root@edgerouter-4:~# show configuration
firewall {
    all-ping enable
    broadcast-ping disable
    ipv6-receive-redirects disable
    ipv6-src-route disable
    ip-src-route disable
    log-martians enable
    receive-redirects disable
    send-redirects enable
    source-validation disable
    syn-cookies enable
}
interfaces {
    ethernet eth0 {
        address 213.209.119.82/29
        description "GK: Ubiquiti GmbH [1Gbit] {} (N123456) ::"
        disable
        duplex auto
        ip {
            source-validation disable
        }
        speed auto
        vrrp {
            vrrp-group 1 {
                advertise-interval 1
                preempt true
                virtual-address 213.209.119.81/29
            }
        }
    }
    ethernet eth1 {
        address 84.46.101.81/29
        description "GK: Ubiquiti GmbH [1Gbit] {} (N123456) ::"
        duplex auto
        ip {
            source-validation strict
        }
        speed auto
    }
    ethernet eth2 {
        description "B: EDGEROUTER-6P [1Gbit] {direct} () ::"
        disable
        duplex auto
        speed auto
    }
    ethernet eth3 {
        description "B: GK-SWITCH [1Gbit] {IRGE1x/x} () ::"
        duplex auto
        speed auto
        vif 1009 {
            address 10.133.3.2/24
        }
        vif 3456 {
            address 213.209.106.13/31
            ip {
                source-validation disable
            }
        }
    }
}
protocols {
    bfd {
    }
    bgp 4200000001 {
        neighbor 84.46.104.133 {
            ebgp-multihop 255
            fall-over {
                bfd {
                    multihop
                }
            }
            password ****************
            remote-as 15943
            soft-reconfiguration {
                inbound
            }
        }
        network 84.46.73.144/28 {
        }
        network 84.46.101.80/29 {
        }
        network 213.209.119.80/29 {
        }
        parameters {
            router-id 213.209.106.13
        }
        timers {
            holdtime 30
            keepalive 10
        }
    }
    ospf {
        area 0.0.0.0 {
            network 10.0.0.0/30
        }
        default-information {
            originate {
                metric-type 2
            }
        }
        parameters {
            abr-type cisco
            router-id 213.209.106.13
        }
    }
    static {
        route 10.0.0.0/8 {
            next-hop 10.133.3.1 {
            }
        }
        route 84.46.73.144/28 {
            next-hop 213.209.119.84 {
            }
        }
        route 84.46.104.122/32 {
            next-hop 213.209.106.12 {
            }
        }
        route 84.46.104.133/32 {
            next-hop 213.209.106.12 {
            }
        }
        route 172.16.0.0/12 {
            next-hop 10.133.3.1 {
            }
        }
    }
}
service {
    gui {
        http-port 80
        https-port 443
        listen-address 10.133.3.2
        older-ciphers enable
    }
    lldp {
        interface all {
        }
    }
    snmp {
        community HIDDEN {
            authorization ro
        }
        contact "IP"
        listen-address 10.133.3.2 {
            port 161
        }
        location POP1
    }
    ssh {
        disable-host-validation
        listen-address 10.133.3.2
        port 22
        protocol-version v2
    }
}
system {
    host-name edgerouter-4
    login {
        banner {
            pre-login ""
        }
        user ubnt {
            authentication {
                encrypted-password ****************
            }
            level admin
        }
    }
    name-server 213.209.104.220
    name-server 213.209.104.250
    name-server 2a02:2028:fd00::cafe
    name-server 2a02:2028:fd00::affe
    ntp {
        server 0.ubnt.pool.ntp.org {
        }
        server 1.ubnt.pool.ntp.org {
        }
        server 2.ubnt.pool.ntp.org {
        }
        server 3.ubnt.pool.ntp.org {
        }
    }
    offload {
        hwnat disable
        ipv4 {
            forwarding enable
            vlan enable
        }
        ipv6 {
            forwarding enable
            vlan enable
        }
    }
    options {
        reboot-on-panic true
    }
    syslog {
        global {
            facility all {
                level notice
            }
            facility protocols {
                level debug
            }
        }
        host 10.129.60.20 {
            facility all {
                level notice
            }
            facility auth {
                level info
            }
            facility daemon {
                level notice
            }
            facility protocols {
                level info
            }
        }
    }
    time-zone Europe/Berlin
}
traffic-control {
    smart-queue 500M-250M {
        download {
            ecn disable
            flows 1024
            fq-quantum 1514
            limit 10240
            rate 275mbit
        }
        upload {
            ecn disable
            flows 1024
            fq-quantum 1514
            limit 10240
            rate 550mbit
        }
        wan-interface eth1
    }
}
zone-policy {
    zone VR_DEFAULT {
        default-action drop
        from VR_INT_MGMT {
        }
        interface eth3.3456
        interface eth1
        interface eth0
        interface eth2
        interface br0
    }
    zone VR_INT_MGMT {
        default-action drop
        from VR_DEFAULT {
        }
        interface eth3.1009
    }
}