API tools faq
paste
Guest User

Untitled

a guest
Jul 21st, 2018
401
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 8.46 KB | None | 0 0
raw download clone embed print report
  1. firewall {
  2. all-ping enable
  3. broadcast-ping disable
  4. ipv6-receive-redirects disable
  5. ipv6-src-route disable
  6. ip-src-route disable
  7. log-martians enable
  8. name WAN_IN {
  9. default-action drop
  10. description "packets from Internet to LAN"
  11. enable-default-log
  12. rule 1 {
  13. action accept
  14. description "allow established sessions"
  15. log disable
  16. protocol all
  17. state {
  18. established enable
  19. invalid disable
  20. new disable
  21. related enable
  22. }
  23. }
  24. rule 2 {
  25. action drop
  26. description "drop invalid state"
  27. log disable
  28. protocol all
  29. state {
  30. established disable
  31. invalid enable
  32. new disable
  33. related disable
  34. }
  35. }
  36. }
  37. name WAN_LOCAL {
  38. default-action drop
  39. description "packets from Internet to the router"
  40. rule 1 {
  41. action accept
  42. description "allow established session to the router"
  43. log disable
  44. protocol all
  45. state {
  46. established enable
  47. invalid disable
  48. new disable
  49. related enable
  50. }
  51. }
  52. rule 2 {
  53. action drop
  54. description "drop invalid state"
  55. log disable
  56. protocol all
  57. state {
  58. established disable
  59. invalid enable
  60. new disable
  61. related disable
  62. }
  63. }
  64. }
  65. options {
  66. mss-clamp {
  67. interface-type pppoe
  68. interface-type pptp
  69. interface-type tun
  70. mss 1452
  71. }
  72. }
  73. receive-redirects disable
  74. send-redirects enable
  75. source-validation disable
  76. syn-cookies enable
  77. }
  78. interfaces {
  79. ethernet eth0 {
  80. address 192.168.1.1/24
  81. description LAN_ETH0
  82. duplex auto
  83. speed auto
  84. }
  85. ethernet eth1 {
  86. description ISP
  87. duplex auto
  88. speed auto
  89. vif 835 {
  90. address dhcp
  91. description ISP_DATA
  92. dhcp-options {
  93. client-option "send vendor-class-identifier "sagem";"
  94. client-option "send user-class "\047FSVDSL_livebox.MLTV.softathome.Livebox3";"
  95. client-option "request subnet-mask, routers, rfc3442-classless-static-routes;"
  96. default-route update
  97. default-route-distance 210
  98. name-server update
  99. }
  100. egress-qos "0:0 1:0 2:0 3:0 4:0 5:0 6:6 7:0"
  101. pppoe 0 {
  102. default-route auto
  103. firewall {
  104. in {
  105. name WAN_IN
  106. }
  107. local {
  108. name WAN_LOCAL
  109. }
  110. }
  111. mtu 1492
  112. name-server auto
  113. password XXXX
  114. user-id fti/XXXX
  115. }
  116. }
  117. vif 838 {
  118. address dhcp
  119. description ISP_TV_VOD
  120. dhcp-options {
  121. client-option "send vendor-class-identifier "sagem";"
  122. client-option "send dhcp-client-identifier 1:XXXXXXXXXXXX;"
  123. client-option "send user-class "\047FSVDSL_livebox.MLTV.softathome.Livebox3";"
  124. client-option "request subnet-mask, routers, rfc3442-classless-static-routes;"
  125. default-route no-update
  126. default-route-distance 210
  127. name-server update
  128. }
  129. egress-qos "0:4 1:4 2:4 3:4 4:4 5:4 6:4 7:4"
  130. }
  131. vif 840 {
  132. address 192.168.255.254/32
  133. description ISP_TV_STREAM
  134. egress-qos "0:5 1:5 2:5 3:5 4:5 5:5 6:5 7:5"
  135. }
  136. }
  137. ethernet eth2 {
  138. address 192.168.2.1/24
  139. description LAN_ETH2
  140. duplex auto
  141. speed auto
  142. }
  143. loopback lo {
  144. }
  145. }
  146. protocols {
  147. igmp-proxy {
  148. disable-quickleave
  149. interface eth0 {
  150. role disabled
  151. threshold 1
  152. }
  153. interface eth1 {
  154. role disabled
  155. threshold 1
  156. }
  157. interface eth1.835 {
  158. role disabled
  159. threshold 1
  160. }
  161. interface eth1.838 {
  162. role disabled
  163. threshold 1
  164. }
  165. interface eth1.840 {
  166. alt-subnet 0.0.0.0/0
  167. role upstream
  168. threshold 1
  169. }
  170. interface eth2 {
  171. alt-subnet 0.0.0.0/0
  172. role downstream
  173. threshold 1
  174. }
  175. }
  176. }
  177. service {
  178. dhcp-server {
  179. disabled false
  180. hostfile-update disable
  181. shared-network-name LAN_ETH0 {
  182. authoritative disable
  183. subnet 192.168.1.0/24 {
  184. default-router 192.168.1.1
  185. dns-server 192.168.1.1
  186. lease 86400
  187. start 192.168.1.2 {
  188. stop 192.168.1.99
  189. }
  190. }
  191. }
  192. shared-network-name LAN_ETH2 {
  193. authoritative enable
  194. subnet 192.168.2.0/24 {
  195. default-router 192.168.2.1
  196. dns-server 192.168.2.1
  197. lease 86400
  198. start 192.168.2.21 {
  199. stop 192.168.2.200
  200. }
  201. }
  202. }
  203. static-arp disable
  204. use-dnsmasq disable
  205. }
  206. dns {
  207. forwarding {
  208. cache-size 1000
  209. listen-on eth2
  210. listen-on eth0
  211. name-server 80.10.246.3
  212. name-server 81.253.149.10
  213. }
  214. }
  215. gui {
  216. http-port 80
  217. https-port 443
  218. older-ciphers enable
  219. }
  220. mdns {
  221. reflector
  222. }
  223. nat {
  224. rule 5010 {
  225. description "MASQ: WAN"
  226. log disable
  227. outbound-interface pppoe0
  228. protocol all
  229. type masquerade
  230. }
  231. rule 5011 {
  232. description "MASQ: ORANGE"
  233. log disable
  234. outbound-interface eth1.838
  235. protocol all
  236. type masquerade
  237. }
  238. }
  239. ssh {
  240. port 22
  241. protocol-version v2
  242. }
  243. upnp2 {
  244. listen-on eth0
  245. nat-pmp enable
  246. port 34651
  247. secure-mode disable
  248. wan pppoe0
  249. }
  250. }
  251. system {
  252. config-management {
  253. commit-revisions 50
  254. }
  255. host-name ubnt
  256. login {
  257. user ubnt {
  258. authentication {
  259. encrypted-password $1$zKNoUbAo$gomzUbYvgyUMcD436Wo66.
  260. }
  261. level admin
  262. }
  263. }
  264. name-server 8.8.8.8
  265. name-server 8.8.4.4
  266. ntp {
  267. server 0.ubnt.pool.ntp.org {
  268. }
  269. server 1.ubnt.pool.ntp.org {
  270. }
  271. server 2.ubnt.pool.ntp.org {
  272. }
  273. server 3.ubnt.pool.ntp.org {
  274. }
  275. }
  276. offload {
  277. hwnat disable
  278. ipsec enable
  279. ipv4 {
  280. forwarding enable
  281. gre enable
  282. pppoe enable
  283. vlan enable
  284. }
  285. ipv6 {
  286. forwarding enable
  287. pppoe enable
  288. }
  289. }
  290. package {
  291. repository wheezy {
  292. components "main contrib non-free"
  293. distribution wheezy
  294. password ""
  295. url http://http.us.debian.org/debian
  296. username ""
  297. }
  298. repository wheezy-security {
  299. components main
  300. distribution wheezy/updates
  301. password ""
  302. url http://security.debian.org
  303. username ""
  304. }
  305. }
  306. syslog {
  307. global {
  308. facility all {
  309. level notice
  310. }
  311. facility protocols {
  312. level warning
  313. }
  314. }
  315. }
  316. time-zone Europe/Paris
  317. }
  318.  
  319.  
  320. /* Warning: Do not remove the following line. */
  321. /* === vyatta-config-version: "config-management@1:conntrack@1:cron@1:dhcp-relay@1:dhcp-server@4:firewall@5:ipsec@5:nat@3:qos@1:quagga@2:system@4:ubnt-pptp@1:ubnt-udapi-server@1:ubnt-unms@1:ubnt-util@1:vrrp@1:webgui@1:webproxy@1:zone-policy@1" === */
  322. /* Release version: v1.10.5.5098915.180622.1355 */
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!