当前位置:首页 > 原创教程 > RouterOS V7多线PCC负载均衡

RouterOS V7多线PCC负载均衡

原创教程 / 星之宇 / 2025-11-15 12:05 / 浏览:18 / 评论:0

RouterOS v7在路由策略配置方面有所变动,与之前版本在路由表的配置不同在于创建新路由表,之前的版本创建新路由表(路由标记) 可以在ip route、ip route rules和 ip firewall mangle 三处位置,而v7只能在routing -> table 下创建,如果路由表需要推送给FIB,需设置fib参数。所以导致PCC负载均衡的配置与之前版本有些不同。


本文主要讲RouterOS V7多线PCC负载均衡(老版本教程请参考《RouterOS通过VRRP实现单线多拨以及PCC负载均衡》)

1、环境介绍

1.1 RouterOS V7.20.4

1.2 3条电信宽带(同运营商的宽带做PCC负载均衡最佳,不能运营商分流会比较好)

1.3 内网IP:192.168.100.0/24


 2、PPPoE拨号创建

2.1 PPP --> Interface --> + --> PPPoE Client,分别创建pppoe-out1,pppoe-out2和pppoe-out3,配置如下图

pppoe-out1: General选项卡 Interfaces选择 Wan1,Dial Out选项卡 user和password根据宽带拨号填写,勾选 Add Default Route

pppoe-out2: General选项卡 Interfaces选择 Wan2,Dial Out选项卡 user和password根据宽带拨号填写,勾选 Add Default Route

pppoe-out3: General选项卡 Interfaces选择 Wan3,Dial Out选项卡 user和password根据宽带拨号填写,勾选 Add Default Route

515-1.png


2.2 命令代码(user和password根据自己宽带拨号修改):

/interface pppoe-client
add add-default-route=yes disabled=no interface=Wan1 name=pppoe-out1 user=77bx.com password=77bx.com
add add-default-route=yes disabled=no interface=Wan2 name=pppoe-out2 user=77bx.com password=77bx.com
add add-default-route=yes disabled=no interface=Wan3 name=pppoe-out3 user=77bx.com password=77bx.com


3、路由表创建

3.1 Routing --> Tables --> +,分别创建rtab-1,rtab-2和rtab-3,全部勾选FIB

515-2.png


3.2 命令代码

/routing table
add disabled=no fib name=rtab-1
add disabled=no fib name=rtab-2
add disabled=no fib name=rtab-3


4、路由配置

4.1 IP --> Routes --> +,分别添加以下路由

General选项卡 Dst. Address:0.0.0.0/0,Gateway:pppoe-out1,Routing Table:rtab-1

General选项卡 Dst. Address:0.0.0.0/0,Gateway:pppoe-out2,Routing Table:rtab-2

General选项卡 Dst. Address:0.0.0.0/0,Gateway:pppoe-out3,Routing Table:rtab-3

515-3.png


4.2 命令代码

/ip route
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=pppoe-out1 routing-table=rtab-1 scope=30 suppress-hw-offload=no target-scope=10
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=pppoe-out2 routing-table=rtab-2 scope=30 suppress-hw-offload=no target-scope=10
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=pppoe-out3 routing-table=rtab-3 scope=30 suppress-hw-offload=no target-scope=10


5、PCC策略

5.1 PCC分类标记 IP --> Firewall --> Manage --> +,3条标记如下:

General选项卡 Chain:prerouting,Src. Address:192.168.100.0/24,Connection Mark:no-mark;Advanced选项卡 Per Connection Classifier:both addresses3 / 0,Extra选项卡 Dst. Address Type:local(勾选前面框,表示非本地),Action选项卡 Action:mark Connection,New Connection Mark:pcc1,勾选Passthrough

General选项卡 Chain:prerouting,Src. Address:192.168.100.0/24,Connection Mark:no-mark;Advanced选项卡 Per Connection Classifier:both addresses3 / 1,Extra选项卡 Dst. Address Type:local(勾选前面框,表示非本地),Action选项卡 Action:mark Connection,New Connection Mark:pcc2,勾选Passthrough

General选项卡 Chain:prerouting,Src. Address:192.168.100.0/24,Connection Mark:no-mark;Advanced选项卡 Per Connection Classifier:both addresses3 / 2,Extra选项卡 Dst. Address Type:local(勾选前面框,表示非本地),Action选项卡 Action:mark Connection,New Connection Mark:pcc3,勾选Passthrough

515-4.png

515-5.png

515-6.png


5.2 路由标记 IP --> Firewall --> Manage --> +,3条标记如下:

General选项卡 Chain:prerouting,Src. Adress:192.168.100.0/24,Connection Mark:pcc1;Action选项卡 Action:mark routing,New Routing Mark:rtab-1,勾选 Passthrough

General选项卡 Chain:prerouting,Src. Adress:192.168.100.0/24,Connection Mark:pcc2;Action选项卡 Action:mark routing,New Routing Mark:rtab-2,勾选 Passthrough

General选项卡 Chain:prerouting,Src. Adress:192.168.100.0/24,Connection Mark:pcc3;Action选项卡 Action:mark routing,New Routing Mark:rtab-3,勾选 Passthrough

515-7.png

515-8.png

515-9.png


5.3 流量标记 IP --> Firewall --> Manage --> +,3条标记如下:

General选项卡 Chain:prerouting,In Interface:pppoe-out1,Connection Mark:no-mark;Action选项卡 Action:mark connection,New Connection Mark:pcc1,勾选 Passthrough

General选项卡 Chain:prerouting,In Interface:pppoe-out2,Connection Mark:no-mark;Action选项卡 Action:mark connection,New Connection Mark:pcc2,勾选 Passthrough

General选项卡 Chain:prerouting,In Interface:pppoe-out3,Connection Mark:no-mark;Action选项卡 Action:mark connection,New Connection Mark:pcc3,勾选 Passthrough

515-10.png

515-11.png

515-12.png


5.4 出口标记 IP --> Firewall --> Manage --> +,3条标记如下:

General选项卡 Chain:output,Connection Mark:pcc1;Action选项卡 Action:mark routing,New Routing Mark:rtab-1,勾选 Passthrough

General选项卡 Chain:output,Connection Mark:pcc2;Action选项卡 Action:mark routing,New Routing Mark:rtab-2,勾选 Passthrough

General选项卡 Chain:output,Connection Mark:pcc3;Action选项卡 Action:mark routing,New Routing Mark:rtab-3,勾选 Passthrough

515-13.png

515-14.png

515-15.png


5.5 命令代码

/ip firewall mangle
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local new-connection-mark=pcc1 per-connection-classifier=both-addresses-and-ports:3/0 src-address=192.168.100.0/24
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local new-connection-mark=pcc2 per-connection-classifier=both-addresses-and-ports:3/1 src-address=192.168.100.0/24
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local new-connection-mark=pcc3 per-connection-classifier=both-addresses-and-ports:3/2 src-address=192.168.100.0/24
/ip firewall mangle
add action=mark-routing chain=prerouting connection-mark=pcc1 new-routing-mark=rtab-1 src-address=192.168.100.0/24
add action=mark-routing chain=prerouting connection-mark=pcc2 new-routing-mark=rtab-2 src-address=192.168.100.0/24
add action=mark-routing chain=prerouting connection-mark=pcc3 new-routing-mark=rtab-3 src-address=192.168.100.0/24
/ip firewall mangle
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=pppoe-out1 new-connection-mark=pcc1
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=pppoe-out2 new-connection-mark=pcc2
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=pppoe-out3 new-connection-mark=pcc3
/ip firewall mangle
add action=mark-routing chain=output connection-mark=pcc1 new-routing-mark=rtab-1
add action=mark-routing chain=output connection-mark=pcc2 new-routing-mark=rtab-2
add action=mark-routing chain=output connection-mark=pcc3 new-routing-mark=rtab-3


6、NAT转换规则

6.1 IP --> Firewall --> NAT --> +,添加一条masquerade转换规则

General选项卡 Chain:srcnat,Action选项卡 Action:masquerade

515-16.png


6.2 命令代码

/ip firewall nat add action=masquerade chain=srcnat


7、其他配置

如DHCP、DNS、以及Bridge灯配置这边就不详细说明了。

目前有 0 条评论

    • 昵称
    • 邮箱
    • 网址