API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 23rd, 2014
190
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.90 KB | None | 0 0
raw download clone embed print report
  1. / ip address
  2. add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=LAN
  3. add address=192.168.2.10/24 network=10.111.0.0 broadcast=10.111.0.255 interface=ISP1
  4. add address=10.112.0.2/24 network=10.112.0.0 broadcast=10.112.0.255 interface=ISP2
  5.  
  6. / ip firewall mangle
  7. add chain=prerouting dst-address=10.111.0.0/24 action=accept in-interface=LAN
  8. add chain=prerouting dst-address=10.112.0.0/24 action=accept in-interface=LAN
  9. add chain=prerouting in-interface=ISP1 connection-mark=no-mark action=mark-connection \
  10. new-connection-mark=ISP1_conn
  11. add chain=prerouting in-interface=ISP2 connection-mark=no-mark action=mark-connection \
  12. new-connection-mark=ISP2_conn
  13. add chain=prerouting in-interface=LAN connection-mark=no-mark dst-address-type=!local \
  14. per-connection-classifier=both-addresses:2/0 action=mark-connection new-connection-mark=ISP1_conn
  15. add chain=prerouting in-interface=LAN connection-mark=no-mark dst-address-type=!local \
  16. per-connection-classifier=both-addresses:2/1 action=mark-connection new-connection-mark=ISP2_conn
  17. add chain=prerouting connection-mark=ISP1_conn in-interface=LAN action=mark-routing \
  18. new-routing-mark=to_ISP1
  19. add chain=prerouting connection-mark=ISP2_conn in-interface=LAN action=mark-routing \
  20. new-routing-mark=to_ISP2
  21. add chain=output connection-mark=ISP1_conn action=mark-routing new-routing-mark=to_ISP1
  22. add chain=output connection-mark=ISP2_conn action=mark-routing new-routing-mark=to_ISP2
  23.  
  24. / ip route
  25. add dst-address=0.0.0.0/0 gateway=10.111.0.1 routing-mark=to_ISP1 check-gateway=ping
  26. add dst-address=0.0.0.0/0 gateway=10.112.0.1 routing-mark=to_ISP2 check-gateway=ping
  27. add dst-address=0.0.0.0/0 gateway=10.111.0.1 distance=1 check-gateway=ping
  28. add dst-address=0.0.0.0/0 gateway=10.112.0.1 distance=2 check-gateway=ping
  29.  
  30. / ip firewall nat
  31. add chain=srcnat out-interface=ISP1 action=masquerade
  32. add chain=srcnat out-interface=ISP2 action=masquerade
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!