Hi All! Long time follower and I learn a lot from you all, first time post. I have a project right now for building out the ultimate mobile command vehicle while I travel and work across the United States. Intention of the project is to maximize connectivity from the RV for both Wifi networks(if available) and 4G LTE when wifi is not available. I have chosen the following hardware:
CRS125-24g-15-2HnD-IN (as it was already running my home network)
MikroTik RBGrooveA-52HPn (External mount, omni antenna for better reception)
Netgear LB2120 LTE modem (with external antennas for optimal 4g performance)
My network topology is looking like this:
https://drive.google.com/file/d/1uH9YonrZvTGl2ij-XZ3fd7WJ6pwLLoHf/view?usp=sharing
What I am having trouble with is figuring out how to get the script to work during simulated failover. Firstly, because the Groove is the wireless client to any wifi networks I can grab, I will need a way to detect failover condition by pinging further than Groove (e.g. 8.8.8.
If I disconnect WAN1 (connection to Groove), traffic does NOT seem to be flowing over to the LTE route. I think I got everything in here cobbling together what I’ve learned from you all, but can I get some assist as to why it is not failing over?
[admin@RzRTik] > /export
# may/03/2020 10:07:32 by RouterOS 6.36.3
# software id = KKH5-GAW1
#
/interface bridge
add name=bridge1
/interface ethernet
set [ find default-name=ether1 ] comment=WAN
set [ find default-name=ether2 ] comment=\
"LAN - All ports are switched off ether2"
set [ find default-name=ether3 ] master-port=ether2
set [ find default-name=ether4 ] master-port=ether2
set [ find default-name=ether5 ] master-port=ether2
set [ find default-name=ether6 ] master-port=ether2
set [ find default-name=ether7 ] master-port=ether2
set [ find default-name=ether8 ] master-port=ether2
set [ find default-name=ether9 ] master-port=ether2
set [ find default-name=ether10 ] master-port=ether2
set [ find default-name=ether11 ] master-port=ether2
set [ find default-name=ether12 ] master-port=ether2
set [ find default-name=ether13 ] master-port=ether2
set [ find default-name=ether14 ] master-port=ether2
set [ find default-name=ether15 ] master-port=ether2
set [ find default-name=ether16 ] master-port=ether2
set [ find default-name=ether17 ] master-port=ether2
set [ find default-name=ether18 ] master-port=ether2
set [ find default-name=ether19 ] master-port=ether2
set [ find default-name=ether20 ] master-port=ether2
set [ find default-name=ether21 ] master-port=ether2
set [ find default-name=ether22 ] master-port=ether2
set [ find default-name=ether23 ] master-port=ether2
set [ find default-name=ether24 ] comment=LTE
/ip neighbor discovery
set ether1 comment=WAN
set ether2 comment="LAN - All ports are switched off ether2"
set ether24 comment=LTE
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa-psk,wpa2-psk eap-methods="" management-protection=\
allowed mode=dynamic-keys name=WPA2 supplicant-identity="" \
wpa-pre-shared-key=**** wpa2-pre-shared-key=****
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n dfs-mode=no-radar-detect \
disabled=no frequency=auto mode=ap-bridge security-profile=WPA2 ssid=\
Nebuchadnezzar wireless-protocol=802.11
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=aes-128-cbc
/ip pool
add name=dhcp ranges=192.168.101.150-192.168.101.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge1 lease-time=3d name=dhcp1
/interface bridge port
add bridge=bridge1 interface=wlan1
add bridge=bridge1 interface=ether2
/ip address
add address=192.168.101.1/24 comment="LAN IP subnet" interface=ether2 network=\
192.168.101.0
add address=10.0.0.2/30 comment="Static IP of RzRTik" interface=ether1 network=\
10.0.0.0
add address=10.2.0.2/30 comment="Static IP of ether24 - LTE failover route" \
interface=ether24 network=10.2.0.0
/ip dhcp-client
add default-route-distance=0 dhcp-options=hostname,clientid disabled=no \
interface=ether1
/ip dhcp-server lease
add address=192.168.101.227 always-broadcast=yes comment="Rachio Iro" \
mac-address=0C:2A:69:08:26:FA server=dhcp1
add address=192.168.101.130 always-broadcast=yes comment=Rzrserver mac-address=\
54:04:A6:DD:33:B0 server=dhcp1
add address=192.168.101.125 client-id=1:40:16:7e:ad:27:d0 comment=RzRStation \
mac-address=40:16:7E:AD:27:D0 server=dhcp1
/ip dhcp-server network
add address=192.168.101.0/24 dns-server=192.168.101.1,8.8.8.8,8.8.8.4 gateway=\
192.168.101.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip firewall address-list
add address=192.168.101.0/24 list=OurLocalLAN
/ip firewall filter
add action=accept chain=forward comment="Allow Plex connections" dst-port=32400 \
protocol=tcp
add action=accept chain=input comment=\
"Allow access to Router from LAN using Address list ourLocalLAN" \
src-address-list=OurLocalLAN
add action=accept chain=forward comment="Allow connections from LAN" \
connection-state=new in-interface=bridge1
add action=accept chain=forward comment="Allow established from LAN" \
connection-state=established
add action=accept chain=forward comment="Allow related connections" \
connection-state=related
add action=accept chain=input comment="Allow established connections to router" \
connection-state=established
add action=accept chain=input comment="Allow related connections to router" \
connection-state=related
add action=drop chain=forward comment="Drop invalid connections" \
connection-state=invalid
add action=drop chain=forward comment="Drop all other connections"
add action=drop chain=input comment="Drop all other traffic to router"
/ip firewall nat
add action=dst-nat chain=dstnat comment=Plex dst-port=32400 in-interface=ether1 \
protocol=tcp to-addresses=192.168.101.130
add action=dst-nat chain=dstnat comment=Plex dst-port=32400 in-interface=ether1 \
protocol=udp to-addresses=192.168.101.130
add action=masquerade chain=srcnat comment="Hide all else, outbound" \
out-interface=ether1
add action=masquerade chain=srcnat src-address=192.168.101.0/24
/ip route
add check-gateway=ping comment=main distance=1 gateway=10.0.0.1
add distance=1 gateway=ether1
add check-gateway=ping comment=backup distance=2 gateway=10.2.0.1
/ip upnp
set allow-disable-external-interface=yes enabled=yes
/ip upnp interfaces
add interface=bridge1 type=internal
add interface=ether1 type=external
/system script
add name=Failover1 owner=admin policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive source=": If ([/ \
ip route get [/ ip route find comment = \93main\94] disabled] = yes) do = {/\
\_ip route enable \r\
\n[/ ip route find comment = \93main\94]} else = {/ ip route disable [/ Ip r\
oute find comment = \93main\94]}"
add name="Failover Revert" owner=admin policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive source=": If ([/ \
ip route get [/ ip route find comment = \93main\94] disabled] = yes) do = {/\
\_ip route enable \r\
\n[/ ip route find comment = \93main\94]}"
/tool netwatch
add down-script=Failover1 host=8.8.8.8 interval=3s
add host=8.8.8.8 interval=3s up-script="Failover Revert"
/tool romon port
add
[admin@RzRTik] > /export