# network interface settings; autogenerated
auto lo
iface lo inet loopback
auto vmbr1
iface vmbr1 inet manual
bridge_ports dummy0
bridge_stp off
bridge_fd 0
auto vmbr0
iface vmbr0 inet static
address A.B.C.D
netmask 255.255.255.0
gateway A.B.C.D2
bridge_ports enp3s0
bridge_stp off
bridge_fd 0
iface vmbr0 inet6 static
address ipv6:public:adress
netmask 64
post-up /sbin/ip -f inet6 route add ipv6:gw dev vmbr0
post-up /sbin/ip -f inet6 route add default via ipv6:gw
pre-down /sbin/ip -f inet6 route del default via ipv6:gw
pre-down /sbin/ip -f inet6 route del ipv6:gw dev vmbr0
auto vmbr02
iface vmbr02 inet static
address 10.0.172.254
netmask 255.255.255.0
bridge_ports none
bridge_stp off
bridge_fd 0
#WAN for internal routing and NAT : 10.0.172.254/24
post-up echo 1 > /proc/sys/net/ipv4/ip_forward
post-up route add -net PUB.IP.SL.OT/28 gw 10.0.172.253
post-up iptables -t nat -A POSTROUTING -s '10.0.172.253/32' -o vmbr0 -j MASQUERADE
post-down iptables -t nat -D POSTROUTING -s '10.0.172.253/32' -o vmbr0 -j MASQUERADE
auto vmbr03
iface vmbr03 inet static
bridge_ports none
bridge_stp off
bridge_fd 0
#DMZ : 10.0.173.254/24
auto vmbr04
iface vmbr04 inet static
address 10.0.174.254
netmask 255.255.255.0
bridge_ports none
bridge_stp off
bridge_fd 0
#10.0.174.0/24 : 10.0.174.254/24