-
-
Save eignatov/c8ab9382b7b03f844a83625f0fecf107 to your computer and use it in GitHub Desktop.
mikrotik loadbalance and failover script
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| / ip address | |
| add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=LAN | |
| add address=10.111.0.2/24 network=10.111.0.0 broadcast=10.111.0.255 interface=ISP1 | |
| add address=10.112.0.2/24 network=10.112.0.0 broadcast=10.112.0.255 interface=ISP2 | |
| / ip firewall mangle | |
| add chain=prerouting dst-address=10.111.0.0/24 action=accept in-interface=LAN | |
| add chain=prerouting dst-address=10.112.0.0/24 action=accept in-interface=LAN | |
| add chain=prerouting in-interface=ISP1 connection-mark=no-mark action=mark-connection \ | |
| new-connection-mark=ISP1_conn | |
| add chain=prerouting in-interface=ISP2 connection-mark=no-mark action=mark-connection \ | |
| new-connection-mark=ISP2_conn | |
| add chain=prerouting in-interface=LAN connection-mark=no-mark dst-address-type=!local \ | |
| per-connection-classifier=both-addresses:2/0 action=mark-connection new-connection-mark=ISP1_conn | |
| add chain=prerouting in-interface=LAN connection-mark=no-mark dst-address-type=!local \ | |
| per-connection-classifier=both-addresses:2/1 action=mark-connection new-connection-mark=ISP2_conn | |
| add chain=prerouting connection-mark=ISP1_conn in-interface=LAN action=mark-routing \ | |
| new-routing-mark=to_ISP1 | |
| add chain=prerouting connection-mark=ISP2_conn in-interface=LAN action=mark-routing \ | |
| new-routing-mark=to_ISP2 | |
| add chain=output connection-mark=ISP1_conn action=mark-routing new-routing-mark=to_ISP1 | |
| add chain=output connection-mark=ISP2_conn action=mark-routing new-routing-mark=to_ISP2 | |
| / ip route | |
| add dst-address=0.0.0.0/0 gateway=10.111.0.1 routing-mark=to_ISP1 check-gateway=ping | |
| add dst-address=0.0.0.0/0 gateway=10.112.0.1 routing-mark=to_ISP2 check-gateway=ping | |
| add dst-address=0.0.0.0/0 gateway=10.111.0.1 distance=1 check-gateway=ping | |
| add dst-address=0.0.0.0/0 gateway=10.112.0.1 distance=2 check-gateway=ping | |
| / ip firewall nat | |
| add chain=srcnat out-interface=ISP1 action=masquerade | |
| add chain=srcnat out-interface=ISP2 action=masquerade |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment