I hope I can get some eyes on this to tell me more or less if it might work.. So I was just thinking about adding these mangles for each network and how I decide to split the WANs
And then on the netwatch rule for ISP1, change it to.. (along with the command to disable the route)
Instead of the other one I had before.
Now does adding these rules affect fast track at all ? (I almost think it doesnt because its only marking packets and not doing anything within the "established/related" state packets ..
Also would I need to be concerned about also excluding the more then just !local.. maybe broadcast and unicast.. I still will need things to communicate within the same broadcast domain..(which I didnt think would be effected by the router anyways.. "layer2 doesnt need a router").
Does the !local also avoid marking packets to the local devices or just what is destined to the router. ?
Code:
add action=mark-connection chain=prerouting comment="Mark New Packets " connection-mark=no-mark connection-state=new \ dst-address-type=!local in-interface=22VLAN new-connection-mark=ISP1-1 passthrough=yesCode:
ip firewall connection remove [find where connection-mark=ISP1-1]Instead of the other one I had before.
Now does adding these rules affect fast track at all ? (I almost think it doesnt because its only marking packets and not doing anything within the "established/related" state packets ..
Also would I need to be concerned about also excluding the more then just !local.. maybe broadcast and unicast.. I still will need things to communicate within the same broadcast domain..(which I didnt think would be effected by the router anyways.. "layer2 doesnt need a router").
Does the !local also avoid marking packets to the local devices or just what is destined to the router. ?
Statistics: Posted by joshhboss — Sun Jan 07, 2024 10:45 pm