Ik heb deze config in gebruik gehad. Inmiddels niet meer in het bezit van een USG. Vervang de IP adressen wel even, of ze moeten toevallig gelijk zijn met jouw setup.
{
"firewall": {
"source-validation": "disable"
},
"interfaces": {
"ethernet": {
"eth0": {
"description": "WAN",
"duplex": "auto",
"speed": "auto",
"vif": {
"4": {
"address": [
"dhcp"
],
"description": "eth0.4 - IPTV",
"dhcp-options": {
"client-option": [
"send vendor-class-identifier "IPTV_RG";",
"request subnet-mask, routers, rfc3442-classless-static-routes;"
],
"default-route": "no-update",
"default-route-distance": "210"
}
},
"34": {
"description": "eth0.34 - Internet",
"address": [
"dhcp"
],
"dhcp-options": {
"default-route-distance": "1",
"default-route": "update",
"name-server": "update"
},
"firewall": {
"in": {
"name": "WAN_IN"
},
"local": {
"name": "WAN_LOCAL"
},
"out": {
"name": "WAN_OUT"
}
}
}
}
}
}
},
"protocols": {
"igmp-proxy": {
"interface": {
"eth1": {
"role": "downstream",
"threshold": "1",
"whitelist": [
"239.0.0.0/16",
"225.0.71.0/24",
"224.0.0.0/16"
]
},
"eth0": {
"role": "disabled",
"threshold": "1"
},
"eth0.4": {
"alt-subnet": [
"0.0.0.0/0"
],
"role": "upstream",
"threshold": "1"
},
"eth0.34": {
"role": "disabled",
"threshold": "1"
},
"eth2": {
"role": "disabled",
"threshold": "1"
}
}
},
"static": {
"route": {
"213.75.112.0/21": {
"next-hop": {
"10.58.44.1": "''"
}
}
}
}
},
"service": {
"nat": {
"rule": {
"2": {
"description": "ipv-srtp-abox1",
"inbound-interface": "eth0.4",
"inside-address": {
"address": "10.10.1.250",
"port": "555-65000"
},
"log": "disable",
"protocol": "udp",
"source": {
"address": "185.6.48.0/26"
},
"type": "destination"
},
"5000": {
"description": "MASQ corporate_network to IPTV network",
"log": "disable",
"outbound-interface": "eth0.4",
"protocol": "all",
"type": "masquerade"
},
"5001": {
"description": "MASQ corporate_network to WAN",
"log": "disable",
"outbound-interface": "eth0.34",
"protocol": "all",
"type": "masquerade"
}
}
}
}
}