Command :
# jul/10/2025 13:38:22 by RouterOS 6.49.7
# software id = BSH7-XUJ1
#
# model = 850Gx2
# serial number = 71DC06B24461
/interface ethernet
set [ find default-name=ether4 ] name=ether4_ISP_30
set [ find default-name=ether5 ] name=ether5_ISP_172
/interface list
add name=list1
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool1 ranges=10.100.100.2-10.100.100.254
add name=dhcp_pool2 ranges=10.100.101.2-10.100.101.254
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=ether2 name=dhcp1
add address-pool=dhcp_pool2 disabled=no interface=ether3 name=dhcp2
/ip neighbor discovery-settings
set discover-interface-list=!dynamic
/interface list member
add interface=ether2 list=list1
add interface=ether3 list=list1
/ip address
add address=10.100.100.1/24 interface=ether2 network=10.100.100.0
add address=10.100.101.1/24 interface=ether3 network=10.100.101.0
/ip dhcp-client
add add-default-route=no disabled=no interface=ether4_ISP_30
add add-default-route=no disabled=no interface=ether5_ISP_172
/ip dhcp-server network
add address=10.100.100.0/24 gateway=10.100.100.1
add address=10.100.101.0/24 gateway=10.100.101.1
/ip firewall address-list
add address=10.100.100.0/24 list=10.100.100.0/24
add address=10.100.101.0/24 list=10.100.101.0/24
/ip firewall mangle
add action=accept chain=prerouting dst-address=192.168.30.0/24 \
in-interface-list=list1
add action=accept chain=prerouting dst-address=172.16.101.0/24 \
in-interface-list=list1
add action=mark-connection chain=prerouting connection-mark=no-mark \
in-interface=ether4_ISP_30 new-connection-mark=ISP_1 passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark \
in-interface=ether5_ISP_172 new-connection-mark=ISP_2 passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark \
dst-address=!0.0.0.0 in-interface-list=list1 new-connection-mark=ISP_1 \
passthrough=yes per-connection-classifier=both-addresses:2/0
add action=mark-connection chain=prerouting connection-mark=no-mark \
dst-address=!0.0.0.0 in-interface-list=list1 new-connection-mark=ISP_2 \
passthrough=yes per-connection-classifier=both-addresses:2/1
add action=mark-routing chain=prerouting connection-mark=ISP_1 \
in-interface-list=list1 new-routing-mark=TO_ISP_1 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=ISP_2 \
in-interface-list=list1 new-routing-mark=TO_ISP_2 passthrough=yes
add action=mark-routing chain=output connection-mark=ISP_1 new-routing-mark=\
TO_ISP_1 passthrough=yes
add action=mark-routing chain=output connection-mark=ISP_2 new-routing-mark=\
TO_ISP_2 passthrough=yes
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether4_ISP_30
add action=masquerade chain=srcnat out-interface=ether5_ISP_172
/ip route
add check-gateway=ping distance=1 gateway=192.168.30.1 routing-mark=TO_ISP_1
add check-gateway=ping distance=1 gateway=172.16.101.1 routing-mark=TO_ISP_2
add check-gateway=ping distance=1 gateway=192.168.30.1
add distance=2 gateway=172.16.101.1
/system clock
set time-zone-name=Asia/Jakarta
0 Comments