firewall { all-ping enable broadcast-ping disable ipv6-receive-redirects disable ipv6-src-route disable ip-src-route disable log-martians enable name WAN_IN { default-action drop description "WAN to internal" rule 10 { action accept description "Allow established/related" state { established enable related enable } } rule 20 { action drop description "Drop invalid state" state { invalid enable } } } name WAN_LOCAL { default-action drop description "WAN to router" rule 10 { action accept description "Allow established/related" state { established enable related enable } } rule 20 { action drop description "Drop invalid state" state { invalid enable } } } name vlans { default-action accept description "vlan com" rule 1 { action accept description "vlan communication" destination { address 10.26.107.0/24 } log disable protocol all source { address 10.26.106.0/24 } } rule 2 { action accept description "vlan communitcation 2" destination { address 10.26.106.0/24 } log disable protocol all source { address 10.26.107.0/24 } } } receive-redirects disable send-redirects enable source-validation disable syn-cookies enable } interfaces { ethernet eth0 { address x.x.x.x description Internet duplex auto firewall { in { name WAN_IN } local { name WAN_LOCAL } } speed auto } ethernet eth1 { address 10.26.106.9/24 description Local duplex auto speed auto } ethernet eth2 { address 10.26.107.1/24 description "Local 2" duplex auto speed auto } ethernet eth3 { address 10.26.108.1/24 duplex auto speed auto } ethernet eth4 { duplex auto speed auto } ethernet eth5 { duplex auto speed auto } ethernet eth6 { duplex auto speed auto } ethernet eth7 { duplex auto speed auto } loopback lo { } } port-forward { auto-firewall enable hairpin-nat disable wan-interface eth0 } protocols { static { interface-route 10.26.106.0/24 { next-hop-interface eth1 { } } interface-route 10.26.107.0/24 { next-hop-interface eth2 { } } route 10.26.106.0/24 { next-hop 10.26.106.9 { } } route 10.26.107.0/24 { next-hop 10.26.107.1 { } } route 10.26.108.0/24 { next-hop 10.26.108.1 { } } route 10.26.112.0/24 { next-hop 10.26.106.10 { } } route 10.26.206.0/24 { next-hop 10.26.106.10 { } } route 10.26.212.0/24 { next-hop 10.26.106.10 { } } } } service { dhcp-server { disabled false hostfile-update disable shared-network-name LAN2 { authoritative disable subnet 10.26.107.0/24 { default-router 10.26.107.1 dns-server 10.26.106.18 dns-server 10.26.106.12 domain-name mydomain.com lease 86400 start 10.26.107.30 { stop 10.26.107.240 } } } shared-network-name LAN3 { authoritative disable subnet 10.26.108.0/24 { default-router 10.26.108.1 dns-server 10.26.106.18 dns-server 10.26.106.12 lease 86400 start 10.26.108.50 { stop 10.26.108.200 } } } } dns { forwarding { cache-size 150 listen-on eth2 listen-on eth1 listen-on eth3 } } gui { https-port 443 } nat { rule 5010 { description "masquerade for WAN" outbound-interface eth0 type masquerade } } ssh { port 22 protocol-version v2 } telnet { port 23 } } system { gateway-address x.x.x.x host-name EDGEROUTER login { user admin { authentication { encrypted-password plaintext-password "" } level admin } user administrator { authentication { encrypted-password plaintext-password "" } level admin } user ubnt { authentication { encrypted-password plaintext-password "" } full-name "" level admin } } name-server 24.217.0.5 name-server 24.217.201.67 ntp { server 0.ubnt.pool.ntp.org { } server 1.ubnt.pool.ntp.org { } server 2.ubnt.pool.ntp.org { } server 3.ubnt.pool.ntp.org { } } syslog { global { facility all { level notice } facility protocols { level debug } } } time-zone UTC }
/* Warning: Do not remove the following line. / / === vyatta-config-version: "config-management@1:conntrack@1:cron@1:dhcp-relay@1:dhcp-server@4:firewall@5:ipsec@4:nat@3:qos@1:quagga@2:system@4:ubnt-pptp@1:ubnt-util@1:vrrp@1:webgui@1:webproxy@1:zone-policy@1" === / / Release version: v1.7.0.4783374.150622.1540 */ admin@EDGEROUTER:~$