Hmm, well thank you for the advice, but I need to know how can I accomplish my topic question... Can you explain more pls?

Hi guys,

Can I use 2 WANs in the same interface (e.g ether1) simultaneously?
And if that's possible, can I then route traffic in the ip/routes section through WAN1 or WAN2 according to my needs?

Thanks in advance

Here's what I'm getting:



No need to say that the end target (10.2.60.59) is up and working

Route command:
add disabled=no distance=1 dst-address=10.2.60.59/32 gateway=10.1.1.138 scope=30 target-scope=10

Well, you have my entire config, no firewall rules

I can only find config for 10.24.14.1?

Can you please elaborate (explain more) on this? Is something missing?

Well, you have my entire config, no firewall rules

Hi, thank you for your reply, Well it still doesnt work... As you posted in your trace command, it goes through 10.24.14.1, then it goes through 10.1.1.138, with very high pings and after that it continues with timeouts for ever.. The strange thing is that when I'm on the LAN side (10.24.14.1/23), I...

Hi guys,

I'm coming back on this, has anyone any solution to this problem? I didnt manage to solve it. Please note that the router serves a 1000 clients network, it's on production, so I have a very little room space for radical changes on the existing configuration

Back again, still problem exists, anyone can help me on that please?

Hi again,

I still cant figure out what seems to be the problem, can anyone help me?

try adding Routing-Mark=to_Wan2 to the route you are trying to add

Hi,

Done that, still not working... When I use tracert to 10.2.60.59 with routing-mark=to_Wan2, it routes through 10.4.14.1 gateway...

Hi guys, I'm in front of this working configuration: /ip address add address=10.24.14.1/23 disabled=no interface=LAN network=10.24.14.0 add address=10.4.14.2/24 disabled=no interface=WAN1 network=10.4.14.0 add address=10.30.52.242/24 disabled=no interface=WAN2 network=10.30.52.0 add address=10.1.1.2...

I dont see red very well LOL. Best if you use standard format /export hide-sensitive file=yourconfig I see issues in both firewall filter and nat rules. Ugh! Sorry for red colors... edited that already.... I'm posting the entire configuration. The only "active" sections (mine settings) ar...

OK, good news, everything is up and working. As reviewing the whole thing, the scenario was: Mikrotik router is handling 2 WANs and 1 LAN interface: WAN1 has 10.4.14.1 as gateway WAN2 has 10.33.52.1 as gateway The router has two basic tasks: 1. Route all traffic through WAN1, except one specific des...

Guys, thank you for your feedback, I'm trying to implement all the settings and I'll get back to you

Ok, one correction, you don't necessarily have to mark incoming connections if the server (10.24.14.21) is going to alway use WAN2, even for own outgoing connections. In that case you can use simpler: /ip route add dst-addres=0.0.0.0/0 gateway=10.33.52.1 routing-mark=wan2 /ip firewall mangle add ch...

Thank you guys for your snappy replies.

I would like to ask you in my posted configuration, did you notice any "flaws"?
I'll try to post the exported conf. as soon as I get back to the office

Hi guys, The old router died, so I came up to the marvel that is called “RouterOS”. I try the last days to understand the principles and make things work as it was before the “meltdown”. So I have a critical situation here and I’m gonna try to be as analytical as I can be: Mikrotik configuration so ...

OK guys, let me try all your suggestions and I'll get back to you, thank you

Thank you for your snapy reply, please check my edited post before yours

I have already this rule in NAT: chain=srcnat action=masquerade src-address=10.240.xx.0/26 I need this: If someone hits this address (external) : 10.xx.xx.242:8080, the router leads the request to the internal (LAN) address: 10.240.xx.21:8080, through WAN1 interface. Should I use src-nat or dst-nat ...

Hi guys, I have this situation. An old Cisco router died recently with this NAT configuration (check the attached image): Original Address: 10.240.xx.0-10.240.xx.63 Translated Address: 10.xx.xx.251 Rule Type Dynamic Original Address: 10.240.xx.21 (8080) Translated Address: 10.xx.xx.242 (8080) Rule T...

/ip firewall filter FORWARD CHAIN order - drop invalid - accept established, connected, untracked - accept in-interface=LAN destination-address-list=special_sites out-interface=ether1 - accept in-interface=LAN destination-address-list=! special_sites out-interface=ether2 - log log=yes prefix="...

Hi guys, I'm coming back with this post, as I said, can anyone help me about how to allow all traffic through ISP2 WAN except these 2 IPs: 10.10.10.1 & 10.10.10.2? Thank you guys for all your answers! Well, that's what I have setup so far: /ip route add dest-address=0.0.0.0/0 gatewayIP (of ISP2)...

Thank you guys for all your answers! Well, that's what I have setup so far: /ip route add dest-address=0.0.0.0/0 gatewayIP (of ISP2) distance=1 add dest-address=10.10.10.0/30 gatewayIP (of ISP1) distance=1 It works OK, the traffic flows correctly, but: When I disable the ISP1 interface, or just unpl...

Can anyone help me with that please?

Greetings from Athens, Greece. I have this configuration: 2 WAN interfaces (WAN1 & WAN2) and 1 LAN. I want to route these specific destination addresses (10.10.10.1 & 10.10.10.2) through WAN1 (gateway is 192.168.1.1) and simultaneously block all other traffic to use this WAN interface. I als...