Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ubnt@ubnt:~$ show configuration | no-more
- firewall {
- all-ping enable
- broadcast-ping disable
- group {
- network-group PRIVATE_NETS {
- network 192.168.0.0/16
- network 172.16.0.0/12
- network 10.0.0.0/8
- }
- }
- ipv6-receive-redirects disable
- ipv6-src-route disable
- ip-src-route disable
- log-martians disable
- modify balance {
- rule 10 {
- action modify
- description "do NOT load balance lan to lan"
- destination {
- group {
- network-group PRIVATE_NETS
- }
- }
- modify {
- table main
- }
- }
- rule 20 {
- action modify
- description "do NOT load balance destination public address"
- destination {
- group {
- address-group ADDRv4_eth0
- }
- }
- modify {
- table main
- }
- }
- rule 30 {
- action modify
- description "do NOT load balance destination public address"
- destination {
- group {
- address-group ADDRv4_eth1
- }
- }
- modify {
- table main
- }
- }
- rule 70 {
- action modify
- modify {
- lb-group G
- }
- }
- }
- name WAN_IN {
- default-action drop
- description "WAN to internal"
- rule 10 {
- action accept
- description "Allow established/related"
- state {
- established enable
- related enable
- }
- }
- rule 20 {
- action drop
- description "Drop invalid state"
- state {
- invalid enable
- }
- }
- }
- name WAN_LOCAL {
- default-action drop
- description "WAN to router"
- rule 10 {
- action accept
- description "Allow established/related"
- state {
- established enable
- related enable
- }
- }
- rule 20 {
- action drop
- description "Drop invalid state"
- state {
- invalid enable
- }
- }
- }
- receive-redirects disable
- send-redirects enable
- source-validation disable
- syn-cookies enable
- }
- interfaces {
- ethernet eth0 {
- address dhcp
- description WAN
- duplex auto
- firewall {
- in {
- name WAN_IN
- }
- local {
- name WAN_LOCAL
- }
- }
- speed auto
- }
- ethernet eth1 {
- address dhcp
- description "WAN 2"
- duplex auto
- firewall {
- in {
- name WAN_IN
- }
- local {
- name WAN_LOCAL
- }
- }
- speed auto
- }
- ethernet eth2 {
- duplex auto
- speed auto
- }
- ethernet eth3 {
- duplex auto
- speed auto
- }
- ethernet eth4 {
- duplex auto
- speed auto
- }
- loopback lo {
- }
- switch switch0 {
- address 10.100.10.1/24
- description Local
- firewall {
- in {
- modify balance
- }
- }
- mtu 1500
- switch-port {
- interface eth2 {
- }
- interface eth3 {
- }
- interface eth4 {
- }
- vlan-aware disable
- }
- }
- }
- load-balance {
- group G {
- interface eth0 {
- }
- interface eth1 {
- }
- sticky {
- dest-addr enable
- }
- }
- }
- service {
- dhcp-server {
- disabled false
- hostfile-update disable
- shared-network-name LAN {
- authoritative enable
- subnet 10.100.10.0/24 {
- default-router 10.100.10.1
- dns-server 10.100.10.1
- dns-server 8.8.4.4
- lease 86400
- start 10.100.10.38 {
- stop 10.100.10.243
- }
- static-mapping UBNT_SWITCH {
- ip-address 10.100.10.2
- mac-address 44:d9:e7:93:36:3c
- }
- }
- }
- }
- dns {
- forwarding {
- cache-size 150
- listen-on switch0
- }
- }
- gui {
- http-port 80
- https-port 443
- older-ciphers enable
- }
- nat {
- rule 5000 {
- description "masquerade for WAN"
- outbound-interface eth0
- type masquerade
- }
- rule 5002 {
- description "masquerade for WAN 2"
- outbound-interface eth1
- type masquerade
- }
- }
- ssh {
- port 22
- protocol-version v2
- }
- }
- system {
- conntrack {
- expect-table-size 4096
- hash-size 4096
- table-size 32768
- tcp {
- half-open-connections 512
- loose enable
- max-retrans 3
- }
- }
- host-name ubnt
- login {
- user ubnt {
- authentication {
- encrypted-password ****************
- }
- level admin
- }
- }
- name-server 8.8.8.8
- name-server 8.8.4.4
- ntp {
- server 0.ubnt.pool.ntp.org {
- }
- server 1.ubnt.pool.ntp.org {
- }
- server 2.ubnt.pool.ntp.org {
- }
- server 3.ubnt.pool.ntp.org {
- }
- }
- syslog {
- global {
- facility all {
- level notice
- }
- facility protocols {
- level debug
- }
- }
- }
- time-zone Europe/Berlin
- traffic-analysis {
- dpi enable
- export enable
- }
- }
- ubnt@u
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement