API tools faq
paste
Advertisement
Guest User

Configuration Orange pour Edgerouter POE

a guest
Feb 22nd, 2016
477
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.90 KB | None | 0 0
raw download clone embed print report
  1. firewall {
  2. all-ping enable
  3. broadcast-ping disable
  4. ipv6-receive-redirects disable
  5. ipv6-src-route disable
  6. ip-src-route disable
  7. log-martians enable
  8. name WAN_IN {
  9. default-action drop
  10. description "WAN to internal"
  11. enable-default-log
  12. rule 10 {
  13. action accept
  14. description "Allow established/related"
  15. log disable
  16. protocol all
  17. state {
  18. established enable
  19. invalid disable
  20. new disable
  21. related enable
  22. }
  23. }
  24. rule 20 {
  25. action drop
  26. description "Drop invalid state"
  27. log disable
  28. protocol all
  29. state {
  30. established disable
  31. invalid enable
  32. new disable
  33. related disable
  34. }
  35. }
  36. }
  37. name WAN_LOCAL {
  38. default-action drop
  39. description "WAN to router"
  40. rule 10 {
  41. action accept
  42. description "Allow established/related"
  43. state {
  44. established enable
  45. related enable
  46. }
  47. }
  48. rule 11 {
  49. action drop
  50. description "Drop invalid state"
  51. state {
  52. invalid enable
  53. }
  54. }
  55. }
  56. options {
  57. mss-clamp {
  58. interface-type pppoe
  59. interface-type tun
  60. interface-type pptp
  61. mss 1452
  62. }
  63. }
  64. receive-redirects disable
  65. send-redirects enable
  66. source-validation disable
  67. syn-cookies enable
  68. }
  69. interfaces {
  70. bridge br0 {
  71. address dhcp
  72. aging 300
  73. bridged-conntrack disable
  74. description "Orange WAN Video"
  75. dhcp-options {
  76. client-option "send vendor-class-identifier "sagem";"
  77. client-option "send user-class "\047FSVDSL_livebox.MLTV.softathome.Livebox3";"
  78. client-option "request subnet-mask, routers, rfc3442-classless-static-routes;"
  79. client-option "send dhcp-client-identifier 1:[00:00:00:00:00:00];"
  80. default-route update
  81. default-route-distance 210
  82. name-server update
  83. }
  84. hello-time 2
  85. max-age 20
  86. priority 0
  87. promiscuous disable
  88. stp false
  89. }
  90. ethernet eth0 {
  91. description "ONT Orange"
  92. duplex auto
  93. poe {
  94. output off
  95. }
  96. speed auto
  97. vif 835 {
  98. description "Orange Internet"
  99. pppoe 0 {
  100. default-route force
  101. firewall {
  102. in {
  103. name WAN_IN
  104. }
  105. local {
  106. name WAN_LOCAL
  107. }
  108. }
  109. mtu 1492
  110. name-server auto
  111. password [user_orange]
  112. user-id [mdp_orange]
  113. }
  114. }
  115. vif 838 {
  116. bridge-group {
  117. bridge br0
  118. }
  119. description "Orange IPTV"
  120. egress-qos "0:4 1:4 2:4 3:4 4:4 5:4 6:4 7:4"
  121. }
  122. vif 839 {
  123. bridge-group {
  124. bridge br0
  125. }
  126. description "Orange TV Zapping"
  127. disable
  128. }
  129. vif 840 {
  130. bridge-group {
  131. bridge br0
  132. }
  133. description "Orange IPTV Multicast"
  134. egress-qos "0:5 1:5 2:5 3:5 4:5 5:5 6:5 7:5"
  135. }
  136. vif 841 {
  137. bridge-group {
  138. bridge br0
  139. }
  140. description "Orange VOD"
  141. disable
  142. }
  143. vif 851 {
  144. address dhcp
  145. description "Orange VOIP"
  146. dhcp-options {
  147. client-option "send vendor-class-identifier "FT_VoIP_Sagem_Boxer_160v1.0";"
  148. default-route update
  149. default-route-distance 210
  150. name-server update
  151. }
  152. egress-qos "0:6 1:6 2:6 3:6 4:6 5:6 6:6 7:6"
  153. }
  154. }
  155. ethernet eth1 {
  156. address 192.168.100.1/24
  157. description N/A
  158. duplex auto
  159. poe {
  160. output off
  161. }
  162. speed auto
  163. }
  164. ethernet eth2 {
  165. description "Local Bridge"
  166. duplex auto
  167. poe {
  168. output off
  169. }
  170. speed auto
  171. }
  172. ethernet eth3 {
  173. description "Local Bridge"
  174. duplex auto
  175. poe {
  176. output off
  177. }
  178. speed auto
  179. }
  180. ethernet eth4 {
  181. description "Local Bridge"
  182. duplex auto
  183. poe {
  184. output off
  185. }
  186. speed auto
  187. }
  188. loopback lo {
  189. }
  190. openvpn vtun0 {
  191. description OpenVPN
  192. encryption aes128
  193. local-port 1194
  194. mode server
  195. openvpn-option --comp-lzo
  196. protocol udp
  197. server {
  198. domain-name [domaine .net]
  199. name-server 192.168.1.1
  200. name-server 192.168.1.2
  201. push-route 192.168.1.0/24
  202. push-route 192.168.2.0/24
  203. subnet 192.168.2.0/24
  204. topology subnet
  205. }
  206. tls {
  207. ca-cert-file /config/auth/openvpn/keys/ca_.crt
  208. cert-file /config/auth/openvpn/keys/openvpn_.crt
  209. dh-file /config/auth/openvpn/keys/dh2048_.crt
  210. key-file /config/auth/openvpn/keys/openvpn_.key
  211. }
  212. }
  213. switch switch0 {
  214. address 192.168.1.99/24
  215. description "Local Bridge"
  216. mtu 1500
  217. switch-port {
  218. interface eth2
  219. interface eth3
  220. interface eth4
  221. }
  222. }
  223. }
  224. port-forward {
  225. auto-firewall enable
  226. hairpin-nat disable
  227. lan-interface switch0
  228. wan-interface pppoe0
  229. }
  230. protocols {
  231. igmp-proxy {
  232. interface br0 {
  233. alt-subnet 0.0.0.0/0
  234. role upstream
  235. threshold 1
  236. }
  237. interface eth1 {
  238. alt-subnet 0.0.0.0/0
  239. role downstream
  240. threshold 1
  241. }
  242. interface switch0 {
  243. role disabled
  244. threshold 1
  245. }
  246. }
  247. }
  248. service {
  249. dhcp-server {
  250. disabled false
  251. dynamic-dns-update {
  252. enable true
  253. }
  254. global-parameters "ddns-domainname "[domaine .net].";"
  255. global-parameters "ddns-rev-domainname "in-addr.arpa.";"
  256. global-parameters "update-static-leases on;"
  257. global-parameters "zone [domaine .net]. { primary 192.168.1.1; secondary 192.168.1.2; }"
  258. global-parameters "zone 1.168.192.in-addr.arpa. { primary 192.168.1.1; secondary 192.168.1.2; }"
  259. global-parameters "use-host-decl-names on;"
  260. hostfile-update disable
  261. shared-network-name Orange-IPTV {
  262. authoritative enable
  263. subnet 192.168.100.0/24 {
  264. default-router 192.168.100.1
  265. dns-server 80.10.246.2
  266. dns-server 80.10.246.129
  267. lease 86400
  268. ntp-server 192.168.100.1
  269. start 192.168.100.10 {
  270. stop 192.168.100.50
  271. }
  272. }
  273. }
  274. shared-network-name [domaine .net] {
  275. authoritative enable
  276. subnet 192.168.1.0/24 {
  277. bootfile-name /pxelinux.0
  278. bootfile-server 192.168.1.1
  279. default-router 192.168.1.1
  280. dns-server 192.168.1.1
  281. dns-server 192.168.1.2
  282. domain-name [domaine .net]
  283. lease 86400
  284. ntp-server 192.168.1.1
  285. start 192.168.1.100 {
  286. stop 192.168.1.199
  287. }
  288. }
  289. }
  290. }
  291. dns {
  292. dynamic {
  293. interface pppoe0 {
  294. service dyndns {
  295. host-name [domaine .net chez ovh]
  296. login [login_ddns]
  297. password [password_ddns]
  298. server www.ovh.com
  299. }
  300. web dyndns
  301. }
  302. }
  303. }
  304. gui {
  305. https-port 443
  306. }
  307. mdns {
  308. reflector
  309. }
  310. nat {
  311. rule 5010 {
  312. description "masquerade for WAN"
  313. log disable
  314. outbound-interface pppoe0
  315. protocol all
  316. type masquerade
  317. }
  318. rule 5011 {
  319. description "masquerade Orange IPTV"
  320. log disable
  321. outbound-interface br0
  322. protocol all
  323. type masquerade
  324. }
  325. rule 5012 {
  326. description "masquerade for Orange VOIP"
  327. disable
  328. log disable
  329. outbound-interface eth0.851
  330. protocol all
  331. type masquerade
  332. }
  333. }
  334. snmp {
  335. community [domaine .net] {
  336. authorization ro
  337. }
  338. contact "Contact SNMP"
  339. location "Tableau electrique "
  340. }
  341. ssh {
  342. port 22
  343. protocol-version v2
  344. }
  345. upnp2 {
  346. listen-on switch0
  347. listen-on eth1
  348. nat-pmp enable
  349. secure-mode disable
  350. wan pppoe0
  351. }
  352. }
  353. system {
  354. domain-name [domaine .net]
  355. host-name [hostname]
  356. login {
  357. user ubnt {
  358. authentication {
  359. encrypted-password [pwd encrypté]
  360. plaintext-password ""
  361. }
  362. full-name ""
  363. level admin
  364. }
  365. }
  366. name-server 192.168.1.1
  367. name-server 192.168.1.2
  368. ntp {
  369. server 0.ubnt.pool.ntp.org {
  370. }
  371. server 1.ubnt.pool.ntp.org {
  372. }
  373. server 2.ubnt.pool.ntp.org {
  374. }
  375. server 3.ubnt.pool.ntp.org {
  376. }
  377. }
  378. offload {
  379. ipv4 {
  380. forwarding enable
  381. pppoe enable
  382. vlan enable
  383. }
  384. }
  385. package {
  386. repository wheezy {
  387. components "main contrib non-free"
  388. distribution wheezy
  389. password ""
  390. url http://http.us.debian.org/debian
  391. username ""
  392. }
  393. repository wheezy-security {
  394. components main
  395. distribution wheezy/updates
  396. password ""
  397. url http://security.debian.org
  398. username ""
  399. }
  400. }
  401. syslog {
  402. global {
  403. facility all {
  404. level notice
  405. }
  406. facility protocols {
  407. level debug
  408. }
  409. }
  410. }
  411. task-scheduler {
  412. task wanIpChange {
  413. executable {
  414. path /config/scripts/wanIpChange.sh
  415. }
  416. interval 2m
  417. }
  418. }
  419. time-zone Europe/Paris
  420. traffic-analysis {
  421. dpi enable
  422. export enable
  423. }
  424. }
  425. vpn {
  426. pptp {
  427. remote-access {
  428. authentication {
  429. local-users {
  430. username [user_vpn] {
  431. password [pwd_vpn]
  432. }
  433. }
  434. mode local
  435. }
  436. client-ip-pool {
  437. start 192.168.99.200
  438. stop 192.168.99.220
  439. }
  440. dns-servers {
  441. server-1 192.168.1.1
  442. server-2 192.168.1.2
  443. }
  444. mtu 1492
  445. }
  446. }
  447. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!