What it does
- Starts from seven templates: allow subnets, block subnets, default route, prefix length, bogons, BGP attributes and redistribution.
- Stacks templates in one chain, in the order you choose.
- Produces filter rules, the command that binds the chain, verification commands and rollback commands.
- Refuses malformed values and warns about rules that can never match and chains that accept nothing.
The commands are built in your browser. Your values are not sent to a server or saved. It does not connect to your router, so you stay in control of what runs. IPv4 only for now.
Examples
BGP: advertise only your own subnet
/routing/filter/rule/add chain=bgp-out comment="route-filter-generator" rule="if (dst in 203.0.113.0/24) {accept}"
/routing/bgp/connection/set [find name="upstream"] output.filter-chain=bgp-out
OSPF: redistribute only selected static routes
/routing/filter/rule/add chain=ospf-out comment="route-filter-generator" rule="if (protocol static && dst in 192.168.0.0/16) {accept}"
/routing/ospf/instance/set [find name="default"] out-filter-chain=ospf-out redistribute=static
RouterOS rejects any route a chain does not accept. A BGP connection with no output chain tries to advertise every active route it can find.
Generator
Please complete the check below to open the generator.