Hello.

I'm using 7.12 Stable and have a question about the functionality of the routing rules.
The test circuit is something like this.
From the uplink network you need to route via src-addr to VRFs (VLANs) identical in addressing.
In ROS6, a similar problem was solved through ip rules.

If you hang markings in firewall prerouting, there are no problems, but this is not an option.
And here’s the question - how does the routing rule work in ROS7?
This doesn’t work anymore, sniffer shows that Mikrotik doesn’t even try, it sends net unreachable.
I tried to specify Routing mark, Interface and even 0.0.0.0/0 as dst-address in any combination. It has no effect.

It seems that rules only work for traffic from vrf main.
And also after changes in rules you need to disable/enable this rule.
Otherwise it won't work.

Checked at 7.13rc3.

It looks like you are trying to implement policy-based routing in RouterOS version 7.12 using routing rules. The routing rule configuration you've provided seems correct, and it should work for policy-based routing. However, you mentioned that it's not working as expected.

Here are a few things to check and consider:

Routing Rule Evaluation Order:

Make sure that the routing rules are evaluated in the correct order. Rules are processed from the top down, and the first matching rule is applied. Ensure that the rules for vrf106 and vrf115 are placed in the correct order based on your requirements.
Source Address Matching:

Check the source addresses specified in the routing rules. Confirm that the actual source addresses match the addresses specified in the rules.
Destination Address in Routing Rules:

In RouterOS, routing rules usually don't specify the destination address directly. The destination is determined based on the routing table associated with the routing mark. Ensure that the destination is correctly determined based on the routing mark.
Check Routing Table Associations:

Verify that the routing tables (vrf106 and vrf115) are correctly associated with the respective interfaces (vlan106 and vlan115). Use the print detail command to check the details of the routing tables and associated interfaces.
bash
Copy code
/ip route print detail
Ensure Correct Network Address in Routes:

Double-check that the network addresses specified in the routes are correct, especially in the ip route entries.
Use a Specific Source IP for Testing:

When testing, try using a specific source IP address for your tests to ensure that you are matching the correct source in the routing rules.
Logging for Troubleshooting:

You can add logging to the routing rules for troubleshooting. For example:
bash
Copy code
/ip route rule
add action=lookup-only-in-table disabled=no src-address=10.225.1.0/24 table=vrf106 log=yes
add action=lookup-only-in-table disabled=no src-address=10.225.2.0/24 table=vrf115 log=yes
This will log matches to the system log, and you can then check the logs for any information on why a particular rule is not matching.