Need help with Static Route + PCC Load balancing

RouterOS Beginner Basics
1

Greetings!
I’m having some problems with Static route and load balancing. I could ping to the gateway of router A using router B and vice versa.
However, I could not access or ping to the clients from LAN A to LAN B and vice versa.
Here’s my network diagram. ISP A: 172.16.2.0/24; ISP B: 172.16.10.0/24

ROUTER A FIREWALL and routes

/ip firewall mangle
add action=accept chain=prerouting dst-address=172.16.2.0/24 in-interface=bridge1
add action=accept chain=prerouting dst-address=172.16.10.0/24 in-interface=bridge1
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=WAN1 new-connection-mark=WAN1_conn
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=WAN2 new-connection-mark=WAN2_conn
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local in-interface=bridge1 new-connection-mark=\
    WAN1_conn passthrough=yes per-connection-classifier=both-addresses:2/0
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local in-interface=bridge1 new-connection-mark=\
    WAN2_conn passthrough=yes per-connection-classifier=both-addresses:2/1
add action=mark-routing chain=prerouting connection-mark=WAN1_conn in-interface=bridge1 new-routing-mark=to_WAN1
add action=mark-routing chain=prerouting connection-mark=WAN2_conn in-interface=bridge1 new-routing-mark=to_WAN2
add action=mark-routing chain=output connection-mark=WAN1_conn new-routing-mark=to_WAN1
add action=mark-routing chain=output connection-mark=WAN2_conn new-routing-mark=to_WAN2

/ip route
add check-gateway=ping distance=1 gateway=172.16.2.1 routing-mark=to_WAN1
add check-gateway=ping distance=1 gateway=172.16.10.1 routing-mark=to_WAN2
add check-gateway=ping distance=1 gateway=172.16.2.1
add check-gateway=ping distance=2 gateway=172.16.10.1
add distance=1 dst-address=192.168.7.0/24 gateway=192.168.8.2

ROUTER B FIREWALL & routes

/ip firewall mangle
add action=accept chain=prerouting dst-address=172.16.2.0/24 in-interface=bridge1
add action=accept chain=prerouting dst-address=172.16.10.0/24 in-interface=bridge1
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=WAN1 new-connection-mark=WAN1_conn
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=WAN2 new-connection-mark=WAN2_conn
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local in-interface=bridge1 new-connection-mark=\
    WAN1_conn passthrough=yes per-connection-classifier=both-addresses:2/0
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local in-interface=bridge1 new-connection-mark=\
    WAN2_conn passthrough=yes per-connection-classifier=both-addresses:2/1
add action=mark-routing chain=prerouting connection-mark=WAN1_conn in-interface=bridge1 new-routing-mark=to_WAN1
add action=mark-routing chain=prerouting connection-mark=WAN2_conn in-interface=bridge1 new-routing-mark=to_WAN2
add action=mark-routing chain=output connection-mark=WAN1_conn new-routing-mark=to_WAN1
add action=mark-routing chain=output connection-mark=WAN2_conn new-routing-mark=to_WAN2

/ip route
add check-gateway=ping distance=1 gateway=172.16.2.1 routing-mark=to_WAN1
add check-gateway=ping distance=1 gateway=172.16.10.1 routing-mark=to_WAN2
add check-gateway=ping distance=1 gateway=172.16.2.1
add check-gateway=ping distance=2 gateway=172.16.10.1
add distance=1 dst-address=10.0.0.0/24 gateway=192.168.8.1

Please help. Thanks.

2

Add accept rules for the LAN subnets of each router…
For example, on router A in the mangles add on top an accept rule when dst address is the network 192.168.7.0/24…
Do the same in router B for the network 10.0.0.0/24 …
We do that because in directly connected networks we want the use of the Main routing Table…

3

I added on top of mangle rules. However, I still cannot ping to clients of the other routers.

4

Did you clear the connections table or rebooted before you try?
Maybe there is a mistake somewhere else…
Can i see the last rules you added in the mangles ?

5

I did reboot it.
router A:

/ip firewall mangle
add action=accept chain=prerouting dst-address=192.168.7.0/24 in-interface=bridge1
add action=accept chain=prerouting dst-address=172.16.2.0/24 in-interface=bridge1
add action=accept chain=prerouting dst-address=172.16.10.0/24 in-interface=bridge1
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=WAN1 new-connection-mark=WAN1_conn
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=WAN2 new-connection-mark=WAN2_conn
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local in-interface=bridge1 new-connection-mark=\
    WAN1_conn passthrough=yes per-connection-classifier=both-addresses:2/0
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local in-interface=bridge1 new-connection-mark=\
    WAN2_conn passthrough=yes per-connection-classifier=both-addresses:2/1
add action=mark-routing chain=prerouting connection-mark=WAN1_conn in-interface=bridge1 new-routing-mark=to_WAN1
add action=mark-routing chain=prerouting connection-mark=WAN2_conn in-interface=bridge1 new-routing-mark=to_WAN2
add action=mark-routing chain=output connection-mark=WAN1_conn new-routing-mark=to_WAN1
add action=mark-routing chain=output connection-mark=WAN2_conn new-routing-mark=to_WAN2

router B:

/ip firewall mangle
add action=accept chain=prerouting dst-address=10.0.0.0/24 in-interface=bridge1
add action=accept chain=prerouting dst-address=172.16.2.0/24 in-interface=bridge1
add action=accept chain=prerouting dst-address=172.16.10.0/24 in-interface=bridge1
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=WAN1 new-connection-mark=WAN1_conn
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=WAN2 new-connection-mark=WAN2_conn
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local in-interface=bridge1 new-connection-mark=\
    WAN1_conn passthrough=yes per-connection-classifier=both-addresses:2/0
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local in-interface=bridge1 new-connection-mark=\
    WAN2_conn passthrough=yes per-connection-classifier=both-addresses:2/1
add action=mark-routing chain=prerouting connection-mark=WAN1_conn in-interface=bridge1 new-routing-mark=to_WAN1
add action=mark-routing chain=prerouting connection-mark=WAN2_conn in-interface=bridge1 new-routing-mark=to_WAN2
add action=mark-routing chain=output connection-mark=WAN1_conn new-routing-mark=to_WAN1
add action=mark-routing chain=output connection-mark=WAN2_conn new-routing-mark=to_WAN2