1. Masalah IP Address silahkan di definisikan sendiri.
2. Bikin Mangle :
add chain=prerouting in-interface=LocalHost connection-state=new nth=2,1,0 \
action=mark-connection new-connection-mark=one passthrough=yes \
comment=”Load Balancing - 3 Gateway by Raden Dody uhuy” disabled=no
add chain=prerouting in-interface=LocalHost connection-mark=one \
action=mark-routing new-routing-mark=one passthrough=no comment=”" \
disabled=no
add chain=prerouting in-interface=LocalHost connection-state=new nth=2,1,1 \
action=mark-connection new-connection-mark=two passthrough=yes comment=”" \
disabled=no
add chain=prerouting in-interface=LocalHost connection-mark=two \
action=mark-routing new-routing-mark=two passthrough=no comment=”" \
disabled=no
add chain=prerouting in-interface=LocalHost connection-state=new nth=2,1,2 \
action=mark-connection new-connection-mark=three passthrough=yes comment=”" \
disabled=no
add chain=prerouting in-interface=LocalHost connection-mark=three \
action=mark-routing new-routing-mark=three passthrough=no comment=”" \
disabled=no
3. Bikin NAT
/ ip firewall nat
add chain=srcnat out-interface=[nama interface 1] connection-mark=one \
action=masquerade comment=”NAT for Load Balancing by Mbah Dody au ah gelap” disabled=no
add chain=srcnat out-interface=[nama interface 2] connection-mark=two \
action=masquerade comment=”" disabled=no
add chain=srcnat out-interface=[nama interface 3] connection-mark=three \
action=masquerade comment=”" disabled=no
4. Bikin Routing
/ ip route
add dst-address=0.0.0.0/0 gateway=[IP Interface 1] scope=255 target-scope=10 \
routing-mark=one comment=”Route for Load Balancing by Ki Dody oye” disabled=no
add dst-address=0.0.0.0/0 gateway=[IP Interface 2] scope=255 target-scope=10 \
routing-mark=two comment=”" disabled=no
add dst-address=0.0.0.0/0 gateway=[IP Interface 3] scope=255 target-scope=10 \
routing-mark=three comment=”" disabled=no
Tapi tetep nanti akan ketemu website yg nggak mau menerima , utk itu perlu dibuatkan mangle khusus utk web yg nggak mau tsb, berikut sciptnya :
/ ip firewall mangle
add chain=prerouting in-interface=LocalHost dst-address-list=Nggak Doyan Load Balancing \
action=mark-routing new-routing-mark=one passthrough=yes comment=”Ora \
Doyan Load Balancing” disabled=no
Perhatian : Script tersebut harap di letakkan sebelum script load balancing.
5. Buat Address List website yg nggak mau menerima client Load Balancing.
/ ip firewall address-list
add list=Nggak Doyan Load Balancing address=[IP Addressnya berapa ?]comment=”" disabled=no
0 komentar:
Posting Komentar