Tutorial Dasar Mikrotik

Mikrotik NAT(Port Fowarding)
/ip firewall nat

add action=dst-nat chain=dstnat disabled=no dst-address=103.28.2.34 dst-port=\
8080 protocol=tcp to-addresses=192.168.9.254 to-ports=8080
Mikrotik Script_Check Days of Week

# Calculates day of the week for a givien date
# Month: jan,feb ... nov,dec (must be lower-case)
# Day: 1 - 31
# Year: 1583 - ...
# mmm/dd/yyyy same format as [/system clock get date]
# (ex. feb/19/2012)
# by Phalla.ccmt (phalla.ccmt [at] gmail.com)
:local date [/system clock get date]
# Math Calculation here

:local result ""
:local months [:toarray "jan,feb,mar,apr,may,jun,jul,aug,sep,oct,nov,dec"]
:local daytbl [:toarray "sun,mon,tue,wed,thu,fri,sat"]
:local month [:pick $date 0 3]

:local day [:pick $date 4 6]
:local dayc [:pick $date 5 6]
:local year [:pick $date 7 11]
# if the first char is a 0 (zero) only read last char, else script fails
:if ([:pick $date 4 5] = 0) do={ :set day ($dayc)}
:local sum 0
:local aaa 0
:local yyy 0
:local mmm 0
:local nmonth 1
:for mindex from=0 to=[:len $months] do={

:if ([:pick $months $mindex] = $month) do={:set nmonth ($mindex + 1) }
}
:set aaa ((14 - $nmonth) / 12)

:set yyy ($year - $aaa)
:set mmm ($nmonth + 12 * $aaa - 2)
:set sum (7000 + $day + $yyy + ($yyy / 4) - ($yyy / 100) + ($yyy / 400) + ((31 * $mmm) / 12))
:set sum ($sum - (($sum / 7) * 7))
:set result [:pick $daytbl $sum]
:log info "Today is $result"
Mikrotik Unlimit Browsing but Limit Download

ip firewall mangle
add action=mark-connection chain=prerouting connection-bytes=\
262146-4294967295 in-interface=ether1 new-connection-mark=download \
protocol=tcp src-port=21,80
add action=mark-packet chain=prerouting connection-mark=download \
in-interface=ether1 new-packet-mark=download passthrough=no
/queue type
add kind=pcq name=shape pcq-classifier=src-address pcq-dst-address6-mask=64 \
pcq-rate=128k pcq-src-address6-mask=64
/queue tree
add max-limit=128k name=Download packet-mark=download parent=global queue=\
shape
Not: ether1 = WAN interface
if you have two ISP and configure as load Balancing, you must add two Mangle
Ex.
/ip firewall mangle
/ip firewall mangle

Google Address List

add
/ip firewall address-list
add list="GOOGLE" address=8.8.4.0/24 comment="[20140910] Google Inc. US"

add list="GOOGLE" address=193.142.125.0/24 comment="[20140910] Google Zurich Switzerland"
add list="GOOGLE" address=1.2.3.0/24 comment="[20140910] APNIC Debogon Project Australia"
add list="GOOGLE" address=1.1.1.0/24 comment="[20140910] Research prefix for APNIC Labs
Australia"
add list="GOOGLE" address=113.197.106.0/24 comment="[20140910] Google Australia's Corporate
Network India"
Mikrotik Limit Speed Youtube
Here is a script:
/ip firewall layer7-protocol

add name=youtubeBW regexp=youtube.com
/ip firewall mangle

add action=mark-packet chain=forward comment=youtube layer7-protocol=\
youtubeBW new-packet-mark="youtube packet"
/queue type
add kind=pcq name=PCQ pcq-classifier=dst-address pcq-dst-address6-mask=64 \
pcq-rate=256k pcq-src-address6-mask=64
/queue simple
add limit-at=0/0 max-limit=256k/256k name=Youtube packet-marks=\
"youtube packet" queue=PCQ/PCQ target=""
Mikrotik Separate Local(LAN) Speed with Internet Speed

We have two methods to Separate Local(LAN) Speed with Internet Speed. Below are the
Script of each methods:
Method :

add address=10.0.0.0/8 list=IP-Local
/ip firewall mangle

add action=mark-connection chain=prerouting dst-address-list=IP-Local \
new-connection-mark=Local-Conn
add action=mark-packet chain=postrouting connection-mark=Local-Conn \
new-packet-mark=Local-Pack passthrough=no
/ip firewall nat

add action=masquerade chain=srcnat
/queue simple
add max-limit=5M/5M name=Local packet-marks=Local-Pack target=192.168.1.0/24
add max-limit=1M/1M name=Internet target=192.168.1.0/24
Method 2:

/ip firewall mangle

add action=mark-connection chain=prerouting comment=\
"Mark-connection All Traffic" new-connection-mark=All-Conn src-address=\
192.168.13.0/24
add action=mark-connection chain=prerouting comment=\
"Mark-connection Internet Traffic" connection-mark=All-Conn \
dst-address-list=!IP-Local new-connection-mark=Internet-Conn src-address=\
192.168.13.0/24
add action=mark-packet chain=prerouting comment=\
"Mark-packet Internet Traffic" connection-mark=Internet-Conn \
new-packet-mark=Internet-Traffic passthrough=no
add action=mark-packet chain=prerouting comment="Mark-packet Local Traffic" \
new-packet-mark=Local-Traffic passthrough=no
/queue simple
add max-limit=3M/3M name=Internet-Speed packet-marks=Internet-Traffic target=\
192.168.13.0/24
add max-limit=10M/10M name=Local-Speed packet-marks=Local-Traffic target=\
192.168.13.0/24
Posted by Phalla CCMT at 5:14 PM

Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest
Mikrotik Auto Limit Speed When 1 connection is DOWN.
/system scheduler
add disabled=yes interval=5s name=ping_google_link_B on-event=scheduler-B \
policy=\
ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api \
start-date=jan/01/1970 start-time=00:00:00
add interval=5s name=ping_google_link_Both on-event=scheduler-Both policy=\
add disabled=yes interval=5s name=ping_google_link_A on-event=scheduler-A \
policy=\
Scheduler-A:
#set variables
:local pingcount 3
:local ipA 192.168.1.1
:local ipB 192.168.1.100
#ping gateways with src

:local pingresultA [/ping 8.8.8.8 src-address=$ipA count=$pingcount]
:local pingresultB [/ping 8.8.8.8 src-address=$ipB count=$pingcount]
#if link_A is UP
:if (($pingresultA=3)) do={
#send email
/tool e-mail send subject=($ipA . " is up, WAN2 Speed is Downgraded ") \
body=("the gateway is up now at: " . [/system clock get date] . " time " . [/system clock get
time]) \ to=("jokoicckalteng@gmail.com")
#Limite Speed
/queue simple
set queue2 max-limit=1M/1M
#enable scheduler-Both
/system scheduler set [find name=ping_google_link_Both] disabled=no
#disablescheduler-B
/system scheduler set [find name=ping_google_link_B] disabled=yes
#disable scheduler-A
/system scheduler set [find name=ping_google_link_A] disabled=yes
Scheduler-B:
#set variables
:local pingcount 3
:local ipA 192.168.1.1
:local ipB 192.168.1.100

#if Link_B is UP
:if (($pingresultB=3)) do={
#send email
/tool e-mail send subject=($ipB . " is up, WAN1 Speed is Downgraded ") \
body=("the gateway is up now at: " . [/system clock get date] . " time " . [/system clock get
time]) \ to=("alertphalla@gmail.com")
#Limite Speed
/queue simple
#enable scheduler-Both
/system scheduler set [find name=ping_google_link_Both] disabled=no
#disable scheduler-B
}
Scheduler-Both:
#set variables
:local pingcount 3
:local ipA 192.168.1.1
:local ipB 192.168.1.100
:global state no

#if link_A is DOWN and link_B is UP then:

:if (($pingresultA=0) && ($pingresultB>0)) do={
#send email
/tool e-mail send subject=($ipA . " is down, WAN2 Speed is Upgraded ") \
body=("the gateway is down now at: " . [/system clock get date] . " time " . [/system clock get
#Limite Speed
/queue simple
/system scheduler set [find name=ping_google_link_A] disabled=no
#disable scheduler-Both
/system scheduler set [find name=ping_google_link_Both] disabled=yes
}
#if link_A is UP and link_B is DOWN then:

:if (($pingresultA>0) && ($pingresultB=0)) do={
#send email
/tool e-mail send subject=($ipB . " is down, WAN1 Speed is Upgraded ") \
body=("the gateway is down now at: " . [/system clock get date] . " time " . [/system clock get
#Limite Speed
/queue simple
/system scheduler set [find name=ping_google_link_B] disabled=no
#disable scheduler-Both
/system scheduler set [find name=ping_google_link_Both] disabled=yes
}
Posted by Phalla CCMT at 12:24 AM

Tutorial Dasar Mikrotik

Încărcat de

Informații document

Titlu original

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

Tutorial Dasar Mikrotik

Încărcat de

Drepturi de autor:

Formate disponibile

Mikrotik NAT(Port Fowarding)

/ip firewall nat

Mikrotik Script_Check Days of Week

:local date [/system clock get date]

# Math Calculation here

:local month [:pick $date 0 3]

:for mindex from=0 to=[:len $months] do={

:set aaa ((14 - $nmonth) / 12)

Mikrotik Unlimit Browsing but Limit Download

Not: ether1 = WAN interface

/ip firewall mangle

Google Address List

add list="GOOGLE" address=8.8.4.0/24 comment="[20140910] Google Inc. US"

/ip firewall layer7-protocol

/ip firewall mangle

Mikrotik Separate Local(LAN) Speed with Internet Speed

/ip firewall address-list

/ip firewall mangle

/ip firewall nat

/ip firewall address-list

/ip firewall mangle

Posted by Phalla CCMT at 5:14 PM

Mikrotik Auto Limit Speed When 1 connection is DOWN.

#ping gateways with src

#ping gateways with src

#ping gateways with src

#if link_A is DOWN and link_B is UP then:

#if link_A is UP and link_B is DOWN then:

S-ar putea să vă placă și