0 Load balance Postado por Denilso bordotti em 27 de Setembro de 2013 às 11:41pm Gostaria de regras de load balance para 3 link estou precisando muito obrigado Para adicionar comentários, você deve ser membro de MK-AUTH. Join MK-AUTH Enviar-me um email quando as pessoas responderem – Seguir
Respostas
amigo bom dia me add que eu te ajudo
skype prsoliveira2010
/interface ethernet set 0 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited comment=Velox disabled=no full-duplex=yes l2mtu=1520 mac-address=00:00:00:00:00:00 master-port=none mtu=1500 name=ISP1 speed=100Mbps set 1 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited comment=Gvt disabled=no full-duplex=yes l2mtu=1520 mac-address=00:00:00:00:00:00 master-port=none mtu=1500 name=lSP2 speed=100Mbps set 2 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited comment=Sim disabled=no full-duplex=yes l2mtu=1520 mac-address=00:00:00:00:00:00 master-port=none mtu=1500 name=ISP3 speed=100Mbps set 3 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited disabled=no full-duplex=yes l2mtu=1520 mac-address=00:00:00:00:00:00 master-port=none mtu=1500 name=ether4 speed=100Mbps set 4 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited disabled=no full-duplex=yes l2mtu=1520 mac-address=00:00:00:00:00:00 master-port=none mtu=1500 name=Local speed=100Mbps
/ip address add address=192.168.6.1/30 disabled=no interface=Local network=192.168.6.0
/ip dhcp-client add add-default-route=yes default-route-distance=0 disabled=no interface=ISP1 use-peer-dns=yes use-peer-ntp=yes add add-default-route=no disabled=no interface=ISP3 use-peer-dns=yes use-peer-ntp=yes add add-default-route=yes default-route-distance=0 disabled=no interface=ether4 use-peer-dns=yes use-peer-ntp=yes add add-default-route=no disabled=no interface=lSP2 use-peer-dns=yes use-peer-ntp=yes
/ip dhcp-server config set store-leases-disk=5m
/ip dns set allow-remote-requests=no cache-max-ttl=1w cache-size=20480KiB max-udp-packet-size=4096 servers=""
/ip firewall address-list add address=186.192.80.0/20 comment=Globo disabled=no list=sem_balance add address=200.155.80.0-200.155.255.255 comment=BRADESCO disabled=no list=sem_balance add address=200.220.186.0/24 comment=BRADESCO disabled=no list=sem_balance add address=200.220.178.0/24 comment=BRADESCO disabled=no list=sem_balance add address=64.38.29.0/24 comment=RapidShare disabled=no list=sem_balance add address=208.69.32.0/24 disabled=no list=sem_balance add address=208.67.217.0/24 disabled=no list=sem_balance add address=201.7.178.0/24 disabled=no list=sem_balance add address=201.7.176.0/24 disabled=no list=sem_balance add address=200.159.128.0/24 comment=BRADESCO disabled=no list=sem_balance add address=201.7.176.0/20 comment="Vdeos - Globo" disabled=no list=sem_balance add address=208.84.247.0/24 comment="Vdeos - terratv" disabled=no list=sem_balance add address=200.154.56.0/24 comment="Vdeos - terratv" disabled=no list=sem_balance add address=200.201.160.0/24 comment="Caixa Economica Federal" disabled=no list=sem_balance add address=200.201.166.0/24 disabled=no list=sem_balance add address=200.201.173.0/24 disabled=no list=sem_balance add address=200.201.174.0/24 disabled=no list=sem_balance add address=200.141.207.3 comment=Detran disabled=no list=sem_balance add address=200.201.0.0/16 comment="Caixa Economica Federal" disabled=no list=sem_balance add address=170.66.0.0/24 comment="Banco do Brasil" disabled=no list=sem_balance add address=200.220.0.0/16 comment=Santander disabled=no list=sem_balance add address=200.196.0.0/16 comment=Itau disabled=no list=sem_balance add address=189.56.0.0/16 comment="Nossa Caixa" disabled=no list=sem_balance add address=161.113.0.0/24 comment=HSBC disabled=no list=sem_balance add address=201.7.180.0/24 comment=Globo disabled=no list=sem_balance add address=200.154.56.0/24 comment=Terra disabled=no list=sem_balance add address=208.84.247.0/24 comment=Terra disabled=no list=sem_balance add address=62.140.0.0/16 comment=RapidShare disabled=no list=sem_balance add address=80.152.62.0/24 comment=RapidShare disabled=no list=sem_balance add address=80.231.24.0/24 comment=RapidShare disabled=no list=sem_balance add address=80.231.41.0/24 comment=RapidShare disabled=no list=sem_balance add address=80.231.56.0/24 comment=RapidShare disabled=no list=sem_balance add address=80.231.128.0/24 comment=RapidShare disabled=no list=sem_balance add address=80.239.137.0/24 comment=RapidShare disabled=no list=sem_balance add address=80.239.151.0/24 comment=RapidShare disabled=no list=sem_balance add address=80.239.152.0/24 comment=RapidShare disabled=no list=sem_balance add address=80.239.159.0/24 comment=RapidShare disabled=no list=sem_balance add address=80.239.226.0/24 comment=RapidShare disabled=no list=sem_balance add address=80.239.236.0/24 comment=RapidShare disabled=no list=sem_balance add address=80.239.239.0/24 comment=RapidShare disabled=no list=sem_balance add address=82.129.33.0/24 comment=RapidShare disabled=no list=sem_balance add address=82.129.35.0/24 comment=RapidShare disabled=no list=sem_balance add address=82.129.36.0/24 comment=RapidShare disabled=no list=sem_balance add address=82.129.39.0/24 comment=RapidShare disabled=no list=sem_balance add address=200.155.80.0-200.155.255.255 comment=Bradesco disabled=no list=sem_balance add address=200.220.186.0/24 comment=Bradesco disabled=no list=sem_balance add address=200.220.178.0/24 comment=Bradesco disabled=no list=sem_balance add address=64.38.29.0/24 comment=RapidShare disabled=no list=sem_balance add address=208.69.32.0/24 comment=RapidShare disabled=no list=sem_balance add address=208.67.217.0/24 comment=RapidShare disabled=no list=sem_balance add address=201.7.178.0/24 comment=RapidShare disabled=no list=sem_balance add address=200.159.128.0/24 comment=Bradesco disabled=no list=sem_balance add address=201.7.176.0/20 comment="Globo Videos" disabled=no list=sem_balance add address=200.154.56.0/24 comment=Terra disabled=no list=sem_balance add address=200.201.160.0/24 comment="Caixa Economica Federal" disabled=no list=sem_balance add address=200.201.166.0/24 comment="Caixa Economica Federal" disabled=no list=sem_balance add address=200.201.173.0/24 comment="Caixa Economica Federal" disabled=no list=sem_balance add address=200.201.174.0/24 comment="Caixa Economica Federal" disabled=no list=sem_balance add address=200.141.207.3 comment=Detran disabled=no list=sem_balance add address=85.17.216.46 comment=EasyShare disabled=no list=sem_balance add address=200.222.8.9 comment=Detran disabled=no list=sem_balance add address=200.229.60.72/29 comment="Combat Arms" disabled=no list=sem_balance add address=109.203.101.0/24 comment=Priston disabled=no list=sem_balance add address=186.192.80.0/24 comment=G1 disabled=no list=sem_balance add address=189.114.140.0/24 comment=PROMOB disabled=no list=sem_balance add address=187.61.20.0/24 disabled=no list=sem_balance add address=186.192.82.0/24 comment=Globo disabled=no list=sem_balance
/ip firewall mangle add action=accept chain=prerouting comment="Link Passar fora do Load Balance" disabled=no dst-address-list=sem_balance in-interface=Local add action=accept chain=prerouting comment="BALANCE _PCC_DOIS_LINKS" disabled=no dst-address=192.168.6.0/30 src-address=192.168.6.0/30 add action=accept chain=prerouting disabled=no dst-address=192.168.4.0/30 src-address=192.168.6.0/30 add action=accept chain=prerouting disabled=no dst-address=192.168.4.0/30 src-address=192.168.6.0/30 add action=accept chain=prerouting disabled=no dst-address=201.46.4.0/30 src-address=192.168.6.0/30 add action=mark-connection chain=prerouting comment=****************************************************************************************************** connection-mark=no-mark disabled=no in-interface=ISP1 new-connection-mark=ISP1_conn passthrough=yes add action=mark-connection chain=prerouting connection-mark=no-mark disabled=no in-interface=lSP2 new-connection-mark=ISP2_conn passthrough=yes add action=mark-connection chain=prerouting connection-mark=no-mark disabled=no in-interface=ISP3 new-connection-mark=ISP3_conn passthrough=yes add action=jump chain=prerouting comment=****************************************************************************************************** connection-mark=no-mark disabled=no in-interface=Local jump-target=policy_router add action=mark-routing chain=prerouting comment=****************************************************************************************************** connection-mark=ISP1_conn disabled=no new-routing-mark=ISP1_trafic passthrough=yes src-address=192.168.6.0/30 add action=mark-routing chain=prerouting connection-mark=ISP3_conn disabled=no new-routing-mark=ISP3_trafic passthrough=yes src-address=192.168.6.0/30 add action=mark-routing chain=prerouting connection-mark=ISP2_conn disabled=no new-routing-mark=ISP2_trafic passthrough=yes src-address=192.168.6.0/30 add action=mark-routing chain=output comment=****************************************************************************************************** connection-mark=ISP3_conn disabled=no new-routing-mark=ISP3_trafic passthrough=yes add action=mark-routing chain=output connection-mark=ISP2_conn disabled=no new-routing-mark=ISP2_trafic passthrough=yes add action=mark-routing chain=output connection-mark=ISP1_conn disabled=no new-routing-mark=ISP1_trafic passthrough=yes add action=mark-connection chain=policy_router comment=****************************************************************************************************** disabled=no dst-address-type=!local new-connection-mark=ISP1_conn passthrough=yes per-connection-classifier=both-addresses:3/0 add action=mark-connection chain=policy_router disabled=no dst-address-type=!local new-connection-mark=ISP2_conn passthrough=yes per-connection-classifier=both-addresses:3/1 add action=mark-connection chain=policy_router disabled=no dst-address-type=!local new-connection-mark=ISP3_conn passthrough=yes per-connection-classifier=both-addresses:3/2
/ip firewall nat add action=masquerade chain=srcnat disabled=no out-interface=ISP1 add action=masquerade chain=srcnat disabled=no out-interface=lSP2 add action=masquerade chain=srcnat disabled=no out-interface=ISP3
/ip route add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=192.168.9.254 routing-mark=ISP1_trafic scope=30 target-scope=10 add disabled=no distance=3 dst-address=0.0.0.0/0 gateway=201.46.9.1 routing-mark=ISP3_trafic scope=30 target-scope=10 add disabled=no distance=2 dst-address=0.0.0.0/0 gateway=192.168.9.1 routing-mark=ISP2_trafic scope=30 target-scope=10 add disabled=no distance=2 dst-address=0.0.0.0/0 gateway=192.168.9.1 routing-mark=ISP2_trafic scope=30 target-scope=10 add disabled=no distance=2 dst-address=0.0.0.0/0 gateway=192.168.9.254 scope=30 target-scope=10 add disabled=no distance=3 dst-address=0.0.0.0/0 gateway=201.46.9.1 scope=30 target-scope=10
usar address list para https, é furada veja que 80% da rede é youtube e facebook, que é https, então vc satura um link, perdendo a eficiencia