Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- firewall {
- all-ping enable
- broadcast-ping disable
- ipv6-name WANv6_IN {
- default-action drop
- description "WAN inbound traffic forwarded to LAN"
- rule 10 {
- action accept
- description "Allow established/releated sessions"
- state {
- established enable
- related enable
- }
- }
- rule 20 {
- action drop
- description "Drop invalid state"
- state {
- invalid enable
- }
- }
- }
- ipv6-name WANv6_LOCAL {
- default-action drop
- description "WAN inbound traffic to the router"
- enable-default-log
- rule 10 {
- action accept
- description "Allow established/related sessions"
- state {
- established enable
- related enable
- }
- }
- rule 20 {
- action drop
- description "Drop invalid state"
- state {
- invalid enable
- }
- }
- rule 30 {
- action accept
- description "Allow IPv6 icmp"
- protocol ipv6-icmp
- }
- rule 40 {
- action accept
- description "Allow DHCPv6"
- destination {
- port 546
- }
- protocol udp
- source {
- port 547
- }
- }
- }
- ipv6-receive-redirects disable
- ipv6-src-route disable
- ### MORE FIREWALL RULES, BUT NOT FOR IPv6 ###
- ### INTERFACE CONFIG STARTS HERE! ###
- interfaces {
- ethernet eth0 {
- address dhcp
- description Internet
- dhcpv6-pd {
- pd 0 {
- interface eth1 {
- host-address ::1
- prefix-id :0
- service slaac
- }
- prefix-length 64
- }
- rapid-commit enable
- }
- duplex auto
- firewall {
- in {
- ipv6-name WANv6_IN
- name WAN_IN
- }
- local {
- ipv6-name WANv6_LOCAL
- name WAN_LOCAL
- }
- }
- speed auto
- }
- ### MORE INTERFACE CONFIG, BUT WE DON'T NEED TO SEE THAT ###
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement