RouterOS使用Macvlan配置多拨的PCC负载均衡

admin

RouterOS v7.12开始支持macvlan，意味着pppoe客户端单接口多拨，不再需要创建vrrp（vrrp无法修改mac地址）或者bridge方式来修改mac地址，可以使用macvlan来创建虚拟mac地址拨号，这样简化了操作配置，同样也减少了路由器开销。

下面的实例基于划分VLAN的方式进行拨号，pppoe接入在交换机上都设置一个单独的VLAN ID，然后通过trunk到RouterOS的sfp-sfpplus1接口，创建VLAN子接口后，进行拨号。

华为交换机配置

创建GigabitEthernet 0/0/1-GigabitEthernet 0/0/3的模式access，vlan id分别是10，20，30

1. [Huawei]interface GigabitEthernet 0/0/1
   
2. [Huawei-GigabitEthernet0/0/1]port link-type access
   
3. [Huawei-GigabitEthernet0/0/1]port default vlan 10
   
4. [Huawei-GigabitEthernet0/0/1] interface GigabitEthernet 0/0/2
   
5. [Huawei-GigabitEthernet0/0/2]port link-type access
   
6. [Huawei-GigabitEthernet0/0/2]port default vlan 20
   
7. [Huawei-GigabitEthernet0/0/2] interface GigabitEthernet 0/0/3
   
8. [Huawei-GigabitEthernet0/0/3]port link-type access
   
9. [Huawei-GigabitEthernet0/0/3]port default vlan 30

复制代码

配置interface XGigabitEthernet0/1/1端口为Trunk口配置，设置vlan 10，20，30

1. [Huawei]interface interface XGigabitEthernet0/1/1
   
2. [Huawei-interface XGigabitEthernet0/1/1]port link-type trunk
   
3. [Huawei-interface XGigabitEthernet0/1/1]port trunk allow-pass vlan 10 20 30

复制代码

RouterOS配置

配置sfp-sfpplus1接口的vlan子接口

1. /interface vlan
   
2. add interface=sfp-sfpplus1 name=vlan10 vlan-id=10
   
3. add interface=sfp-sfpplus1 name=vlan20 vlan-id=20
   
4. add interface=sfp-sfpplus1 name=vlan30 vlan-id=30

复制代码

基于vlan10，vlan20，vlan30创建对应的macvlan接口，并设置固定mac地址

1. /interface macvlan
   
2. add interface=vlan10 mac-address=72:73:50:81:27:10 mode=private name=macvlan10
   
3. add interface=vlan20 mac-address=72:73:50:81:27:20 mode=private name=macvlan20
   
4. add interface=vlan30 mac-address=72:73:50:81:27:30 mode=private name=macvlan30

复制代码

创建PPPoE拨号接口到对应的macvlan

1. /interface pppoe-client
   
2. add disabled=no interface=macvlan10 name=pppoe-out1 user=yus
   
3. add disabled=no interface=macvlan20 name=pppoe-out2 user=yus
   
4. add disabled=no interface=macvlan30 name=pppoe-out3 user=yus

复制代码

剩下的是需要创建3条PCC规则

生成如下：

1. /routing table
   
2. /routing table add fib name=route1
   
3. /routing table add fib name=route2
   
4. /routing table add fib name=route3
   
5. /ip firewall mangle
   
6. add chain=prerouting connection-mark=no-mark dst-address-type=!local action=mark-connection per-connection-classifier=both-addresses:3/0 src-address=192.168.88.0/24 new-connection-mark=pcc1
   
7. add chain=prerouting action=mark-routing src-address=192.168.88.0/24 connection-mark=pcc1 new-routing-mark=route1
   
8. add chain=prerouting connection-mark=no-mark action=mark-connection in-interface=pppoe-out1 new-connection-mark=pcc1
   
9. add chain=output action=mark-routing connection-mark=pcc1 new-routing-mark=route1
   
10. add chain=prerouting connection-mark=no-mark dst-address-type=!local action=mark-connection per-connection-classifier=both-addresses:3/1 src-address=192.168.88.0/24 new-connection-mark=pcc2
    
11. add chain=prerouting action=mark-routing src-address=192.168.88.0/24 connection-mark=pcc2 new-routing-mark=route2
    
12. add chain=prerouting connection-mark=no-mark action=mark-connection in-interface=pppoe-out2 new-connection-mark=pcc2
    
13. add chain=output action=mark-routing connection-mark=pcc2 new-routing-mark=route2
    
14. add chain=prerouting connection-mark=no-mark dst-address-type=!local action=mark-connection per-connection-classifier=both-addresses:3/2 src-address=192.168.88.0/24 new-connection-mark=pcc3
    
15. add chain=prerouting action=mark-routing src-address=192.168.88.0/24 connection-mark=pcc3 new-routing-mark=route3
    
16. add chain=prerouting connection-mark=no-mark action=mark-connection in-interface=pppoe-out3 new-connection-mark=pcc3
    
17. add chain=output action=mark-routing connection-mark=pcc3 new-routing-mark=route3
    
18. /ip route
    
19. add gateway=pppoe-out1 routing-table=route1
    
20. add gateway=pppoe-out2 routing-table=route2
    
21. add gateway=pppoe-out3 routing-table=route3
    
22. /ip firewall nat
    
23. add chain=srcnat action=masquerade src-address=192.168.88.0/24 out-interface=pppoe-out1
    
24. add chain=srcnat action=masquerade src-address=192.168.88.0/24 out-interface=pppoe-out2
    
25. add chain=srcnat action=masquerade src-address=192.168.88.0/24 out-interface=pppoe-out3

复制代码