0/0 gateway=WAN1 distance=1 check-gatewa...

bingo220

If I right understood...
We have 3 ethernet ports:
1) eth1-"wan"
2) eth2-"lan1"
3) eth3-"lan2"
We need to use 1 "forward" rule for two lan intefaces:
add chain=forward action=accept in-interface=!wan

bingo220

http://aacable.wordpress.com/2011/06/04 ... t-by-zaib/

bingo220

chain=dstnat action=dst-nat to-addresses=192.168.xxxx to-ports=80 protocol=tcp dst-port=80

Try add to this rule "in-interface=pppoe"
p.s. and do the same for all "dst-nat" rules.

bingo220

Ok. I think we need to do next: 1. Download firmware here http://download2.mikrotik.com/routeros/6.6/routeros-mipsbe-6.6.npk 2. Restore RB to the Factory settings: WinBox-System-Reset Configuration - Keep User Configuration + No Default Configuration + Do Not Backup Reset Configuration,Yes. 3. Conne...

bingo220

it's really strange.
try connect computer directly to ISP - open PPPoE session on computer without RB.
Maybe ISP has a problem.

bingo220

I would suggest using a simple configuration and complicate it gradually, step by step. /ip firewall address-list add list=lan-ip address=192.168.XXX.XXX-192.168.XXX.XXX comment="All IP of my LAN" /ip firewall filter add chain=input connection-state=invalid action=drop comment="Drop i...

bingo220

try make a rule easier:
add action=masquerade chain=srcnat out-interface=pppoe src-address=192.168.0.0/16 to-addresses=0.0.0.0
add action=masquerade chain=srcnat out-interface=pppoe

bingo220

System - Packages

bingo220

try this config: /ip address add address=10.1.1.1/24 interface=Lan network=10.1.1.0 add address=192.168.1.3/24 interface=WAN1 network=192.168.1.0 add address=192.168.2.2/24 interface=WAN2 network=192.168.2.0 /ip route add check-gateway=arp comment="WAN 1 – Distance 1" disabled=no distance=...

bingo220

your configuration really has the Failover-mode for VPN with IPsec ?

I use 2 PPPoE connections, and failover works wonderful.
My example is based on this page.

bingo220

This config has to work. It hasn't the loadbalancing-mode, but has the Failover-mode. You have to change "x" in 10.x.5.1 and 10.x.7.254. Uncheck box "Add default route" in both ISP-connections, if it's using now. Also change AAA.AAA.AAA.AAA to ip-address of Gateway ISP1 (only IP!...

bingo220

/ ip firewall filter add chain=forward prot=tcp dst-port=25 src-address-list=spammer act=drop comment="Block port-25 for SPAMMERS from spammer-list" add chain=forward prot=tcp dst-port=25 connection-limit=30,32 limit=50,5 src-address-list=!spammer action=add-src-to-address-list address-li...

bingo220

Try this config: (Changing the default route takes 20 seconds) /ip route add dst-address=151.197.0.38 gateway=192.168.2.2 scope=10 comment="Static PING way by ISP1-host1" add dst-address=4.2.2.1 gateway=192.168.2.2 scope=10 comment="Static PING way by ISP1-host2" add dst-address=...

bingo220

I have no problem with this script.
It makes ddns-record only when ip-address was changed.
Just try to create a new script and run it manually (1 time in 2 minutes).
Sorry for my bad english.

bingo220

I use this script (for "name.no-ip. BIZ ") Change ".BIZ" to your domain. ##############Script Settings################## :local NOIPUser "username" :local NOIPPass "password" :local WANInter "wan-interface-name" ######################################...

bingo220

I used this guide.
It works wonderful.
One thing: each "gateway=xxx.xxx.xxx.xxx" you have to use only IP! Don't use "interface-name"!

bingo220

Try to add "out-interface=ether1" to each nat-rule.

bingo220

What interface is registered in the dhcp-server?
like this?:
/ ip dhcp-server
add name="dhcp-server-name" interface=bridge-name address-pool="dhcp-pool-name" disabled=no

bingo220

I get server error

I think you tried log in webbox.
webfig and webbox are different things.
Try to use this link: http://your_router_ip/webfig/

bingo220

2) Redundancy/Failover doesnt work, if i disconnect one Link on either Wan, internet continues to be supplied to LAN but on returning the link, it remains "down" until router is rebooted. This happens for whichever WAN i do. I'm not sure, but read please " Workaround 1 " here ht...

bingo220

I bad know english, but will try explain how I made it. I need control ADSL-parameters by modem's web-interface from LAN and from internet (only from ip:123.123.123.123). My LAN-ip: 192.168.200.0/24 My Internet-connection name: pppoe-wan My remote-internet-ip (This is ip-address of other office): 12...

bingo220

Все заработало

Мои поздравления, удачи в дальнейшей настройке.

bingo220

Понизить именно так, как описал в предыдущем посте. Для начала желательно сбросить настроики RB в дефолт, отказавшись от предустановленного конфига. Качаем 4-ю версию с сайта микротика (естественно, под правильный процессор). Закидываем файл на RB в "Files". В теминале вводим /system packa...

bingo220

Если удачно все работало на старой прошивке, откатитесь, проверьте работоспособность конфига еще раз.

Это возможно только при понижени до версии не ниже 2.7.20. Загрузите пакеты более старой версии на маршрутизатор через FTP и затем используйте команду /system package downgrade.

bingo220

Дабы исключить аппаратную поломку, я бы протестировал описанную конфигурацию на vmware (с идентичной ROS).
Если конфиг отрабатывает свое назначение, то сброс в дефолт и перепрошивка RB.
Прошивка не решает проблему - RB в мусор, покупка нового RB. М.б. резковато, но действенно

bingo220

Попробуйте упростить правило маскарадинга
/ip firewall nat
вместо:
add action=masquerade chain=srcnat dst-address=!192.168.0.0 src-address=192.168.88.0
прописать:
add chain=srcnat out-interface=pppoe-out1 action=masquerade

bingo220

nawshad , thank you very much for this description. I tried to save web-surfing history into rb-memory (without a remote log-server). Unfortunately, log-file contains a lot garbage. Opening the one page is logged about 30 rows (even with option "!debug") Is it possible to make it more rea...

bingo220

what is the result of this configuration? Thanks for the reply. This config makes all vlans receive a dynamicaly-identical internet speed. And when I'll add restriction (Limit at) to any vlans the others will divide the remained speed. It works. But I'm not sure about some parameters - "queue ...

bingo220

Hi all. Very hope to get a help here. Will use a google-translator, sorry. I need equally divide the internet speed between vlans. And if it's possible equally divide speed between vlan users. Have 2 ISP in failover mode. ISP1 (cable)- 100/20 mbit/s ISP2 (ADSL) - 17/1 mbit/s For example, what I want...

Search found 124 matches