Switch to the backup ISP only when the main one is really down (e.g. 4 of 5 pings lost), no flapping.

The route to the monitor host is pinned to the main ISP, so the router keeps watching the main link even while traffic uses the backup. An ICMP netwatch sends several pings at once and only calls it down when the loss passes the threshold.

• Remove the old default route first (from the DHCP client or manual) so it does not clash with the routes above, or set add-default-route=no on the WAN DHCP client.
• If the main ISP uses DHCP/PPPoE with a changing gateway, put its interface name as the gateway (e.g. pppoe-out1).

How to use: Copy the script, open Winbox → New Terminal, paste. Or Download .rsc, upload it in Files, then run /import file-name=failover-netwatch.rsc.

RouterOS v7.4+ · added 10 November 2026