ubnt@ubnt# show
 firewall {
     all-ping enable
     broadcast-ping disable
     ipv6-receive-redirects disable
     ipv6-src-route disable
     ip-src-route disable
     log-martians enable
     name WAN_IN {
         default-action drop
         description "WAN to internal"
         rule 10 {
             action accept
             description "Allow established/related"
             state {
                 established enable
                 related enable
             }
         }
         rule 20 {
             action drop
             description "Drop invalid state"
             state {
                 invalid enable
             }
         }
     }
     name WAN_LOCAL {
         default-action drop
         description "WAN to router"
         rule 10 {
             action accept
             description "Allow established/related"
             state {
                 established enable
                 related enable
             }
         }
         rule 20 {
             action drop
             description "Drop invalid state"
             state {
                 invalid enable
             }
         }
     }
     receive-redirects disable
     send-redirects enable
     source-validation disable
     syn-cookies enable
 }
 interfaces {
     ethernet eth0 {
         address dhcp
         description Internet
         duplex auto
         firewall {
             in {
                 name WAN_IN
             }
             local {
                 name WAN_LOCAL
             }
         }
         speed auto
     }
     ethernet eth1 {
         address 192.168.1.1/24
         description Local
         duplex auto
         speed auto
     }
     ethernet eth2 {
         address 192.168.2.1/24
         description "Local 2"
         disable
         duplex auto
         speed auto
     }
     loopback lo {
     }
 }
 service {
     dhcp-server {
         disabled false
         hostfile-update disable
         shared-network-name LAN1 {
             authoritative disable
             subnet 192.168.1.0/24 {
                 default-router 192.168.1.1
                 dns-server 192.168.1.1
                 lease 86400
                 start 192.168.1.20 {
                     stop 192.168.1.250
                 }
                 static-mapping HP_Laser_CP1510 {
                     ip-address 192.168.1.15
                     mac-address f4:ce:46:49:fb:6a
                 }
                 static-mapping HP_Pro_7740 {
                     ip-address 192.168.1.17
                     mac-address 3c:52:82:88:3c:2d
                 }
                 static-mapping Savin_C230_floor_laser {
                     ip-address 192.168.1.16
                     mac-address 00:26:73:70:b9:0a
                 }
                 static-mapping UNIFI-AP-1 {
                     ip-address 192.168.1.10
                     mac-address 44:d9:e7:42:67:2a
                 }
                 static-mapping Unitytube-SV1 {
                     ip-address 192.168.1.2
                     mac-address 6c:0b:84:3e:ef:14
                 }
                 static-mapping voip1 {
                     ip-address 192.168.1.41
                     mac-address 08:00:0f:81:e9:96
                 }
                 static-mapping voip2 {
                     ip-address 192.168.1.42
                     mac-address 08:00:0f:81:e9:1d
                 }
                 static-mapping voip3 {
                     ip-address 192.168.1.43
                     mac-address 08:00:0f:81:e5:dd
                 }
                 static-mapping voip4 {
                     ip-address 192.168.1.44
                     mac-address 08:00:0f:81:a9:ec
                 }
                 static-mapping voip5 {
                     ip-address 192.168.1.45
                     mac-address 08:00:0f:81:e9:94
                 }
                 static-mapping voip6 {
                     ip-address 192.168.1.46
                     mac-address 08:00:0f:81:e9:27
                 }
                 static-mapping voip_special_alarm {
                     ip-address 192.168.1.40
                     mac-address 00:0b:82:b0:7d:6e
                 }
             }
         }
         use-dnsmasq disable
     }
     dns {
         forwarding {
             cache-size 150
             listen-on eth1
             listen-on eth2
         }
     }
     gui {
         http-port 80
         https-port 443
         older-ciphers enable
     }
     nat {
         rule 5010 {
             description "masquerade for WAN"
             outbound-interface eth0
             type masquerade
         }
     }
     ssh {
         port 22
         protocol-version v2
     }
     upnp {
         listen-on eth1 {
             outbound-interface eth0
         }
     }
 }
 system {
     conntrack {
         expect-table-size 2048
         hash-size 32768
         ignore {
             rule 10 {
                 destination {
                     address 255.255.255.255
                 }
             }
         }
         modules {
             sip {
                 disable
             }
         }
         table-size 262144
     }
     host-name ubnt
     login {
         user ubnt {
             authentication {
                 encrypted-password $6$oQ2s8zwi.nA9N$xAFX3YhlixzSNPTiJghA6V6CY4bJKe791SljLMxZqKAbKRHTJAQGotxKwMdNRjHtGbkkT/MJ4oHI3vmveQvap1
                 plaintext-password ""
             }
             full-name ""
             level admin
         }
     }
     ntp {
         server 0.ubnt.pool.ntp.org {
         }
         server 1.ubnt.pool.ntp.org {
         }
         server 2.ubnt.pool.ntp.org {
         }
         server 3.ubnt.pool.ntp.org {
         }
     }
     offload {
         ipv4 {
             forwarding enable
         }
         ipv6 {
             forwarding enable
         }
     }
     syslog {
         global {
             facility all {
                 level notice
             }
             facility protocols {
                 level debug
             }
         }
     }
     time-zone UTC
     traffic-analysis {
         dpi disable
         export disable
     }
 }
 traffic-control {
 }
[edit]