make rules with address-list mikrotik

:foreach i in=[/ip firewall address-list find list=350 ] do={
:local addrlist350 [/ip firewall address-list get $i address ]
:log warning $addrlist350
/ip fire mangle add chain=postrouting dst-address=$addrlist350 connection-mark=ggc_conn action=mark-packet new-packet-mark="ggc_$user" comment=$user
} 

Continue

pppoe-static mikrotik

tambahkan script di scheduler dengan run startup

:if ([:len ($000 || $150 || $200 || $250 || $300 || $350)] = 0) do={
:global 000 10.8.8.0/27
:global 150 10.8.8.32/27
:global 200 10.8.8.64/26
:global 250 10.8.8.128/26
:global 300 10.8.8.192/27
:global 350 10.8.8.224/27
}

kemudian bikin pool-ip

/ip pool
add name=000 ranges=10.8.8.2-10.8.8.30
add name=150 ranges=10.8.8.33-10.8.8.62
add name=200 ranges=10.8.8.65-10.8.8.126
add name=250 ranges=10.8.8.129-10.8.8.191
add name=300 ranges=10.8.8.193-10.8.8.222
add name=350 ranges=10.8.8.225-10.8.8.254

tambahkan di profile-pppoe on login

:local parent PPPOE
:local ippppoe [/ip address get [/ip address find interface=$user] network]
:local ipclient
:local iprouter [/ip address get [find  comment=$user] address ]
:for i from=( [:len $iprouter] - 1) to=0 do={
:if ( [:pick $iprouter $i] = "/") do={
:set $ipclient ([:pick $iprouter 0 $i] +1)
}
}

:if ($ippppoe in $suspend) do={
   :if ([:len [/ip firewall address-list find list=cidr_suspend comment=$user]] = 0 ) do={
   /ip firewall address-list add address=$ipclient list=cidr_suspend comment=$user
   }
/queue simple add target=$ipclient name=$user parent=$parent max-limit=5000000/5000000
}
:if ($ippppoe in $150) do={
/queue simple add target=$ipclient name=$user parent=$parent max-limit=2000000/2000000
/ip firewall address-list remove [find list=cidr_suspend comment=$user]
}
:if ($ippppoe in $200) do={
/queue simple add target=$ipclient name=$user parent=$parent max-limit=2500000/2500000
/ip firewall address-list remove [find list=cidr_suspend comment=$user]}
:if ($ippppoe in $300) do={
/queue simple add target=$ipclient name=$user parent=$parent max-limit=3000000/3000000
/ip fire mangle add chain=postrouting dst-address=$ipclient connection-mark=ggc_conn action=mark-packet new-packet-mark="ggc_$user" comment=$user
/queue tree add name=$user limit-at=2000000 max-limit=5000000 parent=DN-PPPOE packet-mark="ggc_$user"
/ip firewall address-list remove [find list=cidr_suspend comment=$user]
}
:if ($ippppoe in $350) do={
/queue simple add target=$ipclient name=$user parent=$parent max-limit=3000000/3500000
/ip fire mangle add chain=postrouting dst-address=$ipclient connection-mark=ggc_conn action=mark-packet new-packet-mark="ggc_$user" comment=$user
/queue tree add name=$user limit-at=2000000 max-limit=8000000 parent=DN-PPPOE packet-mark="ggc_$user"
/ip firewall address-list remove [find list=cidr_suspend comment=$user]
}

tambahkan di profile-pppoe on logout

:log error "$user logout $ipclient"
/queue simple remove [find name=$user]
/queue tree remove [find name=$user]
/ip fire mangle remove [find comment=$user]

Continue

Teknik Penggabungan PPPOE feat Static Address Mikrotik

Kali ini saya akan berikan tips anti mainstream, dimana deliver ke pelanggan menggunakan ip static, namun secara management user dicontrol oleh userman. Teknik ini dibuat karena problem yang penulis alami ketika deliver bandwidth ke pelanggan mengalami kendala link dan perangkat yang dipasang pppoe-client tidak sempurna jika menggunakan produk selain mikrotik (tplink, tenda, maupun ubnt).
Problem menggunakan TPLINK = dialup lama
Problem menggunakan TENDA = dialup cenderung lebih cepat daripada TPLINK namun tetap saja ada jeda waktu yang membuat risih pelanggan, karena established pppoe butuh waktu yang cukup lama.
Problem menggunakan UBNT = sama persis seperti TENDA maupun TPLINK.

Nah, dari problem diatas, kita siasati seperti berikut :

1. Sediakan Router utama, yang berisi userman berikut limiternya
2. Sediakan Router khusus untuk dial pppoe-client
3. Buat Point to point ip static antara ROUTER2 ke masing masing client, usahakan namanya sama dengan pppoe-client.
4. Bikin semua point to point via pppoe dengan menggunakan kedua router tersebut
5. Untuk Router point nomor 2, nantinya digunakan untuk dial semua user. Kemudian bikin environment gimana caranya agar ip p2p static dibikin mark-routing ke pppoe-client tadi.
6. Dengan begitu, untuk 1 user memerlukan 1 mangle dan 1 mark routing, dan ini nanti kita buat secara otomatis berdasarkan user yang berhasil dial dengan status R pada interface pppoe-client.
7. Trafik pppoe-client dan limiter pppoe-client tetap dibaca oleh Router point 1.
8. Done !

Ok langsung saja, script pada profile default ppp, pada on logon kasih script berikut :

:local iface [/interface pppoe-client get [find running=yes] name]
:local ipaddress ([/ip address get [find  comment=$iface] address ])
:for i from=( [:len $ipaddress] - 1) to=0 step=-1 do={
      :if ( [:pick $ipaddress $i] = "/") do={
         :set ipaddress ( [:pick $ipaddress 0 $i] +1)
         }
      }
:log warning $ipaddress
/ip firewall mangle add comment=$iface chain=prerouting src-address=$ipaddress action=mark-routing new-routing-mark=$iface passthrough=no
/ip route add routing-mark=$iface gateway=$iface

Lalu untuk on logout script :

:local iface [/interface pppoe-client get [find running=no] name]
:log error "$iface removed"
/ip fire mangle remove [find comment=$iface]
/ip route remove [find routing-mark=$iface]

Semoga bermanfaat.

Continue