There are three channels the Internet, the Internet-1, the Internet-2, the Internet-3.
In address list there are some groups IP (group-1, group-2, group-3 и.д.).
Groups are routed on different channels of the Internet, for example: group-1 on the Internet-1… Group-2 on the Internet-2… Group-3 on the Internet-3… Group-4 on the Internet-1 etc.
How to give access to all groups from address list on some IP the channel the Internet-3?
Here export mangl:
/ip firewall mangle
add action=mark-packet chain=prerouting comment="" disabled=no \
dst-address-list=wlc new-packet-mark=movies passthrough=no
add action=mark-routing chain=prerouting comment="Mark routing for Limit 01" \
disabled=no new-routing-mark=Limit_01 passthrough=yes src-address-list=\
01.Limit
add action=mark-routing chain=prerouting comment="Mark routing for Limit 02" \
disabled=no new-routing-mark=Limit_02 passthrough=yes src-address-list=\
02.Limit
add action=mark-routing chain=prerouting comment="Mark routing for Limit 03" \
disabled=no new-routing-mark=Limit_03 passthrough=yes src-address-list=\
03.Limit
add action=mark-routing chain=prerouting comment="Mark routing for Limit 04" \
disabled=no new-routing-mark=Limit_04 passthrough=yes src-address-list=\
04.Limit
add action=mark-routing chain=prerouting comment="Mark routing for Limit 05" \
disabled=no new-routing-mark=Limit_05 passthrough=yes src-address-list=\
05.Limit
add action=mark-routing chain=prerouting comment="Mark routing for Limit 06" \
disabled=no new-routing-mark=Limit_06 passthrough=yes src-address-list=\
06.Limit
add action=mark-routing chain=prerouting comment=\
"Mark routing for Unlimit 512" disabled=no new-routing-mark=Unlim_512 \
passthrough=yes src-address-list=07.Unlimit-512
add action=mark-routing chain=prerouting comment=\
"Mark routing for Unlimit 1024" disabled=no new-routing-mark=Unlim_1024 \
passthrough=yes src-address-list=08.Unlimit-1024
add action=mark-routing chain=prerouting comment=\
"Mark routing for Unlimit 2048" disabled=no new-routing-mark=Unlim_2048 \
passthrough=yes src-address-list=09.Unlimit-2048
add action=mark-routing chain=prerouting comment=\
"Mark routing for Unlimit 3072" disabled=no new-routing-mark=Unlim_3072 \
passthrough=yes src-address-list=10.Unlimit-3072
add action=mark-routing chain=prerouting comment="Mark routing for Limit+" \
disabled=no new-routing-mark=Limit+ passthrough=yes src-address-list=\
11.Limit+
add action=mark-packet chain=forward comment="Mark packet for 01.Limit" \
disabled=no dst-address-list=01.Limit in-interface=pppoe-wlc-limit \
new-packet-mark=01_limit_down passthrough=no
add action=mark-packet chain=forward comment="" disabled=no dst-address-list=\
01.Limit in-interface=pppoe-domolink new-packet-mark=01_limit_down \
passthrough=no
add action=mark-packet chain=forward comment="" disabled=no in-interface=\
ether4 new-packet-mark=01_limit_upl passthrough=no src-address-list=\
01.Limit
add action=mark-packet chain=forward comment="Mark packet for 02.Limit" \
disabled=no dst-address-list=02.Limit in-interface=pppoe-wlc-limit \
new-packet-mark=02_limit_down passthrough=no
add action=mark-packet chain=forward comment="" disabled=no dst-address-list=\
02.Limit in-interface=pppoe-domolink new-packet-mark=02_limit_down \
passthrough=no
add action=mark-packet chain=forward comment="" disabled=no in-interface=\
ether4 new-packet-mark=02_limit_upl passthrough=no src-address-list=\
02.Limit
add action=mark-packet chain=forward comment="Mark packet for 03.Limit" \
disabled=no dst-address-list=03.Limit in-interface=pppoe-wlc-limit \
new-packet-mark=03_limit_down passthrough=no
add action=mark-packet chain=forward comment="" disabled=no dst-address-list=\
03.Limit in-interface=pppoe-domolink new-packet-mark=03_limit_down \
passthrough=no
add action=mark-packet chain=forward comment="" disabled=no in-interface=\
ether4 new-packet-mark=03_limit_upl passthrough=no src-address-list=\
03.Limit
add action=mark-packet chain=forward comment="Mark packet for 04.Limit" \
disabled=no dst-address-list=04.Limit in-interface=pppoe-wlc-limit \
new-packet-mark=04_limit_down passthrough=no
add action=mark-packet chain=forward comment="" disabled=no dst-address-list=\
04.Limit in-interface=pppoe-domolink new-packet-mark=04_limit_down \
passthrough=no
add action=mark-packet chain=forward comment="" disabled=no in-interface=\
ether4 new-packet-mark=04_limit_upl passthrough=no src-address-list=\
04.Limit
add action=mark-packet chain=forward comment="Mark packet for 05.Limit" \
disabled=no dst-address-list=05.Limit in-interface=pppoe-wlc-limit \
new-packet-mark=05_limit_down passthrough=no
add action=mark-packet chain=forward comment="" disabled=no dst-address-list=\
05.Limit in-interface=pppoe-domolink new-packet-mark=05_limit_down \
passthrough=no
add action=mark-packet chain=forward comment="" disabled=no in-interface=\
ether4 new-packet-mark=05_limit_upl passthrough=no src-address-list=\
05.Limit
add action=mark-packet chain=forward comment="Mark packet for 06.Limit" \
disabled=no dst-address-list=06.Limit in-interface=pppoe-wlc-limit \
new-packet-mark=06_limit_down passthrough=no
add action=mark-packet chain=forward comment="" disabled=no dst-address-list=\
06.Limit in-interface=pppoe-domolink new-packet-mark=06_limit_down \
passthrough=no
add action=mark-packet chain=forward comment="" disabled=no in-interface=\
ether4 new-packet-mark=06_limit_upl passthrough=no src-address-list=\
06.Limit
add action=mark-packet chain=forward comment="Mark packet for Limit+" \
disabled=no dst-address-list=11.Limit+ in-interface=pppoe-wlc-limit \
new-packet-mark=limit+_down passthrough=no
add action=mark-packet chain=forward comment="" disabled=no dst-address-list=\
11.Limit+ in-interface=pppoe-domolink new-packet-mark=limit+_down \
passthrough=no
add action=mark-packet chain=forward comment="" disabled=no in-interface=\
ether4 new-packet-mark=limit+_upl passthrough=no src-address-list=\
11.Limit+
add action=mark-packet chain=forward comment="Mark packet for 512" disabled=\
no dst-address-list=07.Unlimit-512 in-interface=pppoe-wlc-unlimit \
new-packet-mark=512_down passthrough=no
add action=mark-packet chain=forward comment="" disabled=no dst-address-list=\
07.Unlimit-512 in-interface=pppoe-domolink new-packet-mark=512_down \
passthrough=no
add action=mark-packet chain=forward comment="" disabled=no in-interface=\
ether4 new-packet-mark=512_upl passthrough=no src-address-list=\
07.Unlimit-512
add action=mark-packet chain=forward comment="Mark packet for 1024" disabled=\
no dst-address-list=08.Unlimit-1024 in-interface=pppoe-wlc-unlimit \
new-packet-mark=1024_down passthrough=no
add action=mark-packet chain=forward comment="" disabled=no dst-address-list=\
08.Unlimit-1024 in-interface=pppoe-domolink new-packet-mark=1024_down \
passthrough=no
add action=mark-packet chain=forward comment="" disabled=no in-interface=\
ether4 new-packet-mark=1024_upl passthrough=no src-address-list=\
08.Unlimit-1024
add action=mark-packet chain=forward comment="Mark packet for 2048" disabled=\
no dst-address-list=09.Unlimit-2048 in-interface=pppoe-domolink \
new-packet-mark=2048_down passthrough=no
add action=mark-packet chain=forward comment="" disabled=no dst-address-list=\
09.Unlimit-2048 in-interface=pppoe-wlc-limit new-packet-mark=2048_down \
passthrough=no
add action=mark-packet chain=forward comment="" disabled=no in-interface=\
ether4 new-packet-mark=2048_upl passthrough=no src-address-list=\
09.Unlimit-2048
add action=mark-packet chain=forward comment="Mark packet for 3072" disabled=\
no dst-address-list=10.Unlimit-3072 in-interface=pppoe-domolink \
new-packet-mark=3072_down passthrough=no
add action=mark-packet chain=forward comment="" disabled=no dst-address-list=\
10.Unlimit-3072 in-interface=pppoe-wlc-limit new-packet-mark=3072_down \
passthrough=no
add action=mark-packet chain=forward comment="" disabled=no in-interface=\
ether4 new-packet-mark=3072_upl passthrough=no src-address-list=\
10.Unlimit-3072
add action=change-mss chain=forward comment="" disabled=no new-mss=1360 \
protocol=tcp tcp-flags=syn
The first rule allows all groups from address list to have access to resources on the pppoe-wlc-limit
These groups 01.Limit, 02.Limit ~ 06.Limit, 11.Limit +, 09.Unlimit-2048, 10.Unlimit-3072… At downloading with without paid resources on the channel pppoe-wlc-limit get under shaper
You need to accept all packages to those resources before the policy routing starts ( in mangle)
Then just create specific routes in the default routing table.
you will have 4 streams
- traffic without marks that use default routing table.
- traffic from Group1 to Internet1
- traffic from Group2 to Internet2
- traffic from Group3 to Internet3
And unless here they do not aim?
add action=mark-packet chain=prerouting comment="" disabled=no \
dst-address-list=wlc new-packet-mark=movies passthrough=no
wlc - Group from address list without paid resources.
movies - any label.
How it to make? Has not understood the sentence…