Menggabungkan 2 Line Speedy

Ip Modem
line1(speedy1)=192.168.1.1
line2(speedy2)=192.168.2.1
ip pc router
Local(LAN) = 192.168.0.1
Line1(speedy1)=192.168.1.2
line2(speedy2)=192.168.2.2
Mengganti Nama Ethernet pada PC Router
[admin@MikroTik] interface> pr
[admin@MikroTik] interface> set 0 name local
[admin@MikroTik] interface> set 1 name line1
[admin@MikroTik] interface> set 2 name line2
Memberikan IP

 /ip address
   add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255
   interface=local comment="" disabled=no

   add address=192.168.1.2/24 network=192.168.1.0 broadcast=192.168.255
   interface=line1 comment="" disabled=no

   add address=192.168.2.2/24 network=192.168.2.0 broadcast=192.168.2.255
   interface=line2 comment="" disabled=no

Membuat Mangle
/ip firewall mangle
add chain=prerouting in-interface=local connection-state=new nth=1,2,0
action=mark-connection new-connection-mark=satu passthrough=yes comment="" disabled=no

add chain=prerouting in-interface=local connection-mark=satu
action=mark-routing new-routing-mark=satu passthrough=no comment="" disabled=no

add chain=prerouting in-interface=local connection-state=new nth=1,2,1
 action=mark-connection new-connection-mark=dua passthrough=yes comment="" disabled=no

add chain=prerouting in-interface=local connection-mark=dua
action=mark-routing new-routing-mark=dua passthrough=no comment="" disabled=no

Membuat NAT(network address Translation)

/ip firewall nat
add chain=srcnat connection-mark=satu action=src-nat
to-addresses=192.168.1.2 to-ports=0-65535 comment="" disabled=no

add chain=srcnat connection-mark=dua action=src-nat
 to-addresses=192.168.2.2 to-ports=0-65535 comment="" disabled=no

Menambahkan Ip Route
/ ip route
add dst-address=0.0.0.0/0 gateway=192.168.1.1
scope=255 target-scope=10 routing-mark=satu comment="" disabled=no

add dst-address=0.0.0.0/0 gateway=192.168.2.1
scope=255 target-scope=10 routing-mark=dua comment="" disabled=no

add dst-address=0.0.0.0/0 gateway=192.168.2.1
scope=255 target-scope=10 comment="" disabled=no

Menambahkan DNS

/ip dns set primary-dns= (dns speedy)
/ip dns set scondary-dns= (dns speedy)
(dns diambil dari modem speedy)




atau pakai yang ini



/ip address
add address=192.168.10.22/24 network=192.168.10.0 broadcast=192.168.10.255 interface=lan comment="" disabled=no
add address=192.168.1.3/24 network=192.168.1.0 broadcast=192.168.255 interface=speedy1 comment="" disabled=no
add address=192.168.2.11/24 network=192.168.2.0 broadcast=192.168.2.255 interface=speedy2 comment="" disabled=no

/ip firewall mangle
add chain=prerouting in-interface=lan connection-state=new nth=1,2,0 action=mark-connection new-connection-mark=satu passthrough=yes comment="" disabled=no
add chain=prerouting in-interface=lan connection-mark=satu action=mark-routing new-routing-mark=satu passthrough=no comment="" disabled=no
add chain=prerouting in-interface=lan connection-state=new nth=1,2,1 action=mark-connection new-connection-mark=dua passthrough=yes comment="" disabled=no
add chain=prerouting in-interface=lan connection-mark=dua action=mark-routing new-routing-mark=dua passthrough=no comment="" disabled=no

/ip firewall nat
add chain=srcnat connection-mark=satu action=src-nat to-addresses=192.168.1.3 to-ports=0-65535 comment="" disabled=no
add chain=srcnat connection-mark=dua action=src-nat to-addresses=192.168.2.11 to-ports=0-65535 comment="" disabled=no

/ ip route
add dst-address=0.0.0.0/0 gateway=192.168.1.1 scope=255 target-scope=10 routing-mark=satu comment="" disabled=no
add dst-address=0.0.0.0/0 gateway=192.168.2.2 scope=255 target-scope=10 routing-mark=dua comment="" disabled=no
add dst-address=0.0.0.0/0 gateway=192.168.2.2 scope=255 target-scope=10 comment="" disabled=no <<-- ini default route nya

mudah mudahan bermanfaat 




bisa juga pakai yang ini



 perhatikan gambar dibawah ini :







keterangan :



- speedy 1 ip 192.168.1.1

- speedy 2 ip 192.168.2.1

- mikrotik RB433 ip 192.168.10.1 (ip jaringan lokal)



dan berikut adalah konfigurasi pada mikrotik nya :



 /ip address
add address=192.168.10.1/24 network=192.168.10.0 broadcast=192.168.10.255 interface=lan comment="" disabled=no
add address=192.168.1.1/24 network=192.168.1.0 broadcast=192.168.255 interface=speedy1 comment="" disabled=no
add address=192.168.2.1/24 network=192.168.2.0 broadcast=192.168.2.255 interface=speedy2 comment="" disabled=no

/ip firewall mangle
add chain=prerouting in-interface=lan connection-state=new nth=1,2,0 action=mark-connection new-connection-mark=speedy1 passthrough=yes comment="" disabled=no
add chain=prerouting in-interface=lan connection-mark=speedy1 action=mark-routing new-routing-mark=speedy1 passthrough=no comment="" disabled=no
add chain=prerouting in-interface=lan connection-state=new nth=1,2,1 action=mark-connection new-connection-mark=speedy2 passthrough=yes comment="" disabled=no
add chain=prerouting in-interface=lan connection-mark=speedy2 action=mark-routing new-routing-mark=speedy2 passthrough=no comment="" disabled=no

/ip firewall nat
add chain=srcnat connection-mark=speedy1 action=src-nat to-addresses=192.168.1.1 to-ports=0-65535 comment="" disabled=no
add chain=srcnat connection-mark=speedy2 action=src-nat to-addresses=192.168.2.1 to-ports=0-65535 comment="" disabled=no

/ ip route
add dst-address=0.0.0.0/0 gateway=192.168.1.1 scope=255 target-scope=10 routing-mark=speedy1 comment="" disabled=no
add dst-address=0.0.0.0/0 gateway=192.168.2.2 scope=255 target-scope=10 routing-mark=speedy2 comment="" disabled=no
add dst-address=0.0.0.0/0 gateway=192.168.2.2 scope=255 target-scope=10 comment="" disabled=no <<< sebagai default route semoga membantu   









yang ini juga setingan untuk mengabungkan 2 line speedy 









Load Balance with Mikrotik







IP Addresses



 ip address
add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=LAN
add address=10.111.0.2/24 network=10.111.0.0 broadcast=10.111.0.255 interface=ISP1
add address=10.112.0.2/24 network=10.112.0.0 broadcast=10.112.0.255 interface=ISP2

The router has two ISP interfaces with the addresses of 10.111.0.2/24 and 10.112.0.2/24. The LAN interface has IP address of 192.168.0.1/24.

Policy routing

/ ip firewall mangle
add chain=prerouting dst-address=10.111.0.0/24 action=accept in-interface=LAN
add chain=prerouting dst-address=10.112.0.0/24 action=accept in-interface=LAN

With policy routing it is possible to force all traffic to the specific gateway, even if traffic is destined to the host (other that gateway) from the connected networks. This way routing loop will be generated and communications with those hosts will be impossible. To avoid this situation we need to allow usage of default routing table for traffic to connected networks.

add chain=prerouting in-interface=ISP1 connection-mark=no-mark action=mark-connection \
new-connection-mark=ISP1_conn
add chain=prerouting in-interface=ISP2 connection-mark=no-mark action=mark-connection \
new-connection-mark=ISP2_conn

First it is necessary to manage connection initiated from outside - replies must leave via same interface (from same Public IP) request came. We will mark all new incoming connections, to remember what was the interface.


add chain=prerouting in-interface=LAN connection-mark=no-mark dst-address-type=!local \
per-connection-classifier=both-addresses:2/0 action=mark-connection new-connection-mark=ISP1_conn
add chain=prerouting in-interface=LAN connection-mark=no-mark dst-address-type=!local \
per-connection-classifier=both-addresses:2/1 action=mark-connection new-connection-mark=ISP2_conn

Action mark-routing can be used only in mangle chain output and prerouting, but mangle chain prerouting is capturing all traffic that is going to the router itself. To avoid this we will use dst-address-type=!local. And with the help of the new PCC we will divide traffic into two groups based on source and destination addressees.

add chain=prerouting connection-mark=ISP1_conn in-interface=LAN action=mark-routing \
new-routing-mark=to_ISP1
add chain=prerouting connection-mark=ISP2_conn in-interface=LAN action=mark-routing \
new-routing-mark=to_ISP2
add chain=output connection-mark=ISP1_conn action=mark-routing new-routing-mark=to_ISP1
add chain=output connection-mark=ISP2_conn action=mark-routing new-routing-mark=to_ISP2

Then we need to mark all packets from those connections with a proper mark. As policy routing is required only for traffic going to the Internet, do not forget to specify in-interface option.

/ ip route
add dst-address=0.0.0.0/0 gateway=10.111.0.1 routing-mark=to_ISP1 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=10.112.0.1 routing-mark=to_ISP2 check-gateway=ping

Create a route for each routing-mark

add dst-address=0.0.0.0/0 gateway=10.111.0.1 distance=1 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=10.112.0.1 distance=2 check-gateway=ping

To enable failover, it is necessary to have routes that will jump in as soon as others will become inactive on gateway failure. (and that will happen only if check-gateway option is active)
NAT

/ ip firewall nat
add chain=srcnat out-interface=ISP1 action=masquerade
add chain=srcnat out-interface=ISP2 action=masquerade  


As routing decision is already made we just need rules that will fix  src-addresses for all outgoing packets. If this packet will leave via  wlan1 it will be NATed to 10.112.0.2, if via wlan2 then NATed to  10.111.0.2