Archives for My Lazy and Forgetful Mind

MikroTik PPPoE Bandwidth Management with RADIUS

Contents1 Step 1: Configure PPPoE2 Step 2: RADIUS Configuration3 Step 3: Mangle Rules Setup4 Step 4: Queue Tree Configuration5 Summary Step 1: Configure PPPoE Basic PPPoE Setup: Set up your PPPoE server as you normally would. Ensure that you have configured the necessary interfaces and settings. Step 2: RADIUS Configuration Add RADIUS Attributes: In your […]

MikroTik Hotspot Bandwidth Management

Contents1 Hotspot Configuration2 Mangle Jump Rules3 Queue Tree Configuration3.1 Example Queue Tree Entry: Hotspot Configuration Basic Settings: Configure the hotspot settings as usual. RADIUS Configuration (if applicable): In the server profile, enable the "Use RADIUS" option. Create a user profile and specify values in incoming[up]/outgoing-mark[down], such as packet-mark-download. This will dynamically add a packet mark […]

how to log mysql query that has long time to execute

To log slow-running MySQL queries, you can enable the Slow Query Log feature in MySQL. This log will record all queries that take longer than a specified amount of time to execute. Here's how to set it up: Contents1 Step 1: Enable Slow Query Logging2 Explanation:3 Step 2: Restart MySQL Service4 Step 3: Verify the […]

How to pull new branch from github

To pull a new branch from GitHub, follow these steps using Git: Contents1 1. Fetch the new branch from the remote repository:2 2. List all branches (optional):3 3. Check out the new branch:4 4. Pull the latest changes from the new branch: 1. Fetch the new branch from the remote repository: Run the following command […]

Setting WDS Openwrt

Contents1 problems2 cara :3 Allow Luci accessed via [wan/bridged] MIKROTIK HOTSPOT problems saat ubah network interface lan, perubahan subnet kadang bikin harus reboot dulu baru kedetek cara : set firewall zone to lan set wireless > edit > interface or something, from wwan to lan Allow Luci accessed via [wan/bridged] MIKROTIK HOTSPOT i add bracket […]

Batch Rename Images Using Windows PowerShell

Contents1 .JPG to .jpg2 .png to .jpg .JPG to .jpg To rename all .JPG files to .jpg in a directory using PowerShell, follow these steps: Open PowerShell. Navigate to the folder containing the .JPG files using the cd command. Run the following command: Get-ChildItem -Filter *.JPG | Rename-Item -NewName { $_.Name.ToLower() } This command will […]

SQL Injection Cheat Sheet

good reading to test our apps https://www.invicti.com/blog/web-security/sql-injection-cheat-sheet/

Setting Fiberhome hg6145d2 Bridge

Contents1 Setting Up FiberHome HG6145D2 as a Bridge with IndiHome Firmware1.1 Default Credentials1.2 Setup Steps Setting Up FiberHome HG6145D2 as a Bridge with IndiHome Firmware The FiberHome HG6145D2 modem with IndiHome firmware does not have a manual bridge mode setting. However, it can still be used as a bridge by default. When tested, DHCP did […]

HTTP Basic Authentication to secure phpMyAdmin

HTTP Authentication is a method of securing web resources by requiring users to provide valid credentials before accessing them. It operates at the HTTP protocol level and can be implemented using several authentication schemes. One common method for HTTP Authentication is Basic Authentication, which prompts users to enter their username and password in a dialog […]

Configure Two ISP on Mikrotik using VLAN with Openwrt

Why ? I want to load balance on Openwrt Openclash OPENWRT on STB has only one RJ45 port Mikrotik has multiple port, so we can use vlan to route two ISP into Openwrt Contents1 Mikrotik Setting2 OpenWRT Setting2.1 DHCP Server2.2 VLAN DHCP CLient2.2.1 Add Virtual Device2.2.2 Add Virtual Interface3 More setting to be configured3.1 opewrt4 […]

Mikrotik Load balance PCC + Hotspot

27 June 2022 / by akozan / 0 Comments

Last Modified on 29 June 2022

Contents

1 Script
2 Hotspot Setting

Script

generated from https://buananetpbun.github.io/pcc.html

ROS 7.X


#############################################################
# LOAD BALANCING (LB) PCC SCRIPT GENERATOR
# Date/Time: 6/27/2022, 1:19:22 PM
# Created By: BuanaNETPBun.Github.io - fb.me/buananet.pbun
# Load Balancing Method -> PCC (Per Connection Clasifier)
#############################################################

/ip firewall address-list
add address=192.168.0.0/16 list=LOCAL-IP comment="LB By BNT"
add address=172.16.0.0/12 list=LOCAL-IP comment="LB By BNT"
add address=10.0.0.0/8 list=LOCAL-IP comment="LB By BNT"
/ip firewall nat
add chain=srcnat out-interface="ether1-WAN" action=masquerade comment="LB By BNT"
add chain=srcnat out-interface="ether2-WAN" action=masquerade comment="LB By BNT"
/routing table
add name="to-ether1-WAN" fib comment="LB By BNT"
add name="to-ether2-WAN" fib comment="LB By BNT"
/ip route
add check-gateway=ping distance=1 gateway="10.5.51.1" routing-table="to-ether1-WAN" comment="LB By BNT"
add check-gateway=ping distance=1 gateway="192.168.1.1" routing-table="to-ether2-WAN" comment="LB By BNT"
add check-gateway=ping distance=1 gateway="10.5.51.1" comment="LB By BNT"
add check-gateway=ping distance=2 gateway="192.168.1.1" comment="LB By BNT"
/ip firewall mangle
add action=mark-connection chain=input in-interface="ether1-WAN" new-connection-mark="cm-ether1-WAN" passthrough=yes comment="LB By BNT"
add action=mark-connection chain=input in-interface="ether2-WAN" new-connection-mark="cm-ether2-WAN" passthrough=yes comment="LB By BNT"
add action=mark-routing chain=output connection-mark="cm-ether1-WAN" new-routing-mark="to-ether1-WAN" passthrough=yes comment="LB By BNT"
add action=mark-routing chain=output connection-mark="cm-ether2-WAN" new-routing-mark="to-ether2-WAN" passthrough=yes comment="LB By BNT"
add action=mark-connection chain=prerouting dst-address-list=!LOCAL-IP dst-address-type=!local new-connection-mark="cm-ether1-WAN" passthrough=yes per-connection-classifier=both-addresses-and-ports:2/0 src-address-list=LOCAL-IP comment="LB By BNT"
add action=mark-connection chain=prerouting dst-address-list=!LOCAL-IP dst-address-type=!local new-connection-mark="cm-ether2-WAN" passthrough=yes per-connection-classifier=both-addresses-and-ports:2/1 src-address-list=LOCAL-IP comment="LB By BNT"
add action=mark-routing chain=prerouting connection-mark="cm-ether1-WAN" dst-address-list=!LOCAL-IP new-routing-mark="to-ether1-WAN" passthrough=yes src-address-list=LOCAL-IP comment="LB By BNT"
add action=mark-routing chain=prerouting connection-mark="cm-ether2-WAN" dst-address-list=!LOCAL-IP new-routing-mark="to-ether2-WAN" passthrough=yes src-address-list=LOCAL-IP comment="LB By BNT"

Hotspot Setting

Setting hotspot as usual
Change mangle for PCC (every mangel with "per-connection-classifier" set) by argument hotspot=auth

Note :
because now mange rule is applied only to hotspot (or pppoe if you set it), IF you want to use Load Balance to be used on other lan (or bypassed hotspot client), you need to make another PCC mangle with separate address list
example :
```
add action=mark-connection chain=prerouting dst-address-list=!OTHER-LOCAL-IP dst-address-type=!local new-connection-mark="cm-ether1-WAN" passthrough=yes per-connection-classifier=both-addresses-and-ports:2/0 src-address-list=OTHER-LOCAL-IP comment="LB By BNT"
add action=mark-connection chain=prerouting dst-address-list=!OTHER-LOCAL-IP dst-address-type=!local new-connection-mark="cm-ether2-WAN" passthrough=yes per-connection-classifier=both-addresses-and-ports:2/1 src-address-list=OTHER-LOCAL-IP comment="LB By BNT"
```
And make sure thoose address list is incuded to LOCAL-IP or address list name you use on your setting, so it will stil get route mangle from the last line from above script. OR you can just make new mangel route rule wiht OTHER-LOCAL-IP address list
EDIT dinamic firewall dns nat created from hotspot setup to alow dns traffic if user is authenticated, because otherwise authenticated hotspot user dns traffic will be blocked.
```
/ip firewall nat set 2,3 hotspot=!auth
```
adjust the 2,3 part to match your firewall configuration, make sure its the DNS part from dynamically created hotspot rule.

The rules above will change to the default when we disable and re-enable the hotspot service, so it must be re-set if we want to use it again.

Script

Hotspot Setting

Leave a Reply Cancel reply