Active/Passive Hardware Clustering Mikrotik ROS

RouterOS General
1

Does anyone ever do hardware cluster to insure HA for Mikrotik box?
if yes, can you share how you do it ? :smiley:

2

You can use VRRP to setup a hot-spare router which will take over in case the first fails. THe connection tables, hotspot logins, and other state-dependant things are not dynamically replicated between units. Do a Google search on VRRP for more info.

3

VRRP is good for a single gateway.

In my case, i create one vlan for one customer. so, if i have 1000 customers, i will create 1000 VLAN.

it is really hard work to do with VRRP.

4

Why did you choose VLAN instead of PPPoE ?

5

Why VLAN:

  1. easy local loop (2L,3L, MPLS)
  2. lease line service (transit, corperate customer)
  3. graphing (interface VLAN), customer self-care
  4. no need PPPoE supported device which is less overhead
  5. CPE managed by VLAN (1CPE=1VLAN)

Why not PPPoE, because it doesn’t have what VLAN has. :smiley:

6

What if for example, I (or a hacker) connects to the network with someone’s VLAN ID and uses some of the bandwidth (with a VLAN enabled switch, so customer do not loose connectivity?) ? :sunglasses: How do you manage security,… etc ?

7

At customer side, they can only access to the VLAN that was assigned (access port).
All the access layer switches are secured by ACL, password, security guard and finger print :sunglasses: (Remote and Direct Access).