INDIBIZ200 200Mbps (192.168.2.1/24)
INDIBIZ100 100Mbps (192.168.3.1/24)
Biznet150 150Mbps (192.168.4.1/24)
LocalHotSpot&PPPoE(Bridge) (hotspot:192.168.10.1/24, PPPoE=192.168.20.1/24)
/ip firewall address-list
add address=192.168.10.1/24 list=Private_Local
add address=192.168.20.1/24 list=Private_Local
/ip firewall nat
add action=masquerade chain=srcnat comment=”Nat_Public” out-interface=\
ether1-INDIBIZ200
add action=masquerade chain=srcnat comment=”Nat_Public” out-interface=\
ether2-INDIBIZ100
add action=masquerade chain=srcnat comment=”Nat_Public” out-interface=\
ether3-Biznet150
add action=masquerade chain=srcnat comment=\
“masquerade hotspot network, hotspot” src-address=192.168.10.0/24
/ip firewall mangle
add action=accept chain=prerouting dst-address-list=Private_Local \
src-address-list=Private_Local
add action=accept chain=postrouting dst-address-list=Private_Local \
src-address-list=Private_Local
add action=accept chain=forward dst-address-list=Private_Local \
src-address-list=Private_Local
add action=accept chain=input dst-address-list=Private_Local \
src-address-list=Private_Local
add action=accept chain=output dst-address-list=Private_Local \
src-address-list=Private_Local
add action=mark-connection chain=input comment=”Loadbalance 3ISP PCC” \
in-interface=ether1-INDIBIZ200 new-connection-mark=cm-ether1-INDIBIZ200 \
passthrough=yes src-address-list=””
add action=mark-connection chain=input in-interfacen=ether2-INDIBIZ100 \
new-connection-mark=cm-ether2-INDIBIZ100 passthrough=yes
add action=mark-connection chain=input in-interface=\
ether3-Biznet150 new-connection-mark=cm-ether3-Biznet150 passthrough=yes
add action=mark-routing chain=output connection-mark=cm-ether1-INDIBIZ200 \
new-routing-mark=to-ether1-INDIBIZ200 passthrough=no
add action=mark-routing chain=output connection-mark=cm-ether2-INDIBIZ100 \
new-routing-mark=to-ether2-INDIBIZ100 passthrough=no
add action=mark-routing chain=output connection-mark=cm-ether3-Biznet \
disabled=yes new-routing-mark=to-ether3-Biznet passthrough=no
add action=mark-connection chain=prerouting dst-address-list=!Private_Local \
dst-address-type=!local new-connection-mark=cm-ether1-INDIBIZ200 \
passthrough=yes per-connection-classifier=both-addresses-and-ports:6/0 \
src-address-list=Private_Local
add action=mark-connection chain=prerouting dst-address-list=!Private_Local \
dst-address-type=!local new-connection-mark=cm-ether1-INDIBIZ200 \
passthrough=yes per-connection-classifier=both-addresses-and-ports:6/1 \
src-address-list=Private_Local
add action=mark-connection chain=prerouting dst-address-list=!Private_Local \
dst-address-type=!local new-connection-mark=cm-ether1-INDIBIZ200 \
passthrough=yes per-connection-classifier=both-addresses-and-ports:6/2 \
src-address-list=Private_Local
add action=mark-connection chain=prerouting dst-address-list=!Private_Local \
dst-address-type=!local new-connection-mark=cm-ether1-INDIBIZ200 \
passthrough=yes per-connection-classifier=both-addresses-and-ports:6/3 \
src-address-list=Private_Local
add action=mark-connection chain=prerouting dst-address-list=!Private_Local \
dst-address-type=!local new-connection-mark=cm-ether2-INDIBIZ100 \
passthrough=yes per-connection-classifier=both-addresses-and-ports:6/4 \
src-address-list=Private_Local
add action=mark-connection chain=prerouting dst-address-list=!Private_Local \
dst-address-type=!local new-connection-mark=cm-ether2-INDIBIZ100 \
passthrough=yes per-connection-classifier=both-addresses-and-ports:6/5 \
src-address-list=Private_Local
add action=mark-connection chain=prerouting disabled=yes dst-address-list=\
!Private_Local dst-address-type=!local new-connection-mark=\
cm-ether3-Biznet passthrough=yes per-connection-classifier=\
src-address:9/6 src-address-list=Private_Local
add action=mark-connection chain=prerouting disabled=yes dst-address-list=\
!Private_Local dst-address-type=!local new-connection-mark=\
cm-ether3-Biznet passthrough=yes per-connection-classifier=\
src-address:9/7 src-address-list=Private_Local
add action=mark-connection chain=prerouting disabled=yes dst-address-list=\
!Private_Local dst-address-type=!local new-connection-mark=\
cm-ether3-Biznet passthrough=yes per-connection-classifier=\
src-address:9/8 src-address-list=Private_Local
add action=mark-routing chain=prerouting connection-mark=cm-ether1-INDIBIZ200 \
dst-address-list=!Private_Local new-routing-mark=to-ether1-INDIBIZ200 \
passthrough=yes src-address-list=Private_Local
add action=mark-routing chain=prerouting connection-mark=cm-ether2-INDIBIZ100 \
dst-address-list=!Private_Local new-routing-mark=to-ether2-INDIBIZ100 \
passthrough=yes src-address-list=Private_Local
add action=mark-routing chain=prerouting connection-mark=cm-ether3-Biznet \
disabled=yes dst-address-list=!Private_Local new-routing-mark=\
to-ether3-Biznet passthrough=yes src-address-list=Private_Local
/ip route
add check-gateway=ping comment=ISP1 distance=1 gateway=\
192.168.2.1
add check-gateway=ping comment=ISP2 distance=2 gateway=\
192.168.3.1
add check-gateway=ping comment=ISP3 distance=3 gateway=\
192.168.4.1
add distance=1 gateway=192.168.2.1 routing-mark=\
to-ether1-INDIBIZ200
add distance=1 gateway=192.168.3.1 routing-mark=\
to-ether1-INDIBIZ100
add distance=1 gateway=192.168.4.1 routing-mark=\
to-ether3-Biznet
(Failover script)
/tool netwatch
add down-script=”/ip route disable [find comment=ISP1]\r\
\n:log warning \”ISP1 Sedang Down\”” host=1.1.1.1 interval=20s \
up-script=”/ip route enable [find comment=ISP1]\r\
\n:log warning \”ISP1 udah UP Kembali\””