Guest User

Untitled

a guest
Jul 14th, 2017
2,421
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 121.11 KB | None | 0 0
  1. # jul/14/2017 23:10:41 by RouterOS 6.39.2
  2. # software id = V97L-DG5D
  3. #
  4. /interface bridge
  5. add admin-mac=4C:5E:0C:BC:AA:DD auto-mac=no fast-forward=no mtu=1500 name=\
  6. Gateway_Bridge1
  7. add name=VoiceVLAN_Bridge
  8. /interface ethernet
  9. set [ find default-name=ether1 ] name=ether1-ATT_GatewayRouter
  10. set [ find default-name=ether4 ] name=ether4-KinderhookAdmin_Fiber
  11. set [ find default-name=ether6 ] name=ether6-SwitchStack_CS1 rx-flow-control=\
  12. auto tx-flow-control=auto
  13. set [ find default-name=ether7 ] name=ether7-PBX-Eth2
  14. set [ find default-name=ether8 ] name=ether8-DirecTV_Network_WAN
  15. set [ find default-name=ether12 ] name=ether12-Oxi_Eth1
  16. set [ find default-name=ether13 ] name=ether13-OperaServer_Eth1
  17. /interface vlan
  18. add interface=ether6-SwitchStack_CS1 name=vlan100-StaffNetwork vlan-id=100
  19. add interface=ether6-SwitchStack_CS1 name=vlan101-DirecTV_LANSide vlan-id=101
  20. add disabled=yes interface=Gateway_Bridge1 name=vlan102-ResortPhoneSystem \
  21. vlan-id=102
  22. add interface=ether6-SwitchStack_CS1 name=vlan200-MiscDevices_Network \
  23. vlan-id=200
  24. add interface=ether6-SwitchStack_CS1 name=vlan300-Guest_Network vlan-id=300
  25. add interface=ether6-SwitchStack_CS1 name=vlan400-LobbyGuest_Network vlan-id=\
  26. 400
  27. add interface=ether7-PBX-Eth2 name=vlan500-PBX_VoiceVLAN vlan-id=500
  28. add interface=ether6-SwitchStack_CS1 name=vlan500-VoiceVLAN vlan-id=500
  29. /ip firewall layer7-protocol
  30. add name=skypetoskype regexp="^..\\x02............."
  31. add name=video_http regexp="http/(0\\.9|1\\.0|1\\.1)[\\x20][1-5][0-9][0-9].*[\
  32. \\x09-\\x0d].*[\\x09-\\x0d]content-type:.video/"
  33. /ip hotspot profile
  34. add dns-name=getontheinternet.com hotspot-address=172.31.0.1 \
  35. http-cookie-lifetime=1d name=hsprof1
  36. /ip ipsec proposal
  37. set [ find default=yes ] enc-algorithms=aes-128-cbc
  38. /ip pool
  39. add name=StaffNetwork_Pool ranges=192.168.72.2-192.168.72.200
  40. add name=MiscNetwork_Pool ranges=10.168.75.150-10.168.75.251
  41. add name=Guest_Network_Pool ranges=172.31.1.1-172.31.2.254
  42. add name=CoreNetwork_Pool ranges=10.168.50.25-10.168.50.200
  43. add name=VoIPNetwork_Pool ranges=10.168.51.15-10.168.51.254
  44. add name=GuestLobbyNetwork_Pool ranges=172.30.0.2-172.30.0.254
  45. /ip dhcp-server
  46. add address-pool=StaffNetwork_Pool authoritative=after-2sec-delay disabled=no \
  47. interface=vlan100-StaffNetwork lease-time=3d name=dhcp2-StaffNetwork
  48. add address-pool=MiscNetwork_Pool authoritative=after-2sec-delay disabled=no \
  49. interface=vlan200-MiscDevices_Network lease-time=3d name=\
  50. dhcp1-MiscNetwork
  51. add address-pool=Guest_Network_Pool authoritative=after-2sec-delay disabled=\
  52. no interface=vlan300-Guest_Network lease-time=1d name=dhcp3-Guest_Network
  53. add address-pool=CoreNetwork_Pool authoritative=after-2sec-delay disabled=no \
  54. interface=ether6-SwitchStack_CS1 lease-time=1w name=dhcp3-CoreNetwork
  55. # DHCP server can not run on slave interface!
  56. add address-pool=VoIPNetwork_Pool authoritative=after-2sec-delay disabled=no \
  57. interface=vlan500-VoiceVLAN lease-time=1w name=dhcp2-VoIPNetwork
  58. add address-pool=GuestLobbyNetwork_Pool authoritative=after-2sec-delay \
  59. disabled=no interface=vlan400-LobbyGuest_Network lease-time=3d name=dhcp1
  60. /ip hotspot
  61. add address-pool=Guest_Network_Pool addresses-per-mac=3 disabled=no \
  62. idle-timeout=3h interface=vlan300-Guest_Network name=hotspot1 profile=\
  63. hsprof1
  64. /ip hotspot user profile
  65. set [ find default=yes ] address-pool=Guest_Network_Pool keepalive-timeout=3h \
  66. mac-cookie-timeout=1d name=7M/7M rate-limit=7M/7M shared-users=99999
  67. /ppp profile
  68. add change-tcp-mss=yes local-address=10.255.255.255 name=profile1 \
  69. remote-address=192.168.10.253 use-compression=yes use-encryption=yes \
  70. use-mpls=no
  71. /queue simple
  72. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  73. 5M/5M name=172.30.0.2 target=172.30.0.2/32
  74. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  75. 5M/5M name=172.30.0.3 target=172.30.0.3/32
  76. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  77. 5M/5M name=172.30.0.4 target=172.30.0.4/32
  78. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  79. 5M/5M name=172.30.0.5 target=172.30.0.5/32
  80. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  81. 5M/5M name=172.30.0.6 target=172.30.0.6/32
  82. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  83. 5M/5M name=172.30.0.7 target=172.30.0.7/32
  84. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  85. 5M/5M name=172.30.0.8 target=172.30.0.8/32
  86. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  87. 5M/5M name=172.30.0.9 target=172.30.0.9/32
  88. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  89. 5M/5M name=172.30.0.10 target=172.30.0.10/32
  90. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  91. 5M/5M name=172.30.0.11 target=172.30.0.11/32
  92. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  93. 5M/5M name=172.30.0.12 target=172.30.0.12/32
  94. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  95. 5M/5M name=172.30.0.13 target=172.30.0.13/32
  96. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  97. 5M/5M name=172.30.0.14 target=172.30.0.14/32
  98. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  99. 5M/5M name=172.30.0.15 target=172.30.0.15/32
  100. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  101. 5M/5M name=172.30.0.16 target=172.30.0.16/32
  102. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  103. 5M/5M name=172.30.0.17 target=172.30.0.17/32
  104. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  105. 5M/5M name=172.30.0.18 target=172.30.0.18/32
  106. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  107. 5M/5M name=172.30.0.19 target=172.30.0.19/32
  108. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  109. 5M/5M name=172.30.0.20 target=172.30.0.20/32
  110. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  111. 5M/5M name=172.30.0.21 target=172.30.0.21/32
  112. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  113. 5M/5M name=172.30.0.22 target=172.30.0.22/32
  114. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  115. 5M/5M name=172.30.0.23 target=172.30.0.23/32
  116. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  117. 5M/5M name=172.30.0.24 target=172.30.0.24/32
  118. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  119. 5M/5M name=172.30.0.25 target=172.30.0.25/32
  120. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  121. 5M/5M name=172.30.0.26 target=172.30.0.26/32
  122. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  123. 5M/5M name=172.30.0.27 target=172.30.0.27/32
  124. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  125. 5M/5M name=172.30.0.28 target=172.30.0.28/32
  126. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  127. 5M/5M name=172.30.0.29 target=172.30.0.29/32
  128. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  129. 5M/5M name=172.30.0.30 target=172.30.0.30/32
  130. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  131. 5M/5M name=172.30.0.31 target=172.30.0.31/32
  132. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  133. 5M/5M name=172.30.0.32 target=172.30.0.32/32
  134. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  135. 5M/5M name=172.30.0.33 target=172.30.0.33/32
  136. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  137. 5M/5M name=172.30.0.34 target=172.30.0.34/32
  138. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  139. 5M/5M name=172.30.0.35 target=172.30.0.35/32
  140. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  141. 5M/5M name=172.30.0.36 target=172.30.0.36/32
  142. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  143. 5M/5M name=172.30.0.37 target=172.30.0.37/32
  144. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  145. 5M/5M name=172.30.0.38 target=172.30.0.38/32
  146. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  147. 5M/5M name=172.30.0.39 target=172.30.0.39/32
  148. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  149. 5M/5M name=172.30.0.40 target=172.30.0.40/32
  150. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  151. 5M/5M name=172.30.0.41 target=172.30.0.41/32
  152. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  153. 5M/5M name=172.30.0.42 target=172.30.0.42/32
  154. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  155. 5M/5M name=172.30.0.43 target=172.30.0.43/32
  156. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  157. 5M/5M name=172.30.0.44 target=172.30.0.44/32
  158. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  159. 5M/5M name=172.30.0.45 target=172.30.0.45/32
  160. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  161. 5M/5M name=172.30.0.46 target=172.30.0.46/32
  162. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  163. 5M/5M name=172.30.0.47 target=172.30.0.47/32
  164. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  165. 5M/5M name=172.30.0.48 target=172.30.0.48/32
  166. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  167. 5M/5M name=172.30.0.49 target=172.30.0.49/32
  168. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  169. 5M/5M name=172.30.0.50 target=172.30.0.50/32
  170. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  171. 5M/5M name=172.30.0.51 target=172.30.0.51/32
  172. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  173. 5M/5M name=172.30.0.52 target=172.30.0.52/32
  174. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  175. 5M/5M name=172.30.0.53 target=172.30.0.53/32
  176. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  177. 5M/5M name=172.30.0.54 target=172.30.0.54/32
  178. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  179. 5M/5M name=172.30.0.55 target=172.30.0.55/32
  180. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  181. 5M/5M name=172.30.0.56 target=172.30.0.56/32
  182. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  183. 5M/5M name=172.30.0.57 target=172.30.0.57/32
  184. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  185. 5M/5M name=172.30.0.58 target=172.30.0.58/32
  186. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  187. 5M/5M name=172.30.0.59 target=172.30.0.59/32
  188. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  189. 5M/5M name=172.30.0.60 target=172.30.0.60/32
  190. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  191. 5M/5M name=172.30.0.61 target=172.30.0.61/32
  192. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  193. 5M/5M name=172.30.0.62 target=172.30.0.62/32
  194. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  195. 5M/5M name=172.30.0.63 target=172.30.0.63/32
  196. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  197. 5M/5M name=172.30.0.64 target=172.30.0.64/32
  198. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  199. 5M/5M name=172.30.0.65 target=172.30.0.65/32
  200. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  201. 5M/5M name=172.30.0.66 target=172.30.0.66/32
  202. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  203. 5M/5M name=172.30.0.67 target=172.30.0.67/32
  204. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  205. 5M/5M name=172.30.0.68 target=172.30.0.68/32
  206. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  207. 5M/5M name=172.30.0.69 target=172.30.0.69/32
  208. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  209. 5M/5M name=172.30.0.70 target=172.30.0.70/32
  210. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  211. 5M/5M name=172.30.0.71 target=172.30.0.71/32
  212. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  213. 5M/5M name=172.30.0.72 target=172.30.0.72/32
  214. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  215. 5M/5M name=172.30.0.73 target=172.30.0.73/32
  216. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  217. 5M/5M name=172.30.0.74 target=172.30.0.74/32
  218. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  219. 5M/5M name=172.30.0.75 target=172.30.0.75/32
  220. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  221. 5M/5M name=172.30.0.76 target=172.30.0.76/32
  222. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  223. 5M/5M name=172.30.0.77 target=172.30.0.77/32
  224. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  225. 5M/5M name=172.30.0.78 target=172.30.0.78/32
  226. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  227. 5M/5M name=172.30.0.79 target=172.30.0.79/32
  228. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  229. 5M/5M name=172.30.0.80 target=172.30.0.80/32
  230. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  231. 5M/5M name=172.30.0.81 target=172.30.0.81/32
  232. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  233. 5M/5M name=172.30.0.82 target=172.30.0.82/32
  234. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  235. 5M/5M name=172.30.0.83 target=172.30.0.83/32
  236. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  237. 5M/5M name=172.30.0.84 target=172.30.0.84/32
  238. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  239. 5M/5M name=172.30.0.85 target=172.30.0.85/32
  240. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  241. 5M/5M name=172.30.0.86 target=172.30.0.86/32
  242. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  243. 5M/5M name=172.30.0.87 target=172.30.0.87/32
  244. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  245. 5M/5M name=172.30.0.88 target=172.30.0.88/32
  246. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  247. 5M/5M name=172.30.0.89 target=172.30.0.89/32
  248. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  249. 5M/5M name=172.30.0.90 target=172.30.0.90/32
  250. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  251. 5M/5M name=172.30.0.91 target=172.30.0.91/32
  252. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  253. 5M/5M name=172.30.0.92 target=172.30.0.92/32
  254. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  255. 5M/5M name=172.30.0.93 target=172.30.0.93/32
  256. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  257. 5M/5M name=172.30.0.94 target=172.30.0.94/32
  258. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  259. 5M/5M name=172.30.0.95 target=172.30.0.95/32
  260. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  261. 5M/5M name=172.30.0.96 target=172.30.0.96/32
  262. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  263. 5M/5M name=172.30.0.97 target=172.30.0.97/32
  264. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  265. 5M/5M name=172.30.0.98 target=172.30.0.98/32
  266. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  267. 5M/5M name=172.30.0.99 target=172.30.0.99/32
  268. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  269. 5M/5M name=172.30.0.100 target=172.30.0.100/32
  270. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  271. 5M/5M name=172.30.0.101 target=172.30.0.101/32
  272. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  273. 5M/5M name=172.30.0.102 target=172.30.0.102/32
  274. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  275. 5M/5M name=172.30.0.103 target=172.30.0.103/32
  276. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  277. 5M/5M name=172.30.0.104 target=172.30.0.104/32
  278. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  279. 5M/5M name=172.30.0.105 target=172.30.0.105/32
  280. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  281. 5M/5M name=172.30.0.106 target=172.30.0.106/32
  282. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  283. 5M/5M name=172.30.0.107 target=172.30.0.107/32
  284. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  285. 5M/5M name=172.30.0.108 target=172.30.0.108/32
  286. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  287. 5M/5M name=172.30.0.109 target=172.30.0.109/32
  288. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  289. 5M/5M name=172.30.0.110 target=172.30.0.110/32
  290. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  291. 5M/5M name=172.30.0.111 target=172.30.0.111/32
  292. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  293. 5M/5M name=172.30.0.112 target=172.30.0.112/32
  294. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  295. 5M/5M name=172.30.0.113 target=172.30.0.113/32
  296. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  297. 5M/5M name=172.30.0.114 target=172.30.0.114/32
  298. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  299. 5M/5M name=172.30.0.115 target=172.30.0.115/32
  300. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  301. 5M/5M name=172.30.0.116 target=172.30.0.116/32
  302. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  303. 5M/5M name=172.30.0.117 target=172.30.0.117/32
  304. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  305. 5M/5M name=172.30.0.118 target=172.30.0.118/32
  306. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  307. 5M/5M name=172.30.0.119 target=172.30.0.119/32
  308. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  309. 5M/5M name=172.30.0.120 target=172.30.0.120/32
  310. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  311. 5M/5M name=172.30.0.121 target=172.30.0.121/32
  312. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  313. 5M/5M name=172.30.0.122 target=172.30.0.122/32
  314. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  315. 5M/5M name=172.30.0.123 target=172.30.0.123/32
  316. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  317. 5M/5M name=172.30.0.124 target=172.30.0.124/32
  318. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  319. 5M/5M name=172.30.0.125 target=172.30.0.125/32
  320. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  321. 5M/5M name=172.30.0.126 target=172.30.0.126/32
  322. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  323. 5M/5M name=172.30.0.127 target=172.30.0.127/32
  324. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  325. 5M/5M name=172.30.0.128 target=172.30.0.128/32
  326. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  327. 5M/5M name=172.30.0.129 target=172.30.0.129/32
  328. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  329. 5M/5M name=172.30.0.130 target=172.30.0.130/32
  330. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  331. 5M/5M name=172.30.0.131 target=172.30.0.131/32
  332. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  333. 5M/5M name=172.30.0.132 target=172.30.0.132/32
  334. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  335. 5M/5M name=172.30.0.133 target=172.30.0.133/32
  336. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  337. 5M/5M name=172.30.0.134 target=172.30.0.134/32
  338. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  339. 5M/5M name=172.30.0.135 target=172.30.0.135/32
  340. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  341. 5M/5M name=172.30.0.136 target=172.30.0.136/32
  342. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  343. 5M/5M name=172.30.0.137 target=172.30.0.137/32
  344. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  345. 5M/5M name=172.30.0.138 target=172.30.0.138/32
  346. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  347. 5M/5M name=172.30.0.139 target=172.30.0.139/32
  348. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  349. 5M/5M name=172.30.0.140 target=172.30.0.140/32
  350. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  351. 5M/5M name=172.30.0.141 target=172.30.0.141/32
  352. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  353. 5M/5M name=172.30.0.142 target=172.30.0.142/32
  354. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  355. 5M/5M name=172.30.0.143 target=172.30.0.143/32
  356. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  357. 5M/5M name=172.30.0.144 target=172.30.0.144/32
  358. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  359. 5M/5M name=172.30.0.145 target=172.30.0.145/32
  360. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  361. 5M/5M name=172.30.0.146 target=172.30.0.146/32
  362. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  363. 5M/5M name=172.30.0.147 target=172.30.0.147/32
  364. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  365. 5M/5M name=172.30.0.148 target=172.30.0.148/32
  366. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  367. 5M/5M name=172.30.0.149 target=172.30.0.149/32
  368. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  369. 5M/5M name=172.30.0.150 target=172.30.0.150/32
  370. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  371. 5M/5M name=172.30.0.151 target=172.30.0.151/32
  372. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  373. 5M/5M name=172.30.0.152 target=172.30.0.152/32
  374. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  375. 5M/5M name=172.30.0.153 target=172.30.0.153/32
  376. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  377. 5M/5M name=172.30.0.154 target=172.30.0.154/32
  378. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  379. 5M/5M name=172.30.0.155 target=172.30.0.155/32
  380. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  381. 5M/5M name=172.30.0.156 target=172.30.0.156/32
  382. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  383. 5M/5M name=172.30.0.157 target=172.30.0.157/32
  384. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  385. 5M/5M name=172.30.0.158 target=172.30.0.158/32
  386. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  387. 5M/5M name=172.30.0.159 target=172.30.0.159/32
  388. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  389. 5M/5M name=172.30.0.160 target=172.30.0.160/32
  390. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  391. 5M/5M name=172.30.0.161 target=172.30.0.161/32
  392. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  393. 5M/5M name=172.30.0.162 target=172.30.0.162/32
  394. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  395. 5M/5M name=172.30.0.163 target=172.30.0.163/32
  396. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  397. 5M/5M name=172.30.0.164 target=172.30.0.164/32
  398. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  399. 5M/5M name=172.30.0.165 target=172.30.0.165/32
  400. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  401. 5M/5M name=172.30.0.166 target=172.30.0.166/32
  402. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  403. 5M/5M name=172.30.0.167 target=172.30.0.167/32
  404. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  405. 5M/5M name=172.30.0.168 target=172.30.0.168/32
  406. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  407. 5M/5M name=172.30.0.169 target=172.30.0.169/32
  408. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  409. 5M/5M name=172.30.0.170 target=172.30.0.170/32
  410. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  411. 5M/5M name=172.30.0.171 target=172.30.0.171/32
  412. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  413. 5M/5M name=172.30.0.172 target=172.30.0.172/32
  414. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  415. 5M/5M name=172.30.0.173 target=172.30.0.173/32
  416. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  417. 5M/5M name=172.30.0.174 target=172.30.0.174/32
  418. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  419. 5M/5M name=172.30.0.175 target=172.30.0.175/32
  420. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  421. 5M/5M name=172.30.0.176 target=172.30.0.176/32
  422. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  423. 5M/5M name=172.30.0.177 target=172.30.0.177/32
  424. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  425. 5M/5M name=172.30.0.178 target=172.30.0.178/32
  426. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  427. 5M/5M name=172.30.0.179 target=172.30.0.179/32
  428. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  429. 5M/5M name=172.30.0.180 target=172.30.0.180/32
  430. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  431. 5M/5M name=172.30.0.181 target=172.30.0.181/32
  432. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  433. 5M/5M name=172.30.0.182 target=172.30.0.182/32
  434. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  435. 5M/5M name=172.30.0.183 target=172.30.0.183/32
  436. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  437. 5M/5M name=172.30.0.184 target=172.30.0.184/32
  438. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  439. 5M/5M name=172.30.0.185 target=172.30.0.185/32
  440. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  441. 5M/5M name=172.30.0.186 target=172.30.0.186/32
  442. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  443. 5M/5M name=172.30.0.187 target=172.30.0.187/32
  444. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  445. 5M/5M name=172.30.0.188 target=172.30.0.188/32
  446. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  447. 5M/5M name=172.30.0.189 target=172.30.0.189/32
  448. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  449. 5M/5M name=172.30.0.190 target=172.30.0.190/32
  450. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  451. 5M/5M name=172.30.0.191 target=172.30.0.191/32
  452. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  453. 5M/5M name=172.30.0.192 target=172.30.0.192/32
  454. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  455. 5M/5M name=172.30.0.193 target=172.30.0.193/32
  456. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  457. 5M/5M name=172.30.0.194 target=172.30.0.194/32
  458. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  459. 5M/5M name=172.30.0.195 target=172.30.0.195/32
  460. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  461. 5M/5M name=172.30.0.196 target=172.30.0.196/32
  462. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  463. 5M/5M name=172.30.0.197 target=172.30.0.197/32
  464. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  465. 5M/5M name=172.30.0.198 target=172.30.0.198/32
  466. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  467. 5M/5M name=172.30.0.199 target=172.30.0.199/32
  468. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  469. 5M/5M name=172.30.0.200 target=172.30.0.200/32
  470. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  471. 5M/5M name=172.30.0.201 target=172.30.0.201/32
  472. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  473. 5M/5M name=172.30.0.202 target=172.30.0.202/32
  474. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  475. 5M/5M name=172.30.0.203 target=172.30.0.203/32
  476. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  477. 5M/5M name=172.30.0.204 target=172.30.0.204/32
  478. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  479. 5M/5M name=172.30.0.205 target=172.30.0.205/32
  480. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  481. 5M/5M name=172.30.0.206 target=172.30.0.206/32
  482. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  483. 5M/5M name=172.30.0.207 target=172.30.0.207/32
  484. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  485. 5M/5M name=172.30.0.208 target=172.30.0.208/32
  486. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  487. 5M/5M name=172.30.0.209 target=172.30.0.209/32
  488. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  489. 5M/5M name=172.30.0.210 target=172.30.0.210/32
  490. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  491. 5M/5M name=172.30.0.211 target=172.30.0.211/32
  492. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  493. 5M/5M name=172.30.0.212 target=172.30.0.212/32
  494. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  495. 5M/5M name=172.30.0.213 target=172.30.0.213/32
  496. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  497. 5M/5M name=172.30.0.214 target=172.30.0.214/32
  498. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  499. 5M/5M name=172.30.0.215 target=172.30.0.215/32
  500. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  501. 5M/5M name=172.30.0.216 target=172.30.0.216/32
  502. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  503. 5M/5M name=172.30.0.217 target=172.30.0.217/32
  504. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  505. 5M/5M name=172.30.0.218 target=172.30.0.218/32
  506. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  507. 5M/5M name=172.30.0.219 target=172.30.0.219/32
  508. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  509. 5M/5M name=172.30.0.220 target=172.30.0.220/32
  510. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  511. 5M/5M name=172.30.0.221 target=172.30.0.221/32
  512. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  513. 5M/5M name=172.30.0.222 target=172.30.0.222/32
  514. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  515. 5M/5M name=172.30.0.223 target=172.30.0.223/32
  516. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  517. 5M/5M name=172.30.0.224 target=172.30.0.224/32
  518. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  519. 5M/5M name=172.30.0.225 target=172.30.0.225/32
  520. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  521. 5M/5M name=172.30.0.226 target=172.30.0.226/32
  522. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  523. 5M/5M name=172.30.0.227 target=172.30.0.227/32
  524. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  525. 5M/5M name=172.30.0.228 target=172.30.0.228/32
  526. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  527. 5M/5M name=172.30.0.229 target=172.30.0.229/32
  528. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  529. 5M/5M name=172.30.0.230 target=172.30.0.230/32
  530. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  531. 5M/5M name=172.30.0.231 target=172.30.0.231/32
  532. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  533. 5M/5M name=172.30.0.232 target=172.30.0.232/32
  534. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  535. 5M/5M name=172.30.0.233 target=172.30.0.233/32
  536. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  537. 5M/5M name=172.30.0.234 target=172.30.0.234/32
  538. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  539. 5M/5M name=172.30.0.235 target=172.30.0.235/32
  540. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  541. 5M/5M name=172.30.0.236 target=172.30.0.236/32
  542. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  543. 5M/5M name=172.30.0.237 target=172.30.0.237/32
  544. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  545. 5M/5M name=172.30.0.238 target=172.30.0.238/32
  546. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  547. 5M/5M name=172.30.0.239 target=172.30.0.239/32
  548. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  549. 5M/5M name=172.30.0.240 target=172.30.0.240/32
  550. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  551. 5M/5M name=172.30.0.241 target=172.30.0.241/32
  552. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  553. 5M/5M name=172.30.0.242 target=172.30.0.242/32
  554. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  555. 5M/5M name=172.30.0.243 target=172.30.0.243/32
  556. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  557. 5M/5M name=172.30.0.244 target=172.30.0.244/32
  558. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  559. 5M/5M name=172.30.0.245 target=172.30.0.245/32
  560. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  561. 5M/5M name=172.30.0.246 target=172.30.0.246/32
  562. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  563. 5M/5M name=172.30.0.247 target=172.30.0.247/32
  564. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  565. 5M/5M name=172.30.0.248 target=172.30.0.248/32
  566. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  567. 5M/5M name=172.30.0.249 target=172.30.0.249/32
  568. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  569. 5M/5M name=172.30.0.250 target=172.30.0.250/32
  570. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  571. 5M/5M name=172.30.0.251 target=172.30.0.251/32
  572. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  573. 5M/5M name=172.30.0.252 target=172.30.0.252/32
  574. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  575. 5M/5M name=172.30.0.253 target=172.30.0.253/32
  576. add burst-limit=6M/6M burst-threshold=5M/5M burst-time=20s/20s max-limit=\
  577. 5M/5M name=172.30.0.254 target=172.30.0.254/32
  578. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  579. 7M/7M name=192.168.72.2 target=192.168.72.2/32
  580. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  581. 7M/7M name=192.168.72.3 target=192.168.72.3/32
  582. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  583. 7M/7M name=192.168.72.4 target=192.168.72.4/32
  584. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  585. 7M/7M name=192.168.72.5 target=192.168.72.5/32
  586. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  587. 7M/7M name=192.168.72.6 target=192.168.72.6/32
  588. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  589. 7M/7M name=192.168.72.7 target=192.168.72.7/32
  590. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  591. 7M/7M name=192.168.72.8 target=192.168.72.8/32
  592. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  593. 7M/7M name=192.168.72.9 target=192.168.72.9/32
  594. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  595. 7M/7M name=192.168.72.10 target=192.168.72.10/32
  596. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  597. 7M/7M name=192.168.72.11 target=192.168.72.11/32
  598. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  599. 7M/7M name=192.168.72.12 target=192.168.72.12/32
  600. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  601. 7M/7M name=192.168.72.13 target=192.168.72.13/32
  602. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  603. 7M/7M name=192.168.72.14 target=192.168.72.14/32
  604. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  605. 7M/7M name=192.168.72.15 target=192.168.72.15/32
  606. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  607. 7M/7M name=192.168.72.16 target=192.168.72.16/32
  608. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  609. 7M/7M name=192.168.72.17 target=192.168.72.17/32
  610. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  611. 7M/7M name=192.168.72.18 target=192.168.72.18/32
  612. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  613. 7M/7M name=192.168.72.19 target=192.168.72.19/32
  614. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  615. 7M/7M name=192.168.72.20 target=192.168.72.20/32
  616. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  617. 7M/7M name=192.168.72.21 target=192.168.72.21/32
  618. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  619. 7M/7M name=192.168.72.22 target=192.168.72.22/32
  620. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  621. 7M/7M name=192.168.72.23 target=192.168.72.23/32
  622. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  623. 7M/7M name=192.168.72.24 target=192.168.72.24/32
  624. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  625. 7M/7M name=192.168.72.25 target=192.168.72.25/32
  626. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  627. 7M/7M name=192.168.72.26 target=192.168.72.26/32
  628. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  629. 7M/7M name=192.168.72.27 target=192.168.72.27/32
  630. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  631. 7M/7M name=192.168.72.28 target=192.168.72.28/32
  632. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  633. 7M/7M name=192.168.72.29 target=192.168.72.29/32
  634. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  635. 7M/7M name=192.168.72.30 target=192.168.72.30/32
  636. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  637. 7M/7M name=192.168.72.31 target=192.168.72.31/32
  638. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  639. 7M/7M name=192.168.72.32 target=192.168.72.32/32
  640. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  641. 7M/7M name=192.168.72.33 target=192.168.72.33/32
  642. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  643. 7M/7M name=192.168.72.34 target=192.168.72.34/32
  644. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  645. 7M/7M name=192.168.72.35 target=192.168.72.35/32
  646. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  647. 7M/7M name=192.168.72.36 target=192.168.72.36/32
  648. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  649. 7M/7M name=192.168.72.37 target=192.168.72.37/32
  650. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  651. 7M/7M name=192.168.72.38 target=192.168.72.38/32
  652. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  653. 7M/7M name=192.168.72.39 target=192.168.72.39/32
  654. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  655. 7M/7M name=192.168.72.40 target=192.168.72.40/32
  656. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  657. 7M/7M name=192.168.72.41 target=192.168.72.41/32
  658. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  659. 7M/7M name=192.168.72.42 target=192.168.72.42/32
  660. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  661. 7M/7M name=192.168.72.43 target=192.168.72.43/32
  662. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  663. 7M/7M name=192.168.72.44 target=192.168.72.44/32
  664. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  665. 7M/7M name=192.168.72.45 target=192.168.72.45/32
  666. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  667. 7M/7M name=192.168.72.46 target=192.168.72.46/32
  668. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  669. 7M/7M name=192.168.72.47 target=192.168.72.47/32
  670. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  671. 7M/7M name=192.168.72.48 target=192.168.72.48/32
  672. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  673. 7M/7M name=192.168.72.49 target=192.168.72.49/32
  674. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  675. 7M/7M name=192.168.72.50 target=192.168.72.50/32
  676. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  677. 7M/7M name=192.168.72.51 target=192.168.72.51/32
  678. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  679. 7M/7M name=192.168.72.52 target=192.168.72.52/32
  680. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  681. 7M/7M name=192.168.72.53 target=192.168.72.53/32
  682. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  683. 7M/7M name=192.168.72.54 target=192.168.72.54/32
  684. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  685. 7M/7M name=192.168.72.55 target=192.168.72.55/32
  686. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  687. 7M/7M name=192.168.72.56 target=192.168.72.56/32
  688. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  689. 7M/7M name=192.168.72.57 target=192.168.72.57/32
  690. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  691. 7M/7M name=192.168.72.58 target=192.168.72.58/32
  692. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  693. 7M/7M name=192.168.72.59 target=192.168.72.59/32
  694. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  695. 7M/7M name=192.168.72.60 target=192.168.72.60/32
  696. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  697. 7M/7M name=192.168.72.61 target=192.168.72.61/32
  698. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  699. 7M/7M name=192.168.72.62 target=192.168.72.62/32
  700. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  701. 7M/7M name=192.168.72.63 target=192.168.72.63/32
  702. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  703. 7M/7M name=192.168.72.64 target=192.168.72.64/32
  704. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  705. 7M/7M name=192.168.72.65 target=192.168.72.65/32
  706. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  707. 7M/7M name=192.168.72.66 target=192.168.72.66/32
  708. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  709. 7M/7M name=192.168.72.67 target=192.168.72.67/32
  710. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  711. 7M/7M name=192.168.72.68 target=192.168.72.68/32
  712. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  713. 7M/7M name=192.168.72.69 target=192.168.72.69/32
  714. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  715. 7M/7M name=192.168.72.70 target=192.168.72.70/32
  716. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  717. 7M/7M name=192.168.72.71 target=192.168.72.71/32
  718. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  719. 7M/7M name=192.168.72.72 target=192.168.72.72/32
  720. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  721. 7M/7M name=192.168.72.73 target=192.168.72.73/32
  722. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  723. 7M/7M name=192.168.72.74 target=192.168.72.74/32
  724. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  725. 7M/7M name=192.168.72.75 target=192.168.72.75/32
  726. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  727. 7M/7M name=192.168.72.76 target=192.168.72.76/32
  728. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  729. 7M/7M name=192.168.72.77 target=192.168.72.77/32
  730. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  731. 7M/7M name=192.168.72.78 target=192.168.72.78/32
  732. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  733. 7M/7M name=192.168.72.79 target=192.168.72.79/32
  734. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  735. 7M/7M name=192.168.72.80 target=192.168.72.80/32
  736. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  737. 7M/7M name=192.168.72.81 target=192.168.72.81/32
  738. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  739. 7M/7M name=192.168.72.82 target=192.168.72.82/32
  740. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  741. 7M/7M name=192.168.72.83 target=192.168.72.83/32
  742. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  743. 7M/7M name=192.168.72.84 target=192.168.72.84/32
  744. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  745. 7M/7M name=192.168.72.85 target=192.168.72.85/32
  746. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  747. 7M/7M name=192.168.72.86 target=192.168.72.86/32
  748. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  749. 7M/7M name=192.168.72.87 target=192.168.72.87/32
  750. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  751. 7M/7M name=192.168.72.88 target=192.168.72.88/32
  752. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  753. 7M/7M name=192.168.72.89 target=192.168.72.89/32
  754. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  755. 7M/7M name=192.168.72.90 target=192.168.72.90/32
  756. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  757. 7M/7M name=192.168.72.91 target=192.168.72.91/32
  758. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  759. 7M/7M name=192.168.72.92 target=192.168.72.92/32
  760. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  761. 7M/7M name=192.168.72.93 target=192.168.72.93/32
  762. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  763. 7M/7M name=192.168.72.94 target=192.168.72.94/32
  764. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  765. 7M/7M name=192.168.72.95 target=192.168.72.95/32
  766. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  767. 7M/7M name=192.168.72.96 target=192.168.72.96/32
  768. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  769. 7M/7M name=192.168.72.97 target=192.168.72.97/32
  770. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  771. 7M/7M name=192.168.72.98 target=192.168.72.98/32
  772. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  773. 7M/7M name=192.168.72.99 target=192.168.72.99/32
  774. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  775. 7M/7M name=192.168.72.100 target=192.168.72.100/32
  776. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  777. 7M/7M name=192.168.72.101 target=192.168.72.101/32
  778. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  779. 7M/7M name=192.168.72.102 target=192.168.72.102/32
  780. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  781. 7M/7M name=192.168.72.103 target=192.168.72.103/32
  782. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  783. 7M/7M name=192.168.72.104 target=192.168.72.104/32
  784. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  785. 7M/7M name=192.168.72.105 target=192.168.72.105/32
  786. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  787. 7M/7M name=192.168.72.106 target=192.168.72.106/32
  788. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  789. 7M/7M name=192.168.72.107 target=192.168.72.107/32
  790. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  791. 7M/7M name=192.168.72.108 target=192.168.72.108/32
  792. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  793. 7M/7M name=192.168.72.109 target=192.168.72.109/32
  794. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  795. 7M/7M name=192.168.72.110 target=192.168.72.110/32
  796. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  797. 7M/7M name=192.168.72.111 target=192.168.72.111/32
  798. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  799. 7M/7M name=192.168.72.112 target=192.168.72.112/32
  800. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  801. 7M/7M name=192.168.72.113 target=192.168.72.113/32
  802. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  803. 7M/7M name=192.168.72.114 target=192.168.72.114/32
  804. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  805. 7M/7M name=192.168.72.115 target=192.168.72.115/32
  806. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  807. 7M/7M name=192.168.72.116 target=192.168.72.116/32
  808. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  809. 7M/7M name=192.168.72.117 target=192.168.72.117/32
  810. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  811. 7M/7M name=192.168.72.118 target=192.168.72.118/32
  812. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  813. 7M/7M name=192.168.72.119 target=192.168.72.119/32
  814. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  815. 7M/7M name=192.168.72.120 target=192.168.72.120/32
  816. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  817. 7M/7M name=192.168.72.121 target=192.168.72.121/32
  818. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  819. 7M/7M name=192.168.72.122 target=192.168.72.122/32
  820. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  821. 7M/7M name=192.168.72.123 target=192.168.72.123/32
  822. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  823. 7M/7M name=192.168.72.124 target=192.168.72.124/32
  824. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  825. 7M/7M name=192.168.72.125 target=192.168.72.125/32
  826. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  827. 7M/7M name=192.168.72.126 target=192.168.72.126/32
  828. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  829. 7M/7M name=192.168.72.127 target=192.168.72.127/32
  830. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  831. 7M/7M name=192.168.72.128 target=192.168.72.128/32
  832. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  833. 7M/7M name=192.168.72.129 target=192.168.72.129/32
  834. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  835. 7M/7M name=192.168.72.130 target=192.168.72.130/32
  836. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  837. 7M/7M name=192.168.72.131 target=192.168.72.131/32
  838. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  839. 7M/7M name=192.168.72.132 target=192.168.72.132/32
  840. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  841. 7M/7M name=192.168.72.133 target=192.168.72.133/32
  842. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  843. 7M/7M name=192.168.72.134 target=192.168.72.134/32
  844. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  845. 7M/7M name=192.168.72.135 target=192.168.72.135/32
  846. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  847. 7M/7M name=192.168.72.136 target=192.168.72.136/32
  848. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  849. 7M/7M name=192.168.72.137 target=192.168.72.137/32
  850. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  851. 7M/7M name=192.168.72.138 target=192.168.72.138/32
  852. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  853. 7M/7M name=192.168.72.139 target=192.168.72.139/32
  854. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  855. 7M/7M name=192.168.72.140 target=192.168.72.140/32
  856. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  857. 7M/7M name=192.168.72.141 target=192.168.72.141/32
  858. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  859. 7M/7M name=192.168.72.142 target=192.168.72.142/32
  860. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  861. 7M/7M name=192.168.72.143 target=192.168.72.143/32
  862. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  863. 7M/7M name=192.168.72.144 target=192.168.72.144/32
  864. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  865. 7M/7M name=192.168.72.145 target=192.168.72.145/32
  866. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  867. 7M/7M name=192.168.72.146 target=192.168.72.146/32
  868. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  869. 7M/7M name=192.168.72.147 target=192.168.72.147/32
  870. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  871. 7M/7M name=192.168.72.148 target=192.168.72.148/32
  872. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  873. 7M/7M name=192.168.72.149 target=192.168.72.149/32
  874. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  875. 7M/7M name=192.168.72.150 target=192.168.72.150/32
  876. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  877. 7M/7M name=192.168.72.151 target=192.168.72.151/32
  878. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  879. 7M/7M name=192.168.72.152 target=192.168.72.152/32
  880. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  881. 7M/7M name=192.168.72.153 target=192.168.72.153/32
  882. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  883. 7M/7M name=192.168.72.154 target=192.168.72.154/32
  884. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  885. 7M/7M name=192.168.72.155 target=192.168.72.155/32
  886. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  887. 7M/7M name=192.168.72.156 target=192.168.72.156/32
  888. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  889. 7M/7M name=192.168.72.157 target=192.168.72.157/32
  890. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  891. 7M/7M name=192.168.72.158 target=192.168.72.158/32
  892. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  893. 7M/7M name=192.168.72.159 target=192.168.72.159/32
  894. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  895. 7M/7M name=192.168.72.160 target=192.168.72.160/32
  896. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  897. 7M/7M name=192.168.72.161 target=192.168.72.161/32
  898. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  899. 7M/7M name=192.168.72.162 target=192.168.72.162/32
  900. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  901. 7M/7M name=192.168.72.163 target=192.168.72.163/32
  902. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  903. 7M/7M name=192.168.72.164 target=192.168.72.164/32
  904. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  905. 7M/7M name=192.168.72.165 target=192.168.72.165/32
  906. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  907. 7M/7M name=192.168.72.166 target=192.168.72.166/32
  908. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  909. 7M/7M name=192.168.72.167 target=192.168.72.167/32
  910. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  911. 7M/7M name=192.168.72.168 target=192.168.72.168/32
  912. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  913. 7M/7M name=192.168.72.169 target=192.168.72.169/32
  914. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  915. 7M/7M name=192.168.72.170 target=192.168.72.170/32
  916. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  917. 7M/7M name=192.168.72.171 target=192.168.72.171/32
  918. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  919. 7M/7M name=192.168.72.172 target=192.168.72.172/32
  920. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  921. 7M/7M name=192.168.72.173 target=192.168.72.173/32
  922. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  923. 7M/7M name=192.168.72.174 target=192.168.72.174/32
  924. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  925. 7M/7M name=192.168.72.175 target=192.168.72.175/32
  926. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  927. 7M/7M name=192.168.72.176 target=192.168.72.176/32
  928. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  929. 7M/7M name=192.168.72.177 target=192.168.72.177/32
  930. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  931. 7M/7M name=192.168.72.178 target=192.168.72.178/32
  932. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  933. 7M/7M name=192.168.72.179 target=192.168.72.179/32
  934. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  935. 7M/7M name=192.168.72.180 target=192.168.72.180/32
  936. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  937. 7M/7M name=192.168.72.181 target=192.168.72.181/32
  938. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  939. 7M/7M name=192.168.72.182 target=192.168.72.182/32
  940. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  941. 7M/7M name=192.168.72.183 target=192.168.72.183/32
  942. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  943. 7M/7M name=192.168.72.184 target=192.168.72.184/32
  944. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  945. 7M/7M name=192.168.72.185 target=192.168.72.185/32
  946. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  947. 7M/7M name=192.168.72.186 target=192.168.72.186/32
  948. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  949. 7M/7M name=192.168.72.187 target=192.168.72.187/32
  950. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  951. 7M/7M name=192.168.72.188 target=192.168.72.188/32
  952. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  953. 7M/7M name=192.168.72.189 target=192.168.72.189/32
  954. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  955. 7M/7M name=192.168.72.190 target=192.168.72.190/32
  956. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  957. 7M/7M name=192.168.72.191 target=192.168.72.191/32
  958. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  959. 7M/7M name=192.168.72.192 target=192.168.72.192/32
  960. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  961. 7M/7M name=192.168.72.193 target=192.168.72.193/32
  962. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  963. 7M/7M name=192.168.72.194 target=192.168.72.194/32
  964. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  965. 7M/7M name=192.168.72.195 target=192.168.72.195/32
  966. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  967. 7M/7M name=192.168.72.196 target=192.168.72.196/32
  968. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  969. 7M/7M name=192.168.72.197 target=192.168.72.197/32
  970. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  971. 7M/7M name=192.168.72.198 target=192.168.72.198/32
  972. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  973. 7M/7M name=192.168.72.199 target=192.168.72.199/32
  974. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  975. 7M/7M name=192.168.72.200 target=192.168.72.200/32
  976. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  977. 7M/7M name=192.168.72.201 target=192.168.72.201/32
  978. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  979. 7M/7M name=192.168.72.202 target=192.168.72.202/32
  980. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  981. 7M/7M name=192.168.72.203 target=192.168.72.203/32
  982. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  983. 7M/7M name=192.168.72.204 target=192.168.72.204/32
  984. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  985. 7M/7M name=192.168.72.205 target=192.168.72.205/32
  986. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  987. 7M/7M name=192.168.72.206 target=192.168.72.206/32
  988. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  989. 7M/7M name=192.168.72.207 target=192.168.72.207/32
  990. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  991. 7M/7M name=192.168.72.208 target=192.168.72.208/32
  992. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  993. 7M/7M name=192.168.72.209 target=192.168.72.209/32
  994. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  995. 7M/7M name=192.168.72.210 target=192.168.72.210/32
  996. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  997. 7M/7M name=192.168.72.211 target=192.168.72.211/32
  998. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  999. 7M/7M name=192.168.72.212 target=192.168.72.212/32
  1000. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1001. 7M/7M name=192.168.72.213 target=192.168.72.213/32
  1002. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1003. 7M/7M name=192.168.72.214 target=192.168.72.214/32
  1004. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1005. 7M/7M name=192.168.72.215 target=192.168.72.215/32
  1006. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1007. 7M/7M name=192.168.72.216 target=192.168.72.216/32
  1008. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1009. 7M/7M name=192.168.72.217 target=192.168.72.217/32
  1010. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1011. 7M/7M name=192.168.72.218 target=192.168.72.218/32
  1012. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1013. 7M/7M name=192.168.72.219 target=192.168.72.219/32
  1014. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1015. 7M/7M name=192.168.72.220 target=192.168.72.220/32
  1016. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1017. 7M/7M name=192.168.72.221 target=192.168.72.221/32
  1018. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1019. 7M/7M name=192.168.72.222 target=192.168.72.222/32
  1020. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1021. 7M/7M name=192.168.72.223 target=192.168.72.223/32
  1022. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1023. 7M/7M name=192.168.72.224 target=192.168.72.224/32
  1024. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1025. 7M/7M name=192.168.72.225 target=192.168.72.225/32
  1026. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1027. 7M/7M name=192.168.72.226 target=192.168.72.226/32
  1028. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1029. 7M/7M name=192.168.72.227 target=192.168.72.227/32
  1030. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1031. 7M/7M name=192.168.72.228 target=192.168.72.228/32
  1032. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1033. 7M/7M name=192.168.72.229 target=192.168.72.229/32
  1034. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1035. 7M/7M name=192.168.72.230 target=192.168.72.230/32
  1036. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1037. 7M/7M name=192.168.72.231 target=192.168.72.231/32
  1038. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1039. 7M/7M name=192.168.72.232 target=192.168.72.232/32
  1040. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1041. 7M/7M name=192.168.72.233 target=192.168.72.233/32
  1042. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1043. 7M/7M name=192.168.72.234 target=192.168.72.234/32
  1044. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1045. 7M/7M name=192.168.72.235 target=192.168.72.235/32
  1046. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1047. 7M/7M name=192.168.72.236 target=192.168.72.236/32
  1048. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1049. 7M/7M name=192.168.72.237 target=192.168.72.237/32
  1050. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1051. 7M/7M name=192.168.72.238 target=192.168.72.238/32
  1052. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1053. 7M/7M name=192.168.72.239 target=192.168.72.239/32
  1054. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1055. 7M/7M name=192.168.72.240 target=192.168.72.240/32
  1056. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1057. 7M/7M name=192.168.72.241 target=192.168.72.241/32
  1058. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1059. 7M/7M name=192.168.72.242 target=192.168.72.242/32
  1060. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1061. 7M/7M name=192.168.72.243 target=192.168.72.243/32
  1062. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1063. 7M/7M name=192.168.72.244 target=192.168.72.244/32
  1064. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1065. 7M/7M name=192.168.72.245 target=192.168.72.245/32
  1066. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1067. 7M/7M name=192.168.72.246 target=192.168.72.246/32
  1068. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1069. 7M/7M name=192.168.72.247 target=192.168.72.247/32
  1070. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1071. 7M/7M name=192.168.72.248 target=192.168.72.248/32
  1072. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1073. 7M/7M name=192.168.72.249 target=192.168.72.249/32
  1074. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1075. 7M/7M name=192.168.72.250 target=192.168.72.250/32
  1076. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1077. 7M/7M name=192.168.72.251 target=192.168.72.251/32
  1078. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1079. 7M/7M name=192.168.72.252 target=192.168.72.252/32
  1080. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1081. 7M/7M name=192.168.72.253 target=192.168.72.253/32
  1082. add burst-limit=10M/10M burst-threshold=7M/7M burst-time=20s/20s max-limit=\
  1083. 7M/7M name=192.168.72.254 target=192.168.72.254/32
  1084. add max-limit=5M/5M name=queue1TMP target=172.31.1.166/32
  1085. /queue type
  1086. add kind=red name=Download red-avg-packet=450 red-limit=350 \
  1087. red-max-threshold=340
  1088. add kind=red name=Upload red-avg-packet=450 red-limit=350 red-max-threshold=\
  1089. 340
  1090. add kind=pcq name=Video_down pcq-classifier=dst-address pcq-rate=5M
  1091. set 12 kind=sfq
  1092. /queue tree
  1093. add max-limit=90M name=Download parent=global priority=1 queue=Download
  1094. add max-limit=90M name=Upload parent=global priority=1 queue=Upload
  1095. add limit-at=60M max-limit=90M name=DN_Interactive parent=Download priority=1 \
  1096. queue=Download
  1097. add limit-at=45M max-limit=90M name=DN_NonInteractive parent=Download \
  1098. priority=1 queue=Download
  1099. add limit-at=60M max-limit=90M name=Upload_interactive parent=Upload \
  1100. priority=1 queue=Upload
  1101. add limit-at=45M max-limit=90M name=Upload_noninteractive parent=Upload \
  1102. priority=1
  1103. add name=down_p1_interactive packet-mark=dn_p1_interactive parent=\
  1104. DN_Interactive priority=1 queue=Download
  1105. add name=down_p2_interactive packet-mark=dn_p2_interactive parent=\
  1106. DN_Interactive priority=2 queue=Download
  1107. add name=down_p3_interactive packet-mark=dn_p3_interactive parent=\
  1108. DN_Interactive priority=3 queue=Download
  1109. add name=down_p4_interactive packet-mark=dn_p4_interactive parent=\
  1110. DN_Interactive priority=4 queue=Download
  1111. add name=down_p5_interactive packet-mark=dn_p5_interactive parent=\
  1112. DN_Interactive priority=5 queue=Download
  1113. add name=down_p6_interactive packet-mark=dn_p6_interactive parent=\
  1114. DN_Interactive priority=6 queue=Download
  1115. add name=down_p7_interactive packet-mark=dn_p7_interactive parent=\
  1116. DN_Interactive priority=7 queue=Download
  1117. add name=down_p8_interactive packet-mark=dn_p8_interactive parent=\
  1118. DN_Interactive queue=Download
  1119. add name=down_p1_noninteractive packet-mark=dn_p1_noninteractive parent=\
  1120. DN_NonInteractive priority=1 queue=Download
  1121. add name=down_p2_noninteractive packet-mark=dn_p2_noninteractive parent=\
  1122. DN_NonInteractive priority=2 queue=Download
  1123. add name=down_p3_noninteractive packet-mark=dn_p3_noninteractive parent=\
  1124. DN_NonInteractive priority=3 queue=Download
  1125. add name=down_p4_noninteractive packet-mark=dn_p4_noninteractive parent=\
  1126. DN_NonInteractive priority=4 queue=Download
  1127. add name=down_p5_noninteractive packet-mark=dn_p5_noninteractive parent=\
  1128. DN_NonInteractive priority=5 queue=Download
  1129. add name=down_p5_noninteractive_limited packet-mark=\
  1130. dn_p5_noninteractive_limited parent=DN_NonInteractive priority=5 queue=\
  1131. Video_down
  1132. add name=down_p6_noninteractive packet-mark=dn_p6_noninteractive parent=\
  1133. DN_NonInteractive priority=6 queue=Download
  1134. add name=down_p7_noninteractive packet-mark=dn_p7_noninteractive parent=\
  1135. DN_NonInteractive priority=7 queue=Download
  1136. add name=down_p8_noninteractive packet-mark=dn_p8_noninteractive parent=\
  1137. DN_NonInteractive queue=Download
  1138. add name=up_p1_interactive packet-mark=up_p1_interactive parent=\
  1139. Upload_interactive priority=1 queue=Upload
  1140. add name=up_p2_interactive packet-mark=up_p2_interactive parent=\
  1141. Upload_interactive priority=2 queue=Upload
  1142. add name=up_p3_interactive packet-mark=up_p3_interactive parent=\
  1143. Upload_interactive priority=3 queue=Upload
  1144. add name=up_p4_interactive packet-mark=up_p4_interactive parent=\
  1145. Upload_interactive priority=4 queue=Upload
  1146. add name=up_p5_interactive packet-mark=up_p5_interactive parent=\
  1147. Upload_interactive priority=5 queue=Upload
  1148. add name=up_p6_interactive packet-mark=up_p6_interactive parent=\
  1149. Upload_interactive priority=6 queue=Upload
  1150. add name=up_p7_interactive packet-mark=up_p7_interactive parent=\
  1151. Upload_interactive priority=7 queue=Upload
  1152. add name=up_p8_interactive packet-mark=up_p8_interactive parent=\
  1153. Upload_interactive queue=Upload
  1154. add name=up_p1_noninteractive packet-mark=up_p1_noninteractive parent=\
  1155. Upload_noninteractive priority=1 queue=Upload
  1156. add name=up_p2_noninteractive packet-mark=up_p2_noninteractive parent=\
  1157. Upload_noninteractive priority=2 queue=Upload
  1158. add name=up_p3_noninteractive packet-mark=up_p3_noninteractive parent=\
  1159. Upload_noninteractive priority=3 queue=Upload
  1160. add name=up_p4_noninteractive packet-mark=up_p4_noninteractive parent=\
  1161. Upload_noninteractive priority=4 queue=Upload
  1162. add name=up_p5_noninteractive packet-mark=up_p5_noninteractive parent=\
  1163. Upload_noninteractive priority=5 queue=Upload
  1164. add name=up_p6_noninteractive packet-mark=up_p6_noninteractive parent=\
  1165. Upload_noninteractive priority=6 queue=Upload
  1166. add name=up_p7_noninteractive packet-mark=up_p7_noninteractive parent=\
  1167. Upload_noninteractive priority=7 queue=Upload
  1168. add name=up_p8_noninteractive packet-mark=up_p8_noninteractive parent=\
  1169. Upload_noninteractive queue=Upload
  1170. /snmp community
  1171. set [ find default=yes ] name=yam1flub
  1172. /interface bridge port
  1173. add bridge=Gateway_Bridge1 interface=ether1-ATT_GatewayRouter
  1174. add bridge=Gateway_Bridge1 interface=ether4-KinderhookAdmin_Fiber
  1175. add bridge=Gateway_Bridge1 interface=ether12-Oxi_Eth1
  1176. add bridge=Gateway_Bridge1 interface=ether8-DirecTV_Network_WAN
  1177. add bridge=Gateway_Bridge1 interface=ether7-PBX-Eth2
  1178. add bridge=VoiceVLAN_Bridge interface=vlan500-PBX_VoiceVLAN
  1179. add bridge=VoiceVLAN_Bridge interface=vlan500-VoiceVLAN
  1180. /interface bridge settings
  1181. set use-ip-firewall=yes use-ip-firewall-for-vlan=yes
  1182. /ipv6 settings
  1183. set max-neighbor-entries=1024
  1184. /interface l2tp-server server
  1185. set default-profile=profile1 enabled=yes
  1186. /ip address
  1187. add address=123/29 comment=\
  1188. interface=\
  1189. Gateway_Bridge1 network=120
  1190. add address=172.31.0.1/16 interface=vlan300-Guest_Network network=172.31.0.0
  1191. add address=10.168.72.1/24 disabled=yes network=10.168.72.0
  1192. add address=10.168.73.1/24 interface=ether13-OperaServer_Eth1 network=\
  1193. 10.168.73.0
  1194. add address=10.168.74.1/24 interface=vlan101-DirecTV_LANSide network=\
  1195. 10.168.74.0
  1196. add address=10.168.75.1/24 interface=vlan200-MiscDevices_Network network=\
  1197. 10.168.75.0
  1198. add address=192.168.72.1/24 interface=vlan100-StaffNetwork network=\
  1199. 192.168.72.0
  1200. add address=10.168.50.1/24 interface=ether6-SwitchStack_CS1 network=\
  1201. 10.168.50.0
  1202. add address=10.168.49.1/24 disabled=yes interface=ether11 network=10.168.49.0
  1203. add address=10.168.51.1/24 interface=VoiceVLAN_Bridge network=10.168.51.0
  1204. add address=192.168.0.1/24 interface=ether6-SwitchStack_CS1 network=\
  1205. 192.168.0.0
  1206. add address=172.30.0.1/24 interface=vlan400-LobbyGuest_Network network=\
  1207. 172.30.0.0
  1208. add address=10.168.76.1/24 interface=Gateway_Bridge1 network=10.168.76.0
  1209. /ip dhcp-server lease
  1210. add address=10.168.50.2 comment="UBNT EdgeSwitch " mac-address=\
  1211. 04:18:D6:83:9C:B3 server=dhcp3-CoreNetwork
  1212. add address=10.168.50.3 client-id=1:4:18:d6:64:43:7c mac-address=\
  1213. 04:18:D6:64:43:7C server=dhcp3-CoreNetwork
  1214. add address=10.168.50.4 client-id=1:4:18:d6:36:e9:f5 mac-address=\
  1215. 04:18:D6:36:E9:F5 server=dhcp3-CoreNetwork
  1216. add address=10.168.50.5 client-id=1:4:18:d6:64:43:b7 mac-address=\
  1217. 04:18:D6:64:43:B7 server=dhcp3-CoreNetwork
  1218. add address=10.168.50.6 client-id=1:4:18:d6:64:46:4a mac-address=\
  1219. 04:18:D6:64:46:4A server=dhcp3-CoreNetwork
  1220. add address=10.168.50.7 client-id=1:4:18:d6:64:43:74 mac-address=\
  1221. 04:18:D6:64:43:74 server=dhcp3-CoreNetwork
  1222. add address=10.168.50.8 client-id=1:4:18:d6:64:43:f8 mac-address=\
  1223. 04:18:D6:64:43:F8 server=dhcp3-CoreNetwork
  1224. add address=10.168.50.9 client-id=1:4:18:d6:64:42:e9 mac-address=\
  1225. 04:18:D6:64:42:E9 server=dhcp3-CoreNetwork
  1226. add address=10.168.50.10 client-id=1:4:18:d6:64:43:98 mac-address=\
  1227. 04:18:D6:64:43:98 server=dhcp3-CoreNetwork
  1228. add address=10.168.50.11 client-id=1:4:18:d6:36:e6:31 mac-address=\
  1229. 04:18:D6:36:E6:31 server=dhcp3-CoreNetwork
  1230. add address=10.168.50.12 client-id=1:4:18:d6:64:43:c8 mac-address=\
  1231. 04:18:D6:64:43:C8 server=dhcp3-CoreNetwork
  1232. add address=10.168.50.13 client-id=1:4:18:d6:64:43:3c mac-address=\
  1233. 04:18:D6:64:43:3C server=dhcp3-CoreNetwork
  1234. add address=10.168.50.14 client-id=1:4:18:d6:64:45:b0 mac-address=\
  1235. 04:18:D6:64:45:B0 server=dhcp3-CoreNetwork
  1236. add address=10.168.50.15 client-id=1:4:18:d6:64:43:64 mac-address=\
  1237. 04:18:D6:64:43:64 server=dhcp3-CoreNetwork
  1238. add address=10.168.50.16 client-id=1:4:18:d6:64:43:6b mac-address=\
  1239. 04:18:D6:64:43:6B server=dhcp3-CoreNetwork
  1240. add address=10.168.50.25 always-broadcast=yes client-id=1:0:1a:4b:d1:28:8e \
  1241. comment="ESXI Server MGMT Eth1" mac-address=00:1A:4B:D1:28:8E server=\
  1242. dhcp3-CoreNetwork
  1243. add address=10.168.75.250 client-id=1:0:9:b0:d6:8d:8c comment=\
  1244. "SAT Radio Front Desk Area" mac-address=00:09:B0:D6:8D:8C server=\
  1245. dhcp1-MiscNetwork
  1246. add address=10.168.50.26 client-id=1:0:1a:4b:d1:e5:50 comment="ESXi iLO" \
  1247. mac-address=00:1A:4B:D1:E5:50 server=dhcp3-CoreNetwork
  1248. add address=10.168.50.27 always-broadcast=yes client-id=1:14:58:d0:45:ca:4a \
  1249. comment="OXi Server iLo" mac-address=14:58:D0:45:CA:4A server=\
  1250. dhcp3-CoreNetwork
  1251. add address=10.168.50.28 always-broadcast=yes client-id=1:fc:15:b4:90:c6:f0 \
  1252. comment="Opera Server iLO" mac-address=FC:15:B4:90:C6:F0 server=\
  1253. dhcp3-CoreNetwork
  1254. add address=10.168.51.22 mac-address=00:04:13:76:1F:A8 server=\
  1255. dhcp2-VoIPNetwork
  1256. add address=10.168.51.20 comment="SNOM IP Phones" mac-address=\
  1257. 00:04:13:71:9F:85 server=dhcp2-VoIPNetwork
  1258. add address=10.168.51.29 mac-address=00:04:13:71:A8:01 server=\
  1259. dhcp2-VoIPNetwork
  1260. add address=10.168.51.23 always-broadcast=yes mac-address=00:04:13:76:1F:E4 \
  1261. server=dhcp2-VoIPNetwork
  1262. add address=10.168.51.253 client-id=cisco-0025.4589.25dd-Fa0/0 mac-address=\
  1263. 00:25:45:89:25:DD server=dhcp2-VoIPNetwork
  1264. add address=10.168.51.251 client-id=cisco-c47d.4fa8.46c5-Fa0/0 comment=\
  1265. "Cisco IADs" mac-address=C4:7D:4F:A8:46:C5 server=dhcp2-VoIPNetwork
  1266. add address=10.168.51.254 client-id=cisco-000c.863b.9dbe-Fa0/0 mac-address=\
  1267. 00:0C:86:3B:9D:BE server=dhcp2-VoIPNetwork
  1268. add address=10.168.51.252 client-id=cisco-d0d0.fd49.fb19-Fa0/0 mac-address=\
  1269. D0:D0:FD:49:FB:19 server=dhcp2-VoIPNetwork
  1270. add address=10.168.51.24 mac-address=00:04:13:77:4A:63 server=\
  1271. dhcp2-VoIPNetwork
  1272. add address=10.168.51.26 mac-address=00:04:13:77:4A:62 server=\
  1273. dhcp2-VoIPNetwork
  1274. add address=10.168.50.30 comment="Unifi Controller" mac-address=\
  1275. 00:0C:29:30:7B:6E server=dhcp3-CoreNetwork
  1276. add address=10.168.51.27 always-broadcast=yes mac-address=00:04:13:32:22:8A \
  1277. server=dhcp2-VoIPNetwork
  1278. add address=10.168.50.18 client-id=1:4:18:d6:86:7a:53 mac-address=\
  1279. 04:18:D6:86:7A:53 server=dhcp3-CoreNetwork
  1280. add address=10.168.50.17 client-id=1:4:18:d6:86:79:92 mac-address=\
  1281. 04:18:D6:86:79:92 server=dhcp3-CoreNetwork
  1282. add address=10.168.50.19 client-id=1:4:18:d6:86:7a:86 mac-address=\
  1283. 04:18:D6:86:7A:86 server=dhcp3-CoreNetwork
  1284. add address=10.168.50.20 client-id=1:4:18:d6:4e:89:55 mac-address=\
  1285. 04:18:D6:4E:89:55 server=dhcp3-CoreNetwork
  1286. add address=10.168.51.21 mac-address=00:04:13:77:41:07 server=\
  1287. dhcp2-VoIPNetwork
  1288. add address=10.168.51.25 mac-address=00:04:13:76:BB:D1 server=\
  1289. dhcp2-VoIPNetwork
  1290. add address=10.168.51.28 mac-address=00:04:13:77:4A:76 server=\
  1291. dhcp2-VoIPNetwork
  1292. add address=10.168.75.249 always-broadcast=yes client-id=1:0:a0:7c:20:d3:8a \
  1293. comment="ATM Lobby" mac-address=00:A0:7C:20:D3:8A server=\
  1294. dhcp1-MiscNetwork
  1295. add address=10.168.50.29 comment="HTTP/Cacti Server" mac-address=\
  1296. 00:0C:29:24:E3:09 server=dhcp3-CoreNetwork
  1297. add address=10.168.50.47 comment="ForDTV Cam1" mac-address=44:19:B7:22:8F:84 \
  1298. server=dhcp3-CoreNetwork
  1299. add address=10.168.75.248 client-id=1:8c:e7:48:6a:8a:1c comment=CAMDVR \
  1300. mac-address=8C:E7:48:6A:8A:1C server=dhcp1-MiscNetwork
  1301. add address=192.168.72.240 client-id=1:0:26:73:96:79:4e comment=\
  1302. "Main Printer Front Desk" mac-address=00:26:73:96:79:4E server=\
  1303. dhcp2-StaffNetwork
  1304. add address=10.168.50.47 comment="ForDTV Cam2" disabled=yes mac-address=\
  1305. 44:19:B7:22:8F:94 server=dhcp3-CoreNetwork
  1306. add address=10.168.51.30 mac-address=00:04:13:32:2B:0F server=\
  1307. dhcp2-VoIPNetwork
  1308. add address=10.168.51.31 mac-address=00:04:13:75:51:57 server=\
  1309. dhcp2-VoIPNetwork
  1310. add address=10.168.51.32 mac-address=00:04:13:75:4B:AA server=\
  1311. dhcp2-VoIPNetwork
  1312. add address=10.168.51.33 always-broadcast=yes mac-address=00:04:13:75:4E:23 \
  1313. server=dhcp2-VoIPNetwork
  1314. /ip dhcp-server network
  1315. add address=10.168.50.0/24 comment="Core Network" gateway=10.168.50.1
  1316. add address=10.168.51.0/24 comment="VoIP Network" gateway=10.168.51.1
  1317. add address=10.168.75.0/24 comment="Misc Bridge" gateway=10.168.75.1
  1318. add address=172.30.0.0/24 gateway=172.30.0.1
  1319. add address=172.31.0.0/16 comment="Guest Network" gateway=172.31.0.1
  1320. add address=192.168.72.0/24 comment="Staff Network" gateway=192.168.72.1
  1321. /ip dns
  1322. set servers=208.67.222.222,208.67.220.220
  1323. /ip firewall address-list
  1324. add address=192.168.72.0/24 list=StaffNETWORK_IPs
  1325. add address=10.168.75.0/24 list=MiscNETWORK_IPs
  1326. add address=10.10.10.0/24 list=Kinderhook_Resort_IPs
  1327. add address=10.10.13.0/24 list=Kinderhook_Resort_IPs
  1328. add address=10.168.73.0/24 list=OperaServerNetwork_IPs
  1329. add address=172.31.0.0/16 list=GuestNETWORK_IPs
  1330. add address=10.168.50.0/24 list=CoreNETWORK_IPs
  1331. add address=10.168.51.0/24 list=VoIPNETWORK_IPs
  1332. add address=10.168.48.0/22 list=CONNECTED_IPs
  1333. add address=10.168.72.0/22 list=CONNECTED_IPs
  1334. add address=120/29 list=CONNECTED_IPs
  1335. add address=172.31.0.0/16 list=CONNECTED_IPs
  1336. add address=192.168.72.0/24 list=CONNECTED_IPs
  1337. add address=10.168.50.0/24 list=TrustedIPs
  1338. add address=64.136.174.30 list=VoIPTrunk_IPs
  1339. add address=64.136.174.31 list=VoIPTrunk_IPs
  1340. add address=64.136.173.31 list=VoIPTrunk_IPs
  1341. add address=192.168.10.0/24 comment=TMP list=TrustedIPs
  1342. add address=172.30.0.0/24 list=GuestNETWORK_IPs
  1343. add address=172.16.0.0/12 list=QOSCustomerIPs
  1344. add address=192.168.0.0/16 list=QOSCustomerIPs
  1345. add address=10.0.0.0/8 list=QOSCustomerIPs
  1346. add address=10.168.50.0/24 list=NoNetflixLimits
  1347. add address=10.168.50.0/24 list=DoNotTestConnectionCounts
  1348. add address=192.168.0.0/16 list=GuestNetwork_KEEPOUT_IPs
  1349. add address=172.16.0.0/12 list=GuestNetwork_KEEPOUT_IPs
  1350. add address=10.0.0.0/8 list=GuestNetwork_KEEPOUT_IPs
  1351. add address=172.16.0.0/12 list=StaffNetwork_KEEPOUT_IPs
  1352. add address=192.168.0.0/16 list=StaffNetwork_KEEPOUT_IPs
  1353. add address=10.168.74.0/24 list=DirecTVNetwork_IPs
  1354. add address=172.16.0.0/22 list=DirecTVNetwork_IPs
  1355. add address=10.129.8.0/24 list=DirecTVNetwork_IPs
  1356. add address=10.10.10.0/24 comment="Resort IPs" list=StaffNetwork_ALLOWED_IPs
  1357. add address=10.10.13.0/24 comment="Resort IPs" list=StaffNetwork_ALLOWED_IPs
  1358. add address=172.16.1.11 comment="MCS Server" list=StaffNetwork_ALLOWED_IPs
  1359. add address=10.168.73.2 comment="Opera Server" list=StaffNetwork_ALLOWED_IPs
  1360. add address=10.168.75.0/24 comment="Misc Devices Network" list=\
  1361. StaffNetwork_ALLOWED_IPs
  1362. add address=192.168.10.0/24 list=CONNECTED_IPs
  1363. add address=10.255.255.255 list=TrustedIPs
  1364. add address=10.10.10.30 comment="Avaya Phone System Peer" list=VoIPTrunk_IPs
  1365. add address=10.10.10.30 comment="Avaya Phone System Peer" list=\
  1366. VoIPNETWORK_IPs
  1367. add address=10.168.76.0/24 list=CONNECTED_IPs
  1368. add address=64.136.174.65 list=VoIPTrunk_IPs
  1369. add address=64.136.174.35 list=VoIPTrunk_IPs
  1370. add address=64.136.164.215 list=VoIPTrunk_IPs
  1371. add address=64.136.173.65 list=VoIPTrunk_IPs
  1372. add address=64.136.173.22 list=VoIPTrunk_IPs
  1373. add address=64.136.173.23 list=VoIPTrunk_IPs
  1374. add address=64.136.173.32 list=VoIPTrunk_IPs
  1375. add address=64.136.173.34 list=VoIPTrunk_IPs
  1376. add address=209.166.128.200 list=VoIPTrunk_IPs
  1377. add address=209.166.128.201 list=VoIPTrunk_IPs
  1378. add address=64.136.174.20 list=VoIPTrunk_IPs
  1379. add address=64.136.174.21 list=VoIPTrunk_IPs
  1380. add address=192.240.151.100 list=VoIPTrunk_IPs
  1381. add address=192.240.151.101 list=VoIPTrunk_IPs
  1382. add address=209.166.154.70 list=VoIPTrunk_IPs
  1383. add address=209.166.154.71 list=VoIPTrunk_IPs
  1384. add address=172.30.0.0/16 list=CONNECTED_IPs
  1385. /ip firewall filter
  1386. add action=passthrough chain=unused-hs-chain comment=\
  1387. "place hotspot rules here" disabled=yes
  1388. add action=accept chain=forward comment="Accept EST" connection-state=\
  1389. established
  1390. add action=accept chain=forward comment="Accept Related" connection-state=\
  1391. related
  1392. add action=accept chain=input comment="Accept EST" connection-state=\
  1393. established
  1394. add action=drop chain=forward comment="Drop Invalid" connection-state=invalid
  1395. add action=accept chain=input comment="Accept Related" connection-state=\
  1396. related
  1397. add action=drop chain=input comment="Drop Invalid" connection-state=invalid
  1398. add action=accept chain=forward src-address=10.168.76.0/24
  1399. add action=accept chain=forward comment="Allow from Trusted IPs" \
  1400. src-address-list=TrustedIPs
  1401. add action=accept chain=input comment="Accept Winbox" dst-port=8291 protocol=\
  1402. tcp
  1403. add action=accept chain=input comment="Accept Winbox DP" port=5678 protocol=\
  1404. udp
  1405. add action=accept chain=input comment="Accept DHCP" in-interface=\
  1406. !Gateway_Bridge1 port=67,68 protocol=udp
  1407. add action=accept chain=input comment="Accept all from Core IPs" \
  1408. src-address-list=CoreNETWORK_IPs
  1409. add action=accept chain=input comment="Allow from Trusted IPs" \
  1410. src-address-list=TrustedIPs
  1411. add action=jump chain=input comment="Jump ICMP" jump-target=ICMP
  1412. add action=accept chain=input comment="Accept all from VD Starfox" \
  1413. src-address=216.15.195.126
  1414. add action=drop chain=input comment="Drop SSH" dst-port=22 protocol=tcp
  1415. add action=drop chain=input comment="Drop Hackers" disabled=yes \
  1416. src-address-list=Hackers
  1417. add action=log chain=input disabled=yes
  1418. add action=add-src-to-address-list address-list=Hackers address-list-timeout=\
  1419. 10m chain=input comment="Add to Hackers List" src-address-list=\
  1420. !CONNECTED_IPs
  1421. add action=drop chain=input comment="Drop Rest" disabled=yes
  1422. add action=accept chain=forward comment="Accept Core IP to Core IP" \
  1423. dst-address-list=CoreNETWORK_IPs src-address-list=CoreNETWORK_IPs
  1424. add action=accept chain=forward comment="Connected to Connected ICMP" \
  1425. dst-address-list=CONNECTED_IPs protocol=icmp src-address-list=\
  1426. CONNECTED_IPs
  1427. add action=jump chain=forward comment="Jump to Core Network Devices Rules" \
  1428. jump-target=CoreNetwork_Rules
  1429. add action=jump chain=forward comment="Jump to HTTP/Cacti Server Rules" \
  1430. jump-target="HTTP/CACTI Server Rules"
  1431. add action=jump chain=forward comment="Jump to Unifi Controller Rules" \
  1432. jump-target=Unifi_Server_Rules
  1433. add action=accept chain=Unifi_Server_Rules comment=\
  1434. "Accept core network to talk to Unifi TCP" dst-address=10.168.50.30 \
  1435. dst-port=8081,8080,8443,8880,8843 protocol=tcp src-address-list=\
  1436. CoreNETWORK_IPs
  1437. add action=accept chain=Unifi_Server_Rules comment=\
  1438. "Accept core network to talk to Unifi UDP" dst-address=10.168.50.30 \
  1439. dst-port=3478 protocol=udp src-address-list=CoreNETWORK_IPs
  1440. add action=accept chain=Unifi_Server_Rules comment=\
  1441. "Accept core network to SSH to Unifi" dst-address=10.168.50.30 dst-port=\
  1442. 22 protocol=tcp src-address-list=CoreNETWORK_IPs
  1443. add action=log chain=Unifi_Server_Rules dst-address=10.168.50.30 log-prefix=\
  1444. UnfiServerRules
  1445. add action=drop chain=Unifi_Server_Rules comment=\
  1446. "Drop All Others to Unifi Server" dst-address=10.168.50.30
  1447. add action=jump chain=forward comment="Jump to PBX Server Rules" jump-target=\
  1448. PBX_Server_Rules
  1449. add action=accept chain=PBX_Server_Rules comment=\
  1450. "Accept all from VOIP Innovations" src-address-list=VoIPTrunk_IPs
  1451. add action=accept chain=PBX_Server_Rules comment=\
  1452. "Accept all to VOIP Innovations" dst-address-list=VoIPNETWORK_IPs
  1453. add action=accept chain=PBX_Server_Rules comment=\
  1454. "Accept from Known SIP Carriers UDP 5060" dst-address=124 \
  1455. dst-port=5060 in-interface=Gateway_Bridge1 protocol=udp src-address-list=\
  1456. VoIPTrunk_IPs
  1457. add action=accept chain=PBX_Server_Rules comment=\
  1458. "Accept SIP 5060 UDP VoiceVLAN-500 to PBX" dst-address=124 \
  1459. dst-port=5060 protocol=udp src-address-list=VoIPNETWORK_IPs
  1460. add action=accept chain=PBX_Server_Rules comment=\
  1461. "Accept RTP 10000-20000 UDP to PBX" dst-address=124 dst-port=\
  1462. 10000-20000 protocol=udp
  1463. add action=accept chain=PBX_Server_Rules comment=\
  1464. "Accept ICMP from VoIP Devices" dst-address=124 protocol=icmp \
  1465. src-address-list=VoIPNETWORK_IPs
  1466. add action=accept chain=PBX_Server_Rules comment=\
  1467. "Accept ICMP from VoIP Trunk Peers" dst-address=124 protocol=\
  1468. icmp src-address-list=VoIPTrunk_IPs
  1469. add action=accept chain=PBX_Server_Rules comment="Allow PBillX vendor to PBX" \
  1470. dst-address=124 dst-port=22 protocol=tcp src-address=\
  1471. 186.7.93.45
  1472. add action=accept chain=PBX_Server_Rules comment="Accept ALL Opera to PBX" \
  1473. dst-address=124 src-address-list=OperaServerNetwork_IPs
  1474. add action=accept chain=PBX_Server_Rules comment=\
  1475. "Accept from Avaya Phone system. UDP 5060" disabled=yes dst-address=\
  1476. 124 dst-port=5060 protocol=udp src-address=10.10.10.30
  1477. add action=accept chain=PBX_Server_Rules comment=\
  1478. "Accept from Avaya Phone system. RTP 10000-20000" disabled=yes \
  1479. dst-address=124 dst-port=10000-20000 protocol=udp src-address=\
  1480. 10.10.10.30
  1481. add action=accept chain=PBX_Server_Rules comment=\
  1482. "Accept port 80 to PBX Server" disabled=yes dst-address=124 \
  1483. dst-port=80 protocol=tcp
  1484. add action=drop chain=PBX_Server_Rules comment=\
  1485. "Drop All Others to PBX Server" dst-address=124
  1486. add action=jump chain=forward comment="Jump to Opera Server Rules" \
  1487. jump-target=Opera_Server_Rules
  1488. add action=log chain=forward dst-address-list=GuestNetwork_KEEPOUT_IPs \
  1489. log-prefix=GuestNET_Keep_OUT src-address-list=GuestNETWORK_IPs
  1490. add action=drop chain=forward comment=\
  1491. "Drop all Guest Network to Guest Network KEEP Out list" dst-address-list=\
  1492. GuestNetwork_KEEPOUT_IPs src-address-list=GuestNETWORK_IPs
  1493. add action=accept chain=forward comment="Accept Staff to Staff Allowed IPs" \
  1494. dst-address-list=StaffNetwork_ALLOWED_IPs src-address-list=\
  1495. StaffNETWORK_IPs
  1496. add action=log chain=forward dst-address-list=StaffNetwork_KEEPOUT_IPs \
  1497. log-prefix=StaffKEEP_OUT src-address-list=StaffNETWORK_IPs
  1498. add action=drop chain=forward comment="Drop Staff to Staff Keep Out list" \
  1499. dst-address-list=StaffNetwork_KEEPOUT_IPs src-address-list=\
  1500. StaffNETWORK_IPs
  1501. add action=log chain=forward dst-address-list=CoreNETWORK_IPs log-prefix=\
  1502. ToCore
  1503. add action=drop chain=forward comment="Drop all others to Core Network" \
  1504. dst-address-list=CoreNETWORK_IPs
  1505. add action=accept chain="HTTP/CACTI Server Rules" comment=\
  1506. "Accept Staff Network IPs TCP 80" dst-address=10.168.50.29 dst-port=80 \
  1507. protocol=tcp src-address-list=StaffNETWORK_IPs
  1508. add action=log chain="HTTP/CACTI Server Rules" dst-address=10.168.50.29
  1509. add action=drop chain="HTTP/CACTI Server Rules" comment=\
  1510. "Drop all others to HTTP/CACTI server" dst-address=10.168.50.29
  1511. add action=accept chain=CoreNetwork_Rules comment=\
  1512. "Allow MCS Server to Camera" dst-address=10.168.50.45 dst-port=554 \
  1513. protocol=tcp src-address-list=DirecTVNetwork_IPs
  1514. add action=accept chain=CoreNetwork_Rules comment=\
  1515. "Allow MCS Server to Camera" dst-address=10.168.50.47 dst-port=554 \
  1516. protocol=tcp src-address-list=DirecTVNetwork_IPs
  1517. add chain=ICMP comment="Echo reply" icmp-options=0:0 protocol=icmp
  1518. add chain=ICMP comment="Accept all ICMP from BHNetworkIPs" protocol=icmp \
  1519. src-address-list=BHNetworkIPs
  1520. add chain=ICMP comment="Accept all ICMP to BHNetworkIPs" dst-address-list=\
  1521. BHNetworkIPs protocol=icmp
  1522. add chain=ICMP comment="Accept all ICMP from TrustedIPs" protocol=icmp \
  1523. src-address-list=TrustedIPs
  1524. add chain=ICMP comment="Accept all ICMP to TrustedIPs" dst-address-list=\
  1525. TrustedIPs protocol=icmp
  1526. add chain=ICMP comment="Echo request - Avoiding Ping Flood" icmp-options=8:0 \
  1527. limit=1,5 protocol=icmp
  1528. add chain=ICMP comment="Time Exceeded" icmp-options=11:0 protocol=icmp
  1529. add chain=ICMP comment="Destination unreachable" icmp-options=3:0-1 protocol=\
  1530. icmp
  1531. add chain=ICMP comment=PMTUD icmp-options=3:4 protocol=icmp
  1532. /ip firewall mangle
  1533. add action=jump chain=forward comment=\
  1534. "**QOS_Update_2.2** Jump to process marked packets" connection-mark=\
  1535. !no-mark jump-target=already_marked
  1536. add action=accept chain=input comment=\
  1537. "**QOS_Update_2.2** Don't mark input for any qos"
  1538. add action=accept chain=output comment=\
  1539. "**QOS_Update_2.2** Don't mark output for any qos"
  1540. add action=accept chain=already_marked comment=\
  1541. "NO Que for gateway bridge to gateway bridge" connection-mark=\
  1542. Gateway_to_Gateway
  1543. add action=mark-packet chain=already_marked comment=\
  1544. "**QOS_Update_2.2** P1 interactive downloads" connection-mark=\
  1545. p1_interactive dst-address-list=QOSCustomerIPs new-packet-mark=\
  1546. dn_p1_interactive passthrough=no
  1547. add action=mark-packet chain=already_marked comment=\
  1548. "**QOS_Update_2.2** P2 interactive downloads" connection-mark=\
  1549. p2_interactive dst-address-list=QOSCustomerIPs new-packet-mark=\
  1550. dn_p2_interactive passthrough=no
  1551. add action=mark-packet chain=already_marked comment=\
  1552. "**QOS_Update_2.2** P3 interactive downloads" connection-mark=\
  1553. p3_interactive dst-address-list=QOSCustomerIPs new-packet-mark=\
  1554. dn_p3_interactive passthrough=no
  1555. add action=mark-packet chain=already_marked comment=\
  1556. "**QOS_Update_2.2** P4 interactive downloads" connection-mark=\
  1557. p4_interactive dst-address-list=QOSCustomerIPs new-packet-mark=\
  1558. dn_p4_interactive passthrough=no
  1559. add action=mark-packet chain=already_marked comment=\
  1560. "**QOS_Update_2.2** P5 interactive downloads" connection-mark=\
  1561. p5_interactive dst-address-list=QOSCustomerIPs new-packet-mark=\
  1562. dn_p5_interactive passthrough=no
  1563. add action=mark-packet chain=already_marked comment=\
  1564. "**QOS_Update_2.2** P6 interactive downloads" connection-mark=\
  1565. p6_interactive dst-address-list=QOSCustomerIPs new-packet-mark=\
  1566. dn_p6_interactive passthrough=no
  1567. add action=mark-packet chain=already_marked comment=\
  1568. "**QOS_Update_2.2** P7 interactive downloads" connection-mark=\
  1569. p7_interactive dst-address-list=QOSCustomerIPs new-packet-mark=\
  1570. dn_p7_interactive passthrough=no
  1571. add action=mark-packet chain=already_marked comment=\
  1572. "**QOS_Update_2.2** P8 interactive downloads" connection-mark=\
  1573. p8_interactive dst-address-list=QOSCustomerIPs new-packet-mark=\
  1574. dn_p8_interactive passthrough=no
  1575. add action=mark-packet chain=already_marked comment=\
  1576. "**QOS_Update_2.2** P1 noninteractive downloads" connection-mark=\
  1577. p1_noninteractive dst-address-list=QOSCustomerIPs new-packet-mark=\
  1578. dn_p1_noninteractive passthrough=no
  1579. add action=mark-packet chain=already_marked comment=\
  1580. "**QOS_Update_2.2** P2 noninteractive downloads" connection-mark=\
  1581. p2_noninteractive dst-address-list=QOSCustomerIPs new-packet-mark=\
  1582. dn_p2_noninteractive passthrough=no
  1583. add action=mark-packet chain=already_marked comment=\
  1584. "**QOS_Update_2.2** P3 noninteractive downloads" connection-mark=\
  1585. p3_noninteractive dst-address-list=QOSCustomerIPs new-packet-mark=\
  1586. dn_p3_noninteractive passthrough=no
  1587. add action=mark-packet chain=already_marked comment=\
  1588. "**QOS_Update_2.2** P4 noninteractive downloads" connection-mark=\
  1589. p4_noninteractive dst-address-list=QOSCustomerIPs new-packet-mark=\
  1590. dn_p4_noninteractive passthrough=no
  1591. add action=mark-packet chain=already_marked comment=\
  1592. "**QOS_Update_2.2** P5 noninteractive downloads" connection-mark=\
  1593. p5_noninteractive dst-address-list=QOSCustomerIPs new-packet-mark=\
  1594. dn_p5_noninteractive passthrough=no
  1595. add action=mark-packet chain=already_marked comment=\
  1596. "**QOS_Update_2.2** P5 noninteractive limited downloads" connection-mark=\
  1597. p5_noninteractive_limited dst-address-list=QOSCustomerIPs \
  1598. new-packet-mark=dn_p5_noninteractive_limited passthrough=no
  1599. add action=mark-packet chain=already_marked comment=\
  1600. "**QOS_Update_2.2** P6 noninteractive downloads" connection-mark=\
  1601. p6_noninteractive dst-address-list=QOSCustomerIPs new-packet-mark=\
  1602. dn_p6_noninteractive passthrough=no
  1603. add action=mark-packet chain=already_marked comment=\
  1604. "**QOS_Update_2.2** P7 noninteractive downloads" connection-mark=\
  1605. p7_noninteractive dst-address-list=QOSCustomerIPs new-packet-mark=\
  1606. dn_p7_noninteractive passthrough=no
  1607. add action=mark-packet chain=already_marked comment=\
  1608. "**QOS_Update_2.2** P8 noninteractive downloads" connection-mark=\
  1609. p8_noninteractive dst-address-list=QOSCustomerIPs new-packet-mark=\
  1610. dn_p8_noninteractive passthrough=no
  1611. add action=mark-packet chain=already_marked comment=\
  1612. "**QOS_Update_2.2** P1 interactive uploads" connection-mark=\
  1613. p1_interactive new-packet-mark=up_p1_interactive passthrough=no \
  1614. src-address-list=QOSCustomerIPs
  1615. add action=mark-packet chain=already_marked comment=\
  1616. "**QOS_Update_2.2** P2 interactive uploads" connection-mark=\
  1617. p2_interactive new-packet-mark=up_p2_interactive passthrough=no \
  1618. src-address-list=QOSCustomerIPs
  1619. add action=mark-packet chain=already_marked comment=\
  1620. "**QOS_Update_2.2** P3 interactive uploads" connection-mark=\
  1621. p3_interactive new-packet-mark=up_p3_interactive passthrough=no \
  1622. src-address-list=QOSCustomerIPs
  1623. add action=mark-packet chain=already_marked comment=\
  1624. "**QOS_Update_2.2** P4 interactive uploads" connection-mark=\
  1625. p4_interactive new-packet-mark=up_p4_interactive passthrough=no \
  1626. src-address-list=QOSCustomerIPs
  1627. add action=mark-packet chain=already_marked comment=\
  1628. "**QOS_Update_2.2** P5 interactive uploads" connection-mark=\
  1629. p5_interactive new-packet-mark=up_p5_interactive passthrough=no \
  1630. src-address-list=QOSCustomerIPs
  1631. add action=mark-packet chain=already_marked comment=\
  1632. "**QOS_Update_2.2** P6 interactive uploads" connection-mark=\
  1633. p6_interactive new-packet-mark=up_p6_interactive passthrough=no \
  1634. src-address-list=QOSCustomerIPs
  1635. add action=mark-packet chain=already_marked comment=\
  1636. "**QOS_Update_2.2** P7 interactive uploads" connection-mark=\
  1637. p7_interactive new-packet-mark=up_p7_interactive passthrough=no \
  1638. src-address-list=QOSCustomerIPs
  1639. add action=mark-packet chain=already_marked comment=\
  1640. "**QOS_Update_2.2** P8 interactive uploads" connection-mark=\
  1641. p8_interactive new-packet-mark=up_p8_interactive passthrough=no \
  1642. src-address-list=QOSCustomerIPs
  1643. add action=mark-packet chain=already_marked comment=\
  1644. "**QOS_Update_2.2** P1 noninteractive uploads" connection-mark=\
  1645. p1_noninteractive new-packet-mark=up_p1_noninteractive passthrough=no \
  1646. src-address-list=QOSCustomerIPs
  1647. add action=mark-packet chain=already_marked comment=\
  1648. "**QOS_Update_2.2** P2 noninteractive uploads" connection-mark=\
  1649. p2_noninteractive new-packet-mark=up_p2_noninteractive passthrough=no \
  1650. src-address-list=QOSCustomerIPs
  1651. add action=mark-packet chain=already_marked comment=\
  1652. "**QOS_Update_2.2** P3 noninteractive uploads" connection-mark=\
  1653. p3_noninteractive new-packet-mark=up_p3_noninteractive passthrough=no \
  1654. src-address-list=QOSCustomerIPs
  1655. add action=mark-packet chain=already_marked comment=\
  1656. "**QOS_Update_2.2** P4 noninteractive uploads" connection-mark=\
  1657. p4_noninteractive new-packet-mark=up_p4_noninteractive passthrough=no \
  1658. src-address-list=QOSCustomerIPs
  1659. add action=mark-packet chain=already_marked comment=\
  1660. "**QOS_Update_2.2** P5 noninteractive uploads" connection-mark=\
  1661. p5_noninteractive new-packet-mark=up_p5_noninteractive passthrough=no \
  1662. src-address-list=QOSCustomerIPs
  1663. add action=mark-packet chain=already_marked comment=\
  1664. "**QOS_Update_2.2** P6 noninteractive uploads" connection-mark=\
  1665. p6_noninteractive new-packet-mark=up_p6_noninteractive passthrough=no \
  1666. src-address-list=QOSCustomerIPs
  1667. add action=mark-packet chain=already_marked comment=\
  1668. "**QOS_Update_2.2** P7 noninteractive uploads" connection-mark=\
  1669. p7_noninteractive new-packet-mark=up_p7_noninteractive passthrough=no \
  1670. src-address-list=QOSCustomerIPs
  1671. add action=mark-packet chain=already_marked comment=\
  1672. "**QOS_Update_2.2** P8 noninteractive uploads" connection-mark=\
  1673. p8_noninteractive new-packet-mark=up_p8_noninteractive passthrough=no \
  1674. src-address-list=QOSCustomerIPs
  1675. add action=mark-packet chain=httptests comment=\
  1676. "**QOS_Update_2.2** bytes 0-8000000 will be treated as p2_interactive" \
  1677. connection-bytes=0-8000000 dst-port=80 new-packet-mark=up_p2_interactive \
  1678. passthrough=no protocol=tcp
  1679. add action=mark-packet chain=httptests comment=\
  1680. "**QOS_Update_2.2** bytes 0-8000000 will be treated as p2_interactive" \
  1681. connection-bytes=0-8000000 new-packet-mark=dn_p2_interactive passthrough=\
  1682. no protocol=tcp src-port=80
  1683. add action=mark-connection chain=forward comment="Make Gateway to Gateway" \
  1684. in-interface=Gateway_Bridge1 new-connection-mark=Gateway_to_Gateway \
  1685. out-interface=Gateway_Bridge1 passthrough=yes
  1686. add action=mark-connection chain=httptests comment="**QOS_Update_2.2** Remaini\
  1687. ng bytes per flow are treated as p5_noninteractive" new-connection-mark=\
  1688. p5_noninteractive passthrough=no src-address-list=NoNetflixLimits
  1689. add action=mark-connection chain=httptests comment="**QOS_Update_2.2** Remaini\
  1690. ng bytes per flow are treated as p5_noninteractive_limited for those NOT o\
  1691. n the NoNetflixLimits list" new-connection-mark=p5_noninteractive_limited \
  1692. passthrough=no
  1693. add action=jump chain=httptests comment="**QOS_Update_2.2** Jump to the alread\
  1694. y marked chain to process these packets" jump-target=already_marked
  1695. add action=return chain=HighConnectRate comment="**QOS_Update_2.2** Do not cou\
  1696. nt connections for users in the DoNotTestConnectionCounts address list" \
  1697. src-address-list=DoNotTestConnectionCounts
  1698. add action=add-src-to-address-list address-list=HighConnectionIP \
  1699. address-list-timeout=3h chain=HighConnectRate comment="**QOS_Update_2.2** \
  1700. For anyone who is making more connections than we want, we will grab their\
  1701. \_IP for 3 hours. " src-address-list=QOSCustomerIPs
  1702. add action=mark-connection chain=HighConnectRate comment="**QOS_Update_2.2** S\
  1703. et users making high connection counts on HTTPS port, we will change to p7\
  1704. _interactive for these users" new-connection-mark=p7_interactive \
  1705. passthrough=no port=443 protocol=tcp
  1706. add action=mark-connection chain=HighConnectRate comment="**QOS_Update_2.2** M\
  1707. ark the remaining traffic - most likely a virus,p2p or torrent - as p8_non\
  1708. interactive" new-connection-mark=p8_noninteractive passthrough=no
  1709. add action=jump chain=HighConnectRate comment="**QOS_Update_2.2** Jump to the \
  1710. already marked chain to process these packets" jump-target=already_marked
  1711. # p2p matcher is obsolete please use layer7 matcher instead
  1712. add action=mark-connection chain=forward comment="**QOS_Update_2.2** Mark p2p \
  1713. connections p8_noninteractive NO PASSTHROUGH" new-connection-mark=\
  1714. p8_noninteractive p2p=all-p2p passthrough=no
  1715. add action=mark-connection chain=forward comment=\
  1716. "**QOS_Update_2.2** VOIP - mark DSCP 46 with p1_interactive" dscp=46 \
  1717. new-connection-mark=p1_interactive passthrough=no
  1718. add action=jump chain=forward comment="**QOS_Update_2.2** Here we will test th\
  1719. e HTTP traffic to see if it is a large download or stream" jump-target=\
  1720. httptests port=80 protocol=tcp
  1721. add action=mark-connection chain=forward comment=\
  1722. "**QOS_Update_2.2** Mark DNS as p1_interactive with NO PASSTHROUGH" \
  1723. new-connection-mark=p1_interactive passthrough=no port=53 protocol=tcp
  1724. add action=mark-connection chain=forward comment=\
  1725. "**QOS_Update_2.2** Mark DNS as p1_interactive with NO PASSTHROUGH" \
  1726. new-connection-mark=p1_interactive passthrough=no port=53 protocol=udp
  1727. add action=mark-connection chain=forward comment=\
  1728. "**QOS_Update_2.2** Mark XBox as p3_interactive with NO PASSTHROUGH" \
  1729. new-connection-mark=p3_interactive passthrough=no port=3074 protocol=tcp
  1730. add action=mark-connection chain=forward comment=\
  1731. "**QOS_Update_2.2** Mark XBox as p3_interactive with NO PASSTHROUGH" \
  1732. new-connection-mark=p3_interactive passthrough=no port=3074 protocol=udp
  1733. add action=mark-connection chain=forward comment=\
  1734. "**QOS_Update_2.2** Mark XBox as p3_interactive with NO PASSTHROUGH" \
  1735. new-connection-mark=p3_interactive passthrough=no port=88 protocol=udp
  1736. add action=mark-connection chain=forward comment=\
  1737. "**QOS_Update_2.2** Mark PS3 as p3_interactive with NO PASSTHROUGH" \
  1738. new-connection-mark=p3_interactive passthrough=no port=5223 protocol=tcp
  1739. add action=mark-connection chain=forward comment=\
  1740. "**QOS_Update_2.2** Mark PS3 as p3_interactive with NO PASSTHROUGH" \
  1741. new-connection-mark=p3_interactive passthrough=no port=3478 protocol=udp
  1742. add action=mark-connection chain=forward comment=\
  1743. "**QOS_Update_2.2** Mark PS3 as p3_interactive with NO PASSTHROUGH" \
  1744. new-connection-mark=p3_interactive passthrough=no port=3479 protocol=udp
  1745. add action=mark-connection chain=forward comment=\
  1746. "**QOS_Update_2.2** Mark PS3 as p3_interactive with NO PASSTHROUGH" \
  1747. new-connection-mark=p3_interactive passthrough=no port=3658 protocol=udp
  1748. add action=mark-connection chain=forward comment=\
  1749. "**QOS_Update_2.2** Mark Wii as p3_interactive with NO PASSTHROUGH" \
  1750. new-connection-mark=p3_interactive passthrough=no port=28910 protocol=tcp
  1751. add action=mark-connection chain=forward comment=\
  1752. "**QOS_Update_2.2** Mark Wii as p3_interactive with NO PASSTHROUGH" \
  1753. new-connection-mark=p3_interactive passthrough=no port=29900-29901 \
  1754. protocol=tcp
  1755. add action=mark-connection chain=forward comment=\
  1756. "**QOS_Update_2.2** Mark Wii as p3_interactive with NO PASSTHROUGH" \
  1757. new-connection-mark=p3_interactive passthrough=no port=28920 protocol=tcp
  1758. add action=mark-connection chain=forward comment="**QOS_Update_2.2** This capt\
  1759. ures some streaming video, such as most google video, cnn and some others \
  1760. **DISABLE IF HIGH CPU**" layer7-protocol=video_http new-connection-mark=\
  1761. p5_noninteractive passthrough=no
  1762. add action=mark-connection chain=forward comment="**QOS_Update_2.2** This will\
  1763. \_match Hulu and similar streams - p5_noninteractive NO PASSTHROUGH" \
  1764. new-connection-mark=p5_noninteractive passthrough=no port=1935 protocol=\
  1765. tcp
  1766. add action=mark-connection chain=forward comment="**QOS_Update_2.2** This will\
  1767. \_match the ms-streaming protocol used by several online tv stations - p5_\
  1768. noninteractive NO PASSTHROUGH" new-connection-mark=p5_noninteractive \
  1769. passthrough=no port=1755 protocol=tcp
  1770. add action=mark-connection chain=forward comment="**QOS_Update_2.2** This will\
  1771. \_match the RTSP streaming protocol used by several online tv stations - p\
  1772. 5_noninteractive NO PASSTHROUGH" new-connection-mark=p5_noninteractive \
  1773. passthrough=no port=554 protocol=tcp
  1774. add action=mark-connection chain=forward comment="**QOS_Update_2.2** VOIP - SI\
  1775. P NOT the calls- Set for p2_interactive with NO PASSTHROUGH" \
  1776. new-connection-mark=p2_interactive passthrough=no port=5060-5061 \
  1777. protocol=tcp
  1778. add action=mark-connection chain=forward comment="**QOS_Update_2.2** VOIP - SI\
  1779. P NOT the calls- Set for p2_interactive with NO PASSTHROUGH" \
  1780. new-connection-mark=p2_interactive passthrough=no port=5060-5061 \
  1781. protocol=udp
  1782. add action=mark-connection chain=forward comment=\
  1783. "**QOS_Update_2.2** ICMP is p1_interactive NO PASSTHROUGH" \
  1784. new-connection-mark=p1_interactive passthrough=no protocol=icmp
  1785. add action=mark-connection chain=forward comment=\
  1786. "**QOS_Update_2.2** Pop3 - Set at p3_interactive with NO PASSTHROUGH" \
  1787. new-connection-mark=p3_interactive passthrough=no port=110 protocol=tcp
  1788. add action=mark-connection chain=forward comment="**QOS_Update_2.2** SMTP traf\
  1789. fic will be p3_interactive by default NO PASSTHROUGH " \
  1790. new-connection-mark=p3_interactive passthrough=no port=25 protocol=tcp
  1791. add action=mark-connection chain=forward comment="**QOS_Update_2.2** NTP is se\
  1792. t at p1_interactive. It does not take much bandwidth, so nearly any priori\
  1793. ty above 3 or so should be ok" new-connection-mark=p1_interactive \
  1794. passthrough=no port=123 protocol=udp
  1795. add action=mark-connection chain=forward comment=\
  1796. "**QOS_Update_2.2** IMAP - Set at p3_interactive with NO PASSTHROUGH" \
  1797. new-connection-mark=p3_interactive passthrough=no port=143 protocol=tcp
  1798. add action=mark-connection chain=forward comment="**QOS_Update_2.2** Secure SM\
  1799. TP - Set at p3_interactive with NO PASSTHROUGH" new-connection-mark=\
  1800. p3_interactive passthrough=no port=465 protocol=tcp
  1801. add action=mark-connection chain=forward comment="**QOS_Update_2.2** Secure IM\
  1802. AP- Set at p3_interactive with NO PASSTHROUGH" new-connection-mark=\
  1803. p3_interactive passthrough=no port=485 protocol=tcp
  1804. add action=mark-connection chain=forward comment="**QOS_Update_2.2** IMAP over\
  1805. \_SSL- Set at p3_interactive with NO PASSTHROUGH" new-connection-mark=\
  1806. p3_interactive passthrough=no port=993 protocol=tcp
  1807. add action=mark-connection chain=forward comment="**QOS_Update_2.2** POP3 over\
  1808. \_SSL- Set at p3_interactive with NO PASSTHROUGH" new-connection-mark=\
  1809. p3_interactive passthrough=no port=995 protocol=tcp
  1810. add action=mark-connection chain=forward comment=\
  1811. "**QOS_Update_2.2** NNTP is set at p7_noninteractive, NO PASSTHROUGH" \
  1812. new-connection-mark=p7_noninteractive passthrough=no port=119 protocol=\
  1813. tcp
  1814. add action=mark-connection chain=forward comment="**QOS_Update_2.2** NNTP - Al\
  1815. ternate port - is set at p7_noninteractive, NO PASSTHROUGH" \
  1816. new-connection-mark=p7_noninteractive passthrough=no port=433 protocol=\
  1817. tcp
  1818. add action=mark-connection chain=forward comment=\
  1819. "**QOS_Update_2.2** SNMP set at p2_interactive NO PASSTHROUGH" \
  1820. new-connection-mark=p2_interactive passthrough=no port=161 protocol=udp
  1821. add action=mark-connection chain=forward comment="**QOS_Update_2.2** IPSEC-ESP\
  1822. \_- Set for p2_interactive with NO PASSTHROUGH" new-connection-mark=\
  1823. p2_interactive passthrough=no protocol=ipsec-esp
  1824. add action=mark-connection chain=forward comment="**QOS_Update_2.2** IPSEC-AH \
  1825. - Set for p2_interactive with NO PASSTHROUGH" new-connection-mark=\
  1826. p2_interactive passthrough=no protocol=ipsec-ah
  1827. add action=mark-connection chain=forward comment=\
  1828. "**QOS_Update_2.2** RDP - Set for p2_interactive with NO PASSTHROUGH" \
  1829. new-connection-mark=p2_interactive passthrough=no port=3389 protocol=tcp
  1830. add action=mark-connection chain=forward comment=\
  1831. "**QOS_Update_2.2** SSH p2_interactive NO PASSTHROUGH" \
  1832. new-connection-mark=p2_interactive passthrough=no port=22 protocol=tcp
  1833. add action=mark-connection chain=forward comment=\
  1834. "**QOS_Update_2.2** PPtP p2_interactive NO PASSTHROUGH" \
  1835. new-connection-mark=p2_interactive passthrough=no port=1723 protocol=tcp
  1836. add action=mark-connection chain=forward comment=\
  1837. "**QOS_Update_2.2** L2TP p2_interactive NO PASSTHROUGH" \
  1838. new-connection-mark=p2_interactive passthrough=no port=1701 protocol=udp
  1839. add action=mark-connection chain=forward comment=\
  1840. "**QOS_Update_2.2** GRE p2_interactive NO PASSTHROUGH" \
  1841. new-connection-mark=p2_interactive passthrough=no protocol=gre
  1842. add action=mark-connection chain=forward comment=\
  1843. "**QOS_Update_2.2** telnet p2_interactive NO PASSTHROUGH" \
  1844. new-connection-mark=p2_interactive passthrough=no port=23 protocol=tcp
  1845. add action=mark-connection chain=forward comment=\
  1846. "**QOS_Update_2.2** WINBOX p1_interactive NO PASSTHROUGH" \
  1847. new-connection-mark=p1_interactive passthrough=no port=8291 protocol=tcp
  1848. add action=jump chain=forward comment="**QOS_Update_2.2** For a single IP maki\
  1849. ng over 30 connections OUTBOUND - Jump to the chain that will process that\
  1850. \_traffic - will be HTTPS or some unidentified protocol - MOST LIKELY P2P \
  1851. or torrents" connection-limit=30,32 connection-state=new jump-target=\
  1852. HighConnectRate protocol=tcp
  1853. add action=mark-connection chain=forward comment="**QOS_Update_2.2** Skype-to-\
  1854. skype p1_interactive with NO PASSTHROUGH - AFTER high connection tests - L\
  1855. 7 DISABLE IF HIGH CPU" layer7-protocol=skypetoskype new-connection-mark=\
  1856. p1_interactive passthrough=no
  1857. add action=mark-connection chain=forward comment=\
  1858. "**QOS_Update_2.2** Set remaining SSL to p2_interactive" \
  1859. new-connection-mark=p2_interactive passthrough=yes port=443 protocol=tcp
  1860. add action=mark-packet chain=forward comment=\
  1861. "**QOS_Update_2.2** Set remaining UDP small packets to p2_interactive" \
  1862. new-packet-mark=dn_p2_interactive packet-size=0-800 passthrough=no \
  1863. protocol=udp src-address-list=!QOSCustomerIPs
  1864. add action=mark-packet chain=forward comment=\
  1865. "**QOS_Update_2.2** Set remaining UDP small packets to p2_interactive" \
  1866. new-packet-mark=up_p2_interactive packet-size=0-800 passthrough=no \
  1867. protocol=udp src-address-list=QOSCustomerIPs
  1868. add action=mark-packet chain=forward comment=\
  1869. "**QOS_Update_2.2** Set remaining UDP packets to p7_noninteractive" \
  1870. new-packet-mark=dn_p7_noninteractive passthrough=no protocol=udp \
  1871. src-address-list=!QOSCustomerIPs
  1872. add action=mark-packet chain=forward comment=\
  1873. "**QOS_Update_2.2** Set remaining UDP packets to p7_noninteractive" \
  1874. new-packet-mark=up_p7_noninteractive passthrough=no protocol=udp \
  1875. src-address-list=QOSCustomerIPs
  1876. add action=mark-packet chain=forward comment=\
  1877. "**QOS_Update_2.2** Mark everything else as unknown - p6_interactive" \
  1878. new-packet-mark=up_p6_interactive passthrough=no src-address-list=\
  1879. QOSCustomerIPs
  1880. add action=mark-packet chain=forward comment=\
  1881. "**QOS_Update_2.2** Mark everything else as unknown - p6_interactive" \
  1882. dst-address-list=QOSCustomerIPs new-packet-mark=dn_p6_interactive \
  1883. passthrough=no
  1884. /ip firewall nat
  1885. add action=passthrough chain=unused-hs-chain comment=\
  1886. "place hotspot rules here" disabled=yes
  1887. add action=masquerade chain=srcnat disabled=yes dst-address=10.168.51.0/24 \
  1888. src-address=10.168.51.0/24
  1889. add action=masquerade chain=srcnat disabled=yes dst-address=10.168.51.0/24 \
  1890. src-address=124
  1891. add action=masquerade chain=srcnat disabled=yes dst-address=124 \
  1892. src-address=10.168.51.0/24
  1893. add action=accept chain=srcnat comment=\
  1894. "No NAT for connected to OK Resort IPs" dst-address-list=\
  1895. Kinderhook_Resort_IPs src-address-list=CONNECTED_IPs
  1896. add action=accept chain=srcnat comment="Accept Connected to Connected" \
  1897. dst-address-list=CONNECTED_IPs src-address-list=CONNECTED_IPs
  1898. add action=src-nat chain=srcnat comment="For Resort Phone System" \
  1899. out-interface=Gateway_Bridge1 src-address=10.168.76.0/24 to-addresses=\
  1900. 123
  1901. add action=src-nat chain=srcnat comment="Masq STAFF Network Out ATT" \
  1902. out-interface=Gateway_Bridge1 src-address-list=StaffNETWORK_IPs \
  1903. to-addresses=12.174.178.123
  1904. add action=src-nat chain=srcnat comment=\
  1905. "Masq CORE Network Private IPs Out ATT" out-interface=Gateway_Bridge1 \
  1906. src-address-list=CoreNETWORK_IPs to-addresses=12.174.178.123
  1907. add action=src-nat chain=srcnat comment="Masq OPERA Server Network Out ATT" \
  1908. out-interface=Gateway_Bridge1 src-address-list=OperaServerNetwork_IPs \
  1909. to-addresses=12.174.178.123
  1910. add action=src-nat chain=srcnat comment="Masq GUEST Network Out ATT" \
  1911. out-interface=Gateway_Bridge1 src-address-list=GuestNETWORK_IPs \
  1912. to-addresses=12.174.178.123
  1913. add action=src-nat chain=srcnat comment="Masq VoIP Network Out ATT" \
  1914. out-interface=Gateway_Bridge1 src-address-list=VoIPNETWORK_IPs \
  1915. to-addresses=12.174.178.123
  1916. add action=src-nat chain=srcnat comment="Masq MISC Network Out ATT" \
  1917. out-interface=Gateway_Bridge1 src-address-list=MiscNETWORK_IPs \
  1918. to-addresses=12.174.178.123
  1919. add action=src-nat chain=srcnat comment="PPTP Tunnels" out-interface=\
  1920. Gateway_Bridge1 src-address=192.168.10.0/24 to-addresses=12.174.178.123
  1921. add action=dst-nat chain=dstnat comment="Rule for ATM machine" dst-address=\
  1922. 12.174.178.123 dst-port=6964 in-interface=Gateway_Bridge1 protocol=tcp \
  1923. to-addresses=10.168.75.249 to-ports=6964
  1924. add action=dst-nat chain=dstnat comment="Rule for CLink Phone System" \
  1925. disabled=yes dst-address=12.174.178.123 dst-port=50802 in-interface=\
  1926. Gateway_Bridge1 protocol=tcp to-addresses=10.168.76.254 to-ports=50802
  1927. add action=dst-nat chain=dstnat comment="Rule for CLink Phone System" \
  1928. disabled=yes dst-address=12.174.178.123 dst-port=50804 in-interface=\
  1929. Gateway_Bridge1 protocol=tcp to-addresses=10.168.76.254 to-ports=50804
  1930. add action=dst-nat chain=dstnat comment="Rule for CLink Phone System" \
  1931. disabled=yes dst-address=12.174.178.123 dst-port=50805 in-interface=\
  1932. Gateway_Bridge1 protocol=tcp to-addresses=10.168.76.254 to-ports=50805
  1933. add action=dst-nat chain=dstnat comment="Rule for CLink Phone System" \
  1934. disabled=yes dst-address=12.174.178.123 dst-port=50808 in-interface=\
  1935. Gateway_Bridge1 protocol=tcp to-addresses=10.168.76.254 to-ports=50808
  1936. add action=dst-nat chain=dstnat comment="Rule for CLink Phone System" \
  1937. disabled=yes dst-address=12.174.178.123 dst-port=50812 in-interface=\
  1938. Gateway_Bridge1 protocol=tcp to-addresses=10.168.76.254 to-ports=50812
  1939. add action=dst-nat chain=dstnat comment="Rule for CLink Phone System" \
  1940. disabled=yes dst-address=12.174.178.123 dst-port=50813 in-interface=\
  1941. Gateway_Bridge1 protocol=tcp to-addresses=10.168.76.254 to-ports=50813
  1942. add action=dst-nat chain=dstnat comment="Rule for CAMDVR" dst-address=\
  1943. 12.174.178.123 dst-port=5111,5112,8000,10554 protocol=tcp to-addresses=\
  1944. 10.168.75.248
  1945. /ip firewall service-port
  1946. set sip disabled=yes
  1947. /ip hotspot ip-binding
  1948. add address=172.31.1.166 comment="Tmp for guest roku" mac-address=\
  1949. B0:A7:37:DC:CC:DD server=hotspot1 to-address=172.31.1.166 type=bypassed
  1950. /ip hotspot user
  1951. add comment=guest name=username password=wifipass593
  1952. /ip hotspot walled-garden
  1953. add dst-host=":^www\\.paypal\\.com\$" dst-port=443
  1954. add dst-host=":^content\\.paypalobjects\\.com\$" dst-port=443
  1955. add dst-host=*.akamaiedge.net dst-port=443
  1956. add dst-host=":^www\\.sandbox\\.paypal\\.com\$" dst-port=443
  1957. add dst-host=*.paypal.com dst-port=443
  1958. add dst-host=*video-direct.net dst-port=80
  1959. add dst-host=*video-direct.net dst-port=443
  1960. add dst-host=*video-direct.tv dst-port=80
  1961. add dst-host=*video-direct.tv dst-port=443
  1962. add dst-host=*.video-direct.tv dst-port=80
  1963. add dst-host=*.video-direct.tv dst-port=443
  1964. add dst-host=*.video-direct.net dst-port=80
  1965. add dst-host=*.video-direct.net dst-port=443
  1966. add dst-host=":^www\\.google\\.com\$" dst-port=443
  1967. add dst-host=*.google.com dst-port=443
  1968. /ip ipsec policy
  1969. set 0 dst-address=0.0.0.0/0 src-address=0.0.0.0/0
  1970. /ip route
  1971. add distance=1 gateway=12.174.178.121
  1972. add comment="Route for OK Resort Private Network" distance=1 dst-address=\
  1973. 10.10.10.0/24 gateway=12.174.178.122
  1974. add comment="Route for OK Resort Private Network" distance=1 dst-address=\
  1975. 10.10.13.0/24 gateway=12.174.178.122
  1976. add comment="DirecTV Network Devices" distance=1 dst-address=10.129.8.0/24 \
  1977. gateway=10.168.74.2
  1978. add comment="DirecTV Network Devices" distance=1 dst-address=172.16.0.0/16 \
  1979. gateway=10.168.74.2
  1980. /ip service
  1981. set telnet disabled=yes
  1982. set ftp disabled=yes
  1983. set www disabled=yes
  1984. set api disabled=yes
  1985. set api-ssl disabled=yes
  1986. /ip tftp
  1987. add disabled=yes real-filename=c2950-i6k2l2q4-mz.121-22.EA14.bin \
  1988. req-filename=c2950-i6k2l2q4-mz.121-22.EA14.bin
  1989. /ppp secret
  1990. add name=redpeppers password=moa13ny profile=profile1 service=l2tp
  1991. /snmp
  1992. set [email protected] enabled=yes location=KinderhookHotel \
  1993. trap-version=2
  1994. /system clock
  1995. set time-zone-autodetect=no time-zone-name=America/Chicago
  1996. /system identity
  1997. set name=OK_Hotel_Headend_Router
  1998. /system ntp client
  1999. set enabled=yes server-dns-names=time.windows.com,time.nits.gov
  2000. /system scheduler
  2001. add interval=4w2d name=sched_backup_30d on-event=backup policy=\
  2002. ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
  2003. jan/01/1970 start-time=07:30:00
  2004. add interval=1d name=CheckGmail on-event=CheckGmail policy=\
  2005. ftp,reboot,read,write,policy,test,password,sniff,sensitive start-date=\
  2006. sep/10/2013 start-time=03:00:00
  2007. /system script
  2008. add name=backup owner=admin policy=\
  2009. ftp,reboot,read,write,policy,test,password,sniff,sensitive source="/export\
  2010. \_file=([/system identity get name] . \"-\" . \\\
  2011. \n [:pick [/system clock get date] 7 11] . [:pick [/system clock get date]\
  2012. \_0 3] . [:pick [/system clock get date] 4 6]); \\ \
  2013. \n\
  2014. \n/tool e-mail send start-tls=yes from=\"[email protected]\" \
  2015. to=\"[email protected]\" subject=([/system identity get name] . \" Ba\
  2016. ckup \" . \\ \
  2017. \n[/system clock get date]) file=([/system identity get name] . \"-\" . [:\
  2018. pick [/system clock get date] 7 11] . \\ \
  2019. \n[:pick [/system clock get date] 0 3] . [:pick [/system clock get date] 4\
  2020. \_6] . \".rsc\"); :delay 10; \\\
  2021. \n\
  2022. \n /file rem [/file find name=([/system identity get name] . \"-\" . [:pic\
  2023. k [/system clock get date] 7 11] . \\ \
  2024. \n[:pick [/system clock get date] 0 3] . [:pick [/system clock get date] 4\
  2025. \_6] . \".rsc\")]; \\ \
  2026. \n:log info (\"System Backup emailed at \" . [/sys cl get time] . \" \" . \
  2027. [/sys cl get date])"
  2028. add name=CheckGmail owner=admin policy=\
  2029. ftp,reboot,read,write,policy,test,password,sniff,sensitive source=":global\
  2030. \_gmailsmtp [:resolve \"smtp.gmail.com\"];\r\
  2031. \n/tool e-mail set address=\"\$gmailsmtp\""
  2032. /tool e-mail
  2033. set address=64.233.191.108 [email protected] password=\
  2034. yam1flub port=587 start-tls=yes [email protected]
  2035. /tool romon port
  2036. add
  2037. /tool sniffer
  2038. set file-limit=3000KiB file-name=iad3.pcap filter-ip-address=10.168.51.251/32
Advertisement
Add Comment
Please, Sign In to add comment