سلام
از این کانفیگ نمونه استفاده کنید احتمالا مشکلتون رو برطرف کنه.
کد:
/ip address
add address=192.168.41.20/24 interface=lan network=192.168.41.0
add address=10.10.1.2/24 interface=wan1 network=10.10.1.0
add address=10.10.2.2/24 interface=wan2 network=10.10.2.0
/ip firewall mangle
add chain=prerouting dst-address=10.10.1.0/24
add chain=prerouting dst-address=10.10.2.0/24
add chain=prerouting dst-address=192.168.41.0/24
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=wan1 new-connection-mark=wan1_conn
add action=mark-connection chain=prerouting connection-mark=no-mark in-interface=wan2 new-connection-mark=wan2_conn
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local in-interface=lan new-connection-mark=wan1_conn per-connection-classifier=src-address-and-port:9/0
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local in-interface=lan new-connection-mark=wan1_conn per-connection-classifier=src-address-and-port:9/1
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local in-interface=lan new-connection-mark=wan1_conn per-connection-classifier=src-address-and-port:9/2
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local in-interface=lan new-connection-mark=wan1_conn per-connection-classifier=src-address-and-port:9/3
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local in-interface=lan new-connection-mark=wan2_conn per-connection-classifier=src-address-and-port:9/4
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local in-interface=lan new-connection-mark=wan2_conn per-connection-classifier=src-address-and-port:9/5
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local in-interface=lan new-connection-mark=wan2_conn per-connection-classifier=src-address-and-port:9/6
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local in-interface=lan new-connection-mark=wan2_conn per-connection-classifier=src-address-and-port:9/7
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address-type=!local in-interface=lan new-connection-mark=wan2_conn per-connection-classifier=src-address-and-port:9/8
add action=mark-routing chain=prerouting connection-mark=wan1_conn in-interface=lan new-routing-mark=to-gw1
add action=mark-routing chain=prerouting connection-mark=wan2_conn in-interface=lan new-routing-mark=to-gw2
add action=mark-routing chain=output connection-mark=wan1_conn new-routing-mark=to-gw1
add action=mark-routing chain=output connection-mark=wan2_conn new-routing-mark=to-gw2
/ip firewall nat
add action=masquerade chain=srcnat out-interface=wan1
add action=masquerade chain=srcnat out-interface=wan2
/ip route
add check-gateway=ping distance=1 gateway=10.10.1.1 routing-mark=to-gw1
add check-gateway=ping distance=1 gateway=10.10.2.1 routing-mark=to-gw2
add check-gateway=ping distance=1 gateway=10.10.2.1
add check-gateway=ping distance=2 gateway=10.10.1.1