Podepnę się. Zainstalowałem ostatni obraz, oprócz tego mwan3. Skonfigurowałem jeden port lan jako wanb. Niestety nie działa mi teraz mwan3. Chciałbym mieć load balancing, tymczasem ciągle port wan jest wyłączony- aczkolwiek normalnie pobiera dane i adres, także i na wanb. Jak zrobię w diagnostyce ifup, to port wstaje na online, ale za chwilę pojawia się ifdown i port jest offline ponownie.
Oto kod:
mwan3 status
Interface status:
interface wan is offline and tracking is active
interface wan6 is offline and tracking is down
interface wanb is online and tracking is active
interface wanb6 is offline and tracking is down
Current ipv4 policies:
balanced:
wanb (100%)
wan_only:
unreachable
wan_wanb:
wanb (100%)
wanb_only:
wanb (100%)
wanb_wan:
wanb (100%)
Current ipv6 policies:
balanced:
unreachable
wan_only:
unreachable
wan_wanb:
unreachable
wanb_only:
unreachable
wanb_wan:
unreachable
Directly connected ipv4 networks:
192.168.100.223
224.0.0.0/3
192.168.9.255
192.168.11.0/24
192.168.9.0/24
192.168.9.67
192.168.11.0
192.168.11.1
192.168.100.0/24
192.168.9.0
127.0.0.0
127.0.0.1
127.0.0.0/8
192.168.100.0
127.255.255.255
192.168.11.255
192.168.100.255
Directly connected ipv6 networks:
fdc7:8317:43be::/64
fe80::/64
fdc7:8317:43be:4::/62
Active ipv4 user rules:
2069 108K S https tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport sports 0:65535 multiport dports 443
4188 415K - balanced all -- * * 0.0.0.0/0 0.0.0.0/0
Active ipv6 user rules:
0 0 S https tcp * * ::/0 ::/0 multiport sports 0:65535 multiport dports 443
742 143K - balanced all * * ::/0 ::/0
uci show network
network.loopback=interface
network.loopback.ifname='lo'
network.loopback.proto='static'
network.loopback.ipaddr='127.0.0.1'
network.loopback.netmask='255.0.0.0'
network.globals=globals
network.globals.ula_prefix='fdc7:8317:43be::/48'
network.lan=interface
network.lan.type='bridge'
network.lan.ifname='eth1.1'
network.lan.proto='static'
network.lan.netmask='255.255.255.0'
network.lan.ip6assign='60'
network.lan.dns='1.1.1.1' '1.0.0.1'
network.lan.ipaddr='192.168.11.1'
network.lan_eth1_1_dev=device
network.lan_eth1_1_dev.name='eth1.1'
network.lan_eth1_1_dev.macaddr='60:31:97:33:a5:62'
network.wan=interface
network.wan.ifname='eth0.2'
network.wan.proto='dhcp'
network.wan.metric='1'
network.wan_eth0_2_dev=device
network.wan_eth0_2_dev.name='eth0.2'
network.wan_eth0_2_dev.macaddr='60:31:97:33:a5:63'
network.wan6=interface
network.wan6.ifname='eth0.2'
network.wan6.proto='dhcpv6'
network.@switch[0]=switch
network.@switch[0].name='switch0'
network.@switch[0].reset='1'
network.@switch[0].enable_vlan='1'
network.@switch_vlan[0]=switch_vlan
network.@switch_vlan[0].device='switch0'
network.@switch_vlan[0].vlan='1'
network.@switch_vlan[0].vid='1'
network.@switch_vlan[0].ports='6t 1 2 3'
network.@switch_vlan[1]=switch_vlan
network.@switch_vlan[1].device='switch0'
network.@switch_vlan[1].vlan='2'
network.@switch_vlan[1].ports='0t 5'
network.@switch_vlan[1].vid='2'
network.@switch_vlan[2]=switch_vlan
network.@switch_vlan[2].device='switch0'
network.@switch_vlan[2].vlan='3'
network.@switch_vlan[2].ports='0t 4'
network.@switch_vlan[2].vid='3'
network.wanb=interface
network.wanb.ifname='eth0.3'
network.wanb.proto='dhcp'
network.wanb.metric='2'
uci show mwan3
uci show mwan3
mwan3.globals=globals
mwan3.globals.mmx_mask='0x3F00'
mwan3.globals.rtmon_interval='5'
mwan3.wan=interface
mwan3.wan.family='ipv4'
mwan3.wan.reliability='2'
mwan3.wan.count='1'
mwan3.wan.timeout='2'
mwan3.wan.interval='5'
mwan3.wan.down='3'
mwan3.wan.up='8'
mwan3.wan.initial_state='online'
mwan3.wan.track_ip='1.1.1.1'
mwan3.wan.track_method='ping'
mwan3.wan.size='56'
mwan3.wan.max_ttl='60'
mwan3.wan.check_quality='0'
mwan3.wan.failure_interval='5'
mwan3.wan.recovery_interval='5'
mwan3.wan.enabled='1'
mwan3.wan6=interface
mwan3.wan6.enabled='0'
mwan3.wan6.track_ip='2001:4860:4860::8844' '2001:4860:4860::8888' '2620:0:ccd::2' '2620:0:ccc::2'
mwan3.wan6.family='ipv6'
mwan3.wan6.reliability='2'
mwan3.wan6.count='1'
mwan3.wan6.timeout='2'
mwan3.wan6.interval='5'
mwan3.wan6.down='3'
mwan3.wan6.up='8'
mwan3.wanb=interface
mwan3.wanb.family='ipv4'
mwan3.wanb.reliability='1'
mwan3.wanb.count='1'
mwan3.wanb.timeout='2'
mwan3.wanb.interval='5'
mwan3.wanb.down='3'
mwan3.wanb.up='8'
mwan3.wanb.enabled='1'
mwan3.wanb.initial_state='online'
mwan3.wanb.track_method='ping'
mwan3.wanb.size='56'
mwan3.wanb.max_ttl='60'
mwan3.wanb.check_quality='0'
mwan3.wanb.failure_interval='5'
mwan3.wanb.recovery_interval='5'
mwan3.wanb.track_ip='1.1.1.1' '1.0.0.1'
mwan3.wanb6=interface
mwan3.wanb6.enabled='0'
mwan3.wanb6.track_ip='2001:4860:4860::8844' '2001:4860:4860::8888' '2620:0:ccd::2' '2620:0:ccc::2'
mwan3.wanb6.family='ipv6'
mwan3.wanb6.reliability='1'
mwan3.wanb6.count='1'
mwan3.wanb6.timeout='2'
mwan3.wanb6.interval='5'
mwan3.wanb6.down='3'
mwan3.wanb6.up='8'
mwan3.wan_m1_w3=member
mwan3.wan_m1_w3.interface='wan'
mwan3.wan_m1_w3.metric='1'
mwan3.wan_m1_w3.weight='3'
mwan3.wan_m2_w3=member
mwan3.wan_m2_w3.interface='wan'
mwan3.wan_m2_w3.metric='2'
mwan3.wan_m2_w3.weight='3'
mwan3.wanb_m1_w2=member
mwan3.wanb_m1_w2.interface='wanb'
mwan3.wanb_m1_w2.metric='1'
mwan3.wanb_m1_w2.weight='2'
mwan3.wanb_m2_w2=member
mwan3.wanb_m2_w2.interface='wanb'
mwan3.wanb_m2_w2.metric='2'
mwan3.wanb_m2_w2.weight='2'
mwan3.wan6_m1_w3=member
mwan3.wan6_m1_w3.interface='wan6'
mwan3.wan6_m1_w3.metric='1'
mwan3.wan6_m1_w3.weight='3'
mwan3.wan6_m2_w3=member
mwan3.wan6_m2_w3.interface='wan6'
mwan3.wan6_m2_w3.metric='2'
mwan3.wan6_m2_w3.weight='3'
mwan3.wanb6_m1_w2=member
mwan3.wanb6_m1_w2.interface='wanb6'
mwan3.wanb6_m1_w2.metric='1'
mwan3.wanb6_m1_w2.weight='2'
mwan3.wanb6_m2_w2=member
mwan3.wanb6_m2_w2.interface='wanb6'
mwan3.wanb6_m2_w2.metric='2'
mwan3.wanb6_m2_w2.weight='2'
mwan3.wan_only=policy
mwan3.wan_only.use_member='wan_m1_w3' 'wan6_m1_w3'
mwan3.wanb_only=policy
mwan3.wanb_only.use_member='wanb_m1_w2' 'wanb6_m1_w2'
mwan3.balanced=policy
mwan3.balanced.use_member='wan_m1_w3' 'wanb_m1_w2' 'wan6_m1_w3' 'wanb6_m1_w2'
mwan3.wan_wanb=policy
mwan3.wan_wanb.use_member='wan_m1_w3' 'wanb_m2_w2' 'wan6_m1_w3' 'wanb6_m2_w2'
mwan3.wanb_wan=policy
mwan3.wanb_wan.use_member='wan_m2_w3' 'wanb_m1_w2' 'wan6_m2_w3' 'wanb6_m1_w2'
mwan3.https=rule
mwan3.https.sticky='1'
mwan3.https.dest_port='443'
mwan3.https.proto='tcp'
mwan3.https.use_policy='balanced'
mwan3.default_rule=rule
mwan3.default_rule.dest_ip='0.0.0.0/0'
mwan3.default_rule.use_policy='balanced'
Software-Version
-------------------------------------------------
OpenWrt - OpenWrt 19.07-SNAPSHOT r10949-c56ed72d2b
LuCI - git-20.057.55219-13dd17f
Output of "ip a show"
-------------------------------------------------
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
link/ether be:38:1f:b2:cd:1f brd ff:ff:ff:ff:ff:ff
inet6 fe80::bc38:1fff:feb2:cd1f/64 scope link
valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
link/ether 96:05:d5:b3:1c:27 brd ff:ff:ff:ff:ff:ff
inet6 fe80::9405:d5ff:feb3:1c27/64 scope link
valid_lft forever preferred_lft forever
7: br-lan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 60:31:97:33:a5:62 brd ff:ff:ff:ff:ff:ff
inet 192.168.11.1/24 brd 192.168.11.255 scope global br-lan
valid_lft forever preferred_lft forever
inet6 fdc7:8317:43be::1/60 scope global noprefixroute
valid_lft forever preferred_lft forever
inet6 fe80::6231:97ff:fe33:a562/64 scope link
valid_lft forever preferred_lft forever
8: eth1.1@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-lan state UP group default qlen 1000
link/ether 60:31:97:33:a5:62 brd ff:ff:ff:ff:ff:ff
9: eth0.2@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 60:31:97:33:a5:63 brd ff:ff:ff:ff:ff:ff
inet 192.168.100.223/24 brd 192.168.100.255 scope global eth0.2
valid_lft forever preferred_lft forever
inet6 fe80::6231:97ff:fe33:a563/64 scope link
valid_lft forever preferred_lft forever
10: eth0.3@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether be:38:1f:b2:cd:1f brd ff:ff:ff:ff:ff:ff
inet 192.168.9.67/24 brd 192.168.9.255 scope global eth0.3
valid_lft forever preferred_lft forever
inet6 fe80::bc38:1fff:feb2:cd1f/64 scope link
valid_lft forever preferred_lft forever
11: wlan1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-lan state UP group default qlen 1000
link/ether 60:31:97:33:a5:60 brd ff:ff:ff:ff:ff:ff
inet6 fe80::6231:97ff:fe33:a560/64 scope link
valid_lft forever preferred_lft forever
12: wlan0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-lan state UP group default qlen 1000
link/ether 60:31:97:33:a5:61 brd ff:ff:ff:ff:ff:ff
inet6 fe80::6231:97ff:fe33:a561/64 scope link
valid_lft forever preferred_lft forever
13: wlan1-1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-lan state UP group default qlen 1000
link/ether 62:31:97:33:a5:60 brd ff:ff:ff:ff:ff:ff
inet6 fe80::6031:97ff:fe33:a560/64 scope link
valid_lft forever preferred_lft forever
Output of "ip route show"
-------------------------------------------------
default via 192.168.100.1 dev eth0.2 proto static src 192.168.100.223 metric 1
default via 192.168.9.1 dev eth0.3 proto static src 192.168.9.67 metric 2
192.168.9.0/24 dev eth0.3 proto static scope link metric 2
192.168.11.0/24 dev br-lan proto kernel scope link src 192.168.11.1
192.168.100.0/24 dev eth0.2 proto static scope link metric 1
Output of "ip rule show"
-------------------------------------------------
0: from all lookup local
1001: from all iif eth0.2 lookup 1
1003: from all iif eth0.3 lookup 3
2001: from all fwmark 0x100/0x3f00 lookup 1
2003: from all fwmark 0x300/0x3f00 lookup 3
2061: from all fwmark 0x3d00/0x3f00 blackhole
2062: from all fwmark 0x3e00/0x3f00 unreachable
32766: from all lookup main
32767: from all lookup default
Output of "ip route list table 1-250"
-------------------------------------------------
Table 1: default via 192.168.100.1 dev eth0.2 metric 1
192.168.9.0/24 dev eth0.3 proto static scope link metric 2
192.168.11.0/24 dev br-lan proto kernel scope link src 192.168.11.1
192.168.100.0/24 dev eth0.2 proto static scope link metric 1
Table 3: default via 192.168.9.1 dev eth0.3 metric 2
192.168.9.0/24 dev eth0.3 proto static scope link metric 2
192.168.11.0/24 dev br-lan proto kernel scope link src 192.168.11.1
192.168.100.0/24 dev eth0.2 proto static scope link metric 1
Output of "iptables -L -t mangle -v -n"
-------------------------------------------------
Chain PREROUTING (policy ACCEPT 2175K packets, 1796M bytes)
pkts bytes target prot opt in out source destination
8063K 8325M mwan3_hook all -- * * 0.0.0.0/0 0.0.0.0/0
Chain INPUT (policy ACCEPT 23235 packets, 2904K bytes)
pkts bytes target prot opt in out source destination
Chain FORWARD (policy ACCEPT 2151K packets, 1793M bytes)
pkts bytes target prot opt in out source destination
0 0 TCPMSS tcp -- * eth0.2 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 /* !fw3: Zone wan MTU fixing */ TCPMSS clamp to PMTU
4706 239K TCPMSS tcp -- * eth0.3 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 /* !fw3: Zone wan MTU fixing */ TCPMSS clamp to PMTU
Chain OUTPUT (policy ACCEPT 16531 packets, 2323K bytes)
pkts bytes target prot opt in out source destination
33152 4301K mwan3_hook all -- * * 0.0.0.0/0 0.0.0.0/0
Chain POSTROUTING (policy ACCEPT 2167K packets, 1795M bytes)
pkts bytes target prot opt in out source destination
Chain mwan3_connected (2 references)
pkts bytes target prot opt in out source destination
2727K 7737M MARK all -- * * 0.0.0.0/0 0.0.0.0/0 match-set mwan3_connected dst MARK or 0x3f00
Chain mwan3_hook (2 references)
pkts bytes target prot opt in out source destination
8096K 8330M CONNMARK all -- * * 0.0.0.0/0 0.0.0.0/0 CONNMARK restore mask 0x3f00
37036 5263K mwan3_ifaces_in all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00
36763 3798K mwan3_connected all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00
25551 2513K mwan3_rules all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00
8096K 8330M CONNMARK all -- * * 0.0.0.0/0 0.0.0.0/0 CONNMARK save mask 0x3f00
8026K 8319M mwan3_connected all -- * * 0.0.0.0/0 0.0.0.0/0 mark match ! 0x3f00/0x3f00
Chain mwan3_iface_in_wan (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- eth0.2 * 0.0.0.0/0 0.0.0.0/0 match-set mwan3_connected src mark match 0x0/0x3f00 /* default */ MARK or 0x3f00
10 1194 MARK all -- eth0.2 * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00 /* wan */ MARK xset 0x100/0x3f00
Chain mwan3_iface_in_wanb (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- eth0.3 * 0.0.0.0/0 0.0.0.0/0 match-set mwan3_connected src mark match 0x0/0x3f00 /* default */ MARK or 0x3f00
262 1464K MARK all -- eth0.3 * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00 /* wanb */ MARK xset 0x300/0x3f00
Chain mwan3_ifaces_in (1 references)
pkts bytes target prot opt in out source destination
37036 5263K mwan3_iface_in_wan all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00
10769 2425K mwan3_iface_in_wanb all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00
Chain mwan3_policy_balanced (2 references)
pkts bytes target prot opt in out source destination
4944 494K MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00 /* wanb 2 2 */ MARK xset 0x300/0x3f00
Chain mwan3_policy_wan_only (0 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- * eth0.2 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00 /* out wan eth0.2 */ MARK or 0x3f00
0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00 /* unreachable */ MARK xset 0x3e00/0x3f00
Chain mwan3_policy_wan_wanb (0 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00 /* wanb 2 2 */ MARK xset 0x300/0x3f00
Chain mwan3_policy_wanb_only (0 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00 /* wanb 2 2 */ MARK xset 0x300/0x3f00
Chain mwan3_policy_wanb_wan (0 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00 /* wanb 2 2 */ MARK xset 0x300/0x3f00
Chain mwan3_rule_https (1 references)
pkts bytes target prot opt in out source destination
2310 121K MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00 MARK xset 0x300/0x3f00
6 572 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x300/0x3f00 ! match-set mwan3_sticky_https src,src MARK and 0xffffc0ff
6 572 mwan3_policy_balanced all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00
2310 121K SET all -- * * 0.0.0.0/0 0.0.0.0/0 mark match ! 0xfc00/0xfc00 del-set mwan3_sticky_https src,src
2310 121K SET all -- * * 0.0.0.0/0 0.0.0.0/0 mark match ! 0xfc00/0xfc00 add-set mwan3_sticky_https src,src
Chain mwan3_rules (1 references)
pkts bytes target prot opt in out source destination
2310 121K mwan3_rule_https tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport sports 0:65535 multiport dports 443 mark match 0x0/0x3f00 /* https */
4933 493K mwan3_policy_balanced all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00 /* default_rule */