2 - 8 WAN from same ISP (pppoe) & router access issues

Hello.

Got an issue I haven’t been able to fully work out.

in every case, I lose access to the router (everything from ping to winbox/ssh) on every single PPPOE connection EXCEPT for the last one to authenticate/connect.

Is there a way to fix this? Every other route goes blue.

All connections are on the same ISP

All connections have the same gateway

ISP seems to use return path filtering which is triggering this - nothing I can do about that


Everything on the internal network is working properly, connections are balanced properly, forwarded ports work correctly (no matter what connection they come in on, when set to all ppp) but any access to the router itsself (icmp/winbox/ssh/snmp) all fail

I’ve been considering doing some truly disgusting hackery of the mangle rules just to work around this issue but i really, really don’t want to go down that path.

I’ve tried disabling the default route on all pppoe clients (ends up with no access remote access - woohoo for safemode)

I’ve checked ip forward settings, rp filter isn’t something I can set locally to make a difference.

I could create a loop with a device on-site and forward ports to it and back into the router but that’s… crazy.

Found a fix.

Never wanted to use output chains but here we are.

make sure the routing mark lines up with the correct ip address for that wan or it won’t work.

maybe mikrotik could fix this by default to import that interfaces ip and flag outgoings? this will only fix it for people who only deal with static ip’s, if you’re on dynamic, you’re fucked.

/ip firewall mangle
add action=mark-routing chain=output new-routing-mark=to_wan-ISP2 src-address=101.x
add action=mark-routing chain=output new-routing-mark=to_wan-ISP3 src-address=149.x
add action=mark-routing chain=output new-routing-mark=to_wan-ISP4 src-address=203.x
add action=mark-routing chain=output new-routing-mark=to_wan-ISP1 src-address=165.x