WereDoku

This is an old revision of the document!

Two separate connections for two separate LANs with one RouterBoard

Disconnect the bridge between etherX-*-local (Interface properties - remove the Master port).

Mark the packets from LAN subnets (e.g. 192.168.10.0/24 a 192.168.20.0/24):

/ip firewall mangle add action=mark-routing chain=prerouting \
    new-routing-mark=routing_mark_office src-address=192.168.10.0/24
/ip firewall mangle add action=mark-routing chain=prerouting \
    new-routing-mark=routing_mark_guests src-address=192.168.20.0/24

Set up routing for packets marked with mangle:

/ip route add gateway=ether1-wan1 routing-mark=routing_mark_office
/ip route add gateway=ether2-wan2 routing-mark=routing_mark_guests

Note: Gateway can also be a PPPoE connection (in case of DSL).

Set up masquerade for the second wan interface (assuming that masquerade was set up only for the ether1-wan1).