I’m implementing simple PCC from this manual - https://wiki.mikrotik.com/wiki/Manual:PCC
2 ISPs, and a script that should ping outside dns ( 8.8.8.8 ) for the sake of checking if ISP is working fine or have some troubles (lost packets > 50%)
The problem is for some reason I can do this
/ping 8.8.8.8 interface=“ether2-gateway” count=3
but can not do this
/ping 8.8.8.8 interface=“ether1-gateway” count=3
it always timeout although ISP is working fine
Checked that ISP is not blocking pings (it works without Mikrotik)
Checked “Connections” from Firewall window that connection is marked properly (had to add additional mangle rule just for icmp protocol)
Here is my Route table
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 A S ;;; wlan1-1
0.0.0.0/0 10.0.1.10 10.0.1.1 1
1 X S ;;; wlan2-1
0.0.0.0/0 10.0.0.1 1
2 A S ;;; wlan2-2
0.0.0.0/0 10.0.0.10 10.0.0.1 1
3 X S ;;; wlan1-2
0.0.0.0/0 10.0.1.1 1
4 A S 0.0.0.0/0 10.0.0.10 10.0.0.1 1
5 ADC 10.0.0.0/24 10.0.0.10 ether2-gateway 0
6 ADC 10.0.1.0/24 10.0.1.10 ether1-gateway 0
7 ADC 192.168.1.0/24 192.168.1.254 ether3-local 0
and mangle rules:
1 ;;; Mark new connection to answer from the same Gateway
chain=forward action=mark-connection new-connection-mark=wlan1 passthrough=yes connection-state=new in-interface=ether1-gateway log=no log-prefix=""
2 chain=output action=mark-routing new-routing-mark=wlan1 passthrough=no connection-mark=wlan1 log=no log-prefix=""
3 ;;; Mark new connection to answer from the same Gateway
chain=forward action=mark-connection new-connection-mark=wlan2 passthrough=yes connection-state=new connection-mark=no-mark in-interface=ether2-gateway log=no log-prefix=""
4 chain=output action=mark-routing new-routing-mark=wlan2 passthrough=no connection-mark=wlan2 log=no log-prefix=""
5 ;;; Mark randomly as wlan1
chain=prerouting action=mark-connection new-connection-mark=wlan1 passthrough=yes connection-state=new connection-mark=no-mark in-interface=ether3-local nth=2,1 log=no log-prefix=""
6 chain=prerouting action=mark-routing new-routing-mark=wlan1 passthrough=no connection-mark=wlan1 in-interface=ether3-local log=no log-prefix=""
7 ;;; Mark randomly as wlan2
chain=prerouting action=mark-connection new-connection-mark=wlan2 passthrough=yes connection-state=new connection-mark=no-mark in-interface=ether3-local nth=2,2 log=no log-prefix=""
8 chain=prerouting action=mark-routing new-routing-mark=wlan2 passthrough=no connection-mark=wlan2 in-interface=ether3-local log=no log-prefix=""
//for queues support
9 chain=forward action=mark-packet new-packet-mark=server passthrough=yes src-address=192.168.1.1 in-interface=ether3-local log=no log-prefix=""
10 chain=forward action=mark-packet new-packet-mark=server passthrough=yes src-address=192.168.1.14 in-interface=ether3-local log=no log-prefix=""
11 chain=forward action=mark-packet new-packet-mark=server passthrough=yes src-address=192.168.1.17 in-interface=ether3-local log=no log-prefix=""
12 chain=forward action=mark-packet new-packet-mark=server passthrough=yes src-address=192.168.1.4 in-interface=ether3-local log=no log-prefix=""
13 chain=forward action=mark-packet new-packet-mark=server passthrough=yes src-address=192.168.1.3 in-interface=ether3-local log=no log-prefix=""
Any ideas?