Pcc load balancing no hotspotlogin page

I tried PCC load balancing in the wiki below and my users cannot get the hotspot login page. Any suggestion welcome

http://wiki.mikrotik.com/wiki/PCC



/ ip firewall mangle
add chain=input in-interface=ether1 action=mark-connection new-connection-mark=ether1_conn
chain=input in-interface=pppoe1 action=mark-connection new-connection-mark=pppoe1_conn

add chain=output connection-mark=ether1_conn action=mark-routing new-routing-mark=to_ether1

add chain=output connection-mark=pppoe1_conn action=mark-routing new-routing-mark=to_pppoe1

add chain=prerouting dst-address=63.245.67.1/24 action=accept in-interface=bridge1

add chain=prerouting dst-address=216.110.116.1/24 action=accept in-interface=bridge1

add chain=prerouting dst-address-type=!local in-interface=bridge1 per-connection-classifier=both-addresses:2/0 action=mark-connection new-connection-mark=ether1_conn passthrough=yes

add chain=prerouting dst-address-type=!local in-interface=bridge1 per-connection-classifier=both-addresses:2/1 action=mark-connection new-connection-mark=pppoe1_conn passthrough=yes

add chain=prerouting connection-mark=ether1_conn in-interface=bridge1 action=mark-routing new-routing-mark=to_ether1

add chain=prerouting connection-mark=pppoe1_conn in-interface=bridge1 action=mark-routing new-routing-mark=to_pppoe1

/ ip route
add dst-address=0.0.0.0/0 gateway=63.245.30.1 routing-mark=to_ether1 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=205.214.210.1 routing-mark=to_pppoe1 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=63.245.30.1 distance=1 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=205.214.210.1 distance=2 check-gateway=ping

/ ip firewall nat
add chain=srcnat out-interface=ether1 action=masquerade
add chain=srcnat out-interface=pppoe1 action=masquerade


Dave

I gave PCC load balancing a try again. this time my users are getting the login page no problem. Only issue is most of traffic is staying on ehter1.

ether1: cable isp setup with fix ip
ether2: pppoe1 (pppoe adsl) with fixed ip

/ip route
add check-gateway=ping comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=63.245.30.1 routing-mark=GW1 scope=30 target-scope=10
add comment="" disabled=no distance=10 dst-address=0.0.0.0/0 gateway=205.214.210.1 routing-mark=GW1 scope=30 target-scope=10
add check-gateway=ping comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=205.214.210.1 routing-mark=GW2 scope=30 target-scope=10
add comment="" disabled=no distance=10 dst-address=0.0.0.0/0 gateway=63.245.30.1 routing-mark=GW2 scope=30 target-scope=10

add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=63.245.30.1 scope=30 target-scope=10
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=205.214.210.1 scope=30 target-scope=10



/ip firewall export

mar/18/2011 12:24:08 by RouterOS 4.17

software id = 9PDF-DJW8




/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s tcp-close-wait-timeout=10s tcp-established-timeout=1d tcp-fin-wait-timeout=10s
tcp-last-ack-timeout=10s tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s tcp-syncookie=no tcp-time-wait-timeout=10s udp-stream-timeout=3m
udp-timeout=10s

/ip firewall filter
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" disabled=yes


/ip firewall mangle

add action=mark-connection chain=prerouting comment="CM for GW1" disabled=no in-interface=ether3 new-connection-mark=GW1 passthrough=yes
per-connection-classifier=both-addresses:2/0

add action=mark-connection chain=prerouting comment="CM for GW2" disabled=no in-interface=ether3 new-connection-mark=GW2 passthrough=yes
per-connection-classifier=both-addresses:2/1

add action=mark-connection chain=output comment="CM for GW1 - output" connection-mark=no-mark disabled=no new-connection-mark=GW1 passthrough=yes
per-connection-classifier=both-addresses:2/0

add action=mark-connection chain=output comment="CM for GW2 - output" connection-mark=no-mark disabled=no new-connection-mark=GW2 passthrough=yes
per-connection-classifier=both-addresses:2/1

add action=mark-connection chain=input comment="CM input GW1" connection-mark=no-mark disabled=no in-interface=ether1 new-connection-mark=GW1 passthrough=
yes

add action=mark-connection chain=input comment="CM input GW2" connection-mark=no-mark disabled=no in-interface=pppoe1 new-connection-mark=GW2 passthrough=
yes

add action=mark-routing chain=prerouting comment="RM for GW1" connection-mark=GW1 disabled=no in-interface=ether3 new-routing-mark=GW1 passthrough=yes

add action=mark-routing chain=prerouting comment="RM for GW2" connection-mark=GW2 disabled=no in-interface=ether3 new-routing-mark=GW2 passthrough=yes


/ip firewall nat
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" disabled=yes

add action=dst-nat chain=dstnat comment="" disabled=no dst-port=5900 in-interface=ether1 protocol=tcp to-addresses=10.0.0.245 to-ports=5900

add action=dst-nat chain=dstnat comment="" disabled=no dst-port=5900 in-interface=pppoe1 protocol=tcp to-addresses=10.0.0.245 to-ports=5900

add action=masquerade chain=srcnat comment="Masq for GW1" disabled=no out-interface=ether1

add action=masquerade chain=srcnat comment="Masq for GW2" disabled=no out-interface=pppoe1


/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061
set pptp disabled=no

Any suggestions welcome.

Dave