Interfaces in this example:
- WAN1 = ether1 (DHCP CLIENT)
- WAN2 = ppp-usb-lte (PPP CLIENT)
Netwatch settings:
/tool netwatch
add comment="WAN1 failover" down-script=":log info \"Failover WAN1: DOWN\"\r\
\n\r\
\n/ip dhcp-client set [find interface=\"ether1\"] default-route-distance=11\r\
\n\r\
\n/ip dhcp-client release ether1\r\
\n" host=1.1.1.1 interval=10s up-script=":log info \"Failover WAN1: UP\"\r\
\n\r\
\n/ip dhcp-client set [find interface=\"ether1\"] default-route-distance=1"
add comment="WAN2 failover" down-script=\
":log info \"Failover WAN2: DOWN\"\r\
\n\r\
\n/interface ppp-client set [find interface=\"ppp-usb-lte\"] default-route-distance=12\r\
\n\r\
\n/interface ppp-client disable ppp-usb-lte\r\
\n\r\
\n/interface ppp-client enable ppp-usb-lte" host=1.0.0.1 interval=10s up-script=":log info \"Failover WAN2: UP\"\r\
\n\r\
\n/interface ppp-client set [find interface=\"ppp-usb-lte\"] default-route-distance=2"
Firewall filter rules:
/ip firewall filter
add action=drop chain=output comment="Block WAN2 Access to WAN1 Failover" dst-address=1.1.1.1 out-interface=ppp-usb-lte
add action=drop chain=output comment="Block WAN1 Access to WAN2 Failover" dst-address=1.0.0.1 out-interface=ether1