Привет! У меня проблема с балансировкой нагрузки в PCC для 4 неравных канала WAN. У нас есть 4 канала WAN от разных провайдеров. Каналы ISP1 и ISP2 — 4 Мбит/с, ISP3 — 2 Мбит/с, а ISP4 — 1 Мбит/с. Проблема с FTP-трафиком. Хочу узнать, как можно заставить, например, только FTP-трафик (Dst.Port=21) проходить через один из каналов WAN?
Вот моя конфигурация PCC:
`/interface set name=LAN numbers=0 set name=ISP1 numbers=1 set name=ISP2 numbers=2 set name=ISP3 numbers=3 set name=ISP4 numbers=4 /ip address add address=192.168.1.1/24 network=192.168.1.0 broadcast=192.168.1.255 interface=LAN add address=101.101.101.1/24 network=101.101.101.0 broadcast=101.101.101.255 interface=ISP1 add address=102.102.102.1/24 network=102.102.102.0 broadcast=102.102.102.255 interface=ISP2 add address=103.103.103.1/24 network=103.103.103.0 broadcast=103.103.103.255 interface=ISP3 add address=104.104.104.1/24 network=104.104.104.0 broadcast=104.104.104.255 interface=ISP4 /ip firewall mangle add chain=input in-interface=ISP1 action=mark-connection new-connection-mark=ISP1_conn add chain=input in-interface=ISP2 action=mark-connection new-connection-mark=ISP2_conn add chain=input in-interface=ISP3 action=mark-connection new-connection-mark=ISP3_conn add chain=input in-interface=ISP4 action=mark-connection new-connection-mark=ISP4_conn add chain=output connection-mark=ISP1_conn action=mark-routing new-routing-mark=to_ISP1 add chain=output connection-mark=ISP2_conn action=mark-routing new-routing-mark=to_ISP2 add chain=output connection-mark=ISP3_conn action=mark-routing new-routing-mark=to_ISP3 add chain=output connection-mark=ISP4_conn action=mark-routing new-routing-mark=to_ISP4 add chain=prerouting in-interface=LAN dst-address=101.101.101.0/24 action=accept add chain=prerouting in-interface=LAN dst-address=102.102.102.0/24 action=accept add chain=prerouting in-interface=LAN dst-address=103.103.103.0/24 action=accept add chain=prerouting in-interface=LAN dst-address=104.104.104.0/24 action=accept add chain=prerouting dst-address-type=!LAN in-interface=LAN per-connection-classifier=both-addresses:4/0 action=mark-connection new-connection-mark=ISP1_conn passthrough=yes add chain=prerouting dst-address-type=!LAN in-interface=LAN per-connection-classifier=both-addresses:4/0 action=mark-connection new-connection-mark=ISP1_conn passthrough=yes add chain=prerouting dst-address-type=!LAN in-interface=LAN per-connection-classifier=both-addresses:4/0 action=mark-connection new-connection-mark=ISP1_conn passthrough=yes add chain=prerouting dst-address-type=!LAN in-interface=LAN per-connection-classifier=both-addresses:4/0 action=mark-connection new-connection-mark=ISP1_conn passthrough=yes add chain=prerouting dst-address-type=!LAN in-interface=LAN per-connection-classifier=both-addresses:4/1 action=mark-connection new-connection-mark=ISP2_conn passthrough=yes add chain=prerouting dst-address-type=!LAN in-interface=LAN per-connection-classifier=both-addresses:4/1 action=mark-connection new-connection-mark=ISP2_conn passthrough=yes add chain=prerouting dst-address-type=!LAN in-interface=LAN per-connection-classifier=both-addresses:4/1 action=mark-connection new-connection-mark=ISP2_conn passthrough=yes add chain=prerouting dst-address-type=!LAN in-interface=LAN per-connection-classifier=both-addresses:4/1 action=mark-connection new-connection-mark=ISP2_conn passthrough=yes add chain=prerouting dst-address-type=!LAN in-interface=LAN per-connection-classifier=both-addresses:4/2 action=mark-connection new-connection-mark=ISP3_conn passthrough=yes add chain=prerouting dst-address-type=!LAN in-interface=LAN per-connection-classifier=both-addresses:4/2 action=mark-connection new-connection-mark=ISP3_conn passthrough=yes add chain=prerouting dst-address-type=!LAN in-interface=LAN per-connection-classifier=both-addresses:4/3 action=mark-connection new-connection-mark=ISP4_conn passthrough=yes add chain=prerouting connection-mark=ISP1_conn in-interface=LAN action=mark-routing new-routing-mark=to_ISP1 add chain=prerouting connection-mark=ISP2_conn in-interface=LAN action=mark-routing new-routing-mark=to_ISP2 add chain=prerouting connection-mark=ISP3_conn in-interface=LAN action=mark-routing new-routing-mark=to_ISP3 add chain=prerouting connection-mark=ISP4_conn in-interface=LAN action=mark-routing new-routing-mark=to_ISP4 /ip route add dst-address=0.0.0.0/0 routing-mark=to_ISP1 gateway=101.101.101.254 check-gateway=ping add dst-address=0.0.0.0/0 routing-mark=to_ISP2 gateway=102.102.102.254 check-gateway=ping add dst-address=0.0.0.0/0 routing-mark=to_ISP3 gateway=103.103.103.254 check-gateway=ping add dst-address=0.0.0.0/0 routing-mark=to_ISP4 gateway=104.104.104.254 check-gateway=ping add dst-address=0.0.0.0/0 gateway=101.101.101.254 distance=1 check-gateway=ping add dst-address=0.0.0.0/0 gateway=102.102.102.254 distance=2 check-gateway=ping add dst-address=0.0.0.0/0 gateway=103.103.103.254 distance=3 check-gateway=ping add dst-address=0.0.0.0/0 gateway=104.104.104.254 distance=4 check-gateway=ping /ip firewall nat add chain=srcnat out-interface=ISP1 action=masquerade add chain=srcnat out-interface=ISP2 action=masquerade add chain=srcnat out-interface=ISP3 action=masquerade add chain=srcnat out-interface=ISP4 action=masquerade`
Вот моя конфигурация PCC:
`/interface set name=LAN numbers=0 set name=ISP1 numbers=1 set name=ISP2 numbers=2 set name=ISP3 numbers=3 set name=ISP4 numbers=4 /ip address add address=192.168.1.1/24 network=192.168.1.0 broadcast=192.168.1.255 interface=LAN add address=101.101.101.1/24 network=101.101.101.0 broadcast=101.101.101.255 interface=ISP1 add address=102.102.102.1/24 network=102.102.102.0 broadcast=102.102.102.255 interface=ISP2 add address=103.103.103.1/24 network=103.103.103.0 broadcast=103.103.103.255 interface=ISP3 add address=104.104.104.1/24 network=104.104.104.0 broadcast=104.104.104.255 interface=ISP4 /ip firewall mangle add chain=input in-interface=ISP1 action=mark-connection new-connection-mark=ISP1_conn add chain=input in-interface=ISP2 action=mark-connection new-connection-mark=ISP2_conn add chain=input in-interface=ISP3 action=mark-connection new-connection-mark=ISP3_conn add chain=input in-interface=ISP4 action=mark-connection new-connection-mark=ISP4_conn add chain=output connection-mark=ISP1_conn action=mark-routing new-routing-mark=to_ISP1 add chain=output connection-mark=ISP2_conn action=mark-routing new-routing-mark=to_ISP2 add chain=output connection-mark=ISP3_conn action=mark-routing new-routing-mark=to_ISP3 add chain=output connection-mark=ISP4_conn action=mark-routing new-routing-mark=to_ISP4 add chain=prerouting in-interface=LAN dst-address=101.101.101.0/24 action=accept add chain=prerouting in-interface=LAN dst-address=102.102.102.0/24 action=accept add chain=prerouting in-interface=LAN dst-address=103.103.103.0/24 action=accept add chain=prerouting in-interface=LAN dst-address=104.104.104.0/24 action=accept add chain=prerouting dst-address-type=!LAN in-interface=LAN per-connection-classifier=both-addresses:4/0 action=mark-connection new-connection-mark=ISP1_conn passthrough=yes add chain=prerouting dst-address-type=!LAN in-interface=LAN per-connection-classifier=both-addresses:4/0 action=mark-connection new-connection-mark=ISP1_conn passthrough=yes add chain=prerouting dst-address-type=!LAN in-interface=LAN per-connection-classifier=both-addresses:4/0 action=mark-connection new-connection-mark=ISP1_conn passthrough=yes add chain=prerouting dst-address-type=!LAN in-interface=LAN per-connection-classifier=both-addresses:4/0 action=mark-connection new-connection-mark=ISP1_conn passthrough=yes add chain=prerouting dst-address-type=!LAN in-interface=LAN per-connection-classifier=both-addresses:4/1 action=mark-connection new-connection-mark=ISP2_conn passthrough=yes add chain=prerouting dst-address-type=!LAN in-interface=LAN per-connection-classifier=both-addresses:4/1 action=mark-connection new-connection-mark=ISP2_conn passthrough=yes add chain=prerouting dst-address-type=!LAN in-interface=LAN per-connection-classifier=both-addresses:4/1 action=mark-connection new-connection-mark=ISP2_conn passthrough=yes add chain=prerouting dst-address-type=!LAN in-interface=LAN per-connection-classifier=both-addresses:4/1 action=mark-connection new-connection-mark=ISP2_conn passthrough=yes add chain=prerouting dst-address-type=!LAN in-interface=LAN per-connection-classifier=both-addresses:4/2 action=mark-connection new-connection-mark=ISP3_conn passthrough=yes add chain=prerouting dst-address-type=!LAN in-interface=LAN per-connection-classifier=both-addresses:4/2 action=mark-connection new-connection-mark=ISP3_conn passthrough=yes add chain=prerouting dst-address-type=!LAN in-interface=LAN per-connection-classifier=both-addresses:4/3 action=mark-connection new-connection-mark=ISP4_conn passthrough=yes add chain=prerouting connection-mark=ISP1_conn in-interface=LAN action=mark-routing new-routing-mark=to_ISP1 add chain=prerouting connection-mark=ISP2_conn in-interface=LAN action=mark-routing new-routing-mark=to_ISP2 add chain=prerouting connection-mark=ISP3_conn in-interface=LAN action=mark-routing new-routing-mark=to_ISP3 add chain=prerouting connection-mark=ISP4_conn in-interface=LAN action=mark-routing new-routing-mark=to_ISP4 /ip route add dst-address=0.0.0.0/0 routing-mark=to_ISP1 gateway=101.101.101.254 check-gateway=ping add dst-address=0.0.0.0/0 routing-mark=to_ISP2 gateway=102.102.102.254 check-gateway=ping add dst-address=0.0.0.0/0 routing-mark=to_ISP3 gateway=103.103.103.254 check-gateway=ping add dst-address=0.0.0.0/0 routing-mark=to_ISP4 gateway=104.104.104.254 check-gateway=ping add dst-address=0.0.0.0/0 gateway=101.101.101.254 distance=1 check-gateway=ping add dst-address=0.0.0.0/0 gateway=102.102.102.254 distance=2 check-gateway=ping add dst-address=0.0.0.0/0 gateway=103.103.103.254 distance=3 check-gateway=ping add dst-address=0.0.0.0/0 gateway=104.104.104.254 distance=4 check-gateway=ping /ip firewall nat add chain=srcnat out-interface=ISP1 action=masquerade add chain=srcnat out-interface=ISP2 action=masquerade add chain=srcnat out-interface=ISP3 action=masquerade add chain=srcnat out-interface=ISP4 action=masquerade`
