You’ll see below that address in the code we have the additional line
add address=192.168.40.74/24 interface=vrrp-102 network=192.168.40.0
>
> If we don't add this address (with note the /24 (same as the host interface)) the the ip route statement which should be highest becomes unreachable
I'm confused. Which IP route statement becomes unreachable?
> ```text
/ip firewall nat
add action=src-nat chain=srcnat out-interface=vrrp-102 to-addresses=\
192.168.40.73
Here you are saying any traffic that is going out the “vrrp-102” interface is src-nat’d to the 192.168.40.73 address. This may be the true point of trouble. Are we able to step back a little. We may want to talk why you are using VRRP on the public side and why you are src-nat’ing to a shared VRRP address instead of the public interface IP for each router and relying on routing to return the packet to the correct device.