hostname="nome.com.br"

keymap="br275.iso.acc.kbd"

clear_tmp_enable="YES"

syslogd_flags="-ss"

ifconfig_em0="up"
vlans_em0="3 4 10 11"

#
# ipv4
ifconfig_em0_3="inet IP/24 descr RNP"
ifconfig_em0_3_alias1="inet IP/24 descr RNP"
ifconfig_em0_3_alias2="inet IP/24 descr RNP"
ifconfig_em0_3_alias3="inet IP/24 descr RNP"
ifconfig_em0_3_alias4="inet IP/24 descr RNP"
ifconfig_em0_3_alias5="inet IP/24 descr RNP"
ifconfig_em0_3_alias6="inet IP/24 descr RNP"
ifconfig_em0_3_alias7="inet IP/24 descr RNP"
ifconfig_em0_3_alias8="inet IP/24 descr RNP"
ifconfig_em0_3_alias9="inet IP/24 descr RNP"

ifconfig_em0_4="inet IP/24 descr GOV"
ifconfig_em0_10="inet IP/24 descr PTP-GW1-INT"

defaultrouter="IP"

gateway_enable="YES"

#
# ipv6
ifconfig_em0_11_ipv6="inet6 IP/126 descr RNP"
ifconfig_em0_10_ipv6="inet6 IP/126 descr PTP-GW1-INT"

ipv6_defaultrouter="IPv6"
ipv6_gateway_enable="YES"

rtadvd_enable="YES"
rtadvd_interfaces="em0.10"

#
# services
sshd_enable="YES"
dumpdev="AUTO"

firewall_enable="YES"
firewall_script="/usr/local/etc/fw/rc.ipfw"

pf_enable="YES"
pf_rules="/usr/local/etc/fw/pf.conf"

### segunda instancia em /etc/rc.local

suricata_enable="YES"

#suricata_divertport="8000"

suricata_interface="em0.3"

zabbix_agentd_enable="YES"

openvpn_enable="YES"

#openvpn_if="em0.4"

### rotas internas
static_routes="rede1 rede2 rede3 rede4"
route_lan1cp1="-net IP/24 -gateway IP"
route_lan2cp1="-net IP/24 -gateway IP"
route_lan1services="-net IP/24 -gateway IP"
route_lan1db="-net IP/24 -gateway IP"
route_lan1grz="-net IP/24 -gateway IP"
route_lan2grz="-net IP/24 -gateway IP"
route_lan3grz="-net IP/24 -gateway IP"
route_ptp1grz="-net IP/30 -gateway IP"
route_wlan1grz="-net IP/24 -gateway IP"
route_wlan1cp1="-net IP/23 -gateway IP"

ipv6_static_routes="rede1 rede2 rede3 rede4"
ipv6_route_lan1cp1="IPv6/64 IPv6"
ipv6_route_lan1services="IPv6/64 IPv6"
ipv6_route_wlan1cp1="IPv6/64 IPv6"
ipv6_route_wlan1grz="IPv6/64 IPv6"
ipv6_route_ptp1grz="IPv6/64 IPv6"