API tools faq
paste
Guest User

My EdgeRouter Lite Config

a guest
Aug 26th, 2015
664
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 9.22 KB | None | 0 0
raw download clone embed print report
  1. firewall {
  2. all-ping enable
  3. broadcast-ping disable
  4. group {
  5. address-group PLEX {
  6. address 192.168.*.*
  7. description ""
  8. }
  9. port-group PLEX {
  10. description ""
  11. port 32400
  12. }
  13. port-group XBox-One {
  14. description "Xbox One Poorten"
  15. port 4500
  16. port 3074
  17. port 3544
  18. port 500
  19. port 88
  20. }
  21. }
  22. ipv6-receive-redirects disable
  23. ipv6-src-route disable
  24. ip-src-route disable
  25. log-martians enable
  26.  
  27. name LAN_IN {
  28. default-action accept
  29. description ""
  30. rule 1 {
  31. action drop
  32. description Bittorrent
  33. log disable
  34. p2p {
  35. bittorrent
  36. }
  37. protocol all
  38. }
  39. }
  40. name WAN_IN {
  41. default-action drop
  42. description "WAN to internal"
  43. enable-default-log
  44. rule 1 {
  45. action accept
  46. description "Allow established/related"
  47. state {
  48. established enable
  49. related enable
  50. }
  51. }
  52. rule 2 {
  53. action drop
  54. description "Drop invalid state"
  55. state {
  56. invalid enable
  57. }
  58. }
  59. rule 3 {
  60. action accept
  61. description "Allow HTTPS"
  62. destination {
  63. address 10.*.*.*
  64. group {
  65. }
  66. port 443
  67. }
  68. log disable
  69. protocol tcp
  70. }
  71. rule 4 {
  72. action accept
  73. description "ALLOW HTTP"
  74. destination {
  75. address 10.*.*.*
  76. group {
  77. }
  78. port 80
  79. }
  80. log enable
  81. protocol tcp
  82. }
  83. rule 5 {
  84. action accept
  85. description "ALLOW PLEX Streaming"
  86. destination {
  87. group {
  88. address-group PLEX
  89. port-group PLEX
  90. }
  91. }
  92. log disable
  93. protocol tcp
  94. }
  95. rule 6 {
  96. action accept
  97. description "Xbox One"
  98. destination {
  99. address 192.168.*.*
  100. group {
  101. port-group XBox-One
  102. }
  103. }
  104. log disable
  105. protocol tcp_udp
  106. }
  107. }
  108. name WAN_LOCAL {
  109. default-action drop
  110. description "WAN to router"
  111. rule 10 {
  112. action accept
  113. description "Allow established/related"
  114. state {
  115. established enable
  116. related enable
  117. }
  118. }
  119. rule 20 {
  120. action drop
  121. description "Drop invalid state"
  122. state {
  123. invalid enable
  124. }
  125. }
  126. }
  127. options {
  128. mss-clamp {
  129. mss 1412
  130. }
  131. }
  132. receive-redirects disable
  133. send-redirects enable
  134. source-validation disable
  135. syn-cookies enable
  136. }
  137. interfaces {
  138. bridge br0 {
  139. aging 300
  140. bridged-conntrack disable
  141. description "br0 - Telefonie"
  142. hello-time 2
  143. max-age 20
  144. priority 32768
  145. promiscuous disable
  146. stp false
  147. }
  148. ethernet eth0 {
  149. address dhcp
  150. description "eth0 - NTU"
  151. dhcp-options {
  152. default-route update
  153. default-route-distance 210
  154. name-server update
  155. }
  156. duplex auto
  157. speed auto
  158. vif 4 {
  159. address dhcp
  160. description IPTV
  161. dhcp-options {
  162. client-option "send vendor-class-identifier "IPTV_RG";"
  163. client-option "request subnet-mask, routers, rfc3442-classless-static-routes;"
  164. default-route no-update
  165. default-route-distance 254
  166. name-server update
  167. }
  168. }
  169. vif 6 {
  170. description "VLAN 0.6 - Internet"
  171. firewall {
  172. in {
  173. name WAN_IN
  174. }
  175. }
  176. mtu 1500
  177. pppoe 0 {
  178. default-route auto
  179. firewall {
  180. in {
  181. }
  182. }
  183. mtu 1492
  184. name-server auto
  185. password kpn
  186. user-id mac@internet
  187. }
  188. }
  189. vif 7 {
  190. bridge-group {
  191. bridge br0
  192. }
  193. description "VLAN 0.7 - Telefonie"
  194. mtu 1500
  195. }
  196. }
  197. ethernet eth1 {
  198. address dhcp
  199. description LAN-Default
  200. duplex auto
  201. firewall {
  202. in {
  203. name LAN_IN
  204. }
  205. }
  206. speed auto
  207. vif 100 {
  208. address 192.168.*.*/24
  209. description "VLAN 100"
  210. firewall {
  211. in {
  212. name LAN_IN
  213. }
  214. }
  215. }
  216. vif 118 {
  217. address 10.*.*.*/24
  218. description DMZ
  219. mtu 1500
  220. }
  221. vif 119 {
  222. address 192.168.*.*/24
  223. description VLAN 119
  224. firewall {
  225. in {
  226. name LAN_IN
  227. }
  228. }
  229. }
  230. }
  231. ethernet eth2 {
  232. description "Experiabox V10"
  233. duplex auto
  234. speed auto
  235. vif 7 {
  236. bridge-group {
  237. bridge br0
  238. }
  239. description TELEFOON
  240. disable
  241. mtu 1500
  242. }
  243. }
  244. loopback lo {
  245. }
  246. }
  247. port-forward {
  248. auto-firewall enable
  249. hairpin-nat enable
  250. lan-interface eth1.100
  251. lan-interface eth1.119
  252. wan-interface pppoe0
  253. }
  254. protocols {
  255. igmp-proxy {
  256. interface eth0.4 {
  257. alt-subnet 10.142.64.0/28
  258. alt-subnet 213.75.112.0/21
  259. role upstream
  260. threshold 1
  261. }
  262. interface eth1.119 {
  263. role downstream
  264. threshold 1
  265. }
  266. }
  267. static {
  268. route 213.75.112.0/21 {
  269. next-hop 10.166.128.1 {
  270. }
  271. }
  272. }
  273. }
  274. service {
  275. dhcp-server {
  276. disabled false
  277. hostfile-update disable
  278. shared-network-name VLAN100 {
  279. authoritative disable
  280. subnet 192.168.*.*/24 {
  281. default-router 192.168.*.*
  282. dns-server 192.168.*.*
  283. lease 60
  284. start 192.168.*.100 {
  285. stop 192.168.*.199
  286. }
  287. }
  288. }
  289. shared-network-name DMZ {
  290. authoritative disable
  291. subnet 10.*.*.*/24 {
  292. default-router 10.*.*.254
  293. dns-server 10.*.*.254
  294. lease 86400
  295. start 10.*.*.* {
  296. stop 10.*.*.*
  297. }
  298. }
  299. }
  300. shared-network-name HRGast-Experiabox {
  301. authoritative disable
  302. subnet 192.168.140.0/24 {
  303. default-router 192.168.140.1
  304. dns-server 192.168.140.1
  305. lease 86400
  306. start 192.168.140.100 {
  307. stop 192.168.140.199
  308. }
  309. }
  310. }
  311. }
  312. dns {
  313. forwarding {
  314. cache-size 150
  315. listen-on eth1
  316. listen-on eth2
  317. listen-on eth1.119
  318. listen-on eth1.118
  319. listen-on eth1.100
  320. }
  321. }
  322. gui {
  323. https-port 8443
  324. }
  325. snmp {
  326. community public {
  327. authorization ro
  328. }
  329. }
  330. ssh {
  331. listen-address 192.168.*.*
  332. port 22
  333. protocol-version v2
  334. }
  335. }
  336. system {
  337. domain-name *.msgeek.nl
  338. host-name firewall
  339. login {
  340. user thevmaster {
  341. authentication {
  342. encrypted-password *****
  343. plaintext-password ""
  344. }
  345. full-name "The VMaster"
  346. level admin
  347. }
  348. }
  349. name-server 8.8.8.8
  350. ntp {
  351. server 0.ubnt.pool.ntp.org {
  352. }
  353. server 1.ubnt.pool.ntp.org {
  354. }
  355. server 2.ubnt.pool.ntp.org {
  356. }
  357. server 3.ubnt.pool.ntp.org {
  358. }
  359. }
  360. offload {
  361. ipv4 {
  362. pppoe enable
  363. vlan enable
  364. }
  365. ipv6 {
  366. forwarding enable
  367. vlan enable
  368. }
  369. }
  370. syslog {
  371. global {
  372. facility all {
  373. level notice
  374. }
  375. facility protocols {
  376. level debug
  377. }
  378. }
  379. }
  380. time-zone UTC
  381. traffic-analysis {
  382. dpi enable
  383. export enable
  384. }
  385. }
  386.  
  387.  
  388. /* Warning: Do not remove the following line. */
  389. /* === vyatta-config-version: "config-management@1:conntrack@1:cron@1:dhcp-relay@1:dhcp-server@4:firewall@5:ipsec@4:nat@3:qos@1:quagga@2:system@4:ubnt-pptp@1:ubnt-util@1:vrrp@1:webgui@1:webproxy@1:zone-policy@1" === */
  390. /* Release version: v1.7.0.4783374.150622.1534 */
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!