2010/09/25

Load Balancing dg Mikrotik

Ether1 berhubungan dengan ISP1 (WLAN), Ether2 berhubungan dengan Speedy dan Ether3 untuk jaringan localnya..

Dengan menggunakan mikrotik ada 3 komponen utama yg digunakan untuk membuat Load balancing yaitu :
ip firewall nat
ip firewall mangle
ip route

Berikut lampiran konfigurasinya :

[admin@Mikrotik] > ip address print

Flags: X - disabled, I - invalid, D - dynamic

# ADDRESS NETWORK BROADCAST INTERFACE

0 192.168.1.2/24 192.168.1.0 192.168.1.255 to-speedy

1 192.168.0.99/24 192.168.0.0 192.168.0.255 local

2 203.190.41.xx/29 203.190.41.xx 203.190.41.xx to-jatara

[admin@Mikrotik] > ip route print

Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf

# DST-ADDRESS PREFSRC G GATEWAY DISTANCE INTERFACE

0 ADC 192.168.0.0/24 192.168.0.99 local

1 ADC 192.168.1.0/24 192.168.1.2 to-speedy

2 ADC 203.190.41.xx/29 203.190.41.xx to-jatara

3 A S 0.0.0.0/0 r 192.168.1.1 to-speedy

4 A S 0.0.0.0/0 r 192.168.1.1 to-speedy

5 A S 0.0.0.0/0 r 203.190.41.xx to-jatara

[admin@Mikrotik] > ip firewall mangle print

Flags: X - disabled, I - invalid, D - dynamic

0 ;;; jatara

chain=prerouting in-interface=local connection-state=new nth=1,1,0 action=mark-connection

new-connection-mark=jatara

passthrough=yes
1 chain=prerouting in-interface=local connection-mark=jatara action=mark-routing

new-routing-mark=jatara passthrough=no


2 ;;; speedy

chain=prerouting in-interface=local connection-state=new nth=1,1,1 action=mark-connection

new-connection-mark=speedy

passthrough=yes


3 chain=prerouting in-interface=local connection-mark=speedy action=mark-routing

new-routing-mark=speedy passthrough=no


4 chain=postrouting out-interface=local dst-address=192.168.0.17 action=mark-packet

new-packet-mark=komp17-down

passthrough=no

[admin@Mikrotik] > ip firewall nat print

Flags: X - disabled, I - invalid, D - dynamic

0 chain=srcnat connection-mark=jatara action=src-nat to-addresses=203.190.41.90 to-ports=0-65535


1 chain=srcnat connection-mark=speedy action=src-nat to-addresses=192.168.1.2 to-ports=0-65535


[admin@Mikrotik] > ip dns print

primary-dns: 203.190.40.x

secondary-dns: 202.134.0.155

allow-remote-requests: yes

cache-size: 4096KiB

cache-max-ttl: 1w

cache-used: 90KiB

[admin@Mikrotik] > interface print

Flags: X - disabled, D - dynamic, R - running

# NAME TYPE

RX-RATE TX-RATE MTU

0 R to-jatara ether 0

0 1500

1 R to-speedy ether 0

0 1500

2 R local ether 0

0 1500

Untuk membuat supaya ip gateway lokal bisa dijadikan DNS lokal maka pengaturannya ada dibawah ini, dan yg perlu diperhatikan adalah yang ada tulisan allow-remote-request : yes

admin@Mikrotik] > ip dns print

primary-dns: 203.190.40.x

secondary-dns: 202.134.0.155

allow-remote-requests: yes

cache-size: 4096KiB

cache-max-ttl: 1w

cache-used: 90KiB

Konfigurasi PC router mikrotik untuk load balancing

Menggunakan 3 etrernet card

ether1 ==> wireless
ether2 ==> speedy
ethet3 ==> Lan

mikrotik command:
/ip address add address 202.152.74.1/32 interface ether1
/ip address add address 192.168.1.2/32 interface ether2
/ip address add address 192.168.10.1/24 interface ether3

Membagi Ip menjadi 2 Group


add chain=prerouting action=mark-connection src-address 192.168.10.0/25 new-routing-mark= Group-A
add chain=prerouting action=mark-connection src-address 192.168.10.128/25 new-routing-mark=Group-B

Default gw masing-masing Group

Group-A=192.168.10.0/25 default gw 192.168.1.1

Group-B=192.168.10.128/25 default gw 202.152.74.128

mikrotik command:

/ip route add gateway=192.168.1.1 routing-mark=Group-A
/ip route add gateway=202.152.74.128 routing-mark=Group-B

Nat ip local

192.168.10.0/24 ==>masquerade

mikrotik command:
/ip firewall nat add chain=srcnat src-address 192.168.10.0/24 action=masquerade