Good morning,
I’m quite new to RouterOS, I’ve configured a new router with 2 WAN connected via pppoe and I’ve configured load balancing with PCC.
Everything seems to work. but if I’ve to disable the default (base) fasttrack-connection forward chain rule, as I read around since mangle and fasttrack are not compatible.
I read also this Sindy’s post: http://forum.mikrotik.com/t/static-default-route-im-missing-something/119183/9 and at the end I’m using the below fasttrack-connection rule to which I added the connection-mark=no-mark condition.
add action=fasttrack-connection chain=forward comment=
“fast-track for established,related” connection-mark=no-mark
connection-state=established,related hw-offload=yes
My purpose, at the end, is to keep in load balancing the 2 wan, also if I’d like to use as much as possible the fasttrack to sppedup and reduce cpu load.
Am’I doing the right thing or not?
Thanks in advance for your support.
Regards.
Well logically speaking that seems correct but do realize that if you are PCCing all your LAN to WAN traffic, what is left (how much is left) to fastrack, probably some LAN to LAN traffic?
With regard to remaining traffic, you are completely right.
I checked the statics for the dummy rules created for fasttrack (in firewall filter and mangle) and there are 0 bytes / packets passing.
Moreover, through firewall, I also (mostly) blocked inter-vlan traffic since I need to protect the different vlans.
Since I’m a novice with mikrotik and I’m learning from manuals and forum, I’m interested to understand if the addition I did ‘connection-mark=no-mark’ to the default fasttrack rule, is the right approach to do not bypass the PCC mangling or are there other solutions. I googled a lot and it seems to me this is the only way (apart from disabling the rule itself).
There are other ways, such as accepting traffic using the normal established rule (inbound and outbound) just for the affected traffic just before the fast track rule…
In your case the no mark is most efficient and easy.