ืืงืืื
ืืืืขืจื ืขืืขื ืืขื ืึทืจืืืงื, ืืื ืึทืืืฉืึทื ืฆื ืืึทืืืขืก, ืืื ืืขืืืขื ืคึผืจืึทืืคึผืืื ืืืจื ืื ืืืคึผืจืขืกืื ื ืึธืคืืงืืึทื ืคืื ืคืจืืืขืก ืืืืฃ ืืขื ืืขืืข ืืื ืื ืคึผืจืึธืคืื ืืจืืคึผืขืก ืคืื ืื ืจืืกืืฉ-ืืขืจืขืื ืืขืืขืืจืึทื ืงืื. ืืขืจ ืึทืจืืืงื ืืื ืึทืืืขื ืฆื ืึธื ืืืืืขืจ ืืืงืจืึธืืืง ืจืึธืืืขืจืึธืก (ืืขืจื ืึธื ืจืืคืขืจื ืฆื ืืื ROS) ืึทืืืื ืืกืืจืึทืืึธืจืก. ืขืก ืืืื ืืืืื ืืื ืื ืืืืืืืืึทื, ืืื ืึท ืืจืึธืคึผ ืืืืฃ ืจืืืื ื. ืืื ืึท ืืึธื ืืก, ืขืก ืืขื ืขื ืืื ืืืึทื ืืขื ืื ืกืขืืืื ืืก ืฆื ืขื ืฉืืจ ืืืืขืจ ืืื ืืึทืงืืืขื ืึธืคึผืขืจืึทืฆืืข. ืื ืืืืก ืืขื ืขื ืงืืงื ืคึฟืึทืจ ืึทื ืืคึผืืขืงืื ื ืคืื ืื ืืขืืขืก ืคืื ืงืืื, ืืึทืกืข ืืึทืืึทื ืกืื ื, ืืืืึทื ื, ืืจืืงื, ืืึทืืื-ืืื ืข ืืืฃ ืึทื ืึทืืืกืืก ืคืื ืื ืฉืืึทื ืคืื ืื ืงืึทื ืึทื ืืื ืื ืืื - ืงืขื ื ืืฉื ืืืืกื ืฆืืื ืืื ืื ืืืืขื ืขื.
ืขืจืฉื ืืึทืืข
ืืื ืึท ืคึผืจืึธืืข ืื ืืขืจืืขื ืืง, ืึท ืคืื ืฃ-ืคึผืึธืจื ืืืงืจืึธืืืง ืจืึทืืืขืจ ืืื ืจืึธืก ืืืขืจืกืืข 6.45.3 ืืื ืืืืกืืขืงืืืื. ืขืก ืืืขื ืืึทืจืฉืจืื ืคืึทืจืงืขืจ ืฆืืืืฉื ืฆืืืื ืืืืข ื ืขืืืืึธืจืงืก (LAN1 ืืื LAN2) ืืื ืืจืื ืคึผืจืึทืืืืืืขืจื (ISP1, ISP2, ISP3). ืืขืจ ืงืึทื ืึทื ืฆื ISP1 ืืื ืึท ืกืืึทืืืง "ืืจืื" ืึทืืจืขืก, ISP2 - "ืืืืึทืก", ืืืงืืืขื ืืืจื DHCP, ISP3 - "ืืืืึทืก" ืืื PPPoE ืืขืจืืืืืขื ืืฉ. ืื ืงืฉืจ ืืืึทืืจืึทืืข ืืื ืืขืืืืื ืืื ืื ืคืืืืจ:
ืื ืึทืจืืขื ืืื ืฆื ืงืึทื ืคืืืืขืจ ืื MTK ืจืึทืืืขืจ ืืืืืจื ืืืืฃ ืื ืกืืขืืข ืึทืืื ืึทื:
- ืฆืืฉืืขืื ืึธืืึทืืึทืืืง ืกืืืืืฉืื ื ืฆื ืึท ืืึทืงืึทืคึผ ืฉืคึผืืึทืืขืจ. ืืขืจ ืืืืคึผื ืฉืคึผืืึทืืขืจ ืืื ISP2, ืืขืจ ืขืจืฉืืขืจ ืจืขืืขืจืื ืืื ISP1, ืื ืจืืข ืจืขืืขืจืื ืืื ISP3.
- ืึธืจืืึทื ืืืืจื LAN1 ื ืขืฅ ืึทืงืกืขืก ืฆื ืื ืืื ืืขืจื ืขื ืืืืื ืืืจื ISP1.
- ืฆืืฉืืขืื ืื ืคืืืืงืืื ืฆื ืืึทืจืฉืจืื ืคืึทืจืงืขืจ ืคืื ืืืืข ื ืขืืืืึธืจืงืก ืฆื ืื ืืื ืืขืจื ืขื ืืืจื ืื ืืืืกืืขืงืืืื ืฉืคึผืืึทืืขืจ ืืืืืจื ืืืืฃ ืื ืึทืืจืขืก ืจืฉืืื.
- ืฆืืฉืืขืื ืื ืืขืืืขืืงืืื ืคืื ืืจืืืกืืขืื ืืึทืืื ืื ืืก ืคึฟืื ืื ืืืืข ื ืขืฅ ืฆื ืืขืจ ืืื ืืขืจื ืขืฅ (DSTNAT)
- ืฉืืขืื ืึท ืคืืืจืืืึทื ืคืืืืขืจ ืฆื ืฆืืฉืืขืื ืื ืืื ืืืื ืืขื ืื ืืืืขืจืืืื ืคืื ืื ืืื ืืขืจื ืขื.
- ืืขืจ ืจืึทืืืขืจ ืงืขื ืึทืจืืืกืืขืื ืืืื ืืืืืขื ืข ืคืึทืจืงืขืจ ืืืจื ืงืืื ืคืื ืื ืืจืื ืคึผืจืึทืืืืืืขืจื, ืืืคึผืขื ืืื ื ืืืืฃ ืื ืืืืกืืขืจืืืืืืืข ืืงืืจ ืึทืืจืขืก.
- ืคืึทืจืืืืขืจื ืึทื ืขื ืืคืขืจ ืคึผืึทืงืืฅ ืืขื ืขื ืจืึทืืืื ืฆื ืืขื ืงืึทื ืึทื ืคืื ืืืึธืก ืืื ืืขืงืืืขื (ืึทืจืืึทื ืืขืจืขืื ื ืืึทื).
ืืึทืืขืจืงืื ื. ืืืจ ืืืขืื ืงืึทื ืคืืืืขืจ ืื ืจืึทืืืขืจ "ืคืื ืงืจืึทืฆื" ืืื ืกืืจ ืฆื ืืึทืจืึทื ืืืจื ืื ืึทืืืขืง ืคืื ืกืึทืคึผืจืืืืื ืืื ืื ืกืืึทืจืืื ื ืงืึทื ืคืืืืขืจืืืฉืึทื ื "ืืืืก ืื ืงืขืกืื" ืืืึธืก ืืืืฉื ืคืื ืืืขืจืกืืข ืฆื ืืืขืจืกืืข. ืืืื ืืึธืงืก ืืื ืืืืกืืขืจืืืืืื ืืื ืึท ืงืึทื ืคืืืืขืจืืืฉืึทื ืืขืฆืืึทื, ืืื ืขื ืืขืจืื ืืขื ืืืขื ืืืื ืืืืืฉืืืึทืื ืืขืืืืื. ืื ืกืขืืืื ืืก ืืื ืืืขื ืืืื ืืึทืฉืืืื ืืืจื ืงืึทืืึทื ืื ืืื ืื ืืืื ืืึธืงืก ืืืึธืงืืึทื. ืื ืืฉืืืืช ืงืฉืจ ืคึฟืึทืจ ืงืึทื ืคืืืืขืจืืืฉืึทื ืืื ืืขืืืื ืืืจื ืึท ืืืจืขืงื ืงืฉืจ ืฆื ืื Ether5 ืฆืืืื ื.
ื ืืืกื ืจืืืึทื ืื ื ืืืขืื ืืืึธืก ืึท ืืืืืืืืึทื ืืื, ืืื ืขืก ืึท ืคึผืจืึธืืืขื ืึธืืขืจ ืืขื ืขื ืืืืจืข ืงืืื ืืขื ืืฉื ืึทืจืื ืืืืืืื ื ืงืึทื ืกืคึผืืจืึทืกื ื ืขืืืืึธืจืงืก
ืึท ื ืืึทืืขืจืืง ืืื ืึทืืขื ืืืื ืึทืืืื ืืกืืจืึทืืึธืจ, ืฉืืขืื ืืื ืืืืฃ ืืื ืึทืืึท ืึธืืขืจ ืขื ืืขื ืกืืขืืข, ืคึผืืืฆืืื ื ืคืึทืจืฉืืืื ืึทื ืขืก ืึทืจืืขื ืฉืืื ื ืึธืจืืึทืื. ืืึธ, ืืึธ, ืึธื ืืืื ืื ืื ืจืืืื ื ืืืฉื ืืื ืื ืืขืจืข ืืึทืจืฉืจืื ืึผืืืื, ืืืึธืก ืจืืึฟ ืึทืจืืืงืืขื ืืืืฃ ืืขื ืืขืืข ืืขื ืขื ืคืื ืคืื. ืืื ืก ืืฉืขืง?
ืงืขื ืขื ืืืจ ืงืึทื ืคืืืืขืจ ืึทืืจืขืกืื ื ืืืืฃ ืื ืืขืจืคืืืกืื ืืื ืคืขืืืงืืึทื ืืืืืืืืื? ืื:
ืืืืฃ ISP1, ืื ืึทืืจืขืก ืืื ืืืืืืืื ืืขื ืขื ืจืขืืืกืืจืืจื ืืื ืืืกืืึทื ืกืข=2 ะธ ืืฉืขืง-ืืืืืืืื = ืคึผืื ื.
ืืืืฃ ISP2, ืื ืคืขืืืงืืึทื DHCP ืงืืืขื ื ืืึทืฉืืขืืืงื - ืึทืงืึธืจืืื ืืื, ืื ืืืืึทืืงืืื ืืืขื ืืืื ืืืืึทื ืฆื ืืืื.
ืืืืฃ ISP3 ืืื ืื pppoe ืงืืืขื ื ืกืขืืืื ืืก ืืืขื add-default-route = ืืึธ ืฉืืขืื default-route-distance=3.
ืื ืืืืกื ื ืืฉื ืคืึทืจืืขืกื ืฆื ืจืขืืืกืืจืืจื NAT ืืืืฃ ืื ืึทืจืืืกืืึทื ื:
/ ืืคึผ ืคืืืจืืืึทื ื ืึทื ืืืืื ืงืึทืืฃ = ืืึทืกืงืขืจืืื ืงืืื = ืกืจืงื ืึทื ืึธืื-interface-list = ืืืึทื
ืืื ืึท ืจืขืืืืืึทื, ื ืืฆืขืจืก ืคืื ืืืืข ืืืืืืขื ืืึธืื ืฉืคึผืึทืก ืืึทืื ืืึธืืืื ื ืงืึทืฅ ืืืจื ืื ืืืืคึผื ISP2 ืฉืคึผืืึทืืขืจ ืืื ืขืก ืืื ืึท ืงืึทื ืึทื ืจืขืืขืจืืืึทืฆืืข ืืื ืื ืืขืงืึทื ืืืึทื. ืืฉืขืง ืืืืืืืื ืืขื ืืึทืืขืจืงืื ื 1
ืคืื ื 1 ืคืื ืื ืึทืจืืขื ืืื ืืืคึผืืึทืืขื ืึทื. ืืื ืืื ืืขืจ ืืืืืืืืึทื ืืื ืืืึทื ืืึทืจืงืก? ื ืืืโฆ
ืืืืืืขืจ. ืืืจ ืืึทืจืคึฟื ืฆื ืืึทืคืจืืึทืขื ืกืคึผืขืฆืืคืืฉ ืงืืืืึทื ืฅ ืคึฟืื ืื ืืึทื ืืืจื ISP1:
/ ืืคึผ ืคืืืจืืืึทื ืืึทื ืื ืืืืื ืงืึทืืฃ = ืืึทืจืฉืจืื ืงืืื = ืคึผืจืขืจืึธืืืื ื ืืกื-ืึทืืจืขืก-ืืืกื =! BOGONS
passthrough=ืืึธ route-dst=100.66.66.1 src-address-list=Via_ISP1
/ ืืคึผ ืคืืืจืืืึทื ืืึทื ืื ืืืืื ืงืึทืืฃ = ืืึทืจืฉืจืื ืงืืื = ืคึผืจืขืจืึธืืืื ื ืืกื-ืึทืืจืขืก-ืืืกื =! BOGONS
passthrough=no route-dst=100.66.66.1 src-address=192.168.88.0/24
ืืืืึทืื 2 ืืื 3 ืคืื ืื ืึทืจืืขื ืืขื ืขื ืืืคึผืืึทืืขื ืึทื. ืืึทืืขืืก, ืกืืึทืืคึผืก, ืืึทืจืฉืจืื ืึผืืืื, ืืื ืืืกื ืืืจ?!
ืืืจ ืืึทืจืคึฟื ืฆื ืืขืื ืึทืงืกืขืก ืฆื ืืืื ืืึทืืืืกืืข OpenVPN ืกืขืจืืืขืจ ืืื ืื ืึทืืจืขืก 172.17.17.17 ืคึฟืึทืจ ืงืืืืึทื ืฅ ืคึฟืื ืืขืจ ืืื ืืขืจื ืขืฅ? ืืืืข:
/ ืืคึผ ืืืึธืืงื ืฉืืขืื ddns-enabled = ืืึธ
ืืื ืึท ืืึทื ืงืืงื , ืืืจ ืืขืื ืืขื ืงืืืขื ื ืื ืจืขืืืืืึทื ืจืขืืืืืึทื: ": ืฉืืขืื [ืืคึผ ืืืึธืืงื ืืึทืงืืืขื ืื ืก-ื ืึธืืขื]"
ืืืจ ืจืขืืืกืืจืืจื ืคึผืึธืจื ืคืึธืจืืืขืจืืื ื ืคืื ืื ืืื ืืขืจื ืขื:
/ ืืคึผ ืคืืืจืืืึทื ื ืึทื ืืืืื ืงืึทืืฃ = ืืกื-ื ืึทื ืงืืื = ืืกืื ืึทื ืืกื-ืคึผืึธืจื = 1194
in-interface-list=WAN protocol=udp to-addresses=172.17.17.17
ื ืืืขืจ 4 ืืื ืืจืืื.
ืืืจ ืฉืืขืื ืืื ืึท ืคืืืจืืืึทื ืืื ืื ืืขืจืข ืืืืขืจืืืื ืคึฟืึทืจ ืคืื ื 5, ืืื ืืขืจ ืืขืืืืงืขืจ ืฆืืื ืืืจ ืืขื ืขื ืฆืืคืจืืื ืึทื ืึทืืฅ ืืื ืฉืืื ืืจืืขืื ืคึฟืึทืจ ืืืืขืจื ืืื ืืขืจืืจืืืื ืึท ืงืึทื ืืืื ืขืจ ืืื ืึท ืืึทืืืืกืืข ืืจืื ืงืขื ...
ื! ืืึทื ืึทืื ืืขื ืขื ืคืืจืืขืกื.
l2tp-ืงืืืขื ื, ืงืึทื ืคืืืืขืจื ืืืจื Google ืึทืจืืืงื, ืืื ืืืืคืืขืฉืืื ืขื ืฆื ืืืื ืืึทืืืืกืืข ืืึธืืขื ืืืฉ VDS? ืื.
l2tp-server ืืื IPsec ืืื ืืืืคืืขืฉืืื ืขื ืืื ืงืืืืึทื ืฅ ืืืจื ืื ืก-ื ืึธืืขื ืคึฟืื IP ืงืืึธืื (ืืขื ืืืืื.) ืงืืื ื? ืื.
ืืืื ืื ืืื ืฆืืจืืง ืืื ืืื ืืืขืจ ืฉืืื, ืกืืคึผืื ื ืึท ืืจืื ืงืขื, ืืืจ ืคืืื ืืึทืืจืึทืืื ืื ืคืื ืงืื 6 ืืื 7 ืคืื ืื ืึทืจืืขื. ืืืจ ืืจืึทืืื - ืืึธื ืืืจ ืืึทืจืคึฟื ืขืก? ืึทืืข ืื ืืขืืืข, ืขืก ืึทืจืืขื ืืื ืึทื (ื) ... ืึทืืื, ืืืื ืขืก ืืื ื ืึธื ื ืื ืืืจืฃ, ืืขืืึธืื ืึทื ืก ืขืก. ืืืืืืืืึทื ืืืคึผืืึทืืขื ืึทื.
ืืืึธืก ืืื ืึท ืืืืืืืืึทื? ืืึธืก ืืื ืื ืงืฉืจ ืคืื ืขืืืขืืข ืืื ืืขืจื ืขื ืืฉืึทื ืึทืื ืฆื ืืืื ืจืึทืืืขืจ.
ืืืจ ืืึธื ื ืื ืืึธืื ืฆื ืืืืขื ืขื ืืขื ืึทืจืืืงื ืืืืึทืืขืจ, ืืืืึทื ืืืึธืก ืงืขื ืขื ืืืื ืืึธืจื ืึทืืืฅ ืึท ืืืืึทืื ืึทืืืขืง ืคืื ืกืึธืคืขืงืืืง ืึธื ืืืขื ืืืขื?
ืคืืจ ืื ืืืืก ืคืืจืืืืืื, ืืืืก ืืขื ืขื ืคืืจืืื ืืขืจืขืกืืจื ืืื ืื ื ืงืืืืช 6 ืืื 7 ืคืื ืืขืจ ืืืืคืืืืข, ืืื ืืืื ืคืืื ืืขื ืืขืจืขืืขื ืืฉ ืคืื ืคืขืจืคืขืงืฆืืื ืืืืื, ืืื ืงืขื ืืืจ ืืืคืขืจ.
ืื ืืขืจืกื ืืืืืืืง ืึทืจืืขื ืคืื ืืืคึผืืึทืืขื ืื ื ืึท ืืืืืืืืึทื ืืื ืื ืจืืืืืง ืคืึทืจืงืขืจ ืจืืืื ื. ื ืืืืื: ืจืึทืืึทืจืืืึทืก ืคืื ืืืึธืก (ืึธืืขืจ ืืืึธืก) ืืขื. ืืึทืืขืจืงืื ื 3 ืื ืงืึทื ืึทื (s) ืคืื ืื ISP ืงืืง ืืื ืื ืคืขืืืงืืึทื ืืึทืจืฉืจืื ืืืืฃ ืืื ืืืขืจ ืจืึทืืืขืจ, ืขืก ืืึธื ืฆืืจืืงืงืืืขื ืึท ืขื ืืคืขืจ ืฆื ืื ืคึผืื ืืืขื ืงืึทื ืึทื ืคืื ืื ืคึผืึทืงืึทื ืืขืงืืืขื. ืื ืึทืจืืขื ืืื ืงืืึธืจ. ืืืื ืืื ืืขืจ ืคืจืืืืขื? ืืึทืงืข, ืืื ืึท ืคึผืฉืื ืืืืข ื ืขืฅ, ืื ืึทืจืืขื ืืื ืื ืืขืืืข, ืึธืืขืจ ืงืืื ืืืื ืขืจ ืืึทืืขืจื ืืื ื ืึธื ืกืขืืืื ืืก ืืื ืืื ื ืืฉื ืคืืื ืงืึธื ืคืืืงื. ืืขืจ ืืืืืง ืืื ืึทื ืงืืื ืจืืืึทืืึทื ื ืึธืืข ืืืืฃ ืืขืจ ืืื ืืขืจื ืขืฅ ืืื ืฆืืืจืืืืขื ืืืจื ืืขืืขืจ ืคืื ืืื ืืืขืจ ืืฉืึทื ืึทืื, ืืื ื ืืฉื ืืืจื ืึท ืฉืืจืขื ื ืกืคึผืขืฆืืคืืฉ, ืืื ืืื ืึท ืคึผืฉืื ืืึทื. ืืื ืื "ืฆืจื" ืืื ืึทื ืืืื ืขืก ืืื ืืขืงืืืขื ืฆื ืืื ืื ืึท ืืงืฉื ืคึฟืึทืจ ืื IP ืึทืืจืขืก ืคืื ISP3, ืืื ืืื ืืืขืจ ืคืึทื, ืื ืขื ืืคืขืจ ืืืขื ืืืื ืืืจื ืื ISP2 ืงืึทื ืึทื, ืืืืึทื ืื ืคืขืืืงืืึทื ืืืืืืืื ืืื ืืืจืขืงืืขื ืืึธืจื. ืืืขืืขืจ ืืื ืืืขื ืืืื ืืืกืงืึทืจืืื ืืืจื ืื ืฉืคึผืืึทืืขืจ ืืื ืคืึทืืฉ. ืืขืจ ืคึผืจืึธืืืขื ืืื ืืืืขื ืึทืคืืื. ืืื ืฆื ืกืึธืืืืข ืขืก?
ืื ืืืืืื ื ืืื ืฆืขืืืืื ืืื ืืจืืึท ืกืืึทืืขืก:
- ืคึผืจืืกืขืืืื ื. ืืื ืืขื ืืื ืข, ืื ืืจืื ื ืกืขืืืื ืืก ืคืื ืื ืจืึทืืืขืจ ืืืขื ืืืื ืืึทืฉืืืื: ืืืืข ื ืขืฅ, ืคืืืจืืืึทื, ืึทืืจืขืก ืจืฉืืืืช, ืืึทืืจืคึผืื NAT, ืขืืง.
- ืืืืืืืืึทื. ืืื ืืขื ืืื ืข, ืื ื ืืืืืง ืงืึทื ืขืงืฉืึทื ื ืืืขื ืืืื ืื ืืขืฆืืืื ื ืืื ืืืืกืืขืฉืืขืื ืืื ืจืืืื ื ืืืฉื.
- ืงืึทื ืขืงืืื ื ืฆื ืึทื ISP. ืืื ืืขื ืืื ืข, ืื ืื ืืขืจืคืืืกืื ืืืึธืก ืฆืืฉืืขืื ืคึฟืึทืจืืื ืืื ื ืฆื ืื ืืื ืืขืจื ืขื ืืืขื ืืืื ืงืึทื ืคืืืืขืจื, ืจืืืื ื ืืื ืื ืจืขืืขืจืืืึทืฆืืข ืืขืงืึทื ืืืึทื ืคืื ืืื ืืขืจื ืขื ืงืึทื ืึทื ืืืขื ืืืื ืึทืงืืืืืืืืื.
1. ืคึผืจืืกืขืืืื ื
1.1. ืืืจ ืืืกืืขืงื ืื ืจืึทืืืขืจ ืงืึทื ืคืืืืขืจืืืฉืึทื ืืื ืืขื ืืึทืคึฟืขื:
/system reset-configuration skip-backup=yes no-defaults=yesืืกืืื ืืื "ืืขืคืขืจืืขื! ืืึทืฉืืขืืืง ืกืืึท ืืื ืกืืึท? [ื/ืขื]:"ืืื, ื ืึธื ืจืขืืึธืึธืืื ื, ืืืจ ืคืึทืจืืื ืื ืืื Winbox ืืืจื MAC. ืืื ืืขื ืืื ืข, ืื ืงืึทื ืคืืืืขืจืืืฉืึทื ืืื ืืึทื ืืฆืขืจ ืืึทืืข ืืขื ืขื ืงืืืจื.
1.2. ืฉืึทืคึฟื ืึท ื ืืึทืข ืืึทื ืืฆืขืจ:
/user add group=full name=knight password=ultrasecret comment=โNot horseโืงืืึธืฅ ืืื ืืื ืืขืจ ืขืก ืืื ืืืกืืขืงื ืื ืคืขืืืงืืึทื ืืืื ืขืจ:
/user remove adminืืึทืืขืจืงืื ื. ืขืก ืืื ืื ืืึทืืืึทืืืงืื ื ืืื ื ืื ืืืกืืืืึทืืื ื ืคืื ืื ืคืขืืืงืืึทื ืืึทื ืืฆืขืจ ืึทื ืืขืจ ืืืืจ ืืืื ืกืึทืคืขืจ ืืื ืจืขืงืึทืืขื ืื ืคึฟืึทืจ ื ืืฆื.
1.3. ืืืจ ืืึทืื ืืงืขืจืืืง ืฆืืืื ื ืจืฉืืืืช ืคึฟืึทืจ ืื ืงืึทื ืืืื ืืึทื ืก ืคืื ืึทืคึผืขืจืืืืื ื ืืื ืึท ืคืืืจืืืึทื, ืืคืืขืงืื ื ืกืขืืืื ืืก ืืื ืื ืืขืจืข MAC ืกืขืจืืืขืจืก:
/interface list add name=WAN comment="For Internet"
/interface list add name=LAN comment="For Local Area"ืกืืื ืื ื ืื ืืขืจืคืืืกืื ืืื ืืึทืืขืจืงืื ืืขื
/interface ethernet set ether1 comment="to ISP1"
/interface ethernet set ether2 comment="to ISP2"
/interface ethernet set ether3 comment="to ISP3"
/interface ethernet set ether4 comment="to LAN1"
/interface ethernet set ether5 comment="to LAN2"ืืื ืคึผืืึธืืืืจื ืื ืฆืืืื ื ืจืฉืืืืช:
/interface list member add interface=ether1 list=WAN comment=ISP1
/interface list member add interface=ether2 list=WAN comment=ISP2
/interface list member add interface=ether3 list=WAN comment="to ISP3"
/interface list member add interface=ether4 list=LAN comment="LAN1"
/interface list member add interface=ether5 list=LAN comment="LAN2"
ืืึทืืขืจืงืื ื. ืฉืจืืืื ืคืึทืจืฉืืืืืง ืืึทืืขืจืงืื ืืขื ืืื ืืืขืจื ืื ืฆืืื ืคืืจืืจืืื ืืืืฃ ืืขื, ืคึผืืืก ืขืก ืคืึทืกืืืึทืืืืฅ ืืืืขืจ ืืจืึธืืืืขืฉืึธืึธืืื ื ืืื ืคืืจืฉืืื ื ืื ืงืึทื ืคืืืืขืจืืืฉืึทื.
ืืขืจ ืืืืจ ืืืื ืขืก ื ืืืืืง, ืคึฟืึทืจ ืืืืขืจืืืื ืกืืืืช, ืฆื ืืืืื ืื ether3 ืฆืืืื ื ืฆื ืื "WAN" ืฆืืืื ื ืจืฉืืื, ืืจืึธืฅ ืืขื ืคืึทืงื ืึทื ืื IP ืคึผืจืึธืืึธืงืึธื ืืืขื ื ืืฉื ืืืจืืืืื ืขืก.
ืื ืืืืกื ื ืืฉื ืคืึทืจืืขืกื ืึทื ื ืึธื ืื PPP ืฆืืืื ื ืืื ืืืืคืฉืืืื ืืืืฃ ether3, ืขืก ืืืขื ืืืื ืืืื ืืืกืืฃ ืฆื ืื ืฆืืืื ื ืจืฉืืื "WAN"
1.4. ืืืจ ืืึทืืึทืืื ืื ืจืึทืืืขืจ ืคืื ืงืืืึทืจืืึทื ืืืืขืงืฉืึทื ืืื ืงืึธื ืืจืึธื ืคืื ืฉืคึผืืึทืืขืจ ื ืขืืืืึธืจืงืก ืืืจื MAC:
/ip neighbor discovery-settings set discover-interface-list=!WAN
/tool mac-server set allowed-interface-list=LAN
/tool mac-server mac-winbox set allowed-interface-list=LAN1.5. ืืืจ ืืึทืื ืื ืืื ืืืื ืืขื ืื ืืึทื ื ืคืื ืคืืืจืืืึทื ืคืืืืขืจ ืึผืืืื ืฆื ืืึทืฉืืฆื ืื ืจืึทืืืขืจ:
/ip firewall filter add action=accept chain=input comment="Related Established Untracked Allow"
connection-state=established,related,untracked(ืื ืืขืจืฉื ืืื ืืขืจืืืืืขื ืืฉ ืคึฟืึทืจ ืืขืืจืื ืืขื ืืื ืคึฟืึทืจืืื ืืขื ืข ืงืึทื ืขืงืฉืึทื ื ืืืึธืก ืืขื ืขื ืื ืืฉืืืืืื ืคึฟืื ืืืืืข ืงืึธื ื ืขืงืืขื ื ืขืืืืึธืจืงืก ืืื ืื ืจืึทืืืขืจ ืืื)
/ip firewall filter add action=accept chain=input comment="ICMP from ALL" protocol=icmp(ืคึผืื ื ืืื ื ืื ืืืืื ืคึผืื ื. ืื icmp ืืื ืขืจืืืืื ืืื. ืืืืขืจ ื ืืฆืืง ืคึฟืึทืจ ืืขืจืืืืื ื MTU ืคึผืจืึธืืืขืืก)
/ip firewall filter add action=drop chain=input comment="All other WAN Drop" in-interface-list=WAN(ืื ืืขืจืฉื ืืืึธืก ืงืืึธืืืื ืื ืึทืจืืึทื ืฉืจืืึทื ืงืืื ืคืึทืจืืืขืจื ืึทืืฅ ืึทื ืืขืจืฉ ืืืึธืก ืงืืื ืคืื ืื ืืื ืืขืจื ืขื)
/ip firewall filter add action=accept chain=forward
comment="Established, Related, Untracked allow"
connection-state=established,related,untracked(ืื ืืขืจืฉื ืึทืืึทืื ืืขืืจืื ืืขื ืืื ืคึฟืึทืจืืื ืืขื ืข ืงืึทื ืขืงืฉืึทื ื ืืืึธืก ืคืึธืจื ืืืจื ืื ืจืึทืืืขืจ)
/ip firewall filter add action=drop chain=forward comment="Invalid drop" connection-state=invalid(ืื ืืขืจืฉื ืืึทืฉืืขืืืงื ืงืึทื ืขืงืฉืึทื ื ืืื ืงืึธื ื ืขืงืฆืืข-ืฉืืึทื = ืคืึทืจืงืจืืคึผืื ืืืจืืคืึธืจ ืืืจื ืื ืจืึทืืืขืจ. ืขืก ืืื ืฉืืืจืง ืจืขืงืึทืืขื ืืื ืืืจื ืืืงืจืึธืืืง, ืึธืืขืจ ืืื ืขืืืขืืข ืืขืืื ืกืืืืึทืืืึธื ืก ืขืก ืงืขื ืขื ืคืึทืจืฉืคึผืึทืจื ื ืืฆืืง ืคืึทืจืงืขืจ)
/ip firewall filter add action=drop chain=forward comment="Drop all from WAN not DSTNATed"
connection-nat-state=!dstnat connection-state=new in-interface-list=WAN(ืื ืืื ืคืืจืืื ืคืขืงืืขื ืืืืก ืงืืืขื ืคืื ืืื ืืขืจื ืขืฅ ืืื ืืืื ื ืืฉื ืืืจืืืขืืื ืืขื ืืขื ืืกืื ืื ืคืจืืฆืขืืืจ ืฆื ืืืจืืืืื ืืขื ืจืืืืขืจ. ืืืก ืืืขื ืืืฉืืฆื ืืืงืืืข ื ืขืืืืึธืจืงืก ืคืื ืืื ืืจืืืขืจืก ืืืขืืืข, ืืืืขื ืืื ืืื ืืขืจ ืืขืืืขืจ ืืจืึธืืงืึทืกื ืคืขืื ืืื ืืื ืืขืจืข ืคืื ืืจืืืกื ืืืงืข ื ืขืืืืึธืจืงืก, ืืืขืื ืจืขืืืฉืืกืืจืืจื ืืื ืืขืจืข ืคืื ืืจืืืกื ืืืงืข IPืก ืืืก ื ื. ืืืืืืืื ืืื, ืึทืืื, ืคึผืจืืืืจื ืฆื "ืืืกืคืึธืจืฉื" ืืื ืืืขืจ ืืืืข ื ืขืืืืึธืจืงืก.)
ืืึทืืขืจืงืื ื. ืืึธืืืจ ืืืขืจื ืขืืขื ืึทื ืื ื ืขืืืืึธืจืงืก LAN1 ืืื LAN2 ืืขื ืขื ืืจืึทืกืืื ืืื ืื ืคืึทืจืงืขืจ ืฆืืืืฉื ืืื ืืื ืคึฟืื ืืื ืืื ื ืืฉื ืคืืืืขืจื.
1.6. ืฉืึทืคึฟื ืึท ืจืฉืืื ืืื ืึท ืจืฉืืื ืคืื ื ืื-ืจืึธืืืึทืืึทื ื ืขืืืืึธืจืงืก:
/ip firewall address-list
add address=0.0.0.0/8 comment=""This" Network" list=BOGONS
add address=10.0.0.0/8 comment="Private-Use Networks" list=BOGONS
add address=100.64.0.0/10 comment="Shared Address Space. RFC 6598" list=BOGONS
add address=127.0.0.0/8 comment=Loopback list=BOGONS
add address=169.254.0.0/16 comment="Link Local" list=BOGONS
add address=172.16.0.0/12 comment="Private-Use Networks" list=BOGONS
add address=192.0.0.0/24 comment="IETF Protocol Assignments" list=BOGONS
add address=192.0.2.0/24 comment=TEST-NET-1 list=BOGONS
add address=192.168.0.0/16 comment="Private-Use Networks" list=BOGONS
add address=198.18.0.0/15 comment="Network Interconnect Device Benchmark Testing"
list=BOGONS
add address=198.51.100.0/24 comment=TEST-NET-2 list=BOGONS
add address=203.0.113.0/24 comment=TEST-NET-3 list=BOGONS
add address=224.0.0.0/4 comment=Multicast list=BOGONS
add address=192.88.99.0/24 comment="6to4 Relay Anycast" list=BOGONS
add address=240.0.0.0/4 comment="Reserved for Future Use" list=BOGONS
add address=255.255.255.255 comment="Limited Broadcast" list=BOGONS(ืืึธืก ืืื ืึท ืจืฉืืื ืคืื ืึทืืจืขืกืขืก ืืื ื ืขืืืืึธืจืงืก ืืืึธืก ืืขื ืขื ื ืืฉื ืจืึธืืืึทืืึทื ืฆื ืื ืืื ืืขืจื ืขื ืืื ืืืขื ืืืื ื ืืืืขืืื ืืขื ืึทืงืึธืจืืื ืืื.)
ืืึทืืขืจืงืื ื. ืื ืจืฉืืื ืืื ืืื ืืขืจืืขื ืืง ืฆื ืืืืฉื, ืึทืืื ืืื ืจืขืงืึธืืขื ืืืจื ืืืจ ืฆื ืคึผืืจืืึทืืืงืื ืงืึธื ืืจืึธืืืจื ืื ืฉืืืืืช.
1.7. ืืึทืฉืืขืืืง DNS ืคึฟืึทืจ ืื ืจืึทืืืขืจ ืืื:
/ip dns set servers=1.1.1.1,8.8.8.8ืืึทืืขืจืงืื ื. ืืื ืื ืงืจืึทื ื ืืืขืจืกืืข ืคืื โโROS, ืืื ืึทืืืฉ ืกืขืจืืืขืจืก ื ืขืืขื ืคึผืจืืืืึทื ืก ืืืืขืจ ืกืืึทืืืง ืึธื ืขืก. ืื ื ืึธืืขื ืืึทืืืึธืืข ืืขืื ืืื ืืขืฉืืงื ืฆื ืืขืจ ืขืจืฉืืขืจ ืกืขืจืืืขืจ ืืื ืกืืจ ืืื ืืขืจ ืจืฉืืื. ืื ืืืขืจืืึทื ื ืฆื ืืขืจ ืืืืึทืืขืจ ืกืขืจืืืขืจ ืืื ืืืจืืืขืงืึธืื ืืืขื ืื ืงืจืึทื ื ืืื ืึทื ืึทืืืืืืึทืืึทื. ืื ืฆืืื ืืื ืืจืืืก - ืืขืจ ืืื 5 ืกืขืงืื ืืขืก. ืฆืืจืืงืงืืืขื ืฆืืจืืง, ืืืขื ืื "ืืขืคืืื ืกืขืจืืืขืจ" ืืื ืจืืืืื, ืืื ื ืืฉื ืืืืืึธืืึทืืืฉ ืคืึทืื. ืืขืืขืื ืืขื ืึทืืืขืจืืืึทื ืืื ืื ืืืึทืืืึทื ืคืื ืึท ืืืืืืืืึทื, ืืขืจ ืืืืจ ืจืขืงืึทืืขื ืื ื ืืฉื ืฆื ื ืืฆื ืกืขืจืืืขืจืก ืฆืืืขืฉืืขืื ืืืจื ืคึผืจืึทืืืืืืขืจื.
1.8. ืฉืืขืื ืึทืจืืืฃ ืึท ืืืืข ื ืขืฅ.
1.8.1. ืืืจ ืงืึทื ืคืืืืขืจ ืกืืึทืืืง IP ืึทืืจืขืกืขืก ืืืืฃ ืืึทื ืื ืืขืจืคืืืกืื:
/ip address add interface=ether4 address=192.168.88.254/24 comment="LAN1 IP"
/ip address add interface=ether5 address=172.16.1.0/23 comment="LAN2 IP"1.8.2. ืืืจ ืฉืืขืื ืื ืึผืืืื ืคึฟืึทืจ ืจืืฅ ืฆื ืืื ืืืขืจ ืืืืข ื ืขืืืืึธืจืงืก ืืืจื ืื ืืืืคึผื ืจืืืื ื ืืืฉ:
/ip route rule add dst-address=192.168.88.0/24 table=main comment=โto LAN1โ
/ip route rule add dst-address=172.16.0.0/23 table=main comment="to LAN2"ืืึทืืขืจืงืื ื. ืืึธืก ืืื ืืืื ืขืจ ืคืื ืื ืฉื ืขื ืืื ืืจืื ื ืืืขืื ืฆื ืึทืงืกืขืก ืืึทื ืึทืืจืขืกืขืก ืืื ืงืืืืื ืคืื ืคืื ืืจืืืกื ืืืง IP ืึทืืจืขืกืขืก ืคืื ืจืึทืืืขืจ ืื ืืขืจืคืืืกืื ืืืึธืก ืืึธื ื ืื ืืืื ืืืจื ืื ืคืขืืืงืืึทื ืืึทืจืฉืจืื.
1.8.3. ืืขืื ืืึทืืจืคึผืื NAT ืคึฟืึทืจ LAN1 ืืื LAN2:
/ip firewall nat add action=src-nat chain=srcnat comment="Hairpin to LAN1"
out-interface=ether4 src-address=192.168.88.0/24 to-addresses=192.168.88.254
/ip firewall nat add action=src-nat chain=srcnat comment="Hairpin to LAN2"
out-interface=ether5 src-address=172.16.0.0/23 to-addresses=172.16.1.0ืืึทืืขืจืงืื ื. ืืึธืก ืึทืืึทืื ืืืจ ืฆื ืึทืงืกืขืก ืืืื ืจืขืกืืจืกื (ืืกืื ืึทื) ืืืจื ืึท ืคืื ืืจืืืกื ืืืง IP ืืฉืขืช ืืืจ ืืขื ื ืืื ืื ื ืขืฅ.
2. ืึทืงืืืึทืืื, ืื ืืืคึผืืึทืืขื ืืืืฉืึทื ืคืื ืื ืืืืขืจ ืจืืืืืง ืืืืืืืืึทื
ืฆื ืกืึธืืืืข ืื ืคึผืจืึธืืืขื ืคืื "ืขื ืืคืขืจื ืคืื ืืื ืืื ืืขืคืจืขืื", ืืืจ ืืืขืื ื ืืฆื ืฆืืืื ROS ืืืฉืืจืื: ืงืฉืจ ืฆืืืื ะธ ืจืืืื ื ืฆืืืื. ืงืฉืจ ืฆืืืื ืึทืืึทืื ืืืจ ืฆื ืฆืืืื ืื ืืขืืขืื ืงืฉืจ ืืื ืึทืจืืขื ืืื ืืขื ืคืืจืืข ืืื ืึท ืฆืืฉืืึทื ื ืคึฟืึทืจ ืึทืคึผืืืืื ื ืจืืืื ื ืฆืืืื. ืืื ืฉืืื ืืื ืจืืืื ื ืฆืืืื ืืขืืืขื ืฆื ืึทืจืืขืื ืืื IP ืืึทืจืฉืจืื ะธ ืืึทืจืฉืจืื ืึผืืืื. ืืืจ ืคืืืืขืจื ืืืืก ืื ืืืฉืืจืื, ืืืฆื ืืืจ ืืึทืจืคึฟื ืฆื ืืึทืฉืืืกื ืืืึธืก ืงืึทื ืขืงืฉืึทื ื ืฆื ืฆืืืื - ืึทืืึธื, ืคึผืื ืงื ืืื ืฆื ืฆืืืื - ืฆืืืื.
ืืื ืืขืจ ืขืจืฉืืขืจ, ืึทืืฅ ืืื ืคึผืฉืื - ืืืจ ืืืื ืฆืืืื ืึทืืข ืื ืงืึทื ืขืงืฉืึทื ื ืืืึธืก ืงืืืขื ืฆื ืื ืจืึทืืืขืจ ืคึฟืื ืื ืืื ืืขืจื ืขื ืืืจื ืื ืฆืื ืขืืขื ืงืึทื ืึทื. ืืื ืืื ืืืขืจ ืคืึทื, ืืึธืก ืืืขื ืืืื ืืจืื ืืึทืืขืืก (ืืืจื ืื ื ืืืขืจ ืคืื ืืฉืึทื ืึทืื): "conn_isp1", "conn_isp2" ืืื "conn_isp3".
ืื ื ืืึทื ืก ืืื ืื ืจืืข ืืื ืึทื ืื ืงืึทืืื ื ืงืึทื ืขืงืฉืึทื ื ืืืขื ืืืื ืคืื ืฆืืืื ืืืืคึผืก: ืืืจืืคืึธืจ ืืื ืืขื ืข ืืืึธืก ืืขื ืขื ืืืขื ืคึฟืึทืจ ืื ืจืึทืืืขืจ ืืื. ืื ืืขืงืึทื ืืืึทื ืคืื ืงืฉืจ ืฆืืืื ืึทืจืืขื ืืื ืื ืืืฉ ืคืึทืจืงืืขื ืขืจื. ืืึทืืจืึทืืื ืื ืืึทืืืขืืื ื ืคืื ืืขื ืคึผืขืงื ืืืืฃ ืึท ืกืืืคึผืืึทืคืืื ืืืึทืืจืึทืืข, ืืื ืงืึทืืคึผืืืื ืืืจื ืื ืกืคึผืขืฉืึทืืึทืกืฅ ืคืื ืื ืืืงืจืึธtik-trainings.com ืืืื (ื ืื ืืึทื ืฆืข):
ื ืึธื ืื ืึทืจืึธืื, ืืืจ ืืขื ืึทื ืื ืคึผืึทืงืึทื ืงืืื ืฆื "ืึทืจืืึทื ืฉืจืืึทื ืฆืืืื ื", ืืืื ืืืจื ืื ืงืืื "ืคึผืจืขืจืึธืืืื ื" ืืื ืืืืื ืืขืืึธืื ืืื ืฆืขืืืืื ืืื ืืืจืืคืึธืจ ืืื ืืืืข ืืื ืื ืืืึธืง "ืจืืืื ื ืืึทืฉืืืก". ืืขืจืืืขืจ, ืฆื ืืืืื ืฆืืืื ืคืืืื ืืื ืืืื ืฉืืืื, ืืืจ ื ืืฆื ืงืฉืจ ืืืจืง ืืื ืื ืืืฉ ืืึทื ืื ืคึผืจืืจืึธืืืื ื ืงืืืื ืคึผืจืขืจืึธืืืื ื.
ืืึทืืขืจืงืื ื:. ืืื ืจืึธืก, "ืจืึธืืืื ื ืืืจืง" ืืึทืืขืืก ืืขื ืขื ืืืกืืขื ืืื "ืืืฉ" ืืื ืื ืืคึผ / ืจืึธืืืขืก / ืจืืืขืก ืึธืคึผืืืืืื ื, ืืื ืืื "ืจืึธืืืื ื ืืืจืง" ืืื ืื ืืขืจืข ืกืขืงืฉืึทื ื. ืืึธืก ืงืขื ืคืึธืจืฉืืขืื ืขืืืขืืข ืฆืขืืืฉืื ื ืืื ืคืืจืฉืืื ื, ืึธืืขืจ, ืืื ืคืึทืงื, ืืึธืก ืืื ืื ืืขืืืข ืืึทื ืืื ืืื ืึทื ืึทื ืึทืืึธื ืคืื rt_tables ืืื iproute2 ืืืืฃ ืืื ืืงืก.
2.1. ืืืจ ืฆืืืื ืื ืงืึทืืื ื ืงืึทื ืขืงืฉืึทื ื ืคืื ืืขืืขืจ ืคืื ืื ืคึผืจืึทืืืืืืขืจื:
/ip firewall mangle add action=mark-connection chain=prerouting
comment="Connmark in from ISP1" connection-mark=no-mark in-interface=ether1 new-connection-mark=conn_isp1 passthrough=no
/ip firewall mangle add action=mark-connection chain=prerouting
comment="Connmark in from ISP2" connection-mark=no-mark in-interface=ether2 new-connection-mark=conn_isp2 passthrough=no
/ip firewall mangle add action=mark-connection chain=prerouting
comment="Connmark in from ISP3" connection-mark=no-mark in-interface=pppoe-isp3 new-connection-mark=conn_isp3 passthrough=noืืึทืืขืจืงืื ื. ืืื ื ืืฉื ืฆื ืืืจืงืืจื ืฉืืื ืื ืืขืฆืืืื ืืข ืคืืจืืื ืืื ืืขื, ื ืืฆื ืืื ืืขื ืงืฉืจ-ืืืจืง=ืงืืื-ืืืจืง ืฆืืฉืืึทื ื ืื ืฉืืื ืงืฉืจ-ืฉืืื=ื ืืึท ืืืืื ืืื ืืืื ืื ืืืก ืืื ืืขืจ ืจืืืืื, ืืื ืืืื ืื ืืคืืืืจื ืคืื ืคืืื ืืืืืืืืืืข ืคืืจืืื ืืื ืืขื ืืื ืืขื ืืืื ืคืืืก ืคืืืืขืจ.
passthrough=no - ืืืืึทื ืืื ืืขื ืืืคึผืืึทืืขื ืืืืฉืึทื ืืืคึฟื, ืฉืืึทืขื-ืืึทืจืงืื ื ืืื ืืงืกืงืืืืื ืืื, ืฆื ืคืึทืจืืืืขืจื, ืืืจ ืงืขื ืขื ืืืขืจืจืืึทืกื ืื ืื ืืืขืจืืืฉืึทื ืคืื ืึผืืืื ื ืึธื ืืขืจ ืขืจืฉืืขืจ ืืืืึทืื.
ืขืก ืืึธื ืืืื ืืขืืจืืื ืืื ืืื ืขื ืึทื ืืืจ ืืึธื ื ืื ืึทืจืืึทื ืืืฉื ืืื ืืื ืงืืื ืืืขื ืืื ืจืืืื ื ื ืึธื. ืืืฆื ืขืก ืืขื ืขื ืืืืื ืกืืึทืืขืก ืคืื ืฆืืืจืืืืื ื. ืืขืจ ืืืืึทืืขืจ ืืื ืข ืคืื โโืืืคึผืืึทืืขื ืืืืฉืึทื ืืืขื ืืืื ืื ืคึผืจืึทืกืขืกืื ื ืคืื ืืืจืืคืึธืจ ืคืึทืจืงืขืจ ืืืึธืก ืงืขืจื ืืืืขืจ ืื ืืขืืจืื ืืขื ืงืฉืจ ืคืื ืื ืืขืกืืื ืืืฉืึทื ืืื ืื ืืืืข ื ืขืฅ. ืืขื ืข. ืื ืคึผืึทืงืืฅ ืืืึธืก (ืืขื ืื ืืืึทืืจืึทืืข) ืืืจืืืขืืื ืืขื ืืืจื ืื ืจืึทืืืขืจ ืฆืืืืืขื ืืขื ืืืขื:
"ืื ืคึผืื ืฆืืืื ื"=>"ืคึผืจืขืจืึธืืืื ื"=>"ืจืืืื ื ืืึทืฉืืืก"=>"ืคืึธืจืืืขืจืืก"=>"ืคึผืึธืกื ืจืืืื ื"=>"ืจืขืืืืืึทื ืฆืืืื ื" ืืื ืืึทื ืฆื ืืืืขืจ ืึทืืจืขืกื ืืื ืื ืืืืข ื ืขืฅ.
ืืืืืืืง! ืืื ROS, ืขืก ืืื ืงืืื ืืึทืืืฉืืงืึทื ืึธืคึผืืืื ืืื ืคืื ืืจืืืกื ืืืง ืืื ืื ืขืจืืขื ืื ืืขืจืคืืืกืื. ืืืื ืืืจ ืฉืคึผืืจ ืื ืืืขื ืคืื ืื ืขื ืืคืขืจ ืคึผืึทืงืึทื ืืืื ืื ืืืืื ืืืึทืืจืึทืืข, ืขืก ืืืขื ื ืึธืืคืึธืืื ืื ืืขืืืข ืืึทืืืฉืืงืึทื ืืืขื ืืื ืื ืืขืื:
"ืื ืคึผืื ืฆืืืื ื"=>"ืคึผืจืขืจืึธืืืื ื"=>"ืจืืืื ื ืืึทืฉืืืก"=>"ืคืึธืจืืืขืจืืก"=>"ืคึผืึธืกื ืจืืืื ื"=>"ืจืขืืืืืึทื ืฆืืืื ื" ื ืึธืจ ืคึฟืึทืจ ืึท ืืงืฉื"ืื ืคึผืื ืฆืืืื ื"ืืื ืืขืืืขื ืื ืืกืคึผ ืฆืืืื ื, ืืื ืคึฟืึทืจ ืื ืขื ืืคืขืจ - ืืึทื
2.2. ืืืจ ืึธื ืืืืึทืื ืื ืืืจืืคืึธืจ ืคืึทืจืงืขืจ ืฆื ืื ืงืึธืจืึทืกืคึผืึทื ืืื ื ืจืืืื ื ืืืฉื:
/ip firewall mangle add action=mark-routing chain=prerouting
comment="Routemark transit out via ISP1" connection-mark=conn_isp1
dst-address-type=!local in-interface-list=!WAN new-routing-mark=to_isp1 passthrough=no
/ip firewall mangle add action=mark-routing chain=prerouting
comment="Routemark transit out via ISP2" connection-mark=conn_isp2
dst-address-type=!local in-interface-list=!WAN new-routing-mark=to_isp2 passthrough=no
/ip firewall mangle add action=mark-routing chain=prerouting
comment="Routemark transit out via ISP3" connection-mark=conn_isp3
dst-address-type=!local in-interface-list=!WAN new-routing-mark=to_isp3 passthrough=noืืึทืืขืจืงืื ื. in-interface-list=!WAN - ืืืจ ืึทืจืืขืื ืืืืื ืืื ืคืึทืจืงืขืจ ืคืื ืื ืืืืข ื ืขืฅ ืืื dst-address-type=!local ืืืึธืก ืืื ื ืืฉื ืืึธืื ืื ืืขืกืืื ืืืฉืึทื ืึทืืจืขืก ืคืื ืื ืึทืืจืขืก ืคืื ืื ืื ืืขืจืคืืืกืื ืคืื ืื ืจืึทืืืขืจ ืืื.
ืืขืจ ืืขืืืืงืขืจ ืคึฟืึทืจ ืืืืข ืคึผืึทืงืืฅ ืืืึธืก ืืขื ืขื ืืขืงืืืขื ืฆื ืื ืจืึทืืืขืจ ืฆืืืืืขื ืืขื ืืืขื:
"ืื ืคึผืื ืฆืืืื ื"=>"ืคึผืจืขืจืึธืืืื ื"=>"ืจืืืื ื ืืึทืฉืืืก"=>"ืืื ืคึผืื"=>"ืืืงืืืข ืคึผืจืึธืฆืขืก"
ืืืืืืืง! ืืขืจ ืขื ืืคืขืจ ืืืขื ืืืื ืืื ืื ืคืืืืขื ืืข ืืืขื:
โืืืงืืืข ืคืจืืกืขืกโ=>โืจืืืื ื ืืืฉืืืกโ=>โืืืืกืฆืืโ=>โืคึผืึธืกื ืจืืืื ืโ=>โืจืขืืืืืึทื ืฆืืืื ืโ
2.3. ืืืจ ืึธื ืืืืึทืื ืื ืืืืข ืคืึทืจืงืขืจ ืฆื ืื ืงืึธืจืึทืกืคึผืึทื ืืื ื ืจืืืื ื ืืืฉื:
/ip firewall mangle add action=mark-routing chain=output
comment="Routemark local out via ISP1" connection-mark=conn_isp1 dst-address-type=!local
new-routing-mark=to_isp1 passthrough=no
/ip firewall mangle add action=mark-routing chain=output
comment="Routemark local out via ISP2" connection-mark=conn_isp2 dst-address-type=!local
new-routing-mark=to_isp2 passthrough=no
/ip firewall mangle add action=mark-routing chain=output
comment="Routemark local out via ISP3" connection-mark=conn_isp3 dst-address-type=!local
new-routing-mark=to_isp3 passthrough=noืืื ืืขื ืืื ืข, ืื ืึทืจืืขื ืคืื ืคึผืจืืคึผืขืจืื ื ืฆื ืฉืืงื ืึทื ืขื ืืคืขืจ ืฆื ืื ืืื ืืขืจื ืขื ืงืึทื ืึทื ืคืื ืืืึธืก ืื ืืงืฉื ืืื ืืขืงืืืขื ืงืขื ืขื ืืืื ืืขืืืืื ืกืึทืืืื. ืึทืืฅ ืืื ืื ืืขืฆืืืื ื, ืืืืืึทืื ืืื ืืจืืื ืฆื ืืืื ืจืึทืืืื.
ืึท ืืืกืืขืฆืืืื ื "ืืืึทื" ืืืืจืงืื ื ืคืื ืืขื ืกืขืืึทืคึผ ืืื ืื ืคืืืืงืืื ืฆื ืึทืจืืขืื ืืื DSNAT ืคึผืึธืจื ืคืึธืจืืืขืจืืื ื ืคืื ืืืืืข (ISP2, ISP3) ืคึผืจืึทืืืืืืขืจื ืืื ืืขืจ ืืขืืืืงืขืจ ืฆืืื. ืืืื ื ืืฉื, ืืืืึทื ืืืืฃ ISP1 ืืืจ ืืึธืื ืึท ื ืื-ืจืึธืืืึทืืึทื ืึทืืจืขืก. ืืขืจ ืืืืจืงืื ื ืืื ืืืืืืืง, ืืืฉื, ืคึฟืึทืจ ืึท ืคึผืึธืกื ืกืขืจืืืขืจ ืืื ืฆืืืื ืืงืก ืืืึธืก ืงืืง ืืื ืคืึทืจืฉืืืขื ืข ืืื ืืขืจื ืขื ืืฉืึทื ืึทืื.
ืฆื ืขืืืืื ืืจื ืื ื ืืึทื ืกืื ืคืื ืื ืึธืคึผืขืจืึทืฆืืข ืคืื โโืืืืข ื ืขืืืืึธืจืงืก ืืื ืคืื ืืจืืืกื ืืืง IP ืจืึธืืืขืจืก, ืืืจ ื ืืฆื ืื ืกืึทืืืฉืึทื ื ืคืื ืคึผืึทืจืึทืืจืึทืคืก. 1.8.2 ืืื 3.1.2.6.
ืืื ืึทืืืฉืึทื, ืืืจ ืงืขื ืขื ื ืืฆื ืึท ืืขืฆืืึทื ืืื ืืึทืจืงืื ืื ืฆื ืกืึธืืืืข ืคึผืึทืจืึทืืจืึทืฃ 3 ืคืื ืื ืคึผืจืึธืืืขื. ืืืจ ืื ืกืืจืืืขื ื ืขืก ืืื ืืึธืก:
2.4. ืืืจ ืคืืจื ืคืึทืจืงืขืจ ืคืื ืืืืข ืงืืืืึทื ืฅ ืคึฟืื ืื ืจืืืื ื ืจืฉืืืืช ืฆื ืื ืฆืื ืขืืขื ืืืฉื:
/ip firewall mangle add action=mark-routing chain=prerouting
comment="Address List via ISP1" dst-address-list=!BOGONS new-routing-mark=to_isp1
passthrough=no src-address-list=Via_ISP1
/ip firewall mangle add action=mark-routing chain=prerouting
comment="Address List via ISP2" dst-address-list=!BOGONS new-routing-mark=to_isp2
passthrough=no src-address-list=Via_ISP2
/ip firewall mangle add action=mark-routing chain=prerouting
comment="Address List via ISP3" dst-address-list=!BOGONS new-routing-mark=to_isp3
passthrough=no src-address-list=Via_ISP3ืืื ืึท ืจืขืืืืืึทื, ืขืก ืงืืงื ืขืคึผืขืก ืืื ืืึธืก:
3. ืฉืืขืื ืึทืจืืืฃ ืึท ืงืฉืจ ืฆื ืื ืืกืคึผ ืืื ืืขืื ืืจืึทื ืืื ืจืืืื ื
3.1. ืฉืืขืื ืึท ืงืฉืจ ืฆื ISP1:
3.1.1. ืงืึทื ืคืืืืขืจ ืึท ืกืืึทืืืง IP ืึทืืจืขืก:
/ip address add interface=ether1 address=100.66.66.2/30 comment="ISP1 IP"3.1.2. ืืึทืฉืืขืืืงื ืกืืึทืืืง ืจืืืื ื:
3.1.2.1. ืืืื ืึท ืคืขืืืงืืึทื "ื ืืืืคืึทื" ืืึทืจืฉืจืื:
/ip route add comment="Emergency route" distance=254 type=blackholeืืึทืืขืจืงืื ื. ืืขืจ ืืึทืจืฉืจืื ืึทืืึทืื ืคืึทืจืงืขืจ ืคืื ืืืืข ืคึผืจืึทืกืขืกืึทื ืฆื ืคืึธืจื ืื ืจืื ืืืกืืืฉืึทื ืืื ืข, ืจืึทืืึทืจืืืึทืก ืคืื ืื ืฉืืึทื ืคืื ืื ืคึฟืึทืจืืื ืืื ืืขื ืคืื ืงืืื ืคืื ืื ืคึผืจืึทืืืืืืขืจื. ืื ื ืืึทื ืก ืคืื ืึทืืืืึธืืื ื ืืืืข ืคืึทืจืงืขืจ ืืื ืึทื ืืื ืกืืจ ืคึฟืึทืจ ืื ืคึผืึทืงืึทื ืฆื ืืึทื ืืืึท ืืื ืืกืืขืจ ืขืจืืขืฅ, ืื ืืืืคึผื ืจืืืื ื ืืืฉ ืืืื ืืึธืื ืึทื ืึทืงืืืื ืืึทืจืฉืจืื ืฆื ืื ืคืขืืืงืืึทื ืืืืืืืื. ืืืื ื ืืฉื, ืืขืจ ืคึผืขืงื ืืืขื ืคืฉืื ืืืื ืืจืืึฟ.
ืืื ืึท ืืขืฆืืึทื ืคืึทืจืืขื ืืขืจืื ื ืืฉืขืง ืืืืืืืื ืคึฟืึทืจ ืึท ืืืคึผืขืจ ืึทื ืึทืืืกืืก ืคืื ืื ืงืึทื ืึทื ืฉืืึทื, ืืื ืคึฟืึธืจืฉืืึธืื ื ืืฆื ืื ืจืขืงืืจืกืืืืข ืืึทืจืฉืจืื ืืืคึฟื. ืื ืขืกืึทื ืก ืคืื ืืขื ืืืคึฟื ืืื ืึทื ืืืจ ืืึธืื ืื ืจืึทืืืขืจ ืฆื ืงืืงื ืคึฟืึทืจ ืึท ืืจื ืฆื ืืืื ืืืืืืืื ื ืื ืืืืึทื, ืึธืืขืจ ืืืจื ืึท ืื ืืขืจืืืืืื ืืืืืืืื. 4.2.2.1, 4.2.2.2 ืืื 4.2.2.3 ืืืขืื ืืืื ืืืืกืืขืจืืืืืื ืืื ืึทืืึท "ืคึผืจืืืืจื" ืืืืืืืืื ืคึฟืึทืจ ISP1, ISP2 ืืื ISP3 ืจืืกืคึผืขืงืืืืืื.
3.1.2.2. ืจืื ืฆื ืื "ืืืขืจืึทืคืึทืงืืืฉืึทื" ืึทืืจืขืก:
/ip route add check-gateway=ping comment="For recursion via ISP1"
distance=1 dst-address=4.2.2.1 gateway=100.66.66.1 scope=10ืืึทืืขืจืงืื ื. ืืืจ ื ืืืขืจืืงืขืจ ืืขืจ ืคืึทืจื ืขื ืืืขืจื ืฆื ืื ืคืขืืืงืืึทื ืืื ROS ืฆืื ืคืึทืจื ืขื ืฆื ื ืืฆื 4.2.2.1 ืืื ืึท ืจืขืงืืจืกืืืืข ืืืืืืืื ืืื ืืขืจ ืฆืืงืื ืคึฟื. ืืื ืื ืืขืจืฉืืจืืึทืื: ืืขืจ ืคืึทืจื ืขื ืคืื ืืขืจ ืืึทืจืฉืจืื ืฆื ืื "ืคึผืจืืืืจื" ืึทืืจืขืก ืืืื ืืืื ืืืืื ืืงืขืจ ืืื ืึธืืขืจ ืืืืึทื ืฆื ืื ืฆืื ืคืึทืจื ืขื ืคืื ืืขืจ ืืึทืจืฉืจืื ืืืึธืก ืืืขื ืึธืคึผืฉืืงื ืฆื ืื ืคึผืจืึธืืข ืืืื ืขืจ.
3.1.2.3. ืจืขืงืืจืกืืืืข ืคืขืืืงืืึทื ืืึทืจืฉืจืื ืคึฟืึทืจ ืคืึทืจืงืขืจ ืึธื ืจืืืื ื ืฆืืืื:
/ip route add comment="Unmarked via ISP1" distance=2 gateway=4.2.2.1ืืึทืืขืจืงืื ื. ืื ืืืกืืึทื ืกืข = 2 ืืืขืจื ืืื ืืขื ืืฆื ืืืืึทื ISP1 ืืื ืืขืจืงืืขืจื ืืื ืืขืจ ืขืจืฉืืขืจ ืืึทืงืึทืคึผ ืืืื ืื ืึทืจืืขื ืื ืึธืื.
3.1.2.4. ืจืขืงืืจืกืืืืข ืคืขืืืงืืึทื ืืึทืจืฉืจืื ืคึฟืึทืจ ืคืึทืจืงืขืจ ืืื ืจืืืื ื ืฆืืืื "to_isp1":
/ip route add comment="Marked via ISP1 Main" distance=1 gateway=4.2.2.1
routing-mark=to_isp1ืืึทืืขืจืงืื ื. ืึทืงืืืึทืืื, ืืึธ ืืืจ ืืขืกืึธืฃ ืึธื ืืืืื ืฆื ืืขื ืืกื ืื ืคืืจืืช ืคืื ืื ืคึผืจืืคึผืขืจืึทืืึธืจื ืึทืจืืขื ืืืึธืก ืืื ืืขืืืขื ืืืจืืืขืงืึธืื ืืื ืคึผืึทืจืึทืืจืึทืฃ 2.
ืืืืฃ ืืขื ืืึทืจืฉืจืื, ืึทืืข ืคืึทืจืงืขืจ ืืืึธืก ืืึธืื ืื ืืึทืจืง ืืึทืจืฉืจืื "to_isp1" ืืืขื ืืืื ืืืจืขืงืืขื ืฆื ืื ืืืืืืืื ืคืื ืืขืจ ืขืจืฉืืขืจ ืฉืคึผืืึทืืขืจ, ืจืึทืืึทืจืืืึทืก ืคืื ืืืึธืก ืคืขืืืงืืึทื ืืืืืืืื ืืื ืืขืจืืืืึทื ืึทืงืืืื ืคึฟืึทืจ ืื ืืืืคึผื ืืืฉ.
3.1.2.5. ืขืจืฉืืขืจ ืคืึทืืืึทืงืง ืจืขืงืืจืกืืืืข ืคืขืืืงืืึทื ืืึทืจืฉืจืื ืคึฟืึทืจ ISP2 ืืื ISP3 ืืึทืื ืคืึทืจืงืขืจ:
/ip route add comment="Marked via ISP2 Backup1" distance=2 gateway=4.2.2.1
routing-mark=to_isp2
/ip route add comment="Marked via ISP3 Backup1" distance=2 gateway=4.2.2.1
routing-mark=to_isp3ืืึทืืขืจืงืื ื. ืื ืจืืฅ ืืขื ืขื ืืืจืฃ, ืฆืืืืฉื ืื ืืขืจืข ืืืื, ืฆื ืจืขืืขืจืืืืจื ืคืึทืจืงืขืจ ืคืื ืืืืข ื ืขืืืืึธืจืงืก ืืืึธืก ืืขื ืขื ืืืืืืืืขืจ ืคืื ืืขืจ ืึทืืจืขืก ืจืฉืืื "to_isp*"'
3.1.2.6. ืืืจ ืคืึทืจืฉืจืืึทืื ืื ืืึทืจืฉืจืื ืคึฟืึทืจ ืื ืืืืข ืคืึทืจืงืขืจ ืคืื ืื ืจืึทืืืขืจ ืฆื ืื ืืื ืืขืจื ืขื ืืืจื ISP1:
/ip route rule add comment="From ISP1 IP to Inet" src-address=100.66.66.2 table=to_isp1ืืึทืืขืจืงืื ื. ืืื ืงืึธืืืื ืึทืฆืืข ืืื ืื ืึผืืืื ืคืื ืคึผืึทืจืึทืืจืึทืฃ 1.8.2, ืขืก ืืื ืึทืงืกืขืก ืฆื ืื ืืขืืขืื ืงืึทื ืึทื ืืื ืึท ืืขืืขืื ืืงืืจ. ืืึธืก ืืื ืงืจืืืืฉ ืคึฟืึทืจ ืื ืื ืืึทื ืึทืื ืืืึธืก ืกืคึผืขืฆืืคืืฆืืจื ืื ืืืืข ืืืึทื IP ืึทืืจืขืก (EoIP, IP-IP, GRE). ืืื ื ืื ืึผืืืื ืืื ืืคึผ ืืึทืจืฉืจืื ืึผืืืื ืืขื ืขื ืขืงืกืึทืงืืืืึทื ืคืื ืฉืคึผืืฅ ืฆื ืื ืึธ, ืืื ืืขืจ ืขืจืฉืืขืจ ืืืืึทืื ืคืื ืื ืืืืื ืืื ืืขื, ืืขืจ ืืขืจืฉื ืืึธื ืืืื ื ืึธื ืื ืึผืืืื ืคืื ืคึผืื ืงื 1.8.2.
3.1.3. ืืืจ ืจืขืืืกืืจืืจื ืื NAT โโืืขืจืฉื ืคึฟืึทืจ ืึทืืืืึธืืื ื ืคืึทืจืงืขืจ:
/ip firewall nat add action=src-nat chain=srcnat comment="NAT via ISP1"
ipsec-policy=out,none out-interface=ether1 to-addresses=100.66.66.2ืืึทืืขืจืงืื ื. NATim ืึทืืฅ ืืืึธืก ืืืื ืืืืก, ืึทืืืฅ ืคึฟืึทืจ ืืืึธืก ืงืืื ืืื ืื IPsec ืคึผืึทืืึทืกืื. ืืื ืคึผืจืืืืจื ื ืืฉื ืฆื ื ืืฆื ืงืึทืืฃ = ืืึทืกืงืขืจืืื ืกืืึทืื ืืขืืึทืืจืข ื ืืืืืง. ืขืก ืืื ืกืืึธืืขืจ ืืื ืืขืจ ืจืืกืึธืจืก ืืื ืืขื ืกืืืืข ืืื src-nat ืืืืึทื ืขืก ืงืึทืืงืืึทืืืืฅ ืื NAT โโืึทืืจืขืก ืคึฟืึทืจ ืืขืืขืจ ื ืืึทืข ืงืฉืจ.
3.1.4. ืืืจ ืฉืืงื ืงืืืืึทื ืฅ ืคืื ืืขืจ ืจืฉืืื ืืืึธืก ืืขื ืขื ืคึผืจืึธืืืืืึทืืึทื ืคืื ืึทืงืกืขืก ืืืจื ืื ืืขืจืข ืคึผืจืึทืืืืืืขืจื ืืืืึทื ืฆื ืื ISP1 ืฉืคึผืืึทืืขืจ ืก ืืืืืืืื.
/ip firewall mangle add action=route chain=prerouting comment="Address List via ISP1 only"
dst-address-list=!BOGONS passthrough=no route-dst=100.66.66.1
src-address-list=Via_only_ISP1 place-before=0ืืึทืืขืจืงืื ื. action=route ืืื ืึท ืืขืืขืจ ืืืืืขืจืงืืึทื ืืื ืืื ืืขืืืขื ืื ืืืืืขืจ ืื ืืขืจืข ืจืืืื ื ืึผืืืื.
place-before=0 - ืฉืืขืื ืืื ืืืขืจ ืืขืจืฉื ืขืจืฉืืขืจ ืืื ืืขืจ ืจืฉืืื.
3.2. ืฉืืขืื ืึท ืงืฉืจ ืฆื ISP2.
ืืื ื ืื ISP2 ืฉืคึผืืึทืืขืจ ืืื ืืื ืื ืื ืกืขืืืื ืืก ืืืจื DHCP, ืขืก ืืื ืืืืึทื ืฆื ืืึทืื ืื ื ืืืืืง ืขื ืืขืจืื ืืขื ืืื ืึท ืฉืจืืคื ืืืึธืก ืกืืึทืจืฅ ืืืขื ืื DHCP ืงืืืขื ื ืืื ืืจืืืขืจื:
/ip dhcp-client
add add-default-route=no disabled=no interface=ether2 script=":if ($bound=1) do={r
n /ip route add check-gateway=ping comment="For recursion via ISP2" distance=1
dst-address=4.2.2.2/32 gateway=$"gateway-address" scope=10r
n /ip route add comment="Unmarked via ISP2" distance=1 gateway=4.2.2.2;r
n /ip route add comment="Marked via ISP2 Main" distance=1 gateway=4.2.2.2
routing-mark=to_isp2;r
n /ip route add comment="Marked via ISP1 Backup1" distance=2 gateway=4.2.2.2
routing-mark=to_isp1;r
n /ip route add comment="Marked via ISP3 Backup2" distance=3 gateway=4.2.2.2
routing-mark=to_isp3;r
n /ip firewall nat add action=src-nat chain=srcnat ipsec-policy=out,none
out-interface=$"interface" to-addresses=$"lease-address" comment="NAT via ISP2"
place-before=1;r
n if ([/ip route rule find comment="From ISP2 IP to Inet"] ="") do={r
n /ip route rule add comment="From ISP2 IP to Inet"
src-address=$"lease-address" table=to_isp2 r
n } else={r
n /ip route rule set [find comment="From ISP2 IP to Inet"] disabled=no
src-address=$"lease-address"r
n } r
n} else={r
n /ip firewall nat remove [find comment="NAT via ISP2"];r
n /ip route remove [find comment="For recursion via ISP2"];r
n /ip route remove [find comment="Unmarked via ISP2"];r
n /ip route remove [find comment="Marked via ISP2 Main"];r
n /ip route remove [find comment="Marked via ISP1 Backup1"];r
n /ip route remove [find comment="Marked via ISP3 Backup2"];r
n /ip route rule set [find comment="From ISP2 IP to Inet"] disabled=yesr
n}r
n" use-peer-dns=no use-peer-ntp=noืืขืจ ืฉืจืืคื ืืื ืืื ืื ืืืื ืืึธืงืก ืคึฟืขื ืฆืืขืจ:
ืืึทืืขืจืงืื ื. ืืขืจ ืขืจืฉืืขืจ ืืืื ืคืื ืื ืฉืจืืคื ืืื ืืจืืืขืจื ืืืขื ืื ืืื ืืขื ืืื ืืฆืืื ืืืงืืืขื, ืื ืจืืข - ื ืึธื ืื ืืื ืืขื ืืื ืืืคืจืืื.ืืขื ืืึทืืขืจืงืื ื 2
3.3. ืืืจ ืฉืืขืื ืึท ืงืฉืจ ืฆื ืื ISP3 ืฉืคึผืืึทืืขืจ.
ืืื ื ืื ืกืขืืืื ืืก ืฉืคึผืืึทืืขืจ ืืื ืืื ืื ืืื ืึทืืืฉ, ืขืก ืืื ืืืืึทื ืฆื ืืึทืื ืื ื ืืืืืง ืขื ืืขืจืื ืืขื ืืื ืกืงืจืืคึผืก ืืืึธืก ืึธื ืืืืื ื ืึธื ืื ืคืคึผืคึผ ืฆืืืื ื ืืื ืืืืคืืขืฉืืื ืขื ืืื ื ืึธื ืืขื ืคืึทื.
3.3.1. ืขืจืฉืืขืจ ืืืจ ืงืึทื ืคืืืืขืจ ืื ืคึผืจืึธืคืื:
/ppp profile
add comment="for PPPoE to ISP3" interface-list=WAN name=isp3_client
on-down="/ip firewall nat remove [find comment="NAT via ISP3"];r
n/ip route remove [find comment="For recursion via ISP3"];r
n/ip route remove [find comment="Unmarked via ISP3"];r
n/ip route remove [find comment="Marked via ISP3 Main"];r
n/ip route remove [find comment="Marked via ISP1 Backup2"];r
n/ip route remove [find comment="Marked via ISP2 Backup2"];r
n/ip route rule set [find comment="From ISP3 IP to Inet"] disabled=yes;"
on-up="/ip route add check-gateway=ping comment="For recursion via ISP3" distance=1
dst-address=4.2.2.3/32 gateway=$"remote-address" scope=10r
n/ip route add comment="Unmarked via ISP3" distance=3 gateway=4.2.2.3;r
n/ip route add comment="Marked via ISP3 Main" distance=1 gateway=4.2.2.3
routing-mark=to_isp3;r
n/ip route add comment="Marked via ISP1 Backup2" distance=3 gateway=4.2.2.3
routing-mark=to_isp1;r
n/ip route add comment="Marked via ISP2 Backup2" distance=3 gateway=4.2.2.3
routing-mark=to_isp2;r
n/ip firewall mangle set [find comment="Connmark in from ISP3"]
in-interface=$"interface";r
n/ip firewall nat add action=src-nat chain=srcnat ipsec-policy=out,none
out-interface=$"interface" to-addresses=$"local-address" comment="NAT via ISP3"
place-before=1;r
nif ([/ip route rule find comment="From ISP3 IP to Inet"] ="") do={r
n /ip route rule add comment="From ISP3 IP to Inet" src-address=$"local-address"
table=to_isp3 r
n} else={r
n /ip route rule set [find comment="From ISP3 IP to Inet"] disabled=no
src-address=$"local-address"r
n};r
n"ืืขืจ ืฉืจืืคื ืืื ืืื ืื ืืืื ืืึธืงืก ืคึฟืขื ืฆืืขืจ:
ืืึทืืขืจืงืื ื. ืคึผืึทืก
/ ืืคึผ ืคืืืจืืืึทื ืืึทื ืื ืฉืืขืื [ืืขืคึฟืื ืขื ืงืึธืืขื ืืึทืจ = "ืงืึธื ื ืืึทืจืง ืืื ืคึฟืื ืืกืคึผ3"] ืืื-ืฆืืืื ื = $ "ืฆืืืื ื";
ืึทืืึทืื ืืืจ ืฆื ืจืืืืืง ืื ืจืื ืืืืื ื ืคืื ืื ืฆืืืื ื, ืืืืึทื ืขืก ืึทืจืืขื ืืื ืืืื ืงืึธื ืืื ื ืืฉื ืื ืึทืจืืืกืืืืึทืื ื ืึธืืขื.
3.3.2. ืืืฆื, ื ืืฆื ืืขื ืคึผืจืึธืคืื, ืฉืึทืคึฟื ืึท ืคึผืคึผืคึผ ืงืฉืจ:
/interface pppoe-client add allow=mschap2 comment="to ISP3" disabled=no
interface=ether3 name=pppoe-isp3 password=isp3_pass profile=isp3_client user=isp3_clientืืื ืึท ืืขืฆื ืคืึทืจืืื ืื, ืืึธืืืจ ืฉืืขืื ืื ืืืืืขืจ:
/system ntp client set enabled=yes server-dns-names=0.pool.ntp.org,1.pool.ntp.org,2.pool.ntp.orgืคืืจ ืื ืืืืก ืืืืขื ืขื ืืืื ืกืืฃ
ืื ืคืืจืืขืืืืื ืืืขื ืฆื ืื ืกืืจืืืขื ื ืึท ืืืืืืืืึทื ืืื ืื ืคืขืจืืขื ืืขืืข ืืืืขืจืืึทื ื ืคืื ืืขืจ ืืืืจ ืืื ืืื ื ืืฉื ืืขืจ ืืืืื ืืขืืืขื. ืื ROS Toolkit ืืื ืืจืืื ืืื ืคืืขืงืกืึทืืึทื, ืืืึธืก, ืืืืฃ ืื ืืืื ืืึทื ื, ืืืึทื ืขื ืฉืืืขืจืืงืืืื ืคึฟืึทืจ ืืืืื ืขืจื, ืืื, ืืืืฃ ืื ืื ืืขืจืข ืืึทื ื, ืื ืกืืื ืคึฟืึทืจ ืืืื ืคึผืึธืคึผืืืึทืจืืืขื. ืืขืจื ืขื, ืคึผืจืืืืจื, ืึทื ืืืขืงื ื ืืึทืข ืืืฉืืจืื ืืื ืกืึทืืืฉืึทื ื. ืคึฟืึทืจ ืืืึทืฉืคึผืื, ืืื ืึท ืึทืคึผืืึทืงืืืฉืึทื ืคืื ืื ืงืื ื ืืืืกื, ืขืก ืืื ืืขืืืขื ืฆื ืคืึทืจืืืึทืื ืื ืืขืฆืืึทื ืืื ืืขื ืืืคึผืืึทืืขื ืืืืฉืึทื ืคืื ืื ืืืืืืืืึทื ืืฉืขืง-ืืืืืืืื ืืื ืจืขืงืืจืกืืืืข ืจืืฅ ืฆื ื ืขืืืืึทืืฉ.
ืืขืจืืช
- ืืฉืขืง-ืืืืืืืื - ืึท ืืขืงืึทื ืืืึทื ืึทื ืึทืืึทืื ืืืจ ืฆื ืืืึทืงืืืืืืื ืื ืืึทืจืฉืจืื ื ืึธื ืฆืืืื ืงืึธื ืกืขืงืืืืืืข ื ืื ืืขืจืึธืื ืืฉืขืงืก ืคืื ืื ืืืืืืืื ืคึฟืึทืจ ืึทืืืืืืึทืืืืึทืื. ืื ืืฉืขืง ืืื ืืขืืื ืึทืืึธื ืืขืืขืจ 10 ืกืขืงืื ืืขืก, ืคึผืืืก ืื ืขื ืืคืขืจ ืืืืืึทืื. ืืื ืืึทื ืฅ, ืื ืคืึทืงืืืฉ ืกืืืืืฉืื ื ืืืืืื ื ืืืื ืืื ืื ืงืืื ืคืื 20-30 ืกืขืงืื ืืขืก. ืืืื ืึทืืึท ืกืืืืืฉืื ื ืืืืืื ื ืืื ื ืืฉื ืืขื ืื, ืขืก ืืื ืึทื ืึธืคึผืฆืืข ืฆื ื ืืฆื ืื ืืขืฆืืึทื ื ืขืืืืึทืืฉ, ืืื ืื ืืฉืขืง ืืืึทืืขืจ ืงืขื ืขื ืืืื ืฉืืขืื ืืึทื ืืืึทืื. ืืฉืขืง-ืืืืืืืื ืืื ื ืืฉื ืคืืึทืขืจ ืืืืฃ ืื ืืขืจืืืืึทื ื ืคึผืึทืงืึทื ืึธื ืืืขืจ ืืืืฃ ืื ืืื ืง.
ืืืืืืืง! ืืืึทืงืืืืืืืืื ื ืึท ืขืจืฉืืืง ืืึทืจืฉืจืื ืืืขื ืืืึทืงืืืืืืื ืึทืืข ืื ืืขืจืข ืจืืฅ ืืืึธืก ืึธืคึผืฉืืงื ืฆื ืืื. ืืขืจืืืขืจ, ืคึฟืึทืจ ืืื ืฆื ืกืคึผืขืฆืืคืืฆืืจื ืืฉืขืง-ืืืืืืืื = ืคึผืื ื ื ืืฉื ืืืืืืื.
- ืขืก ืืึทืคึผืึทื ื ืึทื ืึท ืืืจืืคืึทื ืึทืงืขืจื ืืื ืื DHCP ืืขืงืึทื ืืืึทื, ืืืึธืก ืงืืงื ืืื ืึท ืงืืืขื ื ืกืืึทืง ืืื ืื ืืึทื ืืึทืขื ืฉืืึทื. ืืื ืืขื ืคืึทื, ืื ืจืืข ืืืื ืคืื ืื ืฉืจืืคื ืืืขื ื ืืฉื ืึทืจืืขืื, ืึธืืขืจ ืขืก ืืืขื ื ืืฉื ืคืึทืจืืืึทืื ืคืึทืจืงืขืจ ืฆื ืืืื ืจืืืืืง, ืืืืึทื ืื ืฉืืึทื ืืจืึทืงืก ืื ืงืึธืจืึทืกืคึผืึทื ืืื ื ืจืขืงืืจืกืืืืข ืืึทืจืฉืจืื.
- ECMP (Equal Cost Multi-Path) - ืืื ROS ืขืก ืืื ืืขืืืขื ืฆื ืฉืืขืื ืึท ืืึทืจืฉืจืื ืืื ืขืืืขืืข ืืืืืืืืื ืืื ืื ืืขืืืข ืืืืึทืืงืืื. ืืื ืืขื ืคืึทื, ืงืึทื ืขืงืฉืึทื ื ืืืขื ืืืื ืคืื ืื ืืขืจืืขืืืืื ืืืืขืจ ืืฉืึทื ืึทืื ื ืืฆื ืื ืจืึธืื ื ืจืึธืืื ืึทืืืขืจืืืึทื, ืืื ืคึผืจืึธืคึผืึธืจืฆืืข ืฆื ืื ื ืืืขืจ ืคืื ืกืคึผืขืกืืคืืขื ืืืืืืืืื.
ืคึฟืึทืจ ืื ืืืคึผืึทืืึทืก ืฆื ืฉืจืืึทืื ืืขื ืึทืจืืืงื, ืืืืฃ ืืื ืื ืคืึธืจืขื ืคืื ืืืึทื ืกืืจืืงืืืจ ืืื ืคึผืืืืกืืึทื ื ืคืื ืึทืงืกืขื ืฅ - ืคึผืขืจืืขื ืืขื ืืื ืงืืืจืงืืื ืฆื ืขืืืืขื ื
ืืงืืจ: www.habr.com