I have used in 2WAN up the current CCR1016. You want to communicate to the router side by adding another router here, add only terminal certain.
I think you can be set using the policy-based routing in this case, but I wonder Is there a way to add without breaking the current setting?
Best regards.
[admin@MikroTik] /ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; Fix for an L2TP src-address bug
chain=srcnat action=masquerade to-addresses=0.0.0.0
src-address=192.168.99.0/24
1 chain=srcnat action=masquerade out-interface=21ip
2 chain=srcnat action=masquerade out-interface=ether11
3 chain=srcnat action=masquerade out-interface=gmobb
[admin@MikroTik] /ip firewall mangle> print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=prerouting action=mark-connection new-connection-mark=21ip
passthrough=yes connection-state=new dst-address-type=!local
src-address-list=internal dst-address-list=!internal
in-interface=internal
per-connection-classifier=both-addresses-and-ports:2/0
1 chain=prerouting action=mark-connection new-connection-mark=gmobb
passthrough=yes connection-state=new dst-address-type=!local
src-address-list=internal dst-address-list=!internal
in-interface=internal
per-connection-classifier=both-addresses-and-ports:2/1
2 chain=prerouting action=mark-routing new-routing-mark=21ip passthrough=no
in-interface=internal connection-mark=21ip
3 chain=prerouting action=mark-routing new-routing-mark=gmobb passthrough=n>
connection-state=new in-interface=internal connection-mark=gmobb
4 chain=prerouting action=accept dst-address=0.0.0.0/0 in-interface=interna>
5 chain=input action=mark-connection new-connection-mark=WAN1_mark
passthrough=yes in-interface=21ip
6 chain=input action=mark-connection new-connection-mark=WAN2_mark
passthrough=yes in-interface=gmobb
7 chain=output action=mark-routing new-routing-mark=to_ISP1 passthrough=yes
connection-mark=WAN1_mark
8 chain=output action=mark-routing new-routing-mark=to_ISP2 passthrough=yes
connection-mark=WAN2_mark
9 X chain=prerouting action=mark-connection new-connection-mark=WAN1_mark
passthrough=yes dst-address-type=!local in-interface=internal
per-connection-classifier=both-addresses-and-ports:2/0
10 X chain=prerouting action=mark-connection new-connection-mark=WAN2_mark
passthrough=yes dst-address-type=!local in-interface=internal
per-connection-classifier=both-addresses-and-ports:2/1
11 X chain=prerouting action=mark-routing new-routing-mark=to_ISP1
passthrough=yes in-interface=internal connection-mark=WAN1_mark
12 X chain=prerouting action=mark-routing new-routing-mark=to_ISP2
passthrough=yes in-interface=internal connection-mark=WAN2_mark
[admin@MikroTik] /ip route> print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 A S 0.0.0.0/0 21ip 20
1 A S 0.0.0.0/0 gmobb 10
2 ADS 0.0.0.0/0 163.139.127.183 1
3 DS 0.0.0.0/0 163.139.126.194 1
4 ADC 163.139.126.194/32 210.146.174.157 gmobb 0
5 ADC 163.139.127.183/32 1.21.56.22 21ip 0
6 ADC 192.168.1.0/24 192.168.1.1 internal 0
7 DC 192.168.88.0/24 192.168.88.1 ether1 255
