Forum

/ip firewall mangle
add action=change-mss chain=forward disabled=no new-mss=1452 passthrough=yes \
protocol=tcp tcp-flags=syn
add action=accept chain=prerouting comment=\
"====================================================================" \
disabled=no dst-address=192.168.18.0/24 src-address=192.168.18.0/24
add action=accept chain=prerouting disabled=no dst-address=192.168.0.0/24 \
src-address=192.168.18.0/24
add action=accept chain=prerouting disabled=no dst-address=192.168.30.0/24 \
src-address=192.168.18.0/24
add action=accept chain=prerouting disabled=no dst-address=192.168.8.0/24 \
src-address=192.168.18.0/24
add action=mark-connection chain=prerouting comment=\
"====================================================================" \
connection-mark=no-mark disabled=no in-interface=ISP1 new-connection-mark=\
ISP1_conn passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark disabled=no \
in-interface=ISP2 new-connection-mark=ISP2_conn passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark disabled=no \
in-interface=ISP3 new-connection-mark=ISP3_conn passthrough=yes
add action=jump chain=prerouting comment=\
"====================================================================" \
connection-mark=no-mark disabled=no in-interface=Local jump-target=\
policy_router
add action=mark-routing chain=prerouting comment=\
"====================================================================" \
connection-mark=ISP1_conn disabled=no new-routing-mark=ISP1_trafic \
passthrough=yes src-address=192.168.18.0/24
add action=mark-routing chain=prerouting connection-mark=ISP2_conn disabled=no \
new-routing-mark=ISP2_trafic passthrough=yes src-address=192.168.18.0/24
add action=mark-routing chain=prerouting connection-mark=ISP3_conn disabled=no \
new-routing-mark=ISP3_trafic passthrough=yes src-address=192.168.18.0/24
add action=mark-routing chain=output comment=\
"====================================================================" \
connection-mark=ISP1_conn disabled=no new-routing-mark=ISP1_trafic \
passthrough=yes
add action=mark-routing chain=output connection-mark=ISP2_conn disabled=no \
new-routing-mark=ISP2_trafic passthrough=yes
add action=mark-routing chain=output connection-mark=ISP3_conn disabled=no \
new-routing-mark=ISP3_trafic passthrough=yes
add action=mark-connection chain=policy_router comment="========================\
==========SAIDA ISP1==================================" disabled=no \
dst-address-type=!local new-connection-mark=ISP1_conn passthrough=yes \
per-connection-classifier=both-addresses:5/0
add action=mark-connection chain=policy_router comment="========================\
==========SAIDA ISP2==================================" disabled=no \
dst-address-type=!local new-connection-mark=ISP2_conn passthrough=yes \
per-connection-classifier=both-addresses:5/1
add action=mark-connection chain=policy_router comment="========================\
==========SAIDA ISP3==================================" disabled=no \
dst-address-type=!local new-connection-mark=ISP3_conn passthrough=yes \
per-connection-classifier=both-addresses:5/2
/ip firewall nat
add action=masquerade chain=srcnat disabled=no out-interface=ISP1
add action=masquerade chain=srcnat disabled=no out-interface=ISP2 to-addresses=\
0.0.0.0
add action=masquerade chain=srcnat disabled=no out-interface=ISP3

/ip route
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=192.168.30.1 \
routing-mark=ISP1_trafic scope=30 target-scope=10
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=192.168.0.1 \
routing-mark=ISP2_trafic scope=30 target-scope=10
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=192.168.8.1 \
routing-mark=ISP3_trafic scope=30 target-scope=10
add check-gateway=ping comment=Rota_Link_2 disabled=no distance=2 dst-address=\
0.0.0.0/0 gateway=192.168.0.1 scope=30 target-scope=10
add check-gateway=ping comment=Rota_Link_1 disabled=no distance=3 dst-address=\
0.0.0.0/0 gateway=192.168.30.1 scope=30 target-scope=10
add check-gateway=ping comment=Rota_Link_3 disabled=no distance=4 dst-address=\
0.0.0.0/0 gateway=192.168.8.1 scope=30 target-scope=10
/