Recursive Routing + Failover - Mikrotik RouterOS v7

#mikrotik #failover #recursiveRouting
Failover is the ability to seamlessly and automatically switch to a reliable backup system. If the primary network fails, the system switches automatically to another network that is sitting on standby.
Check more videos on my channel
/ @thenetworktrip
Connect with Wilmer Almazan
LinkedIN: / wilmeralmazan
Facebook: / nsswilmeralmazan
Twitter: / wilmer_almazan
Instagram: / wilmer_almazan
Personal Blog: thenetworktrip.blog
mikrotik
routeros 7
ospf
mtcna
mtcre
cybersecurity
routing
cloud computing
virtualization
switching
network automation

[@SymbroIT]

All working, i've watched many videos on how to set this up and was always confused but your video made it as clear as Mikrotik will allow it to be.

[@TheNetworkTrip]

Great to hear!

[@fabiojrsantos94]

What a wonderful explanation, it cleared all the doubts I had, besides simplifying the whole process, I am very grateful. Have a wonderful day.

[@TheNetworkTrip]

Glad it was helpful!

[@alfabit6083]

It was great helpful, I'm Brazilian and I didn't find any explanation on the sites in Brazil, thanks for you help me. Keep going. I'm sorry my English is not good.

[@TacticalCannedHam73]

Thanks for the great video, not only explaining failover routing in RouterOS, but also highlighting the change in getting recursive routing to work properly in ROS7! 👍 I also hadn't previously noticed the new check-gateway options... definitely going to have to dig into those.

[@TheNetworkTrip]

Thank you Mitch! Glad it was useful

[@SipCompany]

My compliments ! Very clear and simple explanation.

[@TheNetworkTrip]

Glad it was helpful!

[@galvesribeiro]

HUGE THANK YOU! Spent a lot of time thinking that the target-scope should be equal to scope. That changed on the RouterOS v7. Thank you very much! :)

[@TheNetworkTrip]

Glad it helped!

[@galvesribeiro]

@@TheNetworkTrip indeed it did. Do you have any guidance on IKEV client-to-site VPN without L2TP? Thanks!

[@igorzatti]

Great video, explaining about how to router os choose the routes and emphasizing about scope helps me a lot, thanks

[@TheNetworkTrip]

Great to hear!

[@crmeae]

Great video Wilmer, once again thanks for your generosity, this confirm that i do not make a misstake on buying your curses. Regards

[@duranopaulo]

Great lesson. Thank you coming from the Philippines.

[@TheNetworkTrip]

Glad it was helpful!

[@ulisescamacho9273]

Gracias Wilmer, ahora podré usar mi RB5009 como balanceador

[@babatrlalan]

Thanks, like. It works great in RouterOS 7.5, though that screen refresh bug is still there. Tip: you can use Netwatch to clear existing connections when the routes swap is done, to speed up the transition.

[@TheNetworkBerg]

Very cool videos on your channel :)!

[@TheNetworkTrip]

Thanks so much! I checked your channel and you offering great content! Congrats

[@glaucovasconcelosjunior1905]

Excelente vídeo! First video about this.

[@randomxspots]

Thank you so much for this tutorial. A big help for my network.

[@TheNetworkTrip]

Glad to hear that!

[@gigatt3079]

Thank you very much for this. All working great in my site.

[@davidinterian]

Thank you! Works great i found your video and you save me! now the office is running on two diferent fiber connections and having a starlinkas backup! that should give me peace of mind for ma upcoming vacations! again Thank you! you have a new subscriber!

[@TheNetworkTrip]

Great!!

[@user-ic1gt7vi2y]

Excellent explanation!!! Nice work, thank you so much

[@TheNetworkTrip]

Thank you

[@LuisRojas-lsrojas]

Thank you so much , greetings from Chile

[@manuelvera9977]

Thanks for sharing this, very helpful for me

[@ukaszignaciuk4290]

Really great video, I followed Mikrotik's official guide, yet I couldn't configure failover properly. This time I did it in less than 20 minutes. Thank you a lot!

[@giannisd961]

I'm new to mikrotik I think their documentation isnt that clear for new users I mostly use KZbin to find solutions to my mt problems

[@TheNetworkTrip]

Great to hear!

[@TheNetworkTrip]

Thank you!

[@tech-dips]

Thank you for a great tutorial and and explanation!

[@diegozupo-btcaas3009]

Hey there, how's it going? I really appreciate your videos. Thank you so much for spending your time with us and teaching us. You are amazing! Grats 🎉

[@TheNetworkTrip]

Thank you. I’m glad you liked my videos

[@dhiaahmed5420]

This is the best tutorial I've seen 👏 please make one about PCC load balancing on Router OS 7

[@TheNetworkTrip]

Thank you! PCC coming soon

[@fernandoturbo382]

TOP, me salvou aqui. Ainda nao tinha visto no Router OS 7

[@TheNetworkTrip]

Wow! Happy to hear that!

[@DiegoBarrios]

Excelent! Thank You!

[@leo.quadrado7719]

Hi! Thanks! I was only able to do Recursive failover in this new version 7 with your explanation. I updated my equipment to 7.5 and I was not able to do it. In version 6.49 the default route I kept with the same scope as the monitoring route Ex:10 and it worked, now in the new version the scope should be bigger. Thanks!

[@TheNetworkTrip]

I’m glad to hear that, thanks

[@wrnrt]

11:37 This setup assumes that you know your gateways. That is often not the case. You just want to check your 2 WAN-connections without having to set (changing) gateways.

[@TheNetworkTrip]

Hi Werner, you have a great point! If we are using DHCP on the WAN, we can use a script to update the ISP's GW if that changes. It can be something like the following: Let's assume we have the ISP-1 connected on ether1: :local newgw [ip dhcp-client get [find interface="ether1"] gateway]; :local routegw [/ip route get [find comment="isp1"] gateway ]; :if ($newgw != $routegw) do={ /ip route set [find comment="isp1"] gateway=$newgw; } We would only need to add a comment ( "isp1") to the route with scope =10 and create a task in the system/schedules and execute that task every X amount of time. I hope this is going to help! Thank you

[@bluehairminerboy]

Thank you very much, very helpful!

[@TheNetworkTrip]

You're welcome!

[@masteknisi_]

many thanks mister. IT Support Freelance from indonesia,

[@TheNetworkTrip]

Thank you 👍🏻

[@Wooldorf]

Great job, thank you very much !!

[@TheNetworkTrip]

Glad you liked it!

[@antonioricardo622]

Excelente . Gratitude

[@TheNetworkTrip]

Thank you Antonio!

[@nicoladellino8124]

Muchas gracias por el video.

[@TheNetworkTrip]

Gracias

[@RioSif]

Great guide! Thanks! It works great for me on ROS 7.8. What if I don't have a standard GW for one of the ISPs? What should I add to the route? For example, I have Starlink on pass-through mode and I set a DHCP client for the ISP1 interface. How can I set the gateway from the DHCP client as a default route? Thanks in advance!

[@tekniqal2639]

Need a video showing how to do this with ISP dynamically assigned addresses.

[@franklinmchana4955]

You just have to enable a dhcp-client on the interface connected to the isp, untick the add default box so that you can add the static route.

[@YONATHANCOVA]

So good

[@sheshokuku]

Hi, Thanks you. I have a question, in the test part, when you drop all forward to ETH2, you off conexion from ISP-1 and active for failover ISP-2, but in the image ETH1 is for ISP-1 Conexion WAN and ETH2 is for ISP-2 conexion..is a mistake image ?

[@QuestMajor]

Is this seamless failover? If the primary WAN fails, will it still continue pinging when transitioning to Backup WAN?

[@basilio100]

excellent. works like a charm. How to deal in situation if IP of Wan interface is dynamic and potentially my provider has dynamic gateway IP, so it can change?

[@ErwinDrew]

great content. do you have a video which combines loadbalancing with this setup?

[@eheroi]

may i ask . in a home network with 2 adsl modems what would be the external hosts ? thank you

[@bhartendulal8645]

Hi , Thank you for the video,, If there is 3rd link then what will the scope and target scope, Also if we for each WAN link there are different lan IP pool , then how will that recursive?

[@Rouly88]

Well, tkx again

[@TheNetworkTrip]

Thank you Bory!!

[@willgaerlan]

Great video sir. if I intend to combine 3 isps, for example three 500mb connections combined for 1.5gb availability on the router, can I assign distance of 1 to all the connections? if 1 connection breaks down, 2 will still work to provide 1gb availability for the system. I intend to use the recursive routing provided above but use a distance of 1 for all providers. will this work sir? there are pcc settings in the mangle to handle the traffic.

[@julianohofschneider6260]

Great explanation, thank you!!! Is it possible to check the gateway using bfd instead of ping, in the recursive route?

[@TheNetworkTrip]

Hello! Thanks. We can’t use BFD on static routes yet.

[@franklinmchana4955]

Hi i love what you do. how do i reach the router using winbox from either Ip addresses, from outside the LAN supposing both isps assigned public Ip addresses.

[@jeytis72]

Could you please supply the EVE-ng file of your project? It could help us to better figure it up. Thanks.

[@forex-chart-analysis-daily]

sir hotspot user connected but can't able to access internet when i go to hotspot host here i remove user mac address then again user can access internet soloution please?

[@khalilelzein6916]

Hello , And always following You , Great explanations. Have a question Whats the best way to load balance two PPPOE same gateway and use BGP Need to be able to stream iptv on my tv

[@muhamadkhalaf6556]

Thank you so on this way no need i think to add dns because it already added on router for each ISP is it ok ? or i should add dns on ip/dns add dns

[@TheNetworkTrip]

Hello!! DNS servers are still required. The ones in the routes are for monitoring the Internet access only (they can be any reachable IP on Internet)

[@carlb641]

I followed your scope/target scope settings but does not seem to reach the gateway. The immediate gateway status is just unknown. Does the scope and target scope change if I have more than 2 WANs?

[@TheNetworkTrip]

Hello Carl, The settings are similar for 2+ Wans

[@laurenttaieb65]

Hello Wilmer, this is a pretty great training. can we add a second set of addresses to be monitored in case the IP we're using becomes unreachable before we switch to the second ISP interface ?. Many thanks

[@laurenttaieb65]

but I don't why, it doesn't work for my network for some reasons. The secondary route is showing in blue in the route list window and then in red after 30sec. status messages are : enabled, invalid, unreachable, static, HW offload. The wierd thing is that the traffic doesn't reroute through the main connection and I have to disable the 2nd WAN port to make it work again. Happy to get some support if all possible. Thanks

[@laurenttaieb65]

I found what the issue is.. my backup connection is connected to a Mikrotik 5G router (Chateau). When the routeur cannot join the Internet itself (not the IP we're using for the recursive test), the configuration doesn't work. If someone has a plan for the plan :)

[@EichraTV]

Hi sir! Im studying this vid,. in this setup is there anything to config in mangle rules? I just want to implement this setup with my rb5009 running dual isp with pppoe/hs same interface can u give m idea how can i config this one... tia sir

[@TheNetworkTrip]

Hi Eichra, All the process will look the same, the only difference will be that instead of using and IP on the gateway value, you can specify the pppoe-interface-name. Let's say your ISP has the interface pppoe-isp1, then, your route will have gateway=pppoe-isp1

[@sunilmahajan7]

With this setup Is it possible to have both ISP active together and double the speed of the internet? please guide...

[@TheNetworkTrip]

Hello! If you set the same distance, RouterOS will use ECMP and it will use both gateways.

[@michaelcadelina1786]

How bout setting up failover based on latency sir? Lets say my isp has high latency/ping or is slow,for example my isp1 has 50ms or higher ping and need to route traffic to my isp2. Thank you very much sir

[@TheNetworkTrip]

Hi Michael, that would be cool, we can use scripting or the API to gather stats, and then execute a script to switch the order of preference. I will try to create something and share it soon.

[@michaelcadelina1786]

@@TheNetworkTrip Thank you very much sir. . Need it also on my network sir. Much appreciated

[@diegosouza2721]

Thank you so much Sir! we saddly have poor explanations across the web about OS7. Can you help me with another? how to clean the Conntrack when Gateway changes? I do have VOIP services and, every time the gateway changes, I have some problems with authentication, so I have to clean the conntrack to force new authentication at provider. Thank You SO MUCH!

[@erapsky2416]

sir in the last part of the video, in firewall rule you drop the ether2 which is the ISP2 to test then the ISP1 should enable to connect.. but in you the ISP2 will enable even you drop the connection.. correct me if i'm wrong sir.

[@MrChView]

Thank you for your great explanation. what if we have a third or more wan... should we set target scope 12 for third wan?

[@TheNetworkTrip]

Hello, thank you! You can continue using 11.

[@MrChView]

@@TheNetworkTrip thank you. btw, I have a problem pinging my second router (priority 2) , I get "Request timed out." but loadbalancing works well. Just I can't ping or open my second router web.

[@franklinmchana4955]

​@@MrChViewhi how did you solve this?

[@MrChView]

@@franklinmchana4955 I did not define a rule in mangle for my second router.

[@franklinmchana4955]

@@MrChView can you share the full setup

[@Rouly88]

Please tell me which DNS are you using on the router? Can we still use 1.0.0.1 or 4.2.2.2 as /ip dns?

[@TheNetworkTrip]

Hi, I would suggest using a different IP than the ones used for monitoring the ISPs since we are forcing that traffic to use that ISP only

[@Rouly88]

@@TheNetworkTrip yes. Get it

[@alimibrahem8120]

Mr.Wilmer From your experiense in Mikrotik can we merge two internet speed Connection...? i mean if i have ether-1=8M ether-2=8M can i merge both of them so i get 16 M..?

[@TheNetworkTrip]

Hello, We can load balance, not merge. Bonding does not work for Internet connections.

[@blueheavens3675]

Can i use target scope 12 because everytime i use 11 route is unknown. ROS 7.9

[@TheNetworkTrip]

Hello! Yes, the idea is having the target scope with a higher value than the scope on the second entry.

[@marianpopov]

Hello, is there a way not to wait 20 seconds to lose 2 pings ? I need something faster ?

[@TheNetworkTrip]

Hello Marian, We can't modify that value on the route itself but you can use Netwatch instead (tools/ netwatch )

[@jmc504]

Scope and target scope policy or rule same as earlier version than osv7?

[@TheNetworkTrip]

There are some slight hangers as I explained in the video

[@nosharwangujar1323]

brother kindly make policy base routing with recursive routing

[@waylon2002my]

How do we check host to monitor ISP IP?

[@TheNetworkTrip]

Hello Tin, You can pick any public IP, the idea is to check a host that is external to your network.

[@arshad794]

can we use Recursive Routing + Failover with load balancing setting, if yes then how setup mangle rule for load balancing with recursive routing. can we use both load balance + recursive routing. Plz help me or send me full script, Thanks & Regards

[@TheNetworkTrip]

Hi, thanks for your comment We can use failover & recursive routing in combination with load balancing (PCC, PBR). I will create a video with PCC + Failover + Recursive Routing soon!

[@arshad794]

@@TheNetworkTrip Thanks Sir, I will wait hope fully you will upload soon

[@markethan9075]

@@TheNetworkTrip I will wait also hope fully you will upload soon

[@christosaivazoglou5860]

@@TheNetworkTrip Add an extra step to add port forwording and then we are totally super with our mentor, best Mikrotik guru !!

[@paulturner9444]

Great video! Any chance you've already made this video when load balancing is present?

[@YaHasEntradoAMiCanal]

excelent 👏👏👏👏👏 thx