159. Mikrotik How to Configure VRRP on both LAN and WAN


You can contact me: plus.google.com/+PhallaCCMT; youtube.com/phallaccmt; facebook.com/Phalla.CCMT; twitter.com/PhallaCCMT and Phalla.CCMT@gmail.com

MK-01

# sep/22/2018 07:49:28 by RouterOS 6.0
# software id = V9JS-UDXR

/interface vrrp
add interface=ether1-WAN name=vrrp1-WAN
add interface=ether2-LAN name=vrrp2-LAN vrid=2

/ip pool
add name=dhcp_pool1 ranges=192.168.1.100-192.168.1.200
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=vrrp2-LAN name=dhcp1
/ip dhcp-server network
add address=192.168.1.0/24 gateway=192.168.1.1
/ip dns
set servers=8.8.8.8

/ip address
add address=10.10.10.1/30 comment="VRRP Peer LAN " interface=ether2-LAN \
    network=10.10.10.0
add address=11.11.11.1/30 comment="VRRP Peer WAN" interface=ether1-WAN \
    network=11.11.11.0
add address=192.168.1.1/24 comment=LAN interface=vrrp2-LAN network=\
    192.168.1.0
add address=192.168.120.135/24 comment=WAN interface=vrrp1-WAN network=\
    192.168.120.0

/ip firewall nat
add action=masquerade chain=srcnat out-interface=vrrp1-WAN src-address=\
    192.168.1.0/24

/ip route
add distance=1 gateway=192.168.120.2
add distance=1 gateway=192.168.120.2
add distance=1 gateway=192.168.120.2

/system identity
set name=MK-01



MK-02

# sep/22/2018 01:43:12 by RouterOS 6.0
# software id = V9JS-UDXR
#

/interface vrrp
add interface=ether1-WAN name=vrrp1-WAN priority=50
add interface=ether2-LAN name=vrrp2-LAN priority=50 vrid=2

/ip pool
add name=dhcp_pool1 ranges=192.168.1.100-192.168.1.200
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=vrrp2-LAN name=dhcp1
/ip dhcp-server network
add address=192.168.1.0/24 gateway=192.168.1.1
/ip dns
set servers=8.8.8.8

/ip address
add address=192.168.120.135/24 interface=vrrp1-WAN network=192.168.120.0
add address=10.10.10.2/30 comment="VRRP Peer LAN" interface=ether2-LAN \
    network=10.10.10.0
add address=11.11.11.2/30 comment="VRRP Peer WAN" interface=ether1-WAN \
    network=11.11.11.0
add address=192.168.1.1/24 comment=LAN interface=vrrp2-LAN network=\
    192.168.1.0

/ip firewall nat
add action=masquerade chain=srcnat out-interface=vrrp1-WAN src-address=\
    192.168.1.0/24

/ip route
add distance=1 gateway=192.168.120.2
add distance=1 gateway=192.168.120.2
add distance=1 gateway=192.168.120.2
/system identity
set name=MK-02


Previous
Next Post »