Scribd
Upload
7 views2 pages

Shared Text

The document outlines configurations for a firewall, including address lists, NAT rules, routing, and mangle rules, all associated with a load balancer identified as 'LB By RDAF'. It specifies various local IP address ranges and sets up masquerading for outgoing traffic on two interfaces. Additionally, it includes connection marking and routing based on the source and destination addresses to manage traffic effectively.

Uploaded by

ripanaruz
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
7 views2 pages

Shared Text

The document outlines configurations for a firewall, including address lists, NAT rules, routing, and mangle rules, all associated with a load balancer identified as 'LB By RDAF'. It specifies various local IP address ranges and sets up masquerading for outgoing traffic on two interfaces. Additionally, it includes connection marking and routing based on the source and destination addresses to manage traffic effectively.

Uploaded by

ripanaruz
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
You are on page 1/ 2

/ip firewall address-list

add address=0.0.0.0/8 list= IP-LOCAL comment="LB By RDAF"

add address=10.0.0.0/8 list= IP-LOCAL comment="LB By RDAF"

add address=100.64.0.0/10 list= IP-LOCAL comment="LB By RDAF"

add address=127.0.0.0/8 list= IP-LOCAL comment="LB By RDAF"

add address=169.254.0.0/16 list= IP-LOCAL comment="LB By RDAF"

add address=172.16.0.0/12 list= IP-LOCAL comment="LB By RDAF"

add address=192.0.0.0/24 list= IP-LOCAL comment="LB By RDAF"

add address=192.0.2.0/24 list= IP-LOCAL comment="LB By RDAF"

add address=192.168.0.0/16 list= IP-LOCAL comment="LB By RDAF"

add address=198.18.0.0/15 list= IP-LOCAL comment="LB By RDAF"

add address=198.51.100.0/24 list= IP-LOCAL comment="LB By RDAF"

add address=203.0.113.0/24 list= IP-LOCAL comment="LB By RDAF"

add address=224.0.0.0/3 list= IP-LOCAL comment="LB By RDAF"

/ip firewall nat

add chain=srcnat out-interface="ether1" action=masquerade comment="LB By RDAF"

add chain=srcnat out-interface="ether2" action=masquerade comment="LB By RDAF"

/ip route

add check-gateway=ping distance=1 gateway=" 192.168.1.1" routing-mark="to-ether1"


comment="LB By RDAF"

add check-gateway=ping distance=1 gateway="192.168.8.1" routing-mark="to-ether2"


comment="LB By RDAF"

add check-gateway=ping distance=1 gateway="192.168.1.1" comment="LB By RDAF"

add check-gateway=ping distance=2 gateway="192.168.8.1" comment="LB By RDAF"

/ip firewall mangle

add action=mark-connection chain=input in-interface="ether1" new-connection-


mark="con-ether1" passthrough=yes comment="LB By RDAF"

add action=mark-connection chain=input in-interface="ether2" new-connection-


mark="con-ether2" passthrough=yes comment="LB By RDAF"

add action=mark-routing chain=output connection-mark="con-ether1" new-routing-


mark="to-ether1" passthrough=yes comment="LB By RDAF"

add action=mark-routing chain=output connection-mark="con-ether2" new-routing-


mark="to-ether2" passthrough=yes comment="LB By RDAF"
add action=mark-connection chain=prerouting dst-address-list=!IP-LOCAL dst-address-
type=!local new-connection-mark="con-ether1" passthrough=yes per-connection-
classifier=both-addresses-and-ports:2/0 src-address-list=IP-LOCAL comment="LB By
RDAF"

add action=mark-connection chain=prerouting dst-address-list=!IP-LOCAL dst-address-


type=!local new-connection-mark="con-ether2" passthrough=yes per-connection-
classifier=both-addresses-and-ports:2/1 src-address-list=IP-LOCAL comment="LB By
RDAF"

add action=mark-routing chain=prerouting connection-mark="con-ether1" dst-address-


list=!IP-LOCAL new-routing-mark="to-ether1" passthrough=yes src-address-list=IP-
LOCAL comment="LB By RDAF"

add action=mark-routing chain=prerouting connection-mark="con-ether2" dst-address-


list=!IP-LOCAL new-routing-mark="to-ether2" passthrough=yes src-address-list=IP-
LOCAL comment="LB By RDAF"

/system identity set name=LB_PCC_by_RDAF

You might also like

pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy