Scribd
Upload
25 views2 pages

My Dual Wan and Pppoe Setup

The document outlines the configuration of a MikroTik router, including the setup of interfaces, DHCP pools, PPPoE profiles, and firewall rules. It establishes a bridge for LAN connections, configures multiple DHCP servers, and sets up routing for two ISP connections. Additionally, it includes security settings for wireless connections and DNS configurations.

Uploaded by

allan galdiano
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
25 views2 pages

My Dual Wan and Pppoe Setup

The document outlines the configuration of a MikroTik router, including the setup of interfaces, DHCP pools, PPPoE profiles, and firewall rules. It establishes a bridge for LAN connections, configures multiple DHCP servers, and sets up routing for two ISP connections. Additionally, it includes security settings for wireless connections and DNS configurations.

Uploaded by

allan galdiano
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
You are on page 1/ 2

/interface bridge

add name=bridge1-LAN
/interface ethernet
set [ find default-name=ether1 ] name=ether1-ISP1
set [ find default-name=ether2 ] name=ether2-ISP2
set [ find default-name=ether3 ] name=ether3-LAN
set [ find default-name=ether4 ] name=ether4-LAN
set [ find default-name=ether5 ] name=ether5-PPPOE
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=dhcp_pool0 ranges=192.168.2.2-192.168.2.254
add name=1MB ranges=192.168.10.2-192.168.10.254
add name=3MB ranges=192.168.10.2-192.168.11.254
add name=5MB ranges=192.168.10.2-192.168.12.254
add name=10MB ranges=192.168.10.2-192.168.13.254
add name=15MB ranges=192.168.10.2-192.168.14.254
add name=20MB ranges=192.168.10.2-192.168.15.254
add name=30MB ranges=192.168.10.2-192.168.16.254
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=bridge1-LAN name=dhcp1
/ppp profile
add dns-server=192.168.1.1,8.8.8.8 local-address=192.168.10.1 name=1MBPS \
rate-limit=1100k/1100k remote-address=1MB
add dns-server=192.168.11.1,8.8.8.8 local-address=192.168.11.1 name=3MBPS \
rate-limit=2000k/3100k remote-address=3MB
add dns-server=192.168.12.1,8.8.8.8 local-address=192.168.12.1 name=5MBPS \
rate-limit=3000k/5200k remote-address=5MB
add dns-server=192.168.13.1,8.8.8.8 local-address=192.168.13.1 name=10MBPS \
rate-limit=6M/11M remote-address=10MB
add dns-server=192.168.14.1,8.8.8.8 local-address=192.168.14.1 name=15MBPS \
rate-limit=10M/16M remote-address=15MB
add dns-server=192.168.15.1,8.8.8.8 local-address=192.168.15.1 name=20MBPS \
rate-limit=10M/21M remote-address=20MB
add dns-server=192.168.16.1,8.8.8.8 local-address=192.168.16.1 name=30MBPS \
rate-limit=16M/31M remote-address=30MB
/interface bridge port
add bridge=bridge1-LAN interface=ether3-LAN
add bridge=bridge1-LAN interface=ether4-LAN
/interface pppoe-server server
add authentication=pap disabled=no interface=ether5-PPPOE \
one-session-per-host=yes service-name=PPPoE_SERVER
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1-ISP1
add action=masquerade chain=srcnat out-interface=ether2-ISP2

/ip address
add address=192.168.2.1/24 interface=bridge1-LAN network=192.168.2.0
/ip dhcp-client
add add-default-route=no disabled=no interface=ether1-ISP1
add add-default-route=no disabled=no interface=ether2-ISP2
/ip dhcp-server network
add address=10.0.20.0/24 gateway=10.0.20.1
add address=192.168.2.0/24 gateway=192.168.2.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4

/ip firewall filter


add action=drop chain=input dst-port=53 in-interface=ether1-ISP1 protocol=tcp
add action=drop chain=input dst-port=53 in-interface=ether2-ISP2 protocol=tcp
add action=drop chain=input dst-port=53 in-interface=ether1-ISP1 protocol=udp
add action=drop chain=input dst-port=53 in-interface=ether2-ISP2 protocol=udp

/ip firewall mangle

add chain=prerouting dst-address-type=!local in-interface=bridge1-LAN per-


connection-classifier=both-addresses-and-ports:2/0 action=mark-connection new-
connection-mark=WAN1_conn passthrough=yes
add chain=prerouting dst-address-type=!local in-interface=bridge1-LAN per-
connection-classifier=both-addresses-and-ports:2/1 action=mark-connection new-
connection-mark=WAN2_conn passthrough=yes
add chain=prerouting dst-address-type=!local in-interface=ether5-PPPOE per-
connection-classifier=both-addresses-and-ports:2/0 action=mark-connection new-
connection-mark=WAN1_conn passthrough=yes
add chain=prerouting dst-address-type=!local in-interface=ether5-PPPOE per-
connection-classifier=both-addresses-and-ports:2/1 action=mark-connection new-
connection-mark=WAN2_conn passthrough=yes

add chain=prerouting connection-mark=WAN1_conn in-interface=bridge1-LAN


action=mark-routing new-routing-mark=to_WAN1
add chain=prerouting connection-mark=WAN2_conn in-interface=bridge1-LAN
action=mark-routing new-routing-mark=to_WAN2
add chain=prerouting connection-mark=WAN1_conn in-interface=ether5-PPPOE
action=mark-routing new-routing-mark=to_WAN1
add chain=prerouting connection-mark=WAN2_conn in-interface=ether5-PPPOE
action=mark-routing new-routing-mark=to_WAN2

/ip route
add dst-address=0.0.0.0/0 gateway=192.168.1.1%ether1-ISP1 routing-mark=to_WAN1
check-gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.1.1%ether2-ISP2 routing-mark=to_WAN2
check-gateway=ping

add dst-address=0.0.0.0/0 gateway=192.168.1.1%ether1-ISP1 distance=1 check-


gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.1.1%ether2-ISP2 distance=2 check-
gateway=ping

/ppp secret
add name=1MBPS password=1mbps111 profile=1MBPS service=pppoe
add name=3MBPS password=3mbps333 profile=3MBPS service=pppoe
add name=5MBPS password=5mbps555 profile=5MBPS service=pppoe
add name=10MBPS password=10mbps111 profile=10MBPS service=pppoe
add name=15MBPS password=15mbps222 profile=15MBPS service=pppoe
add name=20MBPS password=20mbps333 profile=20MBPS service=pppoe
add name=30MBPS password=30mbps444 profile=30MBPS service=pppoe
/system clock
set time-zone-name=Asia/Manila

You might also like