{
	"zone": {
		"dmvpn-ipsec": { "addr": "0.0.0.0/0" },
		"dmvpn-gre": { "addr": "0.0.0.0/0", "ipsec": true },
		"dmvpn-bgp": {
			"iface": "$dmvpn_gre_iface", "addr": "0.0.0.0/0"
		},
		"dmvpn": { "iface": "$dmvpn_gre_iface", "route-back": true }
	},
	"log": {
		"dmvpn": {
			"mode": "nflog",
			"group": "$dmvpn_nflog_group",
			"range": 128,
			"limit": {
				"interval": 15,
				"src-mask": "$dmvpn_site_mask",
				"dest-mask": "$dmvpn_site_mask"
			}
		}
	},
	"packet-log": [ { "in": "dmvpn", "out": "dmvpn", "log": "dmvpn" } ],
	"filter": [
		{
			"in": "_fw",
			"service": [
				"dns",
				"http",
				"https",
				"ldap",
				"ldaps",
				"ntp"
			]
		},
		{ "in": "dmvpn-ipsec", "out": "_fw", "service": "ipsec" },
		{ "in": "_fw", "out": "dmvpn-ipsec", "service": "ipsec" },
		{ "in": "dmvpn-gre", "out": "_fw", "service": "gre" },
		{ "in": "_fw", "out": "dmvpn-gre", "service": "gre" },
		{ "in": "dmvpn-bgp", "out": "_fw", "service": "bgp" },
		{ "in": "_fw", "out": "dmvpn-bgp", "service": "bgp" },
		{ "in": "dmvpn", "out": "dmvpn" }
	]
}