PF FreeBSD �� ISP �� VLAN (isvd)

Tue, 12 May 2015 12:42:55 GMT

�� . ��.

ext_if1 = "igb0"
ext_if2 = "vlan4"
ext_gw1 = "xx.xx.250.1"
ext_gw2 = "xx.xx.18.1"
lan_net = "10.0.0.0/8"

set limit states 16000000
set optimization aggressive
set limit src-nodes 160000
set limit table-entries 160000
nat-anchor "ftp-proxy/*"

nat on $ext_if1 from 10.6.0.0/20 to any -> $ext_if1
nat on $ext_if1 from 10.11.0.0/20 to any -> $ext_if1
nat on $ext_if1 from 10.13.0.0/20 to any -> $ext_if1
nat on $ext_if1 from 10.18.0.0/20 to any -> $ext_if1

nat on $ext_if2 from 10.8.0.0/20 to any -> $ext_if2

#�� (�� )
pass in quick on vlan6 route-to ($ext_if1 $ext_gw1) from 10.6.0.0/20 to !$lan_net keep state
pass in quick on vlan8 route-to ($ext_if2 $ext_gw2) from 10.8.0.0/20 to !$lan_net keep state
pass in quick on vlan11 route-to ($ext_if1 $ext_gw1) from 10.11.0.0/20 to !$lan_net keep state
pass in quick on vlan13 route-to ($ext_if1 $ext_gw1) from 10.13.0.0/20 to !$lan_net keep state
pass in quic

OpenForum RSS: PF FreeBSD ��� ISP ��� VLAN

PF FreeBSD ��� ISP ��� VLAN (isvd)

OpenForum RSS: PF FreeBSD �� ISP �� VLAN

PF FreeBSD �� ISP �� VLAN (isvd)