RouterOS v7.0.5 Dual PPPoE Wan Setup.

laucupan · October 29, 2021, 10:23am

greetings..

i’m new to this mikrotik thing. just purchase a RB5009UG router (thinking its a good investment for future upgrade) replacing my old tenda w20e router. for load balancing n port forwarding.

the old tenda is easy to configure. just plug it change the wan n enter credential n then im good too go.not so much with port forwarding.so im thinking the rb5009ug will be better.

well i cant be more wrong with this rb5009ug with its routeros 7. so many guide in the web for dual wan pppoe is stil using routeros6. been strugling with it for almost a week now with no avail.

i have managed to connect to the internet with just 1 wan. but not having any luck with 2.

i tried the guide here
https://www.youtube.com/watch?v=p2XliQ2nf8M&t=455s&ab_channel=wifiLAB
but stil no luck, can someone point me to the dual wan pppoe setup with routeros7? preferably with pcc load balancing?

this is also the script i follow with no luck. cant someone also point it out where it went wrong?

Mikrotik Local Ip
192.168.88.1/24

dhcp-lan
192.168.88.0/24

ether2= WAN1
ether3= WAN2
Bridge Lan = ether1, ether4-9


pppoe-out1=ether2 
pppoe-out2=ether3
both with default route uncheck.

/routing/table/add name=to_wan1 fib
/routing/table/add name=to_wan2 fib


/ip firewall nat
add action=masquerade chain=srcnat disabled=no out-interface=pppoe-out1
add action=masquerade chain=srcnat disabled=no out-interface=pppoe-out2


/ip firewall mangle
add action=accept chain=prerouting disabled=no in-interface=pppoe-out1
add action=accept chain=prerouting disabled=no in-interface=pppoe-out2

add action=mark-connection chain=prerouting disabled=no dst-address-type=!local new-connection-mark=WAN1_conn passthrough=yes per-connection-classifier=both-addresses-and-ports:2/0 src-address=192.168.88.0/24
add action=mark-connection chain=prerouting disabled=no dst-address-type=!local new-connection-mark=WAN2_conn passthrough=yes per-connection-classifier=both-addresses-and-ports:2/1 src-address=192.168.88.0/24

add action=mark-routing chain=prerouting connection-mark=WAN1_conn disabled=no new-routing-mark=to_wan1 passthrough=yes src-address=192.168.88.0/24
add action=mark-routing chain=prerouting connection-mark=WAN2_conn disabled=no new-routing-mark=to_wan2 passthrough=yes src-address=192.168.88.0/24


/ip route

add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=pppoe-out1 routing-table=to_wan1 scope=30 target-scope=10
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=pppoe-out2 routing-table=to_wan2 scope=30 target-scope=10

add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=pppoe-out1 scope=30 target-scope=10
add check-gateway=ping disabled=no distance=2 dst-address=0.0.0.0/0 gateway=pppoe-out2 scope=30 target-scope=10

thanx, much apreciated..

ps. wan1 need its own dns. cant do with the public dns. so should i check the peer dns in the pppoe setting?

laucupan · November 3, 2021, 6:35am

hm any1 got a working setup for dual wan pppoe in routeros7 that i can look up? specially the iproute part. because from all the guide i see for dual wan pppoe setup which is for routeros6 the ip route section is where i failed. i got unreachable at that part.

anav · November 3, 2021, 11:26am

Typically you setup up PPPOE clients on your router
and you should be roughly good to go.

However one needs to know what special requilrements one may have.
a. what kind of use do you want to have for your WANS.

primary and failover?
use both all the time (load balance)?

b. any other special requirements.

Finally
post your complete config here to see where your config issues are.
/export hide-sensitive file=anynameyouwish

laucupan · November 3, 2021, 1:02pm

thanx for the reply. yes i could set it up if just 1 pppoe. either wan1 or wan2. but its another story for both wan.

im trying to do load balance using source adrress with failover

this is my setting.

# jan/02/1970 00:26:36 by RouterOS 7.0.5
# software id = 4J4D-MAIY
#
# model = RB5009UG+S+
# serial number = 

/interface bridge
add name=bridge-LAN

/interface ethernet
set [ find default-name=ether2 ] name=ether2-WAN1
set [ find default-name=ether3 ] name=ether3-WAN2

/interface pppoe-client
add disabled=no interface=ether2-WAN1 name=pppoe-out1 use-peer-dns=yes user=\
    xxx
add disabled=no interface=ether3-WAN2 name=pppoe-out2 user=\
    xxx

/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik

/ip pool
add name=dhcp_pool0 ranges=192.168.88.200-192.168.88.254

/ip dhcp-server
add address-pool=dhcp_pool0 interface=bridge-LAN lease-time=15m name=dhcp-LAN

/routing table
add fib name=to_wan1
add fib name=to_wan2

/interface bridge port
add bridge=bridge-LAN interface=ether1
add bridge=bridge-LAN interface=ether4
add bridge=bridge-LAN interface=ether5
add bridge=bridge-LAN interface=ether6
add bridge=bridge-LAN interface=ether7
add bridge=bridge-LAN interface=ether8

/ip address
add address=192.168.88.1/24 interface=bridge-LAN network=192.168.88.0

/ip dhcp-server network
add address=192.168.88.0/24 dns-server=8.8.8.8,1.1.1.1 gateway=192.168.88.1

/ip dns
set servers=8.8.8.8,1.1.1.1

/ip firewall mangle
add action=accept chain=prerouting in-interface=pppoe-out1
add action=accept chain=prerouting in-interface=pppoe-out2

add action=mark-connection chain=prerouting dst-address-type=!local \
    new-connection-mark=wan1_conn passthrough=yes per-connection-classifier=\
    both-addresses-and-ports:2/0 src-address=192.168.88.0/24
add action=mark-connection chain=prerouting dst-address-type=!local \
    new-connection-mark=wan2_conn passthrough=yes per-connection-classifier=\
    both-addresses-and-ports:2/1 src-address=192.168.88.0/24

add action=mark-routing chain=prerouting connection-mark=wan1_conn \
    new-routing-mark=to_wan1 passthrough=yes src-address=192.168.88.0/24
add action=mark-routing chain=prerouting connection-mark=wan2_conn \
    new-routing-mark=to_wan2 passthrough=yes src-address=192.168.88.0/24

/ip firewall nat
add action=masquerade chain=srcnat out-interface=pppoe-out1 src-address=\
    192.168.88.0/24
add action=masquerade chain=srcnat out-interface=pppoe-out2 src-address=\
    192.168.88.0/24

/ip route
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
    pppoe-out1 routing-table=to_wan1 scope=30 target-scope=10
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
    pppoe-out2 routing-table=to_wan2 scope=30 target-scope=10
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
    pppoe-out1 scope=30 target-scope=10
add check-gateway=ping disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\
    pppoe-out2 scope=30 target-scope=10

/routing rule
add action=lookup-only-in-table disabled=no dst-address=192.168.88.0/24 \
    table=main

from most of the guide that i follow its quite simillar. but the difference is that iproute. using this i got unreachable within a few sec i enter it. i read that they change the way to do iproute in routeros7.
i’ll apreciate it if u can show me where do i got wrong?

thanx.

anav · November 3, 2021, 1:15pm

Change Target scope so its larger than Scope.

Mangle rules incomplete.
FIXED

add action=mark-connection chain=prerouting dst-address-type=!local connection-mark=no-mark
new-connection-mark=wan1_conn passthrough=yes per-connection-classifier=
both-addresses-and-ports:2/0 in-interface=bridge
add action=mark-connection chain=prerouting dst-address-type=!local connection-mark=no-mark
new-connection-mark=wan2_conn passthrough=yes per-connection-classifier=
both-addresses-and-ports:2/1 in-interface=bridge

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

add action=mark-routing chain=prerouting connection-mark=wan1_conn
new-routing-mark=to_wan1 passthrough=yes in-interface=bridge
add action=mark-routing chain=prerouting connection-mark=wan2_conn
new-routing-mark=to_wan2 passthrough=yes in-interface=bridge

add action=mark-routing chain=output connection-mark=wan1_conn new-routing-mark=to_wan1 passthrough=yes
add action=mark-routing chain=output connection-mark=wan2_conn new-routing-mark=to_wan2 passthrough=yes

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

add action=mark-connection chain=prerouting connection-mark=no-mark disabled=no
in-interface=pppoe-out1 new-connection-mark=wan1_conn passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark disabled=no
in-interface=pppoe-out2 new-connection-mark=wan2_conn passthrough=yes

/ip firewall nat
add action=masquerade chain=srcnat out-interface=pppoe-out1
add action=masquerade chain=srcnat out-interface=pppoe-out2

laucupan · November 3, 2021, 1:37pm

does the mangle missing this 4 step?

add chain=prerouting in-interface=pppoe-out1 connection-mark=no-mark action=mark-connection \
    new-connection-mark=wan1_conn
add chain=prerouting in-interface=pppoe-out2 connection-mark=no-mark action=mark-connection \ 
    new-connection-mark=wan2_conn

add chain=output connection-mark=wan1_conn action=mark-routing new-routing-mark=to_wan1     
add chain=output connection-mark=wan2_conn action=mark-routing new-routing-mark=to_wan2

i got this from the pcc wiki. but all 3 guide i follow dont have this step.

also the scope and target scope its for marking for failover right? hm.. what is the rule to change it too any wiki to read?

edit: ah sorry didnt see the edit there. let me try that that next.

laucupan · November 4, 2021, 10:16am

i already aply the changes as so..

/ip firewall mangle
add action=accept chain=prerouting in-interface=pppoe-out1
add action=accept chain=prerouting in-interface=pppoe-out2

add action=mark-connection chain=prerouting connection-mark=no-mark \
    in-interface=pppoe-out1 new-connection-mark=wan1_conn passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark \
    in-interface=pppoe-out2 new-connection-mark=wan2_conn passthrough=yes
    
add action=mark-connection chain=prerouting dst-address-type=!local \
    in-interface=bridge-LAN new-connection-mark=wan1_conn passthrough=yes \
    per-connection-classifier=both-addresses-and-ports:2/0 src-address=\
    192.168.88.0/24
add action=mark-connection chain=prerouting dst-address-type=!local \
    in-interface=bridge-LAN new-connection-mark=wan2_conn passthrough=yes \
    per-connection-classifier=both-addresses-and-ports:2/1 src-address=\
    192.168.88.0/24
    
add action=mark-routing chain=prerouting connection-mark=wan1_conn \
    in-interface=bridge-LAN new-routing-mark=to_wan1 passthrough=yes \
    src-address=192.168.88.0/24
add action=mark-routing chain=prerouting connection-mark=wan2_conn \
    in-interface=bridge-LAN new-routing-mark=to_wan2 passthrough=yes \
    src-address=192.168.88.0/24
    
add action=mark-routing chain=output connection-mark=wan1_conn \
    new-routing-mark=to_wan1 passthrough=yes
add action=mark-routing chain=output connection-mark=wan2_conn \
    new-routing-mark=to_wan2 passthrough=yes
    
/ip firewall nat
add action=masquerade chain=srcnat out-interface=pppoe-out1 src-address=\
    192.168.88.0/24
add action=masquerade chain=srcnat out-interface=pppoe-out2 src-address=\
    192.168.88.0/24

also change the scope and target scope of the iproute

/ip route
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
    pppoe-out1 pref-src="" routing-table=to_wan1 scope=30 \
    suppress-hw-offload=no target-scope=60
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
    pppoe-out2 pref-src="" routing-table=to_wan2 scope=30 \
    suppress-hw-offload=no target-scope=60
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
    pppoe-out1 pref-src="" routing-table=main scope=30 suppress-hw-offload=no \
    target-scope=60
add check-gateway=ping disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\
    pppoe-out2 pref-src="" routing-table=main scope=30 suppress-hw-offload=no \
    target-scope=60

but stil no luck. when i try to ping to 8.8.8.8 stil got no route to host.but when i use the ping from the tool interface from interface pppoe1 or 2 i got the response.but when i use the bridge lan interface i got no route to host.

should i try to upgrade the routeros? if i check the stable version all i got is 6.xx and not 7.xx if i rembered rb5009ug is routeros7 only.but i cant find a stable routeros7 other that the included 7.0.5

thanx.

anav · November 4, 2021, 1:02pm

No you have to wait for stable 7.05.

Post your complete config again to have a relook of your latest settings please.
/export hide-sensitive file=anynameyouwish

laucupan · November 4, 2021, 2:50pm

but the firmware included in the rb5009ug is the 7.0.5 stable?

here is my complete setting again. thanx for the help.

# jan/02/1970 00:49:41 by RouterOS 7.0.5
# software id = 4J4D-MAIY
#
# model = RB5009UG+S+
# serial number = 

/interface bridge
add name=bridge-LAN

/interface ethernet
set [ find default-name=ether2 ] name=ether2-WAN1
set [ find default-name=ether3 ] name=ether3-WAN2

/interface pppoe-client
add disabled=no interface=ether2-WAN1 name=pppoe-out1 use-peer-dns=yes user=\
    xxx
add disabled=no interface=ether3-WAN2 name=pppoe-out2 user=\
    xxx

/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik

/ip pool
add name=dhcp_pool0 ranges=192.168.88.200-192.168.88.254

/ip dhcp-server
add address-pool=dhcp_pool0 interface=bridge-LAN lease-time=15m name=dhcp-LAN

/routing table
add fib name=to_wan1
add fib name=to_wan2

/interface bridge port
add bridge=bridge-LAN interface=ether1
add bridge=bridge-LAN interface=ether4
add bridge=bridge-LAN interface=ether5
add bridge=bridge-LAN interface=ether6
add bridge=bridge-LAN interface=ether7
add bridge=bridge-LAN interface=ether8

/ip address
add address=192.168.88.1/24 interface=bridge-LAN network=192.168.88.0

/ip dhcp-server network
add address=192.168.88.0/24 dns-server=8.8.8.8,1.1.1.1 gateway=192.168.88.1

/ip dns
set allow-remote-requests=yes servers=8.8.8.8,1.1.1.1

/ip firewall mangle
add action=accept chain=prerouting in-interface=pppoe-out1
add action=accept chain=prerouting in-interface=pppoe-out2

add action=mark-connection chain=prerouting connection-mark=no-mark \
    in-interface=pppoe-out1 new-connection-mark=wan1_conn passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark \
    in-interface=pppoe-out2 new-connection-mark=wan2_conn passthrough=yes

add action=mark-connection chain=prerouting dst-address-type=!local \
    in-interface=bridge-LAN new-connection-mark=wan1_conn passthrough=yes \
    per-connection-classifier=both-addresses-and-ports:2/0 src-address=\
    192.168.88.0/24
add action=mark-connection chain=prerouting dst-address-type=!local \
    in-interface=bridge-LAN new-connection-mark=wan2_conn passthrough=yes \
    per-connection-classifier=both-addresses-and-ports:2/1 src-address=\
    192.168.88.0/24

add action=mark-routing chain=prerouting connection-mark=wan1_conn \
    in-interface=bridge-LAN new-routing-mark=to_wan1 passthrough=yes \
    src-address=192.168.88.0/24
add action=mark-routing chain=prerouting connection-mark=wan2_conn \
    in-interface=bridge-LAN new-routing-mark=to_wan2 passthrough=yes \
    src-address=192.168.88.0/24

add action=mark-routing chain=output connection-mark=wan1_conn \
    new-routing-mark=to_wan1 passthrough=yes
add action=mark-routing chain=output connection-mark=wan2_conn \
    new-routing-mark=to_wan2 passthrough=yes

/ip firewall nat
add action=masquerade chain=srcnat out-interface=pppoe-out1 src-address=\
    192.168.88.0/24
add action=masquerade chain=srcnat out-interface=pppoe-out2 src-address=\
    192.168.88.0/24


/ip route
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
    pppoe-out1 pref-src="" routing-table=to_wan1 scope=30 \
    suppress-hw-offload=no target-scope=60
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
    pppoe-out2 pref-src="" routing-table=to_wan2 scope=30 \
    suppress-hw-offload=no target-scope=60

add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
    pppoe-out1 pref-src="" routing-table=main scope=30 suppress-hw-offload=no \
    target-scope=60
add check-gateway=ping disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\
    pppoe-out2 pref-src="" routing-table=main scope=30 suppress-hw-offload=no \
    target-scope=60

/routing rule
add action=lookup-only-in-table disabled=no dst-address=192.168.111.0/24 \
    table=main

anav · November 4, 2021, 3:03pm

HAHA you blew the mangling copy…
The only thing you have correct is the first two lines.
The rest was not changed to what I had recommended.
Can lead a horse to water…

/ip firewall mangle
add action=accept chain=prerouting in-interface=pppoe-out1
add action=accept chain=prerouting in-interface=pppoe-out2

laucupan · November 5, 2021, 1:28pm

ah sorry for the mistake. i thought i just need to add the one u colour. im pretty new to this mangle mikrotik thing.and whenever i tried to setup the router i got disconected from the internet so i cant really search the problem in the internet. plus my kid n wife use internet for zoom assignment etc. so i can only try to do this in the night after they asleep.

i tried to setting it again from your suggestion.i add the 2 in the top. n then the one u wrote before. is this correct?

# jan/02/1970 00:34:34 by RouterOS 7.0.5
# software id = 4J4D-MAIY
#
# model = RB5009UG+S+
# serial number = 

/interface bridge
add name=bridge-LAN

/interface ethernet
set [ find default-name=ether2 ] name=ether2-WAN1
set [ find default-name=ether3 ] name=ether3-WAN2

/interface pppoe-client
add disabled=no interface=ether2-WAN1 name=pppoe-out1 use-peer-dns=yes user=\
    xxx
add disabled=no interface=ether3-WAN2 name=pppoe-out2 user=\
    xxx

/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik

/ip pool
add name=dhcp_pool0 ranges=192.168.88.200-192.168.88.254

/ip dhcp-server
add address-pool=dhcp_pool0 interface=bridge-LAN lease-time=15m name=dhcp-LAN

/routing table
add fib name=to_wan1
add fib name=to_wan2

/interface bridge port
add bridge=bridge-LAN interface=ether1
add bridge=bridge-LAN interface=ether4
add bridge=bridge-LAN interface=ether5
add bridge=bridge-LAN interface=ether6
add bridge=bridge-LAN interface=ether7
add bridge=bridge-LAN interface=ether8

/ip address
add address=192.168.88.1/24 interface=bridge-LAN network=192.168.88.0

/ip dhcp-server network
add address=192.168.88.0/24 dns-server=8.8.8.8,1.1.1.1 gateway=192.168.88.1

/ip dns
set allow-remote-requests=yes servers=8.8.8.8,1.1.1.1

/ip firewall mangle
add action=accept chain=prerouting in-interface=pppoe-out1
add action=accept chain=prerouting in-interface=pppoe-out2

add action=mark-connection chain=prerouting connection-mark=no-mark \
    dst-address-type=!local in-interface=bridge-LAN new-connection-mark=\
    wan1_conn passthrough=yes per-connection-classifier=\
    both-addresses-and-ports:2/0
add action=mark-connection chain=prerouting connection-mark=no-mark \
    dst-address-type=!local in-interface=bridge-LAN new-connection-mark=\
    wan2_conn passthrough=yes per-connection-classifier=\
    both-addresses-and-ports:2/1

add action=mark-routing chain=prerouting connection-mark=wan1_conn \
    in-interface=bridge-LAN new-routing-mark=to_wan1 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=wan2_conn \
    in-interface=bridge-LAN new-routing-mark=to_wan2 passthrough=yes

add action=mark-routing chain=output connection-mark=wan1_conn \
    new-routing-mark=to_wan1 passthrough=yes
add action=mark-routing chain=output connection-mark=wan2_conn \
    new-routing-mark=to_wan2 passthrough=yes

add action=mark-connection chain=prerouting connection-mark=no-mark \
    in-interface=pppoe-out1 new-connection-mark=wan1_conn passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark \
    in-interface=pppoe-out2 new-connection-mark=wan2_conn passthrough=yes

/ip firewall nat
add action=masquerade chain=srcnat out-interface=pppoe-out1
add action=masquerade chain=srcnat out-interface=pppoe-out2

/ip route
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
    pppoe-out1 routing-table=to_wan1 scope=30 target-scope=60
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
    pppoe-out2 routing-table=to_wan2 scope=30 target-scope=60
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
    pppoe-out1 scope=30 target-scope=60
add check-gateway=ping disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\
    pppoe-out2 scope=30 target-scope=60

/routing rule
add action=lookup-only-in-table disabled=no dst-address=192.168.111.0/24 \
    table=main

i stil got a no route to host if i tried to ping 8.8.8.8 from mikrotik terminal.i also tried to change the target scope so its bigger that the scope. do u have any other sugestion? much apreciated. thanx n sorry,

anav · November 5, 2021, 4:32pm

Looks good, but sorry out of ideas.
A fresh look at this may be best from another poster…

laucupan · November 5, 2021, 11:13pm

no worries. thanx for the help. i stil think its the iproute thingy. i read about giving the pppoe client a local address at 8.8.8.8 network but cant really grasped the concept or howto.

laucupan · November 8, 2021, 2:08am

is there any1 that has a working setting for routeros 7 with dual wan pppoe setup with loadbalancing and failover that works? if there, can they share the setup here please?
thanx.

mducharme · November 8, 2021, 4:28am

The issue might be the check-gateway=ping setting, it doesn’t make sense for PPPoE since you can’t really ping an interface like that, only an IP. Try disabling check gateway.

laucupan · November 23, 2021, 3:18pm

well after much thought i finally bought the hex s. wanted to try 1 last time if its the routeros7 that is different from the 6.
n thanxfully i managed to make it work with the guide from youtube which i cant get it to work with routeros7 even with the same config.
so i guess i just need to keep the rb5009ug until much guide for routeros7 available.

thanx all.

amirsalehalavi · August 2, 2022, 10:19pm

I know it’s been almost a year since you asked this question, but in case anyone like me was wondering, here’s how I got it to work in RoterOS v7.4:

/routing table
add disabled=no fib name=out_through_WAN1
add disabled=no fib name=out_through_WAN2


/ip route
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=PPPoE-WAN1 pref-src=0.0.0.0 routing-table=out_through_WAN1 scope=30 suppress-hw-offload=no target-scope=10
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=PPPoE-WAN2 pref-src=0.0.0.0 routing-table=out_through_WAN2 scope=30 suppress-hw-offload=no target-scope=10


/ip firewall address-list
add address=192.168.0.0/16 list=Local


/ip firewall mangle

add action=mark-connection chain=input connection-mark=no-mark in-interface=PPPoE_WAN1 new-connection-mark=In_through_WAN1 passthrough=yes
add action=mark-connection chain=input connection-mark=no-mark in-interface=PPPoE_WAN2 new-connection-mark=In_through_WAN2 passthrough=yes

add action=mark-connection chain=forward connection-mark=no-mark in-interface=PPPoE_WAN1 new-connection-mark=In_through_WAN1->Local passthrough=yes
add action=mark-connection chain=forward connection-mark=no-mark in-interface=PPPoE_WAN2 new-connection-mark=In_through_WAN2->Local passthrough=yes

add action=mark-routing chain=output connection-mark=In_through_WAN1 new-routing-mark=out_through_WAN1 passthrough=yes
add action=mark-routing chain=output connection-mark=In_through_WAN2 new-routing-mark=out_through_WAN2 passthrough=yes

add action=mark-routing chain=prerouting connection-mark=In_through_WAN1->Local new-routing-mark=out_through_WAN1 passthrough=yes src-address-list=Local
add action=mark-routing chain=prerouting connection-mark=In_through_WAN2->Local new-routing-mark=out_through_WAN2 passthrough=yes src-address-list=Local

I found that disabling the following, which was working fine in RouterOS v6 would do the trick:

/ip firewall mangle

add action=mark-routing chain=prerouting connection-mark=In_through_WAN1 disabled=yes new-routing-mark=out_through_WAN1 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=In_through_WAN2 disabled=yes new-routing-mark=out_through_WAN2 passthrough=yes

laucupan · January 14, 2023, 7:42am

I know it’s been almost a year since you asked this question, but in case anyone like me was wondering, here’s how I got it to work in RoterOS v7.4:

/routing table
add disabled=no fib name=out_through_WAN1
add disabled=no fib name=out_through_WAN2


/ip route
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=PPPoE-WAN1 pref-src=0.0.0.0 routing-table=out_through_WAN1 scope=30 suppress-hw-offload=no target-scope=10
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=PPPoE-WAN2 pref-src=0.0.0.0 routing-table=out_through_WAN2 scope=30 suppress-hw-offload=no target-scope=10


/ip firewall address-list
add address=192.168.0.0/16 list=Local


/ip firewall mangle

add action=mark-connection chain=input connection-mark=no-mark in-interface=PPPoE_WAN1 new-connection-mark=In_through_WAN1 passthrough=yes
add action=mark-connection chain=input connection-mark=no-mark in-interface=PPPoE_WAN2 new-connection-mark=In_through_WAN2 passthrough=yes

add action=mark-connection chain=forward connection-mark=no-mark in-interface=PPPoE_WAN1 new-connection-mark=In_through_WAN1->Local passthrough=yes
add action=mark-connection chain=forward connection-mark=no-mark in-interface=PPPoE_WAN2 new-connection-mark=In_through_WAN2->Local passthrough=yes

add action=mark-routing chain=output connection-mark=In_through_WAN1 new-routing-mark=out_through_WAN1 passthrough=yes
add action=mark-routing chain=output connection-mark=In_through_WAN2 new-routing-mark=out_through_WAN2 passthrough=yes

add action=mark-routing chain=prerouting connection-mark=In_through_WAN1->Local new-routing-mark=out_through_WAN1 passthrough=yes src-address-list=Local
add action=mark-routing chain=prerouting connection-mark=In_through_WAN2->Local new-routing-mark=out_through_WAN2 passthrough=yes src-address-list=Local

I found that disabling the following, which was working fine in RouterOS v6 would do the trick:

/ip firewall mangle

add action=mark-routing chain=prerouting connection-mark=In_through_WAN1 disabled=yes new-routing-mark=out_through_WAN1 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=In_through_WAN2 disabled=yes new-routing-mark=out_through_WAN2 passthrough=yes

hi sir, its almost half a yearn since u answered this n almost a year since i post this question. a few guide for routeros7 with 2wan or more is available.but sadly almost none with 2 pppoe isp
is there any chance i could get ur working script for routeros7 dual wan pppoe? does it has a loadbalancing with recursive failover too?

thanx, because its new year. was thinking that i should try to use the routeros7 router again.

anav · January 14, 2023, 1:47pm

I will have another look this weekend time permitting!!

laucupan · January 15, 2023, 7:35am

ah thanx man. im also stil browsing for viable guide to try. because cant really find the time to disconnect the internet to try it with my wife n children using it.
and stil trying to find whats the difference of my script with amirsalehalavi one.
its already a year passed. n i already forgotten most of the script.