Hey there,
first want to say: never seen a forum, where everybody seems so nice around here. No “youre stupid” or “let me google that for you “ Already happy to learn and be also of help .
”Standard Config” reffering Documentation :
“Standard Failover WAN Config refferring documenation":;
| Column 1 | Column 2 | Column 3 | Column 4 |
|---|---|---|---|
| Model | RB750Gr3 | ||
| Revision | r4 | ||
| FirmwareType | mt7621L | ||
| FactoryFirmware | 6.46.8 | ||
| CurrentFirmware | 7.21 | ||
| Upgrade Firmware | 7.21 | ||
| ether1 | Starlink Gateway (v3 Router n Bypass) | DHCP-Client | WAN |
| ether2 | Ethernet-USBC Active Adapter > Samsung S20 USB/Ethernettethering ON | DHCP-Client | WAN |
| ether3-5 | bridge1 | LAN | |
| USBC→ Ether adapter | https://www.amazon.de/dp/B0F13RJKJ3 just a ordinary USBC Thunderbolt 1000mbits converter with PD capability |
/interface bridge add name=bridge1
/interface bridge port add interface=ether2 bridge=bridge1
/ip address add address=192.168.88.1/24 interface=bridge1
/ip dhcp-server/ setup
>>bridge1 as interface
>>dhcp address space 192.168.88.0/24
>>dhcp gateway 192.168.88.1
>>dhcp address pool 192.168.88.2-192.168.88.254
>>send dns ? YES
>>dns servers 192.168.88.1
>>releasetime 1800
/ip dhcp-client add disabled=no add-default-route=NO use-peer-dns=yes use-peer-ntp-yes interface=ether1
/ip dhcp-client add disabled=no add-default-route=NO use-peer-dns=yes use-peer-ntp-yes interface=ether2
/ip/route/
add dst-address=8.8.8.8 scope=10 gateway=100.64.0.1
add dst-address=8.8.4.4 scope=10 gateway=192.168.66.209
add distance=1 gateway=8.8.8.8 target-scope=11 check-gateway=ping
add distance=2 gateway=8.8.4.4 target-scope=11 check-gateway=ping
/ip firewall nat
add chain=srcnat out-interface=ether1 action=masquerade
add chain=srcnat out-interface=ether2 action=masquerade
/ip firewall filter
add chain=input action=accept connection-state=established,related,untracked comment="accept established,related,untracked"
add chain=input action=drop connection-state=invalid comment="drop invalid"
add chain=input in-interface=ether1 action=accept protocol=icmp comment="accept ICMP"
add chain=input in-interface=ether1 action=accept protocol=tcp port=8291 comment="allow Winbox";
add chain=input in-interface=ether1 action=accept protocol=tcp port=22 comment="allow SSH";
add chain=input in-interface=ether1 action=drop comment="block everything else";
/ip firewall filter
add chain=forward action=fasttrack-connection connection-state=established,related \
comment="fast-track for established,related";
add chain=forward action=accept connection-state=established,related \
comment="accept established,related";
add chain=forward action=drop connection-state=invalid
add chain=forward action=drop connection-state=new connection-nat-state=!dstnat \
in-interface=ether1 comment="drop access to clients behind NAT from WAN"
/ip service set ssh port=2200
/ip service disable telnet,ftp,www,api
/ip dns set allow-remote-requests=yes
I have no special powers in regards to this ^^
Problems to solve:
Starlink on ether1 sometimes loses connection (bad placement, not to be placed elsewhere) and for those times, i want the ether2 port to jump right in, and take the traffic.
Specially for timesensitive things like GamePlay but also for “everyday” browsing, i hope, that i get no disconnects, or they stay small bc the failover takes the traffic, until the connection is established over the google DNS resolver again.
Momentarly i have the biggest problem, that the failover is not working. Second: the ether2 Port is having problems with renewal.
Somebody already tried something like this? or has advice besides, to invest into a 5G controller? (I looked around, they are to expensive for me at this moment)
Thanks a lot and a great weekend ahead chaps ![]()
Haydar