I am trying to connect between 2 networks using mikrotik. Let's call it Site A and Site B. Connection between the 2 sites will be using SFP. Site A belongs to us and we got a mikrotik CCR1036-12G-4S. There will be 2 lines coming from Site B. So we can setup the two line as either Active-Passive or Active-Active. More important is that failover need to be automatic so when 1 line is down it does not affect the connection.
So far from my research, seems like PCC is a suitable candidate. Perhaps other protocols like NTH, ECMP, OSPF is more suitable?
Is there a setup where I could put a mikrotik on each line? Then connect both the 2 mikrotik into my switches in the backend thus creating a redundancy in case one mikrotik die.
Would appreciate any useful input on how I should configure this using mikrotik.
Thanks!
Re: Need idea on setting up dual WAN connection
Assuming Site B will handle the load balancing (using ECMP). If I setup each line in Site B with different IP then I do not really need to configure load balancing in Site A, right?
So traffic will come from either Site B1 or B2. Mikrotik will just route them accordingly to the backend. This is okay?
Code: Select all
Site B1 (192.168.10.1) --------------|
|----------> Mikrotik (SFP1 192.168.10.2), (SFP2 192.168.20.2) -----> Backend switch
Site B2 (192.168.20.1) --------------|
So traffic will come from either Site B1 or B2. Mikrotik will just route them accordingly to the backend. This is okay?
Re: Need idea on setting up dual WAN connection
After some tests and learning experience, I think I got it. I just need to bridge the 2 connections and route the traffic accordingly. The above picture works and I do not need to implement any complicated load balancing setup.....yet.
So with the basics out of the way, I would like to take this one step further. Having 2 mikrotiks. The main reason for doing this is hardware redundancy. So it will end up with something like this:
Any thoughts on this? I would be using some sort of cross connection between switches somewhere. I do not want to have any loopbacks. Should I do this at the Mikrotik level or switches level?
Sorry, I am a bit noob on this. Any ideas are welcomed.
So with the basics out of the way, I would like to take this one step further. Having 2 mikrotiks. The main reason for doing this is hardware redundancy. So it will end up with something like this:
Code: Select all
Site B1 (192.168.10.1) ------||-----> Mikrotik A1 (SFP1, 192.168.10.1) ----->|
|---> Backend switch
Site B2 (192.168.20.1) ------||-----> Mikrotik A2 (SFP1, 192.168.20.2) ----->|
Sorry, I am a bit noob on this. Any ideas are welcomed.
Re: Need idea on setting up dual WAN connection
Looks like VRRP is the way to go with above. Any comments?
Re: Need idea on setting up dual WAN connection
using 2 mikrotiks, i'd bond the links together with balance-rr.
if you want hardware redundancy you would need 4 routers, do a full mesh between them with vrrp on the switch side.
If you need routing ospf would work great, else you can use spanning tree - if it's the same subnet in A and B.
although...if you don't need routing there why not connect the switches directly between them ?
if you want hardware redundancy you would need 4 routers, do a full mesh between them with vrrp on the switch side.
If you need routing ospf would work great, else you can use spanning tree - if it's the same subnet in A and B.
although...if you don't need routing there why not connect the switches directly between them ?
Re: Need idea on setting up dual WAN connection
Did some tests on VRRP.
Here is what I am at:
The reason I am using dual master/slave is because without it, the slave connection would not work when data are transmitted through one side. For example, Site B2 transmit data through A2.
With this method, there is one problem. When either side of the VRRP connection is down, Let's say line A1 (172.16.10.1) is down. Connection from B1(192.168.10.3) will be down because this side is still up. I would need to manual (or create a script) to bring down A1(192.168.10.1) for that transmission will use B2 to A2.
I can create a redundant line from B1 to A2 and B2 to A1 but that would expensive cause it is using leased line. Any better ideas?
Here is what I am at:
Code: Select all
Site B1 (192.168.10.3) ----||---> [ (192.168.10.1) Mikrotik A1 (172.16.10.1) ---->] ---- backend switch
[ ]
VRRP (dual M/S)(192.168.10.254)<--[ ]---> VRRP (dual M/S)(172.16.10.254)
[ ]
Site B2 (192.168.10.4) ----||---> [ (192.168.10.2) Mikrotik A2 (172.16.10.2) ---->] ---- backend switch
With this method, there is one problem. When either side of the VRRP connection is down, Let's say line A1 (172.16.10.1) is down. Connection from B1(192.168.10.3) will be down because this side is still up. I would need to manual (or create a script) to bring down A1(192.168.10.1) for that transmission will use B2 to A2.
I can create a redundant line from B1 to A2 and B2 to A1 but that would expensive cause it is using leased line. Any better ideas?
Re: Need idea on setting up dual WAN connection
Wouldn't a "route check" (ex ping check) of the gateway on 192.168.10.1 to 172.16.10.1 solve the issue? Once unavailable, it would become inactive and fallback on second connection.