Follow us on...
Follow us on G+ Follow us on Twitter Follow us on Facebook Watch us on YouTube
Register
Results 1 to 13 of 13
  1. #1
    Status
    Offline
    tuxer's Avatar
    Baru Gabung
    Join Date
    Aug 2010
    Posts
    10
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0

    Smile Membagi Jalur email dan browsing

    Salam kenal para master mikrotik, tolong bantuannya dong ..
    Saya punya case seperti ini :

    ISP1 ISP2
    | |
    | |
    |___Mikrotik___|
    |
    |
    LAN

    Jadi scheme nya kayak gini :
    1. Traffic email dari LAN secara default melalui ISP1
    2. Traffic browsing dari LAN secara default melalui ISP2
    3. Apabila Link ISP1 down, maka traffic email secara otomatis pindah ke Link ISP2, dan apabila Link ISP1 sudah up lagi maka secara otomatis traffic email pindah kembali ke ISP1, begitu juga sebaliknya.

    NB :
    - Router ISP1 : 192.168.30.1/24 , IP LAN ISP1 (Mikrotik) : 192.168.30.2/24
    - Router ISP2 : 192.168.40.1/24 , IP LAN ISP2 (Mikrotik) : 192.168.40.2/24
    - IP Gateway LAN (Mikrotik) : 192.168.50.1


    Tolong pencerahan dari master2 mikrotik nih, mengenai script nya
    Jawabannya ditunggu...hehehehe..
    Terima Kasih sebelumnya...

  2. #2
    Status
    Offline
    antareja's Avatar
    Member
    Join Date
    Jul 2008
    Location
    paris pan japa
    Posts
    179
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Ooh.. kalo itu mah gampang, silakan dibuka di .. Click here to enlarge Click here to enlarge

  3. #3
    Status
    Offline
    tuxer's Avatar
    Baru Gabung
    Join Date
    Aug 2010
    Posts
    10
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Saya sudah baca link yg antareja kasih ke saya, tp kok saya masih bingung yah..hehehehe..maklum masih anak baru nih...

    Menurut asumsi saya (mohon koreksi klo salah), untuk mengidentifikasi email dan browsing salah satu nya dengan port, yang saya bingung routing nya itu gmn??dimana saya bisa masukin port-nya supaya dia bisa terpisah dan take over klo salah satu putus??

    Sekalian nih mo nanya lagi..hehehehe...
    Pada firewal, chain prerouting, ada action mark-routing, mark-connection, mark-packet dan juga passthrough...
    Apa beda empat action diatas ?

    Hehehhe...jadi ngerepotin nih...
    Mohon pencerahannya..masih baru nih..
    Thanks.

  4. #4
    Status
    Offline
    cank ole's Avatar
    Member
    Join Date
    Apr 2010
    Posts
    144
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    coba ubek2 lg om disini bnyk tuts na koq utk LB failoverClick here to enlargeClick here to enlarge

  5. #5
    Status
    Offline
    yosanpro's Avatar
    Co-Admin
    Join Date
    Nov 2007
    Location
    Bantul, Bantul, Yogyakarta
    Posts
    2,548
    Reviews
    Read 0 Reviews
    Downloads
    11
    Uploads
    4
    Feedback Score
    1 (100%)
    coba bantuin dikit yah, siapa tahu bisa jalan...
    e-mail asumsi pakai POP3 + SMTP, kalau pakai webmail tetep kedetek sebagai browsing.
    Saya asumsikan yang diarahkan ke ISP2 adalah browsing, dan lainnya diarahkan ke ISP1, termasuk e-mail.

    Code:
    /ip firewall mangle add chain=forward protocol=tcp port=!80,8080,443,3128 in-interface=local action=mark-connection new-connection-mark="others"
    /ip firewall mangle add chain=forward protocol=tcp port=80,8080,443,3128 in-interface=local action=mark-connection new-connection-mark="browsing" 
    /ip firewall mangle add chain=forward connection-mark="others" action=mark-routing new-routing-mark="ISP1"
    /ip firewall mangle add chain=forward connection-mark="browsing" action=mark-routing new-routing-mark="ISP2"
    Code:
    /ip route add routing-mark="ISP1" gateway=gat.way.isp.1 distance=1 check-gateway=ping
    /ip route add routing-mark="ISP2" gateway=gat.way.isp.2 distance=1 check-gateway=ping
    /ip route add routing-mark="ISP1" gateway=gat.way.isp.2 distance=2 check-gateway=ping
    /ip route add routing-mark="ISP2" gateway=gat.way.isp.1 distance=2 check-gateway=ping
    /ip route add gateway=gat.way.isp.1 distance=1 check-gateway=ping
    /ip route add gateway=gat.way.isp.2 distance=2 check-gateway=ping
    tolong betulkan kalau salah atau tidak jalan...
    Last edited by yosanpro; 01-09-2010 at 02:39.
    A person's junk is another person's treasure.

  6. The Following User Says Thank You to yosanpro For This Useful Post:


  7. #6
    Status
    Offline
    tuxer's Avatar
    Baru Gabung
    Join Date
    Aug 2010
    Posts
    10
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Thanks om atas responnya, udah ada pencerahan nih...
    Mau dicoba dulu...

  8. #7
    Status
    Offline
    tuxer's Avatar
    Baru Gabung
    Join Date
    Aug 2010
    Posts
    10
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    /ip firewall mangle add chain=forward protocol=tcp port=!80,8080,443,3128 in-interface=local action=mark-connection new-connection-mark="others"
    /ip firewall mangle add chain=forward protocol=tcp port=80,8080,443,3128 in-interface=local action=mark-connection new-connection-mark="browsing"
    /ip firewall mangle add chain=forward connection-mark="others" action=mark-routing new-routing-mark="ISP1"
    /ip firewall mangle add chain=forward connection-mark="browsing" action=mark-routing new-routing-mark="ISP2"

    Om yosanpro..
    thread yg kemarin sudah saya coba, tp kok pada bagian port itu gk bisa yah, yg ada src-port dan dst-port. Itupun cuma bisa mendefinisikan 1 port doang, gk bisa !80,8080,443 (hasilnya invalid value), cuma bisa !80

    Apa saya salah yah ?
    Tolong pencerahan nya lg....hehhehee
    Thanks...

  9. #8
    Status
    Offline
    yosanpro's Avatar
    Co-Admin
    Join Date
    Nov 2007
    Location
    Bantul, Bantul, Yogyakarta
    Posts
    2,548
    Reviews
    Read 0 Reviews
    Downloads
    11
    Uploads
    4
    Feedback Score
    1 (100%)
    ups, sori salah, itu emang mustinya dst-port, maaf...

    untuk port masih belum bisa nyoba nih... tapi kalau emang nggak bisa ya urutannya dibalik jadi gini:

    Code:
    /ip firewall mangle add chain=forward protocol=tcp dst-port=80,8080,443,3128 in-interface=local action=mark-connection new-connection-mark="browsing" 
    /ip firewall mangle add chain=forward protocol=tcp in-interface=local action=mark-connection new-connection-mark="others"
    untuk rule lainnya tidak berubah...
    A person's junk is another person's treasure.

  10. #9
    Status
    Offline
    tuxer's Avatar
    Baru Gabung
    Join Date
    Aug 2010
    Posts
    10
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Thanks...mo ku coba lagi...heheh..

  11. #10
    Status
    Offline
    dencow's Avatar
    Forum Guru
    Join Date
    Jan 2008
    Posts
    1,728
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    1 (100%)
    info tambahan aja, barangkali berguna
    port standard yang digunakan untuk email POP3 dan SMTP biasanya 25 dan 110

  12. #11
    Status
    Offline
    tuxer's Avatar
    Baru Gabung
    Join Date
    Aug 2010
    Posts
    10
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by yosanpro Click here to enlarge
    coba bantuin dikit yah, siapa tahu bisa jalan...
    e-mail asumsi pakai POP3 + SMTP, kalau pakai webmail tetep kedetek sebagai browsing.
    Saya asumsikan yang diarahkan ke ISP2 adalah browsing, dan lainnya diarahkan ke ISP1, termasuk e-mail.

    Code:
    /ip firewall mangle add chain=forward protocol=tcp port=!80,8080,443,3128 in-interface=local action=mark-connection new-connection-mark="others"
    /ip firewall mangle add chain=forward protocol=tcp port=80,8080,443,3128 in-interface=local action=mark-connection new-connection-mark="browsing" 
    /ip firewall mangle add chain=forward connection-mark="others" action=mark-routing new-routing-mark="ISP1"
    /ip firewall mangle add chain=forward connection-mark="browsing" action=mark-routing new-routing-mark="ISP2"
    Code:
    /ip route add routing-mark="ISP1" gateway=gat.way.isp.1 distance=1 check-gateway=ping
    /ip route add routing-mark="ISP2" gateway=gat.way.isp.2 distance=1 check-gateway=ping
    /ip route add routing-mark="ISP1" gateway=gat.way.isp.2 distance=2 check-gateway=ping
    /ip route add routing-mark="ISP2" gateway=gat.way.isp.1 distance=2 check-gateway=ping
    /ip route add gateway=gat.way.isp.1 distance=1 check-gateway=ping
    /ip route add gateway=gat.way.isp.2 distance=2 check-gateway=ping
    tolong betulkan kalau salah atau tidak jalan...
    Yosanpro, yg diatas sudah saya coba, tapi fail over aja yah ?
    Ketika saya tes, ternyata port 80 dan 25 jalannya di gateway yg punya distance rendah (DEFAULT GATEWAY), ketika fail maka akan beralih ke gateway lainnya.

    Saya mau setting misal ada user yg mengakses port 80 dan 25 bersamaan, maka yg port 80 di forward ke ISP1 dan port 25 di forward ke ISP 2, setelah rules ini berjalan dengan baik barulah ada fail over ketika salah satu koneksi fail.

    Tolong pencerahan dan bantuannya gan...
    Thanks..

  13. #12
    Status
    Offline
    oscark007's Avatar
    Member
    Join Date
    Jul 2010
    Posts
    116
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    ikut belajar - menyimak

  14. #13
    Status
    Offline
    hungs1n's Avatar
    Baru Gabung
    Join Date
    Nov 2009
    Posts
    10
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    chain = forward gak bisa di buat untuk routing-mark mohon petunjuk

    makasih

 

 

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. memisahkan traffik pengguna email & browsing
    By uluhitah in forum Scripting @ Mikrotik
    Replies: 4
    Last Post: 24-08-2016, 23:09
  2. ask=apakah bisa jalur download & browsing di pisahin ??
    By xxx123 in forum General Networking
    Replies: 10
    Last Post: 22-11-2013, 17:22
  3. Memisahkan jalur download dan browsing..(konsep)
    By choi in forum General Networking
    Replies: 7
    Last Post: 18-07-2011, 14:46
  4. Replies: 9
    Last Post: 15-09-2010, 16:48
  5. ask: bikin supaya download masuk jalur A , browsing jalur B
    By rendyka in forum General Networking
    Replies: 5
    Last Post: 14-02-2008, 23:11

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •