e.g.:
wan ip 111.111.111.111 (ip range 222.222.221.2-222.222.222.254)
wan ip 111.111.111.112 (ip range 222.222.222.2-222.222.223.254)
I have the following setting is RouterOS.
Code: Select all
/ip firewall mangle add chain=input in-interface="Pacnet Line 01 (PPPoE)" action=mark-connection new-connection-mark="Pacnet Line 01 (PPPoE) Connection Mark)"
/ip firewall mangle add chain=input in-interface="Pacnet Line 02 (PPPoE)" action=mark-connection new-connection-mark="Pacnet Line 02 (PPPoE) Connection Mark)"
/ip firewall mangle add chain=output connection-mark="Pacnet Line 01 (PPPoE) Connection Mark)" action=mark-routing new-routing-mark="Pacnet Line 01 (PPPoE) Routing Mark)"
/ip firewall mangle add chain=output connection-mark="Pacnet Line 02 (PPPoE) Connection Mark)" action=mark-routing new-routing-mark="Pacnet Line 02 (PPPoE) Routing Mark)"
/ip firewall mangle add chain=prerouting dst-address=111.111.111.111/32 action=accept in-interface=Internal
/ip firewall mangle add chain=prerouting dst-address=111.111.111.112/32 action=accept in-interface=Internal
/ip firewall mangle add chain=prerouting dst-address-type=!Internal in-interface=Internal per-connection-classifier=both-addresses:2/0 action=mark-connection new-connection-mark="Pacnet Line 01 (PPPoE) Connection Mark)" passthrough=yes
/ip firewall mangle add chain=prerouting dst-address-type=!Internal in-interface=Internal per-connection-classifier=both-addresses:2/1 action=mark-connection new-connection-mark="Pacnet Line 02 (PPPoE) Connection Mark)" passthrough=yes
/ip firewall mangle add chain=prerouting connection-mark="Pacnet Line 01 (PPPoE) Connection Mark)" in-interface=Internal action=mark-routing new-routing-mark="Pacnet Line 01 (PPPoE) Routing Mark)"
/ip firewall mangle add chain=prerouting connection-mark="Pacnet Line 02 (PPPoE) Connection Mark)" in-interface=Internal action=mark-routing new-routing-mark="Pacnet Line 02 (PPPoE) Routing Mark)"
Code: Select all
/ip firewall mangle add chain=prerouting dst-address=202.64.63.0/24 action=accept in-interface=Internal
/ip firewall mangle add chain=prerouting dst-address=202.64.130.0/24 action=accept in-interface=Internal
