{
        "firewall": {
                "name": {
                        "WAN_IPTV": {
                                "default-action": "drop",
                                "rule": {
                                        "1": {
                                                "action": "accept",
                                                "description": "Allow IPTV Multicast UDP",
                                                "destination": {
                                                        "address": "224.0.0.0/4"
                                                },
                                                "log": "disable",
                                                "protocol": "udp",
                                                "source": "''"
                                        },
                                        "2": {
                                                "action": "accept",
                                                "description": "Allow IGMP",
                                                "log": "disable",
                                                "protocol": "igmp"
                                        }
                                }
                        },
                        "WAN_LOCAL": {
                                "default-action": "drop",
                                "description": "packets from internet to gateway",
                                "rule": {
                                        "1": {
                                                "action": "accept",
                                                "description": "Ping erlauben",
                                                "log": "disable",
                                                "protocol": "icmp"
                                        },
                                        "2": {
                                                "action": "accept",
                                                "destination": {
                                                        "address": "224.0.0.0/4"
                                                },
                                                "log": "disable",
                                                "protocol": "all"
                                        }
                                }
                        }
                }
		},		
        "interfaces": {
                "ethernet": {
                        "eth0": {
                                "duplex": "auto",
                                "speed": "auto",
                                "vif": {
										"7": {
                                                "firewall": {
                                                        "in": {
                                                                "name": "WAN_IN"
                                                        },
                                                        "local": {
                                                                "name": "WAN_LOCAL"
                                                        }
                                                },
                                                "pppoe": {
                                                        "2": {
                                                                "default-route": "none",
                                                                "firewall": {
                                                                        "in": {
                                                                                "name": "WAN_IN"
                                                                        },
                                                                        "local": {
                                                                                "name": "WAN_LOCAL"
                                                                        }
                                                                },
                                                                "name-server": "none",
                                                                "password": "xxxxxxx",
                                                                "user-id": "xxxxxxxxxxxxx"
                                                        }
                                                }
                                        },							
                                        "8": {
                                                "address": [
                                                        "dhcp"
                                                ],
                                                "firewall": {
                                                        "local": {
                                                                "name": "WAN_IPTV"
                                                        }
                                                },
                                                "mtu": "1500"
                                        }
                                }
                        },
                }      
        },
        "port-forward": {
                "wan-interface": "pppoe2"
        },
        "protocols": {
                "igmp-proxy": {
                        "interface": {
                                "eth0.8": {
                                        "alt-subnet": [
                                                "0.0.0.0/0"
                                        ],
                                        "role": "upstream",
                                        "threshold": "1"
                                },
                                "eth1": {
                                        "alt-subnet": [
                                                "0.0.0.0/0"
                                        ],
                                        "role": "downstream",
                                        "threshold": "1",
                                        "whitelist": [
                                                "239.35.0.0/16",
                                                "232.0.0.0/24",
                                                "232.0.0.0/16"
                                        ]
                                }
                        }
                },
                "static": {
                        "interface-route": {
                                "0.0.0.0/0": {
                                        "next-hop-interface": {
                                                "pppoe2": {
                                                        "distance": "1"
                                                }
                                        }
                                }
                        }
                }
        },
        "service": {
                "nat": {
                        "rule": {
                                "6001": {
                                        "description": "MASQ corporate_network to WAN",
                                        "log": "disable",
                                        "outbound-interface": "pppoe2",
                                        "protocol": "all",
                                        "source": {
                                                "group": {
                                                        "network-group": "corporate_network"
                                                }
                                        },
                                        "type": "masquerade"
                                },
                                "6002": {
                                        "description": "MASQ voip_network to WAN",
                                        "log": "disable",
                                        "outbound-interface": "pppoe2",
                                        "protocol": "all",
                                        "source": {
                                                "group": {
                                                        "network-group": "voip_network"
                                                }
                                        },
                                        "type": "masquerade"
                                },
                                "6003": {
                                        "description": "MASQ remote_user_vpn_network to WAN",
                                        "log": "disable",
                                        "outbound-interface": "pppoe2",
                                        "protocol": "all",
                                        "source": {
                                                "group": {
                                                        "network-group": "remote_user_vpn_network"
                                                }
                                        },
                                        "type": "masquerade"
                                },
                                "6004": {
                                        "description": "MASQ guest_network to WAN",
                                        "log": "disable",
                                        "outbound-interface": "pppoe2",
                                        "protocol": "all",
                                        "source": {
                                                "group": {
                                                        "network-group": "guest_network"
                                                }
                                        },
                                        "type": "masquerade"
                                }
                        }
                }
        }
}