Hello guys! So i added second ISP to my Mikrotik on ROSv7.12.1 (MT1). I did it with mangle rules, marking traffic with 2 connections mark and 2 routing marks. Also implemented PCC load balancing. As failover system i choosed recursive routes to public DNS servers. All is working just fine except my existing GRE tunnels with IPSec VPN.
When i implemented second GRE to my Juniper SRX and another Mikroik (MT2) i cannot ping them through main bridge. But they’re reachable through GRE interfaces.
I am thinking, that the problem is that all my LAN and VLANs are bridged with one IP loopback. For GRE with Juniper i use local IPs, but for GRE with MT2 i use global IPs. Also i think there’s may be mistakes with my OSPF configureation for second ISP GRE tunnels.
Any advices please how to get pings from my MT1 to Juniper or MT2 not only via GRE source interfaces? Coz i think current configuration causing problems with my company remote LAN servers when ISP1 is down.
Okay, so i found the main reason - my OSPF doesnt build routes when i’m on my ISP2. Any help please? I’ve tried a lot of guides with putting different loopbacks or different loppback IPs, but still no luck. Here’s my config if someone interested:
/routing ospf instance
add disabled=no in-filter-chain=ospf-in name=ospf-instance-v2 out-filter-chain=ospf-out redistribute=connected,ospf router-id=10.59.255.1
/routing ospf area
add disabled=no instance=ospf-instance-v2 name=backbone-v2
add area-id=10.59.0.0 disabled=no instance=ospf-instance-v2 name=area59-v2 type=stub
/routing ospf area range
add area=area59-v2 cost=0 disabled=no prefix=10.59.206.0/24
add area=area59-v2 cost=0 disabled=no prefix=10.59.208.0/24
add area=area59-v2 cost=0 disabled=no prefix=10.59.209.0/24
add area=area59-v2 cost=0 disabled=no prefix=10.59.212.0/23
add area=area59-v2 cost=0 disabled=no prefix=10.59.255.0/28
/routing ospf interface-template
add area=backbone-v2 comment="to MOW" disabled=no interfaces=to-MOW-main networks=10.254.0.0/30 priority=1 type=ptp
add area=backbone-v2 comment="to MOW" disabled=no interfaces=to-MOW-reserve networks=10.254.0.44/30 priority=1 type=ptp
add area=backbone-v2 comment="to YaC" cost=2 disabled=no interfaces=to-YaC-main networks=10.254.0.4/30 priority=130 type=ptp
add area=backbone-v2 comment="to SPE" cost=5 disabled=no interfaces=to-SPE-main networks=10.254.0.32/30 type=ptp
add area=backbone-v2 comment="to MOW2" cost=2 disabled=yes interfaces=to-MOW2-main networks=10.254.0.36/30 type=ptp
/interface gre
add comment="tunnel to ecmowpnr001" !keepalive local-address=10.59.255.1 mtu=1400 name=to-MOW-main remote-address=10.77.255.1
add comment="tunnel reserv to ecmowpnr001" !keepalive local-address=10.59.255.2 mtu=1400 name=to-MOW-reserve remote-address=10.77.255.1
/interface bridge
add name=br-lo0
add name=br-lo1
add name=loopback vlan-filtering=yes
/interface bridge port
add bridge=loopback comment=defconf ingress-filtering=no interface=ether3
add bridge=loopback comment=defconf ingress-filtering=no interface=ether4
add bridge=loopback comment=defconf ingress-filtering=no interface=ether5
/interface bridge vlan
add bridge=loopback tagged=ether5,loopback vlan-ids=100
add bridge=loopback tagged=ether5,loopback vlan-ids=400
add bridge=loopback tagged=loopback,ether5 vlan-ids=200
add bridge=loopback tagged=loopback,ether5 vlan-ids=300
/ip address
add address=10.254.0.2/30 interface=to-MOW-main network=10.254.0.0
add address=10.59.255.1 interface=br-lo0 network=10.59.255.0
add address=10.59.206.1/24 interface=vlan100 network=10.59.206.0
add address=10.59.208.1/24 interface=vlan300 network=10.59.208.0
add address=10.59.212.1/23 interface=vlan200 network=10.59.212.0
add address=10.254.0.6/30 interface=to-YaC-main network=10.254.0.4
add address=10.59.209.1/24 interface=vlan400 network=10.59.209.0
add address=10.254.0.34/30 interface=to-SPE-main network=10.254.0.32
add address=10.254.0.38/30 disabled=yes interface=to-MOW2-main network=10.254.0.36
add address=10.59.255.2 interface=br-lo1 network=10.59.255.0
add address=10.254.0.46/30 interface=to-MOW-reserve network=10.254.0.44
add address=10.59.255.3 interface=loopback network=10.59.255.3
Bump. Anyone?
So i thought maybe the problem was in MTU size, but nah, i made same mtu on my GRE tunnels on both Mikrotiks and doens’t seem to work.
Found that one mikrotik is seeing other as neighbour, but state is stuck on init. In logs i have
default-v2 { version: 2 router-id: 10.78.255.17 } backbone-v2 { 0.0.0.0 } interface { p2p 10.254.0.49%to-PER-reserve } neighbor { router-id: 10.59.255.1 state: Down } state change to Init
On the second mikrotik (with two ISP) its just nothing in logs when i use second provider.
Maybe it’s coz my 2nd ISP is pppoe and i’m using gateway pppoe-out in routes instead of acrual IP? But i’ve already tried trick with putting 127.0.1.1 in remote address in pppoe profile. Doesn’t work either.
Isn’t your OSPF traffic filtered on one of the routers? For example second GRE interface is not added to allowed interface list that you’re using in your firewall input filter chain to allow local traffic/OSPF.