Full MikroTik MTCRE - Policy Based Routing (Mangles) 😎 (Episode 5)

Поділитися
Вставка
  • Опубліковано 18 лис 2024

КОМЕНТАРІ • 54

  • @TheNetworkBerg
    @TheNetworkBerg  2 роки тому +2

    MikroTik Mangle reference material:
    help.mikrotik.com/docs/display/ROS/Mangle
    wiki.mikrotik.com/wiki/Manual:IP/Firewall/Mangle

  • @srh_btk
    @srh_btk 2 роки тому +14

    Would be great to know how to do the same stuff on ROS 7.1

  • @christopherfikes1293
    @christopherfikes1293 2 роки тому +5

    Your videos are by far the best when it comes to Mikrotik.

    • @TheNetworkBerg
      @TheNetworkBerg  2 роки тому

      Thank you for the message Christopher, I appreciate it!

  • @Lauch-Melder
    @Lauch-Melder 2 роки тому +2

    I've just searched for this a couple of days ago on how to route just my SIP-Traffic to ISP2. 👍🏻

  • @diegkol
    @diegkol 2 роки тому +2

    Thank you for taking the time to share your knowledge and expertise. Look forward to each new video.

    • @TheNetworkBerg
      @TheNetworkBerg  2 роки тому

      Baie dankie! I appreciate the kind words and I am happy to continue sharing my experiences with you guys! As long as somebody learns something new from a video of mine then I feel like I have accomplished what I set out to do with this channel.

  • @cheapthrills280
    @cheapthrills280 2 роки тому +2

    Thanks for the content sir. just want to ask some further details about the passthrough in mangle, I still can't understand how it works. Thank you for your understanding ^^

  • @wackys9380
    @wackys9380 2 роки тому +1

    Bro, you help us a lot from MTCNA to MTCRE thankyou so much...

  • @geoffvandermerwe6220
    @geoffvandermerwe6220 2 роки тому +1

    Thanks a mill dude ! Loving this series on MT.

  • @janpeter7452
    @janpeter7452 2 роки тому +1

    Nice, you are an MikroticMagican! I like that stuff.

  • @m.l8698
    @m.l8698 2 роки тому +1

    Thanks! It's worth to emphasise that while mangles are great, there is a price you may pay: performance. Since CPU is used, and if mangle rule is not crafted carefully (especially with Layer 7 rules), it might seriously affect router speed.

    • @bawshawg01
      @bawshawg01 2 роки тому +1

      Wonder if he could use routing rules instead of mangle to keep things like fastrack for connections

  • @PinoyTechTutorials
    @PinoyTechTutorials 2 роки тому

    these videos are just equals to gold. thanks alot sir!

  • @muzogoba1618
    @muzogoba1618 2 роки тому +1

    Good day
    I have been so intrigued by your videos. You helped me get to my mtcna last week. Keep up the great work.
    I was wondering if it would be possible for you to supply us with your EVE labs so that we could follow along to your great videos.
    Too much love for your media.

  • @reanitkhmer3325
    @reanitkhmer3325 2 роки тому +1

    really appreciated your tutorial. Thanks

  • @gyorgykovacs6781
    @gyorgykovacs6781 2 роки тому +1

    OMG, after your videos i realized how bad concept have i on my home network and a bad config in my MT router. Your explanation is crystal clear. I'm so excited to ruin my network and build it up again from the basics. But i will watch your other videos as well first and play it around in my EVE-NG playground :)

    • @TheNetworkBerg
      @TheNetworkBerg  2 роки тому +2

      Hah! Awesome, you must have fun while doing that and EVE is a GREAT place to learn and do that :D!

    • @gyorgykovacs6781
      @gyorgykovacs6781 2 роки тому

      @@TheNetworkBerg True, this is an a amazing tool! Is it that a good solution if i build my network in EVE and later just export the config to a real MT?

    • @TheNetworkBerg
      @TheNetworkBerg  2 роки тому +2

      @@gyorgykovacs6781 yes that work fine

  • @ameador01
    @ameador01 2 роки тому +1

    I would be interested to see how to prioritize traffic - such as VoIP/SIP type traffic. Working on setting up WISP and want to provide VoIP services and want to make sure they will be getting quality calls through the network. Thanks!

    • @TheNetworkBerg
      @TheNetworkBerg  2 роки тому

      For that you want to consider voice VRFs and a dedicated voice network in your backbone. This is typically more complex than what the MTCRE deals with, though it's definitely something many service providers do to provide voice services with guaranteed bandwidth/quality.

  • @Rob_Turner_UK
    @Rob_Turner_UK 2 роки тому

    Failovers would be good to look at how you manage these 👍

  • @elrinconurbano
    @elrinconurbano 8 місяців тому

    Hi @networkberg, I have a question. I have eve-ng comunity and I've noticed for example some things doesn't work in my L2 cisco switch, for example when I type the ip default-gateway in my global configuration, it doesn't take the command. I want to know If that could be a problem with me image or the emulator.

  • @ap5672
    @ap5672 2 роки тому

    I have an issue with your example: I have several vlans (say 5 and 10) and 2 WANS.
    When I added your mangle rule to route VL10 through WAN2, devices in VL10 can no longer ping or access devices in VL5.
    /ip firewall mangle
    add action=mark-routing chain=prerouting new-routing-mark=out-wan2 passthrough=no src-address-list="VL10 - Office"
    /ip route
    add check-gateway=ping distance=30 gateway=192.168.18.1
    routing-mark=out-wan2
    When I try to add "out-interface-list=WAN2" to the mangle rule, I get an error "Outgoing interface matching not possible in input and prerouting chains".
    How do I overcome this limitation? Thank you

  • @pedro_8240
    @pedro_8240 8 місяців тому

    This is great, but how do I do this for IPv6?
    I'm tired of getting blocked because I'm using a Hurricane Electric tunnel, because of work stuff, and want to use my ISPs prefix for my own personal traffic.

  • @arshams2301
    @arshams2301 2 місяці тому

    Thansk very usefull💯

  • @mohammadabrahimequraishi7641

    when I apply the mangle rule on same seniors it block the trace and ping what is the solutions

  • @AkeelTaj
    @AkeelTaj Рік тому

    Would it be possible to create mangle rules/PBR for return traffic to internet.
    I have ISP A-primary(behind a NAT of another router) and ISP B- backup(PPPoE connection from my router).
    I can only use ISP B to reach my home network from the outside(IPSec tunnel, Port forwarding to internal network devices, etc).
    Problem is, when I try to access from outside(internet) using the ISP B, the reply traffic going out uses the primary route.
    I'd like to mark the incoming traffic from ISP B somehow, and make the return traffic for it use the ISP B route instead of the primary route.
    Any help on this please ?

  • @networkwarriors4499
    @networkwarriors4499 10 місяців тому

    Thanks

  • @eugenevaneck147
    @eugenevaneck147 Рік тому

    Hi The Network Berg, can you please post a video on the best way to ensure same input wan traffic return

  • @kajalpatle3925
    @kajalpatle3925 2 роки тому

    Your explanation is awesome for all the videos you make, can you tell us how to create different routing table on same router without using any protocol and MPLS, also the created routes for other routing table do not fall back to the main table. Is there any way to do that, I will appreciate if you can give any suggestion for this. Looking forward to your reply.

  • @martinsk8088
    @martinsk8088 Рік тому

    Can i separate youtube and browsing traffic and mangle only youtube traffic ?

  • @marcelmikusik1863
    @marcelmikusik1863 2 роки тому

    What kind of map diagram program do you use please?

  • @m-electronics5977
    @m-electronics5977 Рік тому

    What you are using for the Presentation

  • @m-electronics5977
    @m-electronics5977 Рік тому

    6:52 what ist "Dude" in the Menu in the winbox?

  • @fahimrahman5909
    @fahimrahman5909 2 роки тому

    Hey man, great video. Can you help me plz?
    You are the best network person i find in UA-cam.
    So my problem is i brought a mikrotik hap ac2 router. I am totally noob, i thought its easy like other router.
    What i want to do is use 2 isp with my router. Right now i only setup router using web gui.
    Can you please make video on how yo use 2 internet connection using 1 router and port forward isp 1 for Minecraft? Very very appropriate your work

  • @MindSparqTrivia
    @MindSparqTrivia 2 роки тому

    Good work sir. , how about separating traffic on pppoe clients based on their profile(ip pool) sir? Lets say I have two mikrotik routers R1(main router) and R2(pppoe server) connected. Thank you so much sir

  • @funtube0
    @funtube0 6 місяців тому

    Changed On Router OS-7

  • @funtube0
    @funtube0 8 місяців тому

    Could you help about BGP With PBR

  • @aliraad9958
    @aliraad9958 2 роки тому

    Can you please share the EVE-NG package with Cisco and Mikrotik devices?

    • @mmrk_
      @mmrk_ 2 роки тому +2

      The Mikrotik CHRs are free on the Mikrotik website :)

    • @TheNetworkBerg
      @TheNetworkBerg  2 роки тому +1

      Unfortunately I am not allowed to share vendor images like Cisco or Juniper because there are some licensing issues and it would be illegal to do so. As mmrk said MikroTik's images are completely free on their website www.mikrotik.com you can download the CHR images from the software tab.

  • @biddutahmed2018
    @biddutahmed2018 2 роки тому

    Hello sir, can you make video for viop sitting in mikrotik. imo, whatsapp,line others voice call & video calls bad quality. can you make video for those sitting.

  • @joellopez4414
    @joellopez4414 9 місяців тому

    what will happen if 1 isp will go down?

  • @oodhosxp
    @oodhosxp 2 роки тому +1

    mikrotik version 7

  • @throwawayaccount838
    @throwawayaccount838 2 роки тому

    😍😍😍😍😍😍😍😍

  • @eugen8428
    @eugen8428 2 роки тому +1

    RouterOS 7.1.2 changed a little. It became more fun multiwan

    • @TheNetworkBerg
      @TheNetworkBerg  2 роки тому +2

      Will make a video on it as soon as MikroTik releases a long-term version

    • @ShaneFromSA
      @ShaneFromSA Рік тому

      @@TheNetworkBerg Can you do an updated video on this using v7? thanks

  • @pedromartinezdeaguilar9187
    @pedromartinezdeaguilar9187 Рік тому

    From my point of view, distance is not importantas it looks for the marking-route, only in th ecase that this wan drops and fall to the other.
    Best regards

  • @aliraad9958
    @aliraad9958 2 роки тому

    Can you please share the EVE-NG package with Cisco and Mikrotik devices?