Renato escreveu:Fica complicado entregar ips validos para seu cliente usando balance com 02 operadoras.
A forma correta seria vc ter ASN e subir BGP pelas duas operadoras.
Sim eu sei mas a operadora 2 é adsl, ai ja viu ne.
Por enquanto nao tenho como conseguir uma segunda operadora, o custo inviabiliza.
Sei que tem jeito de fazer so ainda não sei como.
Material que eu estava vendo mas nao consegui resolver.
Segue
*****************//////////////////////////////***************************
X Links ---->> Balance ------>>>> Concentrador
No NAT do Link onde tenho os IPs válidos faço uma exceção para o bloco de ips válidos, crio uma address list com esses ips válidos, adiciono uma regra de markrouting especifica para o gateway de saída dos ips válidos, observando a ordem dessa regra que deve estar a cima das demais regras de markrouting.
add action=mark-routing chain=prerouting comment=\
"Marcadores de Rota - Excecao IPs Validos" in-interface=clientes \
new-routing-mark=to_wlan1 passthrough=no src-address-list="Rota IPs Validos"
**************//////////////////////*****************************
/ip firewall nat
add action=masquerade chain=srcnat comment=SERVIDOR dst-address=\
out-interface=ether1 src-address=!189.126.x.x/27
add action=masquerade chain=srcnat comment=SERVIDOR out-interface=\
"Gvt - Invalido"
add action=masquerade chain=srcnat comment=SERVIDOR out-interface=\
"Gvt - Valido"
*********************////////////////////////////////************************
Mangle
/ip firewall mangle
add chain=prerouting comment=Loopback dst-address-list=loopback in-interface=\
clientes
add action=mark-connection chain=input comment=wlan1_conn in-interface=ether1 \
new-connection-mark=wlan1_conn
add action=mark-connection chain=input comment=wlan2_conn in-interface=\
"Gvt - Invalido" new-connection-mark=wlan2_conn
add action=mark-connection chain=input comment=wlan2_conn in-interface=\
"Gvt - Valido" new-connection-mark=wlan3_conn
add action=mark-connection chain=output comment=to_wlan1 connection-mark=\
wlan1_conn new-connection-mark=to_wlan1 passthrough=no
add action=mark-connection chain=output comment=to_wlan2 connection-mark=\
wlan2_conn new-connection-mark=to_wlan2 passthrough=no
add action=mark-connection chain=output comment=to_wlan3 connection-mark=\
wlan3_conn new-connection-mark=to_wlan3 passthrough=no
add action=mark-connection chain=prerouting comment=Contadores \
connection-state=new dst-address-type=!local in-interface=clientes \
new-connection-mark=wlan1_conn per-connection-classifier=\
both-addresses:3/0
add action=mark-connection chain=prerouting connection-state=new \
dst-address-type=!local in-interface=clientes new-connection-mark=\
wlan2_conn per-connection-classifier=both-addresses:3/1
add action=mark-connection chain=prerouting connection-state=new \
dst-address-type=!local in-interface=clientes new-connection-mark=\
wlan3_conn per-connection-classifier=both-addresses:3/2
add action=mark-routing chain=prerouting comment=\
"Marcadores de Rota - Excecao IPs Validos" in-interface=clientes \
new-routing-mark=to_wlan1 passthrough=no src-address-list="Rota IP VALIDO"
add action=mark-routing chain=prerouting comment=\
"Marcadores de Rota - Rota GVT" in-interface=clientes new-routing-mark=\
to_wlan2 passthrough=no src-address-list="Rota GVT"
add action=mark-routing chain=prerouting comment="Marcadores de Rota " \
connection-mark=wlan1_conn in-interface=clientes new-routing-mark=to_wlan1 \
passthrough=no
add action=mark-routing chain=prerouting connection-mark=wlan2_conn \
in-interface=clientes new-routing-mark=to_wlan2 passthrough=no
add action=mark-routing chain=prerouting connection-mark=wlan3_conn \
in-interface=clientes new-routing-mark=to_wlan3 passthrough=no
ip firewall address-list
/ip firewall address-list
add address=10.200.1.2 comment="Clientes que deverao sair pela gvt - para adici\
onar novo apenas copie a regra e coloque o ip desejado" list="Rota GVT"
add address=189.126.x.x/27 comment=\
"Clientes que deverao sair pelo Dedicado" list="Rota IP Valido"
add address=127.0.0.1 list=loopback
add address=123.123.123.2 list=liberados
add address=192.168.2.124 list=liberados
add address=170.66.11.0/24 list=loopback
ip route
/ip route
add distance=1 gateway=189.126.xx.y routing-mark=to_wlan1
add distance=1 gateway="Gvt - Invalido" routing-mark=to_wlan2
add distance=1 gateway="Gvt - Valido" routing-mark=to_wlan3
add distance=1 gateway=189.126.xx.yy
add distance=2 gateway="Gvt - Valido"
add distance=3 gateway="Gvt - Invalido"
add comment="Rota IPs Validos" distance=1 dst-address=189.126.99.yy/27 \
gateway=10.200.1.1
Nota: 189.126.99.yy/27 Bloco de IPs válidos.
10.200.1.1 IP do Concentrador que distribui os ips para os clientes.
Início
