/ip address
add address=10.0.2.2/24
interface
=wan2
add address=192.168.5.1/24
interface
=Local
/ip firewall nat
add chain=srcnat out-
interface
=pppoe-out1 action=masquerade
add chain=srcnat out-
interface
=wan2 action=masquerade
/ip firewall mangle
add chain=prerouting in-
interface
=pppoe-out1 connection-state=
new
new
-connection-mark=pppoe-out1_conn action=mark-connection passthrough=yes
add chain=prerouting in-
interface
=wan2 connection-state=
new
new
-connection-mark=ether2_conn action=mark-connection passthrough=yes
add chain=output connection-mark=pppoe-out1_conn
new
-routing-mark=to_pppoe-out1 action=mark-routing passthrough=yes
add chain=output connection-mark=ether2_conn
new
-routing-mark=to_ether2 action=mark-routing passthrough=yes
/ip firewall mangle
add chain=prerouting in-
interface
=Local connection-state=
new
dst-address-type=!local per-connection-classifier=both-addresses:2/0 action=mark-connection
new
-connection-mark=pppoe-out1_conn passthrough=yes
add chain=prerouting in-
interface
=Local connection-state=
new
dst-address-type=!local per-connection-classifier=both-addresses:2/1 action=mark-connection
new
-connection-mark=ether2_conn passthrough=yes
add chain=prerouting in-
interface
=Local connection-mark=pppoe-out1_conn action=mark-routing
new
-routing-mark=to_pppoe-out1 passthrough=yes
add chain=prerouting in-
interface
=Local connection-mark=ether2_conn action=mark-routing
new
-routing-mark=to_ether2 passthrough=yes
/ip firewall mangle
add chain=prerouting dst-address=10.0.2.0/24 action=accept in-
interface
=ether5
/ip route
add gateway=pppoe-out1 distance=1
add gateway=10.0.2.1 check-gateway=ping distance=2
/ip route
add gateway=pppoe-out1 routing-mark=to_pppoe-out1
add gateway=10.0.2.1 routing-mark=to_ether2 check-gateway=ping
No comments:
Post a Comment