blob: 8096571aed27292e53fc075b14256bfd388264c0 [file] [log] [blame]
Jeremy Ronquillo223db002020-06-05 10:28:22 -07001# Copyright 2018 Intel Corporation
Jeremy Ronquilloec2d3e42020-06-05 11:33:39 -07002# Copyright 2018-present Open Networking Foundation
Jeremy Ronquillo223db002020-06-05 10:28:22 -07003#
Jeremy Ronquilloec2d3e42020-06-05 11:33:39 -07004# SPDX-License-Identifier: Apache-2.0
Jeremy Ronquillo6046ce32020-06-18 11:06:29 -07005# SPDX-License-Identifier: LicenseRef-ONF-Member-Only-1.0
Jeremy Ronquillo223db002020-06-05 10:28:22 -07006
7images:
8 tags:
9 init: docker.io/omecproject/pod-init:1.0.0
Hyunsun Moonaa3de7d2020-06-28 19:22:16 -070010 hssdb: docker.io/omecproject/c3po-hssdb:master-latest
11 hss: docker.io/omecproject/c3po-hss:master-latest
Hyunsun Moond60fcaf2020-07-14 16:09:13 -070012 mme: docker.io/omecproject/nucleus:master-latest
Hyunsun Moon64033242020-08-20 16:51:20 -070013 spgwc: docker.io/omecproject/spgw:master-latest
Ajay Lotan Thakurc3cd6192020-10-12 20:12:38 -050014 pcrf: omecproject/c3po-pcrf:pcrf-latest
15 pcrfdb: omecproject/c3po-pcrfdb:pcrf-latest
Jeremy Ronquillo223db002020-06-05 10:28:22 -070016 depCheck: quay.io/stackanetes/kubernetes-entrypoint:v0.3.1
17 pullPolicy: IfNotPresent
Hyunsun Moond9a09e82021-03-17 12:16:53 -070018 # Optionally specify an array of imagePullSecrets.
19 # Secrets must be manually created in the namespace.
20 #pullSecrets:
21 # - name: aether.registry
Jeremy Ronquillo223db002020-06-05 10:28:22 -070022
23nodeSelectors:
24 enabled: false
25 hss:
26 label: omec-cp
27 value: enabled
Ajay Lotan Thakurc3cd6192020-10-12 20:12:38 -050028 pcrf:
29 label: omec-cp
30 value: enabled
Jeremy Ronquillo223db002020-06-05 10:28:22 -070031 mme:
32 label: omec-cp
33 value: enabled
34 spgwc:
35 label: omec-cp
36 value: enabled
37
38resources:
39 enabled: true
Ajay Lotan Thakurc3cd6192020-10-12 20:12:38 -050040 pcrf:
41 requests:
42 cpu: 2
43 memory: 1Gi
44 limits:
45 cpu: 2
46 memory: 1Gi
Jeremy Ronquillo223db002020-06-05 10:28:22 -070047 hss:
48 requests:
49 cpu: 2
50 memory: 1Gi
51 limits:
52 cpu: 2
53 memory: 1Gi
54 mme:
55 # Note that MME pod is composed of 4 containers
56 # Provide resources for a container, not a pod total
57 requests:
58 cpu: 0.5
59 memory: 1Gi
60 limits:
61 cpu: 0.5
62 memory: 1Gi
63 spgwc:
64 requests:
65 cpu: 2
66 memory: 5Gi
67 limits:
68 cpu: 2
69 memory: 5Gi
70
71cassandra:
72 deploy: true
73 fullnameOverride: cassandra
74 image:
75 tag: 2.1.20
76 #selector:
77 # nodeSelector:
78 # cassandra: enabled
79 persistence:
80 enabled: false
81 config:
82 #cluster_size: 1
83 #seed_size: 1
84 endpoint_snitch: GossipingPropertyFileSnitch
85 readinessProbe:
86 initialDelaySeconds: 10
87 resources: {}
88 #requests:
89 # memory: 4Gi
90 # cpu: 2
91 #limits:
92 # memory: 4Gi
93 # cpu: 2
94
95config:
96 clusterDomain: cluster.local
97 coreDump:
Ajay Lotan Thakurc3cd6192020-10-12 20:12:38 -050098 enabled: true
Jeremy Ronquillo223db002020-06-05 10:28:22 -070099 path: /tmp/coredump
Hyunsun Moond9a09e82021-03-17 12:16:53 -0700100 useExistingConfigMap: false
Ajay Lotan Thakurc3cd6192020-10-12 20:12:38 -0500101 pcrf:
102 deploy: true
Hyunsun Moond9a09e82021-03-17 12:16:53 -0700103 podAnnotations:
104 fluentbit.io/parser: pcrf
105 field.cattle.io/workloadMetrics: '[{"path":"/metrics","port":9089,"schema":"HTTP"}]'
Ajay Lotan Thakurc3cd6192020-10-12 20:12:38 -0500106 pcrfdb: cassandra
Ajay Lotan Thakurdad35d32021-03-18 12:21:21 -0500107 configPort:
108 port: 8080
109 nodePort:
110 enabled: false
111 port: 30081
Ajay Lotan Thakurc3cd6192020-10-12 20:12:38 -0500112 gx:
113 nodePort:
114 enabled: false
115 port: 33868
116 prometheus:
117 port: 9089
118 nodePort:
119 enabled: false
120 port: 30086
121 # Provide the peer whitelist extension
122 # The peer name must be a fqdn. We allow also a special "*" character as the
123 # first label of the fqdn, to allow all fqdn with the same domain name.
124 # Example: *.example.net will allow host1.example.net and host2.example.net
125 acl:
126 oldTls: "*.cluster.local"
127 #ipSec:
128 bootstrap:
129 enabled: false
130 # See https://github.com/omec-project/c3po for details of config options
131 cfgFiles:
Ajay Lotan Thakurdad35d32021-03-18 12:21:21 -0500132 subscriber_mapping.json:
133 Policies:
134 service-groups:
135 internet:
136 default-activate-service:
137 - be-internet-access
138 services:
139 be-internet-access:
140 qci: 9
141 arp: 1
142 AMBR_UL: 100000
143 AMBR_DL: 20000000
144 service-activation-rules:
145 - best-effort-internet-access
146 rules:
147 best-effort-internet-access:
148 definition:
149 Charging-Rule-Name: "best-effort-internet-access"
150 QoS-Information:
151 QoS-Class-Identifier: 9
152 Max-Requested-Bandwidth-UL: 512000
153 Max-Requested-Bandwidth-DL: 5120000
154 Guaranteed-Bitrate-UL: 0
155 Guaranteed-Bitrate-DL: 0
156 Allocation-Retention-Priority:
157 Priority-Level: 1
158 Pre-emption-Capability: 1
159 Pre-emption-Vulnerability: 1
160 APN-Aggregate-Max-Bitrate-UL: 1024000
161 APN-Aggregate-Max-Bitrate-DL: 10240000
162 Flow-Information:
163 Flow-Description: "permit out ip 0.0.0.0/0 to assigned"
Ajay Lotan Thakurc3cd6192020-10-12 20:12:38 -0500164 pcrf.json:
165 common:
166 fdcfg: conf/pcrf.conf
167 # Origin host and realm will be set automatically if unset
168 #originhost: ""
169 #originrealm: ""
170 pcrf:
171 gtwhost: "*"
172 gtwport: 9080
Ajay Lotan Thakurdad35d32021-03-18 12:21:21 -0500173 #restport will be set by configmap
174 #restport: ""
Ajay Lotan Thakurc3cd6192020-10-12 20:12:38 -0500175 ossport: 9082
176 # casssrv will be set to cassandra in the same cluster if unset
177 #casssrv: ""
178 casskeyspace: vpcrf
179 casshost: "cassandra"
180 cassusr: root
181 casspwd: root
182 cassdb: vpcrf
183 casscoreconnections: 2
184 cassmaxconnections: 8
185 cassioqueuesize: 32768
186 cassiothreads: 2
187 randv: true
188 optkey: "63bfa50ee6523365ff14c1f45f88737d"
189 reloadkey: false
190 logsize: 20
191 lognumber: 5
192 logname: logs/pcrf.log
193 logqsize: 8192
194 statlogsize: 20
195 statlognumber: 5
196 statlogname: logs/pcrf_stat.log
197 auditlogsize: 20
198 auditlognumber: 5
199 auditlogname: logs/pcrf_audit.log
200 statfreq: 2000
201 numworkers: 4
202 concurrent: 10
203 ossfile: conf/oss.json
204 verifyroamingsubscribers: false
205 oss.json:
206 option:
207 id: url
208 type: string
209 services:
210 - id: logger
211 commands:
212 - id: describe_loggers
213 - id: set_logger_level
214 options:
215 - id: name
216 type: string
217 - id: level
218 type: integer
219 - id: stats
220 commands:
221 - id: describe_stats_frequency
222 - id: describe_stats_live
223 - id: set_stats_frequency
224 options:
225 - id: frequency
226 type: integer
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700227 hss:
Hyunsun Moon83ff7352020-07-09 11:03:52 -0700228 deploy: true
Andy Bavierba196552020-09-17 13:58:04 -0700229 podAnnotations:
Hyunsun Moond9a09e82021-03-17 12:16:53 -0700230 fluentbit.io/parser: hss
Andy Bavierba196552020-09-17 13:58:04 -0700231 field.cattle.io/workloadMetrics: '[{"path":"/metrics","port":9089,"schema":"HTTP"}]'
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700232 hssdb: cassandra
233 s6a:
234 nodePort:
235 enabled: false
236 port: 33868
Ajay Lotan Thakurcd372a22020-12-11 14:36:26 -0700237 configPort:
238 port: 8080
239 nodePort:
240 enabled: false
241 port: 30081
Hyunsun Moon11d24f92020-08-26 14:55:19 -0700242 prometheus:
243 port: 9089
244 nodePort:
245 enabled: false
246 port: 30086
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700247 # Provide the peer whitelist extension
248 # The peer name must be a fqdn. We allow also a special "*" character as the
249 # first label of the fqdn, to allow all fqdn with the same domain name.
250 # Example: *.example.net will allow host1.example.net and host2.example.net
251 acl:
252 oldTls: "*.cluster.local"
253 #ipSec:
254 bootstrap:
255 enabled: true
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700256 users:
Hyunsun Moona1c4c982020-07-22 15:01:29 -0700257 - apn: internet
258 key: "465b5ce8b199b49faa5f0a2ee238a6bc"
259 opc: "d4416644f6154936193433dd20a0ace0"
260 sqn: 96
261 imsiStart: "208014567891200"
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700262 msisdnStart: "1122334455"
Ajay Lotan Thakurac5c1812021-02-22 12:23:20 -0600263 mme_identity: mme.omec.svc.cluster.local
264 mme_realm: omec.svc.cluster.local
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700265 count: 10
Jeremy Ronquillo20fbe492020-08-13 10:44:18 -0700266 staticusers:
267 - apn: internet
268 key: "465b5ce8b199b49faa5f0a2ee238a6bc"
269 opc: "d4416644f6154936193433dd20a0ace0"
270 sqn: 96
271 imsi: "208014567891200"
272 msisdn: "1122334455"
273 staticAddr: 0.0.0.0
Ajay Lotan Thakurac5c1812021-02-22 12:23:20 -0600274 mme_identity: mme.omec.svc.cluster.local
275 mme_realm: omec.svc.cluster.local
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700276 mmes:
277 - id: 1
Hyunsun Moon83ff7352020-07-09 11:03:52 -0700278 mme_identity: mme.omec.svc.cluster.local
279 mme_realm: omec.svc.cluster.local
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700280 isdn: "19136246000"
281 unreachability: 1
282 # See https://github.com/omec-project/c3po for details of config options
283 cfgFiles:
284 hss.json:
285 common:
286 fdcfg: conf/hss.conf
287 # Origin host and realm will be set automatically if unset
288 #originhost: ""
289 #originrealm: ""
290 hss:
291 gtwhost: "*"
292 gtwport: 9080
Ajay Lotan Thakurcd372a22020-12-11 14:36:26 -0700293 #restport will be set by configmap
294 #restport: ""
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700295 ossport: 9082
296 # casssrv will be set to cassandra in the same cluster if unset
297 #casssrv: ""
298 cassusr: root
299 casspwd: root
300 cassdb: vhss
301 casscoreconnections: 2
302 cassmaxconnections: 8
303 cassioqueuesize: 32768
304 cassiothreads: 2
305 randv: true
306 optkey: "63bfa50ee6523365ff14c1f45f88737d"
307 reloadkey: false
308 logsize: 20
309 lognumber: 5
310 logname: logs/hss.log
311 logqsize: 8192
312 statlogsize: 20
313 statlognumber: 5
314 statlogname: logs/hss_stat.log
315 auditlogsize: 20
316 auditlognumber: 5
317 auditlogname: logs/hss_audit.log
318 statfreq: 2000
319 numworkers: 4
320 concurrent: 10
321 ossfile: conf/oss.json
Ajay Lotan Thakurb48ed2d2020-07-01 11:58:51 -0700322 verifyroamingsubscribers: false
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700323 oss.json:
324 option:
325 id: url
326 type: string
327 services:
328 - id: logger
329 commands:
330 - id: describe_loggers
331 - id: set_logger_level
332 options:
333 - id: name
334 type: string
335 - id: level
336 type: integer
337 - id: stats
338 commands:
339 - id: describe_stats_frequency
340 - id: describe_stats_live
341 - id: set_stats_frequency
342 options:
343 - id: frequency
344 type: integer
345 mme:
Hyunsun Moon83ff7352020-07-09 11:03:52 -0700346 deploy: true
Andy Bavierba196552020-09-17 13:58:04 -0700347 podAnnotations:
Hyunsun Moond9a09e82021-03-17 12:16:53 -0700348 fluentbit.io/parser: mme
Andy Bavierba196552020-09-17 13:58:04 -0700349 field.cattle.io/workloadMetrics: '[{"path":"/metrics","port":3081,"schema":"HTTP"}]'
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700350 spgwAddr: spgwc
351 s11:
352 nodePort:
353 enabled: false
354 port: 32124
355 s6a:
356 nodePort:
357 enabled: false
358 port: 33869
Hyunsun Moon11d24f92020-08-26 14:55:19 -0700359 prometheus:
360 port: 3081
361 nodePort:
362 enabled: false
363 port: 30085
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700364 # See https://github.com/omec-project/openmme/blob/master/README.txt for more config options
365 cfgFiles:
366 config.json:
367 mme:
368 name: vmmestandalone
369 group_id: 1
370 code: 1
371 logging: error
372 mcc:
373 dig1: 2
374 dig2: 0
375 dig3: 8
376 mnc:
377 dig1: 0
378 dig2: 1
379 dig3: -1
380 plmnlist:
381 #plmn1 - aether common plmn, plmn2 is for comac-in-box
382 plmn1: "mcc=315,mnc=010"
383 plmn2: "mcc=208,mnc=01"
Ajay Lotan Thakurb48ed2d2020-07-01 11:58:51 -0700384 apnlist:
Hyunsun Moon6507d2f2020-07-14 15:06:25 -0700385 internet: "spgwc"
Ajay Lotan Thakurc3cd6192020-10-12 20:12:38 -0500386 feature_list:
387 dcnr_support: "disabled"
Badhrinath Pad6779412020-07-06 10:23:58 -0700388 security:
389 #int_alg_list: "[EIA0]"
390 int_alg_list: "[EIA1, EIA2, EIA0]"
391 sec_alg_list: "[EEA0, EEA1, EEA2]"
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700392 s1ap:
393 sctp_port: 36412
394 sctp_port_external: 36412
395 s11:
396 egtp_default_port: 2123
397 # sgw_addr and pgw_addr will be set dynamically if unset
398 #sgw_addr:
399 #pgw_addr:
400 s6a:
401 host_type: freediameter
402 # host and realm will be set dynamically if unset
403 #host:
404 #realm:
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700405 spgwc:
Hyunsun Moon83ff7352020-07-09 11:03:52 -0700406 deploy: true
Andy Bavierba196552020-09-17 13:58:04 -0700407 podAnnotations:
Hyunsun Moond9a09e82021-03-17 12:16:53 -0700408 fluentbit.io/parser: spgwc
Andy Bavierba196552020-09-17 13:58:04 -0700409 field.cattle.io/workloadMetrics: '[{"path":"/metrics","port":9089,"schema":"HTTP"}]'
Hyunsun Moon7f03a772020-09-27 23:23:50 -0500410 global:
411 transmitTimerSec: 2
412 periodicTimerSec: 10
413 transmitCount: 5
414 requestTimeoutMilliSec: 5000
415 requestTries: 3
416 cpLogger: 0
Ajay Lotan Thakurc3cd6192020-10-12 20:12:38 -0500417 gx_config: 0
Ajay Lotan Thakurf8f9bae2020-12-08 12:09:26 -0700418 urr_config: 0
419 logging_level: "LOG_DEBUG"
Ajay Lotan Thakurb48ed2d2020-07-01 11:58:51 -0700420 #DNS Server - 3gpp compliant DNS server
Hyunsun Moon7f03a772020-09-27 23:23:50 -0500421 dns:
422 cache:
423 concurrent: 25
424 percentage: 80
425 intervalSec: 60
426 queryTimeoutMilliSec: 1000
427 queryTries: 1
428 app:
429 frequencySec: 3
430 filename: "appqueries.json"
431 nameserver: "127.0.0.1"
432 ops:
433 frequencySec: 3
434 filename: "opsqueries.json"
435 nameserver: "127.0.0.1"
436 ueIpPool:
437 ip: "10.250.0.0"
438 mask: "255.255.0.0"
Ajay Lotan Thakurac5c1812021-02-22 12:23:20 -0600439 staticUeIpPool:
440 ip: "10.249.1.0"
441 mask: "255.255.255.0"
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700442 s11:
Hyunsun Moon7f03a772020-09-27 23:23:50 -0500443 port: 2123
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700444 nodePort:
445 enabled: false
446 port: 32123
Hyunsun Moon7f03a772020-09-27 23:23:50 -0500447 n4:
448 port: 8805
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700449 nodePort:
450 enabled: false
451 port: 30021
Hyunsun Moon11d24f92020-08-26 14:55:19 -0700452 prometheus:
453 port: 9089
454 nodePort:
455 enabled: false
456 port: 30084
Hyunsun Moon7f03a772020-09-27 23:23:50 -0500457 rest:
Ajay Lotan Thakur97278fa2020-09-21 17:31:51 -0500458 port: 8080
459 nodePort:
460 enabled: false
461 port: 30080
Ajay Lotan Thakurb48ed2d2020-07-01 11:58:51 -0700462 jsonCfgFiles:
Ajay Lotan Thakurac5c1812021-02-22 12:23:20 -0600463 cp.json:
464 global:
465 transmitTimerSec: 2
466 periodicTimerSec: 10
467 transmitCount: 5
468 requestTimeoutMilliSec: 5000
469 requestTries: 3
470 gxConfig: 0
471 urrConfig: 0
472 loggingLevel: "LOG_DEBUG"
473 #DNS Server - 3gpp compliant DNS server
474 dns:
475 cache:
476 concurrent: 25
477 percentage: 80
478 intervalSec: 60
479 queryTimeoutMilliSec: 1000
480 queryTries: 1
481 app:
482 frequencySec: 3
483 filename: "appqueries.json"
484 nameserver: "127.0.0.1"
485 ops:
486 frequencySec: 3
487 filename: "opsqueries.json"
488 nameserver: "127.0.0.1"
489 ip_pool_config:
490 ueIpPool:
491 ip: "10.250.0.0"
492 mask: "255.255.0.0"
493 staticUeIpPool:
494 ip: "10.249.1.0"
495 mask: "255.255.255.0"
Ajay Lotan Thakurc3cd6192020-10-12 20:12:38 -0500496 config.json:
497 gx:
498 host_type: freediameter
499 # host and realm will be set dynamically if unset
500 #host:
501 #realm:
Ajay Lotan Thakurb48ed2d2020-07-01 11:58:51 -0700502 subscriber_mapping.json:
503 subscriber-selection-rules:
504 - priority: 5
505 keys:
506 serving-plmn:
507 mcc: 208
508 mnc: 10
509 tac: 1
510 imsi-range:
511 from: 200000000000000
512 to: 299999999999999
513 selected-apn-profile: apn-profile1
514 selected-qos-profile: qos-profile1
515 selected-access-profile:
516 - access-all
517 selected-user-plane-profile: user-plane1
518 - priority: 10
519 keys:
520 match-all: true
521 selected-apn-profile: apn-profile1
522 selected-qos-profile: qos-profile1
523 selected-access-profile:
524 - access-all
525 selected-user-plane-profile: user-plane1
526 apn-profiles:
527 apn-profile1:
528 apn-name: internet
529 usage: 1
530 network: lbo
531 gx_enabled: true
532 dns_primary: 8.8.8.4
533 dns_secondary: 8.8.8.8
534 mtu: 1460
535 user-plane-profiles:
536 user-plane1:
Hyunsun Moon7f03a772020-09-27 23:23:50 -0500537 user-plane: upf
Ajay Lotan Thakurac5c1812021-02-22 12:23:20 -0600538 global-address: true
Ajay Lotan Thakurb48ed2d2020-07-01 11:58:51 -0700539 qos-tags:
540 tag1: BW
541 access-tags:
542 tag1: ACC
543 qos-profiles:
544 mobile:
Ajay Lotan Thakurdad35d32021-03-18 12:21:21 -0500545 qci: 9
546 arp: 1
Ajay Lotan Thakurb48ed2d2020-07-01 11:58:51 -0700547 apn-ambr:
548 - 12345678
549 - 12345678
550 access-profiles:
551 access-all:
552 type: allow-all
553 internet-only:
554 type: internet-only
555 filter: No_private_network
556 intranet-only:
557 type: intranet-only
558 filter: only_private_network
Hyunsun Moon7f03a772020-09-27 23:23:50 -0500559 apps-only:
Ajay Lotan Thakurb48ed2d2020-07-01 11:58:51 -0700560 type: specific-network
561 filter: only_apps_network
562 specific-app:
563 type: specific-destination-only
564 filter: allow-app-name
565 excluding-app:
566 type: excluding-this-app
567 filter: exclude-app-name
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700568 cfgFiles:
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700569 adc_rules.cfg: |
570 [GLOBAL]
571 NUM_ADC_RULES = 0
572 meter_profile.cfg: |
573 [GLOBAL]
574 NUM_OF_IDX = 0
575 pcc_rules.cfg: |
576 [GLOBAL]
577 NUM_PCC_FILTERS = 1
578 UL_AMBR_MTR_PROFILE_IDX = 1
579 DL_AMBR_MTR_PROFILE_IDX = 2
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700580 [PCC_FILTER_1]
581 RULE_NAME = DefaultRule
582 RATING_GROUP = 9
583 SERVICE_ID = 0
584 RULE_STATUS = 0
585 GATE_STATUS = 1
586 SESSION_CONT = 0
587 REPORT_LEVEL = 1
588 CHARGING_MODE = 0
589 METERING_METHOD = 0
590 MUTE_NOTIFY = 0
591 MONITORING_KEY = 0
592 SPONSOR_ID = 0
593 REDIRECT_INFO = 0
594 PRECEDENCE = 254
595 DROP_PKT_COUNT = 0
596 UL_MBR_MTR_PROFILE_IDX = 3
597 DL_MBR_MTR_PROFILE_IDX = 3
598 SDF_FILTER_IDX = 99998
599 sdf_rules.cfg: |
600 [GLOBAL]
601 NUM_SDF_FILTERS = 1
Jeremy Ronquillo223db002020-06-05 10:28:22 -0700602 [SDF_FILTER_1]
603 DIRECTION = downlink_only
604 IPV4_REMOTE = 13.2.1.113
605 IPV4_REMOTE_MASK = 255.255.255.0
606 PROTOCOL = 17
607 LOCAL_LOW_LIMIT_PORT = 0
608 LOCAL_HIGH_LIMIT_PORT = 65535
609 REMOTE_LOW_LIMIT_PORT = 0
610 REMOTE_HIGH_LIMIT_PORT = 65535