Excessão no PCC Balance (passando por fora do load balance)
Olá amigos, sou novato aqui e com o uso de Mikrotik também.
Uso o PCC Balance com 4 links de cargas iguais, funcionando as mil maravilhas porém, tenho alguns pequenos probleminhas que não funcionam e com isso estou perdendo alguns clientes:
Uso de internet bank (Banco do Brasil, Banco Real e outros);
Uso de ftp (não o ftp do MK, e sim ftp de outros);
Terminal Service para um PC especifico (redirecionar porta).
Resumindo, tenho alguns clientes que usam minha rede e não acessam ao banco, outros usam o ftp pois são profissionais webdesigners e o TS é para uma maquina nossa ser acessada de fora.
Por favor, alguem se habilita a me ajudar nessa?
Obrigado.
Re: Excessão no PCC Balance (passando por fora do load balance)
Poste suas regras de Mangle atuais.
Re: Excessão no PCC Balance (passando por fora do load balance)
Greek, lá vai:
/ip firewall mangle
add action=accept chain=prerouting comment="SEM BALANCE" disabled=no \
dst-address-list=sem_balance in-interface=ether5
add action=accept chain=prerouting comment=Banco disabled=no protocol=tcp \
src-port=443
add action=accept chain=prerouting comment=Banco disabled=no dst-port=443 \
protocol=tcp
add action=accept chain=prerouting comment=TS disabled=no protocol=tcp \
src-port=3389
add action=accept chain=prerouting comment=TS disabled=no dst-port=3389 \
protocol=tcp
add action=accept chain=prerouting comment=Ftp disabled=no protocol=tcp \
src-port=21
add action=accept chain=prerouting comment=ftp disabled=no dst-port=21 \
protocol=tcp
add action=accept chain=prerouting comment=MiniBahia disabled=no protocol=tcp \
src-port=81
add action=accept chain=prerouting comment="MINI Bahia" disabled=no dst-port=\
81 protocol=tcp
add action=mark-connection chain=prerouting comment="p2p Joseval" disabled=no \
new-connection-mark="p2p NP2i" p2p=all-p2p passthrough=yes
add action=mark-packet chain=prerouting comment="" connection-mark="p2p NP2i" \
disabled=no new-packet-mark="p2p Net.Point2i" passthrough=yes
add action=accept chain=prerouting comment="FORA DO LOADBALACED" disabled=no \
dst-address-list=loopback in-interface=ether5
add action=mark-connection chain=input comment=\
"===== Make the packet leaves via same interface =====" disabled=no \
in-interface=pppoe-Link01 new-connection-mark=Link01_conn passthrough=yes
add action=mark-routing chain=output comment="" connection-mark=Link01_conn \
disabled=no new-routing-mark=to_Link01 passthrough=yes
add action=mark-connection chain=input comment="" disabled=no in-interface=\
pppoe-Link02 new-connection-mark=Link02_conn passthrough=yes
add action=mark-routing chain=output comment="" connection-mark=Link02_conn \
disabled=no new-routing-mark=to_Link02 passthrough=yes
add action=mark-connection chain=input comment="" disabled=no in-interface=\
pppoe-Link03 new-connection-mark=Link03_conn passthrough=yes
add action=mark-routing chain=output comment="" connection-mark=Link03_conn \
disabled=no new-routing-mark=to_Link03 passthrough=yes
add action=mark-connection chain=input comment="" disabled=no in-interface=\
pppoe-Link04 new-connection-mark=Link04_conn passthrough=yes
add action=mark-routing chain=output comment="" connection-mark=Link04_conn \
disabled=no new-routing-mark=to_Link04 passthrough=yes
add action=mark-connection chain=prerouting comment="===== Balance_PCC =====" \
disabled=no dst-address-type=!local in-interface=ether5 \
new-connection-mark=Link01_conn passthrough=yes \
per-connection-classifier=both-addresses-and-ports:10/0
add action=mark-connection chain=prerouting comment="" disabled=no \
dst-address-type=!local in-interface=ether5 new-connection-mark=\
Link01_conn passthrough=yes per-connection-classifier=\
both-addresses-and-ports:10/1
add action=mark-connection chain=prerouting comment="" disabled=no \
dst-address-type=!local in-interface=ether5 new-connection-mark=\
Link01_conn passthrough=yes per-connection-classifier=\
both-addresses-and-ports:10/2
add action=mark-connection chain=prerouting comment="" disabled=no \
dst-address-type=!local in-interface=ether5 new-connection-mark=\
Link02_conn passthrough=yes per-connection-classifier=\
both-addresses-and-ports:10/3
add action=mark-connection chain=prerouting comment="" disabled=no \
dst-address-type=!local in-interface=ether5 new-connection-mark=\
Link02_conn passthrough=yes per-connection-classifier=\
both-addresses-and-ports:10/4
add action=mark-connection chain=prerouting comment="" disabled=no \
dst-address-type=!local in-interface=ether5 new-connection-mark=\
Link02_conn passthrough=yes per-connection-classifier=\
both-addresses-and-ports:10/5
add action=mark-connection chain=prerouting comment="" disabled=no \
dst-address-type=!local in-interface=ether5 new-connection-mark=\
Link03_conn passthrough=yes per-connection-classifier=\
both-addresses-and-ports:10/6
add action=mark-connection chain=prerouting comment="" disabled=no \
dst-address-type=!local in-interface=ether5 new-connection-mark=\
Link03_conn passthrough=yes per-connection-classifier=\
both-addresses-and-ports:10/7
add action=mark-connection chain=prerouting comment="" disabled=no \
dst-address-type=!local in-interface=ether5 new-connection-mark=\
Link03_conn passthrough=yes per-connection-classifier=\
both-addresses-and-ports:10/8
add action=mark-connection chain=prerouting comment="" disabled=no \
dst-address-type=!local in-interface=ether5 new-connection-mark=\
Link04_conn passthrough=yes per-connection-classifier=\
both-addresses-and-ports:10/9
add action=mark-routing chain=prerouting comment="" connection-mark=\
Link02_conn disabled=no in-interface=ether5 new-routing-mark=to_Link02 \
passthrough=yes
add action=mark-routing chain=prerouting comment="" connection-mark=\
Link03_conn disabled=no in-interface=ether5 new-routing-mark=to_Link03 \
passthrough=yes
add action=mark-routing chain=prerouting comment="" connection-mark=\
Link04_conn disabled=no dst-address-type=!local in-interface=ether5 \
new-routing-mark=to_Link04 passthrough=yes
Re: Excessão no PCC Balance (passando por fora do load balance)
hehehe, ta meio cagado ai, me add que eu concerto e ve posta a solução aqui!
[email protected]
Re: Excessão no PCC Balance (passando por fora do load balance)
Citação:
Postado originalmente por
int21
hehehe, ta meio cagado ai, me add que eu concerto e ve posta a solução aqui!
[email protected]
o meu acessa tudo de boa so que quando os caras vaão copiar algo do pc para o TS ou do TS para o PC demora muito o que pdoe ser?