Second gateway not working

RouterOS General
1

Hi,

I have 2 ISP links on eth1 and eth2, and I want to set up a kind of fail-over for LAN (connected to eth3), so I started with the simplest (though incomplete) way of doing it, as described here: http://wiki.mikrotik.com/wiki/Two_gateways_failover. But I can’t get it working. When I unplug the cable from eth1 or disable the first gateway, the second gateway becomes active but the connection drops. Internet sites don’t even ping from the router.

Here’s my setup:

/ip address add address=11.11.11.2/28 interface=eth1-isp1
/ip address add address=22.22.22.2/28 interface=eth2-isp2
/ip address add address=192.168.1.1/24 interface=eth3-lan




/ip firewall nat add chain=srcnat action=masquerade out-interface=eth1-isp1
/ip firewall nat add chain=srcnat action=masquerade out-interface=eth2-isp2




/ip route add gateway=11.11.11.1 check-gateway=ping
/ip route add gateway=22.22.22.1 distance=2

Could anyone, please, tell me what’s wrong here?

2 



tracert google.com

on windows machine

3

From the configurations that you’ve posted everything seems OK. From what you’ve posted, you should be able to ping 22.22.22.1 or 11.11.11.1 from any LAN PC, unless you have a firewall blocking ICMP packets.

Make sure that you don’t have a master-port set on the eth2-isp2 interface.
Either its that, OR you haven’t specified a route for eth2-isp2 outside the 22.22.22.2/28 range.

You should also check if you can ping via both interfaces (without disabling 1) from the router using Tools → Ping and selecting the appropriate interface.

4

Thank you guys for the response. Of course, nothing was wrong with my configuration. It just turned out that, although the ISP2 ensured me that I can use the whole 22.22.22.1/28 subnet, some addresses just don’t work, including 22.22.22.2 – the one that I had assigned to eth2-isp2. So I experimentally found out witch addresses do work, and soon as I changed eth2-isp2 to a working address, everything was ok.