iptv edgerouter USG-4p

{
	"firewall": {
		"all-ping": "enable",
		"broadcast-ping": "disable",
		"ip-src-route": "disable",
		"ipv6-name": {
			"WANv6_IN": {
				"default-action": "drop",
				"description": "WAN inbound traffic forwarded to LAN",
				"enable-default-log": "''",
				"rule": {
					"10": {
						"action": "accept",
						"description": "Allow established/related sessions",
						"state": {
							"established": "enable",
							"related": "enable"
						}
					},
					"20": {
						"action": "drop",
						"description": "Drop invalid state",
						"state": {
							"invalid": "enable"
						}
					}
				}
			},
			"WANv6_LOCAL": {
				"default-action": "drop",
				"description": "WAN inbound traffic to the router",
				"enable-default-log": "''",
				"rule": {
					"10": {
						"action": "accept",
						"description": "Allow established/related sessions",
						"state": {
							"established": "enable",
							"related": "enable"
						}
					},
					"20": {
						"action": "drop",
						"description": "Drop invalid state",
						"state": {
							"invalid": "enable"
						}
					},
					"30": {
						"action": "accept",
						"description": "Allow IPv6 icmp",
						"protocol": "ipv6-icmp"
					},
					"40": {
						"action": "accept",
						"description": "allow dhcpv6",
						"destination": {
							"port": "546"
						},
						"protocol": "udp",
						"source": {
							"port": "547"
						}
					}
				}
			}
		},
		"ipv6-receive-redirects": "disable",
		"ipv6-src-route": "disable",
		"log-martians": "enable",
		"options": "''",
		"receive-redirects": "disable",
		"send-redirects": "enable",
		"source-validation": "disable",
		"syn-cookies": "enable"
	},
	"interfaces": {
		"bridge": {
			"br0": {
				"aging": "300",
				"bridged-conntrack": "disable",
				"description": "br0 - Telefonie",
				"hello-time": "2",
				"max-age": "20",
				"priority": "32768",
				"promiscuous": "disable",
				"stp": "false"
			}
		},
		"ethernet": {
			"eth0": {
				"address": [
					"192.168.2.254/24"
				],
				"description": "eth0 - LAN",
				"duplex": "auto",
				"firewall": {
					"in": {
						"name": "LAN_IN"
					},
					"local": {
						"name": "LAN_LOCAL"
					},
					"out": {
						"name": "LAN_OUT"
					}
				},
				"ipv6": {
					"dup-addr-detect-transmits": "1",
					"router-advert": {
						"cur-hop-limit": "64",
						"link-mtu": "0",
						"managed-flag": "false",
						"max-interval": "600",
						"name-server": [
							"2001:4860:4860::8888",
							"2001:4860:4860::8844"
						],
						"other-config-flag": "false",
						"prefix": {
							"::/64": {
								"autonomous-flag": "true",
								"on-link-flag": "true",
								"valid-lifetime": "2592000"
							}
						},
						"radvd-options": [
							"RDNSS 2001:4860:4860::8888 2001:4860:4860::8844 {};"
						],
						"reachable-time": "0",
						"retrans-timer": "0",
						"send-advert": "true"
					}
				},
				"speed": "auto"
			},
			"eth2": {
				"description": "eth2 - ExperiaBox",
				"duplex": "auto",
				"mtu": "1512",
				"speed": "auto",
				"vif": {
					"4": {
						"address": [
							"dhcp"
						],
						"description": "eth2.4 - IPTV",
						"dhcp-options": {
							"client-option": [
								"send vendor-class-identifier "IPTV_RG";",
								"request subnet-mask, routers, rfc3442-classless-static-routes;"
							],
							"default-route": "no-update",
							"default-route-distance": "210",
							"name-server": "update"
						}
					},
					"6": {
						"description": "eth2.6 - Internet",
						"mtu": "1508",
						"pppoe": {
							"0": {
								"default-route": "auto",
								"dhcpv6-pd": {
									"no-dns": "''",
									"pd": {
										"0": {
											"interface": {
												"eth0": {
													"prefix-id": ":1",
													"service": "slaac"
												}
											},
											"prefix-length": "/48"
										}
									},
									"rapid-commit": "disable"
								},
								"firewall": {
									"in": {
										"ipv6-name": "WANv6_IN",
										"name": "WAN_IN"
									},
									"local": {
										"ipv6-name": "WANv6_LOCAL",
										"name": "WAN_LOCAL"
									}
								},
								"idle-timeout": "180",
								"ipv6": {
									"address": {
										"autoconf": "''"
									},
									"dup-addr-detect-transmits": "1",
									"enable": "''"
								},
								"mtu": "1500",
								"name-server": "auto",
								"password": "kpn",
								"user-id": "F0-9F-C2-10-56-DA@internet"
							}
						}
					},
					"7": {
						"bridge-group": {
							"bridge": "br0"
						},
						"description": "eth2.7 - ExperiaBox VOIP",
						"mtu": "1500"
					}
				}
			}
		}
	},
	"protocols": {
		"igmp-proxy": {
			"interface": {
				"eth0": {
					"role": "downstream",
					"threshold": "2"
				},
				"eth2.4": {
					"alt-subnet": [
						"0.0.0.0/0"
					],
					"role": "upstream",
					"threshold": "1"
				}
			}
		},
		"static": {
			"interface-route6": {
				"::/0": {
					"next-hop-interface": {
						"pppoe0": "''"
					}
				}
			},
			"route": {
				"213.75.112.0/21": {
					"next-hop": {
						"10.246.84.1": "''"
					}
				}
			}
		}
	},
	"service": {
		"dhcp-server": {
			"disabled": "false",
			"global-parameters": [
				"option vendor-class-identifier code 60 = string;",
				"option broadcast-address code 28 = ip-address;"
			],
			"hostfile-update": "disable",
			"shared-network-name": {
				"LAN": {
					"authoritative": "disable",
					"subnet": {
						"192.168.2.0/24": {
							"default-router": "192.168.2.254",
							"dns-server": [
								"192.168.2.254"
							],
							"lease": "86400",
							"start": {
								"192.168.2.50": {
									"stop": "192.168.2.200"
								}
							}
						}
					}
				}
			},
			"use-dnsmasq": "disable"
		},
		"dns": {
			"forwarding": {
				"cache-size": "150",
				"listen-on": [
					"eth0"
				],
				"name-server": [
					"8.8.8.8",
					"8.8.4.4"
				],
				"options": [
					"listen-address=192.168.2.254"
				]
			}
		},
		"nat": {
			"rule": {
				"5000": {
					"description": "IPTV",
					"destination": {
						"address": "213.75.112.0/21"
					},
					"log": "disable",
					"outbound-interface": "eth2.4",
					"protocol": "all",
					"source": "''",
					"type": "masquerade"
				}
			}
		}
	},
	"system": {
		"name-server": [
			"2001:4860:4860::8888",
			"2001:4860:4860::8844",
			"8.8.8.8",
			"8.8.4.4"
		]
	},
	"offload": {
		"ipsec": "enable",
		"ipv4": {
			"forwarding": "enable",
			"pppoe": "enable",
			"vlan": "enable"
		},
		"ipv6": {
			"forwarding": "enable",
			"vlan": "enable"
		}
	},
	"task-scheduler": {
		"task": {
			"updateIPTVroute": {
				"executable": {
					"path": "/config/scripts/tvroute.sh"
				},
				"interval": "5m"
			}
		}
	}
}