firewall {
    all-ping enable
    broadcast-ping disable
    ipv6-receive-redirects disable
    ipv6-src-route disable
    ip-src-route disable
    log-martians enable
    modify WLB {
        rule 10 {
            action modify
            modify {
                lb-group LB-LAN
            }
            source {
                address 192.168.10.0/24
            }
        }
        rule 20 {
            action modify
            modify {
                lb-group LB-LAN-2
            }
            source {
                address 192.168.20.0/24
            }
        }
    }
    receive-redirects disable
    send-redirects enable
    source-validation disable
    syn-cookies enable
}
interfaces {
    ethernet eth0 {
        address 192.168.10.1/24
        address 192.168.20.1/24
        duplex auto
        firewall {
            in {
                modify WLB
            }
        }
        speed auto
    }
    ethernet eth1 {
        address 93.155.130.20/29
        duplex auto
        speed auto
    }
    ethernet eth2 {
        duplex auto
        speed auto
        vif 72 {
            address 85.118.95.10/30
        }
    }
    loopback lo {
    }
}
load-balance {
    group LB-LAN {
        interface eth1 {
            route-test {
                initial-delay 60
                interval 10
                type {
                    ping {
                        target 194.145.63.12
                    }
                }
            }
        }
        interface eth2.72 {
            failover-only
            route-test {
                initial-delay 60
                interval 10
                type {
                    ping {
                        target 194.153.145.104
                    }
                }
            }
        }
    }
    group LB-LAN-2 {
        interface eth1 {
            failover-only
            route-test {
                initial-delay 60
                interval 10
                type {
                    ping {
                        target 194.145.63.12
                    }
                }
            }
        }
        interface eth2.72 {
            route-test {
                initial-delay 60
                interval 10
                type {
                    ping {
                        target 194.153.145.104
                    }
                }
            }
        }
    }
}
protocols {
    static {
        route 0.0.0.0/0 {
            next-hop 85.118.95.9 {
            }
            next-hop 93.155.130.17 {
            }
        }
    }
}
service {
    dhcp-server {
        disabled false
        hostfile-update disable
        shared-network-name DHCPD {
            authoritative disable
            subnet 192.168.10.0/24 {
                default-router 192.168.10.1
                dns-server 192.168.10.1
                lease 86400
                static-mapping sami {
                    ip-address 192.168.10.10
                    mac-address 00:22:fb:5d:21:8e
                }
            }
        }
    }
    dns {
        forwarding {
            cache-size 150
            listen-on eth0
            system
        }
    }
    gui {
        https-port 443
    }
    nat {
        rule 5999 {
            outbound-interface eth1
            type masquerade
        }
        rule 6000 {
            outbound-interface eth2.72
            type masquerade
        }
    }
    snmp {
        community public {
            authorization ro
            client 85.118.95.126
        }
        contact support@itservice-bg.net
        location Bulgaria
    }
    ssh {
        port 2222
        protocol-version v2
    }
}
system {
    host-name R2
    login {
        user ubnt {
            authentication {
                encrypted-password $6$9Xlo.5uBL9ya8df$4h.vqs6R2Wx6tmItRrIKBgqdn/3iB1.x3ywzeH/T5p.3zFRw11G5VJPwvP8/YtBqmeY7cKTVt1peN27YdFAwj0
                plaintext-password ""
            }
            level admin
        }
    }
    name-server 8.8.8.8
    name-server 8.8.4.4
    ntp {
        server 0.ubnt.pool.ntp.org {
        }
        server 1.ubnt.pool.ntp.org {
        }
        server 2.ubnt.pool.ntp.org {
        }
        server 3.ubnt.pool.ntp.org {
        }
    }
    offload {
        ipv4 {
            forwarding enable
            vlan enable
        }
    }
    syslog {
        global {
            facility all {
                level notice
            }
            facility protocols {
                level debug
            }
        }
    }
    time-zone Europe/Sofia
}


/* Warning: Do not remove the following line. */
/* === vyatta-config-version: "config-management@1:conntrack@1:dhcp-relay@1:dhcp-server@4:firewall@5:ipsec@3:nat@3:qos@1:quagga@2:system@4:ubnt-pptp@1:ubnt-util@1:vrrp@1:webgui@1:webproxy@1:zone-policy@1" === */
/* Release version: v1.4.0.4632200.140113.1644 */