***Configurar PPPoE Cliente
***Activar DNS
** Interfaces Mikrotik
ADSL1, ADSL2, ADSL3, ADSL4. LAN
** Interface de PPPoE
pppoe-1, pppoe-2, pppoe-3, pppoe-4
****Nat All Interfaces
/ip firewall nat
add action=masquerade chain=srcnat disabled=no out-interface=pppoe-1
add action=masquerade chain=srcnat disabled=no out-interface=pppoe-2
add action=masquerade chain=srcnat disabled=no out-interface=pppoe-3
add action=masquerade chain=srcnat disabled=no out-interface=pppoe-4
*** Anidir pool de IPS del LAN puede ser /24 0r /30
/ip firewall address-list
add address=192.168.26.0/24 disabled=no list=GW01_LAN
****MANGLE and First Https and second ACCEP prerouting with address-
list=GW01_LAN*****
/ip firewall mangle
add action=mark-routing chain=prerouting disabled=no dst-port=443 new-routing-
mark=HTTPS passthrough=no protocol=tcp
add action=accept chain=prerouting disabled=no dst-address-list=GW01_LAN src-
address-list=GW01_LAN
add action=mark-connection chain=forward connection-mark=no-mark disabled=no in-
interface=pppoe-1 new-connection-mark=ISP1_conn passthrough=no
add action=mark-connection chain=forward connection-mark=no-mark disabled=no in-
interface=pppoe-2 new-connection-mark=ISP2_conn passthrough=no
add action=mark-connection chain=forward connection-mark=no-mark disabled=no in-
interface=pppoe-3 new-connection-mark=ISP3_conn passthrough=no
add action=mark-connection chain=forward connection-mark=no-mark disabled=no in-
interface=pppoe-4 new-connection-mark=ISP4_conn passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark disabled=no in-
interface=pppoe-1 new-connection-mark=ISP1_conn passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark disabled=no in-
interface=pppoe-2 new-connection-mark=ISP2_conn passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark disabled=no in-
interface=pppoe-3 new-connection-mark=ISP3_conn passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark disabled=no in-
interface=pppoe-4 new-connection-mark=ISP4_conn passthrough=yes
add action=jump chain=prerouting connection-mark=no-mark disabled=no in-
interface=LAN jump-target=policy_routing
add action=mark-routing chain=prerouting connection-mark=ISP1_conn disabled=no new-
routing-mark=ISP1_traffic passthrough=yes src-address-list=GW01_LAN
add action=mark-routing chain=prerouting connection-mark=ISP2_conn disabled=no new-
routing-mark=ISP2_traffic passthrough=yes src-address-list=GW01_LAN
add action=mark-routing chain=prerouting connection-mark=ISP3_conn disabled=no new-
routing-mark=ISP3_traffic passthrough=yes src-address-list=GW01_LAN
add action=mark-routing chain=prerouting connection-mark=ISP4_conn disabled=no new-
routing-mark=ISP4_traffic passthrough=yes src-address-list=GW01_LAN
add action=mark-routing chain=output connection-mark=ISP1_conn disabled=no new-
routing-mark=ISP1_traffic passthrough=yes
add action=mark-routing chain=output connection-mark=ISP2_conn disabled=no new-
routing-mark=ISP2_traffic passthrough=yes
add action=mark-routing chain=output connection-mark=ISP3_conn disabled=no new-
routing-mark=ISP3_traffic passthrough=yes
add action=mark-routing chain=output connection-mark=ISP4_conn disabled=no new-
routing-mark=ISP4_traffic passthrough=yes
add action=mark-connection chain=policy_routing disabled=no dst-address-type=!local
new-connection-mark=ISP1_conn passthrough=yes per-connection-classifier=\
both-addresses:4/0
add action=mark-connection chain=policy_routing disabled=no dst-address-type=!local
new-connection-mark=ISP2_conn passthrough=yes per-connection-classifier=\
both-addresses:4/1
add action=mark-connection chain=policy_routing disabled=no dst-address-type=!local
new-connection-mark=ISP3_conn passthrough=yes per-connection-classifier=\
both-addresses:4/2
add action=mark-connection chain=policy_routing disabled=no dst-address-type=!local
new-connection-mark=ISP4_conn passthrough=yes per-connection-classifier=\
both-addresses:4/3
***Failover
/ip route
add check-gateway=arp distance=1 gateway=pppoe-1 routing-mark=ISP1_traffic
add check-gateway=arp distance=1 gateway=pppoe-2 routing-mark=ISP2_traffic
add check-gateway=arp distance=1 gateway=pppoe-3 routing-mark=ISP3_traffic
add check-gateway=arp distance=1 gateway=pppoe-4 routing-mark=ISP4_traffic
add check-gateway=arp distance=2 gateway=pppoe-1
add check-gateway=arp distance=3 gateway=pppoe-2
add check-gateway=arp distance=4 gateway=pppoe-3
add check-gateway=arp distance=5 gateway=pppoe-4
***For HTTPS...
/ip route
add check-gateway=arp disabled=no distance=7 dst-address=0.0.0.0/0 gateway=\
pppoe-1 routing-mark=HTTPS scope=30 target-scope=10
add check-gateway=arp disabled=no distance=8 dst-address=0.0.0.0/0 gateway=\
pppoe-2 routing-mark=HTTPS scope=30 target-scope=10
add check-gateway=arp disabled=no distance=9 dst-address=0.0.0.0/0 gateway=\
pppoe-3 routing-mark=HTTPS scope=30 target-scope=10
add check-gateway=arp disabled=no distance=10 dst-address=0.0.0.0/0 gateway=\
pppoe-4 routing-mark=HTTPS scope=30 target-scope=10
