Hello guys,
I share the configuration that i use for starlink in mode bypass and the provider megacable in mode static, the tool netwatch i use a function test when the mikrotik is reboot or lost power
/ip/address> /ip/dhcp-client/print
Columns: INTERFACE, USE-PEER-DNS, ADD-DEFAULT-ROUTE, STATUS, ADDRESS
# INTERFACE USE-PEER-DNS ADD-DEFAULT-ROUTE STATUS ADDRESS
;;; starlink
0 wan1 yes yes bound 100.71.209.1/10
/ip/address> print
Flags: X - DISABLED, D - DYNAMIC
Columns: ADDRESS, NETWORK, INTERFACE
# ADDRESS NETWORK INTERFACE
1 192.168.80.1/24 192.168.80.0 lan
3 192.168.70.11/24 192.168.70.0 wan2
5 D 100.71.209.1/10 100.64.0.0 wan1
ip/firewall/mangle> print
Flags: X - disabled, I - invalid; D - dynamic
0 ;;; address_starlink
chain=prerouting action=accept dst-address=100.64.0.0/10 in-interface=lan
1 chain=prerouting action=accept dst-address=192.168.70.0/24 in-interface=lan
2 chain=prerouting action=mark-connection new-connection-mark=ISP1_conn connection-mark=no-mark in-interface=wan1
3 chain=prerouting action=mark-connection new-connection-mark=ISP2_conn connection-mark=no-mark in-interface=wan2
4 chain=prerouting action=mark-connection new-connection-mark=ISP1_conn dst-address-type=!local connection-mark=no-mark in-interface=lan per-connection-classifier=dst-address:2/0
5 chain=prerouting action=mark-connection new-connection-mark=ISP2_conn dst-address-type=!local connection-mark=no-mark in-interface=lan per-connection-classifier=dst-address:2/1
6 chain=prerouting action=mark-routing new-routing-mark=to_ISP1 connection-mark=ISP1_conn in-interface=lan
7 chain=prerouting action=mark-routing new-routing-mark=to_ISP2 connection-mark=ISP2_conn in-interface=lan
8 chain=output action=mark-routing new-routing-mark=to_ISP1 connection-mark=ISP1_conn
9 chain=output action=mark-routing new-routing-mark=to_ISP2 connection-mark=ISP2_conn
/ip/route> print detail
Flags: D - dynamic; X - disabled, I - inactive, A - active; c - connect, s - static, r - rip, b - bgp, o - ospf, i - is-is, d - dhcp, v - vpn, m - modem, y - bgp-mpls-vpn; H - hw-offloaded; + - ecmp
3 As + ;;; ISP2
dst-address=0.0.0.0/0 routing-table=main pref-src="" gateway=192.168.70.1 immediate-gw=192.168.70.1%wan2 distance=1 scope=30 target-scope=10 suppress-hw-offload=no
4 As + ;;; ISP1
dst-address=0.0.0.0/0 routing-table=main pref-src="" gateway=100.64.0.1 immediate-gw=100.64.0.1%wan1 distance=1 scope=30 target-scope=10 suppress-hw-offload=no
5 As ;;; Check-ISP2
dst-address=208.67.220.220/32 routing-table=main pref-src="" gateway=192.168.70.1 immediate-gw=192.168.70.1%wan2 distance=1 scope=30 target-scope=10 suppress-hw-offload=no
6 As ;;; ISP1
dst-address=208.67.222.222/32 routing-table=main pref-src="" gateway=100.64.0.1 immediate-gw=100.64.0.1%wan1 distance=1 scope=30 target-scope=10 suppress-hw-offload=no
7 As ;;; ISP1
dst-address=0.0.0.0/0 routing-table=to_ISP1 pref-src="" gateway=100.64.0.1 immediate-gw=100.64.0.1%wan1 check-gateway=ping distance=1 scope=30 target-scope=10 suppress-hw-offload=no
8 As ;;; ISP2
dst-address=0.0.0.0/0 routing-table=to_ISP2 pref-src="" gateway=192.168.70.1 immediate-gw=192.168.70.1%wan2 check-gateway=ping distance=1 scope=30 target-scope=10 suppress-hw-offload=no
The scripts that i use to set network netmask and gateway in rules mangle and route, this are very import if no set the pcc rules will be fail
/tool/netwatch> print detail
Flags: X - disabled
0 host=208.67.222.222 type=simple interval=30s startup-delay=30s
up-script=:global starlinka1 [/ip/dhcp-client/get [ find comment="starlink"] address]\n:global starlinkg1 [ /ip/dhcp-client/get [ find comment="starlink"] gateway] \n/ip/firewall/mangle/set [ find comment="address_starlink"] dst-
address=$starlinka1\nip route set [find comment=ISP1] gateway=$starlinkg1\n
down-script=:global starlinka1 [/ip/dhcp-client/get [ find comment="starlink"] address]\n:global starlinkg1 [ /ip/dhcp-client/get [ find comment="starlink"] gateway] \n/ip/firewall/mangle/set [ find comment="address_starlink"]
dst-address=$starlinka1\nip route set [find comment=ISP1] gateway=192.168.70.1\n
test-script=:global gatewayt [ /ip/route/get [ find routing-table=to_ISP1 ] gateway ] \nif ( $gatewayt = "0.0.0.0" ) do={ \n:global starlinka1 [/ip/dhcp-client/get [ find comment="starlink"] address]\n:global starlinkg1 [ /ip/dhcp-
client/get [ find comment="starlink"] gateway] \n/ip/firewall/mangle/set [ find comment="address_starlink"] dst-address=$starlinka1\nip route set [find comment=ISP1] gateway=$starlinkg1\n}
status=up
1 host=208.67.220.220 type=simple interval=30s startup-delay=30s up-script=ip route set [find comment=ISP2] gateway=192.168.70.1\n\n\n
down-script=/ip route set [find comment=ISP2] gateway=192.168.1.1\n
test-script="" status=up
I share the configuration that i use for starlink in mode bypass and the provider megacable in mode static, the tool netwatch i use a function test when the mikrotik is reboot or lost power
/ip/address> /ip/dhcp-client/print
Columns: INTERFACE, USE-PEER-DNS, ADD-DEFAULT-ROUTE, STATUS, ADDRESS
# INTERFACE USE-PEER-DNS ADD-DEFAULT-ROUTE STATUS ADDRESS
;;; starlink
0 wan1 yes yes bound 100.71.209.1/10
/ip/address> print
Flags: X - DISABLED, D - DYNAMIC
Columns: ADDRESS, NETWORK, INTERFACE
# ADDRESS NETWORK INTERFACE
1 192.168.80.1/24 192.168.80.0 lan
3 192.168.70.11/24 192.168.70.0 wan2
5 D 100.71.209.1/10 100.64.0.0 wan1
ip/firewall/mangle> print
Flags: X - disabled, I - invalid; D - dynamic
0 ;;; address_starlink
chain=prerouting action=accept dst-address=100.64.0.0/10 in-interface=lan
1 chain=prerouting action=accept dst-address=192.168.70.0/24 in-interface=lan
2 chain=prerouting action=mark-connection new-connection-mark=ISP1_conn connection-mark=no-mark in-interface=wan1
3 chain=prerouting action=mark-connection new-connection-mark=ISP2_conn connection-mark=no-mark in-interface=wan2
4 chain=prerouting action=mark-connection new-connection-mark=ISP1_conn dst-address-type=!local connection-mark=no-mark in-interface=lan per-connection-classifier=dst-address:2/0
5 chain=prerouting action=mark-connection new-connection-mark=ISP2_conn dst-address-type=!local connection-mark=no-mark in-interface=lan per-connection-classifier=dst-address:2/1
6 chain=prerouting action=mark-routing new-routing-mark=to_ISP1 connection-mark=ISP1_conn in-interface=lan
7 chain=prerouting action=mark-routing new-routing-mark=to_ISP2 connection-mark=ISP2_conn in-interface=lan
8 chain=output action=mark-routing new-routing-mark=to_ISP1 connection-mark=ISP1_conn
9 chain=output action=mark-routing new-routing-mark=to_ISP2 connection-mark=ISP2_conn
/ip/route> print detail
Flags: D - dynamic; X - disabled, I - inactive, A - active; c - connect, s - static, r - rip, b - bgp, o - ospf, i - is-is, d - dhcp, v - vpn, m - modem, y - bgp-mpls-vpn; H - hw-offloaded; + - ecmp
3 As + ;;; ISP2
dst-address=0.0.0.0/0 routing-table=main pref-src="" gateway=192.168.70.1 immediate-gw=192.168.70.1%wan2 distance=1 scope=30 target-scope=10 suppress-hw-offload=no
4 As + ;;; ISP1
dst-address=0.0.0.0/0 routing-table=main pref-src="" gateway=100.64.0.1 immediate-gw=100.64.0.1%wan1 distance=1 scope=30 target-scope=10 suppress-hw-offload=no
5 As ;;; Check-ISP2
dst-address=208.67.220.220/32 routing-table=main pref-src="" gateway=192.168.70.1 immediate-gw=192.168.70.1%wan2 distance=1 scope=30 target-scope=10 suppress-hw-offload=no
6 As ;;; ISP1
dst-address=208.67.222.222/32 routing-table=main pref-src="" gateway=100.64.0.1 immediate-gw=100.64.0.1%wan1 distance=1 scope=30 target-scope=10 suppress-hw-offload=no
7 As ;;; ISP1
dst-address=0.0.0.0/0 routing-table=to_ISP1 pref-src="" gateway=100.64.0.1 immediate-gw=100.64.0.1%wan1 check-gateway=ping distance=1 scope=30 target-scope=10 suppress-hw-offload=no
8 As ;;; ISP2
dst-address=0.0.0.0/0 routing-table=to_ISP2 pref-src="" gateway=192.168.70.1 immediate-gw=192.168.70.1%wan2 check-gateway=ping distance=1 scope=30 target-scope=10 suppress-hw-offload=no
The scripts that i use to set network netmask and gateway in rules mangle and route, this are very import if no set the pcc rules will be fail
/tool/netwatch> print detail
Flags: X - disabled
0 host=208.67.222.222 type=simple interval=30s startup-delay=30s
up-script=:global starlinka1 [/ip/dhcp-client/get [ find comment="starlink"] address]\n:global starlinkg1 [ /ip/dhcp-client/get [ find comment="starlink"] gateway] \n/ip/firewall/mangle/set [ find comment="address_starlink"] dst-
address=$starlinka1\nip route set [find comment=ISP1] gateway=$starlinkg1\n
down-script=:global starlinka1 [/ip/dhcp-client/get [ find comment="starlink"] address]\n:global starlinkg1 [ /ip/dhcp-client/get [ find comment="starlink"] gateway] \n/ip/firewall/mangle/set [ find comment="address_starlink"]
dst-address=$starlinka1\nip route set [find comment=ISP1] gateway=192.168.70.1\n
test-script=:global gatewayt [ /ip/route/get [ find routing-table=to_ISP1 ] gateway ] \nif ( $gatewayt = "0.0.0.0" ) do={ \n:global starlinka1 [/ip/dhcp-client/get [ find comment="starlink"] address]\n:global starlinkg1 [ /ip/dhcp-
client/get [ find comment="starlink"] gateway] \n/ip/firewall/mangle/set [ find comment="address_starlink"] dst-address=$starlinka1\nip route set [find comment=ISP1] gateway=$starlinkg1\n}
status=up
1 host=208.67.220.220 type=simple interval=30s startup-delay=30s up-script=ip route set [find comment=ISP2] gateway=192.168.70.1\n\n\n
down-script=/ip route set [find comment=ISP2] gateway=192.168.1.1\n
test-script="" status=up
Statistics: Posted by aarntesla — Fri Mar 29, 2024 6:08 am