API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Mar 26th, 2017
262
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.38 KB | None | 0 0
raw download clone embed print report
  1. / ip address
  2. add address=10.10.0.1/24 network=10.10.0.0 broadcast=10.10.0.255 interface=LAN
  3. add address=192.168.1.2/24 network=192.168.1.0 broadcast=192.168.1.255 interface=ISP1
  4. add address=192.168.2.2/24 network=192.168.2.0 broadcast=192.168.2.255 interface=ISP2
  5.  
  6. /ip dns set allow-remote-requests=yes cache-max-ttl=1w cache-size=5000KiB max-udp-packet-size=512 servers=8.8.8.8
  7.  
  8. / ip firewall mangle
  9. add chain=prerouting dst-address=192.168.1.0/24 action=accept in-interface=LAN
  10. add chain=prerouting dst-address=192.168.2.0/24 action=accept in-interface=LAN
  11. add chain=prerouting in-interface=ISP1 connection-mark=no-mark action=mark-connection \ new-connection-mark=ISP1_conn
  12. add chain=prerouting in-interface=ISP1 connection-mark=no-mark action=mark-connection \ new-connection-mark=ISP2_conn
  13. add chain=prerouting in-interface=LAN connection-mark=no-mark dst-address-type=!local \ per-connection-classifier=both-addresses:2/0 action=mark-connection new-connection-mark=ISP1_conn
  14. add chain=prerouting in-interface=LAN connection-mark=no-mark dst-address-type=!local \ per-connection-classifier=both-addresses:2/1 action=mark-connection new-connection-mark=ISP2_conn
  15. add chain=prerouting connection-mark=ISP1_conn in-interface=LAN action=mark-routing \ new-routing-mark=to_ISP1
  16. add chain=prerouting connection-mark=ISP2_conn in-interface=LAN action=mark-routing \ new-routing-mark=to_ISP2
  17. add chain=output connection-mark=ISP1_conn action=mark-routing new-routing-mark=to_ISP1
  18. add chain=output connection-mark=ISP2_conn action=mark-routing new-routing-mark=to_ISP2
  19.  
  20. / ip route
  21. add dst-address=0.0.0.0/0 gateway=192.168.1.1 routing-mark=to_ISP1 check-gateway=ping
  22. add dst-address=0.0.0.0/0 gateway=192.168.2.1 routing-mark=to_ISP2 check-gateway=ping
  23. add dst-address=0.0.0.0/0 gateway=192.168.1.1 distance=1 check-gateway=ping
  24. add dst-address=0.0.0.0/0 gateway=192.168.2.1 distance=2 check-gateway=ping
  25.  
  26. / ip firewall nat
  27. add chain=srcnat out-interface=ISP1 action=masquerade
  28. add chain=srcnat out-interface=ISP2 action=masquerade
  29.  
  30.  
  31. The router has two upstream (ISP) interfaces with the addresses of 192.168.1.2/24 and 192.168.2.2/24. The LAN interface has IP address of 10.10.0.1/24.
  32.  
  33. As routing decision is already made we just need rules that will fix src-addresses for all outgoing packets. If this packet will leave via wlan1 it will be NATed to 10.112.0.2, if via wlan2 then NATed to 192.168.1.2
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!