<?xml version="1.0"?>
<pfsense>
	<version>22.9</version>
	<lastchange></lastchange>
	<system>
		<optimization>normal</optimization>
		<hostname>pfSenseTest</hostname>
		<domain>test.rogito.cz</domain>
		<dnsallowoverride>on</dnsallowoverride>
		<group>
			<name>all</name>
			<description><![CDATA[All Users]]></description>
			<scope>system</scope>
			<gid>1998</gid>
			<member>0</member>
		</group>
		<group>
			<name>admins</name>
			<description><![CDATA[System Administrators]]></description>
			<scope>system</scope>
			<gid>1999</gid>
			<member>0</member>
			<priv>page-all</priv>
		</group>
		<user>
			<name>admin</name>
			<descr><![CDATA[System Administrator]]></descr>
			<scope>system</scope>
			<groupname>admins</groupname>
			<uid>0</uid>
			<priv>user-shell-access</priv>
			<bcrypt-hash>$2y$10$V9PLS6rXMEIzdR3hnftcMOZV1rCbxdtdqcHmfrvBQg6Wz/Oed5LcG</bcrypt-hash>
		</user>
		<nextuid>2000</nextuid>
		<nextgid>2000</nextgid>
		<timeservers>2.pfsense.pool.ntp.org</timeservers>
		<webgui>
			<protocol>https</protocol>
			<loginautocomplete></loginautocomplete>
			<ssl-certref>6432c4e17c1c1</ssl-certref>
			<althostnames></althostnames>
			<dashboardcolumns>2</dashboardcolumns>
		</webgui>
		<disablenatreflection>yes</disablenatreflection>
		<disablesegmentationoffloading></disablesegmentationoffloading>
		<disablelargereceiveoffloading></disablelargereceiveoffloading>
		<ipv6allow></ipv6allow>
		<maximumtableentries>400000</maximumtableentries>
		<powerd_ac_mode>hadp</powerd_ac_mode>
		<powerd_battery_mode>hadp</powerd_battery_mode>
		<powerd_normal_mode>hadp</powerd_normal_mode>
		<bogons>
			<interval>monthly</interval>
		</bogons>
		<hn_altq_enable></hn_altq_enable>
		<already_run_config_upgrade></already_run_config_upgrade>
		<ssh></ssh>
		<dnsserver>1.1.1.1</dnsserver>
		<timezone>Europe/Prague</timezone>
	</system>
	<interfaces>
		<wan>
			<enable></enable>
			<if>hn0</if>
			<ipaddr>dhcp</ipaddr>
			<ipaddrv6>dhcp6</ipaddrv6>
			<gateway></gateway>
			<media></media>
			<mediaopt></mediaopt>
			<dhcp6-duid></dhcp6-duid>
			<dhcp6-ia-pd-len>0</dhcp6-ia-pd-len>
		</wan>
		<lan>
			<enable></enable>
			<if>hn1</if>
			<ipaddr>192.168.98.1</ipaddr>
			<subnet>24</subnet>
			<ipaddrv6>track6</ipaddrv6>
			<subnetv6>64</subnetv6>
			<media></media>
			<mediaopt></mediaopt>
			<track6-interface>wan</track6-interface>
			<track6-prefix-id>0</track6-prefix-id>
		</lan>
		<opt1>
			<if>hn2</if>
			<descr><![CDATA[OPT1]]></descr>
			<enable></enable>
			<spoofmac></spoofmac>
			<ipaddrv6>2001:db8:12:34::56</ipaddrv6>
			<subnetv6>64</subnetv6>
			<gatewayv6>OPT1GWv6</gatewayv6>
		</opt1>
	</interfaces>
	<staticroutes></staticroutes>
	<dhcpd>
		<lan>
			<enable></enable>
			<range>
				<from>192.168.98.10</from>
				<to>192.168.98.245</to>
			</range>
		</lan>
	</dhcpd>
	<dhcpdv6>
		<lan>
			<enable></enable>
			<range>
				<from>::1000</from>
				<to>::2000</to>
			</range>
			<ramode>assist</ramode>
			<rapriority>medium</rapriority>
		</lan>
	</dhcpdv6>
	<snmpd>
		<syslocation></syslocation>
		<syscontact></syscontact>
		<rocommunity>public</rocommunity>
	</snmpd>
	<diag>
		<ipv6nat>
			<ipaddr></ipaddr>
		</ipv6nat>
	</diag>
	<syslog>
		<filterdescriptions>1</filterdescriptions>
	</syslog>
	<nat>
		<outbound>
			<mode>automatic</mode>
		</outbound>
	</nat>
	<filter>
		<rule>
			<id></id>
			<tracker>1681049107</tracker>
			<type>pass</type>
			<interface>wan</interface>
			<ipprotocol>inet</ipprotocol>
			<tag></tag>
			<tagged></tagged>
			<max></max>
			<max-src-nodes></max-src-nodes>
			<max-src-conn></max-src-conn>
			<max-src-states></max-src-states>
			<statetimeout></statetimeout>
			<statetype><![CDATA[keep state]]></statetype>
			<os></os>
			<protocol>tcp</protocol>
			<source>
				<any></any>
			</source>
			<destination>
				<any></any>
				<port>443</port>
			</destination>
			<descr></descr>
			<updated>
				<time>1681049107</time>
				<username><![CDATA[admin@192.168.5.25 (Local Database)]]></username>
			</updated>
			<created>
				<time>1681049107</time>
				<username><![CDATA[admin@192.168.5.25 (Local Database)]]></username>
			</created>
		</rule>
		<rule>
			<type>pass</type>
			<ipprotocol>inet</ipprotocol>
			<descr><![CDATA[Default allow LAN to any rule]]></descr>
			<interface>lan</interface>
			<tracker>0100000101</tracker>
			<source>
				<network>lan</network>
			</source>
			<destination>
				<any></any>
			</destination>
		</rule>
		<rule>
			<type>pass</type>
			<ipprotocol>inet6</ipprotocol>
			<descr><![CDATA[Default allow LAN IPv6 to any rule]]></descr>
			<interface>lan</interface>
			<tracker>0100000102</tracker>
			<source>
				<network>lan</network>
			</source>
			<destination>
				<any></any>
			</destination>
		</rule>
		<separator>
			<wan></wan>
		</separator>
	</filter>
	<shaper></shaper>
	<ipsec>
		<client></client>
		<phase1>
			<ikeid>1</ikeid>
			<iketype>ikev2</iketype>
			<interface>opt1</interface>
			<remote-gateway>2001:db8:98:76::54</remote-gateway>
			<protocol>inet6</protocol>
			<myid_type>myaddress</myid_type>
			<myid_data></myid_data>
			<peerid_type>peeraddress</peerid_type>
			<peerid_data></peerid_data>
			<encryption>
				<item>
					<encryption-algorithm>
						<name>aes</name>
						<keylen>128</keylen>
					</encryption-algorithm>
					<hash-algorithm>sha256</hash-algorithm>
					<prf-algorithm>sha256</prf-algorithm>
					<dhgroup>14</dhgroup>
				</item>
			</encryption>
			<lifetime>28800</lifetime>
			<rekey_time></rekey_time>
			<reauth_time></reauth_time>
			<rand_time></rand_time>
			<pre-shared-key>test123</pre-shared-key>
			<private-key></private-key>
			<certref></certref>
			<pkcs11certref></pkcs11certref>
			<pkcs11pin></pkcs11pin>
			<caref></caref>
			<authentication_method>pre_shared_key</authentication_method>
			<descr><![CDATA[test-line]]></descr>
			<nat_traversal>on</nat_traversal>
			<mobike>off</mobike>
			<startaction></startaction>
			<closeaction></closeaction>
			<dpd_delay>10</dpd_delay>
			<dpd_maxfail>5</dpd_maxfail>
		</phase1>
		<phase2>
			<ikeid>1</ikeid>
			<uniqid>6432c71608c5c</uniqid>
			<mode>tunnel</mode>
			<reqid>1</reqid>
			<localid>
				<type>lan</type>
			</localid>
			<remoteid>
				<type>network</type>
				<address>192.168.97.0</address>
				<netbits>24</netbits>
			</remoteid>
			<protocol>esp</protocol>
			<encryption-algorithm-option>
				<name>aes</name>
				<keylen>128</keylen>
			</encryption-algorithm-option>
			<encryption-algorithm-option>
				<name>aes128gcm</name>
				<keylen>128</keylen>
			</encryption-algorithm-option>
			<hash-algorithm-option>hmac_sha256</hash-algorithm-option>
			<pfsgroup>14</pfsgroup>
			<lifetime>3600</lifetime>
			<rekey_time></rekey_time>
			<rand_time></rand_time>
			<pinghost></pinghost>
			<keepalive>disabled</keepalive>
			<descr></descr>
		</phase2>
	</ipsec>
	<aliases></aliases>
	<proxyarp></proxyarp>
	<cron>
		<item>
			<minute>*/1</minute>
			<hour>*</hour>
			<mday>*</mday>
			<month>*</month>
			<wday>*</wday>
			<who>root</who>
			<command>/usr/sbin/newsyslog</command>
		</item>
		<item>
			<minute>1</minute>
			<hour>3</hour>
			<mday>*</mday>
			<month>*</month>
			<wday>*</wday>
			<who>root</who>
			<command>/etc/rc.periodic daily</command>
		</item>
		<item>
			<minute>15</minute>
			<hour>4</hour>
			<mday>*</mday>
			<month>*</month>
			<wday>6</wday>
			<who>root</who>
			<command>/etc/rc.periodic weekly</command>
		</item>
		<item>
			<minute>30</minute>
			<hour>5</hour>
			<mday>1</mday>
			<month>*</month>
			<wday>*</wday>
			<who>root</who>
			<command>/etc/rc.periodic monthly</command>
		</item>
		<item>
			<minute>1,31</minute>
			<hour>0-5</hour>
			<mday>*</mday>
			<month>*</month>
			<wday>*</wday>
			<who>root</who>
			<command>/usr/bin/nice -n20 adjkerntz -a</command>
		</item>
		<item>
			<minute>1</minute>
			<hour>3</hour>
			<mday>1</mday>
			<month>*</month>
			<wday>*</wday>
			<who>root</who>
			<command>/usr/bin/nice -n20 /etc/rc.update_bogons.sh</command>
		</item>
		<item>
			<minute>1</minute>
			<hour>1</hour>
			<mday>*</mday>
			<month>*</month>
			<wday>*</wday>
			<who>root</who>
			<command>/usr/bin/nice -n20 /etc/rc.dyndns.update</command>
		</item>
		<item>
			<minute>*/60</minute>
			<hour>*</hour>
			<mday>*</mday>
			<month>*</month>
			<wday>*</wday>
			<who>root</who>
			<command>/usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot</command>
		</item>
		<item>
			<minute>30</minute>
			<hour>12</hour>
			<mday>*</mday>
			<month>*</month>
			<wday>*</wday>
			<who>root</who>
			<command>/usr/bin/nice -n20 /etc/rc.update_urltables</command>
		</item>
		<item>
			<minute>1</minute>
			<hour>0</hour>
			<mday>*</mday>
			<month>*</month>
			<wday>*</wday>
			<who>root</who>
			<command>/usr/bin/nice -n20 /etc/rc.update_pkg_metadata</command>
		</item>
	</cron>
	<wol></wol>
	<rrd>
		<enable></enable>
	</rrd>
	<widgets>
		<sequence>system_information:col1:open:0,disks:col1:open:0,interfaces:col2:open:0,ipsec:col2:open:0</sequence>
		<period>10</period>
	</widgets>
	<openvpn></openvpn>
	<dnshaper></dnshaper>
	<unbound>
		<enable></enable>
		<dnssec></dnssec>
		<active_interface></active_interface>
		<outgoing_interface></outgoing_interface>
		<custom_options></custom_options>
		<hideidentity></hideidentity>
		<hideversion></hideversion>
		<dnssecstripped></dnssecstripped>
	</unbound>
	<vlans></vlans>
	<qinqs></qinqs>
	<revision>
		<time>1681049380</time>
		<description><![CDATA[admin@192.168.5.25 (Local Database): Saved IPsec tunnel Phase 2 configuration.]]></description>
		<username><![CDATA[admin@192.168.5.25 (Local Database)]]></username>
	</revision>
	<gateways>
		<gateway_item>
			<interface>opt1</interface>
			<gateway>2001:db8:12:34::1</gateway>
			<name>OPT1GWv6</name>
			<weight></weight>
			<ipprotocol>inet6</ipprotocol>
			<descr></descr>
			<gw_down_kill_states></gw_down_kill_states>
		</gateway_item>
		<defaultgw4>OPT1GWv6</defaultgw4>
	</gateways>
	<captiveportal></captiveportal>
	<dnsmasq></dnsmasq>
	<ntpd>
		<gps></gps>
	</ntpd>
	<cert>
		<refid>6432c4e17c1c1</refid>
		<descr><![CDATA[webConfigurator default (6432c4e17c1c1)]]></descr>
		<type>server</type>
		<crt>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</crt>
		<prv>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</prv>
	</cert>
	<ppps></ppps>
</pfsense>
