InfraRefresh/routing: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
|||
| (One intermediate revision by the same user not shown) | |||
| Line 1: | Line 1: | ||
Traffic goes out via UPC unless directed otherwise in the Modify policies. | |||
Routing policy for traffic from Nurdspace network | Routing policy for traffic from Nurdspace network | ||
modify Nurdspace-Client-IN { | modify Nurdspace-Client-IN { | ||
| Line 222: | Line 225: | ||
type destination | type destination | ||
} | } | ||
== BGP == | |||
Neighbor V AS MsgRcv MsgSen TblVer InQ OutQ Up/Down State/PfxRcd | |||
10.38.20.5 4 65530 203410 356286 1084 0 0 09w6d23h 5 | |||
172.30.0.5 4 64513 349444 349334 1084 0 0 01:58:13 4 | |||
2001:470:7894:beef::1 4 64513 349660 349667 1084 0 0 01w0d04h 0 | |||
10.38.20.5 == zarya | |||
172.40.0.5 == Techinc | |||
2001:470:7894:beef::1 == Techinc | |||
Latest revision as of 12:21, 23 November 2017
Traffic goes out via UPC unless directed otherwise in the Modify policies.
Routing policy for traffic from Nurdspace network
modify Nurdspace-Client-IN {
rule 1 {
action modify
description restore-mark
modify {
connmark {
restore-mark
}
}
}
rule 4 {
action accept
description "Keep local local"
destination {
group {
network-group RFC1918
}
}
}
rule 5 {
action modify
description "route irc over BIT"
destination {
port 6667,6697
}
modify {
table 2
}
protocol tcp
}
rule 6 {
action modify
description "Spacenet radius"
destination {
address 194.171.96.99
}
modify {
table 2
}
}
rule 8 {
action modify
description "Http/Https over DSL"
destination {
port 80,443
}
modify {
table 2
}
protocol tcp
}
rule 10 {
action modify
description "route traffic from BIT back over BIT"
mark 2
modify {
table 2
}
}
rule 11 {
action modify
description "Outbound email v4"
destination {
port 25
}
modify {
table 2
}
protocol tcp
source {
address 10.208.10.5
}
}
rule 98 {
action modify
description "route over dsl"
disable
modify {
table 2
}
}
rule 99 {
action accept
description "Accept all"
}
}
Bit incomming
rule 16 {
destination {
address 213.154.252.130
port 1812
}
inbound-interface eth2
inside-address {
address 192.168.1.2
}
protocol udp
type destination
}
UPC incomming
rule 1 {
destination {
address 77.251.168.181
port 80
}
inbound-interface eth1
inside-address {
address 10.208.11.6
}
log disable
protocol tcp
type destination
}
rule 2 {
destination {
address 77.251.168.181
port 443
}
inbound-interface eth1
inside-address {
address 10.208.11.6
}
log disable
protocol tcp
type destination
}
rule 6 {
destination {
address 77.251.168.181
port 22
}
inbound-interface eth1
inside-address {
address 10.208.11.2
}
log disable
protocol tcp
type destination
}
rule 9 {
destination {
address 77.251.168.181
port 122
}
inbound-interface eth1
inside-address {
address 10.208.11.250
port 22
}
log disable
protocol tcp
type destination
}
rule 10 {
destination {
address 77.251.168.181
port 60000-60050
}
inbound-interface eth1
inside-address {
address 10.208.11.250
}
log disable
protocol udp
type destination
}
Hairpin natting
rule 7 {
destination {
address 77.251.168.181
port 22
}
inbound-interface eth0
inside-address {
address 10.208.11.2
}
log disable
protocol tcp
type destination
}
rule 3 {
destination {
address 77.251.168.181
port 80
}
inbound-interface eth0
inside-address {
address 10.208.11.6
}
log disable
protocol tcp
type destination
}
rule 4 {
destination {
address 77.251.168.181
port 443
}
inbound-interface eth0
inside-address {
address 10.208.11.6
}
log disable
protocol tcp
type destination
}
rule 5 {
destination {
address 77.251.168.181
port 22
}
inbound-interface eth0
inside-address {
address 10.208.11.2
}
log disable
protocol tcp
type destination
}
BGP
Neighbor V AS MsgRcv MsgSen TblVer InQ OutQ Up/Down State/PfxRcd 10.38.20.5 4 65530 203410 356286 1084 0 0 09w6d23h 5 172.30.0.5 4 64513 349444 349334 1084 0 0 01:58:13 4 2001:470:7894:beef::1 4 64513 349660 349667 1084 0 0 01w0d04h 0
10.38.20.5 == zarya 172.40.0.5 == Techinc 2001:470:7894:beef::1 == Techinc