balance
This is an old revision of the document!
/ip firewall address-list
add address=10.0.0.0/8 list=private
add address=100.64.0.0/10 list=private
add address=192.168.0.0/16 list=private
add address=172.16.0.0/12 list=private
add address=192.168.69.0/24 list=lan
add address=192.168.69.191 disabled=yes list=force-ether1
add address=192.168.88.0/24 list=force-ether2
/ip firewall mangle
add action=mark-connection chain=prerouting in-interface=ether1 new-connection-mark=mark-connection-ether1 passthrough=yes
add action=mark-connection chain=prerouting in-interface=ether2 new-connection-mark=mark-connection-ether2 passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=mark-connection-ether1 passthrough=yes src-address-list=force-ether1
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-list=force-ether1 new-connection-mark=mark-connection-ether1 passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=mark-connection-ether2 passthrough=yes src-address-list=force-ether2
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-list=force-ether2 new-connection-mark=mark-connection-ether2 passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-list=force-ether4 new-connection-mark=mark-connection-ether4 passthrough=yes
add action=mark-connection chain=prerouting comment=PCC connection-mark=no-mark dst-address-list=!private dst-address-type=!local in-interface-list=lan \
new-connection-mark=mark-connection-ether1 passthrough=yes per-connection-classifier=src-address:2/0 src-address-list=lan
add action=mark-connection chain=prerouting comment=PCC connection-mark=no-mark dst-address-list=!private dst-address-type=!local in-interface-list=lan \
new-connection-mark=mark-connection-ether2 passthrough=yes per-connection-classifier=src-address:2/1 src-address-list=lan
add action=mark-routing chain=prerouting connection-mark=mark-connection-ether1 in-interface-list=lan new-routing-mark=mark-routing-ether1 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=mark-connection-ether2 in-interface-list=lan new-routing-mark=mark-routing-ether2 passthrough=yes
add action=mark-routing chain=output connection-mark=mark-connection-ether1 new-routing-mark=mark-routing-ether1 passthrough=yes
add action=mark-routing chain=output connection-mark=mark-connection-ether2 new-routing-mark=mark-routing-ether2 passthrough=yes
balance.1717230493.txt.gz · Last modified: 2024/06/01 05:28 by protocol