Scribd
Upload
34 views2 pages

Balancing

The document describes configuring policy-based routing and NAT on a router with multiple WAN connections. It assigns IP addresses to interfaces, creates routing tables, uses firewall rules to mark connections, and configures policy routes and NAT rules to control routing and internet access through each WAN connection.

Uploaded by

sava.truja
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
34 views2 pages

Balancing

The document describes configuring policy-based routing and NAT on a router with multiple WAN connections. It assigns IP addresses to interfaces, creates routing tables, uses firewall rules to mark connections, and configures policy routes and NAT rules to control routing and internet access through each WAN connection.

Uploaded by

sava.truja
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd

IP Address

/ip address
add address=[Link]/24 interface=ether5_ISP1-TG network=[Link]
add address=[Link]/24 interface=ether1_ISP2-SN network=[Link]
add address=[Link]/24 interface=ether3_LAN network=[Link]

/routing table
add disabled=no fib name=ISP1TG_table
add disabled=no fib name=ISP2SN_table

Policy routing

/ip firewall mangle


add action=accept chain=prerouting dst-address=[Link]/24 in-interface=LAN
add action=accept chain=prerouting dst-address=[Link]/24 in-interface=LAN

/ip firewall mangle


add action=mark-connection chain=input connection-state=new in-
interface=ether5_ISP1-TG new-connection-mark=ISP1
add action=mark-connection chain=input connection-state=new in-
interface=ether1_ISP2-SN new-connection-mark=ISP2

add action=mark-connection chain=output connection-mark=no-mark connection-


state=new new-connection-mark=ISP1 passthrough=yes per-connection-classifier=both-
addresses:2/0
add action=mark-connection chain=output connection-mark=no-mark connection-
state=new new-connection-mark=ISP2 per-connection-classifier=both-addresses:2/1

add action=mark-connection chain=prerouting connection-mark=no-mark connection-


state=new dst-address-type=!local in-interface=LAN new-connection-mark=ISP1 per-
connection-classifier=both-addresses:2/0
add action=mark-connection chain=prerouting connection-mark=no-mark connection-
state=new dst-address-type=!local in-interface=LAN new-connection-mark=ISP2 per-
connection-classifier=both-addresses:2/1

add action=mark-routing chain=output connection-mark=ISP1 new-routing-


mark=ISP1TG_table
add action=mark-routing chain=prerouting connection-mark=ISP1 in-interface=LAN new-
routing-mark=ISP1TG_table

add action=mark-routing chain=output connection-mark=ISP2 new-routing-


mark=ISP2SN_table
add action=mark-routing chain=prerouting connection-mark=ISP2 in-interface=LAN new-
routing-mark=ISP2SN_table

/ip route
add check-gateway=ping disabled=no dst-address=[Link]/0 gateway=[Link]
routing-table=ISP1TG_table suppress-hw-offload=no
add check-gateway=ping disabled=no dst-address=[Link]/0 gateway=[Link]
routing-table=ISP2SN_table suppress-hw-offload=no

add distance=1 dst-address=[Link]/0 gateway=[Link]


add distance=2 dst-address=[Link]/0 gateway=[Link]
NAT

/ip firewall nat


add action=masquerade chain=srcnat out-interface=ether5_ISP1-TG
add action=masquerade chain=srcnat out-interface=ether1_ISP2-SN

You might also like