Mikrotik - Multi WAN Failover

hat ha mindketto ilyen akkor kicsit bonyolult lesz, mert a "jolvagyok" es a kapok dhcpvel normalis ipcimet/gw-t/dns-t nem ugyanaz.

Itt van egy scriptecske amirol irtam itt: http://hup.hu/node/114793 csak azota mutalodott egy keveset:

:global gw1;
:global gw2;
:global gw1ping 0;
:global gw2ping 0;
:global gw1outint "UPC - port 5";
:global gw2outint "pppoe-out1";
:global gw1dns "213.46.246.53,213.46.246.54";
:global gw2dns "84.2.44.1,84.2.46.1";
:global gw1dns1 "213.46.246.53/32";
:global gw1dns2 "213.46.246.54/32";
:global gw2dns1 "84.2.44.1/32";
:global gw2dns2 "84.2.46.1/32";
:global target 8.8.8.8;
:global failover;
:global failback;
:global lastfailoverpingcount;
:global gw1ruleid [ ip firewall mangle find comment=$gw1outint];
:global gw2ruleid [ ip firewall mangle find comment=$gw2outint];
:global gw1routeid [ ip route find comment=$gw1outint];
:global gw2routeid [ ip route find comment=$gw2outint];
:global gw1rulestate [ip firewall mangle get $gw1ruleid disabled];
:global gw2rulestate [ip firewall mangle get $gw2ruleid disabled];
:foreach i in  [ ip route find dst-address=0.0.0.0/0 ] do={
   :local gw [toip [ip route get $i gateway]];
   :local routingmark [ip route get $i routing-mark];
   if ([:typeof $gw] != "nothing" and [len $routingmark] = 0 ) do={
      if ([ip route get $i gateway-status]~"via  $gw1outint") do={
                :global gw1 $gw;
                :global gw1id $i;
                :global gw1ping [:tonum [/ping address=$target interface=$gw1outint count=5 interval 1s]];
                if (([typeof $gw1ping] = "nothing") or ($gw1ping<5)) do={
                      :set failback 30;
                      if ([typeof $failover] ="nothing") do={
                           :set failover 1;
                      } else={;
                           :set failover ($failover +1);
                      };
                } else={;
                      if ($gw1ping=5) do={
                           :set failover 0;
                           if (([:typeof $failback]!="nothing") and ($failback >0) ) do={
                                :set failback ($failback -1);
                           }
                      };
                };
        } else={;
                if ([ip route get $i gateway-status]~"via  $gw2outint") do={
                         :global gw2 $gw;
                         :global gw2id $i;
                };
        };

   };
};

if ( [len $gw1routeid] = 0 ) do={
   ip route add dst-address=0.0.0.0/0 gateway=$gw1 comment=$gw1outint routing-mark=via_upc distance=100;
   ip route add dst-address=$gw1dns1 gateway=$gw1;
   ip route add dst-address=$gw1dns2 gateway=$gw1;
   :log info "$gw1outint pbr route didn't exist has been added";
} else={;
  if ([ip route get $gw1routeid gateway] != $gw1 and\ 
      [ip route get $gw1routeid comment] != $gw1outint and\
      [ip route get $gw1routeid routing-mark] !=via_ipc and\
      [ip route get $gw1routeid distance] != 100) do={
      ip route set $gw1routeid dst-address=0.0.0.0/0 gateway=$gw1 comment=$gw1outint routing-mark=via_upc distance=100;
      ip route set [ip route find dst-address=$gw1dns1] gateway=$gw1;
      ip route set [ip route find dst-address=$gw1dns2] gateway=$gw1;
  }
};
if ( [len $gw2routeid] = 0 ) do={
   ip route add dst-address=0.0.0.0/0 gateway=$gw2 comment=$gw2outint routing-mark=via_thome distance=100;
   ip route add dst-address=$gw2dns1 gateway=$gw2;
   ip route add dst-address=$gw2dns2 gateway=$gw2;
   :log info "$gw2outint pbr route didn't exist has been added";
} else={;
  if ([ip route get $gw2routeid gateway] != $gw2 and\ 
      [ip route get $gw2routeid comment] != $gw2outint and\
      [ip route get $gw2routeid routing-mark] !=via_thome and\
      [ip route get $gw2routeid distance] != 100) do={
      ip route set $gw2routeid dst-address=0.0.0.0/0 gateway=$gw2 comment=$gw2outint routing-mark=via_thome distance=100;
      ip route set [ip route find dst-address=$gw2dns1] gateway=$gw2;
      ip route set [ip route find dst-address=$gw2dns2] gateway=$gw2;
  }
};
if ($failover > 2) do={
   if (! $gw1rulestate ) do={
        ip firewall mangle set $gw1ruleid disabled=yes;
        ip firewall mangle set $gw2ruleid disabled=no;
        ip dns set servers=$gw2dns;
        :log info "$gw2outint is active";
        /tool e-mail send to=********@******.***** subject="FAILOVER to $gw2outint" body="FAILOVER to $gw2outint"
        :set failback 30;
        :set lastfailoverpingcount $gw1ping;
   };
} else={;
   if ( $gw1rulestate and $failback=0) do={

        ip firewall mangle set $gw2ruleid disabled=yes;
        ip firewall mangle set $gw1ruleid disabled=no;
        ip dns set servers=$gw1dns;
        :log info "$gw1outint is active";
        /tool e-mail send to=********@******.***** subject="FAILOVER to $gw1outint" body="FAILOVER to $gw1outint"
   }
}

Az elsovel meg egyet tudok erteni (bar eddigi tapasztalataim alapjan soha nem valtozott a gateway), a masodikkal viszont nem, mivel ha a modemtol kapsz IP cimet (upstream hianyaban), akkor privat halozati IP-t fogsz kapni, ergo nem fogod elerni a gatewayt azon a laban az eszkoznek.

Rosszul irod be a dst-address-t es nem aktiv a route sem. Probald igy:


/ip route print detail where dst-address=0.0.0.0/0


Erre ki kell hoznia mindkettot (a fenti parancs az en mikrotikemen semmilyen valaszt nem produkal).


[admin@fw] > ip route print detail where dst-address=0.0.0.0/0
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit
0 A S ;;; UPC default route
dst-address=0.0.0.0/0 pref-src=78.139.yy.xx gateway=78.139.yy.vv gateway-status=78.139.yy.vv reachable via UPC check-gateway=ping distance=1 scope=30 target-scope=10


1 S ;;; ADSL default route
dst-address=0.0.0.0/0 pref-src=31.46.yy.xx gateway=84.2.ww.uu gateway-status=84.2.ww.uu unreachable check-gateway=ping distance=2 scope=30 target-scope=10
[admin@fw] >

Edit: beleestem a sajat csapdamba, az ADSL szolgaltato gateway-t valtott :-) ezert unreachable a masodik esetben, most frissitettem, hogy jo legyen. Sajnos ADSL-nel neha szokott valtozni, kabelnel nem.