firewall {
    name TEST1 {
        default-action drop
        rule 10 {
            action accept
            destination {
                address 10.10.11.2
            }
            source {
                address 10.10.10.1/30
            }
        }
        rule 20 {
            action accept
            destination {
                address 10.10.13.1-10.10.13.16
            }
            source {
                address 10.10.12.0/30
            }
        }
        rule 30 {
            action accept
            destination {
                address !10.10.15.1/30
            }
            source {
                address 10.10.14.1
            }
        }
    }
    ipv6-name TEST2 {
        default-action drop
        rule 10 {
            action accept
            destination {
                address 2001:db8:10:11::2
            }
            source {
                address 2001:db8:10:10::1/126
            }
        }
        rule 20 {
            action accept
            destination {
                address 2001:db8:10:13::1-2001:db8:10:13::16
            }
            source {
                address 2001:db8:10:12::/126
            }
        }
        rule 30 {
            action accept
            destination {
                address !2001:db8:10:15::1/126
            }
            source {
                address 2001:db8:10:14::1
            }
        }
    }
}
interfaces {
    ethernet eth0 {
    }
    loopback lo {
    }
}
system {
    console {
        device ttyS0 {
            speed 115200
        }
    }
    host-name "vyos"
    login {
        user vyos {
            authentication {
                encrypted-password "$6$O5gJRlDYQpj$MtrCV9lxMnZPMbcxlU7.FI793MImNHznxGoMFgm3Q6QP3vfKJyOSRCt3Ka/GzFQyW1yZS4NS616NLHaIPPFHc0"
                plaintext-password ""
            }
        }
    }
}

// Warning: Do not remove the following line.
// vyos-config-version: "broadcast-relay@1:cluster@1:config-management@1:conntrack@3:conntrack-sync@2:container@1:dhcp-relay@2:dhcp-server@6:dhcpv6-server@1:dns-forwarding@3:firewall@5:https@2:interfaces@23:ipoe-server@1:ipsec@5:isis@1:l2tp@3:lldp@1:mdns@1:nat@5:ntp@1:pppoe-server@5:pptp@2:qos@1:quagga@8:rpki@1:salt@1:snmp@2:ssh@2:sstp@3:system@21:vrrp@2:vyos-accel-ppp@2:wanloadbalance@3:webproxy@2:zone-policy@1"
// Release version: 1.3.8