Привет, народ! У меня возникла ситуация: я передаю UDP-стрим multicast с ether3 на RB750 через кучу всего к двум выходным стримам на RB250. Сейчас воспроизведение дергается и прерывается. Хочу пропустить его через чип коммутатора на RB2011, чтобы снизить задержку и исключить эту причину. Набросал быструю схему, кое-что не хватает, но основная информация там есть. Конфиги следующие: RB2011 # 09.12.2013 11:59:16 от RouterOS 6.6
# software id = EWCP-QRB1
#
/interface bridge
add l2mtu=1594 name=bridge1
/interface ethernet
set [ find default-name=ether1 ] comment="WAN"
set [ find default-name=ether2 ] comment=""
set [ find default-name=ether3 ] comment="Multicast Out"
set [ find default-name=ether4 ] comment=""
set [ find default-name=ether5 ] comment="(TRUNK to RB750)"
set [ find default-name=ether6 ] comment=""
set [ find default-name=ether7 ] master-port=ether6
set [ find default-name=ether8 ] master-port=ether6
set [ find default-name=ether9 ] master-port=ether6
set [ find default-name=ether10 ] comment="" master-port=ether6
set [ find default-name=sfp1 ] speed=100Mbps
/interface vlan
add interface=ether5 l2mtu=1594 name=vlan1 vlan-id=1
add interface=ether5 l2mtu=1594 name=vlan9 vlan-id=9
add interface=ether3 l2mtu=1594 name=vlan90.3 vlan-id=90
add interface=ether5 l2mtu=1594 name=vlan90.5 vlan-id=90
/ip pool
add name=dhcp_pool1 ranges=192.168.7.100-192.168.7.199
add name=dhcp_pool2 ranges=192.168.11.100-192.168.11.200
add name=dhcp_pool3 ranges=192.168.15.100-192.168.15.200
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=ether6 name=7_dhcp
add address-pool=dhcp_pool2 disabled=no interface=ether4 name=11_dhcp
add address-pool=dhcp_pool3 disabled=no interface=ether2 name=15_dhcp
/interface bridge port
add bridge=bridge1 interface=vlan90.3
add bridge=bridge1 interface=vlan90.5
/ip address
add address=192.168.9.254/24 comment="(VLAN 9)" interface=vlan1 network=192.168.9.0
add address=192.168.7.254/24 interface=ether6 network=192.168.7.0
add address=xxx.xxx.xxx.xxx/24 interface=ether1 network=xxx.xxx.xxx.xxx
add address=192.168.11.254/24 interface=ether4 network=192.168.11.0
add address=192.168.15.254/24 interface=ether2 network=192.168.15.0
add address=192.168.90.254/24 interface=vlan90.5 network=192.168.90.0
/ip dhcp-server network
add address=192.168.7.0/24 gateway=192.168.7.254
add address=192.168.11.0/24 gateway=192.168.11.254
add address=192.168.15.0/24 gateway=192.168.15.254
/ip firewall filter
add action=drop chain=input comment="Drop invalid connections" connection-state=invalid
add chain=input comment="Allow est. connections" connection-state=established
add chain=input src-address=xxx.xxx.xxx.xxx/24
add chain=input src-address=xxx.xxx.xxx.xxx/24
add chain=input src-address=xxx.xxx.xxx.xxx/24
add chain=input comment="Allow related connections" connection-state=related
add chain=input comment="Allow UDP" protocol=udp
add chain=input comment="Allow ICMP" protocol=icmp
add chain=input comment=VPN disabled=yes dst-port=1723 protocol=tcp
add chain=input comment="Allow connection to router from local network" in-interface=!ether1
add action=log chain=input comment="Log Dropped Packets"
add action=drop chain=input comment="Drop everything else"
add action=jump chain=forward in-interface=ether1 jump-target=customer
add action=drop chain=customer comment="Drop invalid connection packets" connection-state=invalid
add chain=customer comment="Allow established connections" connection-state=established
add chain=customer comment="Allow related connections" connection-state=related
add action=log chain=customer comment="Log dropped connections" log-prefix=customer_drop
add action=drop chain=customer comment="Drop everything else"
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1 to-addresses=0.0.0.0
/ip proxy
set parent-proxy=0.0.0.0
/ip route
add distance=1 gateway=xxx.xxx.xxx.xxx
/lcd
set backlight-timeout=never
/lcd interface
set sfp1 interface=sfp1
set ether1 interface=ether1
set ether2 interface=ether2
set ether3 interface=ether3
set ether4 interface=ether4
set ether5 interface=ether5
set ether6 interface=ether6
set ether7 interface=ether7
set ether8 interface=ether8
set ether9 interface=ether9
set ether10 interface=ether10
/queue interface
set sfp1 interface=ether1
set ether3 default-vlan-id=1 vlan-header=add-if-missing vlan-mode=fallback
set ether4 default-vlan-id=90 vlan-header=always-strip vlan-mode=secure
set ether5 default-vlan-id=90 vlan-header=add-if-missing vlan-mode=secure
set ether1 default-vlan-id=1 vlan-header=always-strip
set ether2 default-vlan-id=90 vlan-header=always-strip vlan-mode=secure
I added ether5 as a master for ether3 and set up the vlan table, but everything failed miserably and being a production network, people starting complaining. Just looking for some guidance so I can plan to have another shot out of hours. Cheers, Darryn.
# software id = EWCP-QRB1
#
/interface bridge
add l2mtu=1594 name=bridge1
/interface ethernet
set [ find default-name=ether1 ] comment="WAN"
set [ find default-name=ether2 ] comment=""
set [ find default-name=ether3 ] comment="Multicast Out"
set [ find default-name=ether4 ] comment=""
set [ find default-name=ether5 ] comment="(TRUNK to RB750)"
set [ find default-name=ether6 ] comment=""
set [ find default-name=ether7 ] master-port=ether6
set [ find default-name=ether8 ] master-port=ether6
set [ find default-name=ether9 ] master-port=ether6
set [ find default-name=ether10 ] comment="" master-port=ether6
set [ find default-name=sfp1 ] speed=100Mbps
/interface vlan
add interface=ether5 l2mtu=1594 name=vlan1 vlan-id=1
add interface=ether5 l2mtu=1594 name=vlan9 vlan-id=9
add interface=ether3 l2mtu=1594 name=vlan90.3 vlan-id=90
add interface=ether5 l2mtu=1594 name=vlan90.5 vlan-id=90
/ip pool
add name=dhcp_pool1 ranges=192.168.7.100-192.168.7.199
add name=dhcp_pool2 ranges=192.168.11.100-192.168.11.200
add name=dhcp_pool3 ranges=192.168.15.100-192.168.15.200
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=ether6 name=7_dhcp
add address-pool=dhcp_pool2 disabled=no interface=ether4 name=11_dhcp
add address-pool=dhcp_pool3 disabled=no interface=ether2 name=15_dhcp
/interface bridge port
add bridge=bridge1 interface=vlan90.3
add bridge=bridge1 interface=vlan90.5
/ip address
add address=192.168.9.254/24 comment="(VLAN 9)" interface=vlan1 network=192.168.9.0
add address=192.168.7.254/24 interface=ether6 network=192.168.7.0
add address=xxx.xxx.xxx.xxx/24 interface=ether1 network=xxx.xxx.xxx.xxx
add address=192.168.11.254/24 interface=ether4 network=192.168.11.0
add address=192.168.15.254/24 interface=ether2 network=192.168.15.0
add address=192.168.90.254/24 interface=vlan90.5 network=192.168.90.0
/ip dhcp-server network
add address=192.168.7.0/24 gateway=192.168.7.254
add address=192.168.11.0/24 gateway=192.168.11.254
add address=192.168.15.0/24 gateway=192.168.15.254
/ip firewall filter
add action=drop chain=input comment="Drop invalid connections" connection-state=invalid
add chain=input comment="Allow est. connections" connection-state=established
add chain=input src-address=xxx.xxx.xxx.xxx/24
add chain=input src-address=xxx.xxx.xxx.xxx/24
add chain=input src-address=xxx.xxx.xxx.xxx/24
add chain=input comment="Allow related connections" connection-state=related
add chain=input comment="Allow UDP" protocol=udp
add chain=input comment="Allow ICMP" protocol=icmp
add chain=input comment=VPN disabled=yes dst-port=1723 protocol=tcp
add chain=input comment="Allow connection to router from local network" in-interface=!ether1
add action=log chain=input comment="Log Dropped Packets"
add action=drop chain=input comment="Drop everything else"
add action=jump chain=forward in-interface=ether1 jump-target=customer
add action=drop chain=customer comment="Drop invalid connection packets" connection-state=invalid
add chain=customer comment="Allow established connections" connection-state=established
add chain=customer comment="Allow related connections" connection-state=related
add action=log chain=customer comment="Log dropped connections" log-prefix=customer_drop
add action=drop chain=customer comment="Drop everything else"
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1 to-addresses=0.0.0.0
/ip proxy
set parent-proxy=0.0.0.0
/ip route
add distance=1 gateway=xxx.xxx.xxx.xxx
/lcd
set backlight-timeout=never
/lcd interface
set sfp1 interface=sfp1
set ether1 interface=ether1
set ether2 interface=ether2
set ether3 interface=ether3
set ether4 interface=ether4
set ether5 interface=ether5
set ether6 interface=ether6
set ether7 interface=ether7
set ether8 interface=ether8
set ether9 interface=ether9
set ether10 interface=ether10
/queue interface
set sfp1 interface=ether1
set ether3 default-vlan-id=1 vlan-header=add-if-missing vlan-mode=fallback
set ether4 default-vlan-id=90 vlan-header=always-strip vlan-mode=secure
set ether5 default-vlan-id=90 vlan-header=add-if-missing vlan-mode=secure
set ether1 default-vlan-id=1 vlan-header=always-strip
set ether2 default-vlan-id=90 vlan-header=always-strip vlan-mode=secure
I added ether5 as a master for ether3 and set up the vlan table, but everything failed miserably and being a production network, people starting complaining. Just looking for some guidance so I can plan to have another shot out of hours. Cheers, Darryn.
