Pre routing and multi wan and ipsec

RouterOS General
1

Hi,

I’m trying to route a specific subnet out a particular interface, however when i do it routes everything and forgets about the other routes to a subnet via an ip tunnel.

Local subnet = 10.4.8.0
Remote subnets = 10.4.0.0/21
WAN = ppp2

I mark the packets with the following

add action=mark-routing chain=prerouting comment="Mark prerouting - PPP2" \
    disabled=no new-routing-mark=Route-PPP2 passthrough=yes src-address=\
    10.4.8.0/24

Then i add a default route for them:

add check-gateway=ping comment="Route marked packets out PPP2" disabled=yes \
    distance=1 dst-address=0.0.0.0/0 gateway=PPP2 routing-mark=\
    Route-PPP2 scope=30 target-scope=10

This works however it breaks connectivity from 10.4.8.0/24 to my other internal subnets via my tunnel, these use this route:

 3 A S  10.4.0.0/21                        tun1                      1

Is there another method i could be using for this? im assuming the packets are hitting the router and immediately being sent off through that default route and not bothering to check for others.

2

for anyone that is interested, i worked around this by excluding the other subnets, defined in the destination path in the mangle selection:

86   ;;; Mark prerouting - PPP2
     chain=prerouting action=mark-routing new-routing-mark=Route-PPP2
     passthrough=yes src-address=10.4.8.0/24 dst-address=!10.4.0.0/21