Hello everyone,

I have an issue that i haven't been able to resolve for many days now i hope you can assist.

RouterA: RB2011L-RM UAS
RouterB: RB750UP

RouterB connects to RouterA via both LAN(wifi) and VPN over cellular. (RouterB is in a vehicle.... so wifi for in the depot and vpn for on the road).

RouterA subnet is 10.60.198.0/27
RouterB subnet is 10.60.198.64/28

I have RouterA on 10.60.198.1 & RouterB on 10.60.198.65.

The VPN link has static address of:
RouterA: 192.168.66.1 & RouterB: 192.168.66.2

The LAN link has static address of:
RouterA: 192.168.65.1 & RouterB: 192.168.65.2


From RouterB i can ping 10.60.198.1 continuously, i can remove the lan connection and it correctly fails over to the vpn connection, i replug the lan connection and it returns to lan. This happens very quickly with little packet loss. which is good.

However, i cannot ping 10.60.198.14 or any other lan machine at RouterA's site when the lan cable is removed. Plugging it back in restores connectivity.

i will add a screenshot which shows some info....
i'm thinking it has something to do with the routing table there is an automatically added entry of 10.60.198.0/27 via ether1-gateway when it's quite obvious that it's not reachable via that port... i can delete it it just appears on it's own! i'm pretty sure that's my problem. how can i make all ports seperate, no mast/slave config?

any help would be much appreciated

update, ok so i've manage to make every port seperate, so there are no slaves.

still doesn't fix my problem however.

the entry 10.60.198.0/27 via ether1 is fine when the cable is plugged in, but when the cable is unplugged and the mikrotik should then route through the vpn rather than ether1. It doesn't say "unreachable" like i would have expected.


I can't route it down the vpn as the entry via ether1 is of metric 0 and all my manual entry's go as low as 1.


Please help!!!!

it's always the case isn't it!!!! as soon as you post you fix it.

I had to remove the ip address 10.60.198.30/27 from the ether1 interface.

doh!


i then added:

10.60.198.0/27 via ether1, metric=1
10.60.198.0/27 via home-wan, metric=2

pinged 10.60.198.10 (server on lan at remote office).
worked fine 0ms ping, unplugged lan cable and pings worked after 2xtimeouts at 200ms pings so that verifies it's taking the right path.

woohoo! just a little bit excited!

I now need to test using the wifi client and ap.