4 wan load balance « Syed Jahanzaib Personnel Blog to Share Knowledge !

Syed Jahanzaib Personnel Blog to Share

Knowledge !
SEARCH MY BLOG . . .

August 29, 2011 Search

Mikrotik 4 WAN Load Balancing using PCC with CATEGORIES

PPPoE Server / Complete Script ! Forefront TMG 2010 Related (4)

Filed under: Mikrotik Related — Tags: 4 wan load balance, aacable, dual wan load balance, General IT Related (27)
karachi, load balancer, mikrotik, Mikrotik PPPoE Server, pakistan, pcc, pppoe, PPPoE server, rate
IBM Related (6)
limit, RouterOS — Syed Jahanzaib / Pinochio~:) @ 3:29 PM
Linux Related (65)
Microsoft Related (49)
Mikrotik Related (41)
Symentec SEPM Related (1)
Uncategorized (1)
VMware ESXi Related (2)

META

Register
Log In
Entries RSS

Comments RSS

WordPress.Com

EMAIL SUBSCRIPTION

ENTER YOUR EMAIL

ADDRESS TO
SUBSCRIBE TO THIS
BLOG AND RECEIVE
NOTIFICATIONS OF
NEW POSTS BY EMAIL.

JOIN 288 OTHER

FOLLOWERS
Following is a complete script for Mikrotik to combine/load balance 4 DSL lines. This server
is also acting as a PPPoE Server, therefore I have made some modifications in PCC Script.

For normal LB, read my article at http://aacable.wordpress.com/2011/06/04/mikrotik-4- Sign me up!

wan-load-balance-pcc-complete-script-by-zaib/

In this example I used MikrotikT RB750 5 ports router. 4 ports were connected with four DSL JUNE 2012
M T W T F S S
Routers, and 5th port was connected with User LAN. Also don’t forget to rename the
1 2 3
interface names accordingly. This script will also add pppoe server , one pppoe user, dhcp
4 5 6 7 8 9 10
server, dns server and pcc.
11 12 13 14 15 16 17
18 19 20 21 22 23 24
In my personnel experience , If users request are directly hitting Mikrotik configured with
25 26 27 28 29 30
PCC , then you will get good load balancing. Use src-address as classifier, this way you will
« MAY
get rid of problems like https/broken link, streaming issues etc. Load balancing using this
Follow
PCC technique (src-address) will be effective and balanced approach when more and more ARCHIVES

http://aacable.wordpress.com/tag/4-wan-load-balance/[24/6/2012 10:46:47 μμ]

4 wan load balance « Syed Jahanzaib Personnel Blog to Share Knowledge !

connections (from clients) that occurred. I also recommend to use SQUID proxy server along
June 2012“Syed
Follow
with mikrotik , either parallel or in front or backend , for better response time and it will also
May 2012
increase good browsing experience to users. Jahanzaib
April 2012

If somehow you are not satisfied with the src-address approach,play with the PCC-Classifier,
Personnel
March 2012 Blog to
February 2012
Try both addresses and ports as the classifier. While this will randomize things the most and Share Knowledge
January 2012
in theory give you the most fair allocation of bandwidth, BUT there is also a good chance that !” December 2011
it will break certain things like banking web sites and some forums. This is because often
November 2011
times a HTTP requests will generate several connections, so there is a chance that some Get every new post delivered
October 2011
requests may go out a different route than the initial one, and that will break secure web to your Inbox.
September 2011
sites. For that reason I usually stick with src-address for PCC load balancing. August 2011followers
Join 288 other
July 2011
Regard’s EnterJune 2011
your email address
Syed Jahanzaib
April 2011
x-x-x-x-x-x-x-x-x-x–x-x-x-x-x-x-x-x-x-x–x-x-x-x-x-x-x-x-x-x–x-x-x-x-x- October 2010
Sign me up

x- September 2010
August
01 /ip address Powered2010
by WordPress.com
June 2010
02 add address=172.16.0.1/16 broadcast=172.16.255.255 comment="" disabled=no
interface=Local network=172.16.0.0 May 2010
03 add address=192.168.1.2/24 broadcast=192.168.1.255 comment="" disabled=no April 2010
interface=WAN1 network=192.168.1.0
March 2010
04 add address=192.168.2.2/24 broadcast=192.168.2.255 comment="" disabled=no
interface=WAN2 network=192.168.2.0 February 2010
05 add address=192.168.3.2/24 broadcast=192.168.3.255 comment="" disabled=no January 2010
interface=WAN3 network=192.168.3.0 December 2009
06 add address=192.168.4.2/24 broadcast=192.168.4.255 comment="" disabled=no
November 2009
interface=WAN4 network=192.168.4.0
07
08 /ip pool
09 add name=dhcp_pool1 ranges=172.16.0.70-172.16.0.254 BLOG STATS
10 add name=pppoe-users-pool ranges=10.0.0.1-10.0.0.255
442,406 Hits
11
12 /ip dhcp-server add address-pool=dhcp_pool1 authoritative=after-2sec-delay
bootp-support=static disabled=no interface=Local lease-time=12h name="My DHCP
RECENT POSTS
Server"
13 Injecting RTL Driver In VMware
14 /ip dhcp-server config ESXi 4.1 ISO Using Windows OS
15 set store-leases-disk=5m
Windows 2003 (X86) Active
16 Directory Migration To Windows
17 /ip dhcp-server network 2008 (X64)
18 add address=172.16.0.0/16 comment="" dns-server=172.16.0.1,221.132.112.8 Winmail.Dat Issue In Lotus
19 Notes [Solved]
20 /interface pppoe-server server Forefront TMG 2010 , Controlling
21 add authentication=pap default-profile=default disabled=no interface=Local High SQL Memory Usage !
keepalive-timeout=10 max-mru=1480 max-mtu=1480 max-sessions=1 mrru=disabled
Windows Deployment Services
one-session-per-host=yes service-name=aacable (WDS) / Short Reference Notes
22
23 /ppp profile add change-tcp-mss=default dns-server=172.16.0.1 local-
address=172.16.0.1 name=pppoe-profile only-one=default remote-address=pppoe- PAGES
users-pool use-compression=default use-encryption=default use-vj-
compression=default About ME
24
25 /ppp secret add caller-id=”" disabled=no limit-bytes-in=0 limit-bytes-out=0
name=zaib password=1234 profile=pppoe-profile routes=”" service=pppoe TOP CLICKS
26
27 /ip dns set allow-remote-requests=yes cache-max-ttl=1w cache-size=10000KiB Mikrotikpasswordrecovery.…
max-udp-packet-size=512 servers=221.132.112.8,221.132.112.9 Old-Releases.Ubuntu.Com/U…
28
204.62.56.64/Mikrotik/3.2…
29 /ip firewall mangle
30 add action=mark-connection chain=input comment="" disabled=no in- Systechblog.Com/Server-20…
interface=WAN1 new-connection-mark=WAN1_conn passthrough=yes
31 add action=mark-connection chain=input comment="" disabled=no in-
interface=WAN2 new-connection-mark=WAN2_conn passthrough=yes TOP POSTS

http://aacable.wordpress.com/tag/4-wan-load-balance/[24/6/2012 10:46:47 μμ]

4 wan load balance « Syed Jahanzaib Personnel Blog to Share Knowledge !

32 add action=mark-connection chain=input comment="" disabled=no in-

Youtube Caching Problem : An
interface=WAN3 new-connection-mark=WAN3_conn passthrough=yes
Error Occured. Please Try Again
33 add action=mark-connection chain=input comment="" disabled=no in- Later. [SOLVED] Updated
interface=WAN4 new-connection-mark=WAN4_conn passthrough=yes Storeurl.Pl
34 Howto Cache Youtube With SQUID
35 add action=mark-routing chain=output comment="" connection-mark=WAN1_conn / LUSCA And Bypass Cached
disabled=no new-routing-mark=to_WAN1 passthrough=yes Videos From Mikrotik Queue
36 add action=mark-routing chain=output comment="" connection-mark=WAN2_conn Technical Interview Questions
disabled=no new-routing-mark=to_WAN2 passthrough=yes (Part 2/3) ACTIVE DIRECTORY]
37 add action=mark-routing chain=output comment="" connection-mark=WAN3_conn Howto Crack Mikrotik 3.30 [P.C.C
disabled=no new-routing-mark=to_WAN3 passthrough=yes SUPPORTED VER] [For Educational
38 add action=mark-routing chain=output comment="" connection-mark=WAN4_conn Purpose Only]
disabled=no new-routing-mark=to_WAN4 passthrough=yes Youtube Caching With SQUID 2.7
39 [Using Storeurl.Pl]
40 add action=accept chain=prerouting comment="" disabled=no dst-
address=192.168.1.0/24
41 add action=accept chain=prerouting comment="" disabled=no dst- RSS
address=192.168.2.0/24
42 add action=accept chain=prerouting comment="" disabled=no dst- RSS - Posts
address=192.168.3.0/24 RSS - Comments
43 add action=accept chain=prerouting comment="" disabled=no dst-
address=192.168.4.0/24
44
45 add action=mark-connection chain=prerouting comment="" disabled=no dst-
address-type=!local new-connection-mark=WAN1_conn passthrough=yes per-
connection-classifier=both-addresses-and-ports:4/0 src-address=10.0.0.1-
10.0.0.255
46
47 add action=mark-connection chain=prerouting comment="" disabled=no dst-
address-type=!local new-connection-mark=WAN2_conn passthrough=yes per-
connection-classifier=both-addresses-and-ports:4/1 src-address=10.0.0.1-
10.0.0.255
48
49 add action=mark-connection chain=prerouting comment="" disabled=no dst-
address-type=!local new-connection-mark=WAN3_conn passthrough=yes per-
connection-classifier=both-addresses-and-ports:4/2 src-address=10.0.0.1-
10.0.0.255
50
51 add action=mark-connection chain=prerouting comment="" disabled=no dst-
address-type=!local new-connection-mark=WAN4_conn passthrough=yes per-
connection-classifier=both-addresses-and-ports:4/3 src-address=10.0.0.1-
10.0.0.255
52
53 add action=mark-routing chain=prerouting comment="" connection-mark=WAN1_conn
disabled=no new-routing-mark=to_WAN1 passthrough=yes
54 add action=mark-routing chain=prerouting comment="" connection-mark=WAN2_conn
disabled=no new-routing-mark=to_WAN2 passthrough=yes
55 add action=mark-routing chain=prerouting comment="" connection-mark=WAN3_conn
disabled=no new-routing-mark=to_WAN3 passthrough=yes
56 add action=mark-routing chain=prerouting comment="" connection-mark=WAN4_conn
disabled=no new-routing-mark=to_WAN4 passthrough=yes
57
58 /ip firewall nat
59 add action=masquerade chain=srcnat comment="" disabled=no out-interface=WAN1
src-address=10.0.0.1-10.0.0.255
60 add action=masquerade chain=srcnat comment="" disabled=no out-interface=WAN2
src-address=10.0.0.1-10.0.0.255
61 add action=masquerade chain=srcnat comment="" disabled=no out-interface=WAN3
src-address=10.0.0.1-10.0.0.255
62 add action=masquerade chain=srcnat comment="" disabled=no out-interface=WAN4
src-address=10.0.0.1-10.0.0.255
63
64 /ip route
65 add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0
gateway=192.168.1.1 routing-mark=to_WAN1 scope=30 target-scope=10
66
67 add check-gateway=ping disabled=no distance=2 dst-address=0.0.0.0/0
gateway=192.168.2.1 routing-mark=to_WAN2 scope=30 target-scope=10
68

http://aacable.wordpress.com/tag/4-wan-load-balance/[24/6/2012 10:46:47 μμ]

4 wan load balance « Syed Jahanzaib Personnel Blog to Share Knowledge !

69 add check-gateway=ping disabled=no distance=3 dst-address=0.0.0.0/0

gateway=192.168.3.1 routing-mark=to_WAN3 scope=30 target-scope=10
70
71 add check-gateway=ping disabled=no distance=4 dst-address=0.0.0.0/0
gateway=192.168.4.1 routing-mark=to_WAN4 scope=30 target-scope=10
72
73 add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0
gateway=192.168.1.1 scope=30 target-scope=10
74
75 add check-gateway=ping comment="" disabled=no distance=2 dst-address=0.0.0.0/0
gateway=192.168.2.1 scope=30 target-scope=10
76
77 add check-gateway=ping comment="" disabled=no distance=3 dst-address=0.0.0.0/0
gateway=192.168.3.1 scope=30 target-scope=10
78
79 add check-gateway=ping comment="" disabled=no distance=4 dst-address=0.0.0.0/0
gateway=192.168.4.1 scope=30 target-scope=10

All Done ! Now Test the link by putting user load, the more multiple users load you put on it,
the better Load Balance result you will get

PCC WITH HOTSPOT

If you wanna run PCC with HOTSPOT on same Mikrotik Server, Put this rule in place to stop
the hotspot from processing people after they have signed into the network.

1 /ip firewall nat add action=accept chain=pre-hotspot disabled=no dst-address-

type=!local hotspot=auth

PCC WITH UN-EQUAL WAN LINKS

If you have Un-Equal WAN Links, for example WAN,1,2,3 are of 4MB and WAN,4 is of 8 Mb,
and you want to force MT to use WAN4 link more then other because of its capacity, Then
you have to Add more PCC rules assigning the same two marks to a specific link i.e WAN4 ,
something like

Code:

1 add chain=prerouting dst-address-type=!local in-interface=Local per-

connection-classifier=both-addresses-and-ports:4/0 action=mark-connection new-
connection-mark=WAN1_conn passthrough=yes
2 add chain=prerouting dst-address-type=!local in-interface=Local per-
connection-classifier=both-addresses-and-ports:4/1 action=mark-connection new-
connection-mark=WAN2_conn passthrough=yes
3 add chain=prerouting dst-address-type=!local in-interface=Local per-
connection-classifier=both-addresses-and-ports:4/2 action=mark-connection new-
connection-mark=WAN3_conn passthrough=yes
4 add chain=prerouting dst-address-type=!local in-interface=Local per-
connection-classifier=both-addresses-and-ports:4/3 action=mark-connection new-
connection-mark=WAN4_conn passthrough=yes
5 add chain=prerouting dst-address-type=!local in-interface=Local per-
connection-classifier=both-addresses-and-ports:4/4 action=mark-connection new-
connection-mark=WAN4_conn passthrough=yes

ZaiB

Comments (54)

Theme: Silver is the New Black. Blog at WordPress.com.

http://aacable.wordpress.com/tag/4-wan-load-balance/[24/6/2012 10:46:47 μμ]