Loadbalancer Mikrotik with PCC using PPPoe-Client connection

RouterOS General
1

Hi, i've two pppoe connections with the same provider and i want to setup a load balancer via ppc. Do you think that this config is correct?

FIREWALL SECTION

/ ip firewall mangle
add chain=input in-interface=WAN1 action=mark-connection new-connection-mark=WAN1_mark
add chain=input in-interface=WAN2 action=mark-connection new-connection-mark=WAN2_mark

add chain=output connection-mark=WAN1_mark action=mark-routing new-routing-mark=to_ISP1
add chain=output connection-mark=WAN2_mark action=mark-routing new-routing-mark=to_ISP2

add chain=prerouting dst-address-type=!LAN in-interface=LAN per-connection-classifier=both-addresses:2/0
action=mark-connection new-connection-mark=WAN1_mark passthrough=yes

add chain=prerouting dst-address-type=!LAN in-interface=LAN per-connection-classifier=both-addresses:2/1
action=mark-connection new-connection-mark=WAN2_mark passthrough=yes

add chain=prerouting connection-mark=WAN1_mark in-interface=LAN action=mark-routing new-routing-mark=to_ISP1
add chain=prerouting connection-mark=WAN2_mark in-interface=LAN action=mark-routing new-routing-mark=to_ISP2

add action=mark-connection chain=forward connection-state=new disabled=no in-interface=WAN1 new-connection-mark=port_forward1_connection passthrough=no
add action=mark-connection chain=forward connection-state=new disabled=no in-interface=WAN2 new-connection-mark=port_forward2_connection passthrough=no
add action=mark-routing chain=prerouting connection-mark=port_forward1_connection disabled=no new-routing-mark=to_ISP1 passthrough=no in-interface=LAN
add action=mark-routing chain=prerouting connection-mark=port_forward2_connection disabled=no new-routing-mark=to_ISP2 passthrough=no in-interface=LAN

ROUTE SECTION

/ip route
add dst-address=8.8.8.8 gateway=WAN1 scope=10
add dst-address=208.67.222.222 gateway=WAN2 scope=10

add distance=1 gateway=8.8.8.8 routing-mark=to_ISP1 check-gateway=ping
add distance=2 gateway=208.67.222.222 routing-mark=to_ISP2 check-gateway=ping

add dst-address=10.0.0.1 gateway=8.8.8.8 scope=10 target-scope=10 check-gateway=ping
add dst-address=10.0.0.2 gateway=208.67.222.222 scope=10 target-scope=10 check-gateway=ping

add distance=1 gateway=10.0.0.1 routing-mark=to_ISP1
add distance=2 gateway=10.0.0.2 routing-mark=to_ISP2

add distance=1 gateway=10.0.0.1
add distance=2 gateway=10.0.0.2

/ip firewall nat
add chain=srcnat out-interface=WAN1 action=masquerade
add chain=srcnat out-interface=WAN2 action=masquerade


Best regards

--
Francesco Gabriele

2

Not sure of especially mangle part :frowning:

3

Looks good. You should however check your routing rules. Seems like you are rooting to DNS server 8.8.8.8
That can’t be correct.
Also I don’t understand the last set of mangle rules.

4

The latest I’ve tested in a config with ethernet physical, are for those without portforwarding does not work.

Thanks for the answer you have been very kind

5

you think you can make a script that sends an email when it goes down one of the two connections?