2010/09/25

Load Balancing dg Mikrotik

Ether1 berhubungan dengan ISP1 (WLAN), Ether2 berhubungan dengan Speedy dan Ether3 untuk jaringan localnya..

Dengan menggunakan mikrotik ada 3 komponen utama yg digunakan untuk membuat Load balancing yaitu :
ip firewall nat
ip firewall mangle
ip route

Berikut lampiran konfigurasinya :

[admin@Mikrotik] > ip address print

Flags: X - disabled, I - invalid, D - dynamic

# ADDRESS NETWORK BROADCAST INTERFACE

0 192.168.1.2/24 192.168.1.0 192.168.1.255 to-speedy

1 192.168.0.99/24 192.168.0.0 192.168.0.255 local

2 203.190.41.xx/29 203.190.41.xx 203.190.41.xx to-jatara

[admin@Mikrotik] > ip route print

Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf

# DST-ADDRESS PREFSRC G GATEWAY DISTANCE INTERFACE

0 ADC 192.168.0.0/24 192.168.0.99 local

1 ADC 192.168.1.0/24 192.168.1.2 to-speedy

2 ADC 203.190.41.xx/29 203.190.41.xx to-jatara

3 A S 0.0.0.0/0 r 192.168.1.1 to-speedy

4 A S 0.0.0.0/0 r 192.168.1.1 to-speedy

5 A S 0.0.0.0/0 r 203.190.41.xx to-jatara

[admin@Mikrotik] > ip firewall mangle print

Flags: X - disabled, I - invalid, D - dynamic

0 ;;; jatara

chain=prerouting in-interface=local connection-state=new nth=1,1,0 action=mark-connection

new-connection-mark=jatara

passthrough=yes
1 chain=prerouting in-interface=local connection-mark=jatara action=mark-routing

new-routing-mark=jatara passthrough=no


2 ;;; speedy

chain=prerouting in-interface=local connection-state=new nth=1,1,1 action=mark-connection

new-connection-mark=speedy

passthrough=yes


3 chain=prerouting in-interface=local connection-mark=speedy action=mark-routing

new-routing-mark=speedy passthrough=no


4 chain=postrouting out-interface=local dst-address=192.168.0.17 action=mark-packet

new-packet-mark=komp17-down

passthrough=no

[admin@Mikrotik] > ip firewall nat print

Flags: X - disabled, I - invalid, D - dynamic

0 chain=srcnat connection-mark=jatara action=src-nat to-addresses=203.190.41.90 to-ports=0-65535


1 chain=srcnat connection-mark=speedy action=src-nat to-addresses=192.168.1.2 to-ports=0-65535


[admin@Mikrotik] > ip dns print

primary-dns: 203.190.40.x

secondary-dns: 202.134.0.155

allow-remote-requests: yes

cache-size: 4096KiB

cache-max-ttl: 1w

cache-used: 90KiB

[admin@Mikrotik] > interface print

Flags: X - disabled, D - dynamic, R - running

# NAME TYPE

RX-RATE TX-RATE MTU

0 R to-jatara ether 0

0 1500

1 R to-speedy ether 0

0 1500

2 R local ether 0

0 1500

Untuk membuat supaya ip gateway lokal bisa dijadikan DNS lokal maka pengaturannya ada dibawah ini, dan yg perlu diperhatikan adalah yang ada tulisan allow-remote-request : yes

admin@Mikrotik] > ip dns print

primary-dns: 203.190.40.x

secondary-dns: 202.134.0.155

allow-remote-requests: yes

cache-size: 4096KiB

cache-max-ttl: 1w

cache-used: 90KiB