Hey everyone,
Just to start, I am CCNP however this is my first time using mikrotik so unfamiliarity is over 9000.
Right, so, I’m busy setting up a site, the site has a single 100Mbps fiber line. The site uses two different ISPs, each connection established via PPPoE.
The first connection, call it WA-PPPoE, is capped at 300GB.
The second connection, call it AX-PPPoE, is uncapped but only 1Mbps.
There is only 1 ethernet connection, RouterOS is running inside a VM with a single network adapter assigned. It’s IP is 192.168.0.251
The 300GB connection, WA-PPPoE, is the primary link. The site Almost reaches the cap come month end, but generally speaking they manage it well. However should the time ever come that they do reach their 300GB cap too soon (or there’s a general failure), they need to fall over to the 1Mbps PPPoE connection, AX-PPPoE.
The 1Mbps uncapped connection, AX-PPPoE, isn’t just there for failover though. It is used for remote access via SSH and RDP as the most commonly used protocols. The linux server listens for SSH connections on port 8841.
Both of the WAN links, WA-PPPoE and AX-PPPoE, have their public IPs dynamically assigned by the ISP. There is no option for static address reservation from said ISPs.
\
Router Local LAN:
ether1 192.168.0.251/24
WAN:
AX-PPPoE: Dynamic IP
WA-PPPoE: Dynamic IP
Server:
Linux Server1 – IP: 192.168.0.100 – SSH Port 8841
Windows Server1 – IP: 192.168.0.110 – RDP Port 3389
So, I’ve set the router up… mostly… the CLI is pretty stright forward for the basics. Both PPPoE connections have been created and have successfully established connections with their respective ISPs. I’ve tested them on their own with NAT rules to confirm throughput. I can NAT a single interface and forward the ports easily enough… but then I’m left with one PPPoE interface “un-natted”.
What I’m having issues with is creating the routing rules and marking the relevant traffic for the relevant interfaces. Such that if I SSH to;
for example
Connect via AX-PPPoE – 196.175.35.2:8841 (assume that this is my dynamic IP) – forwarded to 192.168.0.100;
Then the traffic needs to me marked for that interface such that any incomming or outgoing packets will use AX-PPPoE…
However, the exact same example needs to work if instead the WA-PPPoE WAN link is used, say perhaps AX-PPPoE is down due to ISP issues.
I don’t want the interfaces to load balance. If I understand this all properly then the distance of the WA-PPPoE connection should be 1 whilst AX-PPPoE should be 2.