pcc-4011

RouterOS 7.13.3

# model = RB4011iGS+

/interface pppoe-client
add add-default-route=yes default-route-distance=100 disabled=no interface=\
    ether6 keepalive-timeout=60 name=pppoe-out1 user=tretech4****
add add-default-route=yes default-route-distance=100 disabled=no interface=\
    ether7 keepalive-timeout=60 name=pppoe-out2 user=tretech2****
add add-default-route=yes default-route-distance=100 disabled=no interface=\
    ether8 max-mtu=1492 name=pppoe-out3 user=tretech3****
/interface list
add name=WAN
add name=LAN
/routing table
add disabled=no fib name=to_FTTC1
add disabled=no fib name=to_FTTC2
add disabled=no fib name=to_FTTC3
/interface list member
add interface=pppoe-out1 list=WAN
add interface=pppoe-out2 list=WAN
add interface=pppoe-out3 list=WAN
add interface=ether1 list=LAN
/ip address
add address=172.16.120.254/24 interface=ether1 network=172.16.120.0
/ip dns
set servers=156.54.178.81,195.231.5.12,8.8.8.8

/ip firewall filter
add action=accept chain=forward in-interface-list=WAN protocol=icmp
add action=accept chain=input in-interface-list=WAN src-address-list=\
    PublicIP_mgmnt
add action=accept chain=input connection-state=established,related,untracked
add action=drop chain=input in-interface-list=WAN
/ip firewall mangle
add action=accept chain=prerouting comment="No balance mngmt trafic" \
    dst-port=8291,58080 in-interface-list=WAN protocol=tcp
add action=accept chain=prerouting in-interface-list=WAN protocol=icmp
add action=accept chain=prerouting comment="No balance LAN trafic" \
    dst-address-list=WAN_IP in-interface=ether1
add action=mark-connection chain=forward comment="Mark connection from WAN" \
    connection-mark=no-mark in-interface=pppoe-out1 new-connection-mark=\
    ISP1_conn passthrough=no
add action=mark-connection chain=forward connection-mark=no-mark dst-limit=\
    1,5,dst-address/1m40s in-interface=pppoe-out2 limit=1,5:packet \
    new-connection-mark=ISP2_conn passthrough=no
add action=mark-connection chain=forward connection-mark=no-mark dst-limit=\
    1,5,dst-address/1m40s in-interface=pppoe-out3 limit=1,5:packet \
    new-connection-mark=ISP3_conn passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark \
    in-interface=pppoe-out1 new-connection-mark=ISP1_conn passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark \
    in-interface=pppoe-out2 new-connection-mark=ISP2_conn passthrough=yes
add action=mark-connection chain=prerouting connection-mark=no-mark \
    in-interface=pppoe-out3 new-connection-mark=ISP3_conn passthrough=yes
add action=jump chain=prerouting comment="Jump connection from LAN" \
    connection-mark=no-mark in-interface=ether1 jump-target=policy_routing
add action=mark-routing chain=prerouting comment="LAN Routing Mark" \
    connection-mark=ISP1_conn in-interface=ether1 new-routing-mark=to_FTTC1 \
    passthrough=yes
add action=mark-routing chain=prerouting connection-mark=ISP2_conn \
    in-interface=ether1 new-routing-mark=to_FTTC2 passthrough=yes
add action=mark-routing chain=prerouting connection-mark=ISP3_conn \
    in-interface=ether1 new-routing-mark=to_FTTC3 passthrough=yes
add action=mark-routing chain=output comment="WAN Routing Mark" \
    connection-mark=ISP1_conn new-routing-mark=to_FTTC1 passthrough=yes
add action=mark-routing chain=output connection-mark=ISP2_conn \
    new-routing-mark=to_FTTC2 passthrough=yes
add action=mark-routing chain=output connection-mark=ISP3_conn \
    new-routing-mark=to_FTTC3 passthrough=yes
add action=mark-connection chain=policy_routing comment="LAN PCC" \
    dst-address-type=!local new-connection-mark=ISP1_conn passthrough=yes \
    per-connection-classifier=both-addresses:3/0
add action=mark-connection chain=policy_routing dst-address-type=!local \
    new-connection-mark=ISP2_conn passthrough=yes per-connection-classifier=\
    both-addresses:3/1
add action=mark-connection chain=policy_routing dst-address-type=!local \
    new-connection-mark=ISP3_conn passthrough=yes per-connection-classifier=\
    both-addresses:3/2
/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=WAN
add action=accept chain=dstnat comment="NO DMZ services" dst-port=8291,58080 \
    in-interface-list=WAN protocol=tcp
add action=accept chain=dstnat in-interface-list=WAN protocol=icmp
/ip route
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
    pppoe-out1 pref-src="" routing-table=to_FTTC1 scope=30 \
    suppress-hw-offload=no target-scope=10
add check-gateway=arp disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
    pppoe-out2 pref-src="" routing-table=to_FTTC2 scope=30 \
    suppress-hw-offload=no target-scope=10
add check-gateway=arp disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
    pppoe-out3 pref-src="" routing-table=to_FTTC3 scope=30 \
    suppress-hw-offload=no target-scope=10
add check-gateway=arp disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\
    pppoe-out1 pref-src="" routing-table=main scope=255 suppress-hw-offload=\
    no target-scope=10
add check-gateway=arp disabled=no distance=3 dst-address=0.0.0.0/0 gateway=\
    pppoe-out2 pref-src="" routing-table=main scope=30 suppress-hw-offload=\
    yes target-scope=10
add check-gateway=arp disabled=no distance=4 dst-address=0.0.0.0/0 gateway=\
    pppoe-out3 pref-src="" routing-table=main scope=30 suppress-hw-offload=no \
    target-scope=10