I am not so newbie in Mikrotik, but I have a question now.
I did before to setup multiple ISPs to ONE subnet (loadbalance, failower) , and did one ISP to multiple subnets, but I do not know how to combine these two.
I have two ISPs and now I have to forward datas to two subnets, to an office and a guest network.
I did two bridges: one for office, one for guest. After I have added the two gateways to the address list. Pools and everything is OK, but what about the firewall? I have to add everything two times? And after do the mangle rules and routes?
What's very important: 30+30=60M bandwith...
Please, help me. I copy my setup here.
Code: Select all
[admin@RTR-LIDO] /ip address> print
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK INTERFACE
0 192.168.1.254/24 192.168.1.0 bridge1-office
1 192.168.111.254/24 192.168.111.0 bridge2-guest
2 192.168.10.1/24 192.168.10.0 eth10-wan1
3 192.168.20.1/24 192.168.20.0 eth9-wan2 Code: Select all
[admin@RTR-LIDO] /ip firewall filter> print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=input action=accept connection-state=new in-interface=bridge1-office
log=no log-prefix=""
1 chain=input action=accept connection-state=new in-interface=bridge2-guest
log=no log-prefix=""
2 chain=input action=accept connection-state=established log=no log-prefix=">
3 chain=input action=accept connection-state=related log=no log-prefix=""
4 chain=input action=accept protocol=icmp log=no log-prefix=""
5 chain=input action=accept protocol=tcp in-interface=bridge1-office
dst-port=1723 log=no log-prefix=""
6 chain=input action=accept protocol=tcp in-interface=bridge2-guest
dst-port=1723 log=no log-prefix=""
7 chain=input action=drop log=no log-prefix=""
8 chain=forward action=accept src-address=192.168.1.0/24
in-interface=bridge1-office log=no log-prefix=""
9 chain=forward action=accept dst-address=192.168.1.0/24
out-interface=bridge1-office log=no log-prefix=""
10 chain=forward action=accept src-address=192.168.111.0/24
in-interface=bridge2-guest log=no log-prefix=""
11 chain=forward action=accept dst-address=192.168.111.0/24
out-interface=bridge2-guest log=no log-prefix=""
12 chain=forward action=drop log=no log-prefix=""Code: Select all
[admin@RTR-LIDO] /ip firewall filter> print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=input action=accept connection-state=new in-interface=bridge1-office
log=no log-prefix=""
1 chain=input action=accept connection-state=new in-interface=bridge2-guest
log=no log-prefix=""
2 chain=input action=accept connection-state=established log=no log-prefix=">
3 chain=input action=accept connection-state=related log=no log-prefix=""
4 chain=input action=accept protocol=icmp log=no log-prefix=""
5 chain=input action=accept protocol=tcp in-interface=bridge1-office
dst-port=1723 log=no log-prefix=""
6 chain=input action=accept protocol=tcp in-interface=bridge2-guest
dst-port=1723 log=no log-prefix=""
7 chain=input action=drop log=no log-prefix=""
8 chain=forward action=accept src-address=192.168.1.0/24
in-interface=bridge1-office log=no log-prefix=""
9 chain=forward action=accept dst-address=192.168.1.0/24
out-interface=bridge1-office log=no log-prefix=""
10 chain=forward action=accept src-address=192.168.111.0/24
in-interface=bridge2-guest log=no log-prefix=""
11 chain=forward action=accept dst-address=192.168.111.0/24
out-interface=bridge2-guest log=no log-prefix=""
12 chain=forward action=drop log=no log-prefix=""