This configuration is working for me. I have 2 WAN and 1 LAN running ROS v5.11 on x86.
[admin@ACE] > ip address print detail
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; ADSL
address=192.168.1.15/24 network=192.168.1.0 interface=ADSL
actual-interface=ADSL
1 ;;; HOTSPOT
address=70.55.15.1/16 network=70.55.0.0 interface=LAN
actual-interface=LAN
2 ;;; LAN IP NETWORK
address=10.5.50.1/24 network=10.5.50.0 interface=LAN
actual-interface=LAN
3 ;;; W-LINK
address=192.168.2.5/24 network=192.168.2.0 interface=W-LINK
actual-interface=W-LINK
[admin@ACE] > ip route print detail
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m -
B - blackhole, U - unreachable, P - prohibit
0 A S dst-address=0.0.0.0/0 gateway=192.168.1.1
gateway-status=192.168.1.1 reachable ADSL check-g
distance=1 scope=30 target-scope=10 routing-mark=
1 A S dst-address=0.0.0.0/0 gateway=192.168.2.1
gateway-status=192.168.2.1 reachable W-LINK check
distance=1 scope=30 target-scope=10 routing-mark=
2 A S dst-address=0.0.0.0/0 gateway=192.168.1.1
gateway-status=192.168.1.1 reachable ADSL check-g
distance=1 scope=30 target-scope=10
3 S dst-address=0.0.0.0/0 gateway=192.168.2.1
gateway-status=192.168.2.1 reachable W-LINK check
distance=2 scope=30 target-scope=10
4 ADC dst-address=10.5.50.0/24 pref-src=10.5.50.1 gatew
gateway-status=LAN reachable distance=0 scope=10
5 ADC dst-address=70.55.0.0/16 pref-src=70.55.15.1 gate
gateway-status=LAN reachable distance=0 scope=10
6 ADC dst-address=192.168.1.0/24 pref-src=192.168.1.15 gateway=ADSL
gateway-status=ADSL reachable distance=0 scope=10
7 ADC dst-address=192.168.2.0/24 pref-src=192.168.2.5 gateway=W-LINK
gateway-status=W-LINK reachable distance=0 scope=10
[admin@ACE] > ip firewall nat print detail
Flags: X - disabled, I - invalid, D - dynamic
0 chain=dstnat action=redirect to-ports=9090 protocol=tcp src-address-list=LAN in-interface=LAN
dst-port=80
1 chain=pre-hotspot action=accept protocol=tcp src-address=70.55.0.0/16 dst-address-type=!local
hotspot=auth in-interface=LAN dst-port=80
2 X ;;; place hotspot rules here
chain=unused-hs-chain action=passthrough
3 ;;; masquerade hotspot network
chain=srcnat action=masquerade src-address=70.55.0.0/16
4 chain=srcnat action=masquerade src-address=10.5.50.0/24
5 chain=srcnat action=masquerade src-address=45.19.254.0/24
6 chain=srcnat action=masquerade out-interface=ADSL
7 chain=srcnat action=masquerade out-interface=W-LINK
8 chain=dstnat action=redirect protocol=udp dst-port=53
[admin@ACE] > ip firewall mangle print detail
Flags: X - disabled, I - invalid, D - dynamic
0 X chain=prerouting action=mark-connection new-connection-mark=ADSL passthrough=yes in-interface=ADSL
connection-mark=no-mark
1 X chain=prerouting action=mark-connection new-connection-mark=WLINK passthrough=yes in-interface=W-LINK
connection-mark=no-mark
2 X chain=output action=accept dst-address-list=LAN
3 X chain=output action=accept dst-address=10.5.50.0/24
4 X chain=output action=accept dst-address=70.55.0.0/16
5 X chain=output action=accept dst-address=45.19.254.0/24
6 X chain=output action=accept connection-state=new dst-address=192.168.1.0/24
7 X chain=output action=accept connection-state=new dst-address=192.168.2.0/24
8 chain=output action=mark-connection new-connection-mark=ADSL passthrough=yes dst-address-type=!local
connection-mark=ADSL per-connection-classifier=both-addresses:2/0
9 chain=output action=mark-connection new-connection-mark=WLINK passthrough=yes dst-address-type=!local
connection-mark=WLINK per-connection-classifier=both-addresses:2/1
10 X chain=output action=mark-routing new-routing-mark=to_ADSL passthrough=yes connection-mark=ADSL
11 X chain=output action=mark-routing new-routing-mark=to_ADSL passthrough=yes connection-mark=ADSL
12 X chain=prerouting action=accept dst-address=192.168.1.0/24 src-address-list=LAN
13 X chain=prerouting action=accept dst-address=192.168.2.0/24 src-address-list=LAN
14 chain=prerouting action=mark-connection new-connection-mark=ADSL passthrough=yes dst-address-type=!loca>
src-address-list=LAN in-interface=LAN connection-mark=no-mark
per-connection-classifier=both-addresses:2/0
15 chain=prerouting action=mark-connection new-connection-mark=WLINK passthrough=yes
dst-address-type=!local src-address-list=LAN in-interface=LAN connection-mark=no-mark
per-connection-classifier=both-addresses:2/1
16 chain=prerouting action=mark-routing new-routing-mark=to_ADSL passthrough=yes src-address-list=LAN
in-interface=LAN connection-mark=ADSL
17 chain=prerouting action=mark-routing new-routing-mark=to_WLINK passthrough=yes src-address-list=LAN
in-interface=LAN connection-mark=WLINK
[admin@ACE] > ip proxy print
enabled: yes
src-address: 0.0.0.0
port: 9090
parent-proxy: 0.0.0.0
parent-proxy-port: 0
cache-administrator: webmaster
max-cache-size: unlimited
cache-on-disk: yes
max-client-connections: 600
max-server-connections: 600
max-fresh-time: 3d
serialize-connections: no
always-from-cache: no
cache-hit-dscp: 4
cache-drive: primary-slave
[admin@ACE] /ppp profile> print detail
Flags: * - default
1 name=“pppoe” local-address=45.19.254.1 remote-address=PPPoE remote-ipv6-prefix-pool=(unknown)
idle-timeout=30m use-ipv6=no use-mpls=default use-compression=default
use-vj-compression=default use-encryption=default only-one=yes change-tcp-mss=yes
dns-server=70.55.15.1,202.79.32.4,202.70.89.170