Привет, ребята! Я пытаюсь настроить балансировку нагрузки на своем основном роутере, чтобы объединить две линии интернета, используя эту настройку из вики: . Но, к сожалению, пакеты, предназначенные для шлюза WAN1, отправляются через шлюз WAN2. И я не понимаю почему. То есть, шлюз 211.24.149.41 находится на WAN2, а 211.24.139.113 – на WAN1, но когда пакет предназначен для 211.24.139.113, он отправляется через WAN2 (что неправильно!).
Вот мои настройки файрвола:
mangle:
7 ;;; Mangle New Connection as ODD
chain=prerouting in-interface=LAN connection-state=new nth=1,1,0
action=mark-connection new-connection-mark=odd passthrough=yes
8 ;;; Routing mark on marked package with 'ODD'
chain=prerouting in-interface=LAN connection-mark=odd
action=mark-routing new-routing-mark=odd passthrough=no
9 ;;; mangle new connection as 'EVEN'
chain=prerouting in-interface=LAN connection-state=new nth=1,1,1
action=mark-connection new-connection-mark=even passthrough=yes
10 ;;; mark packets to route 'EVEN'
chain=prerouting in-interface=LAN connection-mark=even
action=mark-routing new-routing-mark=even passthrough=no
NAT:
0 X chain=dstnat in-interface=LAN src-address=10.1.1.0/24
dst-address=!10.1.1.1 protocol=tcp dst-port=80 hotspot=auth
action=redirect to-ports=3128
1 ;;; emule
chain=dstnat dst-address=211.24.149.43 protocol=tcp dst-port=18669
action=dst-nat to-addresses=10.1.1.101 to-ports=5669
2 ;;; emule
chain=dstnat dst-address=211.24.139.114 protocol=tcp dst-port=18669
action=dst-nat to-addresses=10.1.1.101 to-ports=5669
3 X ;;; srcnat telekom
chain=srcnat action=src-nat to-addresses=60.52.138.14 to-ports=0-65535
4 ;;; srcnat 211.24.139.114 - odd
chain=srcnat out-interface=WAN1 src-address=10.1.0.0/16
connection-mark=odd action=src-nat to-addresses=211.24.139.114
to-ports=0-65535
5 ;;; srcnat 211.24.149.43 - even
chain=srcnat src-address=10.1.0.0/16 connection-mark=even action=src-nat
to-addresses=211.24.149.43 to-ports=0-65535
6 ;;; emule
chain=dstnat dst-address=211.24.139.114 protocol=udp dst-port=17565
action=dst-nat to-addresses=10.1.1.101 to-ports=5669
7 ;;; emule
chain=dstnat dst-address=211.24.149.43 protocol=udp dst-port=17565
action=dst-nat to-addresses=10.1.1.101 to-ports=5568
8 ;;; bittorrent
chain=dstnat dst-address=211.24.149.43 protocol=tcp dst-port=6881
action=dst-nat to-addresses=10.1.1.101 to-ports=6881
9 ;;; bittorrent
chain=dstnat dst-address=211.24.139.114 protocol=tcp dst-port=6881
action=dst-nat to-addresses=10.1.1.101 to-ports=6881
10 chain=dstnat dst-address=211.24.139.113 protocol=tcp dst-port=3030
action=dst-nat to-addresses=10.1.1.106 to-ports=80
11 ;;; ftp
chain=dstnat dst-address=211.24.149.43 protocol=tcp dst-port=20-21
action=dst-nat to-addresses=10.1.1.101 to-ports=20-21
12 X ;;; masquerade hotspot network
chain=srcnat src-address=10.1.1.0/24 action=masquerade
ROUTE:
# DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE
0 ADC 10.1.1.0/24 10.1.1.1 LAN
1 A S 64.233.189.104/32 r 211.24.149.41 WAN2
2 A S 66.118.136.67/32 192.168.0.1 r 192.168.0.255 WAN1
3 ;;; tbbh - 2358 2mb (1024)
211.24.149.43/29 211.24.149.40 211.24.149.47 WAN2
Вот мои настройки файрвола:
mangle:
7 ;;; Mangle New Connection as ODD
chain=prerouting in-interface=LAN connection-state=new nth=1,1,0
action=mark-connection new-connection-mark=odd passthrough=yes
8 ;;; Routing mark on marked package with 'ODD'
chain=prerouting in-interface=LAN connection-mark=odd
action=mark-routing new-routing-mark=odd passthrough=no
9 ;;; mangle new connection as 'EVEN'
chain=prerouting in-interface=LAN connection-state=new nth=1,1,1
action=mark-connection new-connection-mark=even passthrough=yes
10 ;;; mark packets to route 'EVEN'
chain=prerouting in-interface=LAN connection-mark=even
action=mark-routing new-routing-mark=even passthrough=no
NAT:
0 X chain=dstnat in-interface=LAN src-address=10.1.1.0/24
dst-address=!10.1.1.1 protocol=tcp dst-port=80 hotspot=auth
action=redirect to-ports=3128
1 ;;; emule
chain=dstnat dst-address=211.24.149.43 protocol=tcp dst-port=18669
action=dst-nat to-addresses=10.1.1.101 to-ports=5669
2 ;;; emule
chain=dstnat dst-address=211.24.139.114 protocol=tcp dst-port=18669
action=dst-nat to-addresses=10.1.1.101 to-ports=5669
3 X ;;; srcnat telekom
chain=srcnat action=src-nat to-addresses=60.52.138.14 to-ports=0-65535
4 ;;; srcnat 211.24.139.114 - odd
chain=srcnat out-interface=WAN1 src-address=10.1.0.0/16
connection-mark=odd action=src-nat to-addresses=211.24.139.114
to-ports=0-65535
5 ;;; srcnat 211.24.149.43 - even
chain=srcnat src-address=10.1.0.0/16 connection-mark=even action=src-nat
to-addresses=211.24.149.43 to-ports=0-65535
6 ;;; emule
chain=dstnat dst-address=211.24.139.114 protocol=udp dst-port=17565
action=dst-nat to-addresses=10.1.1.101 to-ports=5669
7 ;;; emule
chain=dstnat dst-address=211.24.149.43 protocol=udp dst-port=17565
action=dst-nat to-addresses=10.1.1.101 to-ports=5568
8 ;;; bittorrent
chain=dstnat dst-address=211.24.149.43 protocol=tcp dst-port=6881
action=dst-nat to-addresses=10.1.1.101 to-ports=6881
9 ;;; bittorrent
chain=dstnat dst-address=211.24.139.114 protocol=tcp dst-port=6881
action=dst-nat to-addresses=10.1.1.101 to-ports=6881
10 chain=dstnat dst-address=211.24.139.113 protocol=tcp dst-port=3030
action=dst-nat to-addresses=10.1.1.106 to-ports=80
11 ;;; ftp
chain=dstnat dst-address=211.24.149.43 protocol=tcp dst-port=20-21
action=dst-nat to-addresses=10.1.1.101 to-ports=20-21
12 X ;;; masquerade hotspot network
chain=srcnat src-address=10.1.1.0/24 action=masquerade
ROUTE:
# DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE
0 ADC 10.1.1.0/24 10.1.1.1 LAN
1 A S 64.233.189.104/32 r 211.24.149.41 WAN2
2 A S 66.118.136.67/32 192.168.0.1 r 192.168.0.255 WAN1
3 ;;; tbbh - 2358 2mb (1024)
211.24.149.43/29 211.24.149.40 211.24.149.47 WAN2
