add address=1.1.1.50/24 network=1.1.1.0 broadcast=1.1.1.255 interface=USER comment="" disabled=no
add address=10.111.0.2/24 network=10.111.0.0 broadcast=10.111.0.255 interface=AD1 comment="" disabled=no
add address=10.112.0.2/24 network=10.112.0.0 broadcast=10.112.0.255 interface=AD2 comment="" disabled=no
add address=10.113.0.2/24 network=10.113.0.0 broadcast=10.113.0.255 interface=AD3 comment="" disabled=no
add address=192.168.1.2/24 network=192.168.1.0 broadcast=192.168.1.255 interface=AD4 comment="" disabled=no
add address=192.168.2.2/24 network=192.168.2.0 broadcast=192.168.2.255 interface=AD5 comment="" disabled=no
/ ip firewall mangle
add chain=prerouting in-interface=USER connection-state=new nth=4,1,0 action=mark-connection new-connection-mark=ad1 passthrough=yes comment="" disabled=no
add chain=prerouting in-interface=USER connection-mark=ad1 action=mark-routing new-routing-mark=ad1 passthrough=no comment="" disabled=no
add chain=prerouting in-interface=USER connection-state=new nth=4,1,1 action=mark-connection new-connection-mark=ad2 passthrough=yes comment="" disabled=no
add chain=prerouting in-interface=USER connection-mark=ad2 action=mark-routing new-routing-mark=ad2 passthrough=no comment="" disabled=no
add chain=prerouting in-interface=USER connection-state=new nth=4,1,2 action=mark-connection new-connection-mark=ad3 passthrough=yes comment="" disabled=no
add chain=prerouting in-interface=USER connection-mark=ad3 action=mark-routing new-routing-mark=ad3 passthrough=no comment="" disabled=no
add chain=prerouting in-interface=USER connection-state=new nth=4,1,3 action=mark-connection new-connection-mark=ad4 passthrough=yes comment="" disabled=no
add chain=prerouting in-interface=USER connection-mark=ad4 action=mark-routing new-routing-mark=ad4 passthrough=no comment="" disabled=no
add chain=prerouting in-interface=USER connection-state=new nth=4,1,4 action=mark-connection new-connection-mark=ad5 passthrough=yes comment="" disabled=no
add chain=prerouting in-interface=USER connection-mark=ad5 action=mark-routing new-routing-mark=ad5 passthrough=no comment="" disabled=no
/ ip firewall nat
add chain=srcnat connection-mark=ad1 action=src-nat to-addresses=10.111.0.2 to-ports=0-65535 comment="" disabled=no
add chain=srcnat connection-mark=ad2 action=src-nat to-addresses=10.114.0.2 to-ports=0-65535 comment="" disabled=no
add chain=srcnat connection-mark=ad3 action=src-nat to-addresses=10.113.0.2 to-ports=0-65535 comment="" disabled=no
add chain=srcnat connection-mark=ad4 action=src-nat to-addresses=10.112.0.3 to-ports=0-65535 comment="" disabled=no
add chain=srcnat connection-mark=ad5 action=src-nat to-addresses=192.168.1.23 to-ports=0-65535 comment="" disabled=no
/ ip route
add dst-address=0.0.0.0/0 gateway=10.111.0.1 scope=255 target-scope=10 routing-mark=ad1 comment="" disabled=no
add dst-address=0.0.0.0/0 gateway=10.112.0.1 scope=255 target-scope=10 routing-mark=ad2 comment="" disabled=no
add dst-address=0.0.0.0/0 gateway=10.113.0.1 scope=255 target-scope=10 routing-mark=ad3 comment="" disabled=no
add dst-address=0.0.0.0/0 gateway=192.168.1.1 scope=255 target-scope=10 routing-mark=ad4 comment="" disabled=no
add dst-address=0.0.0.0/0 gateway=192.168.2.1 scope=255 target-scope=10 routing-mark=ad5 comment="" disabled=no
add dst-address=0.0.0.0/0 gateway=192.168.1.1 scope=255 target-scope=10 comment="" disabled=no
الخميس مارس 04, 2010 11:10 pm
