Ze srandy jsem si to tu namlátil do RB2011, rOS6.27 a dělá to co má:
/interface pppoe-client
add allow=pap,chap comment="WAN port" disabled=no interface=ether1 \
max-mru=1492 max-mtu=1492 mrru=1600 name=pppoe-wan1 password=o2 user=o2
add allow=pap,chap comment="WAN port" disabled=no interface=ether1 \
max-mru=1492 max-mtu=1492 mrru=1600 name=pppoe2 password=o3 user=o3
add allow=pap,chap comment="WAN port" disabled=no interface=ether1 \
max-mru=1492 max-mtu=1492 mrru=1600 name=pppoe3 password=o4 user=o4
/ip address
add address=192.168.1.1/24 interface=ether2 network=192.168.1.0
add address=192.168.2.1/24 interface=ether3 network=192.168.2.0
add address=192.168.3.1/24 interface=ether4 network=192.168.3.0
/ip firewall nat
add action=masquerade chain=srcnat out-interface=pppoe-wan1
add action=masquerade chain=srcnat out-interface=pppoe2
add action=masquerade chain=srcnat out-interface=pppoe3
/ip route
add distance=1 gateway=pppoe2 routing-mark=kancl2 vrf-interface=pppoe2
add distance=1 dst-address=192.168.1.0/24 gateway=ether2 routing-mark=kancl2
add distance=1 dst-address=192.168.3.0/24 gateway=ether4 routing-mark=kancl2
add distance=1 gateway=pppoe3 routing-mark=kancl3 vrf-interface=pppoe3
add distance=1 dst-address=192.168.1.0/24 gateway=ether2 routing-mark=kancl3
add distance=1 dst-address=192.168.2.0/24 gateway=ether3 routing-mark=kancl3
add distance=1 gateway=pppoe-wan1
add distance=1 dst-address=192.168.2.0/24 gateway=ether3
add distance=1 dst-address=192.168.3.0/24 gateway=ether4
/ip route vrf
add interfaces=ether3,pppoe2 routing-mark=kancl2
add interfaces=ether4,pppoe3 routing-mark=kancl3
