Differences

This shows you the differences between two versions of the page.

--- guifi.net:virtualizacion [2012/09/04 13:12] – jose
+++ guifi.net:virtualizacion [2015/04/13 20:19] (current) – external edit 127.0.0.1
@@ Line 1: / Line 1: @@
-VBoxManage showvminfo "mikrotik5.19"
+  system identity set name=MatGeganta
-VBoxManage modifyvm "mikrotik5.19" --nic5 intnet
+VBoxManage showvminfo "MatIsern"
-VBoxManage modifyvm "mikrotik5.19" --intnet5 'escorxador-isern'
-  Isern	172.25.38.38/30	<-> 172.25.38.37/30 Geganta
+VBoxManage modifyvm "MatIsern" --nic5 intnet \\
+VBoxManage modifyvm "MatIsern" --intnet5 'escorxador-isern' \\
+VBoxManage modifyvm "MatIsern" --nictype5 82540EM \\
+<code>
+/ip firewall nat
+add chain=srcnat src-address="192.168.0.0/16" dst-address=!192.168.0.0/16 action=src-nat to-addresses=10.X.X.X comment="" disabled=no
+add chain=srcnat src-address="172.16.0.0/12" dst-address=!172.16.0.0/12 protocol=!ospf action=src-nat to-addresses=10.X.X.X comment="" disabled=no
+/ routing filter
+add action=discard chain=ebgp-in comment="1. Discard insert non 10.x routes from BGP peer" disabled=no invert-match=no prefix=!10.0.0.0/8 prefix-length=8-32
+add action=discard chain=ebgp-out comment="2. Discard send non 10.x routes to BGP peer" disabled=no invert-match=no prefix=!10.0.0.0/8 prefix-length=8-32
+add action=accept chain=ospf-in comment="3. Accept insert 10.x routes from OSPF neighbor" disabled=no invert-match=no prefix=10.0.0.0/8 prefix-length=8-32
+add action=accept chain=ospf-in comment="4. Accept insert 172.x routes from OSPF neighbor" disabled=no invert-match=no prefix=172.16.0.0/12 prefix-length=8-32
+add action=discard chain=ospf-in comment="5. Discard insert non 10.x and 172.x from OSPF neighbor" disabled=no invert-match=no
+add action=accept chain=ospf-out comment="6. Allow send 10.x routes to OSPF neighbor" disabled=no invert-match=no prefix=10.0.0.0/8 prefix-length=8-32
+add action=accept chain=ospf-out comment="7. Allow send 172.x routes to OSPF neighbor" disabled=no invert-match=no prefix=172.16.0.0/12 prefix-length=8-32
+add action=discard chain=ospf-out comment="8. Discard send non 10.x and 172.x to OSPF neighbor" disabled=no invert-match=no
+</code>