Hi Guys,
Hoping you can help me with something? I am attempting to setup the following:
ISP1 connected to Ether7
ISP2 connected to Ether8
Internal LAN subnet is 192.168.43.0/24
I would like to segment the network into two subnets as follows:
192.168.43.0/25 - Group_A
192.168.43.128/25 - Group_B
The intention for routing is as follows:
192.168.43.0/25 to route out Ether7
192.168.43.128/25 to route out Ether8
My config is as follows:
/ip firewall nat
add action=masquerade chain=srcnat comment=“Masquerade LAN subnet 192.168.43.0/24” src-address=192.168.43.0/24
/ip firewall mangle
add action=mark-routing chain=prerouting new-routing-mark=Group_A passthrough=no src-address=192.168.43.0/25
add action=mark-routing chain=prerouting new-routing-mark=Group_B passthrough=no src-address=192.168.43.128/25
/ip route
ip route add dst-address=0.0.0.0/0 gateway=ether7-WAN2 routing-mark=Group_A add comment=192.168.43.0/25 (Hosts 192.168.43.1 - 192.168.43.126)" distance=1 gateway=Ether7 routing-mark=Group_A
ip route add dst-address=0.0.0.0/0 gateway=ether8-WAN1 routing-mark=Group_B add comment=192.168.43.128/25 (Hosts 192.168.43.129 - 192.168.43.254)" distance=1 gateway=Ether8 routing-mark=Group_B
ip route add dst-address=0.0.0.0/0 gateway=ether8-WAN1 distance=1 gateway=Ether8
The config sort of works as traffic routing for Group_A is successful, but I get no internet access over Ether7. If I change the first route to use Ether8 as a gateway everything works but obviously that is
not the intended solution. It makes no difference if I use the exit interface as the gateway, or if I use the next hop IP. I have checked and both gateways are working prior to adding this config. Any ideas where it may be going wrong or what I may be missing?
try the following
ip route add dst-address=0.0.0.0/0 gateway=ether8-WAN1,ether7-WAN2 distance=1
Hi Guys,
Hoping you can help me with something? I am attempting to setup the following:
ISP1 connected to Ether7
ISP2 connected to Ether8
Internal LAN subnet is 192.168.43.0/24
I would like to segment the network into two subnets as follows:
192.168.43.0/25 - Group_A
192.168.43.128/25 - Group_B
The intention for routing is as follows:
192.168.43.0/25 to route out Ether7
192.168.43.128/25 to route out Ether8
My config is as follows:
/ip firewall nat
add action=masquerade chain=srcnat comment=“Masquerade LAN subnet 192.168.43.0/24” src-address=192.168.43.0/24
/ip firewall mangle
add action=mark-routing chain=prerouting new-routing-mark=Group_A passthrough=no src-address=192.168.43.0/25
add action=mark-routing chain=prerouting new-routing-mark=Group_B passthrough=no src-address=192.168.43.128/25
/ip route
ip route add dst-address=0.0.0.0/0 gateway=ether7-WAN2 routing-mark=Group_A add comment=192.168.43.0/25 (Hosts 192.168.43.1 - 192.168.43.126)" distance=1 gateway=Ether7 routing-mark=Group_A
ip route add dst-address=0.0.0.0/0 gateway=ether8-WAN1 routing-mark=Group_B add comment=192.168.43.128/25 (Hosts 192.168.43.129 - 192.168.43.254)" distance=1 gateway=Ether8 routing-mark=Group_B
ip route add dst-address=0.0.0.0/0 gateway=ether8-WAN1 distance=1 gateway=Ether8
The config sort of works as traffic routing for Group_A is successful, but I get no internet access over Ether7. If I change the first route to use Ether8 as a gateway everything works but obviously that is
not the intended solution. It makes no difference if I use the exit interface as the gateway, or if I use the next hop IP. I have checked and both gateways are working prior to adding this config. Any ideas where it may be going wrong or what I may be missing?