26
« Dernier message par petoulachi le Aujourd'hui à 09:12:03 »
En tout ca il y a un truc étrange, je n'arrive pas à faire passer la requete DHCP discover dans le mangle, le compteur ne s'incrémente jamais !
Je dois avoir trop le nez dedans, pourtant la conf est plus que minimaliste, si vous voyez quelque chose :
/interface bridge
add name=br-lan
/interface ethernet
set [ find default-name=sfp-sfpplus1 ] comment=ONT
set [ find default-name=sfp-sfpplus3 ] comment=LAN
/interface vlan
add comment="Internet ONT" interface=sfp-sfpplus1 loop-protect-disable-time=\
0s loop-protect-send-interval=1s name=vlan832-internet vlan-id=832
/interface bonding
add lacp-rate=1sec mode=802.3ad name=bond-crs slaves=\
sfp-sfpplus3,sfp-sfpplus4 transmit-hash-policy=layer-2-and-3
/ip dhcp-client option
/interface bridge port
add bridge=br-lan comment=defconf interface=ether13
add bridge=br-lan interface=bond-crs
/ip address
add address=192.168.88.8/24 comment=br-lan interface=br-lan network=\
192.168.88.0
add address=192.168.11.2/24 comment="IP ONT" interface=sfp-sfpplus1 network=\
192.168.11.0
/ip dhcp-client
add comment=dhcp-orange dhcp-options=\
clientid,authsend,userclass-lb7,vendor-class-identifier disabled=yes \
interface=vlan832-internet name=dhcp-orange script="{ /ip/dhcp-client/opti\
on/set [find where code=\"90\"] value=\"0x00\" ; /import WIP-MTK-generateO\
rangeAuth.rsc; }" use-peer-dns=no
add comment="Orange IPv4" dhcp-options=\
clientid,authsend,userclass-lb7,vendor-class-identifier disabled=yes \
dscp=48 interface=vlan832-internet name=vlan832-internet use-peer-dns=no \
use-peer-ntp=no vlan-priority=6
/ip firewall mangle
add action=jump chain=output comment="DHCPv4 - Jump to output4-prio6_dscp48" \
dst-port=67 jump-target=output4-prio6_dscp48 out-interface=\
vlan832-internet protocol=udp src-port=68
add action=set-priority chain=output4-prio6_dscp48 comment="Set PCP to 6" \
new-priority=6
add action=change-dscp chain=output4-prio6_dscp48 comment=\
"Set DSCP to 48 (CS6)" new-dscp=48
add action=accept chain=output4-prio6_dscp48 comment=\
"Default accept (output4-prio6_dscp48)"
/system routerboard settings
set enter-setup-on=delete-key
/tool sniffer
set file-name=wan-pcap filter-interface=sfp-sfpplus1