Community discussions

MikroTik App
 
Redwald
just joined
Topic Author
Posts: 2
Joined: Thu Aug 26, 2021 5:04 pm

wan PCC load balance issue from v6 to v7

Tue Dec 28, 2021 4:14 pm

new to here
uesd to have a openwrt device
now have RB4011
learned everything from scratch

now have a issue can not solve
i have three pppoe wan connections:
1 1000Mbps down 100Mbps up
2 300Mbps down 100Mbps up
3 300Mbps down 100Mbps up

in order to utilize all of them, i configured the PCC mangle rules and have a rather satisfying result
speed test on computer can achieve 1100Mbps down and 300Mbps up

however when upgraded from v6 to v7, with new configuration applied, only around 800Mbps down can be obtained

what could be the problem?
or how to improve my configuration?

another problem is that ping type (check gateway, ping and ping type) config is missing in the route config in v7,
will it be added in the future ?

here is the v6 config with password erased

/interface bridge
add add-dhcp-option82=yes dhcp-snooping=yes igmp-snooping=yes \
    ingress-filtering=yes name=local protocol-mode=mstp vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] loop-protect=on loop-protect-disable-time=1m
set [ find default-name=ether2 ] loop-protect=on loop-protect-disable-time=1m
set [ find default-name=ether3 ] loop-protect=on loop-protect-disable-time=1m
set [ find default-name=ether4 ] loop-protect=on loop-protect-disable-time=1m
set [ find default-name=ether5 ] loop-protect=on loop-protect-disable-time=1m
set [ find default-name=ether6 ] loop-protect=on loop-protect-disable-time=1m
set [ find default-name=ether7 ] loop-protect=on loop-protect-disable-time=1m
set [ find default-name=ether8 ] loop-protect=on loop-protect-disable-time=1m
set [ find default-name=ether9 ] loop-protect=on loop-protect-disable-time=1m
set [ find default-name=ether10 ] loop-protect=on loop-protect-disable-time=\
    1m
set [ find default-name=sfp-sfpplus1 ] loop-protect=on \
    loop-protect-disable-time=1m sfp-shutdown-temperature=65C
/interface pppoe-client
add add-default-route=yes disabled=no interface=ether6 name=pppoe-out1-1000 \
    password= user=
add add-default-route=yes default-route-distance=2 disabled=no interface=\
    ether7 name=pppoe-out2-300 password= user=
add add-default-route=yes default-route-distance=3 disabled=no interface=\
    ether7 name=pppoe-out3-300 password= user=
/interface vlan
add interface=local loop-protect=on loop-protect-disable-time=1m name=\
    vlan10-lan vlan-id=10
add interface=local loop-protect=on loop-protect-disable-time=1m name=\
    vlan30-iot vlan-id=30
add interface=local loop-protect=on loop-protect-disable-time=1m name=\
    vlan40-guest vlan-id=40
add interface=local loop-protect=on loop-protect-disable-time=1m name=\
    vlan50-test vlan-id=50
/caps-man datapath
add bridge=local name=local
/caps-man security
add authentication-types=wpa2-psk disable-pmkid=yes encryption=aes-ccm \
    group-encryption=aes-ccm group-key-update=30m name=lan passphrase=\
   
add authentication-types=wpa2-psk disable-pmkid=yes encryption=aes-ccm \
    group-encryption=aes-ccm group-key-update=30m name=iot passphrase=\
    
add disable-pmkid=yes name=guest
add authentication-types=wpa2-psk disable-pmkid=yes encryption=aes-ccm \
    group-encryption=aes-ccm group-key-update=30m name=test passphrase=\
    
/interface ethernet switch port
set 0 default-vlan-id=0
set 1 default-vlan-id=0
set 2 default-vlan-id=0
set 3 default-vlan-id=0
set 4 default-vlan-id=0
set 5 default-vlan-id=0
set 6 default-vlan-id=0
set 7 default-vlan-id=0
set 8 default-vlan-id=0
set 9 default-vlan-id=0
set 10 default-vlan-id=0
set 11 default-vlan-id=0
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=lan ranges=10.10.0.2-10.10.7.254
add name=iot ranges=10.10.12.2-10.10.15.254
add name=guest ranges=10.10.20.2-10.10.23.254
add name=test ranges=10.10.24.2-10.10.27.254
/ip dhcp-server
add add-arp=yes address-pool=lan always-broadcast=yes disabled=no interface=\
    vlan10-lan lease-time=30m name=lan
add add-arp=yes address-pool=iot always-broadcast=yes disabled=no interface=\
    vlan30-iot lease-time=30m name=iot
add add-arp=yes address-pool=guest always-broadcast=yes disabled=no \
    interface=vlan40-guest lease-time=30m name=guest
add add-arp=yes address-pool=test always-broadcast=yes disabled=no interface=\
    vlan50-test lease-time=30m name=test
/ipv6 dhcp-server
add address-pool=1000 interface=vlan10-lan lease-time=30m name=lan
add address-pool=1000 interface=vlan30-iot lease-time=30m name=iot
add address-pool=1000 interface=vlan40-guest lease-time=30m name=guest
add address-pool=1000 interface=vlan50-test lease-time=30m name=test
/interface bridge port
add bridge=local ingress-filtering=yes interface=sfp-sfpplus1 pvid=10
add bridge=local ingress-filtering=yes interface=ether1 pvid=10
add bridge=local ingress-filtering=yes interface=ether2 pvid=10
add bridge=local ingress-filtering=yes interface=ether3 pvid=10
add bridge=local ingress-filtering=yes interface=ether4 pvid=10
add bridge=local ingress-filtering=yes interface=ether5 pvid=50
add bridge=local interface=ether10
add bridge=local interface=ether9
/ip neighbor discovery-settings
set discover-interface-list=all
/interface bridge vlan
add bridge=local tagged=local,ether10,ether9 vlan-ids=10
add bridge=local tagged=local,ether10,ether9 vlan-ids=30
add bridge=local tagged=local,ether10,ether9 vlan-ids=40
add bridge=local tagged=local,ether10,ether9 vlan-ids=50
/ip address
add address=192.168.101.100/24 interface=ether6 network=192.168.101.0
add address=192.168.102.100/24 interface=ether7 network=192.168.102.0
add address=10.10.10.1/24 interface=vlan10-lan network=10.10.10.0
add address=10.10.0.1/21 interface=vlan10-lan network=10.10.0.0
add address=10.10.12.1/22 interface=vlan30-iot network=10.10.12.0
add address=10.10.20.1/22 interface=vlan40-guest network=10.10.20.0
add address=10.10.24.1/22 interface=vlan50-test network=10.10.24.0
add address=192.168.103.100/24 interface=ether8 network=192.168.103.0
/ip dhcp-server network
add address=10.10.0.0/21 gateway=10.10.0.1
add address=10.10.12.0/22 gateway=10.10.12.1
add address=10.10.20.0/22 gateway=10.10.20.1
add address=10.10.24.0/22 gateway=10.10.24.1
/ip dns
set allow-remote-requests=yes cache-max-ttl=30m cache-size=10240KiB \
    max-concurrent-queries=1000 max-concurrent-tcp-sessions=200 servers="223.5\
    .5.5,223.6.6.6,114.114.114.114,114.114.115.115,1.1.1.1,1.0.0.1,8.8.8.8,8.8\
    .4.4,208.67.222.222,208.67.220.220,9.9.9.9,149.112.112.112,180.76.76.76,24\
    00:3200::1,2400:3200:baba::1,2606:4700:4700::1111,2606:4700:4700::1001,200\
    1:4860:4860::8888,2001:4860:4860::8844,2620:0:ccc::2,2620:0:ccd::2,2620:11\
    9:35::35,2620:119:53::53,2620:fe::fe,2620:fe::9,2400:da00::6666"
/ip firewall mangle
add action=mark-connection chain=prerouting connection-mark=no-mark \
    dst-address=!192.168.100.0/22 dst-address-type=!local in-interface=\
    all-vlan new-connection-mark=localtowan1000_3/0 passthrough=yes \
    per-connection-classifier=both-addresses-and-ports:5/0
add action=mark-connection chain=prerouting connection-mark=no-mark \
    dst-address=!192.168.100.0/22 dst-address-type=!local in-interface=\
    all-vlan new-connection-mark=localtowan1000_3/1 passthrough=yes \
    per-connection-classifier=both-addresses-and-ports:5/1
add action=mark-connection chain=prerouting connection-mark=no-mark \
    dst-address=!192.168.100.0/22 in-interface=all-vlan new-connection-mark=\
    localtowan1000_3/2 passthrough=yes per-connection-classifier=\
    both-addresses-and-ports:5/2
add action=mark-connection chain=prerouting connection-mark=no-mark \
    dst-address=!192.168.100.0/22 dst-address-type=!local in-interface=\
    all-vlan new-connection-mark=localtowan300_1_1/0 passthrough=yes \
    per-connection-classifier=both-addresses-and-ports:5/3
add action=mark-connection chain=prerouting connection-mark=no-mark \
    dst-address=!192.168.100.0/22 dst-address-type=!local in-interface=\
    all-vlan new-connection-mark=localtowan300_2_1/0 passthrough=yes \
    per-connection-classifier=both-addresses-and-ports:5/4
add action=mark-routing chain=prerouting connection-mark=localtowan1000_3/0 \
    dst-address=!192.168.100.0/22 in-interface=all-vlan new-routing-mark=\
    wan1000_route passthrough=yes
add action=mark-routing chain=prerouting connection-mark=localtowan1000_3/1 \
    dst-address=!192.168.100.0/22 in-interface=all-vlan new-routing-mark=\
    wan1000_route passthrough=yes
add action=mark-routing chain=prerouting connection-mark=localtowan1000_3/2 \
    dst-address=!192.168.100.0/22 in-interface=all-vlan new-routing-mark=\
    wan1000_route passthrough=yes
add action=mark-routing chain=prerouting connection-mark=localtowan300_1_1/0 \
    dst-address=!192.168.100.0/22 in-interface=all-vlan new-routing-mark=\
    wan300_1_route passthrough=yes
add action=mark-routing chain=prerouting connection-mark=localtowan300_2_1/0 \
    dst-address=!192.168.100.0/22 in-interface=all-vlan new-routing-mark=\
    wan300_2_route passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark \
    in-interface=pppoe-out1-1000 new-connection-mark=wan1000 passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark \
    in-interface=pppoe-out2-300 new-connection-mark=wan300_1 passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark \
    in-interface=pppoe-out3-300 new-connection-mark=wan300_2 passthrough=yes
add action=mark-routing chain=output connection-mark=wan1000 \
    new-routing-mark=wan1000_route passthrough=yes
add action=mark-routing chain=output connection-mark=wan300_1 \
    new-routing-mark=wan300_1_route passthrough=yes
add action=mark-routing chain=output connection-mark=wan300_2 \
    new-routing-mark=wan300_2_route passthrough=yes
/ip firewall nat
add action=masquerade chain=srcnat out-interface=pppoe-out1-1000
add action=masquerade chain=srcnat out-interface=pppoe-out2-300
add action=masquerade chain=srcnat out-interface=pppoe-out3-300
add action=masquerade chain=srcnat dst-address=192.168.101.0/24 \
    out-interface=ether6 src-address=10.10.0.0/21
add action=masquerade chain=srcnat dst-address=192.168.102.0/24 \
    out-interface=ether7 src-address=10.10.0.0/21
add action=masquerade chain=srcnat dst-address=192.168.103.0/24 \
    out-interface=ether8 src-address=10.10.0.0/21
/ip route
add check-gateway=ping distance=1 gateway=pppoe-out1-1000 routing-mark=\
    wan1000_route
add check-gateway=ping distance=1 gateway=pppoe-out2-300 routing-mark=\
    wan300_1_route
add check-gateway=ping distance=1 gateway=pppoe-out3-300 routing-mark=\
    wan300_2_route
add distance=1 dst-address=192.168.101.0/24 gateway=192.168.101.1
add distance=1 dst-address=192.168.102.0/24 gateway=192.168.102.1
add distance=1 dst-address=192.168.103.0/24 gateway=192.168.103.1
/ip service
set telnet disabled=yes
set ftp disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip upnp
set allow-disable-external-interface=yes enabled=yes
/ip upnp interfaces
add interface=pppoe-out1-1000 type=external
add interface=pppoe-out2-300 type=external
add interface=pppoe-out3-300 type=external
add interface=vlan10-lan type=internal
add interface=vlan30-iot type=internal
add interface=vlan40-guest type=internal
add interface=vlan50-test type=internal
/ipv6 address
add from-pool=1000 interface=vlan10-lan
add from-pool=1000 interface=vlan30-iot
add from-pool=1000 interface=vlan40-guest
add from-pool=1000 interface=vlan50-test
/ipv6 dhcp-client
add interface=pppoe-out1-1000 pool-name=1000 request=prefix use-peer-dns=no
add disabled=yes interface=pppoe-out2-300 pool-name=300-1 request=prefix \
    use-peer-dns=no
add disabled=yes interface=pppoe-out3-300 pool-name=300-2 request=prefix \
    use-peer-dns=no
/ipv6 nd
set [ find default=yes ] mtu=1480 other-configuration=yes
add interface=vlan10-lan mtu=1480 other-configuration=yes
add interface=vlan30-iot mtu=1480 other-configuration=yes
add interface=vlan40-guest mtu=1480 other-configuration=yes
add interface=vlan50-test mtu=1480 other-configuration=yes
/system clock
set time-zone-name=Asia/Shanghai
/system package update
set channel=upgrade
/system watchdog
set automatic-supout=no watchdog-timer=no
/tool bandwidth-server
set enabled=no
/tool mac-server
set allowed-interface-list=none
/tool mac-server ping
set enabled=no

here is the v7 config

/interface bridge
add add-dhcp-option82=yes dhcp-snooping=yes igmp-snooping=yes name=local \
    protocol-mode=mstp vlan-filtering=yes
/interface ethernet
set [ find default-name=ether1 ] loop-protect=on loop-protect-disable-time=1m
set [ find default-name=ether2 ] loop-protect=on loop-protect-disable-time=1m
set [ find default-name=ether3 ] loop-protect=on loop-protect-disable-time=1m
set [ find default-name=ether4 ] loop-protect=on loop-protect-disable-time=1m
set [ find default-name=ether5 ] loop-protect=on loop-protect-disable-time=1m
set [ find default-name=ether6 ] loop-protect=on loop-protect-disable-time=1m
set [ find default-name=ether7 ] loop-protect=on loop-protect-disable-time=1m
set [ find default-name=ether8 ] loop-protect=on loop-protect-disable-time=1m
set [ find default-name=ether9 ] loop-protect=on loop-protect-disable-time=1m
set [ find default-name=ether10 ] loop-protect=on loop-protect-disable-time=\
    1m
set [ find default-name=sfp-sfpplus1 ] l2mtu=9200 loop-protect=on \
    loop-protect-disable-time=1m mtu=9100 sfp-shutdown-temperature=65C
/interface vlan
add interface=local loop-protect=on loop-protect-disable-time=1m name=\
    vlan10-lan vlan-id=10
add interface=local loop-protect=on loop-protect-disable-time=1m name=\
    vlan30-iot vlan-id=30
add interface=local loop-protect=on loop-protect-disable-time=1m name=\
    vlan40-guest vlan-id=40
add interface=local loop-protect=on loop-protect-disable-time=1m name=\
    vlan50-test vlan-id=50
/caps-man datapath
add bridge=local name=local
/interface pppoe-client
add add-default-route=yes disabled=no interface=ether6 name=pppoe-out1-1000 \
    user=
add add-default-route=yes default-route-distance=2 disabled=no interface=\
    ether7 name=pppoe-out2-300 user=
add add-default-route=yes default-route-distance=3 disabled=no interface=\
    ether7 name=pppoe-out3-300 user=
/caps-man security
add authentication-types=wpa2-psk disable-pmkid=yes encryption=aes-ccm \
    group-encryption=aes-ccm group-key-update=30m name=lan
add authentication-types=wpa2-psk disable-pmkid=yes encryption=aes-ccm \
    group-encryption=aes-ccm group-key-update=30m name=iot
add disable-pmkid=yes name=guest
add authentication-types=wpa2-psk disable-pmkid=yes encryption=aes-ccm \
    group-encryption=aes-ccm group-key-update=30m name=test
/interface lte apn
set [ find default=yes ] ip-type=ipv4
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=lan ranges=10.10.0.2-10.10.7.254
add name=iot ranges=10.10.12.2-10.10.15.254
add name=guest ranges=10.10.20.2-10.10.23.254
add name=test ranges=10.10.24.2-10.10.27.254
/ip dhcp-server
add add-arp=yes address-pool=lan always-broadcast=yes interface=vlan10-lan \
    lease-time=30m name=lan
add add-arp=yes address-pool=iot always-broadcast=yes interface=vlan30-iot \
    lease-time=30m name=iot
add add-arp=yes address-pool=guest always-broadcast=yes interface=\
    vlan40-guest lease-time=30m name=guest
add add-arp=yes address-pool=test always-broadcast=yes interface=vlan50-test \
    lease-time=30m name=test
/ipv6 dhcp-server
add address-pool=1000 interface=vlan10-lan lease-time=30m name=lan
add address-pool=1000 interface=vlan30-iot lease-time=30m name=iot
add address-pool=1000 interface=vlan40-guest lease-time=30m name=guest
add address-pool=1000 interface=vlan50-test lease-time=30m name=test
/port
set 0 name=serial0
set 1 name=serial1
/routing bgp template
set default as=65530 disabled=no name=default output.network=bgp-networks
/routing table
add fib name=""
add disabled=no fib name=wan1000_route
add disabled=no fib name=wan300_1_route
add disabled=no fib name=wan300_2_route
/interface bridge port
add bridge=local interface=sfp-sfpplus1 pvid=10
add bridge=local interface=ether1 pvid=10
add bridge=local interface=ether2 pvid=10
add bridge=local interface=ether3 pvid=10
add bridge=local interface=ether4 pvid=10
add bridge=local interface=ether5 pvid=40
add bridge=local ingress-filtering=no interface=ether10
add bridge=local ingress-filtering=no interface=ether9
/ip neighbor discovery-settings
set discover-interface-list=all
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set max-neighbor-entries=8192
/interface bridge vlan
add bridge=local tagged=local,ether10,ether9 vlan-ids=10
add bridge=local tagged=local,ether10,ether9 vlan-ids=30
add bridge=local tagged=local,ether10,ether9 vlan-ids=40
add bridge=local tagged=local,ether10,ether9 vlan-ids=50
/ip address
add address=192.168.101.100/24 interface=ether6 network=192.168.101.0
add address=192.168.102.100/24 interface=ether7 network=192.168.102.0
add address=10.10.10.1/24 interface=vlan10-lan network=10.10.10.0
add address=10.10.0.1/21 interface=vlan10-lan network=10.10.0.0
add address=10.10.12.1/22 interface=vlan30-iot network=10.10.12.0
add address=10.10.20.1/22 interface=vlan40-guest network=10.10.20.0
add address=10.10.24.1/22 interface=vlan50-test network=10.10.24.0
add address=192.168.103.100/24 interface=ether8 network=192.168.103.0
/ip dhcp-server network
add address=10.10.0.0/21 gateway=10.10.0.1
add address=10.10.12.0/22 gateway=10.10.12.1
add address=10.10.20.0/22 gateway=10.10.20.1
add address=10.10.24.0/22 gateway=10.10.24.1
/ip dns
set allow-remote-requests=yes cache-max-ttl=30m cache-size=102400KiB \
    max-concurrent-queries=100000 max-concurrent-tcp-sessions=20000 servers="2\
    23.5.5.5,223.6.6.6,114.114.114.114,114.114.115.115,1.1.1.1,1.0.0.1,8.8.8.8\
    ,8.8.4.4,208.67.222.222,208.67.220.220,9.9.9.9,149.112.112.112,180.76.76.7\
    6,2400:3200::1,2400:3200:baba::1,2606:4700:4700::1111,2606:4700:4700::1001\
    ,2001:4860:4860::8888,2001:4860:4860::8844,2620:0:ccc::2,2620:0:ccd::2,262\
    0:119:35::35,2620:119:53::53,2620:fe::fe,2620:fe::9,2400:da00::6666"
/ip firewall mangle
add action=mark-connection chain=prerouting connection-mark=no-mark \
    dst-address=!192.168.100.0/22 dst-address-type=!local in-interface=\
    all-vlan new-connection-mark=localtowan1000_3/0 passthrough=yes \
    per-connection-classifier=both-addresses-and-ports:5/0
add action=mark-connection chain=prerouting connection-mark=no-mark \
    dst-address=!192.168.100.0/22 dst-address-type=!local in-interface=\
    all-vlan new-connection-mark=localtowan1000_3/1 passthrough=yes \
    per-connection-classifier=both-addresses-and-ports:5/1
add action=mark-connection chain=prerouting connection-mark=no-mark \
    dst-address=!192.168.100.0/22 in-interface=all-vlan new-connection-mark=\
    localtowan1000_3/2 passthrough=yes per-connection-classifier=\
    both-addresses-and-ports:5/2
add action=mark-connection chain=prerouting connection-mark=no-mark \
    dst-address=!192.168.100.0/22 dst-address-type=!local in-interface=\
    all-vlan new-connection-mark=localtowan300_1_1/0 passthrough=yes \
    per-connection-classifier=both-addresses-and-ports:5/3
add action=mark-connection chain=prerouting connection-mark=no-mark \
    dst-address=!192.168.100.0/22 dst-address-type=!local in-interface=\
    all-vlan new-connection-mark=localtowan300_2_1/0 passthrough=yes \
    per-connection-classifier=both-addresses-and-ports:5/4
add action=mark-routing chain=prerouting connection-mark=localtowan1000_3/0 \
    dst-address=!192.168.100.0/22 in-interface=all-vlan new-routing-mark=\
    wan1000_route passthrough=yes
add action=mark-routing chain=prerouting connection-mark=localtowan1000_3/1 \
    dst-address=!192.168.100.0/22 in-interface=all-vlan new-routing-mark=\
    wan1000_route passthrough=yes
add action=mark-routing chain=prerouting connection-mark=localtowan1000_3/2 \
    dst-address=!192.168.100.0/22 in-interface=all-vlan new-routing-mark=\
    wan1000_route passthrough=yes
add action=mark-routing chain=prerouting connection-mark=localtowan300_1_1/0 \
    dst-address=!192.168.100.0/22 in-interface=all-vlan new-routing-mark=\
    wan300_1_route passthrough=yes
add action=mark-routing chain=prerouting connection-mark=localtowan300_2_1/0 \
    dst-address=!192.168.100.0/22 in-interface=all-vlan new-routing-mark=\
    wan300_2_route passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark \
    in-interface=pppoe-out1-1000 new-connection-mark=wan1000 passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark \
    in-interface=pppoe-out2-300 new-connection-mark=wan300_1 passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark \
    in-interface=pppoe-out3-300 new-connection-mark=wan300_2 passthrough=yes
add action=mark-routing chain=output connection-mark=wan1000 \
    new-routing-mark=wan1000_route passthrough=yes
add action=mark-routing chain=output connection-mark=wan300_1 \
    new-routing-mark=wan300_1_route passthrough=yes
add action=mark-routing chain=output connection-mark=wan300_2 \
    new-routing-mark=wan300_2_route passthrough=yes
/ip firewall nat
add action=masquerade chain=srcnat out-interface=pppoe-out1-1000
add action=masquerade chain=srcnat out-interface=pppoe-out2-300
add action=masquerade chain=srcnat out-interface=pppoe-out3-300
add action=masquerade chain=srcnat dst-address=192.168.101.0/24 \
    out-interface=ether6 src-address=10.10.0.0/21
add action=masquerade chain=srcnat dst-address=192.168.102.0/24 \
    out-interface=ether7 src-address=10.10.0.0/21
add action=masquerade chain=srcnat dst-address=192.168.103.0/24 \
    out-interface=ether8 src-address=10.10.0.0/21
/ip route
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=pppoe-out1-1000 \
    routing-table=wan1000_route scope=30 suppress-hw-offload=no target-scope=\
    10
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=pppoe-out2-300 \
    pref-src="" routing-table=wan300_1_route scope=30 suppress-hw-offload=no \
    target-scope=10
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=pppoe-out3-300 \
    pref-src="" routing-table=wan300_2_route scope=30 suppress-hw-offload=no \
    target-scope=10
/ip service
set telnet disabled=yes
set ftp disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes
/ip upnp
set allow-disable-external-interface=yes enabled=yes
/ip upnp interfaces
add interface=pppoe-out1-1000 type=external
add interface=pppoe-out2-300 type=external
add interface=pppoe-out3-300 type=external
add interface=vlan10-lan type=internal
add interface=vlan30-iot type=internal
add interface=vlan40-guest type=internal
add interface=vlan50-test type=internal
/ipv6 address
# address pool error: pool not found: 1000 (4)
add from-pool=1000 interface=vlan10-lan
# address pool error: pool not found: 1000 (4)
add from-pool=1000 interface=vlan30-iot
# address pool error: pool not found: 1000 (4)
add from-pool=1000 interface=vlan40-guest
# address pool error: pool not found: 1000 (4)
add from-pool=1000 interface=vlan50-test
/ipv6 dhcp-client
add interface=pppoe-out1-1000 pool-name=1000 request=prefix use-peer-dns=no
add interface=pppoe-out2-300 pool-name=300-1 request=prefix use-peer-dns=no
add interface=pppoe-out3-300 pool-name=300-2 request=prefix use-peer-dns=no
/ipv6 nd
set [ find default=yes ] mtu=1480 other-configuration=yes
add interface=vlan10-lan mtu=1480 other-configuration=yes
add interface=vlan30-iot mtu=1480 other-configuration=yes
add interface=vlan40-guest mtu=1480 other-configuration=yes
add interface=vlan50-test mtu=1480 other-configuration=yes
/system clock
set time-zone-name=Asia/Shanghai
/system resource irq rps
set sfp-sfpplus1 disabled=no
/system watchdog
set automatic-supout=no watchdog-timer=no
/tool bandwidth-server
set enabled=no
/tool mac-server
set allowed-interface-list=none
/tool mac-server ping
set enabled=no

Who is online

Users browsing this forum: Amazon [Bot], Bing [Bot] and 64 guests