PCC Load Balancing Generator

# =============================================================
# ISP SECTOR - MikroTik Multi-WAN PCC Load Balancing Generator
# RouterOS Version: V7
# Generated at: 2026-09-12 03:33:13
# =============================================================

# --- 1. IP Address Assignment ---
/ip address add address=10.10.1.2/30 interface=ether1-WAN1 comment="WAN1"
/ip address add address=10.10.2.2/30 interface=ether2-WAN2 comment="WAN2"

# --- 2. Fast Resilient DNS ---
/ip dns set allow-remote-requests=yes servers=8.8.8.8,1.1.1.1,8.8.4.4

# --- 3. Source NAT (Masquerade) ---
/ip firewall nat add chain=srcnat out-interface=ether1-WAN1 action=masquerade comment="NAT_WAN1"
/ip firewall nat add chain=srcnat out-interface=ether2-WAN2 action=masquerade comment="NAT_WAN2"

# --- 4. Firewall Mangles (PCC Connection Classifier) ---
# Accept Local Traffic (Bypass balance for local inter-subnet)
/ip firewall mangle add chain=prerouting dst-address=192.168.88.0/24 action=accept comment="ACCEPT_LOCAL"

/ip firewall mangle add chain=prerouting in-interface=ether1-WAN1 connection-state=new action=mark-connection new-connection-mark=WAN1_conn passthrough=yes comment="WAN1_IN"
/ip firewall mangle add chain=prerouting in-interface=ether2-WAN2 connection-state=new action=mark-connection new-connection-mark=WAN2_conn passthrough=yes comment="WAN2_IN"

/ip firewall mangle add chain=prerouting in-interface=bridge1 connection-state=new dst-address-type=!local per-connection-classifier=both-addresses-and-ports:2/0 action=mark-connection new-connection-mark=WAN1_conn passthrough=yes comment="PCC_DIV_0_TO_WAN1"
/ip firewall mangle add chain=prerouting in-interface=bridge1 connection-state=new dst-address-type=!local per-connection-classifier=both-addresses-and-ports:2/1 action=mark-connection new-connection-mark=WAN2_conn passthrough=yes comment="PCC_DIV_1_TO_WAN2"

/ip firewall mangle add chain=prerouting in-interface=bridge1 connection-mark=WAN1_conn action=mark-routing new-routing-mark=to_WAN1 passthrough=yes comment="ROUTE_TO_WAN1"
/ip firewall mangle add chain=output connection-mark=WAN1_conn action=mark-routing new-routing-mark=to_WAN1 passthrough=yes
/ip firewall mangle add chain=prerouting in-interface=bridge1 connection-mark=WAN2_conn action=mark-routing new-routing-mark=to_WAN2 passthrough=yes comment="ROUTE_TO_WAN2"
/ip firewall mangle add chain=output connection-mark=WAN2_conn action=mark-routing new-routing-mark=to_WAN2 passthrough=yes

# --- 5. Routing Tables & Failover Routes ---
# RouterOS v7 Routing Tables creation
/routing table add name=to_WAN1 fib
/routing table add name=to_WAN2 fib

/ip route add dst-address=0.0.0.0/0 gateway=10.10.1.1 routing-table=to_WAN1 check-gateway=ping distance=1 comment="PCC_ROUTE_WAN1"
/ip route add dst-address=0.0.0.0/0 gateway=10.10.2.1 routing-table=to_WAN2 check-gateway=ping distance=1 comment="PCC_ROUTE_WAN2"

# Main Failover Routes (Distance 1, 2, 3...)
/ip route add dst-address=0.0.0.0/0 gateway=10.10.1.1 check-gateway=ping distance=1 comment="MAIN_FALLBACK_WAN1"
/ip route add dst-address=0.0.0.0/0 gateway=10.10.2.1 check-gateway=ping distance=2 comment="MAIN_FALLBACK_WAN2"

# =============================================================
# Done! Copy & Paste this directly into MikroTik WinBox Terminal
# =============================================================