## Last changed: 2019-09-19 10:05:38 UTC

version 12.1X44-D40.2;
system {
root-authentication {
encrypted-password "$1$udN.gglD$yj33zu2dSnxdawL.MwV3A1";
}
services {
web-management {
http {
interface [ fe-0/0/1.0 fe-0/0/6.0 ];
}
}
}
}
interfaces {
fe-0/0/0 {
unit 0 {
family inet {
address 192.168.1.1/24;
}
}
}
fe-0/0/1 {
unit 0 {
family inet {
address 192.168.2.1/24;
}
}
}
fe-0/0/5 {
unit 0 {
family inet {
filter {
input redirect-to-isp;
}
address 50.1.1.1/24;
}
}
}
fe-0/0/6 {
unit 0 {
family inet {
filter {
input redirect-to-isp;
}
address 50.2.1.1/24;
}
}
}
fe-0/0/7 {
unit 0 {
family inet {
filter {
input redirect-to-isp;
}
address 50.3.1.1/24;
}
}
}
}
routing-options {
rib-groups {
ISP1-to-ISP2 {
import-rib ISP1.inet.0;
}
ISP2-to-ISP1 {
import-rib ISP2.inet.0;
}
}
}
security {
zones {
security-zone INTERNET1 {
interfaces {
fe-0/0/0.0 {
host-inbound-traffic {
system-services {
all;
}
protocols {
all;
}
}
}
}
}
security-zone INTERNET2 {
interfaces {
fe-0/0/1.0 {
host-inbound-traffic {
system-services {
all;
}
protocols {
all;
}
}
}
}
}
security-zone HEREDIA_1 {
interfaces {
fe-0/0/5.0 {
host-inbound-traffic {
system-services {
all;
}
protocols {
all;
}
}
}
}
}
security-zone HEREDIA_2 {
interfaces {
fe-0/0/6.0 {
host-inbound-traffic {
 system-services {
all;
}
protocols {
all;
}
}
}
}
}
security-zone HEREDIA_3 {
interfaces {
fe-0/0/7.0 {
host-inbound-traffic {
system-services {
all;
}
protocols {
all;
}
}
}
}
}
}
}
firewall {
family inet {
filter redirect-to-isp {
term aceptar {
from {
destination-address {
50.1.1.0/24;
50.2.1.0/24;
50.3.1.0/24;
}
}
then accept;
}
term SICOES {
from {
source-address {
50.2.1.20/32;
}
destination-address {
8.8.8.8/32;
}
}
then {
routing-instance ISP2;
}
}
term to-isp1 {
from {
source-address {
50.1.1.0/24;
50.3.1.10/32;
}
}
 then {
routing-instance ISP1;
}
}
term to-isp2 {
from {
source-address {
50.3.1.0/24;
50.2.1.0/24;
}
}
then {
routing-instance ISP2;
}
}
term default-allow {
then accept;
}
}
}
}
routing-instances {
ISP1 {
instance-type virtual-router;
interface fe-0/0/0.0;
routing-options {
interface-routes {
rib-group inet ISP1-to-ISP2;
}
static {
route 0.0.0.0/0 next-hop 192.168.1.10;
}
}
}
ISP2 {
instance-type virtual-router;
interface fe-0/0/1.0;
routing-options {
interface-routes {
rib-group inet ISP2-to-ISP1;
}
static {
route 0.0.0.0/0 next-hop 192.168.2.20;
}
}
}
}