Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision |
guifi.net:virtualizacion [2012/09/04 13:57] – jose | guifi.net:virtualizacion [2015/04/13 20:19] (current) – external edit 127.0.0.1 |
---|
VBoxManage modifyvm "MatIsern" --nictype5 82540EM \\ | VBoxManage modifyvm "MatIsern" --nictype5 82540EM \\ |
| |
| <code> |
| /ip firewall nat |
| add chain=srcnat src-address="192.168.0.0/16" dst-address=!192.168.0.0/16 action=src-nat to-addresses=10.X.X.X comment="" disabled=no |
| add chain=srcnat src-address="172.16.0.0/12" dst-address=!172.16.0.0/12 protocol=!ospf action=src-nat to-addresses=10.X.X.X comment="" disabled=no |
| |
Isern 172.25.38.38/30 <-> 172.25.38.37/30 Geganta | / routing filter |
Geganta 172.25.32.94/30 <-> 172.25.32.94/30 Mainada | add action=discard chain=ebgp-in comment="1. Discard insert non 10.x routes from BGP peer" disabled=no invert-match=no prefix=!10.0.0.0/8 prefix-length=8-32 |
Mainada 172.25.45.161/30 <-> 172.25.45.162/30 SantSimo | add action=discard chain=ebgp-out comment="2. Discard send non 10.x routes to BGP peer" disabled=no invert-match=no prefix=!10.0.0.0/8 prefix-length=8-32 |
| add action=accept chain=ospf-in comment="3. Accept insert 10.x routes from OSPF neighbor" disabled=no invert-match=no prefix=10.0.0.0/8 prefix-length=8-32 |
| add action=accept chain=ospf-in comment="4. Accept insert 172.x routes from OSPF neighbor" disabled=no invert-match=no prefix=172.16.0.0/12 prefix-length=8-32 |
| add action=discard chain=ospf-in comment="5. Discard insert non 10.x and 172.x from OSPF neighbor" disabled=no invert-match=no |
| add action=accept chain=ospf-out comment="6. Allow send 10.x routes to OSPF neighbor" disabled=no invert-match=no prefix=10.0.0.0/8 prefix-length=8-32 |
| add action=accept chain=ospf-out comment="7. Allow send 172.x routes to OSPF neighbor" disabled=no invert-match=no prefix=172.16.0.0/12 prefix-length=8-32 |
| add action=discard chain=ospf-out comment="8. Discard send non 10.x and 172.x to OSPF neighbor" disabled=no invert-match=no |
| </code> |