Configuring Charge Balancing Using Mikrotik Router. Applying Policy Routing Business Office 1

This postal service is a continuation of my postal service on why you lot take away charge balancing on your network

We volition start our charge balancing strategy past times applying Policy Routing.
 Based on Client IP Address.

The Policy Routing regulation is used inward networking to brand routing decisions based on policies. These policies are laid past times the information technology personal inward the organization or the  network administrator. So, inward this tutorial together nosotros are going to explore a policy inward MikroTik router past times which, you lot volition take away each time, you lot desire to develop a charge balancing network.

So am assuming you lot accept approximately reasonable lay out of hosts every bit good every bit dual Internet access provider connections, the maiden off matter you lot take away to exercise is to grouping your hosts past times IP addresses together with and therefore depending on the source IP address ship traffic out through dissimilar Internet access provider connections, this sounds pretty unproblematic right. Okay allow elaborate the bargain now. In this tutorial nosotros are considering a unproblematic part network where 2 Internet access provider connections are existence used to ship traffics of a MikroTik router.

In a existent life scenario, you lot volition live on having 2 Internet access provider connections that are existence used for WAN connections terminating inward the MikroTik router. you lot  will likewise accept a lay out of hosts connected, to this MikroTik router through a LAN switch from where you lot volition be  distributing your network.

Now that nosotros are sure as shooting that the 2 WAN connections are laid upwards  for this MikroTik router, nosotros volition together with therefore start our charge balancing journeying by  creating a policy rout for all of our traffics. In a agency that our one-half of the total LAN users volition access cyberspace through WAN1 Internet access provider connectedness together with residue of the LAN users volition access cyberspace through WAN2 Internet access provider connection.

Below is a i later on the other steps that nosotros take away to follow to properly configure this network to run effectively together with likewise give us what nosotros are driving out. Recall that nosotros are doing charge balancing together with likewise neglect over every bit good inward this tutorial.

So the maiden off matter nosotros volition exercise is to Assig WAN together with LAN IP Addresses

So from the scenario you lot volition concord alongside me that nosotros accept 2 WAN link because nosotros accept 2 Internet access provider to intergrate. Considering configuring charge balancing network alongside policy based routing, maiden off nosotros accept to assign WAN together with LAN IP addresses to our your MikroTik Router. As you lot accept 2 Internet access provider connections, you lot must accept 2 WAN IP addresses every bit good every bit 2 gateway addresses.

WAN1 IP Address:192.168.88.0/24 together with Gateway: 192.168.88.1

WAN2 IP Address:172.168.210/24 together with Gateway: 172.168.210.1

So hither nosotros are done alongside assigning IP’s to the 2 WAN links

We accept got our WAN IP addresses together with LAN IP block. Now I volition demo you lot how to assign these WAN IP addresses together with LAN gateway address inward your MikroTik router. Follow my bellow steps to assign WAN together with LAN IP addresses inward your MikroTik router.

Login to your MikroTik router alongside Winbox software. If you lot don’t accept Winbox software inward your collection, download Winbox from this site together with and therefore login to your MikroTik alongside username together with password. If you lot are novel inward this article every bit good every bit inward MikroTik router, follow my article close MikroTik router basic configuration which volition demo you lot the proper steps to configure a MikroTik router from really beginning.

Go to IP > Addresses carte especial from the winbox carte bar. Address List window volition appear.

Now click on add together novel push (PLUS Sign). New Address window volition appear. Put your WAN1 IP address (in this article: 192.168.88.0/24) inward Address input box together with guide WAN1 interface (in this article: ether1) from Interface drop-down carte together with and therefore click Apply together with OK button.

Similarly, click on add together novel push in i lawsuit to a greater extent than together with lay your WAN2 IP address (in this article: 172.168.168.210/24) inward Address input plain together with guide WAN2 interface (in this article: ether2) from Interface drop-down carte together with and therefore click Apply together with OK button.

Again, click on add together novel push together with lay your LAN gateway IP (in this article: 192.168.88.1/24) inward Address input plain together with guide your LAN interface (in this article: ether10) from Interface drop-down carte together with and therefore click Apply together with OK button.

Assigning WAN together with LAN IP addresses has been completed. Now nosotros volition configure DNS server inward our adjacent step. 

Step 2. DNS Server Configuration

DNS is non a mandatory configuration inward MikroTik router simply it is necessary for a consummate MikroTik router configuration. Optionally, you lot tin plough your MikroTik router into a DNS server which volition live on beneficial for your network. So, if you lot desire to laid DNS IP inward your MikroTik router every bit good every bit desire to plough your MikroTik into a DNS server, follow my below unproblematic steps.

So inward full general what DNS does is to resolve the host IP into domain lift together with Vis vase

In other to configure our DNS nosotros volition larn to IP > DNS carte option. DNS Settings window volition appear. Put your DNS server IP that is provided to you lot past times your Internet access provider or you lot tin purpose Google populace DNS server IP 8.8.8.8 inward Servers input field.

Optionally, you lot tin click on Allow Remote Requests checkbox to plough your MikroTik router into a DNS server. But you lot accept to block DNS requests from exterior of your LAN otherwise your MikroTik volition live on used every bit a DNS server past times the populace users if they know your MikroTik populace IP. Follow my article close MikroTik router basic configuration which volition demo you lot how to block DNS requests from populace network.

Now click Apply together with OK button.

Our DNS configuration inward MikroTik router has been completed. Now nosotros volition exercise masquerade NAT dominion therefore that our LAN user tin access cyberspace through our MikroTik router.

Step 3. NAT Configuration

Now nosotros volition exercise a masquerade NAT dominion therefore that our LAN IP tin live on NATed past times MikroTik router. If nosotros don’t exercise this rule, our LAN users cannot access cyberspace through our MikroTik router. So, follow my bellow steps to exercise NAT dominion inward MikroTik router.

Go to IP > Firewall Firewall window volition appear. Click on NAT tab inward this window together with and therefore click on add together novel push (PLUS Sign). New NAT Rule window volition appear.

Under General tab, guide srcnat from Chain drop-down carte together with lay your LAN IP block address (in this article: 192.168.88.0/24) inward Address input field. Now click on Action tab together with guide masquerade from Action drop-down carte together with and therefore click Apply together with OK button.

NAT dominion configuration inward MikroTik router has been completed. Now nosotros volition exercise Mangle rules inward our MikroTik router therefore that our LAN user tin live on divided into 2 groups.

Step 4. Mangle Rule Creation

As nosotros desire to ship our LAN users through 2 Internet access provider connections for charge balancing, nosotros accept to exercise Mangle rules which volition dissever our LAN users into 2 groups together with grade them for proper routing. In this article, I am using a shape C IP block which is 192.168.88.0/24 for our LAN users. This IP block tin live on farther sub divided into 2 groups past times subnetting similar below.

Group A:168.88.0/25

Group B:168.88.128/25

By doing this subnetting, our total users are at in i lawsuit divided into 2 groups. The users who volition purpose IP address betwixt 192.168.88.1 to 192.168.88.126 volition accept inward grouping H5N1 together with those who volition purpose IP address betwixt 192.168.88.129 to 192.168.88.253 volition accept inward grouping B. Now, I volition demo you lot 2 Mangle rules inward MikroTik router those volition exercise proper grouping together with mark our LAN IP. Follow below steps to exercise these Mangle rules.

Go to IP > Firewall carte together with click on Mangle tab inward Firewall window together with and therefore click on add together novel push (PLUS Sign). New Mangle Rule window volition seem now.

Choose prerouting choice from Chain drop-down carte together with lay Group H5N1 IP block (in this article: 192.168.88.0/25) inward Address input field. Click on Action tab together with guide grade routing choice from Action drop-down carte together with lay grouping lift (here, GroupA) inward New Routing Mark input box together with uncheck the Passthrough choice together with and therefore click Apply together with OK button.

Similarly, click on add together novel push in i lawsuit to a greater extent than together with guide prerouting choice from Chain drop-down carte together with lay Group B IP block (here, 192.168.88.128/25) inward Address input field. Now click on Action tab together with guide grade routing choice from Action drop-down carte together with lay grouping lift (here, GroupB) inward New Routing Mark input plain together with uncheck the Passthrough choice together with and therefore click Apply together with OK button.

We accept successfully created Mangle rules for grouping our LAN users. Now nosotros volition configure routes inward MikroTik router therefore that dissimilar groups tin access cyberspace through dissimilar Internet access provider connection.

Thanks together with stick alongside us for to a greater extent than on this post...

Share this post