Created
February 27, 2025 11:33
-
-
Save rickmark/bad4632e0daaead193353547157f486c to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "interfaces": [ | |
| { | |
| "identification": { | |
| "id": "lo", | |
| "type": "loopback" | |
| }, | |
| "status": { | |
| "enabled": true, | |
| "mtu": 65536 | |
| }, | |
| "addresses": [ | |
| { | |
| "type": "static", | |
| "cidr": "127.0.0.1/8", | |
| "version": "v4" | |
| }, | |
| { | |
| "type": "static", | |
| "cidr": "::1/128", | |
| "version": "v6" | |
| } | |
| ] | |
| }, | |
| { | |
| "identification": { | |
| "id": "eth0", | |
| "type": "ethernet" | |
| }, | |
| "status": { | |
| "enabled": true, | |
| "comment": "WAN", | |
| "baseReachableTime": 30 | |
| }, | |
| "addresses": [ | |
| { | |
| "type": "dynamic", | |
| "cidr": null, | |
| "origin": "dhcp", | |
| "version": "v4" | |
| } | |
| ], | |
| "ipv4": {}, | |
| "ethernet": { | |
| "lldp": { | |
| "enabled": false | |
| } | |
| } | |
| }, | |
| { | |
| "identification": { | |
| "id": "eth4", | |
| "type": "ethernet" | |
| }, | |
| "status": { | |
| "enabled": true, | |
| "comment": "WAN2", | |
| "baseReachableTime": 30 | |
| }, | |
| "addresses": [ | |
| { | |
| "type": "dynamic", | |
| "cidr": null, | |
| "origin": "dhcp", | |
| "version": "v4" | |
| } | |
| ], | |
| "ipv4": {}, | |
| "ethernet": { | |
| "lldp": { | |
| "enabled": false | |
| } | |
| } | |
| }, | |
| { | |
| "identification": { | |
| "id": "eth1", | |
| "type": "ethernet" | |
| }, | |
| "status": { | |
| "enabled": true | |
| } | |
| }, | |
| { | |
| "identification": { | |
| "id": "eth2", | |
| "type": "ethernet" | |
| }, | |
| "status": { | |
| "enabled": true | |
| } | |
| }, | |
| { | |
| "identification": { | |
| "id": "eth3", | |
| "type": "ethernet" | |
| }, | |
| "status": { | |
| "enabled": true | |
| } | |
| }, | |
| { | |
| "identification": { | |
| "id": "eth5", | |
| "type": "ethernet" | |
| }, | |
| "status": { | |
| "enabled": true | |
| } | |
| }, | |
| { | |
| "identification": { | |
| "id": "br0", | |
| "type": "bridge" | |
| }, | |
| "status": { | |
| "enabled": true, | |
| "comment": "LAN" | |
| }, | |
| "addresses": [ | |
| { | |
| "type": "static", | |
| "cidr": "192.168.1.1/24", | |
| "version": "v4" | |
| } | |
| ], | |
| "bridge": { | |
| "interfaces": [ | |
| { | |
| "id": "eth1" | |
| }, | |
| { | |
| "id": "eth2" | |
| }, | |
| { | |
| "id": "eth3" | |
| }, | |
| { | |
| "id": "eth5" | |
| } | |
| ], | |
| "id": 0 | |
| } | |
| } | |
| ], | |
| "services": { | |
| "systemLog": { | |
| "enabled": false | |
| }, | |
| "unifiNetwork": { | |
| "enabled": true, | |
| "sitename": "default", | |
| "token": "ayV6XQASeush8emuGbIQmgqIYVAWT9wPzXUsM9PwT0DQy8pqWIAGjIItL0oiiUz6", | |
| "controllerURL": "https://192.168.1.1:8443", | |
| "informURL": "http://192.168.1.1:8080/inform", | |
| "certificate": { | |
| "crt": "MIIDfTCCAmWgAwIBAgIEZ8BEJTANBgkqhkiG9w0BAQsFADBrMQswCQYDVQQGEwJVUzERMA8GA1UECAwITmV3IFlvcmsxETAPBgNVBAcMCE5ldyBZb3JrMRYwFAYDVQQKDA1VYmlxdWl0aSBJbmMuMQ4wDAYDVQQLDAVVbmlGaTEOMAwGA1UEAwwFVW5pRmkwHhcNMjUwMjI3MTA1MzI1WhcNMjcwNjAyMTA1MzI1WjBrMQswCQYDVQQGEwJVUzERMA8GA1UECAwITmV3IFlvcmsxETAPBgNVBAcMCE5ldyBZb3JrMRYwFAYDVQQKDA1VYmlxdWl0aSBJbmMuMQ4wDAYDVQQLDAVVbmlGaTEOMAwGA1UEAwwFVW5pRmkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgtXwf18LvkTbJPvPyvnMkMd0lEsrK6kZExQGCdsQCCQo7F/Q9m9ckHVGVXe5DoXScx7nFwnYmr3H+QUdyLWBkdshW2xmhsmrqIwHhnJZIhf/mq137W6n7/zlWtBN7B79S5RZXHLfaV6nFihQh6NgHjgEsWaicJaRDNIxg9/b3SoyPpo10PVCeUqXm3w8w2X2gIj8+1K5rcpDAXMOtNd+tcFE32kJ+ybO+RHWnFH6SD0iZPtWQzY14I75EOY4MVxCTIkYb80xmKVLIao+DOykeA0ss7rRR0nW/lcSfwi7D+nYiBgMVjyMf7kz41UO0TkHGeBFLZRyCPfqOlB85IY5xAgMBAAGjKTAnMBAGA1UdEQQJMAeCBVVuaUZpMBMGA1UdJQQMMAoGCCsGAQUFBwMBMA0GCSqGSIb3DQEBCwUAA4IBAQCIV0h+qWo3O72bdXiLVO7ql/o8ZpUXKx+DOxyN5tYcwFDC+QrgjTTMbzzaaa10r8nXyt1vDS5kyufy5U7HdcMRjK6qhfpYVqRlROYVB+QNsQBIIsdkRuMkOC4jN9Lyysiq8umlh2kzvrJB+YVOqd4lC/KzQAxEcMdumdUpF8KPDFtFdcxMvvS2sWvi//1vp8/krKYwtbjqqTZ5RGNoA84kqsk/WjS4GD5RADkN29AH2ouvg4rC6+l1cbr0ENSnjpyGPowt0eRRerNrWwGoTTHUkvqxjpG5DNwJiceWnv3KbEEn2IY5qV08h1IdIs7Uu774ch1BD3X8M6amHQdiQS5q" | |
| } | |
| }, | |
| "lldp": { | |
| "enabled": true | |
| }, | |
| "ntpClient": { | |
| "enabled": true, | |
| "ntpServers": [ | |
| "0.ubnt.pool.ntp.org", | |
| "1.ubnt.pool.ntp.org", | |
| "2.ubnt.pool.ntp.org", | |
| "3.ubnt.pool.ntp.org" | |
| ] | |
| }, | |
| "dhcpServers": [ | |
| { | |
| "enabled": true, | |
| "interfaces": [ | |
| { | |
| "id": "br0" | |
| } | |
| ], | |
| "name": "net_Default_br0_192-168-1-0-24", | |
| "leaseTime": 60, | |
| "ipVersion": "v4", | |
| "rangeStart": "192.168.1.6", | |
| "staticLeases": [ | |
| { | |
| "id": "00:00:00:00:00:00", | |
| "addresses": [ | |
| "192.168.1.20" | |
| ] | |
| } | |
| ], | |
| "dnsServers": [ | |
| "192.168.1.1" | |
| ], | |
| "gatewayAddress": "192.168.1.1", | |
| "domain": "localdomain", | |
| "rangeStop": "192.168.1.254", | |
| "ipv4Netmask": 24, | |
| "conflictChecking": true | |
| } | |
| ], | |
| "dnsForwarder": { | |
| "listenInterfaces": [ | |
| { | |
| "id": "br0" | |
| } | |
| ], | |
| "portalAddress": { | |
| "address": "192.168.1.1", | |
| "version": "v4" | |
| }, | |
| "forwardBehavior": "allServers", | |
| "enabled": true, | |
| "hostRecords": [ | |
| { | |
| "hostName": "unifi.localdomain", | |
| "registerNonQualified": true, | |
| "address": { | |
| "address": "192.168.1.1", | |
| "version": "v4" | |
| } | |
| }, | |
| { | |
| "hostName": "setup.ui.com", | |
| "registerNonQualified": false, | |
| "address": { | |
| "address": "192.168.1.1", | |
| "version": "v4" | |
| } | |
| }, | |
| { | |
| "hostName": "EFG.localdomain", | |
| "registerNonQualified": true, | |
| "address": { | |
| "address": "192.168.1.1", | |
| "version": "v4" | |
| } | |
| }, | |
| { | |
| "hostName": "www.msftconnecttest.com", | |
| "registerNonQualified": false, | |
| "address": { | |
| "address": "192.168.1.1", | |
| "version": "v4" | |
| } | |
| }, | |
| { | |
| "hostName": "www.msftncsi.com", | |
| "registerNonQualified": false, | |
| "address": { | |
| "address": "192.168.1.1", | |
| "version": "v4" | |
| } | |
| }, | |
| { | |
| "hostName": "dns.msftncsi.com", | |
| "registerNonQualified": false, | |
| "address": { | |
| "address": "192.168.1.1", | |
| "version": "v4" | |
| } | |
| }, | |
| { | |
| "hostName": "*.devices.wifiman.me", | |
| "registerNonQualified": false, | |
| "address": { | |
| "address": "192.168.1.1", | |
| "version": "v4" | |
| } | |
| } | |
| ] | |
| }, | |
| "idsIps": { | |
| "enabled": false, | |
| "tor": false, | |
| "alien": false, | |
| "signatureScheduler": 0 | |
| }, | |
| "mdns": { | |
| "enabled": true, | |
| "interfaces": [ | |
| { | |
| "id": "br0" | |
| } | |
| ] | |
| }, | |
| "arpInspection": { | |
| "enabled": true, | |
| "interfaces": [ | |
| { | |
| "id": "br0" | |
| } | |
| ] | |
| }, | |
| "bleHTTPTransport": { | |
| "enabled": true, | |
| "serviceUUID": "7538c680-8441-47b4-ab44-2eb926fe11bd", | |
| "advertiseName": null, | |
| "advertiseMAC": null, | |
| "advertiseIPv4": null, | |
| "httpHostAddress": "http://127.0.0.1:80" | |
| }, | |
| "wanFailover": { | |
| "enabled": true, | |
| "wanInterfaces": [ | |
| { | |
| "interface": "eth0", | |
| "monitors": [ | |
| { | |
| "id": 1, | |
| "interval": 60, | |
| "timePeriod": 86400, | |
| "target": "ping.ui.com", | |
| "type": "icmp" | |
| }, | |
| { | |
| "id": 2, | |
| "interval": 3, | |
| "timePeriod": 60, | |
| "target": "ping.ui.com", | |
| "alert": { | |
| "lossThreshold": 50 | |
| }, | |
| "type": "icmp" | |
| }, | |
| { | |
| "id": 3, | |
| "interval": 10, | |
| "timePeriod": 30, | |
| "target": "1.1.1.1", | |
| "alert": { | |
| "lossThreshold": 100, | |
| "latencyThreshold": 1500 | |
| }, | |
| "type": "dns", | |
| "domain": "ui.com" | |
| }, | |
| { | |
| "id": 4, | |
| "interval": 10, | |
| "timePeriod": 30, | |
| "target": "8.8.8.8", | |
| "alert": { | |
| "lossThreshold": 100, | |
| "latencyThreshold": 1500 | |
| }, | |
| "type": "dns", | |
| "domain": "ui.com" | |
| }, | |
| { | |
| "id": 5, | |
| "interval": 10, | |
| "timePeriod": 30, | |
| "target": "www.microsoft.com", | |
| "type": "icmp" | |
| }, | |
| { | |
| "id": 6, | |
| "interval": 10, | |
| "timePeriod": 30, | |
| "target": "google.com", | |
| "type": "icmp" | |
| }, | |
| { | |
| "id": 7, | |
| "interval": 10, | |
| "timePeriod": 30, | |
| "target": "1.1.1.1", | |
| "type": "icmp" | |
| } | |
| ], | |
| "metric": 1, | |
| "routingTable": 201 | |
| }, | |
| { | |
| "interface": "eth4", | |
| "monitors": [ | |
| { | |
| "id": 8, | |
| "interval": 60, | |
| "timePeriod": 86400, | |
| "target": "ping.ui.com", | |
| "type": "icmp" | |
| }, | |
| { | |
| "id": 9, | |
| "interval": 3, | |
| "timePeriod": 60, | |
| "target": "ping.ui.com", | |
| "alert": { | |
| "lossThreshold": 50 | |
| }, | |
| "type": "icmp" | |
| }, | |
| { | |
| "id": 10, | |
| "interval": 10, | |
| "timePeriod": 30, | |
| "target": "1.1.1.1", | |
| "alert": { | |
| "lossThreshold": 100, | |
| "latencyThreshold": 1500 | |
| }, | |
| "type": "dns", | |
| "domain": "ui.com" | |
| }, | |
| { | |
| "id": 11, | |
| "interval": 10, | |
| "timePeriod": 30, | |
| "target": "8.8.8.8", | |
| "alert": { | |
| "lossThreshold": 100, | |
| "latencyThreshold": 1500 | |
| }, | |
| "type": "dns", | |
| "domain": "ui.com" | |
| }, | |
| { | |
| "id": 12, | |
| "interval": 10, | |
| "timePeriod": 30, | |
| "target": "www.microsoft.com", | |
| "type": "icmp" | |
| }, | |
| { | |
| "id": 13, | |
| "interval": 10, | |
| "timePeriod": 30, | |
| "target": "google.com", | |
| "type": "icmp" | |
| }, | |
| { | |
| "id": 14, | |
| "interval": 10, | |
| "timePeriod": 30, | |
| "target": "1.1.1.1", | |
| "type": "icmp" | |
| } | |
| ], | |
| "metric": 230, | |
| "routingTable": 202 | |
| } | |
| ], | |
| "failoverGroups": [ | |
| { | |
| "id": 1, | |
| "algorithm": "single", | |
| "interfaces": [ | |
| "eth0" | |
| ], | |
| "metric": 1 | |
| }, | |
| { | |
| "id": 2, | |
| "algorithm": "single", | |
| "interfaces": [ | |
| "eth4" | |
| ], | |
| "metric": 230 | |
| } | |
| ] | |
| }, | |
| "wifiman": { | |
| "enabled": true, | |
| "token": "ayV6XQASeush8emuGbIQmgqIYVAWT9wPzXUsM9PwT0DQy8pqWIAGjIItL0oiiUz6" | |
| }, | |
| "redirector": { | |
| "enabled": false, | |
| "instances": [] | |
| }, | |
| "loopProtection": { | |
| "enabled": false, | |
| "portRecovery": null | |
| } | |
| }, | |
| "system": { | |
| "hostname": "EFG", | |
| "domainName": "localdomain", | |
| "dnsServers": [ | |
| { | |
| "type": "static", | |
| "address": "1.1.1.1", | |
| "version": "v4", | |
| "interface": "lo", | |
| "priority": 1 | |
| } | |
| ], | |
| "arp": { | |
| "baseReachableTime": 600 | |
| }, | |
| "fwReleaseChannel": "release" | |
| }, | |
| "unifi": {}, | |
| "version": 48, | |
| "versionFormat": "v2", | |
| "versionDetail": { | |
| "bridge-firewall": 1, | |
| "firewall/filter": 3, | |
| "firewall/mangle": 4, | |
| "firewall/nat": 7, | |
| "firewall/pbr": 4, | |
| "firewall/sets": 1, | |
| "firewall/settings": 1, | |
| "interfaces": 20, | |
| "peripherals": 1, | |
| "qos": 1, | |
| "qos/ip": 2, | |
| "routes/access-lists": 1, | |
| "routes/ospf": 3, | |
| "routes/ospf/areas": 3, | |
| "routes/ospf/interfaces": 2, | |
| "routes/bgp/raw": 1, | |
| "routes/static": 1, | |
| "services/arpInspection": 1, | |
| "services/bleHTTPTransport": 1, | |
| "services/clientIsolation": 1, | |
| "services/ddns": 2, | |
| "services/dhcpServers": 2, | |
| "services/discoveryResponder": 1, | |
| "services/dnsForwarder": 4, | |
| "services/dpi": 1, | |
| "services/dohProxy": 3, | |
| "services/geoipFiltering": 1, | |
| "services/idsIps": 4, | |
| "services/igmpProxy": 1, | |
| "services/igmpSnooping": 2, | |
| "services/ipAccounting": 1, | |
| "services/l2tpServer": 3, | |
| "services/latencyMonitor": 1, | |
| "services/lldp": 1, | |
| "services/loopProtection": 1, | |
| "services/mdns": 1, | |
| "services/ntpClient": 1, | |
| "services/radius-profiles": 3, | |
| "services/radiusServer": 2, | |
| "services/snmpAgent": 2, | |
| "services/sshServer": 1, | |
| "services/sslInspection": 1, | |
| "services/stunnel": 1, | |
| "services/suspend": 1, | |
| "services/systemLog": 1, | |
| "services/telnetServer": 1, | |
| "services/uid": 1, | |
| "services/unifiNetwork": 2, | |
| "services/unms": 1, | |
| "services/upnp": 1, | |
| "services/utm": 2, | |
| "services/vrrp": 5, | |
| "services/wanFailover": 4, | |
| "services/webServer": 1, | |
| "services/wifiman": 2, | |
| "services/redirector": 1, | |
| "services/flowAccounting": 2, | |
| "system": 2, | |
| "system/users": 1, | |
| "vlans": 1, | |
| "vpn/ipsec/site-to-site": 4, | |
| "vpn/openvpn/peers": 5, | |
| "vpn/openvpn/raws": 5, | |
| "vpn/wireguard/clients": 4, | |
| "vpn/wireguard/servers": 3, | |
| "vpn/teleport": 1, | |
| "vpn/wireguard/site-to-sites": 4 | |
| }, | |
| "firewall/nat": [ | |
| { | |
| "id": 1, | |
| "chain": "POSTROUTING", | |
| "target": "MASQUERADE", | |
| "enabled": true, | |
| "log": false, | |
| "source": { | |
| "sets": [ | |
| "!ALL_ADDRv4_eth0" | |
| ] | |
| }, | |
| "outInterface": { | |
| "id": "eth0" | |
| }, | |
| "ipVersion": "v4only" | |
| }, | |
| { | |
| "id": 2, | |
| "chain": "POSTROUTING", | |
| "target": "MASQUERADE", | |
| "enabled": true, | |
| "log": false, | |
| "source": { | |
| "sets": [ | |
| "!ALL_ADDRv4_eth4" | |
| ] | |
| }, | |
| "outInterface": { | |
| "id": "eth4" | |
| }, | |
| "ipVersion": "v4only" | |
| }, | |
| { | |
| "id": 3, | |
| "chain": "PREROUTING", | |
| "target": "DNAT", | |
| "translation": { | |
| "address": "192.168.1.1", | |
| "port": "53" | |
| }, | |
| "description": "Redirect TCP/UDP traffic to port 53", | |
| "enabled": true, | |
| "log": false, | |
| "protocol": "tcp_udp", | |
| "source": { | |
| "address": "192.168.1.0/24" | |
| }, | |
| "destination": { | |
| "port": "53" | |
| }, | |
| "inInterface": { | |
| "id": "br0" | |
| }, | |
| "ipVersion": "v4only" | |
| }, | |
| { | |
| "id": 4, | |
| "chain": "PREROUTING", | |
| "target": "DNAT", | |
| "translation": { | |
| "address": "192.168.1.1", | |
| "port": "80" | |
| }, | |
| "description": "Redirect TCP/UDP traffic to port 80", | |
| "enabled": true, | |
| "log": false, | |
| "protocol": "tcp_udp", | |
| "source": { | |
| "address": "192.168.1.0/24" | |
| }, | |
| "destination": { | |
| "port": "80" | |
| }, | |
| "inInterface": { | |
| "id": "br0" | |
| }, | |
| "ipVersion": "v4only" | |
| } | |
| ], | |
| "firewall/sets": [ | |
| { | |
| "identification": { | |
| "name": "unifi_controller_addresse", | |
| "type": "address" | |
| }, | |
| "description": "UniFi addresses" | |
| }, | |
| { | |
| "identification": { | |
| "name": "guest_network", | |
| "type": "address" | |
| }, | |
| "description": "guest subnets" | |
| }, | |
| { | |
| "identification": { | |
| "name": "guest_networkv6", | |
| "type": "address" | |
| }, | |
| "description": "IPv6 guest subnets" | |
| }, | |
| { | |
| "identification": { | |
| "name": "corporate_network", | |
| "type": "address" | |
| }, | |
| "description": "corporate subnets", | |
| "entries": [ | |
| "192.168.1.0/24" | |
| ] | |
| }, | |
| { | |
| "identification": { | |
| "name": "corporate_networkv6", | |
| "type": "address" | |
| }, | |
| "description": "IPv6 corporate subnets" | |
| }, | |
| { | |
| "identification": { | |
| "name": "local_network", | |
| "type": "address" | |
| }, | |
| "description": "local subnets (corporate + guest)", | |
| "entries": [ | |
| "192.168.1.0/24" | |
| ] | |
| }, | |
| { | |
| "identification": { | |
| "name": "local_networkv6", | |
| "type": "address" | |
| }, | |
| "description": "IPv6 local subnets (corporate + guest)" | |
| }, | |
| { | |
| "identification": { | |
| "name": "remote_user_vpn_network", | |
| "type": "address" | |
| }, | |
| "description": "Remote User VPN subnets" | |
| }, | |
| { | |
| "identification": { | |
| "name": "remote_client_vpn_network", | |
| "type": "address" | |
| }, | |
| "description": "remote client VPN subnets" | |
| }, | |
| { | |
| "identification": { | |
| "name": "remote_site_vpn_network", | |
| "type": "address" | |
| }, | |
| "description": "remote site VPN subnets" | |
| }, | |
| { | |
| "identification": { | |
| "name": "guest_allow_dns_servers", | |
| "type": "address" | |
| }, | |
| "description": "allow dns servers for guests" | |
| }, | |
| { | |
| "identification": { | |
| "name": "captive_portal_subnets", | |
| "type": "address" | |
| }, | |
| "description": "captive portal subnets" | |
| }, | |
| { | |
| "identification": { | |
| "name": "guest_portal_address", | |
| "type": "address" | |
| }, | |
| "description": "guest portal address", | |
| "entries": [ | |
| "192.168.1.1" | |
| ] | |
| }, | |
| { | |
| "identification": { | |
| "name": "67c04446bc811773f559a61e", | |
| "type": "mac" | |
| } | |
| }, | |
| { | |
| "identification": { | |
| "name": "guest_portal_ports", | |
| "type": "port" | |
| }, | |
| "description": "guest portal ports", | |
| "entries": [ | |
| "8880", | |
| "8843" | |
| ] | |
| }, | |
| { | |
| "identification": { | |
| "name": "guest_portal_redirector_p", | |
| "type": "port" | |
| }, | |
| "description": "guest portal redirector ports", | |
| "entries": [ | |
| "39080", | |
| "39443" | |
| ] | |
| }, | |
| { | |
| "identification": { | |
| "name": "unifi_controller_ports-tc", | |
| "type": "port" | |
| }, | |
| "description": "unifi tcp ports", | |
| "entries": [ | |
| "8080" | |
| ] | |
| }, | |
| { | |
| "identification": { | |
| "name": "unifi_controller_ports-ud", | |
| "type": "port" | |
| }, | |
| "description": "unifi udp ports", | |
| "entries": [ | |
| "3478" | |
| ] | |
| } | |
| ], | |
| "firewall/filter": [ | |
| { | |
| "config": { | |
| "name": "INPUT", | |
| "policy": "ACCEPT", | |
| "logDefault": false | |
| }, | |
| "rules": [ | |
| { | |
| "id": 10001, | |
| "target": "LAN_LOCAL", | |
| "negateInInterface": false, | |
| "negateOutInterface": false, | |
| "description": "Forward TELEPORT traffic to LAN_LOCAL", | |
| "protocol": "all", | |
| "connectionState": [], | |
| "inInterface": { | |
| "id": "tlprt+" | |
| }, | |
| "ipVersion": "both" | |
| }, | |
| { | |
| "id": 30001, | |
| "target": "WAN_LOCAL", | |
| "description": "WAN_LOCAL jump (interface: eth0)", | |
| "inInterface": { | |
| "id": "eth0" | |
| }, | |
| "ipVersion": "both" | |
| }, | |
| { | |
| "id": 30002, | |
| "target": "WAN_LOCAL", | |
| "description": "WAN_LOCAL jump (interface: eth4)", | |
| "inInterface": { | |
| "id": "eth4" | |
| }, | |
| "ipVersion": "both" | |
| }, | |
| { | |
| "id": 30003, | |
| "target": "LAN_LOCAL", | |
| "description": "LAN_LOCAL jump (interface: br0)", | |
| "inInterface": { | |
| "id": "br0" | |
| }, | |
| "ipVersion": "both" | |
| } | |
| ] | |
| }, | |
| { | |
| "config": { | |
| "name": "FORWARD", | |
| "policy": "ACCEPT", | |
| "logDefault": false | |
| }, | |
| "rules": [ | |
| { | |
| "id": 30001, | |
| "target": "FORWARD_IN", | |
| "description": "FORWARD_IN jump", | |
| "ipVersion": "both" | |
| }, | |
| { | |
| "id": 30002, | |
| "target": "FORWARD_OUT", | |
| "description": "FORWARD_OUT jump", | |
| "ipVersion": "both" | |
| } | |
| ] | |
| }, | |
| { | |
| "config": { | |
| "name": "OUTPUT", | |
| "policy": "ACCEPT", | |
| "logDefault": false | |
| } | |
| }, | |
| { | |
| "config": { | |
| "name": "FORWARD_IN", | |
| "logDefault": false | |
| }, | |
| "rules": [ | |
| { | |
| "id": 30001, | |
| "target": "WAN_IN", | |
| "description": "WAN_IN jump (interface: eth0)", | |
| "inInterface": { | |
| "id": "eth0" | |
| }, | |
| "ipVersion": "both" | |
| }, | |
| { | |
| "id": 30002, | |
| "target": "WAN_IN", | |
| "description": "WAN_IN jump (interface: eth4)", | |
| "inInterface": { | |
| "id": "eth4" | |
| }, | |
| "ipVersion": "both" | |
| }, | |
| { | |
| "id": 30003, | |
| "target": "LAN_IN", | |
| "description": "LAN_IN jump (interface: br0)", | |
| "inInterface": { | |
| "id": "br0" | |
| }, | |
| "ipVersion": "both" | |
| } | |
| ] | |
| }, | |
| { | |
| "config": { | |
| "name": "FORWARD_OUT", | |
| "logDefault": false | |
| }, | |
| "rules": [ | |
| { | |
| "id": 30001, | |
| "target": "WAN_OUT", | |
| "description": "WAN_OUT jump (interface: eth0)", | |
| "outInterface": { | |
| "id": "eth0" | |
| }, | |
| "ipVersion": "both" | |
| }, | |
| { | |
| "id": 30002, | |
| "target": "WAN_OUT", | |
| "description": "WAN_OUT jump (interface: eth4)", | |
| "outInterface": { | |
| "id": "eth4" | |
| }, | |
| "ipVersion": "both" | |
| }, | |
| { | |
| "id": 30003, | |
| "target": "LAN_OUT", | |
| "description": "LAN_OUT jump (interface: br0)", | |
| "outInterface": { | |
| "id": "br0" | |
| }, | |
| "ipVersion": "both" | |
| } | |
| ] | |
| }, | |
| { | |
| "config": { | |
| "name": "WAN_LOCAL", | |
| "logDefault": false | |
| }, | |
| "rules": [ | |
| { | |
| "id": 30001, | |
| "target": "RETURN", | |
| "description": "[WAN_LOCAL]Allow Established/Related Traffic", | |
| "connectionState": [ | |
| "established", | |
| "related" | |
| ], | |
| "ipVersion": "v4only" | |
| }, | |
| { | |
| "id": 30002, | |
| "target": "DROP", | |
| "description": "[WAN_LOCAL]Block Invalid Traffic", | |
| "connectionState": [ | |
| "invalid" | |
| ], | |
| "ipVersion": "v4only" | |
| }, | |
| { | |
| "id": 30003, | |
| "target": "RETURN", | |
| "description": "[WANv6_LOCAL]Allow Established/Related Traffic", | |
| "connectionState": [ | |
| "established", | |
| "related" | |
| ], | |
| "ipVersion": "v6only" | |
| }, | |
| { | |
| "id": 30004, | |
| "target": "DROP", | |
| "description": "[WANv6_LOCAL]Block Invalid Traffic", | |
| "connectionState": [ | |
| "invalid" | |
| ], | |
| "ipVersion": "v6only" | |
| }, | |
| { | |
| "id": 30005, | |
| "target": "RETURN", | |
| "description": "[WANv6_LOCAL]Allow Neighbor Solicitations", | |
| "protocol": "ipv6-icmp", | |
| "icmpv6Type": "neighbor-solicitation", | |
| "ipVersion": "v6only" | |
| }, | |
| { | |
| "id": 30006, | |
| "target": "RETURN", | |
| "description": "[WANv6_LOCAL]Allow neighbor advertisements", | |
| "protocol": "ipv6-icmp", | |
| "icmpv6Type": "neighbor-advertisement", | |
| "ipVersion": "v6only" | |
| }, | |
| { | |
| "id": 2147483646, | |
| "target": "DROP", | |
| "description": "[WANv6_LOCAL]Block All Other Traffic", | |
| "log": false, | |
| "ipVersion": "v6only" | |
| }, | |
| { | |
| "id": 2147483647, | |
| "target": "DROP", | |
| "description": "[WAN_LOCAL]Block All Other Traffic", | |
| "log": false, | |
| "ipVersion": "v4only" | |
| } | |
| ] | |
| }, | |
| { | |
| "config": { | |
| "name": "WAN_IN", | |
| "logDefault": false | |
| }, | |
| "rules": [ | |
| { | |
| "id": 30001, | |
| "target": "RETURN", | |
| "description": "[WAN_IN]Allow Established/Related Traffic", | |
| "connectionState": [ | |
| "established", | |
| "related" | |
| ], | |
| "ipVersion": "v4only" | |
| }, | |
| { | |
| "id": 30002, | |
| "target": "DROP", | |
| "description": "[WAN_IN]Block Invalid Traffic", | |
| "connectionState": [ | |
| "invalid" | |
| ], | |
| "ipVersion": "v4only" | |
| }, | |
| { | |
| "id": 30003, | |
| "target": "RETURN", | |
| "description": "[WANv6_IN]Allow Established/Related Traffic", | |
| "connectionState": [ | |
| "established", | |
| "related" | |
| ], | |
| "ipVersion": "v6only" | |
| }, | |
| { | |
| "id": 30004, | |
| "target": "DROP", | |
| "description": "[WANv6_IN]Block Invalid Traffic", | |
| "connectionState": [ | |
| "invalid" | |
| ], | |
| "ipVersion": "v6only" | |
| }, | |
| { | |
| "id": 2147483646, | |
| "target": "DROP", | |
| "description": "[WANv6_IN]Block All Other Traffic", | |
| "log": false, | |
| "ipVersion": "v6only" | |
| }, | |
| { | |
| "id": 2147483647, | |
| "target": "DROP", | |
| "description": "[WAN_IN]Block All Other Traffic", | |
| "log": false, | |
| "ipVersion": "v4only" | |
| } | |
| ] | |
| }, | |
| { | |
| "config": { | |
| "name": "WAN_OUT", | |
| "logDefault": false | |
| }, | |
| "rules": [ | |
| { | |
| "id": 30001, | |
| "target": "REJECT", | |
| "description": "[WAN_OUT]reject outgoing TCP traffic", | |
| "log": false, | |
| "protocol": "tcp", | |
| "ipVersion": "both", | |
| "rejectWith": "tcp_reset" | |
| }, | |
| { | |
| "id": 2147483646, | |
| "target": "REJECT", | |
| "log": false, | |
| "ipVersion": "v6only" | |
| }, | |
| { | |
| "id": 2147483647, | |
| "target": "REJECT", | |
| "log": false, | |
| "ipVersion": "v4only" | |
| } | |
| ] | |
| }, | |
| { | |
| "config": { | |
| "name": "LAN_LOCAL", | |
| "logDefault": false | |
| }, | |
| "rules": [ | |
| { | |
| "id": 2147483646, | |
| "target": "RETURN", | |
| "log": false, | |
| "ipVersion": "v6only" | |
| }, | |
| { | |
| "id": 2147483647, | |
| "target": "RETURN", | |
| "log": false, | |
| "ipVersion": "v4only" | |
| } | |
| ] | |
| }, | |
| { | |
| "config": { | |
| "name": "LAN_IN", | |
| "logDefault": false | |
| }, | |
| "rules": [ | |
| { | |
| "id": 60001, | |
| "target": "RETURN", | |
| "description": "[LAN_IN]Allow Network 192.168.1.0/24 Traffic", | |
| "source": { | |
| "address": "192.168.1.0/24" | |
| }, | |
| "ipVersion": "v4only" | |
| }, | |
| { | |
| "id": 2147483646, | |
| "target": "RETURN", | |
| "log": false, | |
| "ipVersion": "v6only" | |
| }, | |
| { | |
| "id": 2147483647, | |
| "target": "RETURN", | |
| "log": false, | |
| "ipVersion": "v4only" | |
| } | |
| ] | |
| }, | |
| { | |
| "config": { | |
| "name": "LAN_OUT", | |
| "logDefault": false | |
| }, | |
| "rules": [ | |
| { | |
| "id": 60001, | |
| "target": "RETURN", | |
| "description": "[LAN_OUT]Allow Network 192.168.1.0/24 Traffic", | |
| "destination": { | |
| "address": "192.168.1.0/24" | |
| }, | |
| "ipVersion": "v4only" | |
| }, | |
| { | |
| "id": 60002, | |
| "target": "RETURN", | |
| "description": "[LANv6_OUT]Allow Virtual Network Traffic", | |
| "destination": { | |
| "sets": [ | |
| "corporate_networkv6" | |
| ] | |
| }, | |
| "ipVersion": "v6only" | |
| }, | |
| { | |
| "id": 2147483646, | |
| "target": "RETURN", | |
| "log": false, | |
| "ipVersion": "v6only" | |
| }, | |
| { | |
| "id": 2147483647, | |
| "target": "RETURN", | |
| "log": false, | |
| "ipVersion": "v4only" | |
| } | |
| ] | |
| } | |
| ], | |
| "firewall/mangle": [ | |
| { | |
| "config": { | |
| "enabled": true, | |
| "name": "POSTROUTING", | |
| "policy": "ACCEPT", | |
| "logDefault": false | |
| }, | |
| "rules": [] | |
| } | |
| ], | |
| "firewall/settings": { | |
| "conntrackModules": { | |
| "sip": false, | |
| "ftp": true, | |
| "gre": true, | |
| "h323": true, | |
| "pptp": true, | |
| "tftp": true | |
| }, | |
| "conntrackTimeouts": { | |
| "icmp": 30, | |
| "other": 600, | |
| "tcpClose": 10, | |
| "tcpCloseWait": 60, | |
| "tcpEstablished": 7440, | |
| "tcpFinWait": 120, | |
| "tcpLastAck": 30, | |
| "tcpSynRecv": 60, | |
| "tcpSynSent": 120, | |
| "tcpTimeWait": 120, | |
| "udpOther": 30, | |
| "udpStream": 180 | |
| } | |
| }, | |
| "routes/static": [], | |
| "services/radius-profiles": [ | |
| { | |
| "id": "67c04446bc811773f559a629", | |
| "name": "Default", | |
| "authServers": [ | |
| { | |
| "address": "192.168.1.1", | |
| "port": 1812, | |
| "secret": "L7dX5eVyBlYCzsGn" | |
| } | |
| ], | |
| "vlanForWiredNetwork": false, | |
| "vlanForWirelessNetwork": false | |
| } | |
| ], | |
| "firewall/pbr": { | |
| "rules": [] | |
| }, | |
| "vpn/teleport": { | |
| "enabled": true | |
| }, | |
| "bridge-firewall/nat": [], | |
| "bridge-firewall/broute": [] | |
| }root@EFG:/data/udapi-config# |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment