交流 › RouterOS › 请教nth问题

knightrider 发表于 2008-6-27 09:17:16

请教nth问题

/ ip address

add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=Local

add address=10.111.0.2/24 network=10.111.0.0 broadcast=10.111.0.255 interface=wlan2

add address=10.112.0.2/24 network=10.112.0.0 broadcast=10.112.0.255 interface=wlan1



/ ip firewall mangle

add chain=prerouting in-interface=Local connection-state=new nth=1,1,0 \

    action=mark-connection new-connection-mark=odd passthrough=yes

add chain=prerouting in-interface=Local connection-mark=odd action=mark-routing \

    new-routing-mark=odd passthrough=no

add chain=prerouting in-interface=Local connection-state=new nth=1,1,1 \

    action=mark-connection new-connection-mark=even passthrough=yes

add chain=prerouting in-interface=Local connection-mark=even action=mark-routingnew-routing-mark=even passthrough=no



/ ip firewall nat

add chain=srcnat connection-mark=odd action=src-nat to-addresses=10.111.0.2 \

    to-ports=0-65535

add chain=srcnat connection-mark=even action=src-nat to-addresses=10.112.0.2 \

    to-ports=0-65535



/ ip route

add dst-address=0.0.0.0/0 gateway=10.111.0.1 scope=255 target-scope=10 routing-mark=odd

add dst-address=0.0.0.0/0 gateway=10.112.0.1 scope=255 target-scope=10 routing-mark=even

add dst-address=0.0.0.0/0 gateway=10.112.0.1 scope=255 target-scope=10

这个方案有没有人做过，我试了可不行，怀疑ip firewall nat 中应为routeing-mark=even/odd但是无论怎样都不行，请教高人

guxing 发表于 2008-6-27 15:05:06

你的/ip route 和/ ip firewall nat 没有做相应的comment，肯定不行了！

upcwh 发表于 2008-9-11 23:11:09

为什么一定要有"comment"? 这不是注释吗~

专卖精品 发表于 2008-9-12 06:58:07

你怎么个不行，晕死，现在要回答问题真难

查看完整版本: 请教nth问题