All pastes #2093389 Raw Edit

Sha

public text v1 · immutable
#2093389 ·published 2011-11-09 16:38 UTC
rendered paste body
[admin@MikroTik] /ip> export
# nov/09/2011 16:36:18 by RouterOS 5.2
# software id = N595-S5TS
#
/ip firewall mangle
add action=accept chain=prerouting disabled=no dst-address=192.168.2.0/24 \
    in-interface=ether5
add action=accept chain=prerouting disabled=no dst-address=192.168.3.0/24 \
    in-interface=ether5
add action=mark-packet chain=prerouting disabled=no dst-address=0.0.0.0/0 \
    in-interface=ether5 new-packet-mark=one nth=2,1 passthrough=yes
add action=mark-packet chain=prerouting disabled=no dst-address=0.0.0.0/0 \
    in-interface=ether5 new-packet-mark=two nth=2,2 passthrough=yes
add action=mark-routing chain=prerouting disabled=no new-routing-mark=one \
    packet-mark=one passthrough=no
add action=mark-routing chain=prerouting disabled=no new-routing-mark=two \
    packet-mark=two passthrough=no
/ip firewall nat
add action=masquerade chain=srcnat disabled=no dst-address=192.168.2.0/24 \
    src-address=90.155.75.192/26
add action=masquerade chain=srcnat disabled=no dst-address=192.168.3.0/24 \
    src-address=90.155.75.192/26
add action=masquerade chain=srcnat disabled=no src-address=192.168.1.0/24
/ip neighbor discovery
set ether1 discover=yes
set ether2 discover=yes
set ether3 discover=yes
set ether4 discover=yes
set ether5 discover=yes
set A&A1 discover=no
set A&A2 discover=no
set IPv6 discover=no
/ip route
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
    A&A1 routing-mark=one scope=30 target-scope=10
add check-gateway=ping disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\
    A&A2 routing-mark=two scope=30 target-scope=10
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
    A&A1 scope=30 target-scope=10
add check-gateway=ping disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\
    A&A2 scope=30 target-scope=10