You are on page 1of 2

/ ip firewall mangle

add chain=input in-interface=CCOM action=mark-connection new-connection-


mark=CCOM_conn
add chain=input in-interface=CANTV-1 action=mark-connection new-connection-
mark=CANTV-1_conn
add chain=input in-interface=CANTV-2 action=mark-connection new-connection-
mark=CANTV-2_conn

add chain=output connection-mark=CCOM_conn action=mark-routing new-routing-


mark=to_CCOM
add chain=output connection-mark=CANTV-1_conn action=mark-routing new-routing-
mark=to_CANTV-1
add chain=output connection-mark=CANTV-2_conn action=mark-routing new-routing-
mark=to_CANTV-2

add chain=prerouting dst-address=172.16.66.17/27 action=accept in-interface=6-RED-


OFICINAS
add chain=prerouting dst-address=192.168.1.1/24 action=accept in-interface=6-RED-
OFICINAS
add chain=prerouting dst-address=192.168.1.3/24 action=accept in-interface=6-RED-
OFICINAS

add chain=prerouting dst-address=172.16.66.17/27 action=accept in-interface=7-RED-


APTO
add chain=prerouting dst-address=192.168.1.1/24 action=accept in-interface=7-RED-
APTO
add chain=prerouting dst-address=192.168.1.3/24 action=accept in-interface=7-RED-
APTO

add chain=prerouting dst-address=172.16.66.17/27 action=accept in-interface=8-WIFI-


OFICINA
add chain=prerouting dst-address=192.168.1.1/24 action=accept in-interface=8-WIFI-
OFICINA
add chain=prerouting dst-address=192.168.1.3/24 action=accept in-interface=8-WIFI-
OFICINA

add chain=prerouting dst-address-type=!local in-interface=6-RED-OFICINAS per-


connection-classifier=both-addresses:2/0 \
action=mark-connection new-connection-mark=CCOM_conn passthrough=yes
add chain=prerouting dst-address-type=!local in-interface=6-RED-OFICINAS per-
connection-classifier=both-addresses:2/1 \
action=mark-connection new-connection-mark=CANTV-1_conn passthrough=yes
add chain=prerouting dst-address-type=!local in-interface=6-RED-OFICINAS per-
connection-classifier=both-addresses:2/2 \
action=mark-connection new-connection-mark=CANTV-2_conn passthrough=yes

add chain=prerouting dst-address-type=!local in-interface=7-RED-APTO per-


connection-classifier=both-addresses:2/0 \
action=mark-connection new-connection-mark=CCOM_conn passthrough=yes
add chain=prerouting dst-address-type=!local in-interface=7-RED-APTO per-
connection-classifier=both-addresses:2/1 \
action=mark-connection new-connection-mark=CANTV-1_conn passthrough=yes
add chain=prerouting dst-address-type=!local in-interface=7-RED-APTO per-
connection-classifier=both-addresses:2/2 \
action=mark-connection new-connection-mark=CANTV-2_conn passthrough=yes

add chain=prerouting dst-address-type=!local in-interface=8-WIFI-OFICINA per-


connection-classifier=both-addresses:2/0 \
action=mark-connection new-connection-mark=CCOM_conn passthrough=yes
add chain=prerouting dst-address-type=!local in-interface=8-WIFI-OFICINA per-
connection-classifier=both-addresses:2/1 \
action=mark-connection new-connection-mark=CANTV-1_conn passthrough=yes
add chain=prerouting dst-address-type=!local in-interface=8-WIFI-OFICINA per-
connection-classifier=both-addresses:2/2 \
action=mark-connection new-connection-mark=CANTV-2_conn passthrough=yes

add chain=prerouting connection-mark=CCOM_conn in-interface=6-RED-OFICINAS


action=mark-routing new-routing-mark=to_CCOM
add chain=prerouting connection-mark=CANTV-1_conn in-interface=6-RED-OFICINAS
action=mark-routing new-routing-mark=to_CANTV-1
add chain=prerouting connection-mark=CANTV-2_conn in-interface=6-RED-OFICINAS
action=mark-routing new-routing-mark=to_CANTV-2

add chain=prerouting connection-mark=CCOM_conn in-interface=7-RED-APTO action=mark-


routing new-routing-mark=to_CCOM
add chain=prerouting connection-mark=CANTV-1_conn in-interface=7-RED-APTO
action=mark-routing new-routing-mark=to_CANTV-1
add chain=prerouting connection-mark=CANTV-2_conn in-interface=7-RED-APTO
action=mark-routing new-routing-mark=to_CANTV-2

add chain=prerouting connection-mark=CCOM_conn in-interface=8-WIFI-OFICINA


action=mark-routing new-routing-mark=to_CCOM
add chain=prerouting connection-mark=CANTV-1_conn in-interface=8-WIFI-OFICINA
action=mark-routing new-routing-mark=to_CANTV-1
add chain=prerouting connection-mark=CANTV-2_conn in-interface=8-WIFI-OFICINA
action=mark-routing new-routing-mark=to_CANTV-2

/ ip route
add dst-address=0.0.0.0/0 gateway=172.16.66.1 routing-mark=to_CCOM check-
gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.1.1 routing-mark=to_CANTV-1 check-
gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.3.1 routing-mark=to_CANTV-2 check-
gateway=ping

add dst-address=0.0.0.0/0 gateway=172.16.66.1 distance=1 check-gateway=ping


add dst-address=0.0.0.0/0 gateway=192.168.1.1 distance=2 check-gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.3.1 distance=3 check-gateway=ping

/ ip firewall nat
add chain=srcnat out-interface=ADSL1 action=masquerade
add chain=srcnat out-interface=ADSL2 action=masquerade

http://configurarmikrotikwireless.com/detalles

You might also like