API tools faq
paste
Guest User

Untitled

a guest
Feb 10th, 2020
285
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 8.90 KB | None | 0 0
raw download clone embed print report
  1. firewall {
  2. all-ping enable
  3. broadcast-ping disable
  4. ipv6-name WANv6_IN {
  5. default-action drop
  6. description "WAN IPv6 naar LAN"
  7. rule 10 {
  8. action accept
  9. description "Allow established/related"
  10. state {
  11. established enable
  12. related enable
  13. }
  14. }
  15. rule 20 {
  16. action drop
  17. description "Drop invalid state"
  18. state {
  19. invalid enable
  20. }
  21. }
  22. rule 30 {
  23. action accept
  24. description "Allow IPv6 icmp"
  25. icmpv6 {
  26. type echo-request
  27. }
  28. protocol ipv6-icmp
  29. }
  30. }
  31. ipv6-name WANv6_LOCAL {
  32. default-action drop
  33. description "WAN IPv6 naar Router"
  34. rule 10 {
  35. action accept
  36. description "Allow established/related"
  37. state {
  38. established enable
  39. related enable
  40. }
  41. }
  42. rule 20 {
  43. action drop
  44. description "Drop invalid state"
  45. state {
  46. invalid enable
  47. }
  48. }
  49. rule 30 {
  50. action accept
  51. description "Allow IPv6 icmp"
  52. protocol ipv6-icmp
  53. }
  54. rule 40 {
  55. action accept
  56. description "Allow dhcpv6"
  57. destination {
  58. port 546
  59. }
  60. protocol udp
  61. source {
  62. port 547
  63. }
  64. }
  65. }
  66. ipv6-receive-redirects disable
  67. ipv6-src-route disable
  68. ip-src-route disable
  69. log-martians enable
  70. name WAN_IN {
  71. default-action drop
  72. description "WAN naar LAN"
  73. rule 10 {
  74. action accept
  75. description "Allow established/related"
  76. log disable
  77. state {
  78. established enable
  79. related enable
  80. }
  81. }
  82. rule 20 {
  83. action drop
  84. description "Drop invalid state"
  85. state {
  86. invalid enable
  87. }
  88. }
  89. }
  90. name WAN_LOCAL {
  91. default-action drop
  92. description "WAN naar Router"
  93. rule 10 {
  94. action accept
  95. description "Allow established/related"
  96. log disable
  97. state {
  98. established enable
  99. invalid disable
  100. new disable
  101. related enable
  102. }
  103. }
  104. rule 20 {
  105. action drop
  106. description "Drop invalid state"
  107. state {
  108. established disable
  109. invalid enable
  110. new disable
  111. related disable
  112. }
  113. }
  114. rule 21 {
  115. action accept
  116. description "Allow Ping"
  117. destination {
  118. group {
  119. address-group ADDRv4_pppoe0
  120. }
  121. }
  122. log disable
  123. protocol icmp
  124. }
  125. }
  126. receive-redirects disable
  127. send-redirects enable
  128. source-validation disable
  129. syn-cookies enable
  130. }
  131. interfaces {
  132. ethernet eth0 {
  133. description FTTH
  134. duplex auto
  135. mtu 1512
  136. speed auto
  137. vif 4 {
  138. address dhcp
  139. description "KPN IPTV"
  140. dhcp-options {
  141. client-option "send vendor-class-identifier "IPTV_RG";"
  142. client-option "request subnet-mask, routers, rfc3442-classless-static-routes;"
  143. default-route no-update
  144. default-route-distance 210
  145. name-server update
  146. }
  147. mtu 1500
  148. }
  149. vif 6 {
  150. description "KPN Internet"
  151. mtu 1508
  152. pppoe 0 {
  153. default-route auto
  154. dhcpv6-pd {
  155. no-dns
  156. pd 0 {
  157. interface eth1 {
  158. host-address ::1
  159. no-dns
  160. prefix-id :1
  161. service slaac
  162. }
  163. prefix-length /48
  164. }
  165. rapid-commit enable
  166. }
  167. firewall {
  168. in {
  169. ipv6-name WANv6_IN
  170. name WAN_IN
  171. }
  172. local {
  173. ipv6-name WANv6_LOCAL
  174. name WAN_LOCAL
  175. }
  176. }
  177. idle-timeout 180
  178. ipv6 {
  179. address {
  180. autoconf
  181. }
  182. dup-addr-detect-transmits 1
  183. enable {
  184. }
  185. }
  186. mtu 1500
  187. name-server auto
  188. password ppp
  189. user-id xxx@internet
  190. }
  191. }
  192. }
  193. ethernet eth1 {
  194. address 192.168.2.254/24
  195. description Thuis
  196. duplex auto
  197. ipv6 {
  198. dup-addr-detect-transmits 1
  199. router-advert {
  200. cur-hop-limit 64
  201. link-mtu 0
  202. managed-flag false
  203. max-interval 600
  204. name-server 2606:4700:4700::1111
  205. other-config-flag false
  206. prefix ::/64 {
  207. autonomous-flag true
  208. on-link-flag true
  209. valid-lifetime 2592000
  210. }
  211. radvd-options "RDNSS 2606:4700:4700::1111 {};"
  212. reachable-time 0
  213. retrans-timer 0
  214. send-advert true
  215. }
  216. }
  217. speed auto
  218. }
  219. ethernet eth2 {
  220. description "Niet in gebruik"
  221. duplex auto
  222. speed auto
  223. }
  224. loopback lo {
  225. }
  226. }
  227. protocols {
  228. igmp-proxy {
  229. interface eth0.4 {
  230. alt-subnet 0.0.0.0/0
  231. role upstream
  232. threshold 1
  233. }
  234. interface eth1 {
  235. alt-subnet 0.0.0.0/0
  236. role downstream
  237. threshold 1
  238. }
  239. }
  240. static {
  241. interface-route6 ::/0 {
  242. next-hop-interface pppoe0 {
  243. }
  244. }
  245. }
  246. }
  247. service {
  248. dhcp-server {
  249. disabled false
  250. global-parameters "option vendor-class-identifier code 60 = string;"
  251. global-parameters "option broadcast-address code 28 = ip-address;"
  252. hostfile-update disable
  253. shared-network-name Thuis {
  254. authoritative enable
  255. subnet 192.168.2.0/24 {
  256. dns-server 1.1.1.1
  257. lease 86400
  258. start 192.168.2.1 {
  259. stop 192.168.2.200
  260. }
  261. }
  262. }
  263. static-arp disable
  264. use-dnsmasq enable
  265. }
  266. dns {
  267. forwarding {
  268. cache-size 0
  269. listen-on eth1
  270. name-server 1.1.1.1
  271. options listen-address=192.168.2.254
  272. }
  273. }
  274. gui {
  275. http-port 80
  276. https-port 443
  277. older-ciphers enable
  278. }
  279. nat {
  280. rule 5000 {
  281. description IPTV
  282. destination {
  283. address 213.75.112.0/21
  284. }
  285. log disable
  286. outbound-interface eth0.4
  287. protocol all
  288. source {
  289. address 192.168.2.0/24
  290. }
  291. type masquerade
  292. }
  293. rule 5010 {
  294. description Internet
  295. log disable
  296. outbound-interface pppoe0
  297. protocol all
  298. type masquerade
  299. }
  300. }
  301. ssh {
  302. disable-password-authentication
  303. port 22
  304. protocol-version v2
  305. }
  306. ubnt-discover {
  307. disable
  308. }
  309. unms {
  310. disable
  311. }
  312. }
  313. system {
  314. domain-name thuis.local
  315. host-name Thuis
  316. name-server 127.0.0.1
  317. ntp {
  318. server 0.nl.pool.ntp.org {
  319. }
  320. server 1.nl.pool.ntp.org {
  321. }
  322. server ntp.time.nl {
  323. prefer
  324. }
  325. server time.cloudflare.com {
  326. }
  327. }
  328. offload {
  329. hwnat disable
  330. ipsec enable
  331. ipv4 {
  332. forwarding enable
  333. gre enable
  334. pppoe enable
  335. vlan enable
  336. }
  337. ipv6 {
  338. forwarding enable
  339. pppoe disable
  340. vlan enable
  341. }
  342. }
  343. syslog {
  344. global {
  345. facility all {
  346. level notice
  347. }
  348. facility protocols {
  349. level debug
  350. }
  351. }
  352. }
  353. time-zone Europe/Amsterdam
  354. traffic-analysis {
  355. dpi disable
  356. export disable
  357. }
  358. }
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!