First post on this forum to have some advice.
We're actually implementing mikrotik as an internal router, managing some vlan on a trunk then 2 pppoe-client.
Each vlan as assigned isp and some vlan must speak between them.
Consedering this setup :
http://wiki.mikrotik.com/wiki/Manual:In ... AN_routing
But in our case
Code: Select all
[admin@RTR] /interface vlan> print
Flags: X - disabled, R - running, S - slave
# NAME MTU ARP VLAN-ID INTERFACE
0 vlan10-LAN1 1500 enabled 10 ether5-LAN1
3 vlan30-LAN1 1500 enabled 30 ether5-LAN1
Code: Select all
[admin@RTR] /ip address> print
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK INTERFACE
0 172.18.21.250/24 172.18.21.0 vlan10-LAN1
3 192.168.112.250/24 192.168.112.0 vlan30-LAN1
Code: Select all
[admin@RTR] /interface pppoe-client> print
Flags: X - disabled, R - running
0 name="pppoe-out1-ML" max-mtu=auto max-mru=auto mrru=disabled interface=ether10-ML
user="" password="" profile=default keepalive-timeout=60 service-name=""
ac-name="" add-default-route=no dial-on-demand=no use-peer-dns=no allow=pap,chap,mschap1,mschap2
1 name="pppoe-out2-LAG" max-mtu=auto max-mru=auto mrru=disabled interface=ether9-LAG
user="" password="" profile=default keepalive-timeout=60 service-name=""
ac-name="" add-default-route=no dial-on-demand=no use-peer-dns=no allow=pap,chap,mschap1,mschap2Code: Select all
[admin@RTR] /ip firewall mangle> print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=prerouting action=mark-routing new-routing-mark=M passthrough=yes
src-address-list=VLAN10 log=no log-prefix=""
1 chain=prerouting action=mark-routing new-routing-mark=LAGpassthrough=yes
src-address-list=VLAN30 log=no log-prefix=""Code: Select all
[admin@RTR] /ip route> print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - osp
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 S 0.0.0.0/0 pppoe-out1-M 10
1 S 0.0.0.0/0 pppoe-out2-LAG 10
4 DC 172.18.21.0/24 172.18.21.250 vlan10-LAN1 255
12 DC 192.168.112.0/24 192.168.112.250 vlan30-LAN1 255
Code: Select all
[admin@RTR-SF2I-02] /ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic
15 I ;;; pppoe-out1-M
chain=srcnat action=masquerade routing-mark=M out-interface=pppoe-out1-M log=no
log-prefix=""
16 I ;;; pppoe-out2-LAG
chain=srcnat action=masquerade routing-mark=LAG out-interface=pppoe-out2-LAG
log=no log-prefix="" In this setup (during this redaction all ports were not plugged) each lan can reach internet but can't communicate between them.
If we disable the #0 & #1 routes lan aren't able to reach internet but can communicate with each other.
The issue is not a firewall issue, as we disable all firewall rules it remain the same.
We believe it's routing probelm because the ping by router or client can't go to the destination.
We also tried to do a masquerade rule per lan (with specified address list) with corresponding internet gateway.
After reading of some posts, some clues can be involved like doing a mangle rule to route traffic through their specific isp or specifiying a prefered source for static route w & w/o routing mark.
but the concept that i missunderstand why the default routes (with & without routing mark) seem to override the local routes, same when upping metric.
If somebody can get us in the righ direction.
best regards.
