This can be done through scripts, in the case of a guide on how to do it you can see the following link https://wiki.mikrotik.com/wiki/Manual:Tools/Netwatch
To configure an automatic failover using the Netwatch tool in MikroTik RouterOS, you can manage two WAN connections so that when the main connection (WAN 1) is available, that one is used, and in case of failure, the backup connection is automatically activated ( WAN 2).
Here's how you can achieve this by properly configuring Netwatch and routing rules.
Step 1: Netwatch Configuration
Netwatch is a tool in MikroTik RouterOS that allows you to monitor the availability of specific hosts on the network and run scripts based on state changes.
- Access MikroTik RouterOS: You can do this through WinBox, WebFig, or SSH.
- Navigate to Netwatch: go to
Tools
>Netwatch
. - Configure Netwatch for WAN 1:
- Host: Set an IP address that is a good indicator of Internet availability, such as a public DNS server or a trusted IP address.
- Interval: Defines how often the host availability should be checked.
- timeout: Sets the wait time for the ping response.
- Up Script: This script will be executed when the host is reachable. It can be used to enable WAN 1 route and disable WAN 2 route. Example:
/ip route set [find comment="WAN1"] disabled=no
/ip route set [find comment="WAN2"] disabled=yes
- DownScript: This script will be executed when the host is unresponsive. Use it to disable WAN 1 route and enable WAN 2 route. Example:
/ip route set [find comment="WAN1"] disabled=yes
/ip route set [find comment="WAN2"] disabled=no
Step 2: Route Configuration
You need to configure static routes for both WAN connections in MikroTik.
- Configure Static Routes:
- Go to
IP
>Routes
. - Create two routes, one for each WAN. Be sure to set a description or comment that allows you to easily identify each one (for example, “WAN1” and “WAN2”).
- Normally, both routes would have the destination
0.0.0.0/0
(default route), but you must disable one of the two, based on your Netwatch script.
- Go to
Step 3: Verification and Testing
Once configured, perform tests to ensure that failover works correctly:
- Physically disconnect WAN 1 and check if traffic starts going through WAN 2 automatically.
- Review Netwatch logs and results to ensure scripts run as expected.
Additional considerations
- Security and Reliability: Make sure that the scripts and IPs used for testing are secure and reliable to avoid false positives or negatives in detecting network availability.
- Operational: Adjusts the intervals and wait times according to the sensitivity and desired performance for the failover.
Setting up failover with Netwatch is an efficient and relatively simple way to improve the redundancy and availability of your Internet connection using MikroTik RouterOS.
There are no tags for this post.