You are on page 1of 1

FORWARD

packet flow digram MANGLE FILTER


ROUTING TTL-1 ACCOUNTING
DECISION FORWARD FORWARD /ip accounting
/ip firewall mangle /ip firewall filter

PRE POST
ROUTING INPUT OUTPUT ROUTING

MANGLE MANGLE
DST-NAT ROUTING
INPUT POSTROUTING
/ip firewall nat
/ip firewall mangle ADJUSTMENT /ip firewall mangle

Q
MANGLE FILTER FILTER
PREROUTING SRC-NAT
INPUT OUTPUT /ip firewall nat
/ip firewall mangle /ip firewall filter /ip firewall filter

qualitytraining
CONNECTION QUEUE TREE MANGLE
HOTSPOT
TRACKING “GLOBAL” OUTPUT
/ip firewall connection tracking /queue tree /ip firewall mangle
OUT

RAW SIMPLE CONNECTION QUEUE TREE


PREROUTING QUEUES TRACKING “GLOBAL”
/ip firewall raw
Succeed with Quality
/queue simple /ip firewall connection tracking /queue tree

IPSec YES RAW SIMPLE


HOTSPOT IPSec POLICY?
DECRYPTION OUTPUT QUEUES
IN /ip ipsec policy
/ip firewall raw /queue simple

NO

IPSec YES
LOCAL ROUTING IPSec POLICY?
IN OUT
PROCESSES DECISION ENCRYPTION /ip ipsec policy

NO
INTERFACE
QUEUE TREE
/queue tree
simple color packet flow diagram (routing L3)
UKRAINE with IPsec for MikroTik ROS v6
INPUT Official Training Center v2.0.2 by MikroTikls.com.ua OUTPUT
INTERFACE INTERFACE

You might also like