Simple? 2 WAN IPs on single interface issue...
Posted: Fri May 12, 2023 2:03 am
This should have been simple. I recently got a 2nd static IP address from my ISP (for eventual use with a business mail server I prefer to keep separate from my existing personal servers...) yet, I keep getting terrible connectivity and dropped pings every time I try to activate the 2nd IP address.
RB450Gx4
eth1 is WAN, remaining interfaces are each assigned to different VLANs for internal use. All I really need right now is to get the new address answering pings reliably, and I can do a src-nat and dst-nat to some internal device for testing.
Should be as simple as add the address, add src-nat (and as needed dst-nat) and be good to go... Right?
Both IPs use the same gateway.
Then disable the default masquerade rule and replace it with:
At that point, all traffic will of course be going through whichever address ranks higher in the routing table, but both address should answer pings, right (assuming firewall rule doesn't prevent it, of course...)
But as soon as I enable the second IP Address, pings to both IPs are VERY spotty (Like over 50% drop rate) Browsing and quick Google speed test both drop by more than half (From roughly 880Mbps down and 50Mbps up to 350 down and around 17 up. And yes, I know those aren't terribly accurate numbers, but the consistency of the results is what worries me.
Forcing the config to either IP Address full performance returns, it is only when I have BOTH IPs active that issues start happening...
Any ideas for what I'm missing?
RB450Gx4
eth1 is WAN, remaining interfaces are each assigned to different VLANs for internal use. All I really need right now is to get the new address answering pings reliably, and I can do a src-nat and dst-nat to some internal device for testing.
Should be as simple as add the address, add src-nat (and as needed dst-nat) and be good to go... Right?
Both IPs use the same gateway.
Code: Select all
/ip address
add address=xx.xx.159.183 interface=ether1 network=xx.xx.159.1
add address=xx.xx.159.145 interface=ether1 network=xx.xx.159.1
Code: Select all
/ip firewall nat
add action=src-nat chain=srcnat out-interface=ether1 to-addresses=xx.xx.159.183
add action=src-nat chain=srcnat out-interface=ether1 to-addresses=xx.xx.159.145
But as soon as I enable the second IP Address, pings to both IPs are VERY spotty (Like over 50% drop rate) Browsing and quick Google speed test both drop by more than half (From roughly 880Mbps down and 50Mbps up to 350 down and around 17 up. And yes, I know those aren't terribly accurate numbers, but the consistency of the results is what worries me.
Forcing the config to either IP Address full performance returns, it is only when I have BOTH IPs active that issues start happening...
Any ideas for what I'm missing?