I have RB2011UiAS-2HnD with hotspot , 3WANs load balance with advanced routing fail over, my configurations are :
/ip address
add address=192.168.2.254/21 interface=LAN network=192.168.0.0
add address=1.1.1.100/24 interface=ISP_1 network=1.1.1.0
add address=2.2.2.100/24 interface=ISP_2 network=2.2.2.0
add address=3.3.3.100/24 interface=ISP_3 network=3.3.3.0
/ip firewall mangle
add action=mark-connection chain=forward new-connection-mark=users-con src-address=192.168.0.0/21
add action=mark-packet chain=forward connection-mark=users-con new-packet-mark=users
add action=mark-connection chain=input in-interface=ISP_1 new-connection-mark=ISP_1_conn
add action=mark-connection chain=input in-interface=ISP_2 new-connection-mark=ISP_2_conn
add action=mark-connection chain=input in-interface=ISP_3 new-connection-mark=ISP_3_conn
add action=mark-routing chain=output connection-mark=ISP_1_conn new-routing-mark=to_ISP_1
add action=mark-routing chain=output connection-mark=ISP_2_conn new-routing-mark=to_ISP_2
add action=mark-routing chain=output connection-mark=ISP_3_conn new-routing-mark=to_ISP_3
add chain=prerouting dst-address=1.1.1.0/24 in-interface=LAN
add chain=prerouting dst-address=2.2.2.0/24 in-interface=LAN
add chain=prerouting dst-address=3.3.3.0/24 in-interface=LAN
add action=mark-connection chain=prerouting dst-address-list=!VPN dst-address-type=!local hotspot=auth in-interface=LAN new-connection-mark=ISP_1_conn \
per-connection-classifier=both-addresses-and-ports:3/0
add action=mark-connection chain=prerouting dst-address-list=!VPN dst-address-type=!local hotspot=auth in-interface=LAN new-connection-mark=ISP_2_conn \
per-connection-classifier=both-addresses-and-ports:3/1
add action=mark-connection chain=prerouting dst-address-list=!VPN dst-address-type=!local hotspot=auth in-interface=LAN new-connection-mark=ISP_3_conn \
per-connection-classifier=both-addresses-and-ports:3/2
add action=mark-routing chain=prerouting connection-mark=ISP_1_conn in-interface=LAN new-routing-mark=to_ISP_1
add action=mark-routing chain=prerouting connection-mark=ISP_2_conn in-interface=LAN new-routing-mark=to_ISP_2
add action=mark-routing chain=prerouting connection-mark=ISP_3_conn in-interface=LAN new-routing-mark=to_ISP_3
/ip firewall nat>
add action=masquerade chain=srcnat out-interface=ISP_1
add action=masquerade chain=srcnat out-interface=ISP_2
add action=masquerade chain=srcnat out-interface=ISP_3
/ip route
add distance=1 dst-address=8.8.8.8/32 gateway=1.1.1.1 scope=10
add distance=1 dst-address=178.22.71.56/32 gateway=2.2.2.2 scope=10
add distance=1 dst-address=8.8.4.4/32 gateway=3.3.3.3 scope=10
add check-gateway=ping distance=1 gateway=8.8.8.8 routing-mark=to_ISP_1
add check-gateway=ping distance=2 gateway=178.22.71.56 routing-mark=to_ISP_2
add check-gateway=ping distance=3 gateway=8.8.4.4 routing-mark=to_ISP_3
add check-gateway=ping distance=1 dst-address=10.0.0.1/32 gateway=8.8.8.8 scope=10
add check-gateway=ping distance=1 dst-address=10.0.0.2/32 gateway=178.22.71.56 scope=10
add check-gateway=ping distance=1 dst-address=10.0.0.3/32 gateway=8.8.4.4 scope=10
add distance=1 gateway=10.0.0.1 routing-mark=to_ISP_1
add distance=2 gateway=10.0.0.2 routing-mark=to_ISP_2
add distance=3 gateway=10.0.0.3 routing-mark=to_ISP_3
add distance=1 gateway=10.0.0.1
add distance=2 gateway=10.0.0.2
add distance=3 gateway=10.0.0.3
the problem is ISP_3 is poorly routed to, almost never get routes.
interfaces.png
here are stats from the mangle and nat facilities [I’ve reseted natting stats ]
mangle.png
this is the routing table
routes.png
I will appreciate your help.