Página 2 de 3 PrimeiroPrimeiro 123 ÚltimoÚltimo
+ Responder ao Tópico



  1. #7
    André Andrade*MikrotikRio Avatar de interhome
    Ingresso
    Oct 2008
    Localização
    Brasil.
    Posts
    1.111
    Posts de Blog
    15

    Padrão

    Citação Postado originalmente por wsdanado Ver Post
    Como faço um bom firewall e um bom Qos no hotspot . Muito grato...
    Estudando ou contratando um bom profissional.

  2. #8

    Padrão

    ÉÉÉÉÉ continuar a esperar um cristão caridoso que possa ajuda eu e outros querem aprender!!!

    Como faço um bom controle de banda firewall e um bom Qos no hotspot . Muito grato...



  3. #9

    Question

    Citação Postado originalmente por jbssi Ver Post
    Adiciona mais está regra no seus controle de p2p que vai resolver:
    ip/firewall/mangle
    chain=forward
    P2P=all-p2p
    action=change TTL
    TTL Action=change
    New TTL=1
    Olá !

    O que está regra faz ?

  4. #10
    André Andrade*MikrotikRio Avatar de interhome
    Ingresso
    Oct 2008
    Localização
    Brasil.
    Posts
    1.111
    Posts de Blog
    15

    Padrão

    Já que voce quer estudar, estou colocando uma marcação (mangle) e um QoS no intuito de que olhe e que dessa forma abra a sua cabeça. Esse exemplo não é para copiar e colar, apenas para estudo geral.

    / ip firewall mangle
    add chain=prerouting action=mark-connection new-connection-mark=web-c \
    passthrough=yes dst-port=80 protocol=tcp comment="WEB" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=web-i passthrough=no \
    in-interface=ether3 connection-mark=web-c comment="" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=web-o passthrough=no \
    in-interface=!ether3 connection-mark=web-c comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=p2p-c \
    passthrough=yes p2p=all-p2p comment="P2P" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=p2p-i passthrough=no \
    in-interface=ether3 connection-mark=p2p-c comment="" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=p2p-o passthrough=no \
    in-interface=!ether3 connection-mark=p2p-c comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=voip-c \
    passthrough=yes dst-port=5060-5061 protocol=udp tos=184 comment="Voip" \
    disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=voip-c \
    passthrough=yes dst-port=16384-16482 protocol=udp tos=184 comment="" \
    disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=voip-i passthrough=no \
    in-interface=ether3 connection-mark=voip-c comment="" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=voip-o passthrough=no \
    in-interface=!ether3 connection-mark=voip-c comment="" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=icmp-i passthrough=no \
    in-interface=ether3 protocol=icmp comment="" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=icmp-o passthrough=no \
    in-interface=!ether3 protocol=icmp comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=msnC \
    passthrough=yes dst-port=6891-6901 protocol=tcp comment="MSN" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=msnC \
    passthrough=yes dst-port=6891-6901 protocol=udp comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=msnC \
    passthrough=yes dst-port=1863 protocol=tcp comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=msnC \
    passthrough=yes dst-port=1863 protocol=udp comment="" disabled=no
    add chain=prerouting action=mark-connection new-connection-mark=msnC \
    passthrough=yes dst-port=5190 protocol=udp comment="" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=msn-i passthrough=no \
    in-interface=ether3 connection-mark=msnC comment="" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=msn-o passthrough=no \
    in-interface=!ether3 connection-mark=msnC comment="" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=resto-i passthrough=no \
    in-interface=ether3 comment="" disabled=no
    add chain=prerouting action=mark-packet new-packet-mark=resto-o passthrough=no \
    in-interface=!ether3 comment="" disabled=no


    / queue tree
    add name="Banda_in" parent=ether3 packet-mark="" limit-at=0 queue=default \
    priority=8 max-limit=800000 burst-limit=0 burst-threshold=0 burst-time=0s \
    disabled=no
    add name="Voip-in" parent=Banda_in packet-mark=voip-i limit-at=0 queue=default \
    priority=3 max-limit=50000 burst-limit=0 burst-threshold=0 burst-time=0s \
    disabled=no
    add name="web-in" parent=Banda_in packet-mark=web-i limit-at=150000 \
    queue=default priority=5 max-limit=350000 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no
    add name="icmp-in" parent=Banda_in packet-mark=icmp-i limit-at=5000 \
    queue=default priority=8 max-limit=50000 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no
    add name="medidores-in" parent=Banda_in packet-mark=medidores-i limit-at=50000 \
    queue=default priority=6 max-limit=350000 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no
    add name="msn-in" parent=Banda_in packet-mark=msn-i limit-at=50000 \
    queue=default priority=8 max-limit=350000 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no
    add name="p2p-in" parent=Banda_in packet-mark=p2p-i limit-at=1000 \
    queue=default priority=8 max-limit=150000 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no
    add name="resto-in" parent=Banda_in packet-mark=resto-i limit-at=50000 \
    queue=default priority=8 max-limit=250000 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no
    add name="banda_out" parent=wlan1 packet-mark="" limit-at=0 queue=default \
    priority=8 max-limit=800000 burst-limit=0 burst-threshold=0 burst-time=0s \
    disabled=no
    add name="voip-out" parent=banda_out packet-mark=voip-o limit-at=0 \
    queue=default priority=3 max-limit=50000 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no
    add name="icmp-out" parent=banda_out packet-mark=icmp-o limit-at=5000 \
    queue=default priority=8 max-limit=50000 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no
    add name="msn-out" parent=banda_out packet-mark=msn-o limit-at=50000 \
    queue=default priority=8 max-limit=350000 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no
    add name="p2p-out" parent=banda_out packet-mark=p2p-o limit-at=1000 \
    queue=default priority=8 max-limit=150000 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no
    add name="resto-out" parent=banda_out packet-mark=resto-o limit-at=50000 \
    queue=default priority=8 max-limit=250000 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no
    add name="web-out" parent=banda_out packet-mark=web-o limit-at=150000 \
    queue=default priority=5 max-limit=350000 burst-limit=0 burst-threshold=0 \
    burst-time=0s disabled=no



  5. #11

    Thumbs up

    Citação Postado originalmente por interhome Ver Post
    Já que voce quer estudar, estou colocando uma marcação (mangle) e um QoS no intuito de que olhe e que dessa forma abra a sua cabeça. Esse exemplo não é para copiar e colar, apenas para estudo geral.
    Olá!

    Nas prioridades quem tem a mais alta o 1 ou 8 ?

    Abraços

  6. #12

    Padrão

    Citação Postado originalmente por Giovani.couto Ver Post
    Olá!

    Nas prioridades quem tem a mais alta o 1 ou 8 ?

    Abraços
    a prioridade é desde 1 até 8

    1-mais alto
    8-mais baixo