KNOT LTE as failover

Hi,

My ASUS router has a failover option to assign a port as a backup WAN connection. I thought the KNOT LTE4 might be the right device for this job. Initially, it would connect via the Winbox software and I gave it a fixed IP and then switched the Asus to dual WAN with failover to the LAN 1 port connecting to the KNOT box.

Nothing works at this point and the Asus considers the WAN cable to be disconnected.

Resetting back to LAN, the physical connection came back, but the Winbox connection repeatedly disconnects until it is in a permanent "MACconnection SYN timeout" state and needs a power recycle.

It also crashes when I try to reset it's clock.

Is this to be expected and the KNOT is simply NOT the correct device for this job? (Excuse the pun).

Thanks

As I see It, the KNOT Is not the best choice, but that doesn't mean that It should not work.
The KNOT has only one ethernet port and no wifi, so a mis-configuration, any mis-configuration, becomes difficult to troubleshoot.
Do you have another Mikrotik device with more than one ethernet port or with an ethernet port and wifi to use as a temporary substitute for the KNOT to understand what the ASUS does (or expects)?

BTW which exact model Is the ASUS?

Then, post your current configuration of the KNOT, instructions here:

It could also be something "wrong" in the configuration that the the more expert members can easily spot.

Agree with @jaclaz. I'd start by making sure internet works on port before plugging into RouterOS. If that works, then you should be able to plug in as your backup WAN on the ASUS. You'd end up with a double-NAT, which is may not be as terrible as it sounds since the upstream is a likely CGNAT. I'd make sure everything is upgraded to stable, including fireware and LTE firmware. And also I'd recommend so a /system/reset-configuration keep-users=yes after doing the upgrade so you get the latest default configuration.

Now downside here are:

  1. It's LTE4, so internet will work but never be "fast". As backup, maybe okay. Just be aware. In a lot markets most modems can do way better than LTE4.
  2. If you have services, or open ports to internet... None of that is going to work. So the internet back provides the ASUS works for most browsering/mail/streaming... but if your terminating a VPN on the ASUS. That not going to work. Now, fixing this may require have a different SIM card that offer a public IP, which typically a business-account things at much higher monthly cost. This be true on other models beyond KNOT LTE4 since it CGNAT is very often the default for a SIM card.

Thanks for the response. There are only two main issues here.

  1. The KNOT did not provide any sort of consistent connection to the router. It's irrelevant if the base layer is not solid. I was hoping others may had had the same experience.

  2. My usage is for security when I'm not at home. It would tell me the network is (potentially) compromised so I could check on cameras or reboot the main router. Speed is not an issue, nor is browsing/mail/streaming/vpn - I would have only accessed my network externally, which I do regularly when I'm away since I don't rely on third-party wi-fi.

The KNOT was chosen because it seemed to have just enough physical attributes to do the one emergency task (4G/ethernet/e-sim). It would have meant I could move to one of the Chateau routers later but I'm now less confident about my choice.

Yep, but as said while not being the ideal choice (the LTE4 is slowish and more suitable to IOT than "real" connection) there are no reasons why it shouldn't (maybe a little slowly) work in your setup.
BUT a Mikrotik device is - bar a few simple cases - almost, but not quite, completely unlike plug-n-play.
There are between 1 and 42 :wink: different settings in the configuration that may be "wrong" on your device and that could prevent it from working as expected, and the KNOT having only one connection makes it more complex troubleshooting it.
You could still use a (dumb) switch interposed between the WAN of the ASUS and the KNOT to get access to it and troubleshoot it.

Thanks for confirming the myriad technical issues I may have encountered. I will endeavor to avoid these products henceforth. No more responses necessary.