PCC LOADBALANCE COM 8 LINKS SIMÉTRICOS

TENHO 8 MODENS PRECISO FAZER O LOADBALANCE COM ESSES LINKS,
HÁ UM TUTORIAL NO FÓRUM COMO FAZER COM ATÉ 16 LINKS,
SÓ QUE NO TUTORIAL MOSTRA COM 3 LINKS.
MONTEI AS REGRAS COM OS 8 MODENS GOSTARIA QUE ME DIGAM SE ESTA CORRETA ESSAS REGRAS..
DESDE JÁ AGRADEÇO..

VERSAO 3.X
EthLinkA = Interface do primeiro link
EthLinkB = Interface do segundo link
EthLinkC = Interface do terceiro link
EthLinkD = Interface do quarto link
EthLinkE = Interface do quinto link
EthLinkF = Interface do sexto link
EthLinkG = Interface do setimo link
EthLinkH = Interface do oitavo link


EthClientes = Interface dos clientes

Quando em modo roteado:
10.1.10.129 = Ip do modem A
10.1.10.161 = Ip do modem B
10.1.10.193 = Ip do modem C
10.1.10.171 = Ip do modem D
10.1.10.182 = Ip do modem E
10.1.10.131 = Ip do modem F
10.1.10.141 = Ip do modem G
10.1.10.151 = Ip do modem H


Endereços das interfaces no Mikrotik ROS
10.1.10.130/27 = Ip da interface EthLinkA
10.1.10.162/27 = Ip da interface EthLinkB
10.1.10.194/27 = Ip da interface EthLinkC
10.1.10.172/27 = Ip da interface EthLinkD
10.1.10.183/27 = Ip da interface EthLinkE
10.1.10.132/27 = Ip da interface EthLinkF
10.1.10.142/27 = Ip da interface EthLinkG
10.1.10.152/27 = Ip da interface EthLinkH


=========

Vamos as regras e explanações sobre o sistema PCC

Em mangle
add action=accept chain=prerouting comment="SEM BALANCE" disabled=no dst-address-list=sem_balance in-interface=EthClientes
esta primera regra aceita as conexões para todos os ips de destino que se encontrarem na lista 'sem_balance' que irão sair pela rota padrão

add action=mark-connection chain=input comment="" connection-state=new disabled=no in-interface=EthLinkA new-connection-mark=conn_na passthrough=yes
add action=mark-connection chain=input comment="" connection-state=new disabled=no in-interface=EthLinkB new-connection-mark=conn_nb passthrough=yes
add action=mark-connection chain=input comment="" connection-state=new disabled=no in-interface=EthLinkC new-connection-mark=conn_nc passthrough=yes

add action=mark-connection chain=input comment="" connection-state=new disabled=no in-interface=EthLinkD new-connection-mark=conn_na passthrough=yes

add action=mark-connection chain=input comment="" connection-state=new disabled=no in-interface=EthLinkE new-connection-mark=conn_na passthrough=yes

add action=mark-connection chain=input comment="" connection-state=new disabled=no in-interface=EthLinkF new-connection-mark=conn_na passthrough=yes

add action=mark-connection chain=input comment="" connection-state=new disabled=no in-interface=EthLinkG new-connection-mark=conn_na passthrough=yes

add action=mark-connection chain=input comment="" connection-state=new disabled=no in-interface=EthLinkH new-connection-mark=conn_na passthrough=yes

cria as marcas (conn_na, conn_nb, conn_nc) para novas conexões em cada uma das interfaces (EthLinkA, EthLinkB, EthLinkC)

add action=mark-routing chain=output comment="" connection-mark=conn_na disabled=no new-routing-mark=to_ra passthrough=no
add action=mark-routing chain=output comment="" connection-mark=conn_nb disabled=no new-routing-mark=to_rb passthrough=no
add action=mark-routing chain=output comment="" connection-mark=conn_nc disabled=no new-routing-mark=to_rc passthrough=no
utiliza as marcações (conn_na, conn_nb, conn_nc) para criar as marcações das respectivas rotas (to_ra, to_rb, to_rc)

add action=mark-connection chain=prerouting comment="" disabled=no dst-address-type=!local in-interface=EthClientes new-connection-mark=conn_ma0 passthrough=yes per-connection-classifier=both-addresses:8/0
add action=mark-connection chain=prerouting comment="" disabled=no dst-address-type=!local in-interface=EthClientes new-connection-mark=conn_mb1 passthrough=yes per-connection-classifier=both-addresses:8/1
add action=mark-connection chain=prerouting comment="" disabled=no dst-address-type=!local in-interface=EthClientes new-connection-mark=conn_mc2 passthrough=yes per-connection-classifier=both-addresses:8/2

agora utilizando os classificadores (0,1,2 e portanto são 3) na interface de clientes criamos novas marcas de conexão (conn_ma0, conn_mb1, conn_mc2), notem que se tivessemos 4 links seria aquie que fariamos as alterações para (0,1,2,3 e portanto são 4) ficando 4/0, 4/1, 4/2, 4/3 ou ainda se tivessemos links assimétricos onde por exemplo:

LinkX de 512k
LinkY de 1024k
LinkZ de 2048k

somariamos todos os links e dividiriamos pelo valor do menor link então teriamos 3584k/512k=7 então teriamos 7 marcações de pcc indo de 7/0 até 7/6 das quais devemos direcionar a primeira pro link X, a segunda e terceira pro link Y e as quatro restantes para o link Z fazendo nosso sistema perfeitamente equilibrado, vale resaltar que sistemas do tipo ADSL não garantem a banda e portanto devemos fazer testes em cada um dos links para aferir as velocidades possíveis em cada um, já vi muitos casos onde um link desse tipo de 2Mb era melhor do que o de 4Mb da mesma operadora instalada no mesmo local, também se deve criar as marcações para input e output.

add action=mark-routing chain=prerouting comment="" connection-mark=conn_ma0 disabled=no in-interface=EthClientes new-routing-mark=to_nra passthrough=no
add action=mark-routing chain=prerouting comment="" connection-mark=conn_mb1 disabled=no in-interface=EthClientes new-routing-mark=to_nrb passthrough=no
add action=mark-routing chain=prerouting comment="" connection-mark=conn_mc2 disabled=no in-interface=EthClientes new-routing-mark=to_nrc passthrough=no
utilizando das novas marcações (conn_ma0, conn_mb1, conn_mc2) criamos uma nova marcação de rota na interface de clientes como (to_nra, to_nrb, to_nrc)

============================== ============================== ==========

Em nat
add action=masquerade chain=srcnat comment="MASCARAMENTO PCC" disabled=no out-interface=EthLinkA
add action=masquerade chain=srcnat comment="" disabled=no out-interface=EthLinkB
add action=masquerade chain=srcnat comment="" disabled=no out-interface=EthLinkC
add action=masquerade chain=srcnat comment="" disabled=no out-interface=EthLinkD
add action=masquerade chain=srcnat comment="" disabled=no out-interface=EthLinkE
add action=masquerade chain=srcnat comment="" disabled=no out-interface=EthLinkF
add action=masquerade chain=srcnat comment="" disabled=no out-interface=EthLinkG
add action=masquerade chain=srcnat comment="" disabled=no out-interface=EthLinkH

vale resaltar que o mascaramento pode ser feito de várias formas, indicando por exempo o ip da interface em src-nat, pela range de ips dos clientes e pela interface do link como acima.

========

Em rotas
add comment="" disabled=no distance=2 dst-address=0.0.0.0/0 gateway=10.1.10.129 scope=30 target-scope=10
add comment="" disabled=no distance=3 dst-address=0.0.0.0/0 gateway=10.1.10.161 scope=30 target-scope=10
add comment="" disabled=no distance=4 dst-address=0.0.0.0/0 gateway=10.1.10.193 scope=30 target-scope=10
add comment="" disabled=no distance=4 dst-address=0.0.0.0/0 gateway=10.1.10.171 scope=30 target-scope=10
add comment="" disabled=no distance=4 dst-address=0.0.0.0/0 gateway=10.1.10.182 scope=30 target-scope=10
add comment="" disabled=no distance=4 dst-address=0.0.0.0/0 gateway=10.1.10.131 scope=30 target-scope=10
add comment="" disabled=no distance=4 dst-address=0.0.0.0/0 gateway=10.1.10.141 scope=30 target-scope=10
add comment="" disabled=no distance=4 dst-address=0.0.0.0/0 gateway=10.1.10.151 scope=30 target-scope=10

definimos 3 rotas padrão sendo que cada uma tem um custo diferente e portanto a primeira terá a preferencia, caso venha a faltar a segunda assume, em seguida a terceira

add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=10.1.10.129 routing-mark=to_nra scope=30 target-scope=10
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=10.1.10.161 routing-mark=to_nrc scope=30 target-scope=10
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=10.1.10.193 routing-mark=to_nrb scope=30 target-scope=10
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=10.1.10.171 routing-mark=to_nrb scope=30 target-scope=10
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=10.1.10.182 routing-mark=to_nrb scope=30 target-scope=10
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=10.1.10.131 routing-mark=to_nrb scope=30 target-scope=10
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=10.1.10.141 routing-mark=to_nrb scope=30 target-scope=10
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=10.1.10.151 routing-mark=to_nrb scope=30 target-scope=10
em seguida todas as 3 rotas que utilizam marca de rotas (to_nra, to_nrb, to_nrc) dividem a carga que foi previamente marcada pelo mangle

==============

Ainda é possível fazer com que o próprio Mikrotik ROS disque as conexões do tipo ADSL aumentando a eficiência do sistema (MODENS EM BRIDGE), sendo que neste caso é recomendado fazer o mascaramento por range de ips e não por interface e a indicação dos gateways por interface e não por ip, no caso de links dedicados é recomendável fazer a indicação do ip do gateway e não da interface.

Em nat
add action=masquerade chain=srcnat src-address=10.0.0.0/24 comment="MASCARAMENTO PCC" disabled=no

Em rotas
add comment="" disabled=no distance=2 dst-address=0.0.0.0/0 gateway=EthLinkA scope=30 target-scope=10
add comment="" disabled=no distance=3 dst-address=0.0.0.0/0 gateway=EthLinkB scope=30 target-scope=10
add comment="" disabled=no distance=4 dst-address=0.0.0.0/0 gateway=EthLinkC scope=30 target-scope=10
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=EthLinkA routing-mark=to_nra
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=EthLinkB routing-mark=to_nrb
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=EthLinkC routing-mark=to_nrc

Citação:

---

Postado originalmente por adrianocurvelo

TENHO 8 MODENS PRECISO FAZER O LOADBALANCE COM ESSES LINKS,
HÁ UM TUTORIAL NO FÓRUM COMO FAZER COM ATÉ 16 LINKS,
SÓ QUE NO TUTORIAL MOSTRA COM 3 LINKS.
MONTEI AS REGRAS COM OS 8 MODENS GOSTARIA QUE ME DIGAM SE ESTA CORRETA ESSAS REGRAS..
DESDE JÁ AGRADEÇO..

VERSAO 3.X
EthLinkA = Interface do primeiro link
EthLinkB = Interface do segundo link
EthLinkC = Interface do terceiro link
EthLinkD = Interface do quarto link
EthLinkE = Interface do quinto link
EthLinkF = Interface do sexto link
EthLinkG = Interface do setimo link
EthLinkH = Interface do oitavo link


EthClientes = Interface dos clientes

Quando em modo roteado:
em bridge fica melhor!

10.1.1.1/30 = Ip do modem A
10.1.2.1/30 = Ip do modem B
10.1.3.1/30 = Ip do modem C
10.1.4.1/30 = Ip do modem D
10.1.5.1/30 = Ip do modem E
10.1.6.1/30 = Ip do modem F
10.1.7.1/30 = Ip do modem G
10.1.8.1/30 = Ip do modem H


Endereços das interfaces no Mikrotik ROS
10.1.1.2/30 = Ip da interface EthLinkA
10.1.2.2/30 = Ip da interface EthLinkB
10.1.3.2/30 = Ip da interface EthLinkC
10.1.4.2/30 = Ip da interface EthLinkD
10.1.5.2/30 = Ip da interface EthLinkE
10.1.6.2/30 = Ip da interface EthLinkF
10.1.7.2/30 = Ip da interface EthLinkG
10.1.8.2/30 = Ip da interface EthLinkH


=========

Vamos as regras e explanações sobre o sistema PCC

Em mangle
add action=accept chain=prerouting comment="SEM BALANCE" disabled=no dst-address-list=sem_balance in-interface=EthClientes
add action=mark-connection chain=input comment="" connection-state=new disabled=no in-interface=EthLinkA new-connection-mark=conn_na passthrough=yes
add action=mark-connection chain=input comment="" connection-state=new disabled=no in-interface=EthLinkB new-connection-mark=conn_nb passthrough=yes
add action=mark-connection chain=input comment="" connection-state=new disabled=no in-interface=EthLinkC new-connection-mark=conn_nc passthrough=yes
add action=mark-connection chain=input comment="" connection-state=new disabled=no in-interface=EthLinkD new-connection-mark=conn_nd passthrough=yes
add action=mark-connection chain=input comment="" connection-state=new disabled=no in-interface=EthLinkE new-connection-mark=conn_ne passthrough=yes
add action=mark-connection chain=input comment="" connection-state=new disabled=no in-interface=EthLinkF new-connection-mark=conn_nf passthrough=yes
add action=mark-connection chain=input comment="" connection-state=new disabled=no in-interface=EthLinkG new-connection-mark=conn_ng passthrough=yes
add action=mark-connection chain=input comment="" connection-state=new disabled=no in-interface=EthLinkH new-connection-mark=conn_nh passthrough=yes

add action=mark-routing chain=output comment="" connection-mark=conn_na disabled=no new-routing-mark=to_ra passthrough=no
add action=mark-routing chain=output comment="" connection-mark=conn_nb disabled=no new-routing-mark=to_rb passthrough=no
add action=mark-routing chain=output comment="" connection-mark=conn_nc disabled=no new-routing-mark=to_rc passthrough=no
add action=mark-routing chain=output comment="" connection-mark=conn_nd disabled=no new-routing-mark=to_rd passthrough=no
add action=mark-routing chain=output comment="" connection-mark=conn_ne disabled=no new-routing-mark=to_re passthrough=no
add action=mark-routing chain=output comment="" connection-mark=conn_nf disabled=no new-routing-mark=to_rf passthrough=no
add action=mark-routing chain=output comment="" connection-mark=conn_ng disabled=no new-routing-mark=to_rg passthrough=no
add action=mark-routing chain=output comment="" connection-mark=conn_nh disabled=no new-routing-mark=to_rh passthrough=no

add action=mark-connection chain=prerouting comment="" disabled=no dst-address-type=!local in-interface=EthClientes new-connection-mark=conn_ma0 passthrough=yes per-connection-classifier=both-addresses-and-ports:8/0
add action=mark-connection chain=prerouting comment="" disabled=no dst-address-type=!local in-interface=EthClientes new-connection-mark=conn_mb1 passthrough=yes per-connection-classifier=both-addresses-and-ports:8/1
add action=mark-connection chain=prerouting comment="" disabled=no dst-address-type=!local in-interface=EthClientes new-connection-mark=conn_mc2 passthrough=yes per-connection-classifier=both-addresses-and-ports:8/2
add action=mark-connection chain=prerouting comment="" disabled=no dst-address-type=!local in-interface=EthClientes new-connection-mark=conn_md3 passthrough=yes per-connection-classifier=both-addresses-and-ports:8/3
add action=mark-connection chain=prerouting comment="" disabled=no dst-address-type=!local in-interface=EthClientes new-connection-mark=conn_me4 passthrough=yes per-connection-classifier=both-addresses-and-ports:8/4
add action=mark-connection chain=prerouting comment="" disabled=no dst-address-type=!local in-interface=EthClientes new-connection-mark=conn_mf5 passthrough=yes per-connection-classifier=both-addresses-and-ports:8/5
add action=mark-connection chain=prerouting comment="" disabled=no dst-address-type=!local in-interface=EthClientes new-connection-mark=conn_mg6 passthrough=yes per-connection-classifier=both-addresses-and-ports:8/6
add action=mark-connection chain=prerouting comment="" disabled=no dst-address-type=!local in-interface=EthClientes new-connection-mark=conn_mh7 passthrough=yes per-connection-classifier=both-addresses-and-ports:8/7

add action=mark-routing chain=prerouting comment="" connection-mark=conn_ma0 disabled=no in-interface=EthClientes new-routing-mark=to_nra passthrough=no
add action=mark-routing chain=prerouting comment="" connection-mark=conn_mb1 disabled=no in-interface=EthClientes new-routing-mark=to_nrb passthrough=no
add action=mark-routing chain=prerouting comment="" connection-mark=conn_mc2 disabled=no in-interface=EthClientes new-routing-mark=to_nrc passthrough=no
add action=mark-routing chain=prerouting comment="" connection-mark=conn_md3 disabled=no in-interface=EthClientes new-routing-mark=to_nrd passthrough=no
add action=mark-routing chain=prerouting comment="" connection-mark=conn_me4 disabled=no in-interface=EthClientes new-routing-mark=to_nre passthrough=no
add action=mark-routing chain=prerouting comment="" connection-mark=conn_mf5 disabled=no in-interface=EthClientes new-routing-mark=to_nrf passthrough=no
add action=mark-routing chain=prerouting comment="" connection-mark=conn_mg6 disabled=no in-interface=EthClientes new-routing-mark=to_nrg passthrough=no
add action=mark-routing chain=prerouting comment="" connection-mark=conn_mh7 disabled=no in-interface=EthClientes new-routing-mark=to_nrh passthrough=no

Em nat
add action=masquerade chain=srcnat comment="MASCARAMENTO PCC" disabled=no out-interface=EthLinkA
add action=masquerade chain=srcnat comment="" disabled=no out-interface=EthLinkB
add action=masquerade chain=srcnat comment="" disabled=no out-interface=EthLinkC
add action=masquerade chain=srcnat comment="" disabled=no out-interface=EthLinkD
add action=masquerade chain=srcnat comment="" disabled=no out-interface=EthLinkE
add action=masquerade chain=srcnat comment="" disabled=no out-interface=EthLinkF
add action=masquerade chain=srcnat comment="" disabled=no out-interface=EthLinkG
add action=masquerade chain=srcnat comment="" disabled=no out-interface=EthLinkH

Em rotas
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=10.1.1.1 scope=30 target-scope=10
add comment="" disabled=no distance=2 dst-address=0.0.0.0/0 gateway=10.1.2.1 scope=30 target-scope=10
add comment="" disabled=no distance=3 dst-address=0.0.0.0/0 gateway=10.1.3.1 scope=30 target-scope=10
add comment="" disabled=no distance=4 dst-address=0.0.0.0/0 gateway=10.1.4.1 scope=30 target-scope=10
add comment="" disabled=no distance=4 dst-address=0.0.0.0/0 gateway=10.1.5.1 scope=30 target-scope=10
add comment="" disabled=no distance=4 dst-address=0.0.0.0/0 gateway=10.1.6.1 scope=30 target-scope=10
add comment="" disabled=no distance=4 dst-address=0.0.0.0/0 gateway=10.1.7.1 scope=30 target-scope=10
add comment="" disabled=no distance=4 dst-address=0.0.0.0/0 gateway=10.1.8.1 scope=30 target-scope=10

add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=10.1.1.1 routing-mark=to_nra scope=30 target-scope=10
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=10.1.2.1 routing-mark=to_nrb scope=30 target-scope=10
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=10.1.3.1 routing-mark=to_nrc scope=30 target-scope=10
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=10.1.4.1 routing-mark=to_nrd scope=30 target-scope=10
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=10.1.5.1 routing-mark=to_nre scope=30 target-scope=10
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=10.1.6.1 routing-mark=to_nrf scope=30 target-scope=10
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=10.1.7.1 routing-mark=to_nrg scope=30 target-scope=10
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=10.1.8.1 routing-mark=to_nrh scope=30 target-scope=10

---

Ta errado cara, segue a lógica da coisa, se vc tem 8 links de pesos iguais.
Segue as correções, ve se consegue visualizar a lógica.

Citação:

---

Postado originalmente por Geeek

Ta errado cara, segue a lógica da coisa, se vc tem 8 links de pesos iguais.
Segue as correções, ve se consegue visualizar a lógica.

---

vlw pela correção...
e quanto a configuração em bridge como ficaria as regras?
obrigado

Amigo a parte de marcação é igual o que muda e nas rotas aonde vc tera que colocar o nome do ppoe que esta e na nat tb ao invez de out-interface=EthLinkH vc coloca out-interface=pppoe-out1

vou colocar um exmplo de rota tb

add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
pppoe-out1 routing-mark=to_nra scope=30 target-scope=10


Se gostou estrela se nao fazer o que kkkkk , vai devagar que vc consegue basta fazer isso e nada mais , claro ele esta dando exmplo de 8 links caso vc tenha menos basta diminuir as marcações , rotas nat etc

Sim amigo eu tenho 8 link com essa configuração..
apliquei as regras,mas nao consegui fazer funcionar no modo roteado.
agradeço a ajuda de todos , pois sou iniciante e nao tenho experiencia no sistema..
Obrigado a todos aqueles que dedicam seu tempo para ajudar quem precisa.
Se puder me ajudar com essa configuração ficarei grato.

amigo caso vc ainda nao conseguiu fazer leia esse post
https://under-linux.org/f227/program...49/#post558016
com ele vc tera uma ideia com ficar a configuração e modifica conforme a sua necessidade

Amigo, este links sao da mesma operadora? todos modens estao roteador e mandam DHCP na mesma range?

Amigos,
aproveitando inside do amigo do topico, coloco uma regra de pcc para 4 links que pretendo utilizar numa rb750 que faz o ppoe das adsls com um link 2mega dedicado . esta rb tera a saida LAn para um server cache que passara para outro server Mk responsavel pelo dhcp, controle de banda com saidas em bridge para as rbs, ptp..

A duvida seria, tenho duas regras de distribuicao de conexoes, qual delas devo eliminar? por favor se encontrarem alguma coisa errada falem!! Agradeco a atencao de todos!



;;; SEM BALANCE
chain=prerouting action=accept dst-address-list=sem_balance in-interface=REDE LAN


;;; Marca conex o do link1
chain=input action=mark-connection new-connection-mark=conn_na passthrough=yes connection-state=new in-interface=LINK 2M


;;; Marca Conex o do link2
chain=input action=mark-connection new-connection-mark=conn_nb passthrough=yes connection-state=new in-interface=Link2 10M


;;; Marca Conex o do link3
chain=input action=mark-connection new-connection-mark=conn_nc passthrough=yes connection-state=new in-interface=Link3 15M


;;; Marca Conex o do link4
chain=input action=mark-connection new-connection-mark=conn_nd passthrough=yes connection-state=new in-interface=Link4 15M


;;; Load Balance Proxy A
chain=output action=mark-connection new-connection-mark=conn_na passthrough=yes connection-state=new dst-address=!192.168.30.0/24
per-connection-classifier=both-addresses:12/0


;;; Load Balance Proxy B
chain=output action=mark-connection new-connection-mark=conn_nb passthrough=yes connection-state=new dst-address=!192.168.30.0/24
per-connection-classifier=both-addresses:12/1


;;; Load Balance Proxy C
chain=output action=mark-connection new-connection-mark=conn_nb passthrough=yes connection-state=new dst-address=!192.168.30.0/24
per-connection-classifier=both-addresses:12/2


;;; Load Balance Proxy D
chain=output action=mark-connection new-connection-mark=conn_nb passthrough=yes connection-state=new dst-address=!192.168.30.0/24
per-connection-classifier=both-addresses:12/3


;;; Load Balance Proxy E
chain=output action=mark-connection new-connection-mark=conn_nc passthrough=yes connection-state=new dst-address=!192.168.30.0/24
per-connection-classifier=both-addresses:12/4


;;; Load Balance Proxy F
chain=output action=mark-connection new-connection-mark=conn_nc passthrough=yes connection-state=new dst-address=!192.168.30.0/24
per-connection-classifier=both-addresses:12/5


;;; Load Balance Proxy G
chain=output action=mark-connection new-connection-mark=conn_nc passthrough=yes connection-state=new dst-address=!192.168.30.0/24
per-connection-classifier=both-addresses:12/6


;;; Load Balance Proxy H
chain=output action=mark-connection new-connection-mark=conn_nc passthrough=yes connection-state=new dst-address=!192.168.30.0/24
per-connection-classifier=both-addresses:12/7


;;; Load Balance Proxy I
chain=output action=mark-connection new-connection-mark=conn_nd passthrough=yes connection-state=new dst-address=!192.168.30.0/24
per-connection-classifier=both-addresses:12/8


;;; Load Balance Proxy J
chain=output action=mark-connection new-connection-mark=conn_nd passthrough=yes connection-state=new dst-address=!192.168.30.0/24
per-connection-classifier=both-addresses:12/9


;;; Load Balance Proxy K
chain=output action=mark-connection new-connection-mark=conn_nd passthrough=yes connection-state=new dst-address=!192.168.30.0/24
per-connection-classifier=both-addresses:12/10


;;; Load Balance Proxy L
chain=output action=mark-connection new-connection-mark=conn_nd passthrough=yes connection-state=new dst-address=!192.168.30.0/24
per-connection-classifier=both-addresses:12/11


;;; Rota da conexao A
chain=output action=mark-routing new-routing-mark=to_ra passthrough=no connection-mark=conn_na


;;; Rota da conexao B
chain=output action=mark-routing new-routing-mark=to_rb passthrough=no connection-mark=conn_nb


;;; Rota da conexao C
chain=output action=mark-routing new-routing-mark=to_rc passthrough=no connection-mark=conn_nc


;;; Rota da conexao d
chain=output action=mark-routing new-routing-mark=to_rd passthrough=no connection-mark=conn_nd


;;; Classifica o da rota A
chain=prerouting action=mark-connection new-connection-mark=conn_ma0 passthrough=yes dst-address-type=!local in-interface=REDE LAN
per-connection-classifier=both-addresses:12/0


;;; Classifica o da rota B
chain=prerouting action=mark-connection new-connection-mark=conn_mb1 passthrough=yes dst-address-type=!local in-interface=REDE LAN
per-connection-classifier=both-addresses:12/1


;;; Classifica o da rota C
chain=prerouting action=mark-connection new-connection-mark=conn_mb1 passthrough=yes dst-address-type=!local in-interface=REDE LAN
per-connection-classifier=both-addresses:12/2


;;; Classifica o da rota D
chain=prerouting action=mark-connection new-connection-mark=conn_mb1 passthrough=yes dst-address-type=!local in-interface=REDE LAN
per-connection-classifier=both-addresses:12/3


;;; Classificador da Rota E
chain=prerouting action=mark-connection new-connection-mark=conn_mc2 passthrough=yes dst-address-type=!local in-interface=REDE LAN
per-connection-classifier=both-addresses:12/4


;;; Classificador da Rota F
chain=prerouting action=mark-connection new-connection-mark=conn_mc2 passthrough=yes dst-address-type=!local in-interface=REDE LAN
per-connection-classifier=both-addresses:12/5


;;; Classificador da Rota G
chain=prerouting action=mark-connection new-connection-mark=conn_mc2 passthrough=yes dst-address-type=!local in-interface=REDE LAN
per-connection-classifier=both-addresses:12/6


;;; Classificador da Rota H
chain=prerouting action=mark-connection new-connection-mark=conn_mc2 passthrough=yes dst-address-type=!local in-interface=REDE LAN
per-connection-classifier=both-addresses:12/7


;;; Classificador da Rota I
chain=prerouting action=mark-connection new-connection-mark=conn_md3 passthrough=yes dst-address-type=!local in-interface=REDE LAN
per-connection-classifier=both-addresses:12/8


;;; Classificador da Rota J
chain=prerouting action=mark-connection new-connection-mark=conn_md3 passthrough=yes dst-address-type=!local in-interface=REDE LAN
per-connection-classifier=both-addresses:12/9


;;; Classificador da Rota K
chain=prerouting action=mark-connection new-connection-mark=conn_md3 passthrough=yes dst-address-type=!local in-interface=REDE LAN
per-connection-classifier=both-addresses:12/10


;;; Classificador da Rota L
chain=prerouting action=mark-connection new-connection-mark=conn_md3 passthrough=yes dst-address-type=!local in-interface=REDE LAN
per-connection-classifier=both-addresses:12/11


;;; Rota de saida 1
chain=prerouting action=mark-routing new-routing-mark=to_nra passthrough=yes in-interface=REDE LAN connection-mark=conn_ma0


;;; Rota de saida 2
chain=prerouting action=mark-routing new-routing-mark=to_nrb passthrough=yes in-interface=REDE LAN connection-mark=conn_mb1


;;; Rota de saida 3
chain=prerouting action=mark-routing new-routing-mark=to_nrc passthrough=yes in-interface=REDE LAN connection-mark=conn_mc2


;;; Rota de saida 4
chain=prerouting action=mark-routing new-routing-mark=to_nrd passthrough=yes in-interface=REDE LAN connection-mark=conn_md3