';
echo '############################################################################# ';
echo '# ';
echo '# CLI Commands for SBC 5000 Series Base System Configuration ';
echo '# SBC Type: SBC 5200 ';
echo '# SBC System Name: '.$sbcname.' ';
echo '# SBC Location: '.$location.' ';
echo '# ';
echo '# History: ';
echo '# 7/21/2014 Initial Configuration Draft ';
echo '# ';
echo '############################################################################## ';
echo ' ';
echo 'set complete-on-space false ';
echo 'set ignore-leading-space true ';
echo ' ';
echo 'configure ';
echo 'set system admin DFWSBC01 contact "'.$contact.'" location "'.$location.'" ';
echo 'commit ';
echo ' ';
echo ' ';
echo '# Configure Logical Management interface if not configured initially ';
echo '############################################################################## ';
echo 'set system logicalMgmtIpInterface MANAGEMENT_LOGICAL mgmtIpInterfaceGroupName mgmtGroup ipAddress '.$primaryIP.' ';
echo 'commit ';
echo 'set system logicalMgmtIpInterface MANAGEMENT_LOGICAL mgmtIpInterfaceGroupName mgmtGroup state enabled ';
echo 'commit ';
echo ' ';
echo ' ';
echo '# Configure Address Contexts ';
echo '############################################################################## ';
echo 'set addressContext default ';
echo 'commit ';
echo ' ';
echo ' ';
echo '# Configure IP Interface Groups ';
echo '############################################################################## ';
echo 'set addressContext default ipInterfaceGroup INTERNAL1_IPIG ';
echo 'set addressContext default ipInterfaceGroup EXTERNAL1_IPIG ';
echo 'commit ';
echo ' ';
echo ' ';
echo '# Configure Media Interfaces ';
echo '############################################################################## ';
echo ' ';
echo 'set addressContext default ipInterfaceGroup EXTERNAL1_IPIG ipInterface IPIF0 ceName '.$sbcname.'a portName pkt0 ipAddress '.$pkt0IP.' prefix '.$pkt0mask.' mode inservice state enabled ';
echo 'set addressContext default ipInterfaceGroup EXTERNAL1_IPIG ipInterface IPIF1 ceName '.$sbcname.'a portName pkt1 ipAddress '.$pkt1IP.' prefix '.$pkt1mask.' mode inservice state enabled ';
echo 'set addressContext default ipInterfaceGroup INTERNAL1_IPIG ipInterface IPIF2 ceName '.$sbcname.'a portName pkt2 ipAddress '.$pkt2IP.' prefix '.$pkt2mask.' mode inservice state enabled ';
echo 'set addressContext default ipInterfaceGroup INTERNAL1_IPIG ipInterface IPIF3 ceName '.$sbcname.'a portName pkt3 ipAddress '.$pkt3IP.' prefix '.$pkt3mask.' mode inservice state enabled ';
echo ' ';
//echo 'set addressContext default ipInterfaceGroup EXTERNAL1_IPIG ipInterface IPIF1 ceName .'$sbcname.'a portName pkt1 ipAddress '.$pkt1IP.' prefix '.$pkt1mask.' mode inservice state enable ';
echo 'commit ';
echo ' ';
echo ' ';
echo '# Configure Link Detection ';
echo '############################################################################## ';
echo 'set addressContext default linkDetectionGroup MANAGEMENT_LDG_A ceName DFWSBC01a type mgmt linkMonitor LM_1 destination 172.17.1.1 ';
echo 'set addressContext default linkDetectionGroup MANAGEMENT_LDG_A ceName DFWSBC01a type mgmt linkMonitor LM_1 interfaceGroup mgmtGroup interface mgmtIntf1 ';
echo 'set addressContext default linkDetectionGroup MANAGEMENT_LDG_A ceName DFWSBC01a type mgmt linkMonitor LM_1 verifyTimer 1000 responseTimer 500 reattemptTimer 1000 retries 2 ';
echo '#set addressContext default linkDetectionGroup MANAGEMENT_LDG_A ceName DFWSBC01a type mgmt linkMonitor LM_1 state enabled ';
echo 'commit ';
echo 'set addressContext default linkDetectionGroup MANAGEMENT_LDG_A ceName DFWSBC01a type mgmt linkMonitor LM_2 destination 172.17.1.1 ';
echo 'set addressContext default linkDetectionGroup MANAGEMENT_LDG_A ceName DFWSBC01a type mgmt linkMonitor LM_2 interfaceGroup mgmtGroup interface mgmtIntf2 ';
echo 'set addressContext default linkDetectionGroup MANAGEMENT_LDG_A ceName DFWSBC01a type mgmt linkMonitor LM_2 verifyTimer 1000 responseTimer 500 reattemptTimer 1000 retries 2 ';
echo '#set addressContext default linkDetectionGroup MANAGEMENT_LDG_A ceName DFWSBC01a type mgmt linkMonitor LM_2 state enabled ';
echo 'Commit ///// ';
echo 'set addressContext default linkDetectionGroup MANAGEMENT_LDG_B ceName DFWSBC01b type mgmt linkMonitor LM_3 destination 172.17.1.1 ';
echo 'set addressContext default linkDetectionGroup MANAGEMENT_LDG_B ceName DFWSBC01b type mgmt linkMonitor LM_3 interfaceGroup mgmtGroup interface mgmtIntf3 ';
echo 'set addressContext default linkDetectionGroup MANAGEMENT_LDG_B ceName DFWSBC01b type mgmt linkMonitor LM_3 verifyTimer 1000 responseTimer 500 reattemptTimer 1000 retries 2 ';
echo '#set addressContext default linkDetectionGroup MANAGEMENT_LDG_B ceName DFWSBC01b type mgmt linkMonitor LM_3 state enabled ';
echo 'Commit/////// ';
echo 'set addressContext default linkDetectionGroup MANAGEMENT_LDG_B ceName DFWSBC01b type mgmt linkMonitor LM_4 destination 172.17.1.1 ';
echo 'set addressContext default linkDetectionGroup MANAGEMENT_LDG_B ceName DFWSBC01b type mgmt linkMonitor LM_4 interfaceGroup mgmtGroup interface mgmtIntf4 ';
echo 'set addressContext default linkDetectionGroup MANAGEMENT_LDG_B ceName DFWSBC01b type mgmt linkMonitor LM_4 verifyTimer 1000 responseTimer 500 reattemptTimer 1000 retries 2 ';
echo '#set addressContext default linkDetectionGroup MANAGEMENT_LDG_B ceName DFWSBC01b type mgmt linkMonitor LM_4 state enabled ';
echo 'Commit///////// ';
echo 'set addressContext default linkDetectionGroup INTERNAL1_LDG_A ceName DFWSBC01a type ip linkMonitor LM_2A destination 69.60.209.1 ';
echo 'set addressContext default linkDetectionGroup INTERNAL1_LDG_A ceName DFWSBC01a type ip linkMonitor LM_2A interfaceGroup INTERNAL1_IPIG interface IPIF2 ';
echo 'set addressContext default linkDetectionGroup INTERNAL1_LDG_A ceName DFWSBC01a type ip linkMonitor LM_2A verifyTimer 1000 responseTimer 500 reattemptTimer 1000 retries 2 ';
echo '#set addressContext default linkDetectionGroup INTERNAL1_LDG_A ceName DFWSBC01a type ip linkMonitor LM_2A state enabled ';
echo 'Commit//////@ ';
echo 'set addressContext default linkDetectionGroup INTERNAL1_LDG_B ceName DFWSBC01b type ip linkMonitor LM_2B destination 69.60.209.1 ';
echo 'set addressContext default linkDetectionGroup INTERNAL1_LDG_B ceName DFWSBC01b type ip linkMonitor LM_2B interfaceGroup INTERNAL1_IPIG interface IPIF2 ';
echo 'set addressContext default linkDetectionGroup INTERNAL1_LDG_B ceName DFWSBC01b type ip linkMonitor LM_2B verifyTimer 1000 responseTimer 500 reattemptTimer 1000 retries 2 ';
echo '#set addressContext default linkDetectionGroup INTERNAL1_LDG_B ceName DFWSBC01b type ip linkMonitor LM_2B state enabled ';
echo 'Commit///////@ ';
echo ' ';
echo ' ';
echo ' ';
echo 'NEW set addressContext default linkDetectionGroup INTERNAL1_LDG_A ceName DFWSBC01a type ip linkMonitor LM_3A destination 69.60.209.1 ';
echo 'NEW set addressContext default linkDetectionGroup INTERNAL1_LDG_A ceName DFWSBC01a type ip linkMonitor LM_3A interfaceGroup INTERNAL1_IPIG interface IPIF3 ';
echo 'NEW set addressContext default linkDetectionGroup INTERNAL1_LDG_A ceName DFWSBC01a type ip linkMonitor LM_3A verifyTimer 1000 responseTimer 500 reattemptTimer 1000 retries 2 ';
echo 'NEW #set addressContext default linkDetectionGroup INTERNAL1_LDG_A ceName DFWSBC01a type ip linkMonitor LM_3A state enabled ';
echo 'NEW commit///////@ ';
echo ' ';
echo 'set addressContext default linkDetectionGroup INTERNAL1_LDG_B ceName DFWSBC01b type ip linkMonitor LM_3B destination 69.60.209.1 ';
echo 'set addressContext default linkDetectionGroup INTERNAL1_LDG_B ceName DFWSBC01b type ip linkMonitor LM_3B interfaceGroup INTERNAL1_IPIG interface IPIF3 ';
echo 'set addressContext default linkDetectionGroup INTERNAL1_LDG_B ceName DFWSBC01b type ip linkMonitor LM_3B verifyTimer 1000 responseTimer 500 reattemptTimer 1000 retries 2 ';
echo '#set addressContext default linkDetectionGroup INTERNAL1_LDG_B ceName DFWSBC01b type ip linkMonitor LM_3B state enabled ';
echo 'Commit/////// ';
echo 'set addressContext default linkDetectionGroup EXTERNAL1_LDG_A ceName DFWSBC01a type ip linkMonitor LM_0A destination 69.60.209.33 ';
echo 'set addressContext default linkDetectionGroup EXTERNAL1_LDG_A ceName DFWSBC01a type ip linkMonitor LM_0A interfaceGroup EXTERNAL1_IPIG interface IPIF0 ';
echo 'set addressContext default linkDetectionGroup EXTERNAL1_LDG_A ceName DFWSBC01a type ip linkMonitor LM_0A verifyTimer 1000 responseTimer 500 reattemptTimer 1000 retries 2 ';
echo '#set addressContext default linkDetectionGroup EXTERNAL1_LDG_A ceName DFWSBC01a type ip linkMonitor LM_0A state enabled ';
echo 'Commit//////// ';
echo 'set addressContext default linkDetectionGroup EXTERNAL1_LDG_B ceName DFWSBC01b type ip linkMonitor LM_0B destination 69.60.209.33 ';
echo 'set addressContext default linkDetectionGroup EXTERNAL1_LDG_B ceName DFWSBC01b type ip linkMonitor LM_0B interfaceGroup EXTERNAL1_IPIG interface IPIF0 ';
echo 'set addressContext default linkDetectionGroup EXTERNAL1_LDG_B ceName DFWSBC01b type ip linkMonitor LM_0B verifyTimer 1000 responseTimer 500 reattemptTimer 1000 retries 2 ';
echo '#set addressContext default linkDetectionGroup EXTERNAL1_LDG_B ceName DFWSBC01b type ip linkMonitor LM_0B state enabled ';
echo 'Commit/////// ';
echo 'set addressContext default linkDetectionGroup EXTERNAL1_LDG_B ceName DFWSBC01b type ip linkMonitor LM_1B destination 69.60.209.33 ';
echo 'set addressContext default linkDetectionGroup EXTERNAL1_LDG_B ceName DFWSBC01b type ip linkMonitor LM_1B interfaceGroup EXTERNAL1_IPIG interface IPIF1 ';
echo 'set addressContext default linkDetectionGroup EXTERNAL1_LDG_B ceName DFWSBC01b type ip linkMonitor LM_1B verifyTimer 1000 responseTimer 500 reattemptTimer 1000 retries 2 ';
echo '#set addressContext default linkDetectionGroup EXTERNAL1_LDG_B ceName DFWSBC01b type ip linkMonitor LM_1B state enabled ';
echo 'Commit/////////// ';
echo 'set addressContext default linkDetectionGroup MANAGEMENT_LDG_A ceName DFWSBC01a type mgmt threshold 2 ';
echo 'set addressContext default linkDetectionGroup MANAGEMENT_LDG_A ceName DFWSBC01a verifyTimer 1000 responseTimer 500 reattemptTimer 1000 retries 2 ';
echo '#set addressContext default linkDetectionGroup MANAGEMENT_LDG_A ceName DFWSBC01a state enabled ';
echo 'Commit///////// ';
echo 'set addressContext default linkDetectionGroup INTERNAL1_LDG_A ceName DFWSBC01a type ip threshold 1 ';
echo 'set addressContext default linkDetectionGroup INTERNAL1_LDG_A ceName DFWSBC01a verifyTimer 1000 responseTimer 500 reattemptTimer 1000 retries 2 ';
echo '#set addressContext default linkDetectionGroup INTERNAL1_LDG_A ceName DFWSBC01a state enabled ';
echo 'Commit//////// ';
echo 'set addressContext default linkDetectionGroup EXTERNAL1_LDG_A ceName DFWSBC01a type ip threshold 1 ';
echo 'set addressContext default linkDetectionGroup EXTERNAL1_LDG_A ceName DFWSBC01a verifyTimer 1000 responseTimer 500 reattemptTimer 1000 retries 2 ';
echo '#set addressContext default linkDetectionGroup EXTERNAL1_LDG_A ceName DFWSBC01a state enabled ';
echo 'Commit////// ';
echo 'set addressContext default linkDetectionGroup MANAGEMENT_LDG_B ceName DFWSBC01b type mgmt threshold 2 ';
echo 'set addressContext default linkDetectionGroup MANAGEMENT_LDG_B ceName DFWSBC01b verifyTimer 1000 responseTimer 500 reattemptTimer 1000 retries 2 ';
echo '#set addressContext default linkDetectionGroup MANAGEMENT_LDG_B ceName DFWSBC01b state enabled ';
echo 'Commit/////// ';
echo 'set addressContext default linkDetectionGroup INTERNAL1_LDG_B ceName DFWSBC01b type ip threshold 1 ';
echo 'set addressContext default linkDetectionGroup INTERNAL1_LDG_B ceName DFWSBC01b verifyTimer 1000 responseTimer 500 reattemptTimer 1000 retries 2 ';
echo '#set addressContext default linkDetectionGroup INTERNAL1_LDG_B ceName DFWSBC01b state enabled ';
echo 'Commit///////// ';
echo 'set addressContext default linkDetectionGroup EXTERNAL1_LDG_B ceName DFWSBC01b type ip threshold 1 ';
echo 'set addressContext default linkDetectionGroup EXTERNAL1_LDG_B ceName DFWSBC01b verifyTimer 1000 responseTimer 500 reattemptTimer 1000 retries 2 ';
echo '#set addressContext default linkDetectionGroup EXTERNAL1_LDG_B ceName DFWSBC01b state enabled ';
echo 'commit ';
echo ' ';
echo ' ';
echo '# Configure Base and Max UDP Ports for Media ';
echo '# Sonus defaults are 1024-65148 while Cisco defaults are 16384-32767 ';
echo '# and many security devices assume/use that range ';
echo '############################################################################## ';
echo '#set system media mediaPrequestortRange baseUdpPort 16384 maxUdpPort 32767 ';
echo '#commit ';
echo ' ';
echo ' ';
echo '# Enable Media Interfaces ';
echo '############################################################################## ';
echo '#set addressContext default ipInterfaceGroup INTERNAL1_IPIG ipInterface IPIF2 mode inService state enabled ';
echo '#set addressContext default ipInterfaceGroup EXTERNAL1_IPIG ipInterface IPIF0 mode inService state enabled ';
echo '#commit ';
echo ' ';
echo ' ';
echo '# Configure Zones ';
echo '############################################################################## ';
echo 'set addressContext default zone INTERNAL_ZONE id 2 ';
echo 'set addressContext default zone EXTERNAL_ZONE id 3 ';
echo 'commit/////// ';
echo ' ';
echo ' ';
echo '# Create Signaling Ports ';
echo '############################################################################## ';
echo 'set addressContext default zone INTERNAL_ZONE sipSigPort 2 ipInterfaceGroup INTERNAL1_IPIG ';
echo 'set addressContext default zone INTERNAL_ZONE sipSigPort 2 transportProtocolsAllowed sip-udp,sip-tcp ';
echo 'set addressContext default zone INTERNAL_ZONE sipSigPort 2 ipAddressV4 69.60.209.6 ';
echo 'set addressContext default zone INTERNAL_ZONE sipSigPort 2 portNumber 5060 dscpValue 26 ';
echo 'set addressContext default zone INTERNAL_ZONE sipSigPort 2 state enabled mode inService ';
echo 'commit////// ';
echo 'set addressContext default zone EXTERNAL_ZONE sipSigPort 3 ipInterfaceGroup EXTERNAL1_IPIG ';
echo 'set addressContext default zone EXTERNAL_ZONE sipSigPort 3 transportProtocolsAllowed sip-udp,sip-tcp ';
echo 'set addressContext default zone EXTERNAL_ZONE sipSigPort 3 ipAddressV4 69.60.209.38 ';
echo 'set addressContext default zone EXTERNAL_ZONE sipSigPort 3 portNumber 5060 dscpValue 26 ';
echo 'set addressContext default zone EXTERNAL_ZONE sipSigPort 3 state enabled mode inService ';
echo 'commit/////// ';
echo ' ';
echo ' ';
echo '# Configure NTP ';
echo '############################################################################## ';
echo '# NTP Server1 and timezone are commented-out since they should already. ';
echo '# have been configured during the initial install script. ';
echo '#set system ntp timeZone DFWSBC01 zone gmtMinus05-Eastern-US ';
echo '#set system ntp serverAdmin 65.48.98.50 minPoll 4 maxPoll 10 version version4 ';
echo 'set system ntp serverAdmin 65.48.98.52 minPoll 4 maxPoll 10 version version4 ';
echo '#set system ntp serverAdmin 65.48.98.50 state enabled ';
echo 'set system ntp serverAdmin 65.48.98.52 state enabled ';
echo 'commit ';
echo ' ';
echo ' ';
echo '# Configure Management DNS ';
echo '############################################################################## ';
echo 'set addressContext default dnsGroup DNS_GROUP_DEFAULT type mgmt ';
echo 'set addressContext default dnsGroup DNS_GROUP_DEFAULT server DNS1 ipAddress 65.48.98.10 ';
echo 'set addressContext default dnsGroup DNS_GROUP_DEFAULT server DNS2 ipAddress 65.48.98.11 ';
echo 'set addressContext default dnsGroup DNS_GROUP_DEFAULT server DNS1 priority 80 weight 50 state enabled ';
echo 'set addressContext default dnsGroup DNS_GROUP_DEFAULT server DNS2 priority 40 weight 50 state enabled ';
echo 'commit//////// ';
echo ' ';
echo ' ';
echo '# Configure OAM ';
echo '############################################################################## ';
echo 'set oam eventLog typeAdmin system fileCount 32 fileSize 32768 ';
echo 'set oam eventLog typeAdmin debug fileCount 32 fileSize 32768 ';
echo 'set oam eventLog typeAdmin security fileCount 32 fileSize 32768 ';
echo 'set oam eventLog typeAdmin trace fileCount 32 fileSize 32768 ';
echo 'set oam eventLog typeAdmin audit fileCount 32 fileSize 32768 ';
echo 'set oam eventLog typeAdmin packet fileCount 32 fileSize 32768 ';
echo 'set oam eventLog typeAdmin acct fileCount 1024 fileSize 32768 ';
echo ' ';
echo 'set oam eventLog typeAdmin system fileWriteMode optimize filterLevel minor ';
echo 'set oam eventLog typeAdmin debug fileWriteMode optimize filterLevel major ';
echo 'set oam eventLog typeAdmin security fileWriteMode optimize filterLevel major ';
echo 'set oam eventLog typeAdmin trace fileWriteMode optimize filterLevel info ';
echo 'set oam eventLog typeAdmin audit fileWriteMode optimize filterLevel info ';
echo 'set oam eventLog typeAdmin packet fileWriteMode optimize filterLevel major ';
echo 'set oam eventLog typeAdmin acct fileWriteMode optimize filterLevel info ';
echo 'commit//////// ';
echo ' ';
echo '# optional rollover config for Accounting/CDR files; 86400 = 1 day, 300 = 5 minutes ';
echo '# without time-based rollover, new ACCT files are only created when fileSize is reached ';
echo '# rolloverStartTime must be set to day/time in the future ';
echo '# ';
echo '#set oam eventLog typeAdmin acct rolloverType nonrepetitive rolloverAction start ';
echo '#set oam eventLog typeAdmin acct rolloverInterval 86400 rolloverStartTime 2014-07-22T00:00:00 ';
echo '#commit ';
echo ' ';
echo 'set oam eventLog typeAdmin system state enabled ';
echo 'set oam eventLog typeAdmin debug state enabled ';
echo 'set oam eventLog typeAdmin security state enabled ';
echo 'set oam eventLog typeAdmin trace state enabled ';
echo 'set oam eventLog typeAdmin audit state enabled ';
echo 'set oam eventLog typeAdmin packet state enabled ';
echo 'set oam eventLog typeAdmin acct state enabled ';
echo 'commit////got error ';
echo ' ';
echo 'set oam accounting admin generationMode origination ';
echo 'set oam accounting admin earlyAttemptState enabled ';
echo 'set oam accounting admin maxRecordSequenceNum uint32 ';
echo 'set oam accounting admin startAcctState enabled ';
echo 'commit////// ';
echo ' ';
echo '#set oam snmp trapTarget TRAPHOST1 ipAddress 1.1.1.1 trapType v2 state enabled ';
echo '#set oam snmp trapTarget TRAPHOST2 ipAddress 2.2.2.2 trapType v2 state enabled ';
echo '#commit ';
echo ' ';
echo ' ';
echo '# Configure DSP Allocation ';
echo '############################################################################## ';
echo 'set system mediaProfile compression 90 tone 10 ';
echo 'commit/////// ';
echo ' ';
echo ' ';
echo '# Configure IP Static Routes ';
echo '############################################################################## ';
echo 'set system mgmtStaticRoute 0.0.0.0 0 172.17.1.1 mgmtGroup mgmtIntf1 preference 10 ';
echo 'set system mgmtStaticRoute 0.0.0.0 0 172.17.1.1 mgmtGroup mgmtIntf2 preference 10 ';
echo 'set system mgmtStaticRoute 0.0.0.0 0 172.17.1.1 mgmtGroup mgmtIntf3 preference 10 ';
echo 'set system mgmtStaticRoute 0.0.0.0 0 172.17.1.1 mgmtGroup mgmtIntf4 preference 10 ';
echo 'commit//////// ';
echo ' ';
echo 'set addressContext default staticRoute 0.0.0.0 0 69.60.209.1 INTERNAL_IPIG IPIF2 preference 100 ';
echo 'set addressContext default staticRoute 0.0.0.0 0 69.60.209.33 EXTERNAL1_IPIG IPIF0 preference 100 ';
echo 'commit ';
echo ' ';
echo 'set addressContext default staticRoute 0.0.0.0 0 69.60.209.1 INTERNAL_IPIG IPIF3 preference 100 ';
echo 'set addressContext default staticRoute 0.0.0.0 0 69.60.209.33 EXTERNAL1_IPIG IPIF1 preference 100 ';
echo 'commit ';
echo ' ';
echo ' ';
echo ' ';
echo '# Configure Base ACLs ';
echo 'set addressContext default ipAccessControlList rule INTERNAL_RTR precedence 58001 ';
echo 'set addressContext default ipAccessControlList rule INTERNAL_RTR protocol icmp ';
echo 'set addressContext default ipAccessControlList rule INTERNAL_RTR ipInterfaceGroup INTERNAL1_IPIG ';
echo 'set addressContext default ipAccessControlList rule INTERNAL_RTR sourceIpAddress 69.60.209.2 ';
echo 'set addressContext default ipAccessControlList rule INTERNAL_RTR sourceAddressPrefixLength 32 ';
echo 'set addressContext default ipAccessControlList rule INTERNAL_RTR action accept ';
echo 'set addressContext default ipAccessControlList rule INTERNAL_RTR bucketSize 10 fillRate 10 ';
echo 'set addressContext default ipAccessControlList rule INTERNAL_RTR state enabled ';
echo 'commit ';
echo '# This Throttle-ICMP ACL is RECOMMENDED due to lack of Deny-All ACL ';
echo '# ICMP flood can result from a network failure generating ICMP Errors for every RTP flow ';
echo 'set addressContext default ipAccessControlList rule INTERNAL_ICMP precedence 59005 ';
echo 'set addressContext default ipAccessControlList rule INTERNAL_ICMP protocol icmp ';
echo 'set addressContext default ipAccessControlList rule INTERNAL_ICMP ipInterfaceGroup INTERNAL1_IPIG ';
echo 'set addressContext default ipAccessControlList rule INTERNAL_ICMP action accept ';
echo 'set addressContext default ipAccessControlList rule INTERNAL_ICMP bucketSize 10 fillRate 10 ';
echo 'set addressContext default ipAccessControlList rule INTERNAL_ICMP state enabled ';
echo 'commit ';
echo 'set addressContext default ipAccessControlList rule EXTERNAL1_RTR precedence 58007 ';
echo 'set addressContext default ipAccessControlList rule EXTERNAL1_RTR protocol icmp ';
echo 'set addressContext default ipAccessControlList rule EXTERNAL1_RTR ipInterfaceGroup EXTERNAL1_IPIG ';
echo 'set addressContext default ipAccessControlList rule EXTERNAL1_RTR sourceIpAddress 69.60.209.33 ';
echo 'set addressContext default ipAccessControlList rule EXTERNAL1_RTR sourceAddressPrefixLength 32 ';
echo 'set addressContext default ipAccessControlList rule EXTERNAL1_RTR action accept ';
echo 'set addressContext default ipAccessControlList rule EXTERNAL1_RTR bucketSize 10 fillRate 10 ';
echo 'set addressContext default ipAccessControlList rule EXTERNAL1_RTR state enabled ';
echo 'commit ';
echo '# This Throttle-ICMP ACL is OPTIONAL due to following Deny-All ACL ';
echo 'set addressContext default ipAccessControlList rule EXTERNAL1_ICMP precedence 59011 ';
echo 'set addressContext default ipAccessControlList rule EXTERNAL1_ICMP protocol icmp ';
echo 'set addressContext default ipAccessControlList rule EXTERNAL1_ICMP ipInterfaceGroup EXTERNAL1_IPIG ';
echo 'set addressContext default ipAccessControlList rule EXTERNAL1_ICMP action accept ';
echo 'set addressContext default ipAccessControlList rule EXTERNAL1_ICMP bucketSize 10 fillRate 10 ';
echo 'set addressContext default ipAccessControlList rule EXTERNAL1_ICMP state enabled ';
echo 'commit ';
echo 'set addressContext default ipAccessControlList rule EXTERNAL1_DENY precedence 60013 ';
echo 'set addressContext default ipAccessControlList rule EXTERNAL1_DENY ipInterfaceGroup EXTERNAL1_IPIG ';
echo 'set addressContext default ipAccessControlList rule EXTERNAL1_DENY action discard ';
echo 'set addressContext default ipAccessControlList rule EXTERNAL1_DENY state enabled ';
echo 'commit ';
echo ' ';
echo 'set addressContext default ipAccessControlList rule INTERNAL_ALLOW_ANY precedence 58004 ';
echo 'set addressContext default ipAccessControlList rule INTERNAL_ALLOW_ANY protocol any ';
echo 'set addressContext default ipAccessControlList rule INTERNAL_ALLOW_ANY ipInterfaceGroup INTERNAL1_IPIG ';
echo 'set addressContext default ipAccessControlList rule INTERNAL_ALLOW_ANY sourceIpAddress 69.60.209.1 ';
echo 'set addressContext default ipAccessControlList rule INTERNAL_ALLOW_ANY sourceAddressPrefixLength 32 ';
echo 'set addressContext default ipAccessControlList rule INTERNAL_ALLOW_ANY action accept ';
echo 'set addressContext default ipAccessControlList rule INTERNAL_ALLOW_ANY bucketSize 10 fillRate 10 ';
echo 'set addressContext default ipAccessControlList rule INTERNAL_ALLOW_ANY state enabled ';
echo 'commit ';
?>