show load-balance watchdog //pings 为ping的次数,fails 为失败次数
ubnt@EdgeRouter-X-5-Port:~$ show load-balance watchdog
Group G
eth1
status: Waiting on recovery (0/10)
pings: 99
fails: 99
run fails: 0/10
route drops: 0
ping gateway: 223.5.5.5 - DOWN
pppoe0
status: OK
pings: 98
fails: 0
run fails: 0/10
route drops: 0
ping gateway: 223.5.5.5 - REACHABLE
show load-balance config //这里pppoe0为wan1 eth1为wan2,eth1配置failover : true
ubnt@EdgeRouter-X-5-Port:~$ show load-balance config
Group G
Balance Local : true
Lock Local DNS : false
Conntrack Flush: true
Sticky Bits : 0x00000000
eth1
table : 201
route-type : default
gateway :
cfg_weight : 50
failover : true
fo_priority: 60
pppoe0
table : 202
route-type : default
gateway : pppoe0
cfg_weight : 50
failover : false
fo_priority: 100
show load-balance status //查看状态
ubnt@EdgeRouter-X-5-Port:~$ show load-balance status
Group G
Balance Local : true
Lock Local DNS : false
Conntrack Flush: true
Sticky Bits : 0x00000000
interface : eth1
reachable : false
status : inactive
gateway :
route table : 201
weight : 0%
fo_priority : 60
flows
WAN Out : 0
WAN In : 0
Local ICMP: 0
Local DNS : 0
Local Data: 0
interface : pppoe0
reachable : true
status : active
gateway : pppoe0
route table : 202
weight : 100%
fo_priority : 100
flows
WAN Out : 2303
WAN In : 2
Local ICMP: 146
Local DNS : 0
Local Data: 148
这里是配置例子,可以是用命令行配置 也可以使用web页面的 config tree
load-balance {
group G {
exclude-local-dns disable
flush-on-active enable
gateway-update-interval 20
interface eth1 {
failover-only
route-test {
count {
failure 10
success 10
}
initial-delay 10
interval 10
type {
ping {
target 223.5.5.5
}
}
}
}
interface pppoe0 {
route-test {
count {
failure 10
success 10
}
initial-delay 10
interval 10
type {
ping {
target 223.5.5.5
}
}
}
}
lb-local enable
lb-local-metric-change disable
}
}
查看会话表
show conntrack table ipv4 //查看全部会话表
show conntrack table ipv4 source 10.0.1.169 //查看指定源IP会话表
另外可以使用 sudo conntrack -C 查看全部会话数
ubnt@EdgeRouter-X-5-Port:~$ sudo conntrack -C
325
详细命令如下:
ubnt@EdgeRouter-X-5-Port:~$ sudo conntrack
Command line interface for the connection tracking system. Version 0.9.14
Usage: conntrack [commands] [options]
Commands:
-L [table] [options] List conntrack or expectation table
-G [table] parameters Get conntrack or expectation
-D [table] parameters Delete conntrack or expectation
-I [table] parameters Create a conntrack or expectation
-U [table] parameters Update a conntrack
-E [table] [options] Show events
-F [table] Flush table
-C [table] Show counter
-S Show statistics
Tables: conntrack, expect
Conntrack parameters and options:
-n, --src-nat ip source NAT ip
-g, --dst-nat ip destination NAT ip
-m, --mark mark Set mark
-c, --secmark secmark Set selinux secmark
-e, --event-mask eventmask Event mask, eg. NEW,DESTROY
-z, --zero Zero counters while listing
-o, --output type[,...] Output format, eg. xml
Expectation parameters and options:
--tuple-src ip Source address in expect tuple
--tuple-dst ip Destination address in expect tuple
--mask-src ip Source mask address
--mask-dst ip Destination mask address
Common parameters and options:
-s, --orig-src ip Source address from original direction
-d, --orig-dst ip Destination address from original direction
-r, --reply-src ip Source addres from reply direction
-q, --reply-dst ip Destination address from reply direction
-p, --protonum proto Layer 4 Protocol, eg. 'tcp'
-f, --family proto Layer 3 Protocol, eg. 'ipv6'
-t, --timeout timeout Set timeout
-u, --status status Set status, eg. ASSURED
-b, --buffer-size Netlink socket buffer size