Guys, i tried to setup mikrotik with load balance. What i don’t understand that the traffic always go only to 1 interface, please somebody help me ![]()
nov/21/2012 16:13:41 by RouterOS 5.21
software id = PQQJ-PZGG
/ip firewall mangle
add action=mark-packet chain=prerouting comment="LOCAL " disabled=yes
dst-address=10.255.1.3 dst-port=5900 new-packet-mark=Local-up
passthrough=no protocol=tcp src-address=10.1.0.0/18
add action=mark-packet chain=postrouting comment=LOCAL disabled=yes
dst-address=10.1.0.0/18 dst-port=5900 new-packet-mark=Local-down
passthrough=no protocol=tcp src-address=10.255.1.3
add action=accept chain=prerouting comment=“PPP Finance” disabled=yes
dst-address-list=Internal src-address-list=Internal
add action=mark-packet chain=forward comment=“PROXY HIT - ANTI LEMOT”
disabled=no dscp=12 new-packet-mark=HIT passthrough=no protocol=tcp
src-address=10.255.1.5
add action=mark-routing chain=prerouting disabled=yes new-routing-mark=
jalur-1 passthrough=no src-address=10.1.3.3
add action=mark-routing chain=prerouting comment=
“PABX Routing - Lewat Streaming” connection-state=established
connection-type=sip disabled=no new-routing-mark=AdminMitra passthrough=
no protocol=udp src-address=10.1.5.254
add action=mark-routing chain=prerouting comment=“Route Streaming” disabled=
no new-routing-mark=AdminMitra passthrough=no src-address-list=AdminMitra
add action=mark-routing chain=prerouting comment=“Route AdminMitra” disabled=
no new-routing-mark=AdminMitra passthrough=no src-address-list=AdminMitra
add action=mark-routing chain=prerouting comment=
“Route Office - Backup line kalau Fastnet putus ke Alucio 1Mbps”
disabled=yes in-interface=eth4-Office new-routing-mark=AdminAlucio
passthrough=yes src-address=10.1.0.0/18
add action=mark-routing chain=prerouting comment=“Route AdminAlucio”
disabled=no new-routing-mark=AdminAlucio passthrough=no src-address-list=
AdminAlucio
add action=mark-connection chain=prerouting comment=“Mark conn - Executive”
disabled=no new-connection-mark=Executive passthrough=yes
src-address-list=Executive
add action=mark-packet chain=prerouting connection-mark=Executive disabled=no
new-packet-mark=Executive passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=
ExecutiveUpload passthrough=yes src-address-list=Executive
add action=mark-connection chain=prerouting comment=“Mark conn - Multimedia”
disabled=no new-connection-mark=Multimedia passthrough=yes
src-address-list=Multimedia
add action=mark-packet chain=prerouting connection-mark=Multimedia disabled=
no new-packet-mark=Multimedia passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=
MultimediaUpload passthrough=yes src-address-list=Multimedia
add action=mark-connection chain=prerouting comment=“Mark conn - Keuangan”
disabled=no new-connection-mark=Bendahara passthrough=yes
src-address-list=Bendahara
add action=mark-packet chain=prerouting connection-mark=Bendahara disabled=no
new-packet-mark=Bendahara passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=
BendaharaUpload passthrough=yes src-address-list=Bendahara
add action=mark-connection chain=prerouting comment=“Mark conn - Pembelian”
disabled=no new-connection-mark=Pembelian passthrough=yes
src-address-list=Pembelian
add action=mark-packet chain=prerouting connection-mark=Pembelian disabled=no
new-packet-mark=Pembelian passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=
PembelianUpload passthrough=yes src-address-list=Pembelian
add action=mark-connection chain=prerouting comment=“Mark conn - Admin”
disabled=no new-connection-mark=Admin passthrough=yes src-address-list=
Admin
add action=mark-packet chain=prerouting connection-mark=Admin disabled=no
new-packet-mark=Admin passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=AdminUpload
passthrough=yes src-address-list=Admin
add action=mark-connection chain=prerouting comment=“Mark conn - Komputer”
disabled=no new-connection-mark=Komputer passthrough=yes
src-address-list=Komputer
add action=mark-packet chain=prerouting connection-mark=Komputer disabled=no
new-packet-mark=Komputer passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=
KomputerUpload passthrough=yes src-address-list=Komputer
add action=mark-connection chain=prerouting comment=“Mark conn - Publikasi”
disabled=no new-connection-mark=Publikasi passthrough=yes
src-address-list=Publikasi
add action=mark-packet chain=prerouting connection-mark=Publikasi disabled=no
new-packet-mark=Publikasi passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=
PublikasiUpload passthrough=yes src-address-list=Publikasi
add action=mark-connection chain=prerouting comment=“Mark conn - Before30”
disabled=no new-connection-mark=Before30 passthrough=yes
src-address-list=Before30
add action=mark-packet chain=prerouting connection-mark=Before30 disabled=no
new-packet-mark=Before30 passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=
Before30Upload passthrough=yes src-address-list=Before30
add action=mark-connection chain=prerouting comment=“Mark conn - Edukasi”
disabled=no new-connection-mark=Edukasi passthrough=yes src-address-list=
Edukasi
add action=mark-packet chain=prerouting connection-mark=Edukasi disabled=no
new-packet-mark=Edukasi passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=
EdukasiUpload passthrough=yes src-address-list=Edukasi
add action=mark-connection chain=prerouting comment=“Mark conn - CG”
disabled=no new-connection-mark=CG passthrough=yes src-address-list=CG
add action=mark-packet chain=prerouting connection-mark=CG disabled=no
new-packet-mark=CG passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=CGUpload
passthrough=yes src-address-list=CG
add action=mark-connection chain=prerouting comment=“Mark conn - Creative”
disabled=no new-connection-mark=Creative passthrough=yes
src-address-list=Creative
add action=mark-packet chain=prerouting connection-mark=Creative disabled=no
new-packet-mark=Creative passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=
CreativeUpload passthrough=yes src-address-list=Creative
add action=mark-connection chain=prerouting comment=“Mark conn - Sekretaris”
disabled=no new-connection-mark=Sekretaris passthrough=yes
src-address-list=Sekretaris
add action=mark-packet chain=prerouting connection-mark=Sekretaris disabled=
no new-packet-mark=Sekretaris passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=
SekretarisUpload passthrough=yes src-address-list=Sekretaris
add action=mark-connection chain=prerouting comment=“Mark conn - ProM”
disabled=no new-connection-mark=ProM passthrough=yes src-address-list=
ProM
add action=mark-packet chain=prerouting connection-mark=ProM disabled=no
new-packet-mark=ProM passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=ProMUpload
passthrough=yes src-address-list=ProM
add action=mark-connection chain=prerouting comment=“Mark conn - AoG”
disabled=no new-connection-mark=AoG passthrough=yes src-address-list=AoG
add action=mark-packet chain=prerouting connection-mark=AoG disabled=no
new-packet-mark=AoG passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=AoGUpload
passthrough=yes src-address-list=AoG
add action=mark-connection chain=prerouting comment=“Mark conn - Anak”
disabled=no new-connection-mark=Anak passthrough=yes src-address-list=
Anak
add action=mark-packet chain=prerouting connection-mark=Anak disabled=no
new-packet-mark=Anak passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=AnakUpload
passthrough=yes src-address-list=Anak
add action=mark-connection chain=prerouting comment=“Mark conn - FLC”
disabled=no new-connection-mark=FLC passthrough=yes src-address-list=FLC
add action=mark-packet chain=prerouting connection-mark=FLC disabled=no
new-packet-mark=FLC passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=FLCUpload
passthrough=yes src-address-list=FLC
add action=mark-connection chain=prerouting comment=“Mark conn - Pustaka”
disabled=no new-connection-mark=Pustaka passthrough=yes src-address-list=
Pustaka
add action=mark-packet chain=prerouting connection-mark=Pustaka disabled=no
new-packet-mark=Pustaka passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=
PustakaUpload passthrough=yes src-address-list=Pustaka
add action=mark-connection chain=prerouting comment=“Mark conn - YSKB”
disabled=no new-connection-mark=YSKB passthrough=yes src-address-list=
YSKB
add action=mark-packet chain=prerouting connection-mark=YSKB disabled=no
new-packet-mark=YSKB passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=YSKBUpload
passthrough=yes src-address-list=YSKB
add action=mark-connection chain=prerouting comment=“Mark conn - FKA”
disabled=no new-connection-mark=FKA passthrough=yes src-address-list=FKA
add action=mark-packet chain=prerouting connection-mark=FKA disabled=no
new-packet-mark=FKA passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=FKAUpload
passthrough=yes src-address-list=FKA
add action=mark-connection chain=prerouting comment=“Mark conn - PaW”
disabled=no new-connection-mark=PaW passthrough=yes src-address-list=PaW
add action=mark-packet chain=prerouting connection-mark=PaW disabled=no
new-packet-mark=PaW passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=PaWUpload
passthrough=yes src-address-list=PaW
add action=mark-connection chain=prerouting comment=“Mark conn - PnB”
disabled=no new-connection-mark=PnB passthrough=yes src-address-list=PnB
add action=mark-packet chain=prerouting connection-mark=PnB disabled=no
new-packet-mark=PnB passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=PnBUpload
passthrough=yes src-address-list=PnB
add action=mark-connection chain=prerouting comment=“Mark conn - Doa”
disabled=no new-connection-mark=Doa passthrough=yes src-address-list=Doa
add action=mark-packet chain=prerouting connection-mark=Doa disabled=no
new-packet-mark=Doa passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=DoaUpload
passthrough=yes src-address-list=Doa
add action=mark-connection chain=prerouting comment=“Mark conn - SDM”
disabled=no new-connection-mark=SDM passthrough=yes src-address-list=SDM
add action=mark-packet chain=prerouting connection-mark=SDM disabled=no
new-packet-mark=SDM passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=SDMUpload
passthrough=yes src-address-list=SDM
add action=mark-connection chain=prerouting comment=“Mark conn - BDI”
disabled=no new-connection-mark=BDI passthrough=yes src-address-list=BDI
add action=mark-packet chain=prerouting connection-mark=BDI disabled=no
new-packet-mark=BDI passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=BDIUpload
passthrough=yes src-address-list=BDI
add action=mark-connection chain=prerouting comment=“Mark conn - Pembicara”
disabled=no new-connection-mark=Pembicara passthrough=yes
src-address-list=Pembicara
add action=mark-packet chain=prerouting connection-mark=Pembicara disabled=no
new-packet-mark=Pembicara passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=
PembicaraUpload passthrough=yes src-address-list=Pembicara
add action=mark-connection chain=prerouting comment=“Mark conn - DHCP”
disabled=no new-connection-mark=DHCP passthrough=yes src-address-list=
DHCP
add action=mark-packet chain=prerouting connection-mark=DHCP disabled=no
new-packet-mark=DHCP passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=DHCPUpload
passthrough=yes src-address-list=DHCP
add action=mark-connection chain=prerouting comment=“Mark conn - Volunteer”
disabled=no new-connection-mark=Volunteer passthrough=yes
src-address-list=Volunteer
add action=mark-packet chain=prerouting connection-mark=Volunteer disabled=no
new-packet-mark=Volunteer passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=
VolunteerUpload passthrough=yes src-address-list=Volunteer
add action=mark-connection chain=prerouting comment=“Mark conn - DataCenter”
disabled=no in-interface=eth3-DataCenter new-connection-mark=DataCenter
passthrough=yes src-address-list=DataCenter
add action=mark-packet chain=prerouting connection-mark=DataCenter disabled=
no in-interface=eth3-DataCenter new-packet-mark=DataCenter passthrough=no
add action=mark-packet chain=forward disabled=no in-interface=eth3-DataCenter
new-packet-mark=DataCenterUpload passthrough=yes src-address-list=
DataCenter
add action=mark-connection chain=prerouting comment=
“Mark conn - KadeptInfotek” disabled=no new-connection-mark=KadeptInfotek
passthrough=yes src-address-list=KadeptInfotek
add action=mark-packet chain=prerouting connection-mark=KadeptInfotek
disabled=no new-packet-mark=KadeptInfotek passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=
KadeptInfotekUpload passthrough=yes src-address-list=KadeptInfotek
add action=mark-connection chain=prerouting comment=“Mark conn - iConnect”
disabled=no new-connection-mark=iConnect passthrough=yes
src-address-list=iConnect
add action=mark-packet chain=prerouting connection-mark=iConnect disabled=no
new-packet-mark=iConnect passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=
iConnectUpload passthrough=yes src-address-list=iConnect
add action=mark-connection chain=prerouting comment=“Mark conn - Kadept”
disabled=no new-connection-mark=Kadept passthrough=yes src-address-list=
Kadept
add action=mark-packet chain=prerouting connection-mark=Kadept disabled=no
new-packet-mark=Kadept passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=KadeptUpload
passthrough=yes src-address-list=Kadept
add action=mark-connection chain=prerouting comment=“Mark conn - Banned”
disabled=no new-connection-mark=Banned passthrough=yes src-address-list=
BANNED
add action=mark-packet chain=prerouting connection-mark=Banned disabled=no
new-packet-mark=Banned passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=BANNEDUpload
passthrough=yes src-address-list=BANNED
add action=mark-connection chain=prerouting comment=“Mark conn - Streaming”
disabled=no new-connection-mark=Streaming passthrough=yes
src-address-list=Streaming
add action=mark-packet chain=prerouting connection-mark=Streaming disabled=no
new-packet-mark=Streaming passthrough=no
add action=mark-packet chain=forward disabled=no new-packet-mark=
StreamingUpload passthrough=yes src-address-list=Streaming
add action=accept chain=prerouting comment=“Start Load Balance” disabled=no
dst-address=192.168.88.242 in-interface=eth4-Office
add action=accept chain=prerouting disabled=no dst-address=111.94.128.0/24
in-interface=eth4-Office
add action=accept chain=prerouting disabled=no dst-address=192.168.99.0/24
in-interface=eth4-Office
add action=mark-connection chain=prerouting comment=
“Kembalikan Koneksi ke ISP Asal” disabled=no in-interface=
eth8-Alucio1Mbps new-connection-mark=ISP1-Conn passthrough=yes
add action=mark-connection chain=prerouting disabled=no in-interface=
eth9-FastNet1,5Mbps new-connection-mark=ISP2-Conn passthrough=yes
add action=mark-connection chain=prerouting disabled=no in-interface=
eth9a-FastNet1,5Mbps new-connection-mark=ISP3-Conn passthrough=yes
add action=mark-connection chain=prerouting comment=
“Start Load Balance PCC - Office” connection-state=new disabled=no
dst-address-type=!local in-interface=eth4-Office new-connection-mark=
ISP1-Conn passthrough=yes per-connection-classifier=
both-addresses-and-ports:3/0
add action=mark-connection chain=prerouting connection-state=new disabled=no
dst-address-type=!local in-interface=eth4-Office new-connection-mark=
ISP2-Conn passthrough=yes per-connection-classifier=
both-addresses-and-ports:3/1
add action=mark-connection chain=prerouting connection-state=new disabled=no
dst-address-type=!local in-interface=eth4-Office new-connection-mark=
ISP3-Conn passthrough=yes per-connection-classifier=
both-addresses-and-ports:3/2
add action=mark-connection chain=prerouting comment=
“Start Load Balance PCC - Data Center” connection-state=new disabled=no
dst-address-type=!local in-interface=eth3-DataCenter new-connection-mark=
ISP1-Conn passthrough=yes per-connection-classifier=
both-addresses-and-ports:3/0
add action=mark-connection chain=prerouting connection-state=new disabled=no
dst-address-type=!local in-interface=eth3-DataCenter new-connection-mark=
ISP2-Conn passthrough=yes per-connection-classifier=
both-addresses-and-ports:3/1
add action=mark-connection chain=prerouting connection-state=new disabled=no
dst-address-type=!local in-interface=eth3-DataCenter new-connection-mark=
ISP3-Conn passthrough=yes per-connection-classifier=
both-addresses-and-ports:3/2
add action=mark-routing chain=prerouting comment=“Routing Mark”
connection-mark=ISP1-Conn disabled=no in-interface=eth4-Office
new-routing-mark=ISP1 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=ISP2-Conn disabled=
no in-interface=eth4-Office new-routing-mark=ISP2 passthrough=yes
add action=mark-routing chain=prerouting disabled=no in-interface=eth4-Office
new-routing-mark=ISP3 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=ISP1-Conn disabled=
no in-interface=eth3-DataCenter new-routing-mark=ISP1 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=ISP2-Conn disabled=
no in-interface=eth3-DataCenter new-routing-mark=ISP2 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=ISP3-Conn disabled=
no in-interface=eth3-DataCenter new-routing-mark=ISP3 passthrough=yes
add action=mark-routing chain=output connection-mark=ISP1-Conn disabled=no
new-routing-mark=ISP1 passthrough=no
add action=mark-routing chain=output connection-mark=ISP2-Conn disabled=no
new-routing-mark=ISP2 passthrough=no
add action=mark-routing chain=output connection-mark=ISP3-Conn disabled=no
new-routing-mark=ISP3 passthrough=no
And here is my route
nov/21/2012 16:13:52 by RouterOS 5.21
software id = PQQJ-PZGG
/ip route
add check-gateway=ping comment=“Admin Mitra” disabled=no distance=1
dst-address=0.0.0.0/0 gateway=192.168.1.1 routing-mark=AdminMitra scope=
30 target-scope=10
add check-gateway=ping comment=“Admin Alucio” disabled=no distance=1
dst-address=0.0.0.0/0 gateway=192.168.88.1 routing-mark=AdminAlucio
scope=30 target-scope=10
add check-gateway=ping comment=“Load Balance PCC” disabled=no distance=1
dst-address=0.0.0.0/0 gateway=192.168.88.1 routing-mark=ISP1 scope=30
target-scope=10
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=
111.94.132.1 routing-mark=ISP2 scope=30 target-scope=10
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=
192.168.99.1 routing-mark=ISP3 scope=30 target-scope=10
add check-gateway=ping comment=ALUCIO disabled=yes distance=1 dst-address=
0.0.0.0/0 gateway=192.168.88.1 routing-mark=Office scope=30 target-scope=
10
add comment=“Executive to Mitra” disabled=no distance=1 dst-address=0.0.0.0/0
gateway=192.168.1.1 routing-mark=Executive scope=30 target-scope=10
add comment=“Server to Office” disabled=no distance=1 dst-address=10.1.0.0/18
gateway=eth4-Office routing-mark=Server scope=30 target-scope=10
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=
eth8-Alucio1Mbps routing-mark=VPN scope=30 target-scope=10
add check-gateway=ping comment=ALUCIO disabled=no distance=1 dst-address=
0.0.0.0/0 gateway=192.168.88.1 scope=30 target-scope=10
add check-gateway=ping comment=“FASTNET 2” disabled=no distance=1
dst-address=0.0.0.0/0 gateway=192.168.99.1 scope=30 target-scope=10
add check-gateway=ping comment=“FASTNET 1” disabled=no distance=1
dst-address=0.0.0.0/0 gateway=111.94.132.1 scope=30 target-scope=10
add check-gateway=ping comment=“L2TP - MES” disabled=no distance=1
dst-address=10.6.0.0/18 gateway=172.16.254.6 scope=30 target-scope=10
add check-gateway=ping comment=“L2TP - PLM” disabled=no distance=1
dst-address=10.13.0.0/18 gateway=172.16.254.13 scope=30 target-scope=10
add disabled=no distance=1 dst-address=202.43.250.226/32 gateway=
202.43.250.225 scope=30 target-scope=10
Is there anything wrong ?