I just set up this system exactly using 2x RB4011 and WAPR-LTE and a CHR. The main IKE2 VPN link is over the NBN connection but if any of the NBN GRE tunnels drop out after 10 seconds the inter-subnet route goes via 4G and the CHR. It works really well. The WAPR has a handy mode where it will pass the 4G connection through to a nominated MAC address (I used a VLAN for this) so a VLAN interface on the RB4011 actually does the DHCP session to Telstra - this makes organising things much easier. This AusNOG post discusses Telstra's new IPv6 trials with 4G. Hopefully in the long they might allow services to run on those addresses which would mean you could do 4G-4G without needed to get a CHR involved. http://lists.ausnog.net/pipermail/ausnog/2020-February/043869.html Regards, Jason Hecker <https://www.upandrunningtech.com.au/> <https://www.upandrunningtech.com.au/> On Wed, 9 Oct 2019, at 17:43, Karl Auer wrote:
We need to quote to a client for two routers capable of running a VPN between two sites - easy, that's a MikroTik. But they want a fallback to 3G/4G so that the site that falls back keeps Internet access AND so that the VPN keeps running.
What's the state of MikroTik 3G/4G fallback? Last I looked it seemed very roll-your-own, and supported only a few very specific dongles...
Ideally it would work like the (vastly more expensive) Merakis and just fail everything over to the secondary link if the primary fails, where "fail" would be either a ping test or interface down.
That said, I'm OK with a solution that needs more work, as long as once done it is set-and-forget.
Any pointers?
Regards, K.
-- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer@nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160
GPG fingerprint: 887A DA07 4DCC EE76 B413 27D4 C638 4189 6CF0 D556 Old fingerprint: 8454 EE43 6215 B6DD 1B4D 9D8D 984D 7BA1 7378 A38D
_______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au