Administrace komentářů

Obraciam sa na Vas s prosbou o pomoc pri oprave skriptu na traffic shaping pre Asus WL500g Deluxe (Oleg firmware 1.9.2.7 CR6b). Cielom skriptu by malo byt obmedzenie download/upload pre jednotlive IP adresy nasledovne: 192.168.1.66 256kbit dowload/64kbit upload (pokial je linka volna full speed 512kbit/128kbit), 192.168.1.100 256kbit/64kbit garantovanych vzdy, vsetky ine IP 1kbit/1kbit z hladiska bezpecnosti. Internetove pripojenie ide do routra cez WAN, WAN interface IP: 192.168.1.55, subnet: 255.255.255.0, gateway: 192.168.1.1, DNS: 195.168.1.4. LAN interface IP: 192.168.1.2, subnet: 255.255.255.0, gateway: 192.168.1.2, DNS: 192.168.1.2 cez ktore komunikuju aj okolite pocitace. Pokusim sa popisat rozhrania: Telnet 192.168.1.2, prikaz nvram get wan_ifname vrati "vlan1", nvram get lan_ifname vrati "br0". Pokusil som sa podla predlohy z diskusneho fora openwrt.org napisat vlastny skript na traffic shaping. Vysledok je vsak taky, ze si porusim existujuce routovanie a znepristupnim aj samotny WL500g router :( Telnet 192.168.1.2 = ziadne spojenie... Prikladam vytvoreny skript a potesim sa kazdej odpovedi!

#!/bin/sh
DEV=br0
DEV2=vlan1

iptables -t mangle -F

#DOWNLOAD

tc qdisc add dev $DEV root handle 1: htb default 13
tc class add dev $DEV parent 1: classid 1:1 htb rate 512kbit burst 6k prio 0
tc class add dev $DEV parent 1:1 classid 1:10 htb rate 256kbit ceil 512kbit burst 6k prio 1
tc class add dev $DEV parent 1:1 classid 1:11 htb rate 256kbit burst 6k prio 1
tc class add dev $DEV parent 1:1 classid 1:13 htb rate 1kbit burst 6k prio 1
tc qdisc add dev $DEV parent 1:10 handle 10: sfq perturb 10
tc qdisc add dev $DEV parent 1:11 handle 11: sfq perturb 10
tc qdisc add dev $DEV parent 1:13 handle 13: sfq perturb 10
tc filter add dev $DEV parent 1:0 protocol ip prio 1 handle 0x10 fw flowid 1:10
tc filter add dev $DEV parent 1:0 protocol ip prio 1 handle 0x11 fw flowid 1:11
tc filter add dev $DEV parent 1:0 protocol ip prio 1 handle 0x13 fw flowid 1:13

#UPLOAD

tc qdisc add dev $DEV2 root handle 1: htb default 13
tc class add dev $DEV2 parent 1: classid 1:1 htb rate 128kbit burst 6k prio 0
tc class add dev $DEV2 parent 1:1 classid 1:10 htb rate 64kbit ceil 128kbit burst 6k prio 1
tc class add dev $DEV2 parent 1:1 classid 1:11 htb rate 64kbit burst 6k prio 1
tc class add dev $DEV2 parent 1:1 classid 1:13 htb rate 1kbit burst 6k prio 1
tc qdisc add dev $DEV2 parent 1:10 handle 10: sfq perturb 10
tc qdisc add dev $DEV2 parent 1:11 handle 11: sfq perturb 10
tc qdisc add dev $DEV2 parent 1:13 handle 13: sfq perturb 10
tc filter add dev $DEV2 parent 1:0 protocol ip prio 1 handle 0x10 fw flowid 1:10
tc filter add dev $DEV2 parent 1:0 protocol ip prio 1 handle 0x11 fw flowid 1:11
tc filter add dev $DEV2 parent 1:0 protocol ip prio 1 handle 0x13 fw flowid 1:13

#MARK

#BANDWIDTH full 512kbit/128kbit
### class 0x10 256/64 (full)
### class 0x11 256/64
### class 0x12 not use
### class 0x13 1/1 (harmless/security)

#SHAPING 192.168.1.66  256/64 (full)
######## 192.168.1.100 256/64
######## any 1/1 (security)


iptables -t mangle -A POSTROUTING -s 192.168.1.0/24 -d ! 192.168.1.0/24 -j MARK --set-mark 0x13
iptables -t mangle -A POSTROUTING -d 192.168.1.0/24 -s ! 192.168.1.0/24 -j MARK --set-mark 0x13
iptables -t mangle -A POSTROUTING -d 192.168.1.66 -s ! 192.168.1.0/24 -j MARK --set-mark 0x10
iptables -t mangle -A POSTROUTING -s 192.168.1.66 -d ! 192.168.1.0/24 -j MARK --set-mark 0x10
iptables -t mangle -A POSTROUTING -d 192.168.1.100 -s ! 192.168.1.0/24 -j MARK --set-mark 0x11
iptables -t mangle -A POSTROUTING -s 192.168.1.100 -d ! 192.168.1.0/24 -j MARK --set-mark 0x11