Force Netwatch thru WAN1?

I try to setup a dual ISP failover with netwatch as the “checker” of internet on WAN1.
WAN1 and WAN2 is DHCP-client.

My config is:
/interface ethernet
set [ find default-name=ether1 ] comment=WAN1
set [ find default-name=ether2 ] comment=WAN2
/ip dhcp-client
add comment=WAN1 dhcp-options=hostname,clientid disabled=no interface=ether1
add comment=WAN2 default-route-distance=2 dhcp-options=hostname,clientid disabled=no interface=ether2
/ip firewall mangle
add action=mark-routing chain=prerouting new-routing-mark=google passthrough=yes protocol=icmp src-address=8.8.4.4
add action=mark-routing chain=output new-routing-mark=google passthrough=yes protocol=icmp src-address=8.8.4.4
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
add action=masquerade chain=srcnat out-interface=ether2
/ip route
add distance=1 dst-address=8.8.4.4/32 gateway=ether1 routing-mark=google
/tool netwatch
add down-script=“/ip dhcp-client set [ find comment=WAN1] default-route-distance=10\r
\n/tool e-mail send to="" subject="$[/system identity get name] ISP1 Down"\r
\n" host=8.8.4.4 interval=5s up-script="/ip dhcp-client set [ find comment=WAN1] default-route-distance=1\r
\n/tool e-mail send to="
*" subject="$[/system identity get name] ISP1 Up"”

Everything is working great but the netwatch flaps.. some how when I test to block 8.8.4.4 on WAN1 it says down in some seconds and then UP och some seconds later DOWN… and so on…

Help plz.

explain your plan more
fail-over based on ping or check gateway or what?

If you want automatic failover, I wrote something. Please check here (https://alaincasault.com/ca/posts/) and look for "Redundant WAN links ".

It should do the trick.

Regards,




Sent from Tapatalk