Skip to content

Instantly share code, notes, and snippets.

@vibbow
Created April 6, 2020 07:07
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save vibbow/01ac6ccc2e44c0b0d33bd2650745e9b8 to your computer and use it in GitHub Desktop.
Save vibbow/01ac6ccc2e44c0b0d33bd2650745e9b8 to your computer and use it in GitHub Desktop.
/interface ethernet
set [ find default-name=ether1 ] name=ether1-telecom
set [ find default-name=ether2 ] name=ether2-cmcc
/ip firewall address-list
add address=192.168.0.0/16 list=Connected
add address=172.16.0.0/12 list=Connected
add address=192.168.0.0/16 list=LAN
add address=172.16.0.0/12 list=LAN
add address=36.128.0.0/10 list=ROUTE_CMCC
add address=39.128.0.0/10 list=ROUTE_CMCC
add address=43.239.172.0/22 list=ROUTE_CMCC
add address=43.251.244.0/22 list=ROUTE_CMCC
add address=45.121.68.0/22 list=ROUTE_CMCC
add address=45.121.72.0/22 list=ROUTE_CMCC
add address=45.121.172.0/22 list=ROUTE_CMCC
add address=45.121.176.0/22 list=ROUTE_CMCC
add address=45.122.96.0/21 list=ROUTE_CMCC
add address=45.123.152.0/22 list=ROUTE_CMCC
add address=45.124.36.0/22 list=ROUTE_CMCC
add address=45.125.24.0/22 list=ROUTE_CMCC
add address=45.253.72.0/22 list=ROUTE_CMCC
add address=61.14.240.0/22 list=ROUTE_CMCC
add address=61.14.244.0/22 list=ROUTE_CMCC
add address=103.20.112.0/22 list=ROUTE_CMCC
add address=103.21.176.0/22 list=ROUTE_CMCC
add address=103.35.104.0/22 list=ROUTE_CMCC
add address=103.61.156.0/22 list=ROUTE_CMCC
add address=103.61.160.0/22 list=ROUTE_CMCC
add address=103.62.24.0/22 list=ROUTE_CMCC
add address=103.62.204.0/22 list=ROUTE_CMCC
add address=103.62.208.0/22 list=ROUTE_CMCC
add address=103.192.0.0/22 list=ROUTE_CMCC
add address=103.192.144.0/22 list=ROUTE_CMCC
add address=103.193.140.0/22 list=ROUTE_CMCC
add address=103.203.164.0/22 list=ROUTE_CMCC
add address=103.205.108.0/22 list=ROUTE_CMCC
add address=103.205.116.0/22 list=ROUTE_CMCC
add address=103.222.196.0/22 list=ROUTE_CMCC
add address=111.0.0.0/10 list=ROUTE_CMCC
add address=112.0.0.0/10 list=ROUTE_CMCC
add address=117.128.0.0/10 list=ROUTE_CMCC
add address=120.192.0.0/10 list=ROUTE_CMCC
add address=175.176.188.0/22 list=ROUTE_CMCC
add address=183.192.0.0/10 list=ROUTE_CMCC
add address=211.103.0.0/17 list=ROUTE_CMCC
add address=211.136.0.0/14 list=ROUTE_CMCC
add address=211.140.0.0/15 list=ROUTE_CMCC
add address=211.142.0.0/17 list=ROUTE_CMCC
add address=211.142.128.0/17 list=ROUTE_CMCC
add address=211.143.0.0/16 list=ROUTE_CMCC
add address=218.200.0.0/14 list=ROUTE_CMCC
add address=218.204.0.0/15 list=ROUTE_CMCC
add address=218.206.0.0/15 list=ROUTE_CMCC
add address=221.130.0.0/15 list=ROUTE_CMCC
add address=221.176.0.0/13 list=ROUTE_CMCC
add address=223.64.0.0/11 list=ROUTE_CMCC
add address=223.96.0.0/12 list=ROUTE_CMCC
add address=223.112.0.0/14 list=ROUTE_CMCC
add address=223.116.0.0/15 list=ROUTE_CMCC
add address=223.120.128.0/17 list=ROUTE_CMCC
add address=223.121.128.0/17 list=ROUTE_CMCC
add address=223.122.0.0/15 list=ROUTE_CMCC
add address=223.124.0.0/14 list=ROUTE_CMCC
/ip firewall mangle
add action=mark-connection chain=prerouting comment="Telecom in" connection-mark=no-mark connection-state=new in-interface=ether1-telecom new-connection-mark=TELECOM_CONN passthrough=yes
add action=mark-connection chain=prerouting comment="CMCC in" connection-mark=no-mark connection-state=new in-interface=ether2-cmcc new-connection-mark=CMCC_CONN passthrough=yes
add action=mark-connection chain=prerouting comment="Telecom out" connection-mark=no-mark connection-state=new dst-address-list= ROUTE_TELECOM new-connection-mark=TELECOM_CONN passthrough=yes src-address-list=LAN
add action=mark-connection chain=output connection-mark=no-mark connection-state=new dst-address-list=ROUTE_TELECOM new-connection-mark= TELECOM_CONN passthrough=yes src-address-type=local
add action=mark-connection chain=prerouting comment="CMCC out" connection-mark=no-mark connection-state=new dst-address-list=ROUTE_CMCC new-connection-mark=CMCC_CONN passthrough=yes src-address-list=LAN
add action=mark-connection chain=output connection-mark=no-mark connection-state=new dst-address-list=ROUTE_CMCC new-connection-mark= CMCC_CONN passthrough=yes src-address-type=local
add action=mark-connection chain=prerouting comment="Default out" connection-mark=no-mark connection-state=new dst-address-list=!Connected new-connection-mark=TELECOM_CONN passthrough=yes src-address-list=LAN
add action=mark-connection chain=output connection-mark=no-mark connection-state=new dst-address-list=!Connected new-connection-mark= TELECOM_CONN passthrough=yes src-address-type=local
add action=mark-routing chain=prerouting comment="Telecom out" connection-mark=TELECOM_CONN dst-address-list=!Connected new-routing-mark=GO_TELECOM passthrough=no src-address-list=LAN
add action=mark-routing chain=output connection-mark=TELECOM_CONN dst-address-list=!Connected new-routing-mark=GO_TELECOM passthrough=no routing-table=main src-address-type=local
add action=mark-routing chain=prerouting comment="CMCC out" connection-mark= CMCC_CONN dst-address-list=!Connected new-routing-mark=GO_CMCC passthrough=no src-address-list=LAN
add action=mark-routing chain=output connection-mark=CMCC_CONN dst-address-list=!Connected new-routing-mark=GO_CMCC passthrough=no src-address-type=local
/ip route
add check-gateway=arp distance=1 gateway=113.142.72.1 routing-mark=GO_TELECOM
add check-gateway=arp distance=1 gateway=111.19.171.129 routing-mark=GO_CMCC
add check-gateway=arp distance=1 gateway=113.142.72.1
add check-gateway=arp distance=2 gateway=111.19.171.129
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment