Community discussions

MikroTik App
 
GeorgeV
just joined
Topic Author
Posts: 1
Joined: Wed Apr 06, 2022 4:17 pm

Multi wan port forward issue

Wed Apr 06, 2022 4:28 pm

Good afternoon.
I setup a Mikrotik RB1100x4 with load balancing and failover
but port forward only works when a single input is connected.
When 2 or more vdsl routers are connected it doesnt.
Any help will be appreciated. Here is my config:
# mar/30/2022 17:00:04 by RouterOS 6.49.3
# software id = 655W-U3CW
#
# model = RB1100x4
/interface ethernet
set [ find default-name=ether1 ] name=WAN1
set [ find default-name=ether2 ] name=WAN2
set [ find default-name=ether3 ] name=WAN3
set [ find default-name=ether4 ] name=WAN4
set [ find default-name=ether10 ] name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=192.168.1.201-192.168.1.249
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=LAN lease-time=3m name=\
    dhcp1
/ip address
add address=192.168.88.1/24 comment=defconf interface=WAN1 network=\
    192.168.88.0
add address=10.0.1.2/24 interface=WAN1 network=10.0.1.0
add address=10.0.2.2/24 interface=WAN2 network=10.0.2.0
add address=10.0.3.2/24 interface=WAN3 network=10.0.3.0
add address=10.0.4.2/24 interface=WAN4 network=10.0.4.0
add address=192.168.1.1/24 interface=LAN network=192.168.1.0
/ip dhcp-server network
add address=192.168.1.0/24 gateway=192.168.1.1
/ip dns
set allow-remote-requests=yes servers=1.1.1.1,1.0.0.1
/ip firewall mangle
add action=mark-connection chain=input in-interface=WAN1 new-connection-mark=\
    WAN1_conn passthrough=yes
add action=mark-connection chain=input in-interface=WAN2 new-connection-mark=\
    WAN2_conn passthrough=yes
add action=mark-connection chain=input in-interface=WAN3 new-connection-mark=\
    WAN3_conn passthrough=yes
add action=mark-connection chain=input in-interface=WAN4 new-connection-mark=\
    WAN4_conn passthrough=yes
add action=mark-routing chain=output connection-mark=WAN1_conn \
    new-routing-mark=to_WAN1 passthrough=yes
add action=mark-routing chain=output connection-mark=WAN2_conn \
    new-routing-mark=to_WAN2 passthrough=yes
add action=mark-routing chain=output connection-mark=WAN3_conn \
    new-routing-mark=to_WAN3 passthrough=yes
add action=mark-routing chain=output connection-mark=WAN4_conn \
    new-routing-mark=to_WAN4 passthrough=yes
add action=accept chain=prerouting dst-address=10.0.1.0/24 dst-address-type=\
    "" in-interface=LAN per-connection-classifier=\
    both-addresses-and-ports:4/3
add action=accept chain=prerouting dst-address=10.0.2.0/24 dst-address-type=\
    "" in-interface=LAN per-connection-classifier=\
    both-addresses-and-ports:4/2
add action=accept chain=prerouting dst-address=10.0.3.0/24 dst-address-type=\
    "" in-interface=LAN per-connection-classifier=\
    both-addresses-and-ports:4/1
add action=accept chain=prerouting dst-address=10.0.4.0/24 dst-address-type=\
    "" in-interface=LAN per-connection-classifier=\
    both-addresses-and-ports:4/0
add action=mark-connection chain=prerouting dst-address-type=!local \
    in-interface=LAN new-connection-mark=WAN1_conn passthrough=yes \
    per-connection-classifier=both-addresses-and-ports:4/3
add action=mark-connection chain=prerouting dst-address-type=!local \
    in-interface=LAN new-connection-mark=WAN2_conn passthrough=yes \
    per-connection-classifier=both-addresses-and-ports:4/2
add action=mark-connection chain=prerouting dst-address-type=!local \
    in-interface=LAN new-connection-mark=WAN3_conn passthrough=yes \
    per-connection-classifier=both-addresses-and-ports:4/1
add action=mark-connection chain=prerouting dst-address-type=!local \
    in-interface=LAN new-connection-mark=WAN4_conn passthrough=yes \
    per-connection-classifier=both-addresses-and-ports:4/0
add action=mark-routing chain=prerouting connection-mark=WAN1_conn \
    in-interface=LAN new-routing-mark=to_WAN1 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=WAN2_conn \
    in-interface=LAN new-routing-mark=to_WAN2 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=WAN3_conn \
    in-interface=LAN new-routing-mark=to_WAN3 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=WAN4_conn \
    in-interface=LAN new-routing-mark=to_WAN4 passthrough=yes
/ip firewall nat
add action=masquerade chain=srcnat out-interface=WAN1
add action=masquerade chain=srcnat out-interface=WAN2
add action=masquerade chain=srcnat out-interface=WAN3
add action=masquerade chain=srcnat out-interface=WAN4
add action=dst-nat chain=dstnat dst-port=3389 in-interface=WAN1 protocol=tcp \
    to-addresses=192.168.1.10 to-ports=3389
add action=dst-nat chain=dstnat dst-port=3389 in-interface=WAN2 protocol=tcp \
    to-addresses=192.168.1.10 to-ports=3389
add action=dst-nat chain=dstnat dst-port=3389 in-interface=WAN3 protocol=tcp \
    to-addresses=192.168.1.10 to-ports=3389
add action=dst-nat chain=dstnat dst-port=3389 in-interface=WAN4 protocol=tcp \
    to-addresses=192.168.1.10 to-ports=3389
/ip route
add check-gateway=ping distance=1 gateway=10.0.1.1 routing-mark=to_WAN1
add check-gateway=ping distance=1 gateway=10.0.2.1 routing-mark=to_WAN2
add check-gateway=ping distance=1 gateway=10.0.3.1 routing-mark=to_WAN3
add check-gateway=ping distance=1 gateway=10.0.4.1 routing-mark=to_WAN4
add check-gateway=ping distance=1 gateway=10.0.1.1
add check-gateway=ping distance=2 gateway=10.0.2.1
add check-gateway=ping distance=3 gateway=10.0.3.1
add check-gateway=ping distance=4 gateway=10.0.4.1
/system clock
set time-zone-name=Europe/Athens

Who is online

Users browsing this forum: Bing [Bot], derolf, K0NCTANT1N, nizce, tdw, uamma and 59 guests