Routes, Equal Cost Multipath Routing, Policy

Routing
Document revision 2.3 (July 20, 2007, 13:21 GMT)
This document applies to V2.9

Table of Contents
Table of Contents
Summary
Specifications
Related Documents
Description
Routes
Description
Property Description
Notes
Example
Policy Rules
Property Description
Notes
Example
Static Equal Cost Multi-Path routing
Standard Policy-Based Routing with Failover

General Information

Summary

  
             !  
"  #"  $

Specifications
Packages required: system
License required: level1
Home menu level: /ip route
Standards and Technologies: IP (RFC 791)
Hardware usage: Not significant

Related Documents

••  %"" " %&

• ' 
• (%

Page 1 of 8
Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
Description

)) &*+   

   ,
• dynamic routes - automatically created routes for networks, which are directly accessed
through an interface. They appear automatically, when adding a new IP address. Dynamic
routes are also added by routing protocols.
• static routes - user-defined routes that specify the router which can forward traffic to the
specified destination network. They are useful for specifying the default gateway

ECMP (Equal Cost Multi-Path) Routing

   #  )       

   "  "
#  $ -           
   " 
) (. 
 "  "  !$ -          #  /  
"
  "$ % 

     
0"  $    
/   ' 
     ) # 
   " 
  
)$      "      ) "   "" " 
"  )  $

     # " #    &  *+'!  # ""   

   
 " #   $ $ 0  "" 
1234$256$7$2234$256$2$2!$ 
       " 
         
  "8"  $ '          " 
"  $

Policy-Based Routing

    
  /   
!   )   #"    
 
 " #  
) "$  &*+  "  
 ,

• )  "" )

  routing-mark
•   
   )" )

Note!      ""

  
   "   )$ %
"

  )  ""   ""  )   prefsrc  "$

Routes
Home menu level: /ip route

Description

  #     +     "  9" & "  
$

Property Description

Page 2 of 8
Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
as-path (text) - manual value of BGP's as-path for outgoing route
atomic-aggregate (yes | no) - BGP attribute. An indication to receiver that it cannot "deaggregate"
the prefix
check-gateway (arp | ping; default: ping) - which protocol to use for gateway reachability
distance (integer: 0..255) - administrative distance of the route. When forwarding a packet, the
router will use the route with the lowest administrative distance and reachable gateway
dst-address (IP address | netmask; default: 0.0.0.0/0) - destination address and network mask,
where netmask is number of bits which indicate network number. Used in static routing to specify
the destination which can be reached, using a gateway
• 0.0.0.0/0 - any network
gateway (IP address) - gateway host, that can be reached directly through some of the interfaces.
You can specify multiple gateways separated by a comma "," for ECMP routes
local-pref (integer) - local preference value for a route
med (integer) - a BGP attribute, which provides a mechanism for BGP speakers to convey to an
adjacent AS the optimal entry point into the local AS
origin (incomplete | igp | egp) - the origin of the route prefix
prefsrc (IP address) - source IP address of packets, leaving router via this route
• 0.0.0.0 - prefsrc is determined automatically
prepend (integer: 0..16) - number which indicates how many times to prepend AS_NAME to
AS_PATH
routing-mark (name) - a mark for packets, defined under /ip firewall mangle. Only those packets
which have the according routing-mark, will be routed, using this gateway. With this parameter we
provide policy based routing
scope (integer: 0..255) - a value which is used to recursively lookup the nexthop addresses.
Nexthop is looked up only through routes that have scope <= target-scope of the nexthop
target-scope (integer: 0..255) - a value which is used to recursively lookup the next-hop addresses.
Each nexthop address selects smallest value of target-scope from all routes that use this nexthop
address. Nexthop is looked up only through routes that have scope <= target-scope of the nexthop

Notes

:       

 
   $        
    "  )"     
$

Example

 "" 
    
) 27$2$24$704; " 7$7$7$707  "  " ""!  

 
  " 
  "",
[admin@MikroTik] ip route> add dst-address=10.1.12.0/24 gateway=192.168.0.253
[admin@MikroTik] ip route> add gateway=10.5.8.1
[admin@MikroTik] ip route> print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf
# DST-ADDRESS G GATEWAY DISTANCE INTERFACE
0 A S 10.1.12.0/24 r 192.168.0.253 Local
1 ADC 10.5.8.0/24 Public

Page 3 of 8
Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
 2 ADC 192.168.0.0/24 Local
3 A S 0.0.0.0/0 r 10.5.8.1 Public
[admin@MikroTik] ip route>

Policy Rules
Home menu level: /ip route rule

Property Description
action (drop | unreachable | lookup; default: unreachable) - action to be processed on packets
matched by this rule:
• drop - silently drop packet
• unreachable - reply that destination host is unreachable
• lookup - lookup route in given routing table
dst-address (IP address/mask) - destination IP address/mask
interface (name; default: "") - interface through which the gateway can be reached
routing-mark (name; default: "") - mark of the packet to be mached by this rule. To add a routing
mark, use '/ip firewall mangle' commands
src-address (IP address/mask) - source IP address/mask
table (name; default: "") - routing table, created by user

Notes

:          "    

)$   ""

#         
)$     &*+   ""  " 
0.0.0.0
  #    <      )$ *   " # " 
 # "$         (%     "   
      
 
)        "   
     "      !$ % )

)"  
#          ", )         

#         
$  
"  
   =
>(+ *? $!
     
 %         !   

 9    
 
 
@       )   

   /  "  !

Example

 ""        )   27$7$7$2;;   " )  mt  # ,
[admin@MikroTik] ip firewall mangle add action=mark-routing new-routing-mark=mt \
\... chain=prerouting
[admin@MikroTik] ip route> add gateway=10.0.0.254 routing-mark=mt
[admin@MikroTik] ip route rule> add src-address=10.0.0.144/32 \
\... table=mt action=lookup
[admin@MikroTik] ip route rule> print
Flags: X - disabled, I - invalid
0 src-address=192.168.0.144/32 action=lookup table=mt

Page 4 of 8
Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
 [admin@MikroTik] ip route rule>

Application Examples

Static Equal Cost Multi-Path routing

"   
 

    )   
) 192.168.0.0/24  4

  10.1.0.1 " 10.1.1.1,

(   +2   4 # " +4  ; # 


    2,4 20?  
0"    192.168.0.0/24    +2 " 40?   +4!$

 ""   ,

[admin@ECMP-Router] ip address> print
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK BROADCAST INTERFACE
0 192.168.0.254/24 192.168.0.0 192.168.0.255 Local
1 10.1.0.2/28 10.1.0.0 10.1.0.15 Public1
2 10.1.1.2/28 10.1.1.0 10.1.1.15 Public2
[admin@ECMP-Router] ip address>

%""  "      +2 " 4  +4 

     2,?,
[admin@ECMP-Router] ip route> add gateway=10.1.0.1,10.1.1.1,10.1.1.1
[admin@ECMP-Router] ip route> print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf

Page 5 of 8
Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
 # DST-ADDRESS G GATEWAY DISTANCE INTERFACE
0 ADC 10.1.0.0/28 Public1
1 ADC 10.1.1.0/28 Public2
2 ADC 192.168.0.0/24 Local
3 A S 0.0.0.0/0 r 10.1.0.1 Public1
r 10.1.1.1 Public2
r 10.1.1.1 Public2
[admin@ECMP-Router] ip route>

Standard Policy-Based Routing with Failover

 / 
 

  )   " ""  $      
   
 ,  )   
) 192.168.0.0/24  
 27$7$7$2 " ) 

) 192.168.1.0/24  
 27$7$7$4$  A-B2 "  "     A-B9) 

) 234$256$7$704;  A-B4 "  "     A-B9)    
)
234$256$2$704; "  A-B4$

 ,

Page 6 of 8
Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
     "",
[admin@PB-Router] ip address> print
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK BROADCAST INTERFACE
0 192.168.0.1/24 192.168.0.0 192.168.0.255 Local1
1 192.168.1.1/24 192.168.1.0 192.168.1.255 Local2
2 10.0.0.7/24 10.0.0.0 10.0.0.255 Public
[admin@PB-Router] ip address>

   "#"    

   ,

1. ) )  

) 234$256$7$704;
  new-routing-mark=net1 " ) 

) 234$256$2$704;
  new-routing-mark=net2,
[admin@PB-Router] ip firewall mangle> add src-address=192.168.0.0/24 \
\... action=mark-routing new-routing-mark=net1 chain=prerouting
[admin@PB-Router] ip firewall mangle> add src-address=192.168.1.0/24 \
\... action=mark-routing new-routing-mark=net2 chain=prerouting
[admin@PB-Router] ip firewall mangle> print

Page 7 of 8
Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
 Flags: X - disabled, I - invalid, D - dynamic
0 chain=prerouting src-address=192.168.0.0/24 action=mark-routing
new-routing-mark=net1
1chain=prerouting src-address=192.168.1.0/24 action=mark-routing
new-routing-mark=net2
[admin@PB-Router] ip firewall mangle>

2. & )  

) 234$256$7$704;  
 A-B2 27$7$7$4! )  
)
234$256$2$704;  
 A-B4 27$7$7$?!   " ) )$  A-B2  A-B4  
"      !    )  A-B  27$7$7$2!,
[admin@PB-Router] ip route> add gateway=10.0.0.2 routing-mark=net1 \
\... check-gateway=ping
[admin@PB-Router] ip route> add gateway=10.0.0.3 routing-mark=net2 \
\... check-gateway=ping
[admin@PB-Router] ip route> add gateway=10.0.0.1
[admin@PB-Router] ip route> print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf
# DST-ADDRESS PREFSRC G GATEWAY DISTANCE INTERFACE
0 ADC 10.0.0.0/24 10.0.0.7 Public
1 ADC 192.168.0.0/24 192.168.0.1 Local1
2 ADC 192.168.1.0/24 192.168.1.1 Local2
3 A S 0.0.0.0/0 r 10.0.0.2 Public
4 A S 0.0.0.0/0 r 10.0.0.3 Public
5 A S 0.0.0.0/0 r 10.0.0.1 Public
[admin@PB-Router] ip route>

Page 8 of 8
Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.