PCC with 2xWAN + 3xLAN
Posted: Fri Oct 21, 2011 11:19 am
Helo, there are a lot of description to configure PCC but all instructions are with multiple WAN (ISP) and single LAN. I have different scenario using 2x ports for ISP (ADSL and Cable) and 3x lan ports for local network belong to same network running DHCP server on all three. Here are the settings:
Interfaces:
1. wan1 - dhcp client (ADSL ISP doesn't allow to use bridge mode, receiving address is from pool 192.168.1.2-192.168.1.5)
2. wan2 - dhcp client (Cable model)
3. lan1 - 192.168.2.1/24 (DHCP Server)
4. lan2 - 192.168.2.1/24 (DHCP Server)
5. lan3 - 192.168.2.1/24 (DHCP Server)
If I follow the instruction (2xWAN + 1xLAN) and everything is clear until these lines for creating mangle rules:
Should I multiple lines above for every lan interface I have? Something like this (read the comments):
Or I missed the idea?
Interfaces:
1. wan1 - dhcp client (ADSL ISP doesn't allow to use bridge mode, receiving address is from pool 192.168.1.2-192.168.1.5)
2. wan2 - dhcp client (Cable model)
3. lan1 - 192.168.2.1/24 (DHCP Server)
4. lan2 - 192.168.2.1/24 (DHCP Server)
5. lan3 - 192.168.2.1/24 (DHCP Server)
If I follow the instruction (2xWAN + 1xLAN) and everything is clear until these lines for creating mangle rules:
Code: Select all
add action=mark-connection chain=prerouting comment="Mark established traffic that isn't local with PCC mark rand (2 possibilities) - option 1" connection-state=\
established disabled=no dst-address-type=!local in-interface=lan new-connection-mark=wan1_pcc_conn passthrough=yes per-connection-classifier=\
both-addresses:2/0
add action=mark-connection chain=prerouting comment="Mark established traffic that isn't local with PCC mark rand (2 possibilities) - option 2" connection-state=\
established disabled=no dst-address-type=!local in-interface=lan new-connection-mark=wan2_pcc_conn passthrough=yes per-connection-classifier=\
both-addresses:2/1
Code: Select all
add action=mark-connection chain=prerouting comment="Mark established traffic that isn't local with PCC mark rand (2 possibilities for lan1) - option 1" connection-state=\
established disabled=no dst-address-type=!local in-interface=lan1 new-connection-mark=wan1_pcc_conn passthrough=yes per-connection-classifier=\
both-addresses:2/0
add action=mark-connection chain=prerouting comment="Mark established traffic that isn't local with PCC mark rand (2 possibilities for lan1) - option 2" connection-state=\
established disabled=no dst-address-type=!local in-interface=lan1 new-connection-mark=wan2_pcc_conn passthrough=yes per-connection-classifier=\
both-addresses:2/1
add action=mark-connection chain=prerouting comment="Mark established traffic that isn't local with PCC mark rand (2 possibilities for lan2) - option 1" connection-state=\
established disabled=no dst-address-type=!local in-interface=lan2 new-connection-mark=wan1_pcc_conn passthrough=yes per-connection-classifier=\
both-addresses:2/0
add action=mark-connection chain=prerouting comment="Mark established traffic that isn't local with PCC mark rand (2 possibilities for lan2) - option 2" connection-state=\
established disabled=no dst-address-type=!local in-interface=lan2 new-connection-mark=wan2_pcc_conn passthrough=yes per-connection-classifier=\
both-addresses:2/1
add action=mark-connection chain=prerouting comment="Mark established traffic that isn't local with PCC mark rand (2 possibilities for lan3) - option 1" connection-state=\
established disabled=no dst-address-type=!local in-interface=lan3 new-connection-mark=wan1_pcc_conn passthrough=yes per-connection-classifier=\
both-addresses:2/0
add action=mark-connection chain=prerouting comment="Mark established traffic that isn't local with PCC mark rand (2 possibilities for lan3) - option 2" connection-state=\
established disabled=no dst-address-type=!local in-interface=lan3 new-connection-mark=wan2_pcc_conn passthrough=yes per-connection-classifier=\
both-addresses:2/1