3 wan 3 subnets

RouterOS General
1

Hi every one . Actually I am not beginner but also not an expert. Using and configuring mikrotik products for 7 years now but I got stock in 1 problem I can’t solve

I have rb3011
3 wan
Wan 1 is on SFP
wan 2 is on eth2
Wan3 is on eth3
And 3 LAN subnets
Lan1 is on eth4 using 192.168.1.0/24
LAN 2 is on eth5 using 192.168.10.0/24
Lan3 is on eth6 using 192.168.100.0/24

First of all all users should ping each other and access ech other
Second LAN 1 must use wan1
LAN 2 must use wan2
LAN 3 must use wan3
But if wan1 fails lan1 users redirected to wan2 or wan3 ( no difference) until wan1 gets stable and same thing happens to LAN 2 and LAN 3 if wan 2 or wan 3 fails . I would appreciate if you can help me on this thanks

2

Are you on Router OS 6 or 7?
And how each WAN connect to internet? Using DHCP or PPPoE?

3 
#Create a bridge for LAN
/interface bridge
add name=bridge1

/interface bridge port
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=ether6

#Create 2 lists: WAN & LAN
/interface list
add name=WAN
add name=LAN

/interface list member
add list=WAN interface=spf-sfpplus1
add list=WAN interface=ether2
add list=WAN interface=ether3
add list=LAN interface=bridge1
add list=LAN interface=ether4
add list=LAN interface=ether5
add list=LAN interface=ether6

#Create address list for LAN IPs
/ip firewall address-list
add list=lan_ip address=192.168.1.0/24
add list=lan_ip address=192.168.10.0/24
add list=lan_ip address=192.168.100.0/24

#Masquerade one-on-one
/ip firewall nat
add action=masquerade src-address=192.168.1.0/24 chain=srcnat out-interface=spf-sfpplus1 comment="WAN1"
add action=masquerade src-address=192.168.10.0/24 chain=srcnat out-interface=ether2 comment="WAN2"
add action=masquerade src-address=192.168.100.0/24 chain=srcnat out-interface=ether3 comment="WAN3"

#fallback if any WAN fail
add action=masquerade src-address-list=lan_ip chain=srcnat out-interface-list=WAN comment="fallback"

Then you have to work on IP route, and it is complicated without seeing your current configuration. Kinda you have to export your config here…

/export hide-sensitive file=myconfig
4

Your request seems straightforward except for one problem…
First of all all users should ping each other and access ech other

If all users should be able to access each other then you dont need 3 subnets, one subnet for all users is what your describing.
Please state why that shouldnt be the case.

Just to make it clear are you dividing up the users into different subnets so that you apportion to the WANs?
If this is the case, then load balancing and all users having access to all three WANS may also be suitable.

5

Thanks for your answers . Imagine it is completely new router with no configuration on it . ROS 7
Wan 1 is on sfp using dhcp client
Wan2 and wan3 both uses pppoe connection

6

I dont spend time imagining, I work with facts and need answers to questions.
What also helps is a detailed network diagram
/export file=anynameyouwish (minus router serial #, any public WANIP information).