[Help] Config Port Forwarding Use Only 1 PPPOE in Load Balancing 3 PPPOE - Mikrotik

RouterOS General
1

Hello everyone,

I have problem but I can’t config it. My english not good, so I will try explain my problem ( just ask me if you dont know ^^)

  • My network have 3 PPPOE ( Sorry I Use name PPPOE_1, PPPOE_2, PPPOE_3 for 3 static IP) , I already config Load balancing + Port Forwarding : Done
  • And when open port 3333 for Remote ( IP: 10.5.86.230) >> I can use any PPPOE for remote. Ex: PPPOE_1:3333 , PPPOE_2:3333, PPPOE_3:3333
  • But I need only open port 3333 ( IP: 10.5.86.230) for only PPPOE_1 >> PPPOE_2 PPPOE_3 can not remote. So I config agian, it’s work if I use other network, but if I use my network ( LAN local) can not remote PPPOE_1:3333 .

Anyone can help me this case. Thanks so much.

This my network.

# model = CCR1009-8G-1S

/interface bridge
add comment="LAN Local" name=Bridge-WAN2
add comment="Wifi G" name=bridge_wifi

/interface pppoe-client
add comment=WAN2 disabled=no interface=WAN2 max-mru=1480 max-mtu=1480 name=\
    PPPOE_2 use-peer-dns=yes user=XXXXXXX
add comment=WAN3 disabled=no interface=WAN3 max-mru=1480 max-mtu=1480 name=\
    PPPOE_3 use-peer-dns=yes user=XXXXXXX
add comment=WAN1 disabled=no interface=WAN1 max-mru=1480 max-mtu=1480 mrru=1600 \
    name=PPPOE_1 use-peer-dns=yes user=XXXXXXX

/interface bridge settings
set use-ip-firewall-for-pppoe=yes

/ip address
add address=10.5.86.1/24 interface=Bridge-WAN2 network=10.5.86.0
add address=192.168.2.1/24 interface=bridge_wifi network=192.168.2.0

/ip firewall address-list
add address=10.5.86.0/24 list="WAN Local"
add address=192.168.2.0/24 list="WAN Local"

/ip firewall nat
add action=masquerade chain=srcnat out-interface=PPPOE_2
add action=masquerade chain=srcnat out-interface=PPPOE_1
add action=masquerade chain=srcnat out-interface=PPPOE_3


add action=dst-nat chain=dstnat dst-port=2222 protocol=tcp \
    to-addresses=10.5.86.6 to-ports=2222
    
add action=dst-nat chain=dstnat comment=Camera dst-port=3333 in-interface=\
    PPPOE_1 protocol=tcp to-addresses=10.5.86.230 to-ports=3333

add action=masquerade chain=srcnat src-address=10.5.86.0/24
add action=masquerade chain=srcnat src-address=192.168.2.0/24



/ip route
add check-gateway=ping distance=1 gateway=PPPOE_1 routing-mark=\
    to_wan1
add check-gateway=ping distance=1 gateway=PPPOE_2 routing-mark=\
    to_wan2
add check-gateway=ping distance=1 gateway=PPPOE_3 routing-mark=\
    to_wan3
add check-gateway=ping distance=1 gateway=PPPOE_1
add check-gateway=ping distance=2 gateway=PPPOE_2
add check-gateway=ping distance=3 gateway=PPPOE_3

/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set api-ssl disabled=yes

/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set pptp disabled=yes
set udplite disabled=yes
set dccp disabled=yes
set sctp disabled=yes