Hi!!! I'm a newbie on this... i'm been reading and watching some video to start learning about mikrotik. Right now i'm trying a 2 wan load balance & failover. WAN-1 is a 50MB ISP and the WAN-2 is a 20MB ISP. Everything seem to be working fine with the exception that I see almost all traffic going through WAN-2 instead of WAN-1 that is the high the one with the 50MB...
How can i give priority to WAN-1 instead of WAN-2... i not sure i'm been clear of what i want to do... i wan the WAN with highest bandwith to be utilize more...
here is my router configuration..
NOTE: I hide my public ip with XXX
Thanks in advance for your help!
apr/28/2015 12:36:33 by RouterOS 6.28
/interface ethernet
set [ find default-name=ether3 ] comment="LAN - port 3" name=WAN-OUT
set [ find default-name=ether1 ] comment="Deep Blue - port1" name=WAN1
set [ find default-name=ether2 ] comment="AVI - port2" name=WAN2
set [ find default-name=ether4 ] master-port=WAN-OUT
set [ find default-name=ether5 ] comment="Phone Room" master-port=WAN-OUT
/ip neighbor discovery
set WAN-OUT comment="LAN - port 3"
set WAN1 comment="Deep Blue - port1"
set WAN2 comment="AVI - port2"
set ether5 comment="Phone Room"
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool1 ranges=192.168.8.2-192.168.8.254
add name=dhcp_pool2 ranges=192.168.8.2-192.168.8.254
/ip dhcp-server
add address-pool=dhcp_pool2 disabled=no interface=WAN-OUT lease-time=3d name=
dhcp1
/ip firewall connection tracking
set enabled=yes
/ip address
add address=192.168.8.1/24 interface=WAN-OUT network=192.168.8.0
add address=173.211.xxx.xx/28 interface=WAN1 network=173.211.xxx.xx
add address=10.1.0.203/24 interface=WAN2 network=10.1.0.0
/ip arp
add address=192.168.8.254 comment=MACBOOK interface=WAN-OUT mac-address=
D4:9A:20:XX:XX:XX
/ip dhcp-server network
add address=192.168.8.0/24 gateway=192.168.8.1
/ip dns
set allow-remote-requests=yes servers=
208.67.222.222,208.67.220.220,66.231.171.2,66.231.171.4
/ip firewall filter
add action=drop chain=input src-address=43.255.191.145
add action=drop chain=input src-address=27.5.132.237
add action=drop chain=input src-address=206.116.120.35
add action=drop chain=input src-address=222.161.4.148
add action=drop chain=input src-address=151.28.160.82
add action=drop chain=input src-address=86.26.101.74
add action=drop chain=input src-address=66.192.125.235
add action=drop chain=input comment="drop ftp brute forcers" dst-port=21
protocol=tcp src-address-list=ftp_blacklist
add chain=output content="530 Login incorrect" dst-limit=
1/1m,9,dst-address/1m protocol=tcp
add action=add-dst-to-address-list address-list=ftp_blacklist
address-list-timeout=3h chain=output content="530 Login incorrect"
protocol=tcp
add action=drop chain=input comment="drop ssh brute forcers" dst-port=22
protocol=tcp src-address-list=ssh_blacklist
add action=add-src-to-address-list address-list=ssh_blacklist
address-list-timeout=4w2d chain=input connection-state=new dst-port=22
protocol=tcp src-address-list=ssh_stage3
add action=add-src-to-address-list address-list=ssh_stage3
address-list-timeout=1m chain=input connection-state=new dst-port=22
protocol=tcp src-address-list=ssh_stage2
add action=add-src-to-address-list address-list=ssh_stage2
address-list-timeout=1m chain=input connection-state=new dst-port=22
protocol=tcp src-address-list=ssh_stage1
add action=add-src-to-address-list address-list=ssh_stage1
address-list-timeout=1m chain=input connection-state=new dst-port=22
protocol=tcp
add action=drop chain=forward comment="drop ssh brute downstream" dst-port=22
protocol=tcp src-address-list=ssh_blacklist
add action=drop chain=input comment="drop telnet brute forcers" dst-port=23
protocol=tcp src-address-list=telnet_blacklist
add action=add-src-to-address-list address-list=telnet_blacklist
address-list-timeout=4w2d chain=input connection-state=new dst-port=23
protocol=tcp src-address-list=telnet_stage3
add action=add-src-to-address-list address-list=telnet_stage3
address-list-timeout=1m chain=input connection-state=new dst-port=23
protocol=tcp src-address-list=telnet_stage2
add action=add-src-to-address-list address-list=telnet_stage2
address-list-timeout=1m chain=input connection-state=new dst-port=23
protocol=tcp src-address-list=telnet_stage1
add action=add-src-to-address-list address-list=telnet_stage1
address-list-timeout=1m chain=input connection-state=new dst-port=23
protocol=tcp
add action=drop chain=forward comment="drop telnet brute downstream"
dst-port=23 protocol=tcp src-address-list=telnet_blacklist
/ip firewall mangle
add action=mark-connection chain=input in-interface=WAN1 new-connection-mark=
WAN1_conn
add action=mark-connection chain=input in-interface=WAN2 new-connection-mark=
WAN2_conn
add action=mark-routing chain=output connection-mark=WAN1_conn
new-routing-mark=to_WAN1
add action=mark-routing chain=output connection-mark=WAN1_conn
new-routing-mark=to_WAN1
add action=mark-routing chain=output connection-mark=WAN1_conn
new-routing-mark=to_WAN1
add action=mark-routing chain=output connection-mark=WAN2_conn
new-routing-mark=to_WAN2
add chain=prerouting dst-address=173.211.xxx.xx/28 in-interface=WAN-OUT
add chain=prerouting dst-address=10.1.0.0/24 in-interface=WAN-OUT
add action=mark-connection chain=prerouting dst-address-type=!local
in-interface=WAN-OUT new-connection-mark=WAN1_conn
per-connection-classifier=both-addresses-and-ports:2/0
add action=mark-connection chain=prerouting dst-address-type=!local
in-interface=WAN-OUT new-connection-mark=WAN2_conn
per-connection-classifier=both-addresses-and-ports:2/1
add action=mark-routing chain=prerouting connection-mark=WAN1_conn
in-interface=WAN-OUT new-routing-mark=to_WAN1
add action=mark-routing chain=prerouting connection-mark=WAN2_conn
in-interface=WAN-OUT new-routing-mark=to_WAN2
/ip firewall nat
add action=masquerade chain=srcnat out-interface=WAN1
add action=masquerade chain=srcnat out-interface=WAN2
/ip route
add check-gateway=ping distance=1 gateway=173.211.xxx.xx routing-mark=to_WAN1
add check-gateway=ping distance=1 gateway=10.1.0.1 routing-mark=to_WAN2
add check-gateway=ping distance=1 gateway=173.211.xxx.xx
add check-gateway=ping distance=2 gateway=10.1.0.1
/romon port
add disabled=no
/system clock
set time-zone-name=America/Puerto_Rico
/system identity
set name=MikroTik-RioMar