{
  "firewall":{
    "source-validation":"disable"
  },
  "interfaces": {
    "ethernet": {
      "eth2": {
        "description": "eth2 - FTTH",
        "duplex": "auto",
        "speed": "auto",
        "vif": {
          "4": {
            "mac": "MAC:ADDRESS:VAN:EXPERIABOX:PLUS:1:OMHOOG:AAN:HET:EIND",
            "address": [
              "dhcp"
            ],
            "description": "eth2.4 - IPTV",
            "dhcp-options": {
              "client-option": [
                "send vendor-class-identifier "IPTV_RG";",
                "request subnet-mask, routers, rfc3442-classless-static-routes;"
              ],
              "default-route": "no-update",
              "default-route-distance": "210",
              "name-server": "update"
            }
          },
          "34": {
            "mac": "MAC:VAN:EXPERIABOX",
            "description": "eth2.34 - Internet",
            "firewall": {
              "in": {
                "name": "WAN_IN"
              },
              "local": {
                "name": "WAN_LOCAL"
              },
              "out": {
                "name": "WAN_OUT"
              }
            },


            "address": [

              "dhcp"

            ],
            "dhcp-options": {
              "default-route": "update",
              "name-server": "update",
              "default-route-distance": "1"

            }

          }
        }
      },
      "eth0": {
        "description": "eth0 - LAN",
        "address": [
          "192.168.1.254/24"
        ],
        "duplex": "auto",
        "firewall": {
          "in": {
            "name": "LAN_IN"
          },
          "local": {
            "name": "LAN_LOCAL"
          },
          "out": {
            "name": "LAN_OUT"
          }
        },
        "speed": "auto"
      },
      "eth4": { #Aangepast van ETH2 naar ETH4, want ETH2 is WAN1 in de USG PRO
        "disable": "''",
        "duplex": "auto",
        "speed": "auto"
      }
    },
    "loopback": {
      "lo": "''"
    }
  },
  "protocols": {
    "igmp-proxy": {
      "interface": {
        "eth2": {
          "role": "disabled",
          "threshold": "1"
        },
        "eth2.4": {
          "alt-subnet": [
            "0.0.0.0/0"
          ],
          "role": "upstream",
          "threshold": "1"
        },
        "eth0": {
          "role": "downstream",
          "threshold": "1"
        }
      }
    },
    "static": {
      "interface-route": {
        "0.0.0.0/0": {
          "next-hop-interface": {
            "eth2.34": {
              "distance": "1"
            }
          }
        }
      },
      "route": {
        "213.75.112.0/21": {
          "next-hop": {
            "10.88.36.1": "''"
          }
        }
      }
    }
  },
  "port-forward": {
    "auto-firewall": "enable",
    "hairpin-nat": "enable",
    "lan-interface": [
      "eth0"
    ],
    "wan-interface": "eth2.34"
  },
  "service": {
    "nat": {
      "rule": {
        "5000": {
          "description": "MASQ corporate_network to IPTV network",
          "destination": {
            "address": "213.75.112.0/21"
          },
          "log": "disable",
          "outbound-interface": "eth2.4",
          "protocol": "all",
          "type": "masquerade"
        },
        "6001": {
          "description": "MASQ corporate_network to WAN",
          "log": "disable",
          "outbound-interface": "eth2.34",
          "protocol": "all",
          "source": {
            "group": {
              "network-group": "corporate_network"
            }
          },
          "type": "masquerade"
        },
        "6002": {
          "description": "MASQ remote_user_vpn_network to WAN",
          "log": "disable",
          "outbound-interface": "eth2.34",
          "protocol": "all",
          "source": {
            "group": {
              "network-group": "remote_user_vpn_network"
            }
          },
          "type": "masquerade"
        },
        "6003": {
          "description": "MASQ guest_network to WAN",
          "log": "disable",
          "outbound-interface": "eth2.34",
          "protocol": "all",
          "source": {
            "group": {
              "network-group": "guest_network"
            }
          },
          "type": "masquerade"
        }
      }
    }
  }
}