balanceamento 2013

Baseado no Balance proposto no MUM realizado na África do Sul, em Julho de 2013.



[Tens de ter uma conta e sessão iniciada para poderes visualizar este link]

/ip firewall address-list
add address=10.0.0.0/24 disabled=no list=GW01_ether4

/ip firewall mangle
add action=mark-routing chain=prerouting disabled=no dst-port=443 \
    new-routing-mark=HTTPS passthrough=no protocol=tcp
add action=accept chain=prerouting comment=\
    "Aceitamos todo o tr\E1fego para a Rede Loca" disabled=no \
    dst-address-list=GW01_ether4 src-address-list=GW01_ether4
add action=accept chain=prerouting comment=\
    "Aceitamos todo o tr\E1fego para a Rede Loca" disabled=no \
    dst-address-list=loopback in-interface=ether4
add action=mark-connection chain=forward comment="Cria-se as conex\F5es:" \
    connection-mark=no-mark disabled=no in-interface=ether3 \
    new-connection-mark=ISP1_conn passthrough=no
add action=mark-connection chain=forward connection-mark=no-mark disabled=no \
    in-interface=ether2 new-connection-mark=ISP2_conn passthrough=no
add action=mark-connection chain=prerouting comment=\
    "Marca-se o roteamento nas conex\F5es:" connection-mark=no-mark disabled=\
    no in-interface=ether3 new-connection-mark=ISP1_conn passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark disabled=\
    no in-interface=ether2 new-connection-mark=ISP2_conn passthrough=yes
add action=jump chain=prerouting comment=\
    "Policy Routing (pula direto para o equil\EDbrio de cargas" \
    connection-mark=no-mark disabled=no in-interface=ether4 jump-target=\
    policy_routing
add action=mark-routing chain=prerouting comment=\
    "Pr\E9-Roteamento das Conex\F5es" connection-mark=ISP1_conn disabled=no \
    new-routing-mark=ISP1_traffic passthrough=yes src-address-list=\
    GW01_ether4
add action=mark-routing chain=prerouting connection-mark=ISP2_conn disabled=\
    no new-routing-mark=ISP2_traffic passthrough=yes src-address-list=\
    GW01_ether4
add action=mark-routing chain=output comment=\
    "Sa\EDda do tr\E1fego no Balance" connection-mark=ISP1_conn disabled=no \
    new-routing-mark=ISP1_traffic passthrough=yes
add action=mark-routing chain=output connection-mark=ISP2_conn disabled=no \
    new-routing-mark=ISP2_traffic passthrough=yes
add action=mark-connection chain=policy_routing comment=\
    "Balanceamento de Cargas " disabled=no dst-address-type=!local hotspot=\
    auth new-connection-mark=ISP1_conn passthrough=yes \
    per-connection-classifier=both-addresses:2/0
add action=mark-connection chain=policy_routing disabled=no dst-address-type=\
    !local hotspot=auth new-connection-mark=ISP2_conn passthrough=yes \
    per-connection-classifier=both-addresses:2/1
add action=mark-connection chain=policy_routing disabled=yes \
    dst-address-type=!local hotspot=auth new-connection-mark=ISP2_conn \
    passthrough=yes per-connection-classifier=both-addresses:3/2

/ip firewall nat
add action=accept chain=pre-hotspot disabled=no dst-address-type=!local \
    hotspot=auth
add action=masquerade chain=srcnat disabled=no out-interface=ether2
add action=masquerade chain=srcnat disabled=no out-interface=ether3



/ip route
add check-gateway=arp disabled=no distance=4 dst-address=0.0.0.0/0 gateway=\
    189.91.59.201 routing-mark=HTTPS scope=30 target-scope=10
add check-gateway=arp disabled=no distance=5 dst-address=0.0.0.0/0 gateway=\
    192.168.25.1 routing-mark=HTTPS scope=30 target-scope=10
add check-gateway=arp disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
    189.91.59.201 routing-mark=ISP1_traffic scope=30 target-scope=10
add check-gateway=arp disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
    192.168.25.1 routing-mark=ISP2_traffic scope=30 target-scope=10
add check-gateway=arp disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\
    189.91.59.201 scope=30 target-scope=10
add check-gateway=arp disabled=no distance=3 dst-address=0.0.0.0/0 gateway=\
    192.168.25.1 scope=30 target-scope=10