4 Wan connections, 2 RB750 and 1 Lan

RouterOS General
1

Hi, I have a network that has 4 internet connections and what I would like to do is have 2 RB750 as gateway in failover, which means that one of the RB750 would be running as master and the other would be on standby until the master breaks.

I was thinking on attaching all four internet connection to the first ethernet on the RB, the LAN to the second ethernet and make a third connection between both RB. All the internet connections would be on DMZ sending all the traffic to the master RB ether1 IPs so here is the question, How sould I setup both RB so there act as one ? I read about VRRP but I don’t know if it would work for this scenario or if there is any other solution, more stable or easy to setup for that matter.

Thanks.

[ISP1]-------\
               |
  [ISP2]-------|               /---[RB750 Master]---\
               |---[SWITCH]----|        |           |------[SWITCH LAN]
  [ISP3]-------|               \----[RB750 Slave]---/
               |
  [ISP4]-------/

A little more detail :
Detail.png

2

Deleted because not related.

3

Thanks for your answer dobby.

I’ve this setup already working. What I did was, using an smartswitch between the WAN connections an the RBs, I setup one vLan for each WAN and configured the same vLans on the RB. For the failover what I did was setup a Netwatch script that checks if the Master RB is alive and if isn’t the it enable all the interfaces on the RB Slave.

Also I wrote a script that does a config backup between the Routers every 24H so both of them have the same configuration and another script that checks the mac address of the ether1 of the router on startup and decides if the router is Master or Slave.

As for the failover providers, what I did was setup the main route of the RB with multiple gateways with weights so if ISP1 fails then ISP2 will be used and so on.

BTW I use a smartswitch to set the vLans because two of my WAN connections only work using a specific ethernet port and my ISP say that it can be changed. If this wasn’t like this I will problably go for two RB2011 instead of the two RB750.

4

Deleted because not related.

5

for my (little) experience I’m sure you are talking about two things, that both I do on my customer’s firewalls:

  1. a VRRP cluster to guarantee that the hardware failure of one firewall will not block company activities
    http://wiki.mikrotik.com/wiki/Manual:Interface/VRRP
    Once you understood the logic, is not so difficult to implement, just you must know that in case of failover there will be a disconnection of some seconds.

  2. a multipath routing configuration for failover and/or balance of the incoming and outgoing connections.
    Actually I use a script, but I am not satisfied because it’s tricky. It’s my personal interpretation of ideas in:
    http://wiki.mikrotik.com/wiki/ECMP_Failover_Script
    http://wiki.mikrotik.com/wiki/Improved_Netwatch_II
    Recently I read this link
    http://wiki.mikrotik.com/wiki/Advanced_Routing_Failover_without_Scripting
    I didn’t understood it, so for now I did not implement this, but maybe I’ll give it a try.
    If you are experimenting and try it, give us a feedback!

6

hi dtoffo,

If you don’t mind could you please forward your setup configuration to me. because i was looking to implement the same on my network.

please email the config details to : victory.prasad@gmail.com


Thanks in advance to your help.