I want to set up a mikrotik rb2011l several internet connections. Each Internet connection is to connect a LAN to the Internet. I do not want loadbalancing etc.
Example:
Eth0 (wan1) 1.2.3.4/29 - eth5 (lan1) 192.168.20.0/24
Eth1 (wan2) 1.2.3.5/30 - eth6 (lan2) 192.168.30.0/24
And so on …
I already tried it, but I can not cope with the routes. What do I have to take care of? What do I have to do at least?
ISP 2:
Wan2: x.x.x.30 / 29
Gateway: x.x.x.25 / 29
Lan: 192.168.30.1 with network (192.168.30.0/24)
Portforwarding to 192.168.30.2 (NAS1)
Portforwarding to 192.168.30.3 (NAS2)
Portforwarding to 192.168.30.4 (PC …)
And so on
The system with ISP1 works and I have running. I can not configure the ISP2 so that the complete traffic from network 192.168.30.0/24 is only directed to this ISP2 including gateway.
Use two routing tables (use main for ISP2 and another one for ISP1).
Use mangle rules to mark the traffic from the relevant interfaces (wan1 and its lan) to be routed via the second table.
Add a default route for ISP1 into your second table and a route for the LAN.
Alternatively, just setup “VRF” for the wan1 and its lan interface, it should work out of the box but I have difficulties
with it, primarily due to lack of documentation and therefore it is unclear what it really does.
Excuse me, I will not appear rude.
The fact that I must create Mangle Roules is already clear to me. Only I do not understand exactly which Mangle Roules I need and which I how to create.
I can not do that, unfortunately.
Anyway, thank you. I’ll probably have to think of something else.
Each wan needs masquerade rule.
Each wan needs a mangle rule: chain=forward, src-nat=192.168.?.0/24, action=mark-routing, new-routing-mark=WAN1 (or WAN2, etc)
Each wan needs a routing rule with routing-mark configured.
Which router did you go with? I chose Mikrotik/RouterOS as my preferred router because it’s a single router that handles all my different requirements. When I first started I had to spend hours learning more about networking, and get familiar with RourterOS.
In my country, Cisco is mainstream. I could only find 1 Canadian Mikrotik reseller. Now there are a few Mikrotik resellers in my region, and now I’m starting to see them installed here and there.
It is still being used, but it is no longer a firewall. Maybe I try it again or twice
I was just annoyed because I did not manage to set up the router. The additional WAN connection I have needed however.
Sure, but you have only posted that you cannot do it, not what is wrong and what your non-working configuration was.
Of course there are lots of things that can be done using a MikroTik router, but not by everyone.
Some other manufacturers offer “wizards” or high-level configuration settings that handle such situations more automatically.