{
        "firewall": {
                "ipv6-name": {
                        "WAN_IN-6": {
                                "default-action": "drop",
                                "description": "packets from internet to intranet",
                                "rule": {
                                        "3001": {
                                                "action": "accept",
                                                "description": "allow established/related sessions",
                                                "state": {
                                                        "established": "enable",
                                                        "related": "enable"
                                                }
                                        },
                                        "3002": {
                                                "action": "drop",
                                                "description": "drop Invalid state",
                                                "state": {
                                                        "invalid": "enable"
                                                }
                                        },
                                        "3003": {
                                                "action": "accept",
                                                "description": "allow ICMPv6",
                                                "protocol": "icmpv6"
                                        }
                                }
                        },
                        "WAN_LOCAL-6": {
                                "default-action": "drop",
                                "description": "packets from internet to gateway",
                                "rule": {
                                        "3001": {
                                                "action": "accept",
                                                "description": "allow established/related sessions",
                                                "state": {
                                                        "established": "enable",
                                                        "related": "enable"
                                                }
                                        },
                                        "3002": {
                                                "action": "drop",
                                                "description": "drop Invalid state",
                                                "state": {
                                                        "invalid": "enable"
                                                }
                                        },
                                        "3003": {
                                                "action": "accept",
                                                "description": "allow ICMPv6",
                                                "protocol": "icmpv6"
                                        },
                                        "3004": {
                                                "action": "accept",
                                                "description": "allow DHCPv6 client/server",
                                                "destination": {
                                                        "port": "546"
                                                },
                                                "protocol": "udp",
                                                "source": {
                                                        "port": "547"
                                                }
                                        }
                                }
                        },
                        "WAN_OUT-6": {
                                "default-action": "accept",
                                "description": "packets to internet"
                        }
                }
        },
        "interfaces": {
                "ethernet": {
                        "eth0": {
                                "vif": {
                                        "832": {
                                                "address": [
                                                        "dhcp"
                                                ],
                                                "dhcp-options": {
                                                        "client-option": [
                                                                "retry 60;",
                                                                "send vendor-class-identifier "sagem";",
                                                                "send user-class "\\053FSVDSL_livebox.Internet.softathome.Livebox4";",
                                                                "send rfc3118-auth 00:00:00:00:00:00:00:00:00:00:00:66:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx;",
                                                                "request subnet-mask, routers, domain-name-servers, domain-name, broadcast-address, dhcp-lease-time, dhcp-renewal-time, dhcp-rebinding-time, rfc3118-auth;"
                                                        ]
                                                },
                                                "egress-qos": "0:0 1:0 2:0 3:0 4:0 5:0 6:6 7:0",
                                                "firewall": {
                                                        "in": {
                                                                "ipv6-name": "WAN_IN-6",
                                                                "name": "WAN_IN"
                                                        },
                                                        "local": {
                                                                "ipv6-name": "WAN_LOCAL-6",
                                                                "name": "WAN_LOCAL"
                                                        },
                                                        "out": {
                                                                "ipv6-name": "WAN_OUT-6",
                                                                "name": "WAN_OUT"
                                                        }
                                                },
                                                "ipv6": {
                                                        "address": {
                                                                "autoconf": "''"
                                                        },
                                                        "dup-addr-detect-transmits": "1"
                                                }
                                        },
                                        "838": {
                                                "address": [
                                                        "dhcp"
                                                ],
                                                "dhcp-options": {
                                                        "client-option": [
                                                                "send vendor-class-identifier "sagem";",
                                                                "send user-class "\\047FSVDSL_livebox.MLTV.softathome.Livebox4";",
                                                                "send dhcp-client-identifier 1:xx:xx:xx:xx:xx:xx;",
                                                                "request subnet-mask, routers, rfc3442-classless-static-routes;"
                                                        ],
                                                        "default-route": "no-update",
                                                        "default-route-distance": "210",
                                                        "name-server": "update"
                                                },
                                                "egress-qos": "0:4 1:4 2:4 3:4 4:4 5:4 6:4 7:4"
                                        },
                                        "840": {
                                                "address": [
                                                        "192.168.255.254/24"
                                                ],
                                                "egress-qos": "0:5 1:5 2:5 3:5 4:5 5:5 6:5 7:5"
                                        }
                                }
                        },
                        "eth1": {
                                "ipv6": {
                                        "dup-addr-detect-transmits": "1",
                                        "router-advert": {
                                                "cur-hop-limit": "64",
                                                "link-mtu": "0",
                                                "managed-flag": "false",
                                                "max-interval": "600",
                                                "other-config-flag": "false",
                                                "prefix": {
                                                        "::/64": {
                                                                "autonomous-flag": "true",
                                                                "on-link-flag": "true",
                                                                "valid-lifetime": "2592000"
                                                        }
                                                },
                                                "reachable-time": "0",
                                                "retrans-timer": "0",
                                                "send-advert": "true"
                                        }
                                }
                        }
                }
        },
        "protocols": {
                "igmp-proxy": {
                        "disable-quickleave": "''",
                        "interface": {
                                "eth0": {
                                        "role": "disabled",
                                        "threshold": "1"
                                },
                                "eth0.832": {
                                        "role": "disabled",
                                        "threshold": "1"
                                },
                                "eth0.838": {
                                        "role": "disabled",
                                        "threshold": "1"
                                },
                                "eth0.840": {
                                        "alt-subnet": [
                                                "0.0.0.0/0"
                                        ],
                                        "role": "upstream",
                                        "threshold": "1"
                                },
                                "eth1": {
                                        "alt-subnet": [
                                                "0.0.0.0/0"
                                        ],
                                        "role": "downstream",
                                        "threshold": "1"
                                },
                                "eth2": {
                                        "role": "disabled",
                                        "threshold": "1"
                                }
                        }
                }
        },
        "service": {
                "nat": {
                        "rule": {
                                "6004": {
                                        "description": "MASQ Livebox_TV to WAN",
                                        "log": "disable",
                                        "outbound-interface": "eth0.838",
                                        "protocol": "all",
                                        "source": {
                                                "group": {
                                                        "network-group": "corporate_network"
                                                }
                                        },
                                        "type": "masquerade"
                                }
                        }
                }
        }
}