Full MikroTik MTCRE - Policy Based Routing (Mangles) 😎 (Episode 5)

Some more FUN and INTERSTING concepts, we will be covering how to implement MikroTik mangle rules so that we can perform some basic load balancing and traffic manipulation. Enjoy!
Timestamps:
📕00:00 - Introduction
📕00:41 - PBR Overview
📕03:46 - Protocol based PBR
📕11:20 - IP Source based PBR
Support the Channel:
⭐Become a Patreon: / thenetworkberg
⭐Become a KZread Member: / @thenetworkberg
Social Media:
🌏 thenetworkberg.com
🌏 / thenetworkberg
🌏 / bergnetwork
🌏 / the-network-berg-39451...
MTCRE Playlist:
• Free MTCRE RoSv6
MTCNA Playlist:
• Free MTCNA RoSv6
Thanks again for watching

Пікірлер: 53

  • @TheNetworkBerg
    @TheNetworkBerg2 жыл бұрын

    MikroTik Mangle reference material: help.mikrotik.com/docs/display/ROS/Mangle wiki.mikrotik.com/wiki/Manual:IP/Firewall/Mangle

  • @christopherfikes1293
    @christopherfikes12932 жыл бұрын

    Your videos are by far the best when it comes to Mikrotik.

  • @TheNetworkBerg

    @TheNetworkBerg

    2 жыл бұрын

    Thank you for the message Christopher, I appreciate it!

  • @srh_btk
    @srh_btk2 жыл бұрын

    Would be great to know how to do the same stuff on ROS 7.1

  • @Lauch-Melder
    @Lauch-Melder2 жыл бұрын

    I've just searched for this a couple of days ago on how to route just my SIP-Traffic to ISP2. 👍🏻

  • @geoffvandermerwe6220
    @geoffvandermerwe62202 жыл бұрын

    Thanks a mill dude ! Loving this series on MT.

  • @diegkol
    @diegkol2 жыл бұрын

    Thank you for taking the time to share your knowledge and expertise. Look forward to each new video.

  • @TheNetworkBerg

    @TheNetworkBerg

    2 жыл бұрын

    Baie dankie! I appreciate the kind words and I am happy to continue sharing my experiences with you guys! As long as somebody learns something new from a video of mine then I feel like I have accomplished what I set out to do with this channel.

  • @janpeter7452
    @janpeter74522 жыл бұрын

    Nice, you are an MikroticMagican! I like that stuff.

  • @muzogoba1618
    @muzogoba16182 жыл бұрын

    Good day I have been so intrigued by your videos. You helped me get to my mtcna last week. Keep up the great work. I was wondering if it would be possible for you to supply us with your EVE labs so that we could follow along to your great videos. Too much love for your media.

  • @PinoyTechTutorials
    @PinoyTechTutorials2 жыл бұрын

    these videos are just equals to gold. thanks alot sir!

  • @wackys9380
    @wackys93802 жыл бұрын

    Bro, you help us a lot from MTCNA to MTCRE thankyou so much...

  • @TheNetworkBerg

    @TheNetworkBerg

    2 жыл бұрын

    It's my pleasure

  • @reanitkhmer3325
    @reanitkhmer33252 жыл бұрын

    really appreciated your tutorial. Thanks

  • @TheNetworkBerg

    @TheNetworkBerg

    2 жыл бұрын

    You are welcome!

  • @networkwarriors4499
    @networkwarriors44996 ай бұрын

    Thanks

  • @cheapthrills280
    @cheapthrills280 Жыл бұрын

    Thanks for the content sir. just want to ask some further details about the passthrough in mangle, I still can't understand how it works. Thank you for your understanding ^^

  • @Rob_Turner_UK
    @Rob_Turner_UK2 жыл бұрын

    Failovers would be good to look at how you manage these 👍

  • @gyorgykovacs6781
    @gyorgykovacs67812 жыл бұрын

    OMG, after your videos i realized how bad concept have i on my home network and a bad config in my MT router. Your explanation is crystal clear. I'm so excited to ruin my network and build it up again from the basics. But i will watch your other videos as well first and play it around in my EVE-NG playground :)

  • @TheNetworkBerg

    @TheNetworkBerg

    2 жыл бұрын

    Hah! Awesome, you must have fun while doing that and EVE is a GREAT place to learn and do that :D!

  • @gyorgykovacs6781

    @gyorgykovacs6781

    2 жыл бұрын

    @@TheNetworkBerg True, this is an a amazing tool! Is it that a good solution if i build my network in EVE and later just export the config to a real MT?

  • @TheNetworkBerg

    @TheNetworkBerg

    2 жыл бұрын

    @@gyorgykovacs6781 yes that work fine

  • @m.l8698
    @m.l8698 Жыл бұрын

    Thanks! It's worth to emphasise that while mangles are great, there is a price you may pay: performance. Since CPU is used, and if mangle rule is not crafted carefully (especially with Layer 7 rules), it might seriously affect router speed.

  • @bawshawg01

    @bawshawg01

    Жыл бұрын

    Wonder if he could use routing rules instead of mangle to keep things like fastrack for connections

  • @funtube0
    @funtube02 ай бұрын

    Changed On Router OS-7

  • @mohammadabrahimequraishi7641
    @mohammadabrahimequraishi76418 ай бұрын

    when I apply the mangle rule on same seniors it block the trace and ping what is the solutions

  • @kajalpatle3925
    @kajalpatle39252 жыл бұрын

    Your explanation is awesome for all the videos you make, can you tell us how to create different routing table on same router without using any protocol and MPLS, also the created routes for other routing table do not fall back to the main table. Is there any way to do that, I will appreciate if you can give any suggestion for this. Looking forward to your reply.

  • @ap5672
    @ap56722 жыл бұрын

    I have an issue with your example: I have several vlans (say 5 and 10) and 2 WANS. When I added your mangle rule to route VL10 through WAN2, devices in VL10 can no longer ping or access devices in VL5. /ip firewall mangle add action=mark-routing chain=prerouting new-routing-mark=out-wan2 passthrough=no src-address-list="VL10 - Office" /ip route add check-gateway=ping distance=30 gateway=192.168.18.1 routing-mark=out-wan2 When I try to add "out-interface-list=WAN2" to the mangle rule, I get an error "Outgoing interface matching not possible in input and prerouting chains". How do I overcome this limitation? Thank you

  • @michaelcadelina1786
    @michaelcadelina17862 жыл бұрын

    Good work sir. , how about separating traffic on pppoe clients based on their profile(ip pool) sir? Lets say I have two mikrotik routers R1(main router) and R2(pppoe server) connected. Thank you so much sir

  • @aliraad9958
    @aliraad99582 жыл бұрын

    Can you please share the EVE-NG package with Cisco and Mikrotik devices?

  • @AkeelTaj
    @AkeelTaj Жыл бұрын

    Would it be possible to create mangle rules/PBR for return traffic to internet. I have ISP A-primary(behind a NAT of another router) and ISP B- backup(PPPoE connection from my router). I can only use ISP B to reach my home network from the outside(IPSec tunnel, Port forwarding to internal network devices, etc). Problem is, when I try to access from outside(internet) using the ISP B, the reply traffic going out uses the primary route. I'd like to mark the incoming traffic from ISP B somehow, and make the return traffic for it use the ISP B route instead of the primary route. Any help on this please ?

  • @elrinconurbano
    @elrinconurbano4 ай бұрын

    Hi @networkberg, I have a question. I have eve-ng comunity and I've noticed for example some things doesn't work in my L2 cisco switch, for example when I type the ip default-gateway in my global configuration, it doesn't take the command. I want to know If that could be a problem with me image or the emulator.

  • @marcelmikusik1863
    @marcelmikusik1863 Жыл бұрын

    What kind of map diagram program do you use please?

  • @eugenevaneck147
    @eugenevaneck14711 ай бұрын

    Hi The Network Berg, can you please post a video on the best way to ensure same input wan traffic return

  • @m-electronics5977
    @m-electronics5977 Жыл бұрын

    What you are using for the Presentation

  • @pedro_8240
    @pedro_82404 ай бұрын

    This is great, but how do I do this for IPv6? I'm tired of getting blocked because I'm using a Hurricane Electric tunnel, because of work stuff, and want to use my ISPs prefix for my own personal traffic.

  • @ameador01
    @ameador012 жыл бұрын

    I would be interested to see how to prioritize traffic - such as VoIP/SIP type traffic. Working on setting up WISP and want to provide VoIP services and want to make sure they will be getting quality calls through the network. Thanks!

  • @TheNetworkBerg

    @TheNetworkBerg

    2 жыл бұрын

    For that you want to consider voice VRFs and a dedicated voice network in your backbone. This is typically more complex than what the MTCRE deals with, though it's definitely something many service providers do to provide voice services with guaranteed bandwidth/quality.

  • @martinsk8088
    @martinsk808810 ай бұрын

    Can i separate youtube and browsing traffic and mangle only youtube traffic ?

  • @fahimrahman5909
    @fahimrahman59092 жыл бұрын

    Hey man, great video. Can you help me plz? You are the best network person i find in KZread. So my problem is i brought a mikrotik hap ac2 router. I am totally noob, i thought its easy like other router. What i want to do is use 2 isp with my router. Right now i only setup router using web gui. Can you please make video on how yo use 2 internet connection using 1 router and port forward isp 1 for Minecraft? Very very appropriate your work

  • @funtube0
    @funtube04 ай бұрын

    Could you help about BGP With PBR

  • @m-electronics5977
    @m-electronics5977 Жыл бұрын

    6:52 what ist "Dude" in the Menu in the winbox?

  • @biddutahmed2018
    @biddutahmed20182 жыл бұрын

    Hello sir, can you make video for viop sitting in mikrotik. imo, whatsapp,line others voice call & video calls bad quality. can you make video for those sitting.

  • @joellopez4414
    @joellopez44145 ай бұрын

    what will happen if 1 isp will go down?

  • @throwawayaccount838
    @throwawayaccount8382 жыл бұрын

    😍😍😍😍😍😍😍😍

  • @eugen8428
    @eugen84282 жыл бұрын

    RouterOS 7.1.2 changed a little. It became more fun multiwan

  • @TheNetworkBerg

    @TheNetworkBerg

    2 жыл бұрын

    Will make a video on it as soon as MikroTik releases a long-term version

  • @ShaneFromSA

    @ShaneFromSA

    Жыл бұрын

    @@TheNetworkBerg Can you do an updated video on this using v7? thanks

  • @oodhosxp
    @oodhosxp Жыл бұрын

    mikrotik version 7

  • @pedromartinezdeaguilar9187
    @pedromartinezdeaguilar918710 ай бұрын

    From my point of view, distance is not importantas it looks for the marking-route, only in th ecase that this wan drops and fall to the other. Best regards

  • @aliraad9958
    @aliraad99582 жыл бұрын

    Can you please share the EVE-NG package with Cisco and Mikrotik devices?

  • @mmrk_

    @mmrk_

    2 жыл бұрын

    The Mikrotik CHRs are free on the Mikrotik website :)

  • @TheNetworkBerg

    @TheNetworkBerg

    2 жыл бұрын

    Unfortunately I am not allowed to share vendor images like Cisco or Juniper because there are some licensing issues and it would be illegal to do so. As mmrk said MikroTik's images are completely free on their website www.mikrotik.com you can download the CHR images from the software tab.