Hi,
I have some problems with Multi-WAN on a mikrotik.
Currently running 6.13, in the process of changing it to 6.15
Running 2 PPPOE wan connections.
I basically used this as a template for configuration:
http://aacable.wordpress.com/2011/06/04/mikrotik-4-wan-load-balance-pcc-complete-script-by-zaib/
I left this part out as i didn’t need to route between my wan’s
add chain=prerouting dst-address=192.168.1.0/24 action=accept in-interface=Local
add chain=prerouting dst-address=192.168.2.0/24 action=accept in-interface=Local
I have some port forwarding and I also force port 25 traffic out over a single connection.
This all works fine for several days. If I browse to wimi.com I get 2 different IP’s from time to time, even doing speedtest.net I get the full bandwidth as it must make several connections to the speedtest server.
After a couple of days, i get users complaining about slow internet, and i can clearly see everytime this happens the one connection, receives 0 packets. It is the same connection each time (Connection 1) it is still transmitting packets but 0 is being received according to the traffic tab.
If i then say telnet to the router on Connection1, WAN IP, i can see some traffic being received, so the connection is still up, all port forwards etc to it is still working, but no outgoing traffic is getting replies, if they go out via this connection.
To fix it i just disable and re-enable the PPPOE and it will work again for a couple of days.
firewall rules here:
add action=drop chain=input dst-port=53 in-interface=all-ppp protocol=udp
/ip firewall mangle
add action=mark-connection chain=input in-interface=Exetel-PPP new-connection-mark=PPPoE1_Conn
add action=mark-connection chain=input in-interface=Telstra-PPP new-connection-mark=PPPoE2_Conn
add action=mark-routing chain=output connection-mark=PPPoE1_Conn new-routing-mark=to_PPPoE1
add action=mark-routing chain=output connection-mark=PPPoE2_Conn new-routing-mark=to_PPPoE2
add action=mark-connection chain=prerouting dst-port=25 in-interface=ether3 new-connection-mark=PPPoE2_Conn passthrough=no protocol=tcp
add action=mark-routing chain=prerouting connection-mark=PPPoE2_Conn dst-port=25 new-routing-mark=to_PPPoE2 passthrough=no protocol=tcp
add action=mark-connection chain=prerouting dst-address-type=!local in-interface=ether3 new-connection-mark=PPPoE1_Conn per-connection-classifier=both-addresses-and-ports:2/0
add action=mark-connection chain=prerouting dst-address-type=!local in-interface=ether3 new-connection-mark=PPPoE2_Conn per-connection-classifier=both-addresses-and-ports:2/1
add action=mark-routing chain=prerouting connection-mark=PPPoE1_Conn in-interface=ether3 new-routing-mark=to_PPPoE1
add action=mark-routing chain=prerouting connection-mark=PPPoE2_Conn in-interface=ether3 new-routing-mark=to_PPPoE2
/ip firewall nat
add action=masquerade chain=srcnat out-interface=Exetel-PPP
add action=masquerade chain=srcnat out-interface=Telstra-PPP
add action=dst-nat chain=dstnat dst-port=3391 in-interface=all-ppp protocol=tcp to-addresses=10.10.10.201 to-ports=3391
add action=dst-nat chain=dstnat dst-port=3390 in-interface=all-ppp protocol=tcp to-addresses=10.10.10.200 to-ports=3389
add action=dst-nat chain=dstnat dst-port=3389 in-interface=all-ppp protocol=tcp to-addresses=10.10.10.202 to-ports=3389
routes:
/ip route
add check-gateway=ping distance=1 gateway=Exetel-PPP routing-mark=to_PPPoE1
add check-gateway=ping distance=1 gateway=Telstra-PPP routing-mark=to_PPPoE2
add check-gateway=ping distance=1 gateway=Telstra-PPP
add check-gateway=ping distance=2 gateway=Exetel-PPP
I did notice in the log that the connection that is having this problem seems to be suffering from some dropouts from time to time, however because I can still come in via this connection via Telnet for instance, i don’t know that, that is the cause. I am in the process of getting that fixed though.
Any help appreciated.