Scribd Logo
Upload

Welcome to Scribd!

  • Script Live 30 Maret 2022

    Uploaded by

    Eka Saputra Andi Basuki
    23 views1 page
    This document contains firewall configuration that defines local IP address ranges, enables NAT and routing for two network interfaces (ether1 and ether2), and applies connection and routing marks to implement load balancing across the two interfaces.

    Original Description:

    Script Live 30 Maret 2022

    Copyright

    © © All Rights Reserved

    Available Formats

    DOCX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    This document contains firewall configuration that defines local IP address ranges, enables NAT and routing for two network interfaces (ether1 and ether2), and applies connection and routing marks to implement load balancing across the two interfaces.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as docx, pdf, or txt
    23 views1 page

    Script Live 30 Maret 2022

    Uploaded by

    Eka Saputra Andi Basuki
    This document contains firewall configuration that defines local IP address ranges, enables NAT and routing for two network interfaces (ether1 and ether2), and applies connection and routing marks to implement load balancing across the two interfaces.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as docx, pdf, or txt
    of 1

    /ip firewall address-list

    add address=0.0.0.0/8 list= IP-LOCAL comment="LB By RDAF"


    add address=10.0.0.0/8 list= IP-LOCAL comment="LB By RDAF"
    add address=100.64.0.0/10 list= IP-LOCAL comment="LB By RDAF"
    add address=127.0.0.0/8 list= IP-LOCAL comment="LB By RDAF"
    add address=169.254.0.0/16 list= IP-LOCAL comment="LB By RDAF"
    add address=172.16.0.0/12 list= IP-LOCAL comment="LB By RDAF"
    add address=192.0.0.0/24 list= IP-LOCAL comment="LB By RDAF"
    add address=192.0.2.0/24 list= IP-LOCAL comment="LB By RDAF"
    add address=192.168.0.0/16 list= IP-LOCAL comment="LB By RDAF"
    add address=198.18.0.0/15 list= IP-LOCAL comment="LB By RDAF"
    add address=198.51.100.0/24 list= IP-LOCAL comment="LB By RDAF"
    add address=203.0.113.0/24 list= IP-LOCAL comment="LB By RDAF"
    add address=224.0.0.0/3 list= IP-LOCAL comment="LB By RDAF"
    /ip firewall nat
    add chain=srcnat out-interface="ether1" action=masquerade comment="LB By RDAF"
    add chain=srcnat out-interface="ether2" action=masquerade comment="LB By RDAF"
    /ip route
    add check-gateway=ping distance=1 gateway=" 192.168.1.1" routing-mark="to-ether1" comment="LB By RDAF"
    add check-gateway=ping distance=1 gateway="192.168.0.1" routing-mark="to-ether2" comment="LB By RDAF"
    add check-gateway=ping distance=1 gateway="192.168.1.1" comment="LB By RDAF"
    add check-gateway=ping distance=2 gateway="192.168.0.1" comment="LB By RDAF"
    /ip firewall mangle
    add action=mark-connection chain=input in-interface="ether1" new-connection-mark="con-ether1" passthrough=yes comment="LB By RDAF"
    add action=mark-connection chain=input in-interface="ether2" new-connection-mark="con-ether2" passthrough=yes comment="LB By RDAF"
    add action=mark-routing chain=output connection-mark="con-ether1" new-routing-mark="to-ether1" passthrough=yes comment="LB By RDAF"
    add action=mark-routing chain=output connection-mark="con-ether2" new-routing-mark="to-ether2" passthrough=yes comment="LB By RDAF"
    add action=mark-connection chain=prerouting dst-address-list=!IP-LOCAL dst-address-type=!local new-connection-mark="con-ether1" passthrough=yes per-
    connection-classifier=both-addresses-and-ports:2/0 src-address-list=IP-LOCAL comment="LB By RDAF"
    add action=mark-connection chain=prerouting dst-address-list=!IP-LOCAL dst-address-type=!local new-connection-mark="con-ether2" passthrough=yes per-
    connection-classifier=both-addresses-and-ports:2/1 src-address-list=IP-LOCAL comment="LB By RDAF"
    add action=mark-routing chain=prerouting connection-mark="con-ether1" dst-address-list=!IP-LOCAL new-routing-mark="to-ether1" passthrough=yes src-
    address-list=IP-LOCAL comment="LB By RDAF"
    add action=mark-routing chain=prerouting connection-mark="con-ether2" dst-address-list=!IP-LOCAL new-routing-mark="to-ether2" passthrough=yes src-
    address-list=IP-LOCAL comment="LB By RDAF"
    /system identity set name=LB_PCC_by_RDAF

    You might also like