You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
17 lines
2.1 KiB
17 lines
2.1 KiB
# Dual-WAN PCC — user load balance, server tetap ISP1 |
|
# Import: /import file=dual-wan.rsc |
|
|
|
/ip route add dst-address=0.0.0.0/0 gateway=117.102.73.97 routing-table="KE ISP 1" comment="dual-wan ISP1" disabled=no |
|
/routing rule add action=lookup-only-in-table table="KE ISP 1" routing-mark="KE ISP 1" comment="dual-wan ISP1" |
|
/routing rule add action=lookup-only-in-table table="KE ISP 2" routing-mark="KE ISP 2" comment="dual-wan ISP2" |
|
/ip firewall mangle add chain=prerouting action=mark-routing new-routing-mark="KE ISP 1" passthrough=no src-address=10.100.1.0/24 comment="dual-wan server force ISP1" place-before=0 |
|
/ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark="ISP 1" passthrough=yes connection-mark=no-mark in-interface=office per-connection-classifier=both-addresses-and-ports:2/0 comment="dual-wan office PCC ISP1" |
|
# ISP2 PCC — enable hanya setelah sfp-sfpplus1 aktif dan dapat IP DHCP |
|
# /ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark="ISP 2" passthrough=yes connection-mark=no-mark in-interface=office per-connection-classifier=both-addresses-and-ports:2/1 comment="dual-wan office PCC ISP2" |
|
/ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark="ISP 1" passthrough=yes connection-mark=no-mark in-interface=vpn per-connection-classifier=both-addresses-and-ports:2/0 comment="dual-wan vpn PCC ISP1" |
|
# /ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark="ISP 2" passthrough=yes connection-mark=no-mark in-interface=vpn per-connection-classifier=both-addresses-and-ports:2/1 comment="dual-wan vpn PCC ISP2" |
|
/ip firewall mangle add chain=prerouting action=mark-routing new-routing-mark="KE ISP 1" passthrough=yes connection-mark="ISP 1" comment="dual-wan route ISP1" |
|
# /ip firewall mangle add chain=prerouting action=mark-routing new-routing-mark="KE ISP 2" passthrough=yes connection-mark="ISP 2" comment="dual-wan route ISP2" |
|
/ip dhcp-client set [find interface=sfp-sfpplus1] add-default-route=no use-peer-dns=no disabled=no |
|
/interface ethernet set sfp-sfpplus1 disabled=no |
|
/ip firewall nat disable 2
|
|
|