Hi all,
I’ve recently purchased a MikroTik RB450G for Dual WAN Load Balancing, and was able to set it up successfully only for a few minutes; the IPoE route keeps going unreachable after a few seconds and I can’t for the life of me figure out why.
Here is a basic version of my network diagram (I have 2x 100/40Mbps FTTH connections that I am wanting to load balance together, one authenticating through IPoE (Dynamic), the other PPPoE). This setup DID work for about 5 minutes (speedtest.net shown 185/65Mbps, but I never got around to saving them…)
Below are the exports of info from the router:
##NOTE: The PPPoE connection is completely unaffected by these issues; issue is solely the IPoE service.
> ip address print detail
[admin@MikroTik RB450G] > ip address print detail
Flags: X - disabled, I - invalid, D - dynamic
0 address=192.168.1.254/24 network=192.168.1.0 interface=LAN
actual-interface=LAN1 D address=[PPPoE_IP/32] network=[PPPoE Gateway] interface=pppoe-out1
actual-interface=pppoe-out12 address=[IPoE/24] network=[IPoE Gateway] interface=IPoE
actual-interface=IPoE
**> ip route print detail **
[admin@MikroTik RB450G] > ip route print detail
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
0 A S dst-address=0.0.0.0/0 gateway=[PPPoE Gateway IP]
gateway-status=[PPPoE Gateway IP] reachable via pppoe-out1
check-gateway=ping distance=1 scope=30 target-scope=10
routing-mark=to_pppoe-out11 S dst-address=0.0.0.0/0 gateway=[IPoE Gateway IP]
gateway-status=[IPoE Gateway IP] unreachable check-gateway=ping distance=1
scope=30 target-scope=10 routing-mark=to_IPoE2 ADS dst-address=0.0.0.0/0 gateway=[PPPoE Gateway IP]
gateway-status=[PPPoE Gateway IP] reachable via pppoe-out1 distance=0
scope=30 target-scope=103 S dst-address=0.0.0.0/0 gateway=[IPoE Gateway IP]
gateway-status=[IPoE Gateway IP] unreachable check-gateway=ping distance=1
scope=30 target-scope=104 S dst-address=0.0.0.0/0 gateway=[PPPoE Gateway IP]
gateway-status=[PPPoE Gateway IP] reachable via pppoe-out1
check-gateway=ping distance=2 scope=30 target-scope=10
> interface print detail
[admin@MikroTik RB450G] > interface print detail
Flags: D - dynamic, X - disabled, R - running, S - slave
0 R name=“IPoE” default-name=“ether1” type=“ether” mtu=1500 actual-mtu=1500
l2mtu=1520 max-l2mtu=1520 mac-address=hidden fast-path=no
last-link-up-time=jun/18/2016 12:01:22 link-downs=01 R name=“LAN” default-name=“ether5” type=“ether” mtu=1500 actual-mtu=1500
l2mtu=1520 max-l2mtu=1520 mac-address=hidden fast-path=no
last-link-up-time=jun/18/2016 12:01:24 link-downs=02 R name=“PPPoE” default-name=“ether3” type=“ether” mtu=1500 actual-mtu=1500
l2mtu=1520 max-l2mtu=1520 mac-address=hidden fast-path=no
last-link-up-time=jun/18/2016 12:01:22 link-downs=03 name=“ether2” default-name=“ether2” type=“ether” mtu=1500 actual-mtu=1500
l2mtu=1520 max-l2mtu=1520 mac-address=hidden fast-path=no
link-downs=04 name=“ether4” default-name=“ether4” type=“ether” mtu=1500 actual-mtu=1500
l2mtu=1520 max-l2mtu=1520 mac-address=hidden fast-path=no
link-downs=05 R name=“pppoe-out1” type=“pppoe-out” mtu=1480 actual-mtu=1480 fast-path=yes
last-link-up-time=jun/18/2016 12:03:29 link-downs=0
^ Ether2 and 4 are enabled but there is nothing connected to either port.
**> ip firewall export **
[admin@MikroTik RB450G] > ip firewall export
jun/18/2016 13:02:36 by RouterOS 6.35.4
software id = L8VR-TNCG
/ip firewall mangle
add chain=prerouting dst-address=[IPoE Network]/24 in-interface=LAN
add chain=prerouting dst-address=[PPPoE IP]/32 in-interface=LAN
add action=mark-connection chain=prerouting connection-mark=no-mark
in-interface=pppoe-out1 new-connection-mark=ISP1
add action=mark-connection chain=prerouting connection-mark=no-mark
in-interface=IPoE new-connection-mark=ISP2
add action=mark-connection chain=prerouting connection-mark=no-mark
dst-address-type=!local in-interface=LAN new-connection-mark=ISP1
per-connection-classifier=both-addresses-and-ports:2/0
add action=mark-connection chain=prerouting connection-mark=no-mark
dst-address-type=!local in-interface=LAN new-connection-mark=ISP2
per-connection-classifier=both-addresses-and-ports:2/1
add action=mark-routing chain=prerouting connection-mark=ISP1 in-interface=LAN
new-routing-mark=to_pppoe-out1
add action=mark-routing chain=prerouting connection-mark=ISP2 in-interface=LAN
new-routing-mark=to_IPoE
add action=mark-routing chain=output connection-mark=ISP1 new-routing-mark=
to_pppoe-out1
add action=mark-routing chain=output connection-mark=ISP2 new-routing-mark=
to_IPoE
/ip firewall nat
add action=masquerade chain=srcnat out-interface=pppoe-out1
add action=masquerade chain=srcnat out-interface=IPoE
The odd thing is, while the Mikrotik doesn’t “think” the IPoE connection is up/unable to route, it’s can be pinged and tracerouted to.
Any help here would be appreciated.