Помогите с маршрутизацией Mikrotik и 3 провайдера

[колбаскин]

Пробую делать все по инструкции, но не выходит. http://habrahabr.ru/post/186284/ - статья на хабре

 

Как быть если sfp1 статика от провайдера - тут вопросов нет

eth8 — динамика с белым ip от провайдера (Киевстар Украина), часто меняется

eth9 — динамика с белым ip от провайдера (спутниковый интеренет)

 

На eth10 висит точка доступа под Hotspot, вот необходимо дать ей доступ к интернету через шлюз eth9 (ISP 2)

 

Никак не выходит настроить маршруты, балансировку.

 

Помогите плз...

 

[admin@aa] > /ip firewall mangle
[admin@aa] /ip firewall mangle> print
Flags: X - disabled, I - invalid, D - dynamic 
0   chain=input action=mark-connection new-connection-mark=ISP 1 -> Input passthrough=no dst-address=91.195.184.1 in-interface=ISP1 

1   chain=output action=mark-routing new-routing-mark=ISP 1 passthrough=no connection-mark=ISP 1 -> Input 

2   chain=input action=mark-connection new-connection-mark=ISP 2 -> Input passthrough=no dst-address=46.118.39.254 in-interface=ISP2 

3   chain=output action=mark-routing new-routing-mark=ISP 2 passthrough=no connection-mark=ISP 2 -> Input 

4   chain=input action=mark-connection new-connection-mark=ISP 3 -> Input passthrough=no dst-address=193.108.50.1 in-interface=ISP3 

5   chain=output action=mark-routing new-routing-mark=ISP 3 passthrough=no connection-mark=ISP 3 -> Input 

6   chain=prerouting action=mark-routing new-routing-mark=home passthrough=no src-address=192.168.0.0/24 dst-address-list=local 

7   chain=prerouting action=mark-routing new-routing-mark=out passthrough=no src-address=192.168.10.0/24 dst-address-list=local 

 

[admin@aa] /ip firewall mangle> /ip route print detail
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit 
0 A S  dst-address=0.0.0.0/0 gateway=193.108.50.1 gateway-status=193.108.50.1 reachable via  ISP3 check-gateway=arp distance=12 scope=30 target-scope=10 
       routing-mark=home 

1 X S  dst-address=0.0.0.0/0 gateway=91.195.184.1 gateway-status=91.195.184.1 inactive check-gateway=arp distance=10 scope=30 target-scope=10 
       routing-mark=home 

2 X S  dst-address=0.0.0.0/0 gateway=46.118.39.254 gateway-status=46.118.39.254 inactive check-gateway=arp distance=11 scope=30 target-scope=10 
       routing-mark=home 

3   S  dst-address=0.0.0.0/0 gateway=91.195.184.10 gateway-status=91.195.184.10 unreachable check-gateway=arp distance=11 scope=30 target-scope=10 
       routing-mark=out 

4 A S  dst-address=0.0.0.0/0 gateway=193.108.50.1 gateway-status=193.108.50.1 reachable via  ISP3 check-gateway=arp distance=12 scope=30 target-scope=10 
       routing-mark=out 

5 X S  dst-address=0.0.0.0/0 gateway=46.118.39.254 gateway-status=46.118.39.254 inactive check-gateway=arp distance=10 scope=30 target-scope=10 
       routing-mark=out 

6 A S  dst-address=0.0.0.0/0 gateway=91.195.184.1 gateway-status=91.195.184.1 reachable via  ISP1 distance=1 scope=30 target-scope=10 routing-mark=ISP1 

7 A S  dst-address=0.0.0.0/0 gateway=46.118.39.254 gateway-status=46.118.39.254 reachable via  ISP2 distance=1 scope=30 target-scope=10 routing-mark=ISP2 

8 A S  dst-address=0.0.0.0/0 gateway=193.108.50.1 gateway-status=193.108.50.1 reachable via  ISP3 distance=1 scope=30 target-scope=10 routing-mark=ISP3 

9 A S  dst-address=0.0.0.0/0 gateway=91.195.184.1 gateway-status=91.195.184.1 reachable via  ISP1 distance=1 scope=30 target-scope=10 

10 A S  dst-address=8.8.4.4/32 gateway=46.118.39.254 gateway-status=46.118.39.254 reachable via  ISP2 distance=1 scope=30 target-scope=10 

11 A S  dst-address=8.8.8.8/32 gateway=91.195.184.1 gateway-status=91.195.184.1 reachable via  ISP1 distance=1 scope=30 target-scope=10 

12 ADC  dst-address=46.118.32.0/21 pref-src=46.118.37.231 gateway=ISP2 gateway-status=ISP2 reachable distance=0 scope=10 

13 ADC  dst-address=91.195.184.0/24 pref-src=91.195.184.10 gateway=ISP1 gateway-status=ISP1 reachable distance=0 scope=10 

14 ADC  dst-address=192.168.0.0/24 pref-src=192.168.0.1 gateway=bridge-local gateway-status=bridge-local reachable distance=0 scope=10 

15 ADC  dst-address=192.168.10.0/24 pref-src=192.168.10.1 gateway=ether10 gateway-status=ether10 reachable distance=0 scope=10 

16 ADC  dst-address=193.108.50.0/23 pref-src=193.108.50.185 gateway=ISP3 gateway-status=ISP3 reachable distance=0 scope=10 

 

[admin@aa] /ip firewall mangle> /system script       
[admin@aa] /system script> print
Flags: I - invalid 
0   name="ISP1-UP" owner="maxya" policy=ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api run-count=0 
    source=/ip route enable [find dst-address=0.0.0.0/0 and gateway=91.195.184.1 and distance >= 10]; 

1   name="ISP1-DOWN" owner="maxya" policy=ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api last-started=may/04/
    run-count=1 source=/ip route disable [find dst-address=0.0.0.0/0 and gateway=91.195.184.1 and distance >= 10]; 

2   name="ISP2-UP" owner="maxya" policy=ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api last-started=may/03/20
    run-count=3 source=/ip route enable [find dst-address=0.0.0.0/0 and gateway=46.119.15.254 and distance >= 10]; 

3   name="ISP2-DOWN" owner="maxya" policy=ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api last-started=may/04/
    run-count=4 source=/ip route disable [find dst-address=0.0.0.0/0 and gateway=46.119.15.254 and distance >= 10]; 

Edited May 4, 2014 by колбаскин