Load Balancing With PCC

RouterOS General
1

Hi,
I followed this MT Wiki page and got PCC working in no time.
https://help.mikrotik.com/docs/display/ROS/Firewall+Marking#FirewallMarking-Example3(PCC)

But can I force certain IP addresses in LAN to prefer certain WAN links?

What I mean is this:
up until now there was one slow WAN link with a static IP. VPN (L2TP) is set up there, IPSec tunnel to another site is there and some port forwarding to a LAN address is also set up.
Now a second WAN link, a much faster one was added, with a DHCP IP.
What I want to achieve is that most clients in LAN use the new WAN link and fall back to old, slow one when fast link fails.
At the same time I want the server inside LAN to use old, slow WAN link, because there is a SMTP server and static IP from ISP and use new, fast WAN link only when slow one fails.
Is this possible at all with PCC?

Thanks for your time in advance!
Ivars

2

Yes.

3

Care to share any detail?

4

Yes, after you provide an accurate network diagrams and full config.

/export file=anynameyouwish ( minus router serial number and any public WANIP info )

OR
Hop on the bus to get to Brivibas gatve 214i, bring plenty of coffee and donuts and Druvis will help you out. :slight_smile:)

5

As you say. Config is attached.

What I want to achieve is route traffic from 10.67.20.30 through ether1 and the rest of 10.67.20.0/24 through ether2 until any link fails and then fail over to the other link.

Thanks in advance.
Ivars
anynameyouwish.rsc (3.23 KB)

6

Do you have any users coming in on wan1 or wan2 ( port forwarding to any servers ). It is not clear all the flows of information… just noting one flow is not usually the whole truth, :wink:
Which would be plain to see on a good network diagram.

Will have a look at the config.


Okay so you have two subnets you want PCCd,
The third subnet you dont want PCCd, and want all to go to one WAN except for the other IP to go to the other wan.

Reference all users of subnet 10 etc.., what happens if the main wan for them is down, do you want them to be able to access the WAN the single user is on?
Vice versa what if the single user WAN is down, do you want the single user to access the other WAN.

7

The config is from CHR which is set up for test purpose.
Let’s assume ether1 is interface where users come in - port forwarding and VPN.
I really don’t need step by step guide, but plain “Yes” is also not an acceptable answer if you are “forum guru”.
Again, thanks for you time.
Ivars

8

It is perfectly acceptable answer considering the lack of information provided.
Since you are the expert, then I guess you can solve it on your own. :slight_smile:

This is basic childs play config compared to PCC which is far more complex and you mastered that.
I have put the silver spoon away which Holvoe prefers LOL.
Read this, all the answers are there… Para’s I & J –> https://forum.mikrotik.com/viewtopic.php?t=182373

9

I am an expert, but you are a clown.

10

Yes many people find me amusing. If everybody was laughing we would have no wars!