Out of Band Configuration

Overview

When HamWAN routing fails, it’s useful to have a secondary communication channel into the network. This is called out-of-band (or OOB for short) communication. HamWAN doesn’t pass regular network traffic over OOB links, only control information (eg: SSH) is allowed in most cases.

Ensure any firewall rules you have allow you to egress to your Internet Gateway and allow desired inbound traffic.

Assumptions for this example:

Internet facing (OOB) interface: internet
External IP address: 70.80.90.100
Internet Gateway: 70.80.90.1

Configuration (RouterOS 6.x)

/ip route vrf add routing-mark=OOB interfaces=internet
/ip address add interface=internet address=70.80.90.100
/ip route add routing-mark=OOB gateway=70.80.90.1
/ip firewall mangle add chain=output action=mark-routing new-routing-mark=OOB src-address=70.80.90.100

Configuration (RouterOS 7.x)

/ip address add interface=ether1 address=70.80.90.100

/routing table add fib name=OOB

/routing rule
add action=lookup disabled=no src-address=70.80.90.100/32 table=OOB comment="My Internet Address"
add action=lookup disabled=no dst-address=44.25.16.11/32 table=OOB comment="HamWAN Westin"
add action=lookup disabled=no dst-address=44.25.67.4/32 table=OOB comment="HamWAN Ziply"

/ip route
add comment="Internet facing route" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=70.80.90.1 routing-table=OOB