2 Internet (WAN1 + WAN2) ok

🔥 کیا کرے گا یہ اسکرپٹ؟

✔ 2 Internet (WAN1 + WAN2)
✔ Load Balancing (50/50)
✔ Auto Failover
✔ DHCP + DNS ready
✔ Basic firewall

⚠️ Run کرنے سے پہلے چیک کریں

  • WAN1 gateway = 192.168.2.1
  • WAN2 gateway = 192.168.100.1

👉 اگر آپ کے ISP کا IP different ہو تو change کر دیں



INTERFACE RENAME



set [ find default-name=ether1 ] name=WAN1

set [ find default-name=ether2 ] name=WAN2

set [ find default-name=ether3 ] name=LAN1

set [ find default-name=ether4 ] name=LAN2


BRIDGE CONFIG (LAN PORTS)

======================


/interface bridge

add name=LAN-BRIDGE


/interface bridge port

add interface=LAN1 bridge=LAN-BRIDGE

add interface=LAN2 bridge=LAN-BRIDGE



IP ADDRESSING


/ip address

add address=192.168.2.2/24 interface=WAN1

add address=192.168.100.2/24 interface=WAN2

add address=192.168.0.1/24 interface=LAN-BRIDGE




DNS CONFIG


/ip dns

set servers=8.8.8.8 allow-remote-requests=no



DHCP SERVER


/ip pool

add name=dhcp_pool ranges=192.168.0.10-192.168.0.254


/ip dhcp-server


add name=dhcp1 interface=LAN-BRIDGE address-pool=dhcp_pool disabled=no


/ip dhcp-server network

add address=192.168.0.0/24 gateway=192.168.0.1 dns-server=8.8.8.8



NAT


/ip firewall nat

add chain=srcnat out-interface=WAN1 action=masquerade

add chain=srcnat out-interface=WAN2 action=masquerade



ROUTING TABLES (IMPORTANT v7)


/routing table

add name=to_WAN1 fib

add name=to_WAN2 fib



Mangle LOAD BALANCING (PCC)



/ip firewall mangle


add chain=prerouting in-interface=LAN-BRIDGE connection-mark=no-mark dst-address-type=!local per-connection-classifier=both-addresses:2/0 action=mark-connection new-connection-mark=WAN1_conn passthrough=yes


add chain=prerouting in-interface=LAN-BRIDGE connection-mark=no-mark dst-address-type=!local per-connection-classifier=both-addresses:2/1 action=mark-connection new-connection-mark=WAN2_conn passthrough=yes


add chain=prerouting in-interface=LAN-BRIDGE connection-mark=WAN1_conn action=mark-routing new-routing-mark=to_WAN1 passthrough=no


add chain=prerouting in-interface=LAN-BRIDGE connection-mark=WAN2_conn action=mark-routing new-routing-mark=to_WAN2 passthrough=no


ROUTES (LOAD BALANCE + FAILOVER)


/ip route


add dst-address=0.0.0.0/0 gateway=192.168.2.1 routing-table=to_WAN1 check-gateway=ping


add dst-address=0.0.0.0/0 gateway=192.168.100.1 routing-table=to_WAN2 check-gateway=ping



MAIN ROUTE (FAILOVER)


/ip route


add dst-address=0.0.0.0/0 gateway=192.168.2.1 distance=1 check-gateway=ping

add dst-address=0.0.0.0/0 gateway=192.168.100.1 distance=2 check-gateway=ping



FIREWALL BASIC SECURITY


/ip firewall filter


add chain=input connection-state=established,related action=accept

add chain=input connection-state=invalid action=drop

add chain=input protocol=icmp action=accept

add chain=input in-interface=LAN-BRIDGE action=accept

add chain=input action=drop






Comments

Post a Comment

Popular posts from this blog

Windows 11 rdp problem resolved

Windows 11 rdp problem resolved Remote Desktop Connection  Failed to reconnect to your remote session. Please try to connect again.  [OK]  Error code: 0x1108 Extended error code: 0x0 Timestamp (UTC): 02/16/26 03:36:44 AM Press Ctrl+C to copy. Win10 ➜ Win10 کام کر رہا ہے Win11 24H2 ➜ Win10 پر ہی 0x1108 آ رہا ہے پورٹ 3389 LISTEN کر رہی ہے LAN بھی same ہے تو اب مسئلہ Windows 11 24H2 کے نئے RDP encryption mode کا ہے۔ یہ TLS 1.3 prefer کرتا ہے جبکہ بعض Win10 builds TLS 1.2 پر ہوتے ہیں۔ ہم Win11 کو force کریں گے کہ وہ پرانا compatible mode استعمال کرے۔ 🔴 FINAL COMPATIBILITY FIX (Win11 24H2) یہ صرف Windows 11 پر Admin CMD میں چلائیں: reg add "HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client" /v Enabled /t REG_DWORD /d 0 /f reg add "HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client" /v DisabledByDefault /t REG_DWORD /d 1 /f reg add "HKLM\SYSTEM\CurrentControlSet\Co...
Read more

Microsoft Activation Scripts (MAS)

  irm https://get.activated.win | iex irm https://massgrave.dev/get | iex Download / How to use it? ​ Method 1 - PowerShell (Recommended) ​ Right-click on the Windows start menu and select PowerShell or Terminal (Not CMD). Copy and paste the code below and press enter irm https://get.activated.win | iex or (deprecated, will be retired on Aug 31 2024, use above instead) irm https://massgrave.dev/get | iex You will see the activation options. Follow the on-screen instructions. That's all. On older Windows builds you may need to run the below command before, [Net.ServicePointManager]::SecurityProtocol=[Net.SecurityProtocolType]::Tls12 The Powershell method does not work on Windows 7. Use the Method 2 - Traditional instead. The URL get.activated.win may be blocked by some DNS services because it is a new domain. Method 2 - Traditional ​ Download the file under the code button from  GitHub  or  Bitbucket Right-click on the downloaded zip file and extract In the extracted ...
Read more

Windows 11 ke common RDP issues fix karta hai

  🧾 Use ka tareeqa Notepad kholo Upar wala code paste karo File save karo as: rdp_fix.bat Right-click → Run as Administrator ⚠️ Note Yeh script Windows 11 ke common RDP issues fix karta hai Agar phir bhi issue aaye to network ya server-side config check karna padega -------------------------------------------------------------------------- @echo off title RDP Fix Tool - Windows 11 color 0A echo =============================== echo RDP Fix Script (Win11) echo =============================== echo. :: Run as admin check net session >nul 2>&1 if %errorLevel% NEQ 0 ( echo [ERROR] Please run this script as Administrator! pause exit ) echo [1] Disabling RDP UDP (Fix for disconnect/lag)... reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\Client" /v fClientDisableUDP /t REG_DWORD /d 1 /f echo [2] Enabling Remote Desktop Firewall Rules... netsh advfirewall firewall set rule group="remote desktop" new enable=Yes echo [3] Ope...
Read more