# Dual-WAN PCC — user load balance, server tetap ISP1
# Import: /import file=dual-wan.rsc

/ip route add dst-address=0.0.0.0/0 gateway=117.102.73.97 routing-table="KE ISP 1" comment="dual-wan ISP1" disabled=no
/routing rule add action=lookup-only-in-table table="KE ISP 1" routing-mark="KE ISP 1" comment="dual-wan ISP1"
/routing rule add action=lookup-only-in-table table="KE ISP 2" routing-mark="KE ISP 2" comment="dual-wan ISP2"
/ip firewall mangle add chain=prerouting action=mark-routing new-routing-mark="KE ISP 1" passthrough=no src-address=10.100.1.0/24 comment="dual-wan server force ISP1" place-before=0
/ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark="ISP 1" passthrough=yes connection-mark=no-mark in-interface=office per-connection-classifier=both-addresses-and-ports:2/0 comment="dual-wan office PCC ISP1"
# ISP2 PCC — enable hanya setelah sfp-sfpplus1 aktif dan dapat IP DHCP
# /ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark="ISP 2" passthrough=yes connection-mark=no-mark in-interface=office per-connection-classifier=both-addresses-and-ports:2/1 comment="dual-wan office PCC ISP2"
/ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark="ISP 1" passthrough=yes connection-mark=no-mark in-interface=vpn per-connection-classifier=both-addresses-and-ports:2/0 comment="dual-wan vpn PCC ISP1"
# /ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark="ISP 2" passthrough=yes connection-mark=no-mark in-interface=vpn per-connection-classifier=both-addresses-and-ports:2/1 comment="dual-wan vpn PCC ISP2"
/ip firewall mangle add chain=prerouting action=mark-routing new-routing-mark="KE ISP 1" passthrough=yes connection-mark="ISP 1" comment="dual-wan route ISP1"
# /ip firewall mangle add chain=prerouting action=mark-routing new-routing-mark="KE ISP 2" passthrough=yes connection-mark="ISP 2" comment="dual-wan route ISP2"
/ip dhcp-client set [find interface=sfp-sfpplus1] add-default-route=no use-peer-dns=no disabled=no
/interface ethernet set sfp-sfpplus1 disabled=no
/ip firewall nat disable 2