I have a small problem setting up a BGP multihoming on my network. I have two separate optical links to my mikrotik rb3011, from same ISP. Its supposed to be used like:
Link1 = Main link
Link2 = Backup link
Link1 is connected to ISP via VLAN. I also have a public IP address that i have set on one of the ports on the router. When i visit www.ping.eu, it reports my IP as the public IP i got from my ISP, so its ok.
Link2 is just a link between me and my ISP, no VLAN.
Tech girl from ISP told me their AS and the one assigned to me, i got all BGP related things set up. Tested it by unplugging the cable from Link1, BGP send me a new route through Link2. So looks like BGP works just fine.
My problem is this. When i traceroute any IP address on the internet directly from mikrotik, it pings just fine. But when i traceroute by setting any local address, it doesnt work if i'm on BACKUP link. On MAIN link, its all fine.
I have to mention, i am src-natting the local addresses to the public IP address.
Does anyone have a clue why i cant ping from local addresses when the default route goes to Link2??
I am using 111.111.111.111 as example of my public IP
222.222.222.222 would be my IP to ISP1
333.333.333.333 would be my IP to ISP2
Code: Select all
/ip firewall nat
add action=src-nat chain=srcnat src-address=192.168.0.0/24 to-addresses=111.111.111.111
add action=src-nat chain=srcnat src-address=192.168.5.0/24 src-address-type="" to-addresses=111.111.111.111
/routing bgp network
add network=111.111.111.111/31 synchronize=no
/routing filter
add action=accept chain=isp1-out prefix=111.111.111.111/31 set-bgp-communities=""
add action=discard chain=isp1-out
add action=accept bgp-communities="" chain=isp2-out prefix=111.111.111.111/31
add action=discard chain=isp2-out
add action=accept chain=isp1-in
add action=accept chain=isp2-in set-bgp-prepend=3
/ip route> print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 ADb 0.0.0.0/0 222.222.222.222 20
1 Db 0.0.0.0/0 333.333.333.333 20
2 ADC 222.222.222.222/30 222.222.222.223 vlan1 0
3 DC 111.111.111.111/31 111.111.111.111 ether6 255
4 ADC 192.168.0.0/24 192.168.0.1 ether10 0
5 ADC 192.168.5.0/24 192.168.5.1 ether5 0
6 ADC 333.333.333.333/30 333.333.333.333 ether2 0
