Mirkotik - Route State FLAG filtered?

good morning

Does anyone know what the FS flag means in the routing table?

This flag does not appear in the mikrotik Wiki

Appears in the new 7.X versions

I add capture

Thanks you
image (2).png
image (3).png

I remember seeing that on the forum but cannot remember enough context to find it back.
Show us your config export (at least of the parts concerning routing)…

good morning

We have different routes but in version 7.2.1 it is the only one in which it happens to us with the FS flag that we don’t know what it means.

We have several routes that provide internet, only one must be the main one.


The problem is that the routes that go to the internet are disabled with the FS flag, we don’t know why.

Our OVPN works through the main route, the problem is that by putting it in the FS FLAG, the mikrotik disables them.
Area “internet1,Internet2,Internet3”

add distance=1 dst-address=172.16.0.0/16 gateway=Hotspot1 pref-src=172.16.0.1 \
    routing-table=Internet1 scope=10
add distance=1 dst-address=192.168.32.0/23 gateway=Hotspot1 pref-src=\
    192.168.33.1 routing-table=Internet1 scope=10
add distance=1 dst-address=172.16.0.0/16 gateway=Hotspot1 pref-src=172.16.0.1 \
    routing-table=Internet2 scope=10
add distance=1 dst-address=192.168.32.0/23 gateway=Hotspot1 pref-src=\
    192.168.33.1 routing-table=Internet2 scope=10
add distance=1 dst-address=172.16.0.0/16 gateway=Hotspot1 pref-src=172.16.0.1 \
    routing-table=Internet3 scope=10
add distance=1 dst-address=192.168.32.0/23 gateway=Hotspot1 pref-src=\
    192.168.33.1 routing-table=Internet3 scope=10
add comment=Internet1 distance=1 gateway=62.214.10.249%Internet1 pref-src=\
    62.214.10.250 routing-table=Internet1
add comment="Internet1 - main" disabled=no distance=1 dst-address=0.0.0.0/0 \
    gateway=62.214.10.249%Internet1 pref-src=62.214.10.250 routing-table=main \
    scope=30 suppress-hw-offload=no target-scope=10
add comment=Internet2 distance=1 gateway=192.168.178.1%Internet2 pref-src=\
    192.168.178.21 routing-table=Internet2
add comment="Internet2 - main" disabled=no distance=2 dst-address=0.0.0.0/0 \
    gateway=192.168.178.1%Internet2 pref-src=192.168.178.21 routing-table=main \
    scope=30 suppress-hw-offload=no target-scope=10
add comment=Internet3 distance=1 gateway=192.168.178.1%Internet3 pref-src=\
    192.168.178.20 routing-table=Internet3
add comment="Internet3 - main" disabled=no distance=3 dst-address=0.0.0.0/0 \
    gateway=192.168.178.1%Internet3 pref-src=192.168.178.20 routing-table=main \
    scope=30 suppress-hw-offload=no target-scope=10
add distance=1 dst-address=192.168.50.0/24 gateway=Lan1 pref-src=192.168.50.1 \
    routing-table=Internet1 scope=10
add distance=1 dst-address=192.168.150.0/24 gateway=Lan2 pref-src=192.168.150.1 \
    routing-table=Internet1 scope=10
add distance=1 dst-address=192.168.200.0/24 gateway=Lan4 pref-src=192.168.200.1 \
    routing-table=Internet1 scope=10

Try to enable Target Scope also

Yes, in v7 you need target-scope which must be smaller than (not smaller than or equal) scope.
So usually you see scope=20 or scope=30 and target-scope=10.

“F” - filtered, means what the name suggests, routes filtered (rejected) by routing filters.

The concept has not been clear: how should internet routes go?

I add capture of each one and its scope with its target scope.
What is the order ? All 3 have scope=30 and target Scope=10



Normally, yes. But as you can see in the screenshot, these routes are not obtained by autorouting and thus not passing filters.
Apparently “not matching the scope rules” is considered an implicit filter as well, even though it isn’t a routing filter.

Maybe this not the topic to explain the utterly confusing concept of scopes. Most of us do not understand it!
When you want different priorities for default routes, use distance, not scope.