a1dar:
! . :
1 RB750Gr3:
WAN 1.1.1.1
LAN 192.168.2.0/24
VPN IP 192.168.100.1
2 RB750r2:
WAN 2.2.2.2
LAN 192.168.25.0/24
VPN IP 192.168.200.2
VPN . 2 1 L2TP. 2 1.
IP. .
- . Speedtest , .
, - 1
2.
/interface l2tp-client
add allow=mschap2 connect-to=1.1.1.1 disabled=no name="L2TP to Vector" \
user=USER
/interface list
/routing table
add disabled=no fib name=vector-office-mark
/ip dns static
add address=192.168.25.1 comment=defconf name=router.lan
/ip firewall address-list
add address=192.168.25.3 list=vector-srvr-list
add address=10.0.0.0/8 disabled=yes list=local-area
add address=172.16.0.0/12 disabled=yes list=local-area
add address=192.168.0.0/16 list=local-area
/ip firewall mangle
add action=mark-routing chain=prerouting dst-address-list=!local-area \
new-routing-mark=vector-office-mark passthrough=no src-address-list=\
vector-srvr-list
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" \
ipsec-policy=out,none out-interface-list=WAN
add action=masquerade chain=srcnat comment="Vector server to office IP" \
out-interface="L2TP to Vector" routing-mark=vector-office-mark
/ip route
add disabled=no distance=1 dst-address=192.168.2.0/24 gateway=192.168.200.1 \
pref-src=192.168.25.1 routing-table=main scope=30 suppress-hw-offload=no \
target-scope=10
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
192.168.200.1 pref-src="" routing-table=vector-office-mark scope=30 \
suppress-hw-offload=no target-scope=10
http://forum.ru-board.com/topic.cgi?forum=8&topic=81779&glp#lt
