Mikrotik Config NTH PPPOE Colores pulpolibre.wordpress.

com
BALANCEO DE CARGA NTH CON ENTRADAS PPPOE
rb750gl v6.32.2
@rob7nson - 23 abril 2016
1# AGREGAR PPPOE CLIENTE
Interfaz - (+) Agregar- PPPOE Client
http://www.ryohnosuke.com/foros/index.php?threads/1678/ (SOLO EL PASO 1)

2# AGREGAR LAN
/ ip address
add address=192.168.10.1/24 network=192.168.10.0 broadcast=192.168.10.255 interface=ether5
3# ENMASCARADO NAT
/ip firewall nat
add action=masquerade chain=srcnat out-interface=pppoe-out1
add action=masquerade chain=srcnat out-interface=pppoe-out2
add action=masquerade chain=srcnat out-interface=pppoe-out3
4# AGREGAR DNS
/ip dns
set servers=8.8.8.8,8.8.4.4
5# LO QUE ENTRA POR 1 WAN SALE POR EL MISMO
/ip firewall mangle
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=pppoe-out1
new-connection-mark=ISP1_conn
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=pppoe-out2
new-connection-mark=ISP2_conn
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=pppoe-out3
new-connection-mark=ISP3_conn
add action=mark-routing chain=output connection-mark=ISP1_conn new-routing-
mark=to_ISP1 passthrough=no
add action=mark-routing chain=output connection-mark=ISP2_conn new-routing-
mark=to_ISP2 passthrough=no
add action=mark-routing chain=output connection-mark=ISP3_conn new-routing-
mark=to_ISP3 passthrough=no
6# AGREGAR RED BALANCEADA
/ip firewall address-list
add address=192.168.10.0/24 list=RED
7# BALANCEO DE PETICIONES NTH
/ip firewall mangle
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local new-
connection-mark=ISP1_conn nth=3,1 src-address-list=RED
add action=mark-routing chain=prerouting connection-mark=ISP1_conn new-routing-
mark=to_ISP1 passthrough=no src-address-list=RED
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local new-
connection-mark=ISP2_conn nth=2,1 src-address-list=RED
add action=mark-routing chain=prerouting connection-mark=ISP2_conn new-routing-
mark=to_ISP2 passthrough=no src-address-list=RED
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local new-
connection-mark=ISP3_conn nth=1,1 src-address-list=RED
add action=mark-routing chain=prerouting connection-mark=ISP3_conn new-routing-
mark=to_ISP3 passthrough=no src-address-list=RED
8# Agregar Gateway Y FAILOVER
/ip route
add check-gateway=ping distance=1 gateway=pppoe-out1
add check-gateway=ping distance=2 gateway=pppoe-out2
add check-gateway=ping distance=3 gateway=pppoe-out3
add check-gateway=ping distance=1 gateway=pppoe-out1 routing-mark=to_ISP1
add check-gateway=ping distance=1 gateway=pppoe-out2 routing-mark=to_ISP2
add check-gateway=ping distance=1 gateway=pppoe-out3 routing-mark=to_ISP3

BALANCEO DE CARGA NTH CON IP FIJAS

Mikrotik hEX RB750Gr3 v6.36.1
@rob7nson - 17 Mayo 2017
1#AGREGAR IPS WAN
/ ip address
add address=192.168.0.2/24 interface=ether1 network=192.168.0.0
add address=192.168.1.2/24 interface=ether2 network=192.168.1.0
2# AGREGAR LAN
/ ip address
add address=192.168.20.1/24 network=192.168.20.0 broadcast=192.168.20.255 interface=ether5
3# ENMASCARADO NAT
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
add action=masquerade chain=srcnat out-interface=ether2
4# AGREGAR DNS
/ip dns
set servers=8.8.8.8,8.8.4.4
5# LO QUE ENTRA POR 1 WAN SALE POR EL MISMO
/ip firewall mangle
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=ether1 new-
connection-mark=ISP1_conn
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=ether2 new-
connection-mark=ISP2_conn
add action=mark-routing chain=output connection-mark=ISP1_conn new-routing-mark=to_ISP1
passthrough=no
add action=mark-routing chain=output connection-mark=ISP2_conn new-routing-mark=to_ISP2
passthrough=no
6# AGREGAR RED BALANCEADA
/ip firewall address-list
add address=192.168.20.0/24 list=RED
7# BALANCEO DE PETICIONES NTH ( ISP1_conn nth=4,1 para balancear 4 lineas)
/ip firewall mangle
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local new-
connection-mark=ISP1_conn nth=2,1 src-address-list=RED
add action=mark-routing chain=prerouting connection-mark=ISP1_conn new-routing-mark=to_ISP1
passthrough=no src-address-list=RED
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local new-
connection-mark=ISP2_conn nth=1,1 src-address-list=RED
add action=mark-routing chain=prerouting connection-mark=ISP2_conn new-routing-mark=to_ISP2
passthrough=no src-address-list=RED
8# Agregar Gateway Y FAILOVER
/ip route
add check-gateway=ping distance=1 gateway=192.168.0.1
add check-gateway=ping distance=2 gateway=192.168.1.1
add check-gateway=ping distance=1 gateway=192.168.0.1 routing-mark=to_ISP1
add check-gateway=ping distance=1 gateway=192.168.1.1 routing-mark=to_ISP2

EJEMPLO
BALANCEO DE 4 LNEAS
1 Linea Tigo de 30 Megas y 3 lneas Claro de 10 Megas
BALANCEO DE CARGA NTH CON IP FIJAS
Mikrotik hEX RB750Gr3 v6.36.1
@rob7nson - 21 Mayo 2017
1# AGREGAR IP WAN
/ ip address
add address=192.168.0.2/24 interface=ether1 network=192.168.0.0
add address=192.168.1.2/24 interface=ether2 network=192.168.1.0
add address=192.168.2.2/24 interface=ether3 network=192.168.2.0
add address=192.168.3.2/24 interface=ether4 network=192.168.3.0
2# AGREGAR LAN
/ ip address
add address=192.168.10.1/24 network=192.168.10.0 broadcast=192.168.10.255 interface=ether5
3# ENMASCARADO NAT
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
add action=masquerade chain=srcnat out-interface=ether2
add action=masquerade chain=srcnat out-interface=ether3
add action=masquerade chain=srcnat out-interface=ether4
4# AGREGAR DNS
/ip dns
set servers=8.8.8.8,8.8.4.4
5# LO QUE ENTRA POR 1 WAN SALE POR EL MISMO
/ip firewall mangle
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=ether1 new-
connection-mark=ISP1_conn
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=ether2 new-
connection-mark=ISP2_conn
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=ether3 new-
connection-mark=ISP3_conn
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=ether4 new-
connection-mark=ISP4_conn
add action=mark-routing chain=output connection-mark=ISP1_conn new-routing-mark=to_ISP1
passthrough=no
add action=mark-routing chain=output connection-mark=ISP2_conn new-routing-mark=to_ISP2
passthrough=no
add action=mark-routing chain=output connection-mark=ISP3_conn new-routing-mark=to_ISP3
passthrough=no
add action=mark-routing chain=output connection-mark=ISP4_conn new-routing-mark=to_ISP4
passthrough=no
6# AGREGAR RED BALANCEADA
/ip firewall address-list
add address=192.168.10.0/24 list=RED
7# BALANCEO DE PETICIONES NTH (En este caso La lnea 1 es de 30 megas y las otras 3 son de
10 mb)
/ip firewall mangle
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local new-
connection-mark=ISP1_conn nth=6,1 src-address-list=RED
add action=mark-routing chain=prerouting connection-mark=ISP1_conn new-routing-mark=to_ISP1
passthrough=no src-address-list=RED
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local new-
connection-mark=ISP1_conn nth=5,1 src-address-list=RED
add action=mark-routing chain=prerouting connection-mark=ISP1_conn new-routing-mark=to_ISP1
passthrough=no src-address-list=RED
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local new-
connection-mark=ISP1_conn nth=4,1 src-address-list=RED
add action=mark-routing chain=prerouting connection-mark=ISP1_conn new-routing-mark=to_ISP1
passthrough=no src-address-list=RED
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local new-
connection-mark=ISP2_conn nth=3,1 src-address-list=RED
add action=mark-routing chain=prerouting connection-mark=ISP2_conn new-routing-mark=to_ISP2
passthrough=no src-address-list=RED
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local new-
connection-mark=ISP3_conn nth=2,1 src-address-list=RED
add action=mark-routing chain=prerouting connection-mark=ISP3_conn new-routing-mark=to_ISP3
passthrough=no src-address-list=RED
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local new-
connection-mark=ISP4_conn nth=1,1 src-address-list=RED
add action=mark-routing chain=prerouting connection-mark=ISP4_conn new-routing-mark=to_ISP4
passthrough=no src-address-list=RED
8# Agregar Gateway Y FAILOVER
/ip route
add check-gateway=ping distance=1 gateway=192.168.0.1
add check-gateway=ping distance=2 gateway=192.168.1.1
add check-gateway=ping distance=3 gateway=192.168.2.1
add check-gateway=ping distance=4 gateway=192.168.3.1
add check-gateway=ping distance=1 gateway=192.168.0.1 routing-mark=to_ISP1
add check-gateway=ping distance=1 gateway=192.168.1.1 routing-mark=to_ISP2
add check-gateway=ping distance=1 gateway=192.168.2.1 routing-mark=to_ISP3
add check-gateway=ping distance=1 gateway=192.168.3.1 routing-mark=to_ISP4
Publicado por Google DriveInformar de uso inadecuadoActualizado automticamente cada 5
minutos
1.