I am using the RB1100
With the below connections :
The setup is as below : From tools ping utility from the router I can ping 8.8.8.8 when i select WAN1 interface, however when i choose WAN 2 I cannot ping.
What Am i doing wrong ?
WAN 2 when connected to a standalone system (laptop) works just fine.
# mar/01/2017 13:30:55 by RouterOS 6.38.3
# software id = BM0F-DF12
#
/interface ethernet
set [ find default-name=ether3 ] name=LAN
set [ find default-name=ether6 ] name=LAN2
set [ find default-name=ether5 ] master-port=LAN name=Server-1
set [ find default-name=ether9 ] master-port=LAN2 name=Server-2
set [ find default-name=ether4 ] master-port=LAN name=Switch-3
set [ find default-name=ether7 ] master-port=LAN2 name=Switch-4
set [ find default-name=ether8 ] master-port=LAN2 name=Switch-5
set [ find default-name=ether1 ] name=WAN1
set [ find default-name=ether2 ] name=WAN2
set [ find default-name=ether10 ] master-port=LAN2 name=WIFI-1
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp ranges=10.10.0.101-10.10.3.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=LAN name=dhcp1
/ip address
add address=106.51.37.32/22 interface=WAN1 network=106.51.36.0
add address=106.51.70.76/19 interface=WAN2 network=106.51.64.0
add address=10.10.0.1/22 interface=LAN network=10.10.0.0
/ip dhcp-server network
add address=10.10.0.0/22 dns-server=10.10.0.1 gateway=10.10.0.1 netmask=22
/ip dns
set allow-remote-requests=yes cache-size=8192KiB max-udp-packet-size=8192 servers=202.83.21.12,202.83.20.101,202.83.21.2
/ip firewall address-list
add address=106.51.36.0/22 list=Connected
add address=106.51.64.0/19 list=Connected
add address=10.10.0.0/22 list=Connected
add address=10.10.0.0/22 list=LAN
/ip firewall filter
add action=add-src-to-address-list address-list=ssh_blacklist address-list-timeout=1w3d chain=input connection-state=new dst-port=22 protocol=tcp src-address-list=ssh_stage3
add action=drop chain=input comment="drop ssh brute forcers" dst-port=22 protocol=tcp src-address-list=ssh_blacklist
add action=add-src-to-address-list address-list=ssh_stage3 address-list-timeout=1m chain=input connection-state=new dst-port=22 protocol=tcp src-address-list=ssh_stage2
add action=add-src-to-address-list address-list=ssh_stage2 address-list-timeout=1m chain=input connection-state=new dst-port=22 protocol=tcp src-address-list=ssh_stage1
add action=add-src-to-address-list address-list=ssh_stage1 address-list-timeout=1m chain=input connection-state=new dst-port=22 protocol=tcp
add action=drop chain=input comment="drop ftp brute forcers" dst-port=21 protocol=tcp src-address-list=ftp_blacklist
add action=accept chain=output content="530 Login incorrect" dst-limit=1/1m,9,dst-address/1m protocol=tcp
add action=add-dst-to-address-list address-list=ftp_blacklist address-list-timeout=3h chain=output content="530 Login incorrect" protocol=tcp
add action=drop chain=input dst-port=53 in-interface=WAN1 protocol=udp
add action=drop chain=input dst-port=53 in-interface=WAN1 protocol=tcp
add action=drop chain=input dst-port=53 in-interface=WAN2 protocol=udp
add action=drop chain=input dst-port=53 in-interface=WAN2 protocol=tcp
add action=drop chain=input dst-port=23 in-interface=WAN1 protocol=udp
add action=drop chain=input dst-port=23 in-interface=WAN1 protocol=tcp
add action=drop chain=input dst-port=23 in-interface=WAN2 protocol=udp
add action=drop chain=input dst-port=23 in-interface=WAN2 protocol=tcp
/ip firewall mangle
add action=accept chain=prerouting dst-address-list=Connected src-address-list=Connected
add action=mark-connection chain=input connection-mark=no-mark in-interface=WAN1 new-connection-mark=WAN1->ROS
add action=mark-connection chain=input connection-mark=no-mark in-interface=WAN2 new-connection-mark=WAN2->ROS
add action=mark-routing chain=output connection-mark=WAN1->ROS new-routing-mark=first
add action=mark-routing chain=output connection-mark=WAN2->ROS new-routing-mark=other
add action=mark-connection chain=forward connection-mark=no-mark in-interface=WAN1 new-connection-mark=WAN1->LANs
add action=mark-connection chain=forward connection-mark=no-mark in-interface=WAN2 new-connection-mark=WAN2->LANs
add action=mark-routing chain=prerouting connection-mark=WAN1->LANs new-routing-mark=first src-address-list=LAN
add action=mark-routing chain=prerouting connection-mark=WAN2->LANs new-routing-mark=other src-address-list=LAN
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-list=!Connected dst-address-type=!local new-connection-mark=LAN->WAN src-address-list=LAN
add action=mark-routing chain=prerouting comment="Load-Balancing here" connection-mark=LAN->WAN new-routing-mark=first src-address-list=LAN
add action=mark-connection chain=prerouting connection-mark=LAN->WAN new-connection-mark=Sticky_ISP1 routing-mark=first
add action=mark-connection chain=prerouting connection-mark=LAN->WAN new-connection-mark=Sticky_ISP2 routing-mark=other
add action=mark-routing chain=prerouting connection-mark=Sticky_ISP1 new-routing-mark=first src-address-list=LAN
add action=mark-routing chain=prerouting connection-mark=Sticky_ISP2 new-routing-mark=other src-address-list=LAN
/ip firewall nat
add action=masquerade chain=srcnat out-interface=WAN1
add action=masquerade chain=srcnat out-interface=WAN2
add action=masquerade chain=srcnat out-interface=all-ppp
/ip route
add check-gateway=ping distance=1 gateway=106.51.36.1%WAN1 routing-mark=first
add distance=1 gateway=106.51.64.1%WAN2 routing-mark=other
add distance=1 gateway=106.51.36.1
add distance=2 gateway=106.51.64.1
add distance=1 dst-address=172.27.224.0/20 gateway=10.10.0.3
/system identity
set name=test