Failover 2 Links - Netwatch

_____________________________________________________________________

_____________________________________________________________________

Cursos MikroTik: www.academiamt.com.br

_____________________________________________________________________

João Krieger

_____________________________________________________________________
© MikroTik, www.mikrotik.com. All rights reserved. Reprinted with permission.
MikroTik, NSTREME, RouterOS and RouterBOARD are registred trademarks of company MikroTik SIA.
 Treinamentos
__________________________________________________________________

Curso
Introdutório

Engenheiro Roteamento
Avançado
OSPF e Túneis

Wireless do Controle de IPv6 Controle de

RouterOS Tráfego, QoS Usuários, Radius
Proxy e Firewall HotSpot e IPsec

http://www.mikrotik.com/training/ Redes BGP e MPLS

Engenharia Tráfego
 Cenário

ISP2

192.168.88.X
192.168.1.X
ether3_LAN
ether2_WAN2

ether1_WAN1

192.168.25.X

ISP1
1. Renomeie as Interfaces
/interface ethernet
set [ find default-name=ether1 ] name=ether1_WAN1
set [ find default-name=ether2 ] name=ether2_WAN2
set [ find default-name=ether3 ] name=ether3_LAN

2. Configure a Address List: REDE_LOCAL

/ip firewall address-list
add address=192.168.88.0/24 list=REDE_LOCAL

3. Configure o Mascaramento
/ip firewall nat
add action=masquerade chain=srcnat dst-address-list=!REDE_LOCAL \
src-address-list=REDE_LOCAL
4. Default Route – Configure manualmente
a) Desabilite Add Default Route no DHCP
/ip dhcp-client
add add-default-route=no dhcp-options=hostname,clientid disabled=no interface=\
ether1_WAN1

b) Desabilite Add Default Route no PPPoE

/interface pppoe-client
add disabled=no interface=ether1 \
name=pppoe-out1 password=Senha \
user=Usuario
4. Default Route – Configure manualmente
c) Crie a Rota Padrão para a WAN1 com
distância = 1 e comentário Principal
/ip route
add comment=Principal distance=1 gateway=192.168.15.1

d) Crie a Rota Padrão para a WAN2 com

distância = 2 e comentário Secundario
/ip route
add comment=Secundario distance=2 gateway=192.168.1.1
5. Monitore se a WAN1 está UP, com um
ping externo
a) Crie scripts no Netwach para quando a WAN1
estiver DOWN, desabilitar a rota Principal, e,
quando voltar para UP, habilitá-la
/tool netwatch
add down-script="/ip route disable [find comment=Principal]" host=8.8.4.4 \
interval=15s up-script="/ip route enable [find comment=Principal]"
5. Monitore se a WAN1 está UP, com um
ping externo
b) Crie uma rota de teste para o IP 8.8.4.4
sair pela WAN1
/ip route
add comment="Rota de teste para o IP 8.8.4.4" distance=1 \
dst-address=8.8.4.4/32 gateway=192.168.15.1

Nosso Failover com Netwach

está Pronto!