Backup Mikrotik BILHANET: Script Load Balance PCC Full

Bilhanet.com – Halaman ini adalah hasil backup Mikrotik BILHANET yang digunakan untuk video tutorial seri Load Balance PCC di YouTube.

Teman-teman bisa cek playlist video Mikrotik LB PCC di sini selengkapnya.

BILHANET menggunakan Mikrotik Routerboard RB750Gr3, dan mungkin bisa berbeda interface dengan seri RB lainnya.

Update: Gunakan tool generate script LB PCC di sini.

Script Mikrotik Load Balance PCC 2 ISP

# BILHANET BACKUP LB PCC
/interface bridge
add name=bridge_HOTSPOT

/interface ethernet
set [ find default-name=ether1 ] name=ether1-ISP1
set [ find default-name=ether2 ] name=ether2-ISP2

/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik

/ip hotspot profile
add dns-name=hs.bilhanet.com hotspot-address=10.20.30.1 html-directory=\
    flash/hotspot login-by=http-chap,http-pap,mac-cookie name=hsprof1

/ip pool
add name=hs-pool-6 ranges=10.20.30.2-10.20.30.254

/ip dhcp-server
add address-pool=hs-pool-6 disabled=no interface=bridge_HOTSPOT lease-time=1h \
    name=dhcp1

/ip hotspot
add address-pool=hs-pool-6 addresses-per-mac=1 disabled=no interface=\
    bridge_HOTSPOT name=hotspot1 profile=hsprof1

/queue simple
add name=TOTAL_SPEED queue=default/default target=\
    10.20.30.0/24,192.168.33.0/24
add max-limit=3M/3M name="-> GAME" packet-marks=Paket-Game parent=TOTAL_SPEED \
    priority=1/1 queue=pcq-upload-default/pcq-download-default target=\
    10.20.30.0/24,192.168.33.0/24
add name=HOTSPOT+PPPoE parent=TOTAL_SPEED queue=default/default target=\
    10.20.30.0/24,192.168.33.0/24

/ip hotspot user profile
set [ find default=yes ] insert-queue-before=bottom parent-queue=\
    HOTSPOT+PPPoE queue-type=hotspot-default
add insert-queue-before=bottom name=uprof1 parent-queue=HOTSPOT+PPPoE \
    queue-type=hotspot-default rate-limit=512k/768k

/interface bridge port
add bridge=bridge_HOTSPOT interface=ether3
add bridge=bridge_HOTSPOT interface=ether4
add bridge=bridge_HOTSPOT interface=ether5

/interface pppoe-server server
add disabled=no interface=bridge_HOTSPOT service-name=service_PPPoE

/ip address
add address=10.20.30.1/24 interface=bridge_HOTSPOT network=10.20.30.0

/ip cloud
set update-time=no

/ip dhcp-client
add add-default-route=no disabled=no interface=ether1-ISP1
add add-default-route=no disabled=no interface=ether2-ISP2

/ip dhcp-server network
add address=10.20.30.0/24 comment="hotspot network" gateway=10.20.30.1

/ip dns
set allow-remote-requests=yes

/ip firewall address-list
add address=192.168.100.0/24 list=Client+ISP
add address=192.168.200.0/24 list=Client+ISP
add address=10.20.30.0/24 list=Client+ISP
add address=192.168.33.0/24 list=Client+ISP

/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=\
    "place hotspot rules here" disabled=yes

/ip firewall mangle
add action=accept chain=prerouting comment="Bypass Client + ISP" \
    dst-address-list=Client+ISP
add action=mark-connection chain=prerouting comment="Koneksi Game" \
    dst-address-list=Game-List new-connection-mark=Koneksi-Game passthrough=\
    yes src-address-list=Client+ISP
add action=mark-routing chain=prerouting connection-mark=Koneksi-Game \
    new-routing-mark=Route-Game passthrough=yes src-address-list=Client+ISP
add action=mark-packet chain=forward connection-mark=Koneksi-Game \
    new-packet-mark=Paket-Game passthrough=no
add action=mark-connection chain=input comment="Load Balance PCC" \
    in-interface=ether1-ISP1 new-connection-mark=Koneksi-ISP1 passthrough=yes
add action=mark-connection chain=input in-interface=ether2-ISP2 \
    new-connection-mark=Koneksi-ISP2 passthrough=yes
add action=mark-routing chain=output connection-mark=Koneksi-ISP1 \
    new-routing-mark=Route-ISP1 passthrough=yes
add action=mark-routing chain=output connection-mark=Koneksi-ISP2 \
    new-routing-mark=Route-ISP2 passthrough=yes
add action=mark-connection chain=prerouting dst-address-list=!Client+ISP \
    dst-address-type=!local hotspot=auth new-connection-mark=Koneksi-ISP1 \
    passthrough=yes per-connection-classifier=both-addresses-and-ports:2/0 \
    src-address-list=Client+ISP
add action=mark-connection chain=prerouting dst-address-list=!Client+ISP \
    dst-address-type=!local hotspot=auth new-connection-mark=Koneksi-ISP2 \
    passthrough=yes per-connection-classifier=both-addresses-and-ports:2/1 \
    src-address-list=Client+ISP
add action=mark-routing chain=prerouting connection-mark=Koneksi-ISP1 \
    dst-address-list=!Client+ISP new-routing-mark=Route-ISP1 passthrough=yes \
    src-address-list=Client+ISP
add action=mark-routing chain=prerouting connection-mark=Koneksi-ISP2 \
    dst-address-list=!Client+ISP new-routing-mark=Route-ISP2 passthrough=yes \
    src-address-list=Client+ISP

/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=\
    "place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat out-interface=ether1-ISP1
add action=masquerade chain=srcnat out-interface=ether2-ISP2
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
    src-address=10.20.30.0/24
add action=accept chain=pre-hotspot dst-address-type=!local hotspot=auth

/ip firewall raw
add action=add-dst-to-address-list address-list=Game-List \
    address-list-timeout=4h chain=prerouting comment=ML dst-address-list=\
    !Client+ISP dst-port=\
    5000-5221,5224-5227,5229-5241,5243-5508,5551-5559,5601-5700,9001,9443 \
    protocol=tcp src-address-list=Client+ISP
add action=add-dst-to-address-list address-list=Game-List \
    address-list-timeout=4h chain=prerouting dst-address-list=!Client+ISP \
    dst-port=5520-5529,10003,30000-30300 protocol=tcp src-address-list=\
    Client+ISP
add action=add-dst-to-address-list address-list=Game-List \
    address-list-timeout=4h chain=prerouting dst-address-list=!Client+ISP \
    dst-port=4001-4009,5000-5221,5224-5241,5243-5508,5551-5559,5601-5700 \
    protocol=udp src-address-list=Client+ISP
add action=add-dst-to-address-list address-list=Game-List \
    address-list-timeout=4h chain=prerouting dst-address-list=!Client+ISP \
    dst-port=2702,3702,5517,5520-5529,8001,9000-9010,9992,10003,30000-30300 \
    protocol=udp src-address-list=Client+ISP
add action=add-dst-to-address-list address-list=Game-List \
    address-list-timeout=4h chain=prerouting comment=FF dst-address-list=\
    !Client+ISP dst-port="6006,6674,7006,7889,8001-8012,9006,10000-10012,11000\
    -11019,12006,12008,13006" protocol=tcp src-address-list=Client+ISP
add action=add-dst-to-address-list address-list=Game-List \
    address-list-timeout=4h chain=prerouting dst-address-list=!Client+ISP \
    dst-port=20561,39003,39006,39698,39779,39800 protocol=tcp \
    src-address-list=Client+ISP
add action=add-dst-to-address-list address-list=Game-List \
    address-list-timeout=4h chain=prerouting dst-address-list=!Client+ISP \
    dst-port=\
    6006,6008,7008,8008,9008,10000-10013,10100,11000-11019,12008,13008 \
    protocol=udp src-address-list=Client+ISP

/ip hotspot user
add name=bilhanet password=12345
add name=voucher1 password=voucher1 profile=uprof1

/ip route
add check-gateway=ping comment="Game ke ISP2" distance=1 gateway=\
    192.168.200.1 routing-mark=Route-Game
add check-gateway=ping comment="Backup Game ke ISP1" distance=2 gateway=\
    192.168.100.1 routing-mark=Route-Game
add check-gateway=ping comment="KE ISP 1" distance=1 gateway=192.168.100.1 \
    routing-mark=Route-ISP1
add check-gateway=ping comment="KE ISP 2" distance=1 gateway=192.168.200.1 \
    routing-mark=Route-ISP2
add check-gateway=ping comment="ISP 1" distance=1 gateway=192.168.100.1
add check-gateway=ping comment="ISP 2" distance=2 gateway=192.168.200.1

/ppp profile
add insert-queue-before=bottom name=profile_2Mb only-one=yes parent-queue=\
    HOTSPOT+PPPoE queue-type=default-small rate-limit=1M/2M
add insert-queue-before=bottom name=profile_512k only-one=yes parent-queue=\
    HOTSPOT+PPPoE queue-type=default-small rate-limit=512k/512k
/ppp secret
add local-address=192.168.33.1 name=client1 password=12345 profile=\
    profile_2Mb remote-address=192.168.33.101 service=pppoe

/system clock
set time-zone-autodetect=no time-zone-name=Asia/Jakarta
/system ntp client
set enabled=yes primary-ntp=103.123.108.223 secondary-ntp=162.159.200.123 \
    server-dns-names=id.pool.ntp.org

/system scheduler
add interval=1m name=Hapus-HS on-event=\
    "/queue simple remove [ find name ~\"hs-<\" ]" policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
    start-time=startup

Sebagai pengingat, jangan terbiasa dengan copas mentah-mentah script ke New Terminal.