Hello Guys
recently i bought a 2011 router , and now i have two internet !
1-come from PPOE connection trough ether 6
2-come from ADSL router from Ether 7
so now i have two bridge 1[GE-sW](allGigabite Ethernets) 2[FE-sW](allFastEthernet Except ether 6(for ppoe) ðer 7 (for adsl)
the main problem is i want to have mangle role and when i chose that mangle (enable that mangle and disable other ones)my whole internet goes from that route i configure for that mangle (each mangle i set for each internet )
Problem is mangle for PPOE and PPTP tunnels are work perfectly but mangle for Ether 7(my Adsl) not working
and as my second problem (it’s almost a question) Why i can’t ping my internet or an address from my bridge or any port of bridge (master or slave)doesn’t matter
also i have access to my router via ether 7(also that adsl have internet ) but i show the result above
thanks for Helping me
my config:
# mar/28/2020 15:12:03 by RouterOS 6.46.4
# software id =
#
# model = 2011UiAS-2HnD
# serial number =
/interface bridge
add fast-forward=no name=SW-FE
add fast-forward=no name=SW-GE
/interface ethernet
set [ find default-name=ether1 ] speed=100Mbps
set [ find default-name=ether2 ] speed=100Mbps
set [ find default-name=ether3 ] speed=100Mbps
set [ find default-name=ether4 ] speed=100Mbps
set [ find default-name=ether5 ] speed=100Mbps
set [ find default-name=ether6 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
set [ find default-name=ether7 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
set [ find default-name=ether8 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
set [ find default-name=ether9 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
set [ find default-name=ether10 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
/interface pppoe-client
add add-default-route=yes disabled=no interface=ether6 keepalive-timeout=60 \
name= password=XXXXXXXXX user=XXXXXXXXX
/interface pptp-client
add connect-to=XXXXXXXXX disabled=no name=pptp-HMA password=XXXXXXXXX user=\
XXXXXXXXX
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
add authentication-types=wpa2-psk eap-methods="" group-ciphers=tkip,aes-ccm \
management-protection=allowed mode=dynamic-keys name="Wireless pass" \
supplicant-identity="" unicast-ciphers=tkip,aes-ccm wpa2-pre-shared-key=\
XXXXXXXXX
/interface wireless
set [ find default-name=wlan1 ] antenna-gain=0 band=2ghz-b/g/n bridge-mode=\
disabled country=no_country_set disabled=no frequency=2462 \
frequency-mode=manual-txpower mode=ap-bridge security-profile=\
"Wireless pass" ssid=XXXXXXXXX wireless-protocol=802.11 wps-mode=disabled
/ip pool
add name=dhcp_pool2 ranges=10.10.10.2-10.10.10.254
add name=dhcp_pool3 ranges=50.50.50.2-50.50.50.254
/ip dhcp-server
add address-pool=dhcp_pool2 authoritative=after-2sec-delay disabled=no \
interface=SW-FE name=dhcp2
add address-pool=dhcp_pool3 authoritative=after-2sec-delay disabled=no \
interface=SW-GE name=dhcp3
/snmp community
set [ find default=yes ] addresses=0.0.0.0/0
/interface bridge port
add bridge=SW-FE hw=no interface=ether8
add bridge=SW-FE hw=no interface=ether9
add bridge=SW-GE hw=no interface=ether5
add bridge=SW-GE hw=no interface=ether4
add bridge=SW-FE hw=no interface=ether3
add bridge=SW-GE hw=no interface=ether2
add bridge=SW-GE interface=wlan1
/interface wireless access-list
add comment="XXXXXXXXX" interface=wlan1 mac-address=XXXXXXXXX \
vlan-mode=no-tag
add comment="XXXXXXXXX" interface=wlan1 mac-address=XXXXXXXXX \
vlan-mode=no-tag
add comment="XXXXXXXXX" interface=wlan1 mac-address=\
XXXXXXXXX vlan-mode=no-tag
/ip address
add address=10.10.10.1/24 interface=SW-FE network=10.10.10.0
add address=50.50.50.1/24 interface=SW-GE network=50.50.50.0
/ip cloud
set ddns-enabled=yes
/ip dhcp-client
add disabled=no interface=ether7 use-peer-dns=no use-peer-ntp=no
/ip dhcp-server lease
add address=50.50.50.254 client-id=1:XXXXXXXXX comment="XXXXXXXXX" \
mac-address=XXXXXXXXX:44:70 server=dhcp3
add address=50.50.50.253 client-id=1:XXXXXXXXX comment="XXXXXXXXX" \
mac-address=XXXXXXXXX server=dhcp3
add address=50.50.50.252 client-id=1:XXXXXXXXX comment=\
"XXXXXXXXX" mac-address=XXXXXXXXX server=dhcp3
add address=50.50.50.251 client-id=1:XXXXXXXXX comment=\
"XXXXXXXXX" mac-address=XXXXXXXXX server=dhcp3
/ip dhcp-server network
add address=10.10.10.0/24 dns-server=8.8.8.8,4.2.2.4 gateway=10.10.10.1
add address=20.20.20.0/24 dns-server=8.8.8.8,4.2.2.4 gateway=20.20.20.1
add address=50.50.50.0/24 dns-server=8.8.8.8,4.2.2.4 gateway=50.50.50.1
/ip dns
set servers=1.1.1.1,4.2.2.4
/ip firewall address-list
add address=50.50.50.254 list=Allowed-to-Intenet
add address=50.50.50.251 list=Allowed-to-Intenet
add address=50.50.50.252 list=Allowed-to-Intenet
add address=50.50.50.253 list=Allowed-to-Intenet
/ip firewall filter
add action=drop chain=input comment=SSH-Filter dst-port=22 in-interface=\
all-ethernet log=yes log-prefix=SSH-Drop protocol=tcp
add action=drop chain=input comment=TELNET-Filter dst-port=23 in-interface=\
all-ethernet log=yes log-prefix=TELNET-Drop protocol=tcp
add action=drop chain=input comment=FTP-Filter dst-port=20,21 in-interface=\
all-ethernet log=yes log-prefix=FTP-Drop protocol=tcp
add action=accept chain=forward comment=ALL-Download src-address-list=\
Allowed-to-Intenet
add action=accept chain=forward comment=All-Upload dst-address-list=\
Allowed-to-Intenet
add action=drop chain=forward comment=Wrong-Zone-come src-address-list=\
!Allowed-to-Intenet
add action=drop chain=forward comment=Wrong-Zone-go dst-address-list=\
!Allowed-to-Intenet
/ip firewall mangle
add action=accept chain=prerouting in-interface=
add action=accept chain=prerouting in-interface=pptp-HMA
add action=accept chain=prerouting in-interface=ether7
add action=mark-routing chain=prerouting dst-address=10.10.10.0/24 \
new-routing-mark=lan1 passthrough=no src-address=50.50.50.0/24
add action=mark-routing chain=prerouting dst-address=50.50.50.0/24 \
new-routing-mark=lan2 passthrough=no src-address=10.10.10.0/24
add action=mark-routing chain=prerouting comment="MY pc [No-vnp]" disabled=\
yes new-routing-mark=" [Enable]-PPOE" passthrough=no src-address=\
20.20.20.254
add action=mark-routing chain=prerouting comment="VPN[Enable]-PPTP" disabled=\
yes new-routing-mark=PPTP-vpn passthrough=no
add action=mark-routing chain=prerouting comment=" [Enable]-PPOE" \
new-routing-mark=" [Enable]-PPOE" passthrough=no
add action=mark-routing chain=prerouting comment="ADSL[Enable]-Ether7" \
new-routing-mark="XXXXXXXXX[Enable]-ADSL" passthrough=no
/ip firewall nat
add action=masquerade chain=srcnat comment=Nat-FE src-address=10.10.10.0/24 \
src-address-list=10.10.10.0/24
add action=masquerade chain=srcnat comment=Nat-GE src-address=50.50.50.0/24
/ip firewall service-port
set ftp disabled=yes
set tftp disabled=yes
set irc disabled=yes
set h323 disabled=yes
set sip disabled=yes
set udplite disabled=yes
set dccp disabled=yes
set sctp disabled=yes
/ip route
add check-gateway=ping distance=1 gateway= routing-mark=\
" [Enable]-PPOE"
add check-gateway=ping distance=1 gateway=pptp-HMA routing-mark=PPTP-vpn
add distance=1 gateway=ether7 routing-mark="XXXXXXXXX[Enable]-ADSL"
/ip service
set telnet disabled=yes
set ftp disabled=yes
set ssh disabled=yes
set api disabled=yes
set winbox address=10.10.10.0/24,50.50.50.0/24
set api-ssl disabled=yes
/lcd interface pages
set 0 interfaces="sfp1,ether1,ether2,ether3,ether4,ether5,ether6,ether7,ether8\
,ether9,ether10"
/system clock
set time-zone-name=XXXXXXXXX
/system logging
add topics=ssh
/system ntp client
set enabled=yes primary-ntp=my ntp
/system scheduler
add interval=1d name="schedule log" on-event=log policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
start-date=mar/26/2020 start-time=00:00:00
/system script
add dont-require-permissions=no name="back+log=email" owner=admin policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\
log info \"Mikrotik Backup JOB Started . . . \"\r\
\n:global backupfile configbackup\r\
\n:log info \"Deleting old Backup File If available otherwise ignore & pro\
cess further . . . \"\r\
\n/system backup save name=mikrotik\r\
\n:log info \"Backup process pausing for 10s so it complete creating backu\
p file\"\r\
\n:delay 10s\r\
\n:log info (\"Start Sending Backup File via Email using \" .\\ [/tool e-m\
ail get address] .\\ \" . . .\")\r\
\n/ tool e-mail send to=XXXXXXXXX subject=([/system clock get\
\_date].\\ \" \".\\ [/system clock get time] . \\ \" \".\\ [/system ident\
ity get name] .\\ \" Backup\") body=\"MikroTik email Backup\" file=mikrot\
ik\r\
\n:log info (\"backup e-mail status: \".\\ [/tool e-mail get last-status]\
)\r\
\n:delay 40s\r\
\n:if ([/tool e-mail get last-status] = \"failed\") do={log error \"Can`t \
send E-mail cheak it...\";log error \"Restart E-mail backup file\";[/syste\
m script run system_backup_email ]} else={:log warning (\"Backup e-mail st\
atus: \".\\ [/tool e-mail get last-status]);:log info \"Backup Finished\"\
;:log info \"Deleting Backup File. All Done.\";/file remove mikrotik;}\r\
\n:log info \"Mikrotik log E-mail start . . . \"\r\
\n/log print file=log\r\
\n:log info \"Makeing LOG file process pausing for 10s so it complete crea\
ting log file\"\r\
\n:delay 10s\r\
\n:log info \"Start Sending log File via Email using GMAIL SMTP . . .\"\r\
\n/ tool e-mail send to=XXXXXXXXX subject=([/system clock get\
\_date].\\ \" \".\\ [/system clock get time] . \\ \" MikroTik log file\") \
body=\"MikroTik email log\" file=log\r\
\n:log info (\"log file e-mail status: \".\\ [/tool e-mail get last-statu\
s])\r\
\n:delay 40s\r\
\n:if ([/tool e-mail get last-status] = \"failed\") do={log error \"Can`t \
send E-mail cheak it...\";log error \"Restart E-mail log file\";[/system s\
cript run system_log_email ]} else={:log warning (\"log e-mail status: \"\
.\\ [/tool e-mail get last-status]);:log info \"log e-mail Finished\";:log\
\_info \"Deleting log File. All Done.\";/file remove log;}"
