I’m using ADSL, and both line is ok but the pcc seem not work
all traffic will go wan1 or wan2 in one time
/ip firewall mangle
add action=mark-connection chain=input comment=\
"Mark new inbound connection wan1 & wan2" connection-state=new disabled=\
no in-interface=pppoe-out1 new-connection-mark=wan1 passthrough=yes
add action=mark-connection chain=input connection-state=new disabled=no \
in-interface=pppoe-out2 new-connection-mark=wan2 passthrough=yes
add action=mark-connection chain=prerouting comment="Mark established" \
connection-state=established disabled=no in-interface=pppoe-out1 \
new-connection-mark=wan1 passthrough=yes
add action=mark-connection chain=prerouting connection-state=established \
disabled=no in-interface=pppoe-out2 new-connection-mark=wan2 passthrough=\
yes
add action=mark-connection chain=prerouting comment="Mark related" \
connection-state=related disabled=no in-interface=pppoe-out1 \
new-connection-mark=wan1 passthrough=yes
add action=mark-connection chain=prerouting connection-state=related \
disabled=no in-interface=pppoe-out2 new-connection-mark=wan2 passthrough=\
yes
add action=mark-routing chain=output comment="Routing Mark" connection-mark=\
wan1 disabled=no new-routing-mark=static-wan1 passthrough=no
add action=mark-routing chain=output connection-mark=wan2 disabled=no \
new-routing-mark=static-wan2 passthrough=no
add action=mark-connection chain=prerouting comment=\
"Mark traffic that isn't local with PCC mark rand" connection-state=new \
disabled=no dst-address-type=!local in-interface=ether5 \
new-connection-mark=wan1_pcc_conn passthrough=yes \
per-connection-classifier=both-addresses:2/0
add action=mark-connection chain=prerouting connection-state=new disabled=no \
dst-address-type=!local in-interface=ether5 new-connection-mark=\
wan2_pcc_conn passthrough=yes per-connection-classifier=\
both-addresses:2/1
add action=mark-connection chain=prerouting comment="Mark established" \
connection-state=established disabled=no dst-address-type=!local \
in-interface=ether5 new-connection-mark=wan1_pcc_conn passthrough=yes \
per-connection-classifier=both-addresses:2/0
add action=mark-connection chain=prerouting connection-state=established \
disabled=no dst-address-type=!local in-interface=ether5 \
new-connection-mark=wan2_pcc_conn passthrough=yes \
per-connection-classifier=both-addresses:2/1
add action=mark-connection chain=prerouting comment="Mark related" \
connection-state=related disabled=no dst-address-type=!local \
in-interface=ether5 new-connection-mark=wan1_pcc_conn passthrough=yes \
per-connection-classifier=both-addresses:2/0
add action=mark-connection chain=prerouting connection-state=related \
disabled=no dst-address-type=!local in-interface=ether5 \
new-connection-mark=wan2_pcc_conn passthrough=yes \
per-connection-classifier=both-addresses:2/1
add action=mark-routing chain=prerouting comment="Routing Mark" \
connection-mark=wan1_pcc_conn disabled=no new-routing-mark=wan1 \
passthrough=yes
add action=mark-routing chain=prerouting connection-mark=wan2_pcc_conn \
disabled=no new-routing-mark=wan2 passthrough=yes
/ip route
add check-gateway=arp comment="Static Route" disabled=no distance=1 \
dst-address=0.0.0.0/0 gateway=pppoe-out1 routing-mark=static-wan1 scope=\
30 target-scope=10
add check-gateway=arp disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\
pppoe-out2 routing-mark=static-wan2 scope=30 target-scope=10
add check-gateway=arp comment="Wan1 - Distance1" disabled=no distance=1 \
dst-address=0.0.0.0/0 gateway=pppoe-out1 routing-mark=wan1 scope=30 \
target-scope=10
add check-gateway=arp comment="Wan1 - Distance 2" disabled=no distance=2 \
dst-address=0.0.0.0/0 gateway=pppoe-out2 routing-mark=wan1 scope=30 \
target-scope=10
add check-gateway=arp comment="Wan2 - Distance1" disabled=no distance=1 \
dst-address=0.0.0.0/0 gateway=pppoe-out2 routing-mark=wan2 scope=30 \
target-scope=10
add check-gateway=arp comment="Wan2 - Distance 2" disabled=no distance=2 \
dst-address=0.0.0.0/0 gateway=pppoe-out1 routing-mark=wan2 scope=30 \
target-scope=10
add check-gateway=arp comment="Default Route" disabled=no distance=1 \
dst-address=0.0.0.0/0 gateway=pppoe-out1 scope=30 target-scope=10
add check-gateway=arp disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\
pppoe-out2 scope=30 target-scope=10
I find that every traffic with “wlan2” routing mark will only have upload, but no download. And they won’t go through NAT/Masquerade.
What should I adjust?
Thanks
can anyone help…?