Académique Documents
Professionnel Documents
Culture Documents
Ubiquiti
Home & MikroTik
Education Wireless
Home Mesh WiFi Networking
How To LinuxExperts
Mikrotik MUM Networking News Power Products Training Wireless
If you need any assistance to line balance more than 2 lines together or just need
some help with your RouterOS config, we also offer remote and on‑site consultancy.
See here for more details.
Related Posts:
Categories: How To, Networking | Tags: Consultancy, MikroTik, RouterOS, Routing |
Leave a reply
32 Comments
Tony says:
August 6, 2015 at 20:39
Thank you for information that is correct and works.
This works perfectly!!!!!!!!!!!!!!!!!!!!!!!!!
Reply
RogerCWB says:
October 7, 2015 at 18:00
Hi!
There is something wrong with my config, because I have 2 PPPOE connections with
my provider, but when I tested with speedtest.net I don’t have the double of speed
and just one link is used.
Reply
RogerCWB says:
October 7, 2015 at 20:51
Ok, I solved my problem to have link agregation sum the bandwidth,
but I had to change:
per‑connection‑classifier=both‑addresses
to
per‑connection‑classifier=both‑addresses‑and‑ports
Works but I don’t know what means.
Reply
Nawir says:
September 11, 2016 at 14:16
If I have Dual WAN load balance Active/Active.
I believe for Internet Banking, I need to make sure the session coming
from user source ip > ibank > back to user source ip.
But how to proof that the session follow that behavior.
If I am using traceroute from user pc. It only proof one way session.
If I am using traceroute.org. That only proof another new session from external to
internal.
tq
Reply
DimitrisV says:
October 12, 2016 at 14:59
Hello There
i have one question
in this rule
/ip firewall mangle
add chain=prerouting dst‑address=192.168.88.0/24 in‑interface=bridge‑local
action=accept
how is it possible the traffic that has destination ip address from the network
192.168.88.0/24 to be incoming or inbound traffic to the bridge‑local interface?
From my understanding of networks Packets that have dest ip address from the
192.168.88.0/24 are coming to the local network and thus they are outbound or
outgoing from the bridge‑local interface.
Let me know if i understand something the wrong way
Thank you for your great article
Reply
Bill says:
February 6, 2017 at 15:39
what if the connection was marked and the gateway is offlined? e.g.
the connection is marked “WAN1_Out” but the WAN1_Out gateway is
offline, will the traffic goes to the other route?
Reply
tahsin says:
March 8, 2017 at 18:30
Hi, Thank you for this really wonderful tutorial. I have applied this for
two different provider one with 1Mbps and another with 4Mbps
bandwidth. Now I have added routing giving the 4Mbps link distance 1 and the
1Mbps link distance 4. Now my questions are:
Is this the correct configuration if I want to load balance the bandwidth?
Also I have setup a dstnat rule through the 1Mbps link. But it is not working.
Whereas it works if I physically disconnects the 4Mbps link. Where could be the
problem?
Thanks, Tahsin
Reply
Nick says:
June 18, 2018 at 11:02
If you wish to use them both then you have to have the same distance
set on them, otherwise traffic will only go on the link with the smallest
distance.
If your dstnat rule is being used inbound, you need to mark the inbound traffic, and
then use the mark to make sure that replies are routed out of the same connection.
Otherwise the replies will just follow the default route out of the other wan connection.
Reply
fcforensic says:
May 14, 2017 at 23:05
Hi, I saw your article and it seems to me well done. I wanted to put
your attention to my problem, I realized a load balancing as described
by you, using as one gateway my gateway to my CCR1016 router. The management
system I use to share the band with my associates, Splynx, uses the router port on
which I have addressed the load balance as gateway, the address pool is created
within Splynx. Generating a PPPoE connection between the radius and another port
of the CCR1016. In practice everything works perfectly except that traffic from
individual PPPoE users is routed only to Wan1 and never from the other 3 Wan. I
think the reason for this is because the router does not identify the different
sources as the traffic is encapsulated within the PPPoE.
Do you have tips on how to solve this problem many thanks
Reply
Michal says:
September 21, 2017 at 01:16
As LinITX Trainer mentioned using “per‑connection‑classifier=both‑
addresses” I also faced problem with reply loging in on one forwarded
port. For most of cases it was not working. After choosing both it’s working well.
However you mentioned that it can cause SSL problem now. Is there any other
solution or possibility why this port was blocked? I forwarded my port with NAT rule
dstnat specifying incoming interface to local IP address.
Thank you for support.
Perfect article btw. Thank you !
Reply
Paul says:
February 14, 2018 at 06:56
Hi, great explanation and I seem to have got this working from your
method.
In my case I’d like to be able to check 2 remote hosts on each of my WAN links to
determine internet connectivity in order to failover to another WAN, I just don’t
seem to be able to work out how it should apply with the PCC method when we get
to the routing tables. Any advice much appreciated.
Thanks
Reply
Nick says:
June 18, 2018 at 10:52
You can use mangle rules in the output chain to force connections to the
checked IPs over the specific WAN connection.
Reply
Trev says:
February 28, 2018 at 01:32
First off, I love your post, well written and simple. Is it possible to
apply an Upstream proxy with a username and password to only WAN1
for example??
Our WAN1 also has the same IP address range as the LAN its only our WAN2 we
wish to route traffic to. Any tips would be great, thanks.
Reply
Nick says:
June 18, 2018 at 11:47
You can use MikroTik’s proxy functionality to proxy via an upstream
proxy using the parent‑proxy setting.
If you then wish to route that a certain way you would need to add mangle rules to
match the destination IP of the upstream proxy before the PCC rules.
Reply
Lynas says:
November 29, 2018 at 09:44
How would running a PPPoE server with multiple profiles be affected by
this?
Would I need rules for each PPPoE range and should pass through then be used?
Reply
bilu says:
January 24, 2019 at 10:24
Hello Nicely done. Its all working good but I noticed two drwabacks
1. Most of the time one link is usually more utilized than the other link.
2. there seems to be some https(tp) drops for some web site like you said for the
bank sites, many sites and apps experience this kind of issues.
Is there any solution for this. I hope i made my questions clear, thank you
Reply
Leave a Reply
Name (required)
Mail (will not be published) (required)
Website
Submit Comment
M U LT I T H R E A D C O N S U LTA N T S LT D 8 W I L L I A M S P O R T WAY
L I O N B A R N E S TAT E
NEEDHAM MARKET
SUFFOLK
UNITED KINGDOM
IP6 8RW