I can't remotely manage with NTH balance

RouterOS General
1

Hello Guys!
I have the following problem:
I can not remotely access my Mikrotik, I have NTH With load balance, one of my WAN has published static IP address. This my code.

/interface ethernet
 set 0 name=LAN
 set 1 name=WAN1
 set 2 name=WAN2

/ip address
 add address=200.13.157.132/29 interface=WAN1
 add address=192.168.1.5/24 interface=WAN2
 add address=192.168.55.1/24 interface=LAN

/ip firewall mangle
add chain=prerouting in-interface=LAN connection-state=new nth=2,1 action=mark-connection new-connection-mark=conn1 passthrough=yes comment="NTH1" disabled=no
add chain=prerouting in-interface=LAN connection-mark=conn1 action=mark-routing new-routing-mark=conn1 passthrough=no comment="" disabled=no

add chain=prerouting in-interface=LAN connection-state=new nth=2,2 action=mark-connection new-connection-mark=conn2 passthrough=yes comment="" disabled=no
add chain=prerouting in-interface=LAN connection-mark=conn2 action=mark-routing new-routing-mark=conn2 passthrough=no comment="NTH2" disabled=no

/ip firewall nat
add chain=srcnat connection-mark=conn1 action=masquerade out-interface=WAN1 comment="NTH1" disabled=no
add chain=srcnat connection-mark=conn2 action=masquerade out-interface=WAN2 comment="NTH2" disabled=no

/ip route
add dst-address=0.0.0.0/0 gateway=192.168.1.1 scope=255 target-scope=10 routing-mark=conn1 disabled=no
add dst-address=0.0.0.0/0 gateway=200.13.157.129 scope=255 target-scope=10 routing-mark=conn2 disabled=no

add dst-address=0.0.0.0/0 gateway=192.168.1.1 disabled=no
add dst-address=0.0.0.0/0 gateway=200.13.157.129 disabled=no

When I try to enter the IP address published by winbox, I get an error saying it can not connect

Try adding a firewall rule filter to accept connections in WAN2 With register in the log and have the next record

What can I do?

2

Connection to router shouldn’t, and doesn’t look, be influenced by your policy routing in mangle.
What is probably happening, is that you are sending request to WAN2 but router chooses WAN1 as gateway. In the routing table, put the gateway of the connection you need as default, with smaller distance.:

/ip route
add dst-address=0.0.0.0/0 gateway=200.13.157.129 distance=1 disabled=no
add dst-address=0.0.0.0/0 gateway=192.168.1.1 distance=5 disabled=no
3

Thanks a lot! You’re Right!
I forget check the routes
Gretings! :smiley: