4 wan load balance Syed J ahanzaib Personnel Blog to Share Knowledge !

http://aacable.wordpress.com/tag/4-wan-load-balance/[24/6/2012 10:46:47 ]
Syed Jahanzaib Personnel Blog to Share
Knowledge !
August 29, 2011
Mikrotik 4 WAN Load Balancing using PCC with
PPPoE Server / Complete Script !
Filed under: Mikrotik Related Tags: 4 wan load balance, aacable, dual wan load balance,
karachi, load balancer, mikrotik, Mikrotik PPPoE Server, pakistan, pcc, pppoe, PPPoE server, rate
limit, RouterOS Syed Jahanzaib / Pinochio~:) @ 3:29 PM
Following is a complete script for Mikrotik to combine/load balance 4 DSL lines. This server
is also acting as a PPPoE Server, therefore I have made some modifications in PCC Script.
For normal LB, read my article at http://aacable.wordpress.com/2011/06/04/mikrotik-4-
wan-load-balance-pcc-complete-script-by-zaib/
In this example I used MikrotikT RB750 5 ports router. 4 ports were connected with four DSL
Routers, and 5th port was connected with User LAN. Also dont forget to rename the
interface names accordingly. This script will also add pppoe server , one pppoe user, dhcp
server, dns server and pcc.
In my personnel experience , If users request are directly hitting Mikrotik configured with
PCC , then you will get good load balancing. Use src-address as classifier, this way you will
get rid of problems like https/broken link, streaming issues etc. Load balancing using this
PCC technique (src-address) will be effective and balanced approach when more and more
SEARCH MY BLOG . . .

CATEGORI ES
Forefront TMG 2010 Related (4)
General IT Related (27)
IBM Related (6)
Linux Related (65)
Microsoft Related (49)
Mikrotik Related (41)
Symentec SEPM Related (1)
Uncategorized (1)
VMware ESXi Related (2)
META
Register
Log In
Entries RSS
Comments RSS
WordPress.Com
EMAI L SUBSCRI PTI ON
ENTER YOUR EMAI L
ADDRESS TO
SUBSCRI BE TO THI S
BLOG AND RECEI VE
NOTI FI CATI ONS OF
NEW POSTS BY EMAI L.
JOI N 288 OTHER
FOLLOWERS

JUNE 2012
M T W T F S S
MAY
1 2 3
4 5 6 7 8 9 10
11 12 13 14 15 16 17
18 19 20 21 22 23 24
25 26 27 28 29 30
ARCHI VES
Follow
Search
Sign me up!
4 wan load balance Syed J ahanzaib Personnel Blog to Share Knowledge !
http://aacable.wordpress.com/tag/4-wan-load-balance/[24/6/2012 10:46:47 ]
connections (from clients) that occurred. I also recommend to use SQUID proxy server along
with mikrotik , either parallel or in front or backend , for better response time and it will also
increase good browsing experience to users.
If somehow you are not satisfied with the src-address approach,play with the PCC-Classifier,
Try both addresses and ports as the classifier. While this will randomize things the most and
in theory give you the most fair allocation of bandwidth, BUT there is also a good chance that
it will break certain things like banking web sites and some forums. This is because often
times a HTTP requests will generate several connections, so there is a chance that some
requests may go out a different route than the initial one, and that will break secure web
sites. For that reason I usually stick with src-address for PCC load balancing.
Regards
Syed Jahanzaib
x-x-x-x-x-x-x-x-x-xx-x-x-x-x-x-x-x-x-xx-x-x-x-x-x-x-x-x-xx-x-x-x-x-
x-
01 /ip address
02 add address=172.16.0.1/16 broadcast=172.16.255.255 comment="" disabled=no
interface=Local network=172.16.0.0
03 add address=192.168.1.2/24 broadcast=192.168.1.255 comment="" disabled=no
interface=WAN1 network=192.168.1.0
04 add address=192.168.2.2/24 broadcast=192.168.2.255 comment="" disabled=no
interface=WAN2 network=192.168.2.0
05 add address=192.168.3.2/24 broadcast=192.168.3.255 comment="" disabled=no
interface=WAN3 network=192.168.3.0
06 add address=192.168.4.2/24 broadcast=192.168.4.255 comment="" disabled=no
interface=WAN4 network=192.168.4.0
07
08 /ip pool
09 add name=dhcp_pool1 ranges=172.16.0.70-172.16.0.254
10 add name=pppoe-users-pool ranges=10.0.0.1-10.0.0.255
11
12 /ip dhcp-server add address-pool=dhcp_pool1 authoritative=after-2sec-delay
bootp-support=static disabled=no interface=Local lease-time=12h name="My DHCP
Server"
13
14 /ip dhcp-server config
15 set store-leases-disk=5m
16
17 /ip dhcp-server network
18 add address=172.16.0.0/16 comment="" dns-server=172.16.0.1,221.132.112.8
19
20 /interface pppoe-server server
21 add authentication=pap default-profile=default disabled=no interface=Local
keepalive-timeout=10 max-mru=1480 max-mtu=1480 max-sessions=1 mrru=disabled
one-session-per-host=yes service-name=aacable
22
23 /ppp profile add change-tcp-mss=default dns-server=172.16.0.1 local-
address=172.16.0.1 name=pppoe-profile only-one=default remote-address=pppoe-
users-pool use-compression=default use-encryption=default use-vj-
compression=default
24
25 /ppp secret add caller-id=" disabled=no limit-bytes-in=0 limit-bytes-out=0
name=zaib password=1234 profile=pppoe-profile routes=" service=pppoe
26
27 /ip dns set allow-remote-requests=yes cache-max-ttl=1w cache-size=10000KiB
max-udp-packet-size=512 servers=221.132.112.8,221.132.112.9
28
29 /ip firewall mangle
30 add action=mark-connection chain=input comment="" disabled=no in-
interface=WAN1 new-connection-mark=WAN1_conn passthrough=yes
31 add action=mark-connection chain=input comment="" disabled=no in-
interface=WAN2 new-connection-mark=WAN2_conn passthrough=yes
June 2012
May 2012
April 2012
March 2012
February 2012
January 2012
December 2011
November 2011
October 2011
September 2011
August 2011
July 2011
June 2011
April 2011
October 2010
September 2010
August 2010
June 2010
May 2010
April 2010
March 2010
February 2010
January 2010
December 2009
November 2009
BLOG STATS
442,406 Hits
RECENT POSTS
Injecting RTL Driver In VMware
ESXi 4.1 ISO Using Windows OS
Windows 2003 (X86) Active
Directory Migration To Windows
2008 (X64)
Winmail.Dat Issue In Lotus
Notes [Solved]
Forefront TMG 2010 , Controlling
High SQL Memory Usage !
Windows Deployment Services
(WDS) / Short Reference Notes
PAGES
About ME
TOP CLI CKS
Mikrotikpasswordrecovery.
Old-Releases.Ubuntu.Com/U
204.62.56.64/Mikrotik/3.2
Systechblog.Com/Server-20
TOP POSTS
Follow Syed
J ahanzaib
Personnel Blog to
Share Knowledge
!
Get every new post delivered
to your Inbox.
J oin 288 other followers
Powered by WordPress.com
Enter your email address
Sign me up
4 wan load balance Syed J ahanzaib Personnel Blog to Share Knowledge !
http://aacable.wordpress.com/tag/4-wan-load-balance/[24/6/2012 10:46:47 ]
32 add action=mark-connection chain=input comment="" disabled=no in-
interface=WAN3 new-connection-mark=WAN3_conn passthrough=yes
33 add action=mark-connection chain=input comment="" disabled=no in-
interface=WAN4 new-connection-mark=WAN4_conn passthrough=yes
34
35 add action=mark-routing chain=output comment="" connection-mark=WAN1_conn
disabled=no new-routing-mark=to_WAN1 passthrough=yes
36 add action=mark-routing chain=output comment="" connection-mark=WAN2_conn
disabled=no new-routing-mark=to_WAN2 passthrough=yes
37 add action=mark-routing chain=output comment="" connection-mark=WAN3_conn
disabled=no new-routing-mark=to_WAN3 passthrough=yes
38 add action=mark-routing chain=output comment="" connection-mark=WAN4_conn
disabled=no new-routing-mark=to_WAN4 passthrough=yes
39
40 add action=accept chain=prerouting comment="" disabled=no dst-
address=192.168.1.0/24
41 add action=accept chain=prerouting comment="" disabled=no dst-
address=192.168.2.0/24
42 add action=accept chain=prerouting comment="" disabled=no dst-
address=192.168.3.0/24
43 add action=accept chain=prerouting comment="" disabled=no dst-
address=192.168.4.0/24
44
45 add action=mark-connection chain=prerouting comment="" disabled=no dst-
address-type=!local new-connection-mark=WAN1_conn passthrough=yes per-
connection-classifier=both-addresses-and-ports:4/0 src-address=10.0.0.1-
10.0.0.255
46
47 add action=mark-connection chain=prerouting comment="" disabled=no dst-
address-type=!local new-connection-mark=WAN2_conn passthrough=yes per-
connection-classifier=both-addresses-and-ports:4/1 src-address=10.0.0.1-
10.0.0.255
48
49 add action=mark-connection chain=prerouting comment="" disabled=no dst-
address-type=!local new-connection-mark=WAN3_conn passthrough=yes per-
connection-classifier=both-addresses-and-ports:4/2 src-address=10.0.0.1-
10.0.0.255
50
51 add action=mark-connection chain=prerouting comment="" disabled=no dst-
address-type=!local new-connection-mark=WAN4_conn passthrough=yes per-
connection-classifier=both-addresses-and-ports:4/3 src-address=10.0.0.1-
10.0.0.255
52
53 add action=mark-routing chain=prerouting comment="" connection-mark=WAN1_conn
disabled=no new-routing-mark=to_WAN1 passthrough=yes
54 add action=mark-routing chain=prerouting comment="" connection-mark=WAN2_conn
disabled=no new-routing-mark=to_WAN2 passthrough=yes
55 add action=mark-routing chain=prerouting comment="" connection-mark=WAN3_conn
disabled=no new-routing-mark=to_WAN3 passthrough=yes
56 add action=mark-routing chain=prerouting comment="" connection-mark=WAN4_conn
disabled=no new-routing-mark=to_WAN4 passthrough=yes
57
58 /ip firewall nat
59 add action=masquerade chain=srcnat comment="" disabled=no out-interface=WAN1
src-address=10.0.0.1-10.0.0.255
60 add action=masquerade chain=srcnat comment="" disabled=no out-interface=WAN2
src-address=10.0.0.1-10.0.0.255
61 add action=masquerade chain=srcnat comment="" disabled=no out-interface=WAN3
src-address=10.0.0.1-10.0.0.255
62 add action=masquerade chain=srcnat comment="" disabled=no out-interface=WAN4
src-address=10.0.0.1-10.0.0.255
63
64 /ip route
65 add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0
gateway=192.168.1.1 routing-mark=to_WAN1 scope=30 target-scope=10
66
67 add check-gateway=ping disabled=no distance=2 dst-address=0.0.0.0/0
gateway=192.168.2.1 routing-mark=to_WAN2 scope=30 target-scope=10
68
Youtube Caching Problem : An
Error Occured. Please Try Again
Later. [SOLVED] Updated
Storeurl.Pl
Howto Cache Youtube With SQUID
/ LUSCA And Bypass Cached
Videos From Mikrotik Queue
Technical Interview Questions
(Part 2/3) ACTIVE DIRECTORY]
Howto Crack Mikrotik 3.30 [P.C.C
SUPPORTED VER] [For Educational
Purpose Only]
Youtube Caching With SQUID 2.7
[Using Storeurl.Pl]
RSS
RSS - Posts
RSS - Comments
4 wan load balance Syed J ahanzaib Personnel Blog to Share Knowledge !
http://aacable.wordpress.com/tag/4-wan-load-balance/[24/6/2012 10:46:47 ]
All Done ! Now Test the link by putting user load, the more multiple users load you put on it,
the better Load Balance result you will get
PCC WITH HOTSPOT
If you wanna run PCC with HOTSPOT on same Mikrotik Server, Put this rule in place to stop
the hotspot from processing people after they have signed into the network.
PCC WITH UN-EQUAL WAN LINKS
If you have Un-Equal WAN Links, for example WAN,1,2,3 are of 4MB and WAN,4 is of 8 Mb,
and you want to force MT to use WAN4 link more then other because of its capacity, Then
you have to Add more PCC rules assigning the same two marks to a specific link i.e WAN4 ,
something like
Code:
ZaiB
Comments (54)
Theme: Silver is the New Black. Blog at WordPress.com.
69 add check-gateway=ping disabled=no distance=3 dst-address=0.0.0.0/0
gateway=192.168.3.1 routing-mark=to_WAN3 scope=30 target-scope=10
70
71 add check-gateway=ping disabled=no distance=4 dst-address=0.0.0.0/0
gateway=192.168.4.1 routing-mark=to_WAN4 scope=30 target-scope=10
72
73 add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0
gateway=192.168.1.1 scope=30 target-scope=10
74
75 add check-gateway=ping comment="" disabled=no distance=2 dst-address=0.0.0.0/0
gateway=192.168.2.1 scope=30 target-scope=10
76
77 add check-gateway=ping comment="" disabled=no distance=3 dst-address=0.0.0.0/0
gateway=192.168.3.1 scope=30 target-scope=10
78
79 add check-gateway=ping comment="" disabled=no distance=4 dst-address=0.0.0.0/0
gateway=192.168.4.1 scope=30 target-scope=10
1 /ip firewall nat add action=accept chain=pre-hotspot disabled=no dst-address-
type=!local hotspot=auth
1 add chain=prerouting dst-address-type=!local in-interface=Local per-
connection-classifier=both-addresses-and-ports:4/0 action=mark-connection new-
connection-mark=WAN1_conn passthrough=yes
2 add chain=prerouting dst-address-type=!local in-interface=Local per-
connection-classifier=both-addresses-and-ports:4/1 action=mark-connection new-
connection-mark=WAN2_conn passthrough=yes
3 add chain=prerouting dst-address-type=!local in-interface=Local per-
connection-classifier=both-addresses-and-ports:4/2 action=mark-connection new-
connection-mark=WAN3_conn passthrough=yes
4 add chain=prerouting dst-address-type=!local in-interface=Local per-
connection-classifier=both-addresses-and-ports:4/3 action=mark-connection new-
connection-mark=WAN4_conn passthrough=yes
5 add chain=prerouting dst-address-type=!local in-interface=Local per-
connection-classifier=both-addresses-and-ports:4/4 action=mark-connection new-
connection-mark=WAN4_conn passthrough=yes