Answer the question
In order to leave comments, you need to log in
I can't figure out why mangle doesn't work?
You need to forward traffic from external ip chr to the host in the office.
There are 2 mikrotiks: office and chr on DO. In chr with a white ip, an l2tp server is configured, a route to the office network and port forwarding to one of the hosts in the office network:
/ip firewall nat add action=dst-nat chain=dstnat dst-port=80,443,222 in-interface=ether1 protocol=tcp to-addresses=192.168.1.10
/ip firewall nat add action=masquerade chain=srcnat out-interface=ether1
/ ip route add check-gateway=ping distance=1 dst-address=192.168.1.0/24 gateway=l2tp-in1
/ip firewall address-list
add address=example.com list=list_to_vds
/ip firewall mangle
add action=mark-routing chain=prerouting dst-address-list=list_to_vds new-routing-mark=route_to_vds passthrough=yes
add action=mark- connection chain=forward in-interface=l2tp-out1 new-connection-mark=conn_in_vds passthrough=yes
add action=mark-routing chain=prerouting connection-mark=conn_in_vds new-routing-mark=route_to_vds passthrough=no
add action=mark- connection chain=input in-interface=bridge_wan_provider1 new-connection-mark=conn_in_provider1 passthrough=yes
add action=mark-connection chain=input in-interface=bridge_wan_provider2 new-connection-mark=conn_in_provider2 passthrough=yes
add action=mark-routing chain=output connection-mark=conn_in_provider1 new-routing-mark=route_to_provider1 passthrough=no
add action=mark-routing chain=output connection-mark=conn_in_provider2 new-routing-mark=route_to_provider2 passthrough=no
/ip route
add distance=1 gateway=l2tp-out1 routing-mark=route_to_vds
add check-gateway=ping distance=1 gateway=1.1.1.1 routing-mark=route_to_provider1
add check-gateway=ping distance=1 gateway=2.2.2.2 routing- mark=route_to_provider2
Answer the question
In order to leave comments, you need to log in
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question