ether1@TGG
ether2@Indihome
ether5@Lan
/ip firewall mangle add chain=input in-interface=ether1@TGG action=mark-connection new-connection-mark=traffic-tgg
/ip firewall mangle add chain=input in-interface=ether2@Indihome action=mark-connection new-connection-mark=traffic-telkom
/ip firewall mangle add chain=output connection-mark=traffic-tgg action=mark-routing new-routing-mark=to-tgg
/ip firewall mangle add chain=output connection-mark=traffic-telkom action=mark-routing new-routing-mark=to-telkom
/ip firewall mangle add chain=prerouting dst-address=27.123.0.40/30 action=accept in-interface=ether5@Lan
/ip firewall mangle add chain=prerouting dst-address=192.168.1.0/24 action=accept in-interface=ether5@Lan
/ip firewall mangle add chain=prerouting dst-address-type=!local in-interface=ether5@Lan per-connection-classifier=both-addresses-and-ports:2/0 action=mark-connection new-connection-mark=traffic-tgg passthrough=yes
/ip firewall mangle add chain=prerouting dst-address-type=!local in-interface=ether5@Lan per-connection-classifier=both-addresses-and-ports:2/1 action=mark-connection new-connection-mark=traffic-telkom passthrough=yes
/ip firewall mangle add chain=prerouting connection-mark=traffic-tgg in-interface=ether5@Lan action=mark-routing new-routing-mark=to-tgg
/ip firewall mangle add chain=prerouting connection-mark=traffic-telkom in-interface=ether5@Lan action=mark-routing new-routing-mark=to-telkom
/ip route
add dst-address=0.0.0.0/0 gateway=27.123.0.41 routing-mark=to-tgg check-gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.1.1 routing-mark=to-telkom check-gateway=ping
All-Connection
/ip firewall mangle add chain=forward action=mark-connection new-connection-mark=all passthrough=yes protocol=!icmp src-address-list=local dst-address-list=!local
/ip firewall mangle add chain=forward action=mark-connection new-connection-mark=all passthrough=yes protocol=!icmp src-address-list=!local dst-address-list=local
/ip firewall mangle add chain=prerouting action=mark-packet new-packet-mark=Pack-all passthrough=yes connection-mark=all
ether2@Indihome
ether5@Lan
/ip firewall mangle add chain=input in-interface=ether1@TGG action=mark-connection new-connection-mark=traffic-tgg
/ip firewall mangle add chain=input in-interface=ether2@Indihome action=mark-connection new-connection-mark=traffic-telkom
/ip firewall mangle add chain=output connection-mark=traffic-tgg action=mark-routing new-routing-mark=to-tgg
/ip firewall mangle add chain=output connection-mark=traffic-telkom action=mark-routing new-routing-mark=to-telkom
/ip firewall mangle add chain=prerouting dst-address=27.123.0.40/30 action=accept in-interface=ether5@Lan
/ip firewall mangle add chain=prerouting dst-address=192.168.1.0/24 action=accept in-interface=ether5@Lan
/ip firewall mangle add chain=prerouting dst-address-type=!local in-interface=ether5@Lan per-connection-classifier=both-addresses-and-ports:2/0 action=mark-connection new-connection-mark=traffic-tgg passthrough=yes
/ip firewall mangle add chain=prerouting dst-address-type=!local in-interface=ether5@Lan per-connection-classifier=both-addresses-and-ports:2/1 action=mark-connection new-connection-mark=traffic-telkom passthrough=yes
/ip firewall mangle add chain=prerouting connection-mark=traffic-tgg in-interface=ether5@Lan action=mark-routing new-routing-mark=to-tgg
/ip firewall mangle add chain=prerouting connection-mark=traffic-telkom in-interface=ether5@Lan action=mark-routing new-routing-mark=to-telkom
/ip route
add dst-address=0.0.0.0/0 gateway=27.123.0.41 routing-mark=to-tgg check-gateway=ping
add dst-address=0.0.0.0/0 gateway=192.168.1.1 routing-mark=to-telkom check-gateway=ping
All-Connection
/ip firewall mangle add chain=forward action=mark-connection new-connection-mark=all passthrough=yes protocol=!icmp src-address-list=local dst-address-list=!local
/ip firewall mangle add chain=forward action=mark-connection new-connection-mark=all passthrough=yes protocol=!icmp src-address-list=!local dst-address-list=local
/ip firewall mangle add chain=prerouting action=mark-packet new-packet-mark=Pack-all passthrough=yes connection-mark=all
Tidak ada komentar:
Posting Komentar