100% found this document useful (1 vote)
96 views4 pages

Balanceo Gorka

This document configures a network with 7 WAN connections and a LAN subnet. It renames Ethernet interfaces, creates a bridge for the LAN interfaces, sets IP addresses on the WAN and LAN interfaces, enables DHCP on the LAN, and configures firewall rules to mark and route traffic over specific WAN links based on destination address.
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
100% found this document useful (1 vote)
96 views4 pages

Balanceo Gorka

This document configures a network with 7 WAN connections and a LAN subnet. It renames Ethernet interfaces, creates a bridge for the LAN interfaces, sets IP addresses on the WAN and LAN interfaces, enables DHCP on the LAN, and configures firewall rules to mark and route traffic over specific WAN links based on destination address.
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
You are on page 1/ 4

/interface bridge

add name=LAN

/interface ethernet
set [ find default-name=ether8 ] name=LAN1
set [ find default-name=ether9 ] name=LAN2
set [ find default-name=ether10 ] name=LAN3
set [ find default-name=ether1 ] name=WAN1
set [ find default-name=ether2 ] name=WAN2
set [ find default-name=ether3 ] name=WAN3
set [ find default-name=ether4 ] name=WAN4
set [ find default-name=ether5 ] name=WAN5
set [ find default-name=ether6 ] name=WAN6
set [ find default-name=ether7 ] name=WAN7

/interface bridge port


add bridge=LAN interface=LAN1
add bridge=LAN interface=LAN2
add bridge=LAN interface=LAN3

/ip address
add address=192.168.6.2/24 interface=WAN1 network=192.168.6.0
add address=192.168.7.2/24 interface=WAN2 network=192.168.7.0
add address=192.168.8.2/24 interface=WAN3 network=192.168.8.0
add address=192.168.9.2/24 interface=WAN4 network=192.168.9.0
add address=192.168.10.2/24 interface=WAN5 network=192.168.10.0
add address=192.168.11.2/24 interface=WAN6 network=192.168.11.0
add address=192.168.12.2/24 interface=WAN7 network=192.168.12.0
add address=192.168.5.1/24 interface=LAN network=192.168.5.0

/ip dns
set allow-remote-requests=yes max-udp-packet-size=512 servers=\
200.109.78.12,200.44.32.12,200.11.248.12,208.67.222.222
/ip dns static
add address=192.168.5.1 name=dns

/ip pool
add name=dhcp_pool1 ranges=192.168.5.2-192.168.5.10

/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=LAN lease-time=3d name=\
LAN

/ip dhcp-server network


add address=192.168.5.0/24 gateway=192.168.5.1

/ip firewall mangle


add action=mark-connection chain=input in-interface=WAN1 new-connection-mark=\
WAN1_conn
add action=mark-connection chain=input in-interface=WAN2 new-connection-mark=\
WAN2_conn
add action=mark-connection chain=input in-interface=WAN3 new-connection-mark=\
WAN3_conn
add action=mark-connection chain=input in-interface=WAN4 new-connection-mark=\
WAN4_conn
add action=mark-connection chain=input in-interface=WAN5 new-connection-mark=\
WAN5_conn
add action=mark-connection chain=input in-interface=WAN6 new-connection-mark=\
WAN6_conn
add action=mark-connection chain=input in-interface=WAN7 new-connection-mark=\
WAN7_conn
add action=mark-routing chain=output connection-mark=WAN1_conn \
new-routing-mark=to_WAN1
add action=mark-routing chain=output connection-mark=WAN2_conn \
new-routing-mark=to_WAN2
add action=mark-routing chain=output connection-mark=WAN3_conn \
new-routing-mark=to_WAN3
add action=mark-routing chain=output connection-mark=WAN4_conn \
new-routing-mark=to_WAN4
add action=mark-routing chain=output connection-mark=WAN5_conn \
new-routing-mark=to_WAN5
add action=mark-routing chain=output connection-mark=WAN6_conn \
new-routing-mark=to_WAN6
add action=mark-routing chain=output connection-mark=WAN7_conn \
new-routing-mark=to_WAN7
add chain=prerouting dst-address=192.168.6.0/24 in-interface=LAN
add chain=prerouting dst-address=192.168.7.0/24 in-interface=LAN
add chain=prerouting dst-address=192.168.8.0/24 in-interface=LAN
add chain=prerouting dst-address=192.168.9.0/24 in-interface=LAN
add chain=prerouting dst-address=192.168.10.0/24 in-interface=LAN
add chain=prerouting dst-address=192.168.11.0/24 in-interface=LAN
add chain=prerouting dst-address=192.168.12.0/24 in-interface=LAN
add action=mark-connection chain=prerouting dst-address-type=!local \
in-interface=LAN new-connection-mark=WAN1_conn per-connection-classifier=\
both-addresses:7/0
add action=mark-connection chain=prerouting dst-address-type=!local \
in-interface=LAN new-connection-mark=WAN2_conn per-connection-classifier=\
both-addresses:7/1
add action=mark-connection chain=prerouting dst-address-type=!local \
in-interface=LAN new-connection-mark=WAN3_conn per-connection-classifier=\
both-addresses:7/2
add action=mark-connection chain=prerouting dst-address-type=!local \
in-interface=LAN new-connection-mark=WAN4_conn per-connection-classifier=\
both-addresses:7/3
add action=mark-connection chain=prerouting dst-address-type=!local \
in-interface=LAN new-connection-mark=WAN5_conn per-connection-classifier=\
both-addresses:7/4
add action=mark-connection chain=prerouting dst-address-type=!local \
in-interface=LAN new-connection-mark=WAN6_conn per-connection-classifier=\
both-addresses:7/5
add action=mark-connection chain=prerouting dst-address-type=!local \
in-interface=LAN new-connection-mark=WAN7_conn per-connection-classifier=\
both-addresses:7/6
add action=mark-connection chain=prerouting dst-address-type=!local \
in-interface=LAN new-connection-mark=WAN1_conn per-connection-classifier=\
both-addresses-and-ports:7/0
add action=mark-connection chain=prerouting dst-address-type=!local \
in-interface=LAN new-connection-mark=WAN2_conn per-connection-classifier=\
both-addresses-and-ports:7/1
add action=mark-connection chain=prerouting dst-address-type=!local \
in-interface=LAN new-connection-mark=WAN3_conn per-connection-classifier=\
both-addresses-and-ports:7/2
add action=mark-connection chain=prerouting dst-address-type=!local \
in-interface=LAN new-connection-mark=WAN4_conn per-connection-classifier=\
both-addresses-and-ports:7/3
add action=mark-connection chain=prerouting dst-address-type=!local \
in-interface=LAN new-connection-mark=WAN5_conn per-connection-classifier=\
both-addresses-and-ports:7/4
add action=mark-connection chain=prerouting dst-address-type=!local \
in-interface=LAN new-connection-mark=WAN6_conn per-connection-classifier=\
both-addresses-and-ports:7/5
add action=mark-connection chain=prerouting dst-address-type=!local \
in-interface=LAN new-connection-mark=WAN7_conn per-connection-classifier=\
both-addresses-and-ports:7/6
add action=mark-routing chain=prerouting connection-mark=WAN1_conn \
in-interface=LAN new-routing-mark=to_WAN1
add action=mark-routing chain=prerouting connection-mark=WAN2_conn \
in-interface=LAN new-routing-mark=to_WAN2
add action=mark-routing chain=prerouting connection-mark=WAN3_conn \
in-interface=LAN new-routing-mark=to_WAN3
add action=mark-routing chain=prerouting connection-mark=WAN4_conn \
in-interface=LAN new-routing-mark=to_WAN4
add action=mark-routing chain=prerouting connection-mark=WAN5_conn \
in-interface=LAN new-routing-mark=to_WAN5
add action=mark-routing chain=prerouting connection-mark=WAN6_conn \
in-interface=LAN new-routing-mark=to_WAN6
add action=mark-routing chain=prerouting connection-mark=WAN7_conn \
in-interface=LAN new-routing-mark=to_WAN7

add action=mark-connection chain=prerouting comment=\


"Https port 443 trafico separado by WAN1" disabled=yes dst-port=443 \
in-interface=LAN new-connection-mark=Https protocol=tcp
add action=mark-routing chain=prerouting connection-mark=Https disabled=yes \
in-interface=LAN new-routing-mark=to_WAN1 passthrough=no
add action=mark-connection chain=prerouting comment=\
"http port 80 Trafico separado by WAN1" disabled=yes dst-port=80 \
in-interface=LAN new-connection-mark=http protocol=tcp
add action=mark-routing chain=prerouting connection-mark=http disabled=yes \
in-interface=LAN new-routing-mark=to_WAN1 passthrough=no
add action=mark-connection chain=prerouting comment=\
"Https port 443 trafico separado by WAN2" disabled=yes dst-port=443 \
in-interface=LAN new-connection-mark=Https protocol=tcp
add action=mark-routing chain=prerouting connection-mark=Https disabled=yes \
in-interface=LAN new-routing-mark=to_WAN2 passthrough=no
add action=mark-connection chain=prerouting comment=\
"http port 80 Trafico separado by WAN2" disabled=yes dst-port=80 \
in-interface=LAN new-connection-mark=http protocol=tcp
add action=mark-routing chain=prerouting connection-mark=http disabled=yes \
in-interface=LAN new-routing-mark=to_WAN2 passthrough=no

/ip firewall nat


add action=masquerade chain=srcnat out-interface=WAN1
add action=masquerade chain=srcnat out-interface=WAN2
add action=masquerade chain=srcnat out-interface=WAN3
add action=masquerade chain=srcnat out-interface=WAN4
add action=masquerade chain=srcnat out-interface=WAN5
add action=masquerade chain=srcnat out-interface=WAN6
add action=masquerade chain=srcnat out-interface=WAN7
/ip route
add distance=1 gateway=10.0.0.1 routing-mark=to_WAN1
add distance=2 gateway=10.0.0.2 routing-mark=to_WAN2
add distance=3 gateway=10.0.0.3 routing-mark=to_WAN3
add distance=4 gateway=10.0.0.4 routing-mark=to_WAN4
add distance=5 gateway=10.0.0.5 routing-mark=to_WAN5
add distance=6 gateway=10.0.0.6 routing-mark=to_WAN6
add distance=7 gateway=10.0.0.7 routing-mark=to_WAN7
add check-gateway=ping distance=1 gateway=208.67.222.222 routing-mark=to_WAN1
add check-gateway=ping distance=2 gateway=200.11.248.12 routing-mark=to_WAN2
add check-gateway=ping distance=3 gateway=200.109.78.12 routing-mark=to_WAN3
add check-gateway=ping distance=4 gateway=200.44.32.12 routing-mark=to_WAN4
add check-gateway=ping distance=5 gateway=200.44.32.13 routing-mark=to_WAN5
add check-gateway=ping distance=6 gateway=9.9.9.9 routing-mark=to_WAN6
add check-gateway=ping distance=7 gateway=8.8.8.8 routing-mark=to_WAN7
add distance=1 gateway=10.0.0.1
add distance=2 gateway=10.0.0.2
add distance=3 gateway=10.0.0.3
add distance=4 gateway=10.0.0.4
add distance=5 gateway=10.0.0.5
add distance=6 gateway=10.0.0.6
add distance=7 gateway=10.0.0.7
add check-gateway=ping distance=1 dst-address=10.0.0.1/32 gateway=\
208.67.222.222 scope=10
add check-gateway=ping distance=1 dst-address=10.0.0.2/32 gateway=\
200.11.248.12 scope=10
add check-gateway=ping distance=1 dst-address=10.0.0.3/32 gateway=\
200.109.78.12 scope=10
add check-gateway=ping distance=1 dst-address=10.0.0.4/32 gateway=\
200.44.32.12 scope=10
add check-gateway=ping distance=1 dst-address=10.0.0.5/32 gateway=\
200.44.32.13 scope=10
add check-gateway=ping distance=1 dst-address=10.0.0.6/32 gateway=\
9.9.9.9 scope=10
add check-gateway=ping distance=1 dst-address=10.0.0.7/32 gateway=\
8.8.8.8 scope=10
add distance=1 dst-address=208.67.222.222/32 gateway=192.168.6.1 scope=10
add distance=1 dst-address=200.11.248.12/32 gateway=192.168.7.1 scope=10
add distance=1 dst-address=200.109.78.12/32 gateway=192.168.8.1 scope=10
add distance=1 dst-address=200.44.32.12/32 gateway=192.168.9.1 scope=10
add distance=1 dst-address=200.44.32.13/32 gateway=192.168.10.1 scope=10
add distance=1 dst-address=9.9.9.9/32 gateway=192.168.11.1 scope=10
add distance=1 dst-address=8.8.8.8/32 gateway=192.168.12.1 scope=10

/system clock
set time-zone-name=America/Caracas
/system ntp client
set enabled=yes server-dns-names="0.south-america.pool.ntp.org,1.south-america\
.pool.ntp.org,2.south-america.pool.ntp.org,3.south-america.pool.ntp.org"

/export file=configuracion

You might also like

pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy