API tools faq
paste
dedeanshi

New LB 4 WAN

dedeanshi
May 22nd, 2020
167
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Bash 5.38 KB | None | 0 0
raw download clone embed print report
  1. # ROS 6.4x.x
  2. # Sebelum copas ke terminal, ubah nama interface pada ether arah lan menjadi "LAN"
  3. # Pastikan ISP 1 berada pada ether1
  4. # Pastikan ISP 2 berada pada ether2
  5. # Pastikan ISP 3 berada pada ether3
  6. # Pastikan ISP 4 berada pada ether4
  7. # buat route ke ISP 1 dengan mark routing to_isp1
  8. # buat route ke ISP 2 dengan mark routing to_isp2
  9. # buat route ke ISP 3 dengan mark routing to_isp3
  10. # buat route ke ISP 4 dengan mark routing to_isp4
  11. # buat default route dengan gateway isp 1 dan 2
  12. # script ini untuk 4 WAN dan menggunakan ip 192.168.10.1 sebagai gateway ISP 1, 192.168.20.1 sebagai gateway ISP 2, 192.168.30.1 sebagai gateway ISP 3, 192.168.40.1 sebagai gateway ISP 4
  13. # untuk memudahkan penyesuaian ip gateway gunakan "find replace"
  14. /sys note set note="script by AGASTHANET"
  15.  
  16.  
  17. /ip fi address-list
  18. add address=10.0.0.0/8 list=rfc1918
  19. add address=172.16.0.0/12 list=rfc1918
  20. add address=192.168.0.0/16 list=rfc1918
  21. /ip firewall mangle
  22. add action=mark-connection chain=prerouting comment="IN/OUT FOR EACH WAN" connection-mark=no-mark in-interface=ether1 new-connection-mark=cm_in_isp1 passthrough=yes
  23. add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=ether2 new-connection-mark=cm_in_isp2 passthrough=yes
  24. add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=ether3 new-connection-mark=cm_in_isp3 passthrough=yes
  25. add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=ether4 new-connection-mark=cm_in_isp4 passthrough=yes
  26. add action=mark-routing chain=output connection-mark=cm_in_isp1 new-routing-mark=to_isp1
  27. add action=mark-routing chain=output connection-mark=cm_in_isp2 new-routing-mark=to_isp2
  28. add action=mark-routing chain=output connection-mark=cm_in_isp3 new-routing-mark=to_isp3
  29. add action=mark-routing chain=output connection-mark=cm_in_isp4 new-routing-mark=to_isp4
  30.  
  31. add action=jump chain=prerouting comment= "LB NTH JUMPER [!!! only for tcp 80 traffic]" connection-state=new dst-address-list=!rfc1918 dst-port=80 in-interface=all-ethernet jump-target=nth-balancer protocol=tcp
  32. add action=mark-connection chain=nth-balancer in-interface=LAN new-connection-mark=cm_nth_balancer_1 nth=4,1 passthrough=yes
  33. add action=mark-connection chain=nth-balancer in-interface=LAN new-connection-mark=cm_nth_balancer_2 nth=4,2 passthrough=yes
  34. add action=mark-connection chain=nth-balancer in-interface=LAN new-connection-mark=cm_nth_balancer_3 nth=4,3 passthrough=yes
  35. add action=mark-connection chain=nth-balancer in-interface=LAN new-connection-mark=cm_nth_balancer_4 nth=4,4 passthrough=yes
  36. add action=return chain=nth-balancer
  37. add action=mark-routing chain=prerouting comment="LB NTH ROUTE" connection-mark=cm_nth_balancer_1 in-interface=LAN new-routing-mark=to_isp1 passthrough=no
  38. add action=mark-routing chain=prerouting connection-mark=cm_nth_balancer_2 in-interface=LAN new-routing-mark=to_isp2 passthrough=no
  39. add action=mark-routing chain=prerouting connection-mark=cm_nth_balancer_3 in-interface=LAN new-routing-mark=to_isp3 passthrough=no
  40. add action=mark-routing chain=prerouting connection-mark=cm_nth_balancer_4 in-interface=LAN new-routing-mark=to_isp4 passthrough=no
  41.  
  42. add action=jump chain=prerouting comment="LB PCC JUMPER [for any traffic]" dst-address-list=!rfc1918 in-interface=LAN jump-target=pcc-balancer protocol=!ospf
  43. add action=jump chain=prerouting dst-address-list=!rfc1918 in-interface=LAN jump-target=pcc-balancer protocol=tcp
  44. add action=jump chain=prerouting dst-address-list=!rfc1918 in-interface=LAN jump-target=pcc-balancer protocol=udp
  45. add action=mark-connection chain=pcc-balancer comment= "LB PCC BALANCER CLASSIFIER" in-interface=LAN new-connection-mark= cm_pcc_balancer_1 passthrough=yes per-connection-classifier= both-addresses-and-ports:4/0
  46. add action=mark-connection chain=pcc-balancer in-interface=LAN new-connection-mark=cm_pcc_balancer_2 passthrough=yes per-connection-classifier=both-addresses-and-ports:4/1
  47. add action=mark-connection chain=pcc-balancer in-interface=LAN new-connection-mark=cm_pcc_balancer_3 passthrough=yes per-connection-classifier=both-addresses-and-ports:4/2
  48. add action=mark-connection chain=pcc-balancer in-interface=LAN new-connection-mark=cm_pcc_balancer_4 passthrough=yes per-connection-classifier=both-addresses-and-ports:4/3
  49. add action=return chain=pcc-balancer in-interface=LAN
  50. add action=mark-routing chain=prerouting comment="LB PCC ROUTE" connection-mark=cm_pcc_balancer_1 in-interface=LAN new-routing-mark=to_isp1 passthrough=no
  51. add action=mark-routing chain=prerouting connection-mark=cm_pcc_balancer_2 in-interface=LAN new-routing-mark=to_isp2 passthrough=no
  52. add action=mark-routing chain=prerouting connection-mark=cm_pcc_balancer_3 in-interface=LAN new-routing-mark=to_isp3 passthrough=no
  53. add action=mark-routing chain=prerouting connection-mark=cm_pcc_balancer_4 in-interface=LAN new-routing-mark=to_isp4 passthrough=no
  54. # --------------------------------------------------------------------- #  
  55. /ip route
  56. add check-gateway=ping distance=1 gateway=192.168.10.1 routing-mark=to_isp1 comment="ISP 1"
  57. add check-gateway=ping distance=1 gateway=192.168.20.1 routing-mark=to_isp2 comment="ISP 2"
  58. add check-gateway=ping distance=1 gateway=192.168.30.1 routing-mark=to_isp3 comment="ISP 3"
  59. add check-gateway=ping distance=1 gateway=192.168.40.1 routing-mark=to_isp4 comment="ISP 4"
  60. add check-gateway=ping distance=1 gateway=192.168.10.1,192.168.20.1,192.168.30.1,192.168.40.1 comment="Def_Route"
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!