2xWAN failover + load ballance tweakin'

jaceqp123 · June 27, 2019, 8:06am

Hi there…
I’ve got a freshly bought RB2011UiAS-2HnD-In.
My goal is to set a failover+load ballance.

I have:
Ether1-WAN1 (dhcp) 192.168.1.x
Ether2-WAN2 (static IP) 80.55…
Bridge1 (ether3-9 + Wlan) local network 192.168.0.x

Now, I’ve configured rOS acordingly to:
https://mum.mikrotik.com/presentations/KE18/presentation_5110_1517560105.pdf

Basically it runs but:

Shall I expect combined WAN performance results with both WAN online on speedtest? If so I…don’t.
When disconnecting WAN1 cable I can’t ping pretty much anything from LAN to outside no matter by address name or IP… BUT internet itself seems to work anyway. For example I can’t ping google.com but I’m able to open web page, email client works aswell. Router itself can ping nicely.
Can I modify setup to improve WAN1/WAN2 internet detection? Like instead of checking gateway to check some outside IPs (even multiple ones)?

PS: Some setup preview:

/ip firewall nat

 0    chain=srcnat action=masquerade out-interface=ether1-WAN1 log=no 
      log-prefix="" 

 1    chain=srcnat action=masquerade out-interface=ether2-WAN2 log=no 
      log-prefix="" 

/ip firewall mangle print 

 0  D ;;; special dummy rule to show fasttrack counters
      chain=prerouting action=passthrough 

 1  D ;;; special dummy rule to show fasttrack counters
      chain=forward action=passthrough 

 2  D ;;; special dummy rule to show fasttrack counters
      chain=postrouting action=passthrough 

 3    chain=prerouting action=accept dst-address=192.168.1.0/24 
      in-interface=Bridge1 

 4    chain=prerouting action=accept dst-address=80.x.x.0/24 
      in-interface=Bridge1 

 5    chain=input action=mark-connection new-connection-mark=Wan1_conn 
      passthrough=yes connection-mark=no-mark in-interface=ether1-WAN1 

 6    chain=input action=mark-connection new-connection-mark=Wan2_conn 
      passthrough=yes connection-mark=no-mark in-interface=ether2-WAN2 

 7    chain=prerouting action=mark-connection new-connection-mark=Wan1_conn 
      passthrough=yes dst-address-type=!local connection-mark=no-mark 
      in-interface=Bridge1 
      per-connection-classifier=both-addresses-and-ports:2/0 

 8    chain=prerouting action=mark-connection new-connection-mark=Wan2_conn 
      passthrough=yes dst-address-type=!local connection-mark=no-mark 
      in-interface=Bridge1 
      per-connection-classifier=both-addresses-and-ports:2/1 

 9    chain=prerouting action=mark-routing new-routing-mark=to_Wan1 
      passthrough=no connection-mark=Wan1_conn in-interface=Bridge1 

10    chain=prerouting action=mark-routing new-routing-mark=to_Wan2 
      passthrough=no connection-mark=Wan2_conn in-interface=Bridge1 

11    chain=output action=mark-routing new-routing-mark=to_Wan1 
      connection-mark=Wan1_conn 

12    chain=output action=mark-routing new-routing-mark=to_Wan2 
      connection-mark=Wan2_conn 

/ip address print 
 #   ADDRESS            NETWORK         INTERFACE                                
 0   192.168.0.1/24     192.168.0.0     Bridge1                            
 1   80.x.x.x/29    80.x.x.x    ether2-WAN2                              
 2 D 192.168.1.110/24   192.168.1.0     ether1-WAN1

sebastia · June 27, 2019, 9:05am

Hey

see https://wiki.mikrotik.com/wiki/How_PCC_works_(beginner), “both-addresses-and-ports” is fine. Is the speedtest multi-stream? if not only one isp will be used.
the route-marks should have fail-over, so add the other isp to each mark but with higher distance. also make the routes “check-gateway”
see https://wiki.mikrotik.com/wiki/Advanced_Routing_Failover_without_Scripting

(edit) Note:

since wan2 is static, src-nat should be used instead of masquerade

wanton · June 27, 2019, 9:45am

Hello,

I have a similar situation.

This is my setup:
https://pasteboard.co/IlkPNxn.png

ADSL Modem is simple TP-Link ADSL Modem
LTE Modem is simple Huawei LTE modem (working as only LAN LTE provider)
Router is RB3011UiASm

Both ISP are connected through ethernet ports to the router. The router to a switch, then to all the computers in the company.

My configuration is “Bandwidth based load balancing” as shown by mr Tomas Kirnak : https://mum.mikrotik.com/presentations/US12/tomas.pdf

In summary:
The idea is that whenever my ADSL ISP is overflowing its bandwidth or is cut off, the RouterOs traffic monitor implements a script that changes a routing mark to the LTE ISP.
New connections get marked so as to be routed through the LTE modem.
Mangle rules keep the connections rooted to their respective ISP until they’re closed.
Once the traffic on the ADSL ISP provider is diminished the script change the routing mark back to the ADSL ISP.

I like this configuration and it works well as in it does what it is supposed to do.

But ..

The problem that arises is that the LTE modem seems to fight with the router.
I can connect to the LTE modem through the LAN, but when I ping the ISP ip address to check my dl/up speed, I get timeouts and or 2500ms pings with veeeeeery slow speeds.
If immediately after I connect directly to the LTE modem using a twisted pair and ping the same ISP ip address and/or check my speed I get 25ms ping and an acceptable speed (for my location).

The result is that the connections through the LTE modem are veeery slow.
The only recourse is to switch off the LTE modem and force all traffic through the ADSL modem.

Since our location is very unfortunate with regards to alternative ISP providers I have to stick with the ADSL which is also not optimal because it gets cut off fairly often.

Can you help me ?

sebastia · June 27, 2019, 10:03am

that’s not similar at all. I would advise to start a new thread.

Also specify which isp you use, it sounds like they may be penalising tethering

wanton · June 27, 2019, 10:45am

OK ..

Thx for the tip ..

I thought so myself … but since the forum is slow to respond I gathered maybe it’s better to post this on an active topic.

Anywho … its done… I created a new topic with the situation.

hopefully someone can help

regards

K