Forcing a connection output through a specific WAN

RouterOS General
1

Hi guys!

I use a RouterBOARD 450G with Load Balanced PCC between 2 ISPs and 2 LANs.
Lately I’m having a problem with the ISP 2: when we try to connect through a SSH terminal in our VPS, the connection is suddenly terminated if the connection go through this one and its driving me nuts when we need to do a anti virus scan or install something. :confused:
I’ve tried a bunch of rules and static routes to correct the problem but it was “less than successful”.

GVT and NET are my ISP and the one with problems are NET.
When the connection goes through ISP1 (GVT) works like a charm.
What I want to do: All out coming traffic from port 22 goes ONLY through the ISP1 interface (GVT)
How can I do that? :frowning:

These are my mangle rules:

/ip firewall mangle
add chain=prerouting comment="Aceita redes" dst-address=192.168.1.0/24 \
    src-address=192.168.1.0/24
add chain=prerouting dst-address=192.168.0.0/24 src-address=192.168.1.0/24
add chain=prerouting dst-address=192.168.2.0/24 src-address=192.168.2.0/24
add chain=prerouting dst-address=192.168.1.0/24 src-address=192.168.2.0/24
add action=mark-connection chain=prerouting comment=\
    "Marca conex\F5es externas" connection-mark=no-mark in-interface=ISP1_GVT \
    new-connection-mark=ISP1_CONN
add action=mark-connection chain=prerouting connection-mark=no-mark \
    in-interface=ISP2 new-connection-mark=ISP2_CONN
add action=jump chain=prerouting comment="Encaminhamento personalizado" \
    connection-mark=no-mark in-interface=LAN jump-target=POLICY_ROUTER
add action=jump chain=prerouting connection-mark=no-mark in-interface=WLAN \
    jump-target=POLICY_ROUTER
add action=mark-routing chain=prerouting comment=\
    "Marca as conex\F5es para balanceamento" connection-mark=ISP1_CONN \
    new-routing-mark=ISP1_TRAFFIC src-address=192.168.1.0/24
add action=mark-routing chain=prerouting connection-mark=ISP2_CONN \
    new-routing-mark=ISP2_TRAFFIC src-address=192.168.1.0/24
add action=mark-routing chain=prerouting connection-mark=ISP1_CONN \
    new-routing-mark=ISP1_TRAFFIC src-address=192.168.2.0/24
add action=mark-routing chain=prerouting connection-mark=ISP2_CONN \
    new-routing-mark=ISP2_TRAFFIC src-address=192.168.2.0/24
add action=mark-routing chain=output connection-mark=ISP1_CONN \
    new-routing-mark=ISP1_TRAFFIC
add action=mark-routing chain=output connection-mark=ISP2_CONN \
    new-routing-mark=ISP2_TRAFFIC
add action=mark-connection chain=POLICY_ROUTER comment=\
    "Balanceando a conex\E3o" dst-address-type=!local new-connection-mark=\
    ISP1_CONN per-connection-classifier=both-addresses:2/0
add action=mark-connection chain=POLICY_ROUTER dst-address-type=!local \
    new-connection-mark=ISP2_CONN per-connection-classifier=\
    both-addresses:2/1

And these are my route rules:

/ip route
add comment=GVT distance=1 gateway=ISP1_GVT routing-mark=ISP1_TRAFFIC
add comment=NET distance=1 gateway=192.168.0.1 routing-mark=ISP2_TRAFFIC
add check-gateway=ping comment=NET distance=2 gateway=192.168.0.1
add check-gateway=ping comment=GVT distance=3 gateway=ISP1_GVT

Thanks in advance. :slight_smile: