Your configuration is a bit confusing to me.
The only action=masquerade rule in the srcnat chain of /ip firewall nat matches on out-interface-list=WAN, and the only member of interface list WAN is ether_isp, to which a DHCP client is also attached. So if this is the actual WAN, the LAN hosts should be able to access the internet. But there is also an /interface pppoe-client name=pppoe-out1 that is attached to /interface vlan attached to ether_isp; if the PPPoE client interface is the actual WAN interface that receives an address from the ISP, then you have to make pppoe-out1 a member of interface list WAN rather than ether_isp.
The only action=masquerade rule in the srcnat chain of /ip firewall nat matches on out-interface-list=WAN, and the only member of interface list WAN is ether_isp, to which a DHCP client is also attached. So if this is the actual WAN, the LAN hosts should be able to access the internet. But there is also an /interface pppoe-client name=pppoe-out1 that is attached to /interface vlan attached to ether_isp; if the PPPoE client interface is the actual WAN interface that receives an address from the ISP, then you have to make pppoe-out1 a member of interface list WAN rather than ether_isp.
Statistics: Posted by sindy — Fri Jan 10, 2025 9:15 pm