2 Links 2 Lan´s 1 VPN

Boa tarde pessoal

Tenho a seguinte estrutura

Wan1 - 1.1.1.1 -> link de internet para navegação interna
Wan2 - 2.2.2.2 -> link dedicado, clientes acessando servidor
Lan1 - rede predio a
Lan2 - rede predio b
VPN - acesso remoto vendedores externos, hoje acessam a vpn pela wan1 sem problemas na wan2 não conecta

Abaixo a configuração que estou usando, oque pode estar errado!!??

/ip firewall mangle
add chain=prerouting in-interface=WAN1 action=mark-connection new-connection-mark=WAN1_connection 
add chain=prerouting in-interface=WAN2 action=mark-connection new-connection-mark=WAN2_connection 

add chain=prerouting in-interface=LAN1 connection-mark=WAN1_connection action=mark-routing new-routing-mark=to_WAN1
add chain=prerouting in-interface=LAN1 connection-mark=WAN2_connection action=mark-routing new-routing-mark=to_WAN2
add chain=prerouting in-interface=LAN2 connection-mark=WAN1_connection action=mark-routing new-routing-mark=to_WAN1
add chain=prerouting in-interface=LAN2 connection-mark=WAN2_connection action=mark-routing new-routing-mark=to_WAN2


add chain=output src-address=1.1.1.1 action=mark-routing new-routing-mark=to_WAN1
add chain=output src-address=2.2.2.2 action=mark-routing new-routing-mark=to_WAN2

/ip route
add dst-address=0.0.0.0/0 routing-mark=to_WAN1 gateway=1.1.1.1
add dst-address=0.0.0.0/0 routing-mark=to_WAN2 gateway=2.2.2.2

vc quer fazer exatamente o que?