Fri Aug 05, 2011 6:52 pm
===== DSl Modem 1===================DSL Modem 2======
192.168.0.1 192.168.1.1
|
|
|
|
Lan= 172.16.1.1/24
[TELSTRA@Telstra Broadband] > ip address print detail
Flags: X - disabled, I - invalid, D - dynamic
0 address=172.16.1.1/24 network=172.16.1.0 interface=Lan
actual-interface=Lan
1 address=192.168.1.2/24 network=192.168.1.0 interface=Wan3
actual-interface=Wan3
2 address=192.168.0.2/24 network=192.168.0.0 interface=Wan2
actual-interface=Wan2
[TELSTRA@Telstra Broadband] > ip route print detail
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
0 A S dst-address=0.0.0.0/0 gateway=192.168.1.1
gateway-status=192.168.1.1 reachable Wan3 distance=1 scope=30
target-scope=10 routing-mark=youtube ptcl
1 A S dst-address=0.0.0.0/0 gateway=192.168.1.1
gateway-status=192.168.1.1 reachable Wan3 distance=1 scope=30
target-scope=10 routing-mark=youtube
2 A S dst-address=0.0.0.0/0 gateway=192.168.0.1
gateway-status=192.168.0.1 reachable Wan2 distance=1 scope=30
target-scope=10
3 ADC dst-address=172.16.1.0/24 pref-src=172.16.1.1 gateway=Lan
gateway-status=Lan reachable distance=0 scope=10
4 ADC dst-address=192.168.0.0/24 pref-src=192.168.0.2 gateway=Wan2
gateway-status=Wan2 reachable distance=0 scope=10
5 ADC dst-address=192.168.1.0/24 pref-src=192.168.1.2 gateway=Wan3
gateway-status=Wan3 reachable distance=0 scope=10
[TELSTRA@Telstra Broadband] > /interface print
Flags: D - dynamic, X - disabled, R - running, S - slave
# NAME TYPE MTU L2MTU MAX-L2MTU
0 ether1 ether 1500 1526
1 R Wan2 ether 1500 1524 1524
2 R Wan3 ether 1500 1524 1524
3 ether4 ether 1500 1524 1524
4 R Lan ether 1500 1524 1524
[TELSTRA@Telstra Broadband] > /ip firewall export
# aug/05/2011 21:40:36 by RouterOS 5.5
# software id = PRDI-MC0Y
#
/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s \
tcp-close-wait-timeout=10s tcp-established-timeout=1d \
tcp-fin-wait-timeout=10s tcp-last-ack-timeout=10s \
tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s tcp-syncookie=no \
tcp-time-wait-timeout=10s udp-stream-timeout=3m udp-timeout=10s
/ip firewall filter
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
/ip firewall mangle
add action=mark-routing chain=prerouting disabled=no dst-address=\
221.120.0.0/16 new-routing-mark="youtube ptcl" passthrough=yes \
src-address=172.16.1.0/24
add action=mark-routing chain=prerouting disabled=no dst-address=\
74.125.0.0/16 new-routing-mark=youtube passthrough=yes src-address=\
172.16.1.0/24
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=\
"place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat comment="masquerade hotspot network" \
disabled=no src-address=172.16.1.0/24
/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061
set pptp disabled=no
I upload my Network Diagram.
Last edited by
telstra on Fri Aug 12, 2011 6:53 pm, edited 1 time in total.