Dear Forum Members

I have 3 Dual access PPPoE connections from an ISP. The WAN Interface first gets
an IP address from the DHCP server with some routes. These routes are important
for FTP/Sharing portal access. My setup is PCC based Multi wan which is working ok.
Only problem I am facing is that the users behind the Mikrotik Router LAN interface
cannot ping the WAN gateway or connect to the FTP portals. IF ony 1 WAN / PPPoE is
connected then users can access FTP and can ping the WAN gateway. But as soon as
All WANs are enabled then this connectivity is lost. But the internet works fine.

Please guide

Regards

Hi,

I'm assuming all three Dual Access devices are connected to three different ports on your MikroTik?
If this is the case you will need to mangle these connections to make sure traffic is kept separate, otherwise routing is going to get screwed up.

Hello

1) I'm assuming all three Dual Access devices are connected to three different ports on your MikroTik?

Yes

2) "you will need to mangle these connections to make sure traffic is kept separate"

These are my mangle rules

/ip firewall mangle
add action=accept chain=prerouting disabled=no in-interface=PPPoE
add action=accept chain=prerouting disabled=no in-interface=PPPoF
add action=accept chain=prerouting disabled=no in-interface=PPPoE-1
add action=accept chain=prerouting disabled=yes in-interface=PPPoF-1
add action=mark-connection chain=prerouting disabled=no dst-address-type=\
!local new-connection-mark=wan1_conn passthrough=yes \
per-connection-classifier=both-addresses-and-ports:4/0
add action=mark-connection chain=prerouting disabled=no dst-address-type=\
!local new-connection-mark=wan2_conn passthrough=yes \
per-connection-classifier=both-addresses-and-ports:4/1
add action=mark-connection chain=prerouting disabled=no dst-address-type=\
!local new-connection-mark=wan3_conn passthrough=yes \
per-connection-classifier=both-addresses-and-ports:4/2
add action=mark-connection chain=prerouting disabled=no dst-address-type=\
!local new-connection-mark=wan4_conn passthrough=yes \
per-connection-classifier=both-addresses-and-ports:4/3
add action=mark-routing chain=prerouting connection-mark=wan1_conn disabled=\
no new-routing-mark=to_wan1 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=wan2_conn disabled=\
no new-routing-mark=to_wan2 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=wan3_conn disabled=\
no new-routing-mark=to_wan3 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=wan4_conn disabled=\
no new-routing-mark=to_wan4 passthrough=yes

Regards

Hi,

I've never had to enable dst-address-type or per-connection-classifier. Here are the rules I generally use for multiple internet connections:
Your in-interface can either be a physical interface like ether1, or a pppoe-client interface.

After this you need to set a route rule for the local IP range to point to the main table like: This rule is extremely important, and replace the IP with your local LAN IP. Otherwise some weird stuff is going to happen on your network.

Then in your /ip route you will need to setup two routes, one for the main table and the next for the routing mark you created in the mangle:

That is how I do all my setups. Let me know if this helps you out.

Hi
I tried your configuration today. Now users can access the Portals but Multi WAN is not working. All traffic is passing through single WAN only .

Hi,

Do you need all internet traffic to run on all WAN interfaces? Like load balancing, or a type of aggregated bandwidth?

Yes thats why I've setup PCC. 3 WAN links in total. With PCC, the Multi-WAN is working perfectly fine. Only problem is that the portals are not accessible.