本帖最後由 mwpmo 於 2011-6-14 15:00 編輯
Some experience on routeros
i) Use bridge instead of rename the interface (If you WAN speed is less than 100Mbit/s)
e.g.
Bridge Member
WAN1 ether01
WAN2 ether02
DMZ ether03
LAN ether04, ether05
Reason:
Since a lot of rules / settings were based on name of bridge/interface, if you use the port directly and you want to reassign ports / add virtual port (like pppoe, vpn), you need to rewrite / add rules / settings.
But if you use bridge, all you need to do is add/remove members from the bridge.
2) use address list instead of IP address in NAT rules
if you used IP address in NAT rules and you want to change the address (like moving data center), you need to edit all those rules, but if you used address list, all you need to do is change the IP address assigned to the address list.
If you have 8 IPs and more than 300 NAT rules, you will know the difference. |