Kamis, 10 Mei 2018

Mangle LB + Mangle Queue Tree Mikrotik

ether1 - isp1 - network 192.168.5.0/24 - gateway 192.168.5.1
ether2 - isp2 - network 192.168.4.0/24 - gateway 192.168.4.1
ether3 - isp3 - network 192.168.6.0/24 - gateway 192.168.6.1
ether4 - client - network 192.168.110.0/24 - gateway 192.168.110.1

/ip firewall mangle
add action=accept chain=prerouting disabled=no dst-address=192.168.110.0/24 \
    in-interface=ether5-onboard-client
add action=accept chain=prerouting disabled=no dst-address=192.168.4.0/24 \
    in-interface=ether5-onboard-client
add action=accept chain=prerouting disabled=no dst-address=192.168.5.0/24 \
    in-interface=ether5-onboard-client
add action=accept chain=prerouting disabled=no dst-address=192.168.6.0/24 \
    in-interface=ether5-onboard-client
add action=mark-connection chain=input disabled=no in-interface=\
    ether1-lan-card-ke1-indihome5.1 new-connection-mark=ether1 passthrough=\
    yes
add action=mark-connection chain=input disabled=no in-interface=\
    ether2-lan-card-ke2-indihome4.1 new-connection-mark=ether2 passthrough=\
    yes
add action=mark-connection chain=input disabled=no in-interface=\
    ether3-lan-card-ke3-indihome6.1 new-connection-mark=ether3 passthrough=\
    yes
add action=mark-connection chain=input disabled=no in-interface=\
    ether4-lan-card-ke4-republik new-connection-mark=ether4 passthrough=yes
add action=mark-routing chain=output connection-mark=ether1 disabled=no \
    new-routing-mark=to-indihome5.1 passthrough=yes
add action=mark-routing chain=output connection-mark=ether2 disabled=no \
    new-routing-mark=to-indihome4.1 passthrough=yes
add action=mark-routing chain=output connection-mark=ether3 disabled=no \
    new-routing-mark=to-indihome6.1 passthrough=yes
add action=mark-routing chain=output connection-mark=ether4 disabled=no \
    new-routing-mark=to-republik passthrough=yes
add action=mark-connection chain=prerouting disabled=no dst-port=!80,443 \
    in-interface=ether5-onboard-client new-connection-mark=non-browsing \
    passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting disabled=no dst-port=!80,443 \
    in-interface=ether5-onboard-client new-connection-mark=non-browsing \
    passthrough=yes protocol=udp
add action=mark-routing chain=prerouting connection-mark=non-browsing \
    disabled=no in-interface=ether5-onboard-client new-routing-mark=\
    to-republik passthrough=no
add action=mark-connection chain=forward connection-bytes=500000-0 \
    connection-rate=200k-100M disabled=no new-connection-mark=\
    download-trafik-besar out-interface=ether5-onboard-client passthrough=yes \
    protocol=tcp
add action=mark-connection chain=forward connection-bytes=500000-0 \
    connection-rate=200k-100M disabled=no new-connection-mark=\
    download-trafik-besar out-interface=ether5-onboard-client passthrough=yes \
    protocol=udp
add action=mark-packet chain=forward connection-mark=download-trafik-besar \
    disabled=no new-packet-mark=download-trafik-besar passthrough=no
add action=mark-connection chain=forward connection-bytes=500000-0 \
    connection-rate=200k-100M disabled=no in-interface=ether5-onboard-client \
    new-connection-mark=upload-trafik-besar passthrough=yes protocol=tcp
add action=mark-connection chain=forward connection-bytes=500000-0 \
    connection-rate=200k-100M disabled=no in-interface=ether5-onboard-client \
    new-connection-mark=upload-trafik-besar passthrough=yes protocol=udp
add action=mark-packet chain=forward connection-mark=upload-trafik-besar \
    disabled=no new-packet-mark=upload-trafik-besar passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=\
    download-trafik-ringan out-interface=ether5-onboard-client passthrough=no
add action=mark-packet chain=forward disabled=no in-interface=\
    ether5-onboard-client new-packet-mark=upload-trafik-ringan passthrough=no

Tidak ada komentar:

Posting Komentar

Load Balanced + Proxy External

Basic configuration : /ip address add address=192.168.1.10/24 broadcast=192.168.1.255 comment="" disabled=no interface=ether1-...