Thanks for your help.
I have three mikrotik routers rb850gx2, rb450gx3 and rb1100ahx4. I have two broadband connections on pppoe and the lines are handled by rb450gx3 and rb850gx2. Both also have an l2tp vpn connection. The rb1100ahx4 sits behind these two and does transparent bridging firewall and load balancing (in bridge mode).
The interfaces on these three have two ip addresses. rb850 is on 192.168.0.3 and 10.1.1.3. rb450 on 192.168.0.2 and 10.1.1.2, rb1100ahx4 on 192.168.0.1 and 10.1.1.1.
I want a particular address group to access internet via the vpn connections (again loadbalanced by rb1100ahx4). The home net is on 192.168.0.0/23 and the 10.1.1.0/24 is exclusively for these three routers.
I have created mangle rules that the vpn group (host addresses in 192.168.0.0/23) should use 10.1.1.2 or 10.1.1.3 as gateways (load balanced)
How do I configure a rule on the outer routers so that any packet arriving on 10.1.1.2 is sent through l2tp out and not pppoe-out?
Many thanks
If I understand it correctly, you want to be able to tell whether 192.168.0.3 or 10.1.1.3 was used as gateway. But they are both on same interface and ARP resolves to same MAC address. Correct? If that’s so, you need another MAC address, which can be done with VRRP:
http://forum.mikrotik.com/t/switching-wans-by-host-gateway-selection/122906/1