Community discussions

 
mktkRB
just joined
Topic Author
Posts: 19
Joined: Sun Oct 06, 2019 8:33 pm

Mikotik routing marks

Fri Oct 11, 2019 6:25 pm

Hi!. everyone.

Got some problem, hope you can help handle it.

Have a pppoe link and a WAN both go through mikrotik
I did a routing mark so some users can use gateway1: pppoe link and others gateway2: WAN.
It's all works, but receive this on WAN gateway out.

video streaming.
" File reported.
If you having this message all the time, some third party applications might be blocking the video. Try this browser
"
it is not happening on router WAN itself.

mangle: routing mark=route1 for pppoe, route2 for WAN
ip route 0.0.0.0/0 gateway pppoe link routing mark:route1
ip route 0.0.0.0/0 gateway WAN link routing mark:route2
 
User avatar
Steveocee
Forum Guru
Forum Guru
Posts: 1110
Joined: Tue Jul 21, 2015 10:09 pm
Location: UK
Contact:

Re: Mikotik routing marks

Fri Oct 11, 2019 6:45 pm

What happens if you swap the routing mark for the device getting this message? Does it work through other gateway?
Steve "Steveocee" Carter
PC Gamer, Airsofter, MikroTik Nerd
My Website - My MikroTik Tutorials
 
mktkRB
just joined
Topic Author
Posts: 19
Joined: Sun Oct 06, 2019 8:33 pm

Re: Mikotik routing marks

Fri Oct 11, 2019 6:55 pm

The problem is only on the gateway2. Any device going through that gateway receives the error.
 
mktkRB
just joined
Topic Author
Posts: 19
Joined: Sun Oct 06, 2019 8:33 pm

Re: Mikotik routing marks

Sun Oct 13, 2019 12:36 pm

Hi.
No clue for this issue?
 
User avatar
Steveocee
Forum Guru
Forum Guru
Posts: 1110
Joined: Tue Jul 21, 2015 10:09 pm
Location: UK
Contact:

Re: Mikotik routing marks

Mon Oct 14, 2019 5:30 pm

Can you show us an export of your mangle rules?

I think the issue is you are not marking inbound traffic, just outbound so there is a possibility traffic is coming in through one WAN and then back out another hence getting this error.
Steve "Steveocee" Carter
PC Gamer, Airsofter, MikroTik Nerd
My Website - My MikroTik Tutorials
 
mktkRB
just joined
Topic Author
Posts: 19
Joined: Sun Oct 06, 2019 8:33 pm

Re: Mikotik routing marks

Mon Oct 14, 2019 5:53 pm

Hi.

/ip firewall mangle
add action=mark-routing chain=prerouting new-routing-mark=routing-001 \
passthrough=no src-address-list=users1
add action=mark-routing chain=prerouting new-routing-mark=routing-002 \
passthrough=no src-address-list=users2

end then

/ip route
add distance=1 gateway=ADSL router IP routing-mark=routing-001
add distance=1 gateway=pppoe-link routing-mark=routing-002
 
User avatar
Steveocee
Forum Guru
Forum Guru
Posts: 1110
Joined: Tue Jul 21, 2015 10:09 pm
Location: UK
Contact:

Re: Mikotik routing marks

Tue Oct 15, 2019 10:59 am

Yes. I think you need to mark your inbound packets so that return traffic goes up the right interface.
Similar to the below, I've tried to copy your routing mark to make it more relevant to you. You'll need to add these as well as your other rules, I'd put these above your other rules.
/ip firewall mangle
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=WAN1 new-connection-mark=connection-001 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=connection-001 new-routing-mark=routing-001 passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=WAN2 new-connection-mark=connection-002 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=connection-002 new-routing-mark=routing-002 passthrough=no
Steve "Steveocee" Carter
PC Gamer, Airsofter, MikroTik Nerd
My Website - My MikroTik Tutorials
 
mktkRB
just joined
Topic Author
Posts: 19
Joined: Sun Oct 06, 2019 8:33 pm

Re: Mikotik routing marks

Tue Oct 15, 2019 11:50 am

Hi.
Okay, Thanks! I'll try it. I will be back.
 
mktkRB
just joined
Topic Author
Posts: 19
Joined: Sun Oct 06, 2019 8:33 pm

Re: Mikotik routing marks

Tue Oct 15, 2019 5:23 pm

I tried above suggestion but not working. Traffic goes to gateway pppoe link.
 
mktkRB
just joined
Topic Author
Posts: 19
Joined: Sun Oct 06, 2019 8:33 pm

Re: Mikotik routing marks

Sun Oct 20, 2019 1:37 am

Hi.
No one has a solution?
 
PLJ123
just joined
Posts: 5
Joined: Mon Aug 05, 2019 7:07 pm

Re: Mikotik routing marks

Sun Oct 20, 2019 7:08 am

Looks like it should work as long as your source nat/masquerade rules are setup correctly. Any traffic leaving each interface should return via it given leaving packets will be presented with the IP of the egress interface.

How are your address lists defined, are they IP ranges for instance? So LAN1 (say 192.168.100.0/24) is users1 and LAN2 (say 192.168.200.0/24) is users2?

My guess is that there is a lack of definition around this part. If this is not clear you might need to mark connections first then mark routing, this way return traffic would be mapped to the connection, then a return routing rule required with the same routing mark. That some of this is working is confusing.

Does flipping the active default route out make any difference to which interface this has this problem associated?
 
mktkRB
just joined
Topic Author
Posts: 19
Joined: Sun Oct 06, 2019 8:33 pm

Re: Mikotik routing marks

Tue Oct 22, 2019 5:22 pm

I use one range for all.
One nat rule
all routes with routing marks are active.

I tried:
/ip firewall mangle
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=WAN2 new-connection-mark=connection-002 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=connection-002 new-routing-mark=routing-002 passthrough=no src-address-list=users2

/ip route
add distance=1 gateway=WAN2 routing-mark=routing-002
add distance=1 gateway=pppoe-link routing-mark=no

all users2 groups's trafic go to gateway pppoe, despite routing mark. It should be going to WAN2

Is it normal? What is wrong?
 
mktkRB
just joined
Topic Author
Posts: 19
Joined: Sun Oct 06, 2019 8:33 pm

Re: Mikotik routing marks

Tue Oct 22, 2019 7:10 pm

Can we have two default routes to 0.0.0.0/0 active at the same time?
this might be related to the issue.
 
joegoldman
Member
Member
Posts: 498
Joined: Mon May 27, 2013 2:05 am

Re: Mikotik routing marks

Wed Oct 23, 2019 1:24 am

DO a full /export hide-sensitive so we can get an idea of your full setup.

Who is online

Users browsing this forum: No registered users and 129 guests