Scribd Logo
Upload

Welcome to Scribd!

  • Em

    Uploaded by

    agungsedayupratama
    2 views4 pages
    This document configures IP addresses, firewall NAT, firewall mangle rules, and static routes on a router with two WAN connections. It assigns IP addresses to two interfaces connected to different networks. Firewall NAT is configured for internet access over each WAN link. Firewall mangle rules mark connections based on interface and destination to send traffic over the preferred WAN link. Static routes are configured with routing marks to prefer one gateway over the other.

    Original Description:

    Original Title

    em

    Copyright

    © © All Rights Reserved

    Available Formats

    DOCX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    This document configures IP addresses, firewall NAT, firewall mangle rules, and static routes on a router with two WAN connections. It assigns IP addresses to two interfaces connected to different networks. Firewall NAT is configured for internet access over each WAN link. Firewall mangle rules mark connections based on interface and destination to send traffic over the preferred WAN link. Static routes are configured with routing marks to prefer one gateway over the other.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as docx, pdf, or txt
    2 views4 pages

    Em

    Uploaded by

    agungsedayupratama
    This document configures IP addresses, firewall NAT, firewall mangle rules, and static routes on a router with two WAN connections. It assigns IP addresses to two interfaces connected to different networks. Firewall NAT is configured for internet access over each WAN link. Firewall mangle rules mark connections based on interface and destination to send traffic over the preferred WAN link. Static routes are configured with routing marks to prefer one gateway over the other.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as docx, pdf, or txt
    of 4

    <em>/ ip address

    add address=192.168.0.1/24 network=192.168.0.0


    broadcast=192.168.0.255 interface=ether5

    add address=10.111.0.2/24 network=10.111.0.0


    broadcast=10.111.0.255 interface=ether1

    <em>/ ip firewall nat

    add chain=srcnat out-interface=ether1 action=masquerade


    comment=nat-isp1

    add chain=srcnat out-interface=ether2 action=masquerade


    comment=nat-isp2

    </em>

    <em>/ ip firewall mangle

    add chain=prerouting dst-address=10.111.0.0/24


    action=accept in-interface=ether5

    add chain=prerouting dst-address=172.16.0.0/24


    action=accept in-interface=ether5
    add chain=prerouting in-interface=ether1 connection-mark=no-
    mark action=mark-connection
    new-connection-mark=ISP1_conn

    add chain=prerouting in-interface=ether2


    connection-mark=no-mark action=mark-connection
    new-connection-mark=ISP2_conn</em>

    <em>/ ip firewall mangle

    add chain=prerouting in-interface=ether5


    connection-mark=no-mark dst-address-type=!local

    per-connection-classifier=both-addresses:3/0
    action=mark-connection new-connection-mark=ISP1_conn

    add chain=prerouting in-interface=ether5


    connection-mark=no-mark dst-address-type=!local

    per-connection-classifier=both-addresses:3/1
    action=mark-connection new-connection-mark=ISP1_conn

    add chain=prerouting in-interface=ether5


    connection-mark=no-mark dst-address-type=!local

    per-connection-classifier=both-addresses:3/2
    action=mark-connection new-connection-mark=ISP2_conn
    </em>
    <em>/ ip firewall mangle

    add chain=prerouting connection-mark=ISP1_conn in-


    interface=ether5 action=mark-routing

    new-routing-mark=to_ISP1

    add chain=prerouting connection-mark=ISP2_conn in-


    interface=ether5 action=mark-routing

    new-routing-mark=to_ISP2

    </em><em>
    add chain=output connection-mark=ISP1_conn action=mark-
    routing new-routing-mark=to_ISP1
    add chain=output connection-mark=ISP2_conn action=mark-
    routing new-routing-mark=to_ISP2</em>

    <em>/ ip route

    add dst-address=0.0.0.0/0 gateway=10.111.0.1 routing-


    mark=to_ISP1 check-gateway=ping

    add dst-address=0.0.0.0/0 gateway=172.16.0.1 routing-


    mark=to_ISP2 check-gateway=ping</em>

    <em>/ ip route
    add dst-address=0.0.0.0/0 gateway=10.111.0.1 distance=1
    check-gateway=ping

    add dst-address=0.0.0.0/0 gateway=172.16.0.1 distance=2


    check-gateway=ping</em>

    You might also like