Hi Stig, thanks for taking the time.
1. I have those weights there because of previous tests. It does not harm to have them there right ? I know in failover there's only one active all the time with 100% weight.
2. I also have clients on switch0 network, that network is a subnet that interconnects branches with access points, so I have several routers on that 192.168.25.32/27 network, one for each branch. Sometimes clients of other branches access internet through this router, and sometimes clients from this branch access internet through other branches.
Actually this case is an example of that, this router load balance rules have one local internet line (eth2) and one from other branch (switch0).
Now that I'm dealing with this I'm wondering: is it possible to have a load balance rule with more than 1 internet in the same interface with different routing tables ? and if it is: is it possible to have more than 1 failover line ? Maybe prioritizing them.
3. Thanks for pointing the firewall rule, I'll add an exception to allow guest clients to access the routers while keep blocking all other intranet sites.
4. I don't need to NAT through my internal network in this case, I NAT internet access on the routers where the internet line is connected.
Thank you very much for your help!