Community discussions

MikroTik App
  4. RouterOS
  5. General

Load balancing - One static IP sometimes is unreachable

Post Reply
 
eXtremer
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 95
Joined: Fri Nov 26, 2010 10:33 am

Load balancing - One static IP sometimes is unreachable

Thu Jul 07, 2011 11:35 am

Hi all.

I'm using 2 providers with RB750G (load balancing + routing failover), since I've changed one provide a week ago I'm having sporadic problems reaching one of the static IP, I'm pinging the IP everything is all right after 5 minutes can't reach it any more, then I can reach it again after some time, really can't understand what's going on, this problem happens only with the old provider, the new one is reachable all the time don't have any issues with it, I'm 100% sure there is nothing wrong with the provider, something is not right with the config. or I don't know...
The problem is with: 77.89.XXX.142, I must say there was no changes in configuration, just added the new (188.23X.XX.115) provider, that's it.
Need some help, thank you.

Image Image


Image
Code: Select all
[admin@MikroTik] > /ip route print detail        
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
0 A S  dst-address=0.0.0.0/0 gateway=188.23X.XX.1 gateway-status=188.23X.XX.1 reachable MTC check-gateway=ping distance=1 scope=30 target-scope=10
        routing-mark=MTC

1 A S  dst-address=0.0.0.0/0 gateway=77.89.XXX.141 gateway-status=77.89.XXX.141 reachable Orange check-gateway=ping distance=1 scope=30 target-scope=10
        routing-mark=Orange

2 A S  dst-address=0.0.0.0/0 gateway=77.89.XXX.141,188.23X.XX.1 gateway-status=77.89.XXX.141 reachable WAN2,188.23X.XX.1 reachable MTC 
        check-gateway=ping distance=1 scope=30 target-scope=10 

3 A S  dst-address=77.89.XXX.0/24 gateway=77.89.XXX.141 gateway-status=77.89.XXX.141 reachable Orange check-gateway=ping distance=1 scope=30
        target-scope=10

4 ADC  dst-address=77.89.XXX.140/30 pref-src=77.89.XXX.142 gateway=Orange gateway-status=Orange reachable distance=0 scope=10

5 ADC  dst-address=188.23X.XX.0/24 pref-src=188.23X.XX.105 gateway=MTC gateway-status=MTC reachable distance=0 scope=10

6 A S  dst-address=188.237.77.105/32 gateway=188.23X.XX.1 gateway-status=188.23X.XX.1 reachable MTC check-gateway=ping distance=1 scope=30
        target-scope=10

7 ADC  dst-address=192.168.0.0/24 pref-src=192.168.0.1 gateway=LAN1 gateway-status=LAN1 reachable distance=0 scope=10
[admin@MikroTik] >
Code: Select all
[admin@MikroTik] > /ip route nexthop print detail
0 address=77.89.XXX.141 gw-state=reachable scope=10 check-gateway=icmp gw-check-ok=yes

1 address=188.23X.XX.1 gw-state=reachable scope=10 check-gateway=icmp gw-check-ok=yes
[admin@MikroTik] >
Top
 
Juwei
Frequent Visitor
Frequent Visitor
Posts: 52
Joined: Sun May 28, 2006 8:19 pm

Re: Load balancing - One static IP sometimes is unreachable

Thu Jul 07, 2011 1:54 pm

Can you please post the mangle (or full) configuration for the both lines?
Maybe the answer paket is not sending thru the line where the packen got received?

When used two lines with PCC i initially got the same problem, fixed this after adding some rules to ensure the paket is leaving the correct line.
Top
 
eXtremer
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 95
Joined: Fri Nov 26, 2010 10:33 am

Re: Load balancing - One static IP sometimes is unreachable

Thu Jul 07, 2011 2:13 pm

There are no mangle rules, I'm using ECMP not PCC.
Top
 
Juwei
Frequent Visitor
Frequent Visitor
Posts: 52
Joined: Sun May 28, 2006 8:19 pm

Re: Load balancing - One static IP sometimes is unreachable

Thu Jul 07, 2011 2:21 pm

So how do you tell the router to send the answer (outgoing) thru the same line as they came in?
Top
 
Juwei
Frequent Visitor
Frequent Visitor
Posts: 52
Joined: Sun May 28, 2006 8:19 pm

Re: Load balancing - One static IP sometimes is unreachable

Thu Jul 07, 2011 2:24 pm

Please see this link:
http://wiki.mikrotik.com/wiki/ECMP_load ... masquerade

Connections to the router itself
With all multi-gateway situations there is a usual problem to reach router from public network via one, other or both gateways. Explanations is very simple - Outgoing packets uses same routing decision as packets that are going trough the router. So reply to a packet that was received via wlan1 might be send out and masqueraded via wlan2.

To avoid that we need to policy routing those connections.
Top
 
eXtremer
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 95
Joined: Fri Nov 26, 2010 10:33 am

Re: Load balancing - One static IP sometimes is unreachable

Thu Jul 07, 2011 3:16 pm

Added those lines..

/ ip firewall mangle
add chain=input in-interface=wlan1 action=mark-connection new-connection-mark=wlan1_conn
add chain=input in-interface=wlan2 action=mark-connection new-connection-mark=wlan2_conn
add chain=output connection-mark=wlan1_conn action=mark-routing new-routing-mark=to_wlan1
add chain=output connection-mark=wlan1_conn action=mark-routing new-routing-mark=to_wlan2


Till the day I changed one provider everything was working just fine without this rules.
Will see if this will solve the issue...
10x.
Top
 
eXtremer
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 95
Joined: Fri Nov 26, 2010 10:33 am

Re: Load balancing - One static IP sometimes is unreachable

Sun Jul 10, 2011 9:47 am

Nothing changed, still have this issue...
I've made a rule to check every 20 seconds if port 25 is unreachable (I have a mail server behind mikrotik) it's not such a big probelm because mail are keep on coming through the other IP but this situation needs to be solved, can't understand why it's happening like this...

Image

Needs some advice, thank you.
Top
 
Juwei
Frequent Visitor
Frequent Visitor
Posts: 52
Joined: Sun May 28, 2006 8:19 pm

Re: Load balancing - One static IP sometimes is unreachable

Sun Jul 10, 2011 11:11 am

Please post your config.
Top
 
eXtremer
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 95
Joined: Fri Nov 26, 2010 10:33 am

Re: Load balancing - One static IP sometimes is unreachable

Sun Jul 10, 2011 11:47 am

Please post your config.
Once again I must say that I'm having issues only with Orange interface (77.89.XXX.142), with the second Provider (MTC) everything is all right, allways reachable.
Another thing, after adding the Mangle rules, the IP now is always reachable (ping), but when trying to telnet IP:PORT, sometimes there is a reply, sometimes not, and what's interesting I can always login with Winbox with IP that has the problem.
Thank you...
Code: Select all
[admin@MikroTik] > ip export
# jul/10/2011 11:22:48 by RouterOS 4.11
#
/ip hotspot profile
set default dns-name="" hotspot-address=0.0.0.0 html-directory=hotspot http-cookie-lifetime=3d http-proxy=0.0.0.0:0 login-by=cookie,http-chap name=\
    default rate-limit="" smtp-server=0.0.0.0 split-user-domain=no use-radius=no

/ip hotspot user profile
set default idle-timeout=none keepalive-timeout=2m name=default shared-users=1 status-autorefresh=1m transparent-proxy=no

/ip ipsec proposal
set default auth-algorithms=sha1 comment="" disabled=no enc-algorithms=3des lifetime=30m name=default pfs-group=modp1024

/ip pool
add name=dhcp_pool1 ranges=192.168.0.3-192.168.0.199

/ip dhcp-server
add add-arp=yes address-pool=dhcp_pool1 authoritative=after-2sec-delay bootp-support=static disabled=no interface=LAN1 lease-time=12h name=dhcp1

/ip accounting
set account-local-traffic=no enabled=yes threshold=256

/ip accounting web-access
set accessible-via-web=yes address=0.0.0.0/0

/ip address
add address=192.168.0.1/24 broadcast=192.168.0.255 comment="" disabled=no interface=LAN1 network=192.168.0.0
add address=77.89.XXX.142/30 broadcast=77.89.XXX.143 comment="" disabled=no interface=Orange network=77.89.XXX.140

/ip dhcp-client
add add-default-route=yes comment="" default-route-distance=0 disabled=no interface=MTC use-peer-dns=yes use-peer-ntp=yes

/ip dhcp-server config
set store-leases-disk=5m

/ip dhcp-server network
add address=192.168.0.0/24 comment="" gateway=192.168.0.1 netmask=24

/ip dns
set allow-remote-requests=yes cache-max-ttl=1w cache-size=2048KiB max-udp-packet-size=512 servers=212.56.19X.XX,212.56.19X.XX


/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s tcp-close-wait-timeout=10s tcp-established-timeout=1d tcp-fin-wait-timeout=\
    10s tcp-last-ack-timeout=10s tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s tcp-syncookie=no tcp-time-wait-timeout=10s udp-stream-timeout=3m \
    udp-timeout=10s

/ip firewall filter
nreachable
add action=drop chain=input comment="" disabled=no dst-port=8080 in-interface=Orange protocol=tcp src-address=0.0.0.0/0
add action=drop chain=input comment="" disabled=no dst-port=8080 in-interface=MTC protocol=tcp src-address=0.0.0.0/0
add action=accept chain=input comment="" disabled=no protocol=icmp
add action=accept chain=input comment="" disabled=no dst-port=8282 protocol=tcp src-address=192.168.0.0/24
add action=accept chain=input comment="" disabled=no dst-port=8282 protocol=tcp src-address=92.115.XXX.XXX
add action=accept chain=input comment="Added by webbox" connection-state=established disabled=no in-interface=Orange
add action=accept chain=input comment="Added by webbox" connection-state=established disabled=no in-interface=MTC
add action=accept chain=input comment="Added by webbox" connection-state=related disabled=no in-interface=Orange
add action=accept chain=input comment="Added by webbox" connection-state=related disabled=no in-interface=MTC
add action=drop chain=input comment="Added by webbox" disabled=no in-interface=Orange
add action=drop chain=input comment="Added by webbox" disabled=no in-interface=MTC
add action=jump chain=forward comment="Added by webbox" disabled=no in-interface=Orange jump-target=customer
add action=jump chain=forward comment="Added by webbox" disabled=no in-interface=MTC jump-target=customer
add action=accept chain=customer comment="Added by webbox" connection-state=established disabled=no
add action=accept chain=customer comment="Added by webbox" connection-state=related disabled=no
add action=drop chain=input comment="" disabled=no dst-port=8282 protocol=tcp

/ip firewall mangle
add action=mark-connection chain=input comment="" disabled=no in-interface=Orange new-connection-mark=Orange passthrough=yes
add action=mark-connection chain=input comment="" disabled=no in-interface=MTC new-connection-mark=MTC passthrough=yes
add action=mark-routing chain=output comment="" connection-mark=Orange disabled=no new-routing-mark=Orange passthrough=yes
add action=mark-routing chain=output comment="" connection-mark=MTC disabled=no new-routing-mark=MTC passthrough=yes

/ip firewall nat
add action=dst-nat chain=dstnat comment="" disabled=no dst-port=2222 protocol=tcp to-addresses=192.168.0.187 to-ports=2222
add action=dst-nat chain=dstnat comment="" disabled=no dst-port=1111 protocol=tcp to-addresses=192.168.0.250 to-ports=1111
add action=dst-nat chain=dstnat comment="" disabled=no dst-port=20633 protocol=udp to-addresses=192.168.0.18 to-ports=20633
add action=dst-nat chain=dstnat comment="" disabled=no dst-port=20633 protocol=tcp to-addresses=192.168.0.18 to-ports=20633
add action=dst-nat chain=dstnat comment="" disabled=no dst-address-type=local dst-port=25 protocol=tcp to-addresses=192.168.0.6 to-ports=25
add action=dst-nat chain=dstnat comment="" disabled=no dst-address-type=local dst-port=143 protocol=tcp to-addresses=192.168.0.6 to-ports=143
add action=dst-nat chain=dstnat comment="" disabled=no dst-address-type=local dst-port=465 protocol=tcp to-addresses=192.168.0.6 to-ports=465
add action=dst-nat chain=dstnat comment="" disabled=no dst-address-type=local dst-port=993 protocol=tcp to-addresses=192.168.0.6 to-ports=993
add action=dst-nat chain=dstnat comment="" disabled=no dst-address-type=local dst-port=995 protocol=tcp to-addresses=192.168.0.6 to-ports=995
add action=masquerade chain=srcnat comment="Added by webbox" disabled=no out-interface=Orange
add action=masquerade chain=srcnat comment="" disabled=no out-interface=MTC
add action=dst-nat chain=dstnat comment="" disabled=no dst-address=188.237.XX.105 dst-port=443 protocol=tcp to-addresses=192.168.0.2 to-ports=443
add action=dst-nat chain=dstnat comment="" disabled=no dst-address=77.89.XXX.142 dst-port=443 protocol=tcp to-addresses=192.168.0.2 to-ports=443
add action=dst-nat chain=dstnat comment="" disabled=no dst-port=81 protocol=tcp to-addresses=192.168.0.2 to-ports=81
add action=dst-nat chain=dstnat comment="" disabled=no dst-address=188.237.XX.105 dst-port=80 protocol=tcp to-addresses=192.168.0.2 to-ports=81
add action=dst-nat chain=dstnat comment="" disabled=no dst-address=77.89.XXX.142 dst-port=80 protocol=tcp to-addresses=192.168.0.2 to-ports=81
add action=dst-nat chain=dstnat comment="" disabled=no dst-port=80 protocol=tcp to-addresses=192.168.0.1 to-ports=8080
add action=masquerade chain=srcnat comment="" disabled=no dst-address=192.168.0.6 out-interface=LAN1 src-address=192.168.0.0/24

/ip firewall service-port
set ftp disabled=yes ports=21
set tftp disabled=yes ports=69
set irc disabled=yes ports=6667
set h323 disabled=yes
set sip disabled=yes ports=5060,5061
set pptp disabled=yes

/ip hotspot service-port
set ftp disabled=no ports=21

/ip neighbor discovery
set MTC discover=no
set Orange discover=no
set LAN1 discover=no
set LAN2 discover=no
set LAN3 discover=no
/
ip proxy
set always-from-cache=no cache-administrator=Administrator cache-hit-dscp=4 cache-on-disk=no enabled=yes max-cache-size=none max-client-connections=600 \
    max-fresh-time=3d max-server-connections=600 parent-proxy=0.0.0.0 parent-proxy-port=0 port=8080 serialize-connections=no src-address=0.0.0.0

/ip route
add check-gateway=ping comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=188.237.XX.1 routing-mark=MTC scope=30 target-scope=10
add check-gateway=ping comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=77.89.XXX.141 routing-mark=Orange scope=30 target-scope=10
add check-gateway=ping comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=77.89.XXX.141,188.237.XX.1 scope=30 target-scope=10
add check-gateway=ping comment="" disabled=no distance=1 dst-address=77.89.XXXX.0/24 gateway=77.89.XXX.141 scope=30 target-scope=10
add check-gateway=ping comment="" disabled=no distance=1 dst-address=188.237.XX.105/32 gateway=188.237.XX.1 scope=30 target-scope=10

/ip service
set telnet address=0.0.0.0/0 disabled=yes port=23
set ftp address=192.168.0.0/24 disabled=yes port=21
set www address=192.168.0.0/24 disabled=no port=3030
set ssh address=0.0.0.0/0 disabled=yes port=22
set www-ssl address=0.0.0.0/0 certificate=none disabled=yes port=443
set api address=0.0.0.0/0 disabled=yes port=8728
set winbox address=0.0.0.0/0 disabled=no port=8282

/ip socks
set connection-idle-timeout=2m enabled=no max-connections=200 port=1080

/ip traffic-flow
set active-flow-timeout=30m cache-entries=4k enabled=no inactive-flow-timeout=15s interfaces=Orange

/ip upnp
set allow-disable-external-interface=no enabled=yes show-dummy-rule=yes

/ip upnp interfaces
add disabled=yes interface=MTC type=internal
add disabled=yes interface=Orange type=external
add disabled=yes interface=LAN1 type=internal
add disabled=yes interface=LAN2 type=internal
add disabled=yes interface=LAN3 type=internal
add disabled=yes type=external
[admin@MikroTik] >
Code: Select all
[admin@MikroTik] > /ip route print detail        
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
0 A S  dst-address=0.0.0.0/0 gateway=188.23X.XX.1 gateway-status=188.23X.XX.1 reachable MTC check-gateway=ping distance=1 scope=30 target-scope=10
        routing-mark=MTC

1 A S  dst-address=0.0.0.0/0 gateway=77.89.XXX.141 gateway-status=77.89.XXX.141 reachable Orange check-gateway=ping distance=1 scope=30 target-scope=10
        routing-mark=Orange

2 A S  dst-address=0.0.0.0/0 gateway=77.89.XXX.141,188.23X.XX.1 gateway-status=77.89.XXX.141 reachable WAN2,188.23X.XX.1 reachable MTC 
        check-gateway=ping distance=1 scope=30 target-scope=10 

3 A S  dst-address=77.89.XXX.0/24 gateway=77.89.XXX.141 gateway-status=77.89.XXX.141 reachable Orange check-gateway=ping distance=1 scope=30
        target-scope=10

4 ADC  dst-address=77.89.XXX.140/30 pref-src=77.89.XXX.142 gateway=Orange gateway-status=Orange reachable distance=0 scope=10

5 ADC  dst-address=188.23X.XX.0/24 pref-src=188.23X.XX.105 gateway=MTC gateway-status=MTC reachable distance=0 scope=10

6 A S  dst-address=188.237.77.105/32 gateway=188.23X.XX.1 gateway-status=188.23X.XX.1 reachable MTC check-gateway=ping distance=1 scope=30
        target-scope=10

7 ADC  dst-address=192.168.0.0/24 pref-src=192.168.0.1 gateway=LAN1 gateway-status=LAN1 reachable distance=0 scope=10
[admin@MikroTik] >
Code: Select all
[admin@MikroTik] > /ip route nexthop print detail
0 address=77.89.XXX.141 gw-state=reachable scope=10 check-gateway=icmp gw-check-ok=yes

1 address=188.23X.XX.1 gw-state=reachable scope=10 check-gateway=icmp gw-check-ok=yes
[admin@MikroTik] >
Top
 
eXtremer
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 95
Joined: Fri Nov 26, 2010 10:33 am

Re: Load balancing - One static IP sometimes is unreachable

Sun Jul 10, 2011 12:09 pm

Just checked, NO connection to port 25, but I can connect to the router with Winbox - same IP.
Top
 
Juwei
Frequent Visitor
Frequent Visitor
Posts: 52
Joined: Sun May 28, 2006 8:19 pm

Re: Load balancing - One static IP sometimes is unreachable

Sun Jul 10, 2011 12:10 pm

Try adding this mangle rules:
Code: Select all
/ip firewall mangle
add action=mark-connection chain=prerouting comment="" disabled=no dst-address-type=!local in-interface=Orange new-connection-mark=Orange passthrough=yes
add action=mark-connection chain=prerouting comment="" disabled=no dst-address-type=!local in-interface=MTC new-connection-mark=MTC passthrough=yes
add action=mark-routing chain=prerouting comment="" connection-mark=Orange disabled=no in-interface=LAN1 new-routing-mark=Orange passthrough=yes
add action=mark-routing chain=prerouting comment="" connection-mark=MTC disabled=no in-interface=LAN1 new-routing-mark=MTC passthrough=yes
Top
 
Juwei
Frequent Visitor
Frequent Visitor
Posts: 52
Joined: Sun May 28, 2006 8:19 pm

Re: Load balancing - One static IP sometimes is unreachable

Sun Jul 10, 2011 12:20 pm

Hmm, forgot to add "connection-mark=no-mark" to the incoming mangle (so it doesn't mark replying packets from outgoing connections).
Also "dst-address-type=!local" should not be necessary for this prerouting. This ist just an example, try this and test if this is working for you :)
Correct:
Code: Select all
/ip firewall mangle
add action=mark-connection chain=prerouting connection-mark=no-mark comment="" disabled=no in-interface=Orange new-connection-mark=Orange passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark comment="" disabled=no in-interface=MTC new-connection-mark=MTC passthrough=yes
add action=mark-routing chain=prerouting comment="" connection-mark=Orange disabled=no in-interface=LAN1 new-routing-mark=Orange passthrough=yes
add action=mark-routing chain=prerouting comment="" connection-mark=MTC disabled=no in-interface=LAN1 new-routing-mark=MTC passthrough=yes
Top
 
eXtremer
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 95
Joined: Fri Nov 26, 2010 10:33 am

Re: Load balancing - One static IP sometimes is unreachable

Sun Jul 10, 2011 2:28 pm

Hmm, forgot to add "connection-mark=no-mark" to the incoming mangle (so it doesn't mark replying packets from outgoing connections).
Also "dst-address-type=!local" should not be necessary for this prerouting. This ist just an example, try this and test if this is working for you :)
Correct:
Code: Select all
/ip firewall mangle
add action=mark-connection chain=prerouting connection-mark=no-mark comment="" disabled=no in-interface=Orange new-connection-mark=Orange passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark comment="" disabled=no in-interface=MTC new-connection-mark=MTC passthrough=yes
add action=mark-routing chain=prerouting comment="" connection-mark=Orange disabled=no in-interface=LAN1 new-routing-mark=Orange passthrough=yes
add action=mark-routing chain=prerouting comment="" connection-mark=MTC disabled=no in-interface=LAN1 new-routing-mark=MTC passthrough=yes
Added those lines, till now all good, I will enable the "25 port alert" too see if the port is always reachable.
Thank you Juwei and have a nice day.

Another thing, how to check an IP for example 8.8.8.8 and not the gateway for a route and another ? becase sometimes the gateway is reachable but there is no internet and the routing failover is not working as it should.

Thank you in advance.
Top
 
User avatar
peterd
newbie
Posts: 46
Joined: Mon Nov 05, 2007 1:23 pm

Re: Load balancing - One static IP sometimes is unreachable

Mon Jul 11, 2011 10:48 am

Hi,

Check the post below, should help you.

http://forum.mikrotik.com/viewtopic.php?f=2&t=53090


PJD
Top
 
eXtremer
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 95
Joined: Fri Nov 26, 2010 10:33 am

Re: Load balancing - One static IP sometimes is unreachable

Mon Jul 11, 2011 10:56 am

Hi,

Check the post below, should help you.

http://forum.mikrotik.com/viewtopic.php?f=2&t=53090
PJD
Thanks, but I don't want script, I know there is a easier workaround, in my case both IP's are static, no modems or whatsoever.
Top
 
sophal
newbie
Posts: 34
Joined: Thu Aug 07, 2008 6:09 am
Location: Cambodia

Re: Load balancing - One static IP sometimes is unreachable

Mon Jul 11, 2011 11:59 am

you try to change the 1st upstream don't change distance=1, 2nd upstream change distance=2

example:
/ip route
add check-gateway=ping comment="1st upstream" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=x.x.x.x/x scope=30 target-scope=10

add check-gateway=ping comment="2nd upstream" disabled=no distance=2 dst-address=0.0.0.0/0 gateway=x.x.x.x/x scope=30 target-scope=10
Top
 
eXtremer
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 95
Joined: Fri Nov 26, 2010 10:33 am

Re: Load balancing - One static IP sometimes is unreachable

Mon Jul 11, 2011 12:12 pm

you try to change the 1st upstream don't change distance=1, 2nd upstream change distance=2

example:
/ip route
add check-gateway=ping comment="1st upstream" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=x.x.x.x/x scope=30 target-scope=10

add check-gateway=ping comment="2nd upstream" disabled=no distance=2 dst-address=0.0.0.0/0 gateway=x.x.x.x/x scope=30 target-scope=10
Sorry guys, let me explain once again, it's not about the distance...So, it says that the gateway is reachable, although I don't have internet because my Provider doesn't block the Port, I can navigate to local websites (intranet) but I don't have access to external websites (internet), so I need not to ping my gateway but an external IP, for example 8.8.8.8 so if it s not reachable that route will not be used but only the good one.
Top
 
User avatar
peterd
newbie
Posts: 46
Joined: Mon Nov 05, 2007 1:23 pm

Re: Load balancing - One static IP sometimes is unreachable

Mon Jul 11, 2011 2:05 pm

My script does exactly that, the ips on the top 192.168.2.1 and 3.1 could be replaced with your static or something like 8.8.8.8, thats on Internet then just adapt the routes so its checking via each line, and disables the one with no internet access.

Simple.

Btw.

I don't think there is another way of doing it, If someone knows please share it.

Regards,


PJD
Top
 
eXtremer
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 95
Joined: Fri Nov 26, 2010 10:33 am

Re: Load balancing - One static IP sometimes is unreachable

Mon Jul 11, 2011 2:58 pm

My script does exactly that, the ips on the top 192.168.2.1 and 3.1 could be replaced with your static or something like 8.8.8.8, thats on Internet then just adapt the routes so its checking via each line, and disables the one with no internet access.

Simple.

Btw.

I don't think there is another way of doing it, If someone knows please share it.

Regards,
PJD
What else should be change in the script in my case ? What should I put instead of "ether1_traffic" ? Something else ?
Code: Select all
:global ping1 [/ping 8.8.8.8 count=3 routing-table=ether1_traffic]
:global ping2 [/ping 8.8.8.8 count=3 routing-table=ether2_traffic]
:global gw1 [/ip route get number=0  gateway-status]
:global gw2 [/ip route get number=1  gateway-status]

:if (($ping1=0) && ($ping2=3) && ($gw1="77.89.XXX.141 reachable ether1")) do={/ip route disable numbers=[find gateway=77.89.XXX.141];  [:log info  "disabling route 141"];}
:if (($ping1=3) && ($ping2=3) && ($gw1!="77.89.XXX.141 reachable ether1")) do={/ip route enable numbers=[find gateway=77.89.XXX.141]; [:log info  "enabling route 141"];}

:if (($ping1=3) && ($ping2=0) && ($gw2="188.237.XX.1 reachable ether2")) do={/ip route disable numbers=[find gateway=188.237.XX.1];  [:log info  "disabling route 1"];}
:if (($ping1=3) && ($ping2=3) && ($gw2!="188.237.XX.1 reachable ether2")) do={/ip route enable numbers=[find gateway=188.237.XX.1]; [:log info  "enabling route 1"];}

:if (($ping1=0) && ($ping2=0)) do={[/ip route enable numbers=[find gateway=77.89.XXX.141]]; [/ip route enable numbers=[find gateway=188.237.XX.1]]; [:log info  "fail safe enabling 141 and 1"];}
Top
 
User avatar
peterd
newbie
Posts: 46
Joined: Mon Nov 05, 2007 1:23 pm

Re: Load balancing - One static IP sometimes is unreachable

Mon Jul 11, 2011 3:17 pm

Hi,

the routing table bit you can change to interface=ether1 and 2 accordingly that should work, cause you want to ping out on a certain interface to check if it has internet conectivity.

:global ping1 [/ping 8.8.8.8 count=3 interface=ether1]
:global ping2 [/ping 8.8.8.8 count=3 interface=ether2]

Although I haven't tested it myself, please report on progress.

PJD
Top
 
eXtremer
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 95
Joined: Fri Nov 26, 2010 10:33 am

Re: Load balancing - One static IP sometimes is unreachable

Mon Jul 11, 2011 3:47 pm

After adding this script...
Code: Select all
:global ping1 [/ping 8.8.8.8 count=3 interface=Orange]
:global ping2 [/ping 8.8.8.4 count=3 interface=MTC]
:global gw1 [/ip route get number=0  gateway-status]
:global gw2 [/ip route get number=1  gateway-status]

:if (($ping1=0) && ($ping2=3) && ($gw1="77.89.XXX.141 reachable ether1")) do={/ip route disable numbers=[find gateway=77.89.XXX.141];  [:log info  "disabling route Orange"];}
:if (($ping1=3) && ($ping2=3) && ($gw1!="77.89.XXX.141 reachable ether1")) do={/ip route enable numbers=[find gateway=77.89.XXX.141]; [:log info  "enabling route Orange"];}

:if (($ping1=3) && ($ping2=0) && ($gw2="188.237.XX.1 reachable ether2")) do={/ip route disable numbers=[find gateway=188.237.XX.1];  [:log info  "disabling route MTC"];}
:if (($ping1=3) && ($ping2=3) && ($gw2!="188.237.XX.1 reachable ether2")) do={/ip route enable numbers=[find gateway=188.237.XX.1]; [:log info  "enabling route MTC"];}

:if (($ping1=0) && ($ping2=0)) do={[/ip route enable numbers=[find gateway=77.89.XXX.141]]; [/ip route enable numbers=[find gateway=188.237.XX.1]]; [:log info  "fail safe enabling Orange and MTC"];}
This is what happened, log:
Code: Select all
15:38:31 system,info new script added by admin 
15:38:40 system,info route changed by admin 
15:38:40 route,debug,event Updated route 
15:38:40 route,debug,event     previous-state=ACTIVE 
15:38:40 route,debug,event     state=CANDIDATE 
15:38:40 route,debug,event     dst-address=0.0.0.0/0 
15:38:40 route,debug,event     attributes 
15:38:40 route,debug,event         protocol=STATIC 
15:38:40 route,debug,event         distance=1 
15:38:40 route,debug,event         scope=30 
15:38:40 route,debug,event         target-scope=10 
15:38:40 route,debug,event         next-hop= address=77.89.XXX.141 
15:38:40 route,debug,event         routing-mark=Orange 
15:38:40 route,debug,event         table=Orange 
15:38:40 route,debug,event         need-gateway-check=2 
15:38:40 route,debug,event         comment= 
15:38:40 route,debug,event         origin-type=STATIC 
15:38:40 system,info route changed by admin 
15:38:41 route,debug,event Updated route 
15:38:41 route,debug,event     previous-state=ACTIVE 
15:38:41 route,debug,event     state=CANDIDATE 
15:38:41 route,debug,event     dst-address=77.89.XXX.0/24 
15:38:41 route,debug,event     attributes 
15:38:41 route,debug,event         protocol=STATIC 
15:38:41 route,debug,event         distance=1 
15:38:41 route,debug,event         scope=30 
15:38:41 route,debug,event         target-scope=10 
15:38:41 route,debug,event         next-hop= address=77.89.XXX.141 
15:38:41 route,debug,event         need-gateway-check=2 
15:38:41 route,debug,event         comment= 
15:38:41 route,debug,event         origin-type=STATIC 
15:38:41 script,info enabling route Orange 
15:38:41 system,info route changed by admin 
15:38:41 route,debug,event Updated route 
15:38:41 route,debug,event     previous-state=ACTIVE 
15:38:41 route,debug,event     state=CANDIDATE 
15:38:41 route,debug,event     dst-address=0.0.0.0/0 
15:38:41 route,debug,event     attributes 
15:38:41 route,debug,event         protocol=STATIC 
15:38:41 route,debug,event         distance=1 
15:38:41 route,debug,event         scope=30 
15:38:41 route,debug,event         target-scope=10 
15:38:41 route,debug,event         next-hop= address=188.237.XX.1 
15:38:41 route,debug,event         routing-mark=MTC 
15:38:41 route,debug,event         table=MTC 
15:38:41 route,debug,event         need-gateway-check=2 
15:38:41 route,debug,event         comment= 
15:38:41 route,debug,event         origin-type=STATIC 
15:38:41 system,info route changed by admin 
15:38:41 route,debug,event Updated route 
15:38:41 route,debug,event     previous-state=ACTIVE 
15:38:41 route,debug,event     state=CANDIDATE 
15:38:41 route,debug,event     dst-address=188.237.XX.105/32 
15:38:41 route,debug,event     attributes 
15:38:41 route,debug,event         protocol=STATIC 
15:38:41 route,debug,event         distance=1 
15:38:41 route,debug,event         scope=30 
15:38:41 route,debug,event         target-scope=10 
15:38:41 route,debug,event         next-hop= address=188.237.XX.1 
15:38:41 route,debug,event         need-gateway-check=2 
15:38:41 route,debug,event         comment= 
15:38:41 route,debug,event         origin-type=STATIC 
15:38:41 script,info enabling route MTC
Don't know if it's working or not ?!

($gw1="192.168.2.1 reachable ether1") - what "ether1" stands for ? do I need it ?

Run Count = 0
Top
 
eXtremer
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 95
Joined: Fri Nov 26, 2010 10:33 am

Re: Load balancing - One static IP sometimes is unreachable

Mon Jul 11, 2011 3:55 pm

No, the script is not working because I made a mistake first time, added IP 8.8.8.4 that is wrong, there is no such IP and that route should be disabled but it didn't happened.
Top
 
User avatar
peterd
newbie
Posts: 46
Joined: Mon Nov 05, 2007 1:23 pm

Re: Load balancing - One static IP sometimes is unreachable

Mon Jul 11, 2011 4:55 pm

Hi,

I did supply this script to be amended not a ready solution.

Provide your ip address print, and route print, and I will look at it for you.

PJD
Top
 
eXtremer
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 95
Joined: Fri Nov 26, 2010 10:33 am

Re: Load balancing - One static IP sometimes is unreachable

Mon Jul 11, 2011 5:04 pm

Hi,

I did supply this script to be amended not a ready solution.

Provide your ip address print, and route print, and I will look at it for you.

PJD
Code: Select all
[admin@MikroTik] > ip address print
Flags: X - disabled, I - invalid, D - dynamic 
 #   ADDRESS            NETWORK         BROADCAST       INTERFACE                                                                                             
 0   192.168.0.1/24     192.168.0.0     192.168.0.255   LAN1                                                                                                  
 1   77.89.XXX.142/30   77.89.XXX.140   77.89.XXX.143   Orange                                                                                                
 2 D 188.237.XX.105/24  188.237.XX.0    188.237.XX.255  MTC                                                                                                   
[admin@MikroTik] >
Code: Select all
[admin@MikroTik] > ip route print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit 
 #      DST-ADDRESS        PREF-SRC        GATEWAY            DISTANCE
 0 A S  0.0.0.0/0                          188.237.XX.1       1       
 1 A S  0.0.0.0/0                          77.89.XXX.141      1       
 2 A S  0.0.0.0/0                          77.89.XXX.141      1       
                                           188.237.XX.1      
 3 A S  77.89.XXX.0/24                     77.89.XXX.141      1       
 4 ADC  77.89.XXX.140/30   77.89.XXX.142   Orange             0       
 5 ADC  188.237.XX.0/24    188.237.XX.105  MTC                0       
 6 A S  188.23X.XX.105/32                  188.237.XX.1       1       
 7 ADC  192.168.0.0/24     192.168.0.1     LAN1               0       
[admin@MikroTik] >
Last edited by eXtremer on Tue Jul 12, 2011 8:49 am, edited 1 time in total.
Top
 
User avatar
peterd
newbie
Posts: 46
Joined: Mon Nov 05, 2007 1:23 pm

Re: Load balancing - One static IP sometimes is unreachable

Mon Jul 11, 2011 6:08 pm

Code: Select all
:global ping1 [/ping 8.8.8.8 count=3 routing-table=Orange]
:global ping2 [/ping 8.8.8.8 count=3 routing-table=MTC]
:global gw1 [/ip route get number=[find routing-mark=Orange] gateway-status]
:global gw2 [/ip route get number=[find routing-mark=MTC] gateway-status]

:if (($ping1=0) && ($ping2=3) && ($gw1="77.89.XXX.141 reachable Orange")) do={/ip route disable numbers=[find gateway=77.89.XXX.141];  [:log info  "disabling route Orange"];}
:if (($ping1=3) && ($ping2=3) && ($gw1!="77.89.XXX.141 reachable Orange")) do={/ip route enable numbers=[find gateway=77.89.XXX.141]; [:log info  "enabling route Orange"];}

:if (($ping1=3) && ($ping2=0) && ($gw2="188.23X.XX.1 reachable MTC")) do={/ip route disable numbers=[find gateway=188.23X.XX.1];  [:log info  "disabling route MTC"];}
:if (($ping1=3) && ($ping2=3) && ($gw2!="188.23X.XX.1 reachable MTC")) do={/ip route enable numbers=[find gateway=188.23X.XX.1]; [:log info  "enabling route MTC"];}

:if (($ping1=0) && ($ping2=0)) do={[/ip route enable numbers=[find gateway=77.89.XXX.141]]; [/ip route enable numbers=[find gateway=188.23X.XX.1]]; [:log info  "fail safe enabling Orange and MTC"];}
Copy the code run in terminal, and copy the full code again from the terminal, and paste here.

P.S. you need to set a scheduler let say every 30sec to run this script.

Regards,

PJD
Top
 
eXtremer
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 95
Joined: Fri Nov 26, 2010 10:33 am

Re: Load balancing - One static IP sometimes is unreachable

Tue Jul 12, 2011 8:59 am

Copy the code run in terminal, and copy the full code again from the terminal, and paste here.

P.S. you need to set a scheduler let say every 30sec to run this script.

Regards,

PJD
I'm using Winbox to run the script (System->Scripts) and not the terminal.
So, I ran the script you gave me and in the Log nothing happens, no info.

Tried to change from "routing-table=Orange" to "interface=Orange" - same thing, in the Log there is no information, only "08:54:45 system,info new script added by admin" that's it.
Top
 
User avatar
peterd
newbie
Posts: 46
Joined: Mon Nov 05, 2007 1:23 pm

Re: Load balancing - One static IP sometimes is unreachable

Tue Jul 12, 2011 10:12 am

Code: Select all
:global ping1 [/ping 8.8.8.8 count=3 routing-table=Orange]
:global ping2 [/ping 8.8.8.8 count=3 routing-table=MTC]
:global gw1 [/ip route get number=[find routing-mark=Orange] gateway-status]
:global gw2 [/ip route get number=[find routing-mark=MTC] gateway-status]

:if (($ping1=0) && ($ping2=3) && ($gw1="77.89.XXX.141 reachable Orange")) do={/ip route disable numbers=[find gateway=77.89.XXX.141];  [:log info  "disabling route Orange"];}
:if (($ping1=3) && ($ping2=3) && ($gw1!="77.89.XXX.141 reachable Orange")) do={/ip route enable numbers=[find gateway=77.89.XXX.141]; [:log info  "enabling route Orange"];}

:if (($ping1=3) && ($ping2=0) && ($gw2="188.23X.XX.1 reachable MTC")) do={/ip route disable numbers=[find gateway=188.23X.XX.1];  [:log info  "disabling route MTC"];}
:if (($ping1=3) && ($ping2=3) && ($gw2!="188.23X.XX.1 reachable MTC")) do={/ip route enable numbers=[find gateway=188.23X.XX.1]; [:log info  "enabling route MTC"];}

:if (($ping1=0) && ($ping2=0)) do={[/ip route enable numbers=[find gateway=77.89.XXX.141]]; [/ip route enable numbers=[find gateway=188.23X.XX.1]]; [:log info  "fail safe enabling Orange and MTC"];}
Copy the code run in terminal, and copy the full code again from the terminal, and paste here.

P.S. you need to set a scheduler let say every 30sec to run this script.

Regards,

PJD

In winbox click on new terminal on the left and paste the config into the terminal window, then copy everything from that terminal window, if there will be no errors then you can create a script with that code I gave.

As I said before you need to schedule for script to be run every 30s .. in the system/scheduler ...

regards

PJD
Top
 
eXtremer
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 95
Joined: Fri Nov 26, 2010 10:33 am

Re: Load balancing - One static IP sometimes is unreachable

Tue Jul 12, 2011 10:27 am

Here is the screenshot of the terminal...

Image

About the schedule, could help with this, never made a rule like this...
Thanks.
Top
 
User avatar
peterd
newbie
Posts: 46
Joined: Mon Nov 05, 2007 1:23 pm

Re: Load balancing - One static IP sometimes is unreachable

Tue Jul 12, 2011 10:46 am

Code: Select all
/system scheduler
add disabled=no interval=30s name=schedule1 on-event=checkgw policy=ftp,winbox
where "checkgw" is your script name

please update with results for others

regards

PJD
Top
 
eXtremer
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 95
Joined: Fri Nov 26, 2010 10:33 am

Re: Load balancing - One static IP sometimes is unreachable

Tue Jul 12, 2011 11:31 am

Added the Schedule!

Run count is still 0.

What the result should be ? There should be something in the Log ?
Top
 
User avatar
peterd
newbie
Posts: 46
Joined: Mon Nov 05, 2007 1:23 pm

Re: Load balancing - One static IP sometimes is unreachable

Tue Jul 12, 2011 11:45 am

Sorry, its just me not being specific enough,

please provide

/system script print

/system scheduler print

regards

PJD
Top
 
eXtremer
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 95
Joined: Fri Nov 26, 2010 10:33 am

Re: Load balancing - One static IP sometimes is unreachable

Tue Jul 12, 2011 12:09 pm

Sorry, its just me not being specific enough,

please provide

/system script print

/system scheduler print

regards

PJD

Print:

Code: Select all
[admin@MikroTik] > /system script print
Flags: I - invalid 
 0   name="script1" owner="admin" policy=ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive last-started=jul/12/2011 11:46:41 run-count=88 
     source=
       :global ping1 [/ping 8.8.8.8 count=3 interface=Orange]
       :global ping2 [/ping 8.8.8.8 count=3 interface=MTC]
       :global gw1 [/ip route get number=[find routing-mark=Orange] gateway-status]
       :global gw2 [/ip route get number=[find routing-mark=MTC] gateway-status]
       
       :if (($ping1=0) && ($ping2=3) && ($gw1="77.89.XXX.141 reachable Orange")) do={/ip route disable numbers=[find gateway=77.89.XXX.141];  [:log info  "disa
bling route Orange"];}
       :if (($ping1=3) && ($ping2=3) && ($gw1!="77.89.XXX.141 reachable Orange")) do={/ip route enable numbers=[find gateway=77.89.XXX.141]; [:log info  "enabl
ing route Orange"];}
       
       :if (($ping1=3) && ($ping2=0) && ($gw2="188.237.XX.1 reachable MTC")) do={/ip route disable numbers=[find gateway=188.237.XX.1];  [:log info  "disabling
 route MTC"];}
       :if (($ping1=3) && ($ping2=3) && ($gw2!="188.237.XX.1 reachable MTC")) do={/ip route enable numbers=[find gateway=188.237.XX.1]; [:log info  "enabling r
oute MTC"];}
       
       :if (($ping1=0) && ($ping2=0)) do={[/ip route enable numbers=[find gateway=77.89.XXX.141]]; [/ip route enable numbers=[find gateway=188.237.XX.1]]; [:lo
g info  "fail safe enabling Orange and MTC"];}

[admin@MikroTik] > /system scheduler print
Flags: X - disabled 
 #   NAME                              START-DATE  START-TIME                             INTERVAL             ON-EVENT                             RUN-COUNT 
 0   schedule1                         jul/12/2011 11:24:56                               15s                  script1                              89        
[admin@MikroTik] >
Top
 
User avatar
peterd
newbie
Posts: 46
Joined: Mon Nov 05, 2007 1:23 pm

Re: Load balancing - One static IP sometimes is unreachable

Tue Jul 12, 2011 1:06 pm

Sorry, its just me not being specific enough,

please provide

/system script print

/system scheduler print

regards

PJD

Print:


[admin@MikroTik] > /system script print
Flags: I - invalid
0 name="script1" owner="admin" policy=ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive last-started=jul/12/2011 11:46:41 run-count=88
source=
:global ping1 [/ping 8.8.8.8 count=3 interface=Orange]
:global ping2 [/ping 8.8.8.8 count=3 interface=MTC]
:global gw1 [/ip route get number=[find routing-mark=Orange] gateway-status]
:global gw2 [/ip route get number=[find routing-mark=MTC] gateway-status]

:if (($ping1=0) && ($ping2=3) && ($gw1="77.89.XXX.141 reachable Orange")) do={/ip route disable numbers=[find gateway=77.89.XXX.141]; [:log info "disa
bling route Orange"];}
:if (($ping1=3) && ($ping2=3) && ($gw1!="77.89.XXX.141 reachable Orange")) do={/ip route enable numbers=[find gateway=77.89.XXX.141]; [:log info "enabl
ing route Orange"];}

:if (($ping1=3) && ($ping2=0) && ($gw2="188.237.XX.1 reachable MTC")) do={/ip route disable numbers=[find gateway=188.237.XX.1]; [:log info "disabling
route MTC"];}
:if (($ping1=3) && ($ping2=3) && ($gw2!="188.237.XX.1 reachable MTC")) do={/ip route enable numbers=[find gateway=188.237.XX.1]; [:log info "enabling r
oute MTC"];}

:if (($ping1=0) && ($ping2=0)) do={[/ip route enable numbers=[find gateway=77.89.XXX.141]]; [/ip route enable numbers=[find gateway=188.237.XX.1]]; [:lo
g info "fail safe enabling Orange and MTC"];}

[admin@MikroTik] > /system scheduler print
Flags: X - disabled
# NAME START-DATE START-TIME INTERVAL ON-EVENT RUN-COUNT
0 schedule1 jul/12/2011 11:24:56 15s script1 89
[admin@MikroTik] >
Its working, you will not see anything in the log unless there is a problem .. so it looks ok
Top
 
eXtremer
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 95
Joined: Fri Nov 26, 2010 10:33 am

Re: Load balancing - One static IP sometimes is unreachable

Tue Jul 12, 2011 2:10 pm

Should it be:

:global ping1 [/ping 8.8.8.8 count=3 interface=Orange]
:global ping2 [/ping 8.8.8.8 count=3 interface=MTC]

or

:global ping1 [/ping 8.8.8.8 count=3 routing-table=Orange]
:global ping2 [/ping 8.8.8.8 count=3 routing-table=MTC]

?
Top
 
User avatar
peterd
newbie
Posts: 46
Joined: Mon Nov 05, 2007 1:23 pm

Re: Load balancing - One static IP sometimes is unreachable

Wed Jul 13, 2011 11:55 am

Hi,

I'm using the routing-table cause doing the load balancing, and haven't tested pinging through interface only, sorry.

Regards,

PJD
Top
 
ajaywi
newbie
Posts: 47
Joined: Wed Nov 25, 2009 7:31 pm

Re: Load balancing - One static IP sometimes is unreachable

Sun Jul 17, 2011 2:01 am

HAve you tried connecting this line direct to a PC and see if your getting the same issue?

recently in my area Frontier took over Verizon and since the change over Ive been having the same issue with my lines, one by one I have to call in and have them change me to a different gateway to fix.
Top
 
eXtremer
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 95
Joined: Fri Nov 26, 2010 10:33 am

Re: Load balancing - One static IP sometimes is unreachable

Sun Jul 17, 2011 9:22 am

HAve you tried connecting this line direct to a PC and see if your getting the same issue?

recently in my area Frontier took over Verizon and since the change over Ive been having the same issue with my lines, one by one I have to call in and have them change me to a different gateway to fix.
The issue is already solved with mangle rules!
Top
Post Reply
  4. RouterOS
  5. General