USG Policy Based Routing

Sven Eilenberger

Nov 28, 2018 • 2 min read

#Richtline erstellen
configure
set protocols static table 5 route 0.0.0.0/0 next-hop 192.168.9.1
set firewall modify LOAD_BALANCE rule 2500 action modify
set firewall modify LOAD_BALANCE rule 2500 modify table 5
set firewall modify LOAD_BALANCE rule 2500 source address 192.168.30.98
# Für ein ganzes Netz:
# set firewall modify LOAD_BALANCE rule 2500 source address 192.168.30.1/24
set firewall modify LOAD_BALANCE rule 2500 protocol all
#---------------------------------------------------
#alternativ nur ein Protokoll und spezifische Ports
#
#set firewall modify LOAD_BALANCE rule 2500 destination port 80,443
#set firewall modify LOAD_BALANCE rule 2500 protocol tcp
#---------------------------------------------------
commit;exit

#Richtline Löschen

configure
delete protocols static table 5
delete firewall modify LOAD_BALANCE rule 2500
commit;exit

Herkunft der Informormation:
Help Ubnt

#Richtline erstellen
configure
set protocols static table 5 route 0.0.0.0/0 next-hop 192.168.100.1
set firewall modify LOAD_BALANCE rule 2500 action modify
set firewall modify LOAD_BALANCE rule 2500 modify table 5
set firewall modify LOAD_BALANCE rule 2500 source address 192.168.30.98
set firewall modify LOAD_BALANCE rule 2500 destination port 80,443
set firewall modify LOAD_BALANCE rule 2500 protocol tcp
set firewall modify LOAD_BALANCE rule 2501 action modify
set firewall modify LOAD_BALANCE rule 2501 modify table 5
set firewall modify LOAD_BALANCE rule 2501 source address 10.19.0.1/24
set firewall modify LOAD_BALANCE rule 2501 protocol all
set firewall modify LOAD_BALANCE rule 2502 action modify
set firewall modify LOAD_BALANCE rule 2502 modify table 5
set firewall modify LOAD_BALANCE rule 2502 source address 192.168.99.1/24
set firewall modify LOAD_BALANCE rule 2502 protocol all
set firewall modify LOAD_BALANCE rule 2450 action accept
set firewall modify LOAD_BALANCE rule 2450 source address 10.19.0.0/24
set firewall modify LOAD_BALANCE rule 2450 destination address 192.168.30.0/24
set firewall modify LOAD_BALANCE rule 2451 action accept
set firewall modify LOAD_BALANCE rule 2451 source address 10.19.0.0/24
set firewall modify LOAD_BALANCE rule 2451 destination address 192.168.70.0/24
set firewall modify LOAD_BALANCE rule 2452 action accept
set firewall modify LOAD_BALANCE rule 2452 source address 10.19.0.0/24
set firewall modify LOAD_BALANCE rule 2452 destination address 192.168.1.0/24
set firewall modify LOAD_BALANCE rule 2453 action accept
set firewall modify LOAD_BALANCE rule 2453 source address 10.19.0.0/24
set firewall modify LOAD_BALANCE rule 2453 destination address 192.168.10.0/24
commit;exit

Sign up for more like this.