Voilà mon config.gateway.json. Attention, deux remarques :
- J'essaye de faire le max dans le GUI Unifi
- Je n'ai pas encore retiré le VLAN qui doit pouvoir être retiré
{
"firewall":{
"source-validation":"disable"
},
"interfaces": {
"ethernet": {
"eth2": {
"description": "WAN Orange",
"duplex": "auto",
"speed": "auto",
"vif": {
"832": {
"address": [
"dhcp"
],
"dhcp-options": {
"client-option": [
"retry 60;",
"send vendor-class-identifier "sagem";",
"send user-class "\\053FSVDSL_livebox.Internet.softathome.Livebox4";",
"send rfc3118-auth xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx;",
"request subnet-mask, routers, domain-name-servers, domain-name, broadcast-address, dhcp-lease-time, dhcp-renewal-ti
me, dhcp-rebinding-time, rfc3118-auth;"
],
"default-route": "update",
"default-route-distance": "1",
"name-server": "no-update"
},
"egress-qos": "0:0 1:0 2:0 3:0 4:0 5:0 6:6 7:0",
"firewall": {
"in": {
"name": "WAN_IN"
},
"local": {
"name": "WAN_LOCAL"
},
"out": {
"name": "WAN_OUT"
}
}
},
"838":{
"address":[
"dhcp"
],
"dhcp-options":{
"client-option":[
"send vendor-class-identifier "sagem";",
"send user-class "\\047FSVDSL_livebox.MLTV.softathome.Livebox4";",
"send dhcp-client-identifier xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx;",
"request subnet-mask, routers, rfc3442-classless-static-routes;"
],
"default-route":"no-update",
"default-route-distance":"210",
"name-server":"update"
},
"egress-qos":"0:4 1:4 2:4 3:4 4:4 5:4 6:4 7:4"
},
"840":{
"address":[
"192.168.255.254/24"
],
"egress-qos":"0:5 1:5 2:5 3:5 4:5 5:5 6:5 7:5"
}
}
}
}
},
"port-forward": {
"wan-interface": "eth2.832"
},
"service": {
"dns": {
"dynamic": {
"interface": {
"eth2.832": {
"service": {
"dyndns": {
"host-name": [
"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
],
"login": "xxxxxxxxxxxxxxxxxxxx",
"password": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
"server": "dynupdate.no-ip.com"
}
}
}
}
},
"forwarding": {
"cache-size": "10000",
"except-interface": [
"eth2.832"
],
}
},
"nat": {
"rule": {
"6001": {
"description": "MASQ corporate_network to WAN",
"log": "disable",
"outbound-interface": "eth2.832",
"protocol": "all",
"source": {
"group": {
"network-group": "corporate_network"
}
},
"type": "masquerade"
},
"6002": {
"description": "MASQ remote_user_vpn_network to WAN",
"log": "disable",
"outbound-interface": "eth2.832",
"protocol": "all",
"source": {
"group": {
"network-group": "remote_user_vpn_network"
}
},
"type": "masquerade"
},
"6003": {
"description": "MASQ guest_network to WAN",
"log": "disable",
"outbound-interface": "eth2.832",
"protocol": "all",
"source": {
"group": {
"network-group": "guest_network"
}
},
"type": "masquerade"
},
"6004":{
"description":"MASQ Livebox_TV to WAN",
"log":"disable",
"outbound-interface":"eth2.838",
"protocol":"all",
"source":{
"group":{
"network-group":"corporate_network"
}
},
"type":"masquerade"
}
}
}
},
"protocols":{
"igmp-proxy":{
"disable-quickleave":"''",
"interface":{
"eth0":{
"role":"disabled",
"threshold":"1"
},
"eth1":{
"alt-subnet":[
"0.0.0.0/0"
],
"role":"downstream",
"threshold":"1"
},
"eth2":{
"role":"disabled",
"threshold":"1"
},
"eth2.832":{
"role":"disabled",
"threshold":"1"
},
"eth2.838":{
"role":"disabled",
"threshold":"1"
},
"eth2.840":{
"alt-subnet":[
"0.0.0.0/0"
],
"role":"upstream",
"threshold":"1"
},
"eth3":{
"role":"disabled",
"threshold":"1"
}
}
}
},
}