sory i dont understand yr question
if u ask me: all 4 isp working fine with load balance
but i want to choose one isp to msn or.. not working
Hi,
post results of ‘/ip route print’
hiiiii
Hi,
that’s not the result of ‘ip route print’ - it’s a snapshot of the winbox routing table. it doesn’t show all the info.
anyway…
please /also/ show us the result of ‘int print’ as well as ‘ip route print’
cheers.
hiiiiiiiiiiiiiiiiiiiiiiii
OK, thanks.
Just one more: ‘ip address print’
it would help a lot if you just highlight the text in the terminal window and right-click-copy then paste into the forum text editor.
Cheers.
I would just like to quickly point out that using MLPPP and combining all four circuits into one - as you are asking in your other thread - is the opposite of what you’re asking in here, and you cannot do both at the same time.
Flags: X - disabled, I - invalid, D - dynamic
ADDRESS NETWORK BROADCAST
0 X 143.168.143.243/24 143.168.143.0 143.168.143.255
1 X 182.30.16.134/24 182.30.16.0 182.30.16.255
2 10.10.10.1/24 10.10.10.0 10.10.10.255
3 192.129.0.3/24 192.129.0.0 192.129.0.255
4 X 192.168.24.26/24 192.168.24.0 192.168.24.255
5 192.166.0.3/24 192.166.0.0 192.166.0.255
6 192.168.0.150/24 192.168.0.0 192.168.0.255
7 192.168.23.150/24 192.168.23.0 192.168.23.255
8 D 10.10.10.1/32 10.10.10.98 0.0.0.0
9 D 10.10.10.1/32 10.10.10.40 0.0.0.0
10 D 10.10.10.1/32 10.10.10.43 0.0.0.0
11 D 10.10.10.1/32 10.10.10.94 0.0.0.0
12 D 10.10.10.1/32 10.10.10.200 0.0.0.0
13 D 10.10.10.1/32 10.10.10.9 0.0.0.0
14 D 10.10.10.1/32 10.10.10.173 0.0.0.0
15 D 10.10.10.1/32 10.10.10.165 0.0.0.0
16 D 10.10.10.1/32 10.10.10.12 0.0.0.0
17 D 10.10.10.1/32 10.10.10.189 0.0.0.0
18 D 10.10.10.1/32 10.10.10.95 0.0.0.0
19 D 10.10.10.1/32 10.10.10.159 0.0.0.0
OK, have you got NAT rules set up for each outbound interface? Each one probably need a src-nat or masquerade to make sure that the source address of outbound packets matches the interface that it is transmitted on.
It may also be easier if you can just attach your supout.rif
Cheers,
[admin@DS new] ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=srcnat src-address=10.10.10.0/24 action=masquerade
all interface work with this nat
Post a reply
The extension rif is not allowed.
any help plzzzzzzzzzzzzzzz
you can just change the filename to ._if, or .txt or something else perhaps?
so lets get this straight: if you disable the mangle rule you show above, then msn works. when you enable it, doesn’t work.
is that essentially right?
- this mangle work for browsing ,all port
chain=prerouting src-address=10.10.10.0/26 action=mark-routing
new-routing-mark=GroupA passthrough=no - this mangle for msn not work
chain=prerouting src-address=10.10.10.0/26 protocol=tcp dst-port=1863
action=mark-routing new-routing-mark=msn passthrough=no
What about of you change the first rule like this:
chain=prerouting src-address=10.10.10.0/26 action=mark-routing new-routing-mark=msn passthrough=no
?
Cheers.
- i change new-routing-mark to msn also i change route..Mark= msn
yes there is internet..
0 ;;; GroupA
chain=prerouting src-address=10.10.10.0/26 action=mark-routing
new-routing-mark=msn passthrough=no
what version of ROS are you using ??
v:3.20
I think that you have identified a problem with your nexthop path via 192.129.0.2 - what /is/ that address anyway? can you ping it? if you connect just a PC to that gateway, can you get internet access that way?
Cheers.
i changed to next route it is work thxxx
but if i put address for www.facebook.com knowing that facebook range 189.0/24 and 190.0/24
only first page open, if i want to login..> the page cannectbe displayed why?
many thxxx