Mikrotik1.png
Hi, i need help as i totally out of idea and search around i got no hope on the setup.
Basically, my
ether1 carry 3 vlan, vlan220, vlan222 (fixed ip), and vlan 223 (DSL private ip).
ether2 is another DSL private ip.
i got a task to load balance DSL internet for vlan 223 & the ether2, the Office switch is connect to ether3 (Office LAN).
and, for the GM, the laptop will connect to the ether9 with public ip.
hereby is my setup, but the vlan220 and vlan223 is not working.
where will be the problem ???
\
nov/19/2017 02:01:18 by RouterOS 6.35.4
software id = 7CTU-GR4Y
/interface bridge
add disabled=yes name=bridge1
/interface ethernet
set [ find default-name=ether2 ] name=ether2-WAN2
set [ find default-name=ether3 ] name=ether3-Local
set [ find default-name=ether5 ] master-port=ether3-Local
set [ find default-name=ether9 ] name="ether9"
/interface vlan
add interface=ether1 name=vlan220 vlan-id=220
add interface=ether1 name=vlan222 vlan-id=222
add interface=ether1 name=vlan223-WAN1 vlan-id=223
/ip hotspot profile
add hotspot-address=192.168.0.1 login-by=mac,cookie,http-chap mac-auth-mode=
mac-as-username-and-password name=hsprof1 nas-port-type=ethernet
radius-default-domain=10.10.0.1 use-radius=yes
/ip pool
add name=hs-pool-3 ranges=192.168.0.2-192.168.0.254
/ip dhcp-server
add address-pool=hs-pool-3 disabled=no interface=ether3-Local lease-time=1h
name=dhcp1
/ip hotspot
add address-pool=hs-pool-3 interface=ether3-Local name=hotspot1 profile=
hsprof1
/ip hotspot user profile
set [ find default=yes ] address-pool=hs-pool-3
/ppp profile
set *0 dns-server=8.8.8.8,8.8.4.4 local-address=hs-pool-3 remote-address=
hs-pool-3
/interface bridge port
add bridge=bridge1 interface=vlan222
add bridge=bridge1 interface="ether9"
/interface bridge settings
set allow-fast-path=no use-ip-firewall=yes use-ip-firewall-for-vlan=yes
/interface pppoe-server server
add disabled=no interface=ether3-Local one-session-per-host=yes service-name=\office
/ip address
add address=10.50.5.10/24 interface=vlan223-WAN1 network=10.50.5.0
add address=10.10.30.6/24 interface=ether2-WAN2 network=10.10.30.0
add address=192.168.0.1/24 interface=ether3-Local network=192.168.0.0
add address=47.127.228.132/28 interface=vlan222 network=45.117.228.128
/ip dhcp-server network
add address=192.168.0.0/24 comment="hotspot network" gateway=192.168.0.1
/ip dns
set cache-size=5000KiB max-udp-packet-size=512 servers=8.8.8.8,8.8.4.4
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=
"place hotspot rules here" disabled=yes
/ip firewall mangle
add action=mark-connection chain=input in-interface=vlan223-WAN1
new-connection-mark=WAN1_conn
add action=mark-connection chain=input in-interface=ether2-WAN2
new-connection-mark=WAN2_conn
add action=mark-routing chain=output connection-mark=WAN1_conn
new-routing-mark=to_WAN1
add action=mark-routing chain=output connection-mark=WAN2_conn
new-routing-mark=to_WAN2
add chain=prerouting dst-address=10.50.5.0/24 in-interface=ether3-Local
add chain=prerouting dst-address=10.10.30.0/24 in-interface=ether3-Local
add action=mark-connection chain=prerouting dst-address-type=!local
in-interface=ether3-Local new-connection-mark=WAN1_conn
per-connection-classifier=both-addresses-and-ports:2/0
add action=mark-connection chain=prerouting dst-address-type=!local
in-interface=ether3-Local new-connection-mark=WAN2_conn
per-connection-classifier=both-addresses-and-ports:2/1
add action=mark-routing chain=prerouting connection-mark=WAN1_conn
in-interface=ether3-Local new-routing-mark=to_WAN1
add action=mark-routing chain=prerouting connection-mark=WAN2_conn
in-interface=ether3-Local new-routing-mark=to_WAN2
add action=mark-connection chain=input in-interface=vlan222
new-connection-mark=Wan222
add action=mark-routing chain=output connection-mark=Wan222 new-routing-mark=
to_Wan222
add chain=prerouting dst-address=47.127.228.0/24 in-interface="ether9"
add action=mark-connection chain=prerouting in-interface="ether9"
new-connection-mark=Wan222
add action=mark-routing chain=prerouting connection-mark=Wan222 in-interface=
"ether9" new-routing-mark=to_Wan222
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=
"place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat disabled=yes out-interface=vlan223-WAN1
src-address=192.168.0.0/24
add action=masquerade chain=srcnat out-interface=ether2-WAN2 src-address=
192.168.0.0/24
add action=masquerade chain=srcnat out-interface=vlan222 src-address=
0.0.0.0/0
add action=masquerade chain=srcnat comment="masquerade hotspot network"
src-address=192.168.0.0/24
/ip hotspot ip-binding
add address=192.168.0.253 comment=Vincent_Laptop mac-address=
40:3F:8C:B7:E0:2C to-address=192.168.0.253 type=bypassed
add address=192.168.0.22 comment=Management_Office mac-address=
1C:A5:32:B8:E7:32 to-address=192.168.0.22 type=bypassed
/ip hotspot user
/ip route
add check-gateway=ping distance=1 gateway=10.50.5.1 routing-mark=to_WAN1
add check-gateway=ping distance=1 gateway=10.10.30.1 routing-mark=to_WAN2
add check-gateway=ping distance=1 gateway=10.50.5.1
add check-gateway=ping distance=2 gateway=10.10.30.1
/ppp aaa
set interim-update=5m use-radius=yes
/radius incoming
set accept=yes
/snmp
set enabled=yes trap-version=2
/system clock manual
set time-zone=+05:00
/system identity
set name=PKA-Router
/system logging
add disabled=yes topics=ppp
/system ntp client
set enabled=yes primary-ntp=203.158.118.2 secondary-ntp=116.193.170.16
/system routerboard settings
set boot-device=flash-boot protected-routerboot=disabled