Hello, I`m trying to implement high availability using 2 mikrotik routers. I have 2 separate data centres with servers and routers in them.
Each router have 2 interfaces, each server have 2 interfaces either, router is directly connected to server on 1st port, and on a second to data centre switch. Second interface of the server is also connected to DC switch. On the routers DC interface is configured vlan in the 10.10.0.0/24 network and vlan + server interface are bridged into this lan (10.10.0.0/24). Through the DC switches and vlan router are connected to each other, so we have 2 routers and 2 servers connected to a single lan 10.10.0.0:
Server 1 (10.10.0.1) <–(LAN brigde)–> Router 1 (10.10.0.251) <–(LAN brigde + vlan)> Router 2 (10.10.0.252) <–(LAN brigde)–>Server 2 (10.10.0.252)
Both server and router have separate connection with a public ip address. Routers also configured (using VRRP protocol) to share one public ip address. The main goal of this configuration is to have High Availability configuration: We have 1 public ip address(VRRP); there are configured port forwarding on each router (to forward service ports such as http to the server of a specific DC) and heart beat scripts (in order if 1 server down, forward ports to another server); If one of the DC’s is down, we have VRRP which “translates” connections to second DC.
But I have a problem with port forwarding… For example Router 1 have a public ip of a.a.a.1, Router 2 have ip address a.a.a.2, VRRP addess is a.a.a.3; On Router 1 I’m configuring Port forwarding:
ip firewall nat add chain=dstnat action=dstnat src-address=a.a.a.3 to-addresses=10.10.0.1 to-ports=80 protocol=tcp dst-port=80
On Router 2:
ip firewall nat add chain=dstnat action=dstnat src-address=a.a.a.3 to-addresses=10.10.0.2 to-ports=80 protocol=tcp dst-port=80
And nothing happens, there is no forwarding is done, tcp dump on servers gets nothing at all.. How could I “debug” this problem? Because packet sniffer gets requests on router, but nothing is translated..
Routers service port (web) is off.