setting proxy for 2 wan

RouterOS General
1

hi all,

I have 2 wan line (speedy1 and speedy2). if I set transparant proxy all client go to default route (speedy2).
How to set client in group1 go to transparent proxy and out to wan1,
and client in group2 go to transparent proxy and out to wan2
my microtik ver is 2.9.27

here is the configuration:

wan..............192.168.1.100/24
speedy1 --------------|..................................|-------------clients (group1) 192.168.100.0/25
........................| 192.168.100.1/24........|
.................. microtik proxy --------------switch
wan.................. |................................|
speedy2---------------|..................................|------------- clients (group2) 192.168.100.128/25
.................192.168.2.100/24

---Mangle---
[admin@MikroTik] > ip firewall mangle print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; Group A untuk speedy1
chain=prerouting src-address=192.168.100.0/26 action=mark-routing
new-routing-mark=speedy1 passthrough=yes

1 ;;; Group B untuk speedy2
chain=prerouting src-address=192.168.100.64/26 action=mark-routing
new-routing-mark=speedy2 passthrough=yes

----ip route-----
[admin@MikroTik] > ip route print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf

DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE

0 ADC 192.168.1.0/24 192.168.1.100 speedy1
1 ADC 192.168.2.0/24 192.168.2.100 speedy2
2 ADC 192.168.100.0/24 192.168.100.1 lan
3 A S 0.0.0.0/0 r 192.168.2.1 speedy2
4 A S 0.0.0.0/0 r 192.168.1.2 speedy1
5 A S 0.0.0.0/0 r 192.168.2.1 speedy2
[admin@MikroTik] >

---nat----
[admin@MikroTik] > ip firewall nat print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=srcnat out-interface=speedy1 action=masquerade

1 chain=srcnat out-interface=speedy2 action=masquerade

2 chain=dstnat in-interface=lan src-address=192.168.100.0/24 protocol=tcp dst-port=80 action=redirect
to-ports=3128
[admin@MikroTik] >

2

get a licance and upgrade to 3.30

3

After I get licance and upgrade to 3.30.
Can this resolve the problem?

4

well it can becouse you have more options


wit can be done with 2 proxy setups to keep it like that but we are waiting for mikrotik to make some type of sync connection for proxys so whats on 1 proxy will be on the other

5

Thank you xezen

6

what you can do is set up 2 proxys and route examples


from 10.0.0.0/24 port 80 can go to 192.168.1.1:8080
and
from 10.0.1.0/24 port80 can go to 192.168.1.2:8080

so everthing that goes to and from 192.168.1.1 go through wan1
so everthing that goes to and from 192.168.1.2 go through wan2

thats the easyes way to do it

thast why it would be nice to have proxy sync as an option

so wats on 1 proxy will be on the other

or set up a squid proxy i think squid might be able to do it

but im not 100% shore as im also new to squid just got mine running last week on vmware