業務用（メイン）・ゲスト・IoT のように用途ごとに LAN を分離する構成例です。各 LAN に VLAN ID を割り当て、1 本のポートに複数 LAN をまとめる「トランクポート」も使用します。
{
"version": "1.0",
"network": {
"wan": { "wan0": { "ipv4": [{ "mode": "dhcp" }], "ipv6": [{ "mode": "disabled" }] } },
"lan": {
"main": {
"default": true,
"ipv4": { "mode": "static", "address": "192.168.0.1/24" },
"dhcp": { "enabled": true, "rangeStart": "192.168.0.100", "rangeEnd": "192.168.0.150", "leaseTime": "12h" }
},
"guest": {
"vlan": { "id": 10 },
"ipv4": { "mode": "static", "address": "192.168.10.1/24" },
"dhcp": { "enabled": true, "rangeStart": "192.168.10.100", "rangeEnd": "192.168.10.150", "leaseTime": "12h" }
},
"iot": {
"vlan": { "id": 20 },
"ipv4": { "mode": "static", "address": "192.168.20.1/24" },
"dhcp": { "enabled": true, "rangeStart": "192.168.20.100", "rangeEnd": "192.168.20.150", "leaseTime": "12h" }
}
},
"ports": {
"sfp0": { "mode": "access", "network": "wan0" },
"eth0": { "mode": "access", "network": "main" },
"eth1": { "mode": "access", "network": "guest" },
"eth2": { "mode": "access", "network": "iot" },
"eth3": { "mode": "trunk", "nativeNetwork": "main", "networks": ["guest", "iot"] }
}
},
"firewall": {
"defaults": { "input": "drop", "output": "accept", "forward": "drop" },
"zones": {
"lan": { "members": ["main"], "input": "accept", "output": "accept", "forward": "accept" },
"guest": { "members": ["guest"], "input": "drop", "output": "accept", "forward": "drop" },
"iot": { "members": ["iot"], "input": "drop", "output": "accept", "forward": "drop" },
"wan": { "members": ["wan0"], "input": "drop", "output": "accept", "forward": "drop", "nat": true }
},
"forwardings": [
{ "from": "lan", "to": "wan" },
{ "from": "guest", "to": "wan" },
{ "from": "iot", "to": "wan" }
]
},
"system": {
"hostname": "my-router",
"timezone": "Asia/Tokyo",
"maintenanceWindows": [
{ "dayOfWeek": 0, "startTime": "02:00", "durationMinutes": 120, "timezone": "Asia/Tokyo" }
]
}
}