p000 example 0 - nihole/PSEFABRIC GitHub Wiki

structure str_1 [ dc1 dc2 ]
structure str_2 [ a1 a2 ]
structure str_3 [ a1_zn1 a1_zn2 a1_zn3 a2_zn1 a2_zn2 a2_zn3 ]
structure str_4 [ subz1 subz2 subz3 subz4 ]
structure str_6 none
structure str_7 none
structure str_8 none
structure str_9 none

addresses a1_zn1_subz1_addr1 ipv4-prefix 10.1.1.1/32 structure str_1 dc1 str_3 a1_zn1 str_2 a1 str_4 subz1
parameters addr_par_3 a1_app1_epg1_10.1.1.1_32 addr_par_1 true
addresses a1_zn1_subz1_addr2 ipv4-prefix 10.1.1.2/32 structure str_1 dc1 str_3 a1_zn1 str_2 a1 str_4 subz1
parameters addr_par_3 a1_app1_epg1_10.1.1.2_32 addr_par_1 true
addresses a1_zn1_subz2_addr1 ipv4-prefix 10.1.1.3/32 structure str_1 dc1 str_3 a1_zn1 str_2 a1 str_4 subz2
parameters addr_par_3 a1_app1_epg2_10.1.1.3_32 addr_par_1 true
addresses a1_zn1_subz2_addr2 ipv4-prefix 10.1.1.4/32 structure str_1 dc1 str_3 a1_zn1 str_2 a1 str_4 subz2
parameters addr_par_3 a1_app1_epg2_10.1.1.4_32 addr_par_1 true
addresses a1_zn1_subz3_addr1 ipv4-prefix 10.1.1.5/32 structure str_1 dc1 str_3 a1_zn1 str_2 a1 str_4 subz3
parameters addr_par_3 a1_app2_epg1_10.1.1.5_32 addr_par_1 true
addresses a1_zn1_subz3_addr2 ipv4-prefix 10.1.1.6/32 structure str_1 dc1 str_3 a1_zn1 str_2 a1 str_4 subz3
parameters addr_par_3 a1_app2_epg1_10.1.1.6_32 addr_par_1 true
addresses a1_zn1_subz4_addr1 ipv4-prefix 10.1.1.7/32 structure str_1 dc1 str_3 a1_zn1 str_2 a1 str_4 subz4
parameters addr_par_3 a1_app2_epg2_10.1.1.7_32 addr_par_1 true
addresses a1_zn1_subz4_addr2 ipv4-prefix 10.1.1.8/32 structure str_1 dc1 str_3 a1_zn1 str_2 a1 str_4 subz4
parameters addr_par_3 a1_app2_epg2_10.1.1.8_32 addr_par_1 true
addresses a1_zn2_subz1_addr1 ipv4-prefix 10.1.2.1/32 structure str_1 dc1 str_3 a1_zn2 str_2 a1 str_4 subz1
parameters addr_par_3 a1_app3_epg1_10.1.2.1_32 addr_par_1 true
addresses a1_zn2_subz1_addr2 ipv4-prefix 10.1.2.2/32 structure str_1 dc1 str_3 a1_zn2 str_2 a1 str_4 subz1
parameters addr_par_3 a1_app3_epg1_10.1.2.2_32 addr_par_1 true
addresses a1_zn2_subz2_addr1 ipv4-prefix 10.1.2.3/32 structure str_1 dc1 str_3 a1_zn2 str_2 a1 str_4 subz2
parameters addr_par_3 a1_app3_epg2_10.1.2.3_32 addr_par_1 true
addresses a1_zn2_subz2_addr2 ipv4-prefix 10.1.2.4/32 structure str_1 dc1 str_3 a1_zn2 str_2 a1 str_4 subz2
parameters addr_par_3 a1_app3_epg2_10.1.2.4_32 addr_par_1 true
addresses a1_zn2_subz3_addr1 ipv4-prefix 10.1.2.5/32 structure str_1 dc1 str_3 a1_zn2 str_2 a1 str_4 subz3
parameters addr_par_3 a1_app4_epg1_10.1.2.5_32 addr_par_1 true
addresses a1_zn2_subz3_addr2 ipv4-prefix 10.1.2.6/32 structure str_1 dc1 str_3 a1_zn2 str_2 a1 str_4 subz3
parameters addr_par_3 a1_app4_epg1_10.1.2.6_32 addr_par_1 true
addresses a1_zn2_subz4_addr1 ipv4-prefix 10.1.1.7/32 structure str_1 dc1 str_3 a1_zn2 str_2 a1 str_4 subz4
parameters addr_par_3 a1_app4_epg2_10.1.2.7_32 addr_par_1 true
addresses a1_zn2_subz4_addr2 ipv4-prefix 10.1.2.8/32 structure str_1 dc1 str_3 a1_zn2 str_2 a1 str_4 subz4
parameters addr_par_3 a1_app4_epg2_10.1.2.8_32 addr_par_1 true
addresses a1_zn3_subz1_addr1 ipv4-prefix 10.1.3.1/32 structure str_1 dc1 str_3 a1_zn3 str_2 a1 str_4 subz1
parameters addr_par_3 a1_app5_epg1_10.1.3.1_32 addr_par_1 true
addresses a1_zn3_subz1_addr2 ipv4-prefix 10.1.3.2/32 structure str_1 dc1 str_3 a1_zn3 str_2 a1 str_4 subz1
parameters addr_par_3 a1_app5_epg1_10.1.3.2_32 addr_par_1 true
addresses a1_zn3_subz2_addr1 ipv4-prefix 10.1.3.3/32 structure str_1 dc1 str_3 a1_zn3 str_2 a1 str_4 subz2
parameters addr_par_3 a1_app5_epg2_10.1.3.3_32 addr_par_1 true
addresses a1_zn3_subz2_addr2 ipv4-prefix 10.1.3.4/32 structure str_1 dc1 str_3 a1_zn3 str_2 a1 str_4 subz2
parameters addr_par_3 a1_app5_epg2_10.1.3.4_32 addr_par_1 true
addresses a1_zn3_subz3_addr1 ipv4-prefix 10.1.3.5/32 structure str_1 dc1 str_3 a1_zn3 str_2 a1 str_4 subz3
parameters addr_par_3 a1_app6_epg1_10.1.3.5_32 addr_par_1 true
addresses a1_zn3_subz3_addr2 ipv4-prefix 10.1.3.6/32 structure str_1 dc1 str_3 a1_zn3 str_2 a1 str_4 subz3
parameters addr_par_3 a1_app6_epg1_10.1.3.6_32 addr_par_1 true
addresses a1_zn3_subz4_addr1 ipv4-prefix 10.1.3.7/32 structure str_1 dc1 str_3 a1_zn3 str_2 a1 str_4 subz4
parameters addr_par_3 a1_app6_epg2_10.1.3.7_32 addr_par_1 true
addresses a1_zn3_subz4_addr2 ipv4-prefix 10.1.3.8/32 structure str_1 dc1 str_3 a1_zn3 str_2 a1 str_4 subz4
parameters addr_par_3 a1_app6_epg2_10.1.3.8_32 addr_par_1 true
addresses a2_zn1_subz1_addr1 ipv4-prefix 10.2.1.1/32 structure str_1 dc1 str_3 a2_zn1 str_2 a1 str_4 subz1
parameters addr_par_3 a2_app1_epg1_10.2.1.1_32 addr_par_1 true
addresses a2_zn1_subz1_addr2 ipv4-prefix 10.2.1.2/32 structure str_1 dc1 str_3 a2_zn1 str_2 a1 str_4 subz1
parameters addr_par_3 a2_app1_epg1_10.2.1.2_32 addr_par_1 true
addresses a2_zn1_subz2_addr1 ipv4-prefix 10.2.1.3/32 structure str_1 dc1 str_3 a2_zn1 str_2 a1 str_4 subz2
parameters addr_par_3 a2_app1_epg2_10.2.1.3_32 addr_par_1 true
addresses a2_zn1_subz2_addr2 ipv4-prefix 10.2.1.4/32 structure str_1 dc1 str_3 a2_zn1 str_2 a1 str_4 subz2
parameters addr_par_3 a2_app1_epg2_10.2.1.4_32 addr_par_1 true
addresses a2_zn1_subz3_addr1 ipv4-prefix 10.2.1.5/32 structure str_1 dc1 str_3 a2_zn1 str_2 a1 str_4 subz3
parameters addr_par_3 a2_app2_epg1_10.2.1.5_32 addr_par_1 true
addresses a2_zn1_subz3_addr2 ipv4-prefix 10.2.1.6/32 structure str_1 dc1 str_3 a2_zn1 str_2 a1 str_4 subz3
parameters addr_par_3 a2_app2_epg1_10.2.1.6_32 addr_par_1 true
addresses a2_zn1_subz4_addr1 ipv4-prefix 10.2.1.7/32 structure str_1 dc1 str_3 a2_zn1 str_2 a1 str_4 subz4
parameters addr_par_3 a2_app2_epg2_10.2.1.7_32 addr_par_1 true
addresses a2_zn1_subz4_addr2 ipv4-prefix 10.2.1.8/32 structure str_1 dc1 str_3 a2_zn1 str_2 a1 str_4 subz4
parameters addr_par_3 a2_app2_epg2_10.2.1.8_32 addr_par_1 true
addresses a2_zn2_subz1_addr1 ipv4-prefix 10.2.2.1/32 structure str_1 dc1 str_3 a2_zn2 str_2 a1 str_4 subz1
parameters addr_par_3 a2_app3_epg1_10.2.2.1_32 addr_par_1 true
addresses a2_zn2_subz1_addr2 ipv4-prefix 10.2.2.2/32 structure str_1 dc1 str_3 a2_zn2 str_2 a1 str_4 subz1
parameters addr_par_3 a2_app3_epg1_10.2.2.2_32 addr_par_1 true
addresses a2_zn2_subz2_addr1 ipv4-prefix 10.2.2.3/32 structure str_1 dc1 str_3 a2_zn2 str_2 a1 str_4 subz2
parameters addr_par_3 a2_app3_epg2_10.2.2.3_32 addr_par_1 true
addresses a2_zn2_subz2_addr2 ipv4-prefix 10.2.2.4/32 structure str_1 dc1 str_3 a2_zn2 str_2 a1 str_4 subz2
parameters addr_par_3 a2_app3_epg2_10.2.2.4_32 addr_par_1 true
addresses a2_zn2_subz3_addr1 ipv4-prefix 10.2.2.5/32 structure str_1 dc1 str_3 a2_zn2 str_2 a1 str_4 subz3
parameters addr_par_3 a2_app4_epg1_10.2.2.5_32 addr_par_1 true
addresses a2_zn2_subz3_addr2 ipv4-prefix 10.2.2.6/32 structure str_1 dc1 str_3 a2_zn2 str_2 a1 str_4 subz3
parameters addr_par_3 a2_app4_epg1_10.2.2.6_32 addr_par_1 true
addresses a2_zn2_subz4_addr1 ipv4-prefix 10.2.1.7/32 structure str_1 dc1 str_3 a2_zn2 str_2 a1 str_4 subz4
parameters addr_par_3 a2_app4_epg2_10.2.2.7_32 addr_par_1 true
addresses a2_zn2_subz4_addr2 ipv4-prefix 10.2.2.8/32 structure str_1 dc1 str_3 a2_zn2 str_2 a1 str_4 subz4
parameters addr_par_3 a2_app4_epg2_10.2.2.8_32 addr_par_1 true
addresses a2_zn3_subz1_addr1 ipv4-prefix 10.2.3.1/32 structure str_1 dc1 str_3 a2_zn3 str_2 a1 str_4 subz1
parameters addr_par_3 a2_app5_epg1_10.2.3.1_32 addr_par_1 true
addresses a2_zn3_subz1_addr2 ipv4-prefix 10.2.3.2/32 structure str_1 dc1 str_3 a2_zn3 str_2 a1 str_4 subz1
parameters addr_par_3 a2_app5_epg1_10.2.3.2_32 addr_par_1 true
addresses a2_zn3_subz2_addr1 ipv4-prefix 10.2.3.3/32 structure str_1 dc1 str_3 a2_zn3 str_2 a1 str_4 subz2
parameters addr_par_3 a2_app5_epg2_10.2.3.3_32 addr_par_1 true
addresses a2_zn3_subz2_addr2 ipv4-prefix 10.2.3.4/32 structure str_1 dc1 str_3 a2_zn3 str_2 a1 str_4 subz2
parameters addr_par_3 a2_app5_epg2_10.2.3.4_32 addr_par_1 true
addresses a2_zn3_subz3_addr1 ipv4-prefix 10.2.3.5/32 structure str_1 dc1 str_3 a2_zn3 str_2 a1 str_4 subz3
parameters addr_par_3 a2_app6_epg1_10.2.3.5_32 addr_par_1 true
addresses a2_zn3_subz3_addr2 ipv4-prefix 10.2.3.6/32 structure str_1 dc1 str_3 a2_zn3 str_2 a1 str_4 subz3
parameters addr_par_3 a2_app6_epg1_10.2.3.6_32 addr_par_1 true
addresses a2_zn3_subz4_addr1 ipv4-prefix 10.2.3.7/32 structure str_1 dc1 str_3 a2_zn3 str_2 a1 str_4 subz4
parameters addr_par_3 a2_app6_epg2_10.2.3.7_32 addr_par_1 true
addresses a2_zn3_subz4_addr2 ipv4-prefix 10.2.3.8/32 structure str_1 dc1 str_3 a2_zn3 str_2 a1 str_4 subz4
parameters addr_par_3 a2_app6_epg2_10.2.3.8_32 addr_par_1 true


address-sets a1_zn1_subz1_set addresses [ a1_zn1_subz1_addr1 a1_zn1_subz1_addr2 ] parameters addrset_par_3 a1_app1_epg1_grp addrset_par_2 true addrset_par_4 a1_app1_epg1 addrset_par_1 true addrset_par_5 uni/t1/app1 
address-sets a1_zn1_subz2_set addresses [ a1_zn1_subz2_addr1 a1_zn1_subz2_addr2 ] parameters addrset_par_3 a1_app1_epg2_grp addrset_par_2 true addrset_par_4 a1_app1_epg2 addrset_par_1 true addrset_par_5 uni/t1/app1 
address-sets a1_zn1_subz3_set addresses [ a1_zn1_subz3_addr1 a1_zn1_subz3_addr2 ] parameters addrset_par_3 a1_app2_epg1_grp addrset_par_2 true addrset_par_4 a1_app2_epg1 addrset_par_1 true addrset_par_5 uni/t1/app2 
address-sets a1_zn1_subz4_set addresses [ a1_zn1_subz4_addr1 a1_zn1_subz4_addr2 ] parameters addrset_par_3 a1_app2_epg2_grp addrset_par_2 true addrset_par_4 a1_app2_epg2 addrset_par_1 true addrset_par_5 uni/t1/app2 
address-sets a1_zn2_subz1_set addresses [ a1_zn2_subz1_addr1 a1_zn2_subz1_addr2 ] parameters  addrset_par_3 a1_app3_epg1_grp addrset_par_2 true addrset_par_4 a1_app3_epg1 addrset_par_1 true addrset_par_5 uni/t1/app3 
address-sets a1_zn2_subz2_set addresses [ a1_zn2_subz2_addr1 a1_zn2_subz2_addr2 ] parameters addrset_par_3 a1_app3_epg2_grp addrset_par_2 true addrset_par_4 a1_app3_epg2 addrset_par_1 true addrset_par_5 uni/t1/app3 
address-sets a1_zn2_subz3_set addresses [ a1_zn2_subz3_addr1 a1_zn2_subz3_addr2 ] parameters  addrset_par_3 a1_app4_epg1_grp addrset_par_2 true addrset_par_4 a1_app4_epg1 addrset_par_1 true addrset_par_5 uni/t1/app4 
address-sets a1_zn2_subz4_set addresses [ a1_zn2_subz4_addr1 a1_zn2_subz4_addr2 ] parameters  addrset_par_3 a1_app4_epg2_grp addrset_par_2 true addrset_par_4 a1_app4_epg2 addrset_par_1 true addrset_par_5 uni/t1/app4 
address-sets a1_zn3_subz1_set addresses [ a1_zn3_subz1_addr1 a1_zn3_subz1_addr2 ] parameters  addrset_par_3 a1_app5_epg1_grp addrset_par_2 true addrset_par_4 a1_app5_epg1 addrset_par_1 true addrset_par_5 uni/t1/app5 
address-sets a1_zn3_subz2_set addresses [ a1_zn3_subz2_addr1 a1_zn3_subz2_addr2 ] parameters  addrset_par_3 a1_app5_epg2_grp addrset_par_2 true addrset_par_4 a1_app5_epg2 addrset_par_1 true addrset_par_5 uni/t1/app5 
address-sets a1_zn3_subz3_set addresses [ a1_zn3_subz3_addr1 a1_zn3_subz3_addr2 ] parameters  addrset_par_3 a1_app6_epg1_grp addrset_par_2 true addrset_par_4 a1_app6_epg1 addrset_par_1 true addrset_par_5 uni/t1/app6 
address-sets a1_zn3_subz4_set addresses [ a1_zn3_subz4_addr1 a1_zn3_subz4_addr2 ] parameters  addrset_par_3 a1_app6_epg2_grp addrset_par_2 true addrset_par_4 a1_app6_epg2 addrset_par_1 true addrset_par_5 uni/t1/app6 
address-sets a2_zn1_subz1_set addresses [ a2_zn1_subz1_addr1 a2_zn1_subz1_addr2 ] parameters  addrset_par_3 a2_app1_epg1_grp addrset_par_2 true addrset_par_4 a2_app1_epg1 addrset_par_1 true addrset_par_5 uni/t2/app1 
address-sets a2_zn1_subz2_set addresses [ a2_zn1_subz2_addr1 a2_zn1_subz2_addr2 ] parameters  addrset_par_3 a2_app1_epg2_grp addrset_par_2 true addrset_par_4 a2_app1_epg2 addrset_par_1 true addrset_par_5 uni/t2/app1 
address-sets a2_zn1_subz3_set addresses [ a2_zn1_subz3_addr1 a2_zn1_subz3_addr2 ] parameters  addrset_par_3 a2_app2_epg1_grp addrset_par_2 true addrset_par_4 a2_app2_epg1 addrset_par_1 true addrset_par_5 uni/t2/app2 
address-sets a2_zn1_subz4_set addresses [ a2_zn1_subz4_addr1 a2_zn1_subz4_addr2 ] parameters  addrset_par_3 a2_app2_epg2_grp addrset_par_2 true addrset_par_4 a2_app2_epg2 addrset_par_1 true addrset_par_5 uni/t2/app2 
address-sets a2_zn2_subz1_set addresses [ a2_zn2_subz1_addr1 a2_zn2_subz1_addr2 ] parameters  addrset_par_3 a2_app3_epg1_grp addrset_par_2 true addrset_par_4 a2_app3_epg1 addrset_par_1 true addrset_par_5 uni/t2/app3 
address-sets a2_zn2_subz2_set addresses [ a2_zn2_subz2_addr1 a2_zn2_subz2_addr2 ] parameters  addrset_par_3 a2_app3_epg2_grp addrset_par_2 true addrset_par_4 a2_app3_epg2 addrset_par_1 true addrset_par_5 uni/t2/app3 
address-sets a2_zn2_subz3_set addresses [ a2_zn2_subz3_addr1 a2_zn2_subz3_addr2 ] parameters  addrset_par_3 a2_app4_epg1_grp addrset_par_2 true addrset_par_4 a2_app4_epg1 addrset_par_1 true addrset_par_5 uni/t2/app4 
address-sets a2_zn2_subz4_set addresses [ a2_zn2_subz4_addr1 a2_zn2_subz4_addr2 ] parameters  addrset_par_3 a2_app4_epg2_grp addrset_par_2 true addrset_par_4 a2_app4_epg2 addrset_par_1 true addrset_par_5 uni/t2/app4 
address-sets a2_zn3_subz1_set addresses [ a2_zn3_subz1_addr1 a2_zn3_subz1_addr2 ] parameters  addrset_par_3 a2_app5_epg1_grp addrset_par_2 true addrset_par_4 a2_app5_epg1 addrset_par_1 true addrset_par_5 uni/t2/app5 
address-sets a2_zn3_subz2_set addresses [ a2_zn3_subz2_addr1 a2_zn3_subz2_addr2 ] parameters  addrset_par_3 a2_app5_epg2_grp addrset_par_2 true addrset_par_4 a2_app5_epg2 addrset_par_1 true addrset_par_5 uni/t2/app5 
address-sets a2_zn3_subz3_set addresses [ a2_zn3_subz3_addr1 a2_zn3_subz3_addr2 ] parameters  addrset_par_3 a2_app6_epg1_grp addrset_par_2 true addrset_par_4 a2_app6_epg1 addrset_par_1 true addrset_par_5 uni/t2/app6 
address-sets a2_zn3_subz4_set addresses [ a2_zn3_subz4_addr1 a2_zn3_subz4_addr2 ] parameters  addrset_par_3 a2_app6_epg2_grp addrset_par_2 true addrset_par_4 a2_app6_epg2 addrset_par_1 true addrset_par_5 uni/t2/app6 
address-sets a1_zn12_subz1_set addresses [ a1_zn1_subz1_addr1 a1_zn1_subz1_addr2 a1_zn2_subz1_addr1 a1_zn2_subz1_addr2 ] parameters  addrset_par_3 a1_zn12_subz1_grp addrset_par_1 true addrset_par_2 false 
address-sets a1_zn23_subz1_set addresses [ a1_zn1_subz2_addr1 a1_zn2_subz1_addr2 a1_zn3_subz1_addr1 a1_zn3_subz1_addr2 ] parameters  addrset_par_3 a1_zn23_subz1_grp addrset_par_1 true addrset_par_2 false 
address-sets a2_zn12_subz1_set addresses [ a2_zn1_subz1_addr1 a1_zn1_subz1_addr2 a2_zn2_subz1_addr1 a2_zn2_subz1_addr2 ] parameters  addrset_par_3 a2_zn12_subz1_grp addrset_par_1 true addrset_par_2 false 
address-sets a2_zn23_subz1_set addresses [ a2_zn1_subz2_addr1 a2_zn2_subz1_addr2 a2_zn3_subz1_addr1 a2_zn3_subz1_addr2 ] parameters  addrset_par_3 a2_zn23_subz1_grp addrset_par_1 true addrset_par_2 false 
address-sets a12_zn12_subz1_set addresses [ a1_zn1_subz1_addr1 a1_zn2_subz1_addr1 a2_zn1_subz1_addr1 a2_zn2_subz1_addr1 ] parameters  addrset_par_3 a12_zn12_subz1_grp addrset_par_1 true addrset_par_2 false
address-sets a23_zn12_subz1_set addresses [ a1_zn2_subz1_addr1 a1_zn3_subz1_addr1 a2_zn2_subz1_addr1 a2_zn3_subz1_addr1 ] parameters  addrset_par_3 a23_zn12_subz1_grp addrset_par_1 true addrset_par_2 false 
address-sets a1_zn1_subz1_addr1_set addresses [ a1_zn1_subz1_addr1 ] parameters  addrset_par_3 a1_zn1_subz1_addr1_grp addrset_par_1 true addrset_par_2 false 
address-sets a1_zn1_subz1_addr2_set addresses [ a1_zn1_subz1_addr2 ] parameters  addrset_par_3 a1_zn1_subz1_addr2_grp addrset_par_1 true addrset_par_2 false 
address-sets a1_zn1_subz2_addr1_set addresses [ a1_zn1_subz2_addr1 ] parameters  addrset_par_3 a1_zn1_subz2_addr1_grp addrset_par_1 true addrset_par_2 false
address-sets a1_zn1_subz2_addr2_set addresses [ a1_zn1_subz2_addr2 ] parameters addrset_par_3 a1_zn1_subz2_addr2_grp addrset_par_1 true addrset_par_2 false


services http prot 6 ports destination-port-range lower-port 80 upper-port 80 
parameters svc_par_3 http svc_par_4 http_fltr svc_par_1 true
services https prot 6 ports destination-port-range lower-port 443 upper-port 443
parameters svc_par_3 https svc_par_4 https_fltr svc_par_1 true
services ssh prot 6 ports destination-port-range lower-port 22 upper-port 22
parameters svc_par_3 ssh svc_par_4 ssh_fltr svc_par_1 true
services telnet prot 6 ports destination-port-range lower-port 23 upper-port 23
parameters svc_par_3 telnet svc_par_4 telnet_fltr svc_par_1 true
services icmp prot 1
parameters svc_par_3 icmp svc_par_4 icmp_fltr svc_par_1 true 

service-sets web-set services [ http https ] parameters svcset_par_3 web-grp svcset_par_4 web-sbj svcset_par_1 true
service-sets admin_sec-set services [ ssh https ] parameters svcset_par_3 admin_sec-grp svcset_par_4 admin_sec-sbj svcset_par_1 true
service-sets admin-set services [ ssh https http telnet icmp ] parameters svcset_par_3 admin-grp svcset_par_4 admin-sbj svcset_par_1 true 
service-sets icmp-set services [ icmp ] parameters  svcset_par_3 icmp-grp svcset_par_4 icmp-sbj svcset_par_1 true

applications any
parameters app_par_1 false 
application-sets any applications any
parameters appset_par_1 false

policies policy-case-1 match source-address-sets [ a1_zn1_subz1_set a1_zn1_subz2_set a1_zn1_subz3_set a1_zn1_subz4_set ] destination-address-sets [ a2_zn1_subz1_set a2_zn1_subz2_set a2_zn1_subz3_set a2_zn1_subz4_set ] application-sets any service-sets [ web-set icmp-set ] 
parameters plc_par_2 true

policies policy-case-2 match source-address-sets [ a1_zn1_subz1_set a1_zn2_subz1_set a1_zn3_subz1_set ] destination-address-sets [ a2_zn1_subz1_set a2_zn2_subz1_set a2_zn3_subz1_set ] application-sets any service-sets [ web-set icmp-set ]
parameter plc_par_2 true

policies policy-case-3 match source-address-sets [ a1_zn12_subz1_set a1_zn23_subz1_set ] destination-address-sets [ a2_zn12_subz1_set a2_zn23_subz1_set ] application-sets any service-sets [ web-set icmp-set ]
parameters plc_par_2 false

policies policy-case-4 match source-address-sets [ a1_zn1_subz1_set a2_zn1_subz1_set ] destination-address-sets [ a1_zn2_subz1_set a2_zn2_subz1_set ] application-sets any service-sets [ web-set icmp-set ]
parameters plc_par_2 true

policies policy-case-5 match source-address-sets [ a1_zn12_subz1_set a2_zn12_subz1_set a12_zn12_subz1_set ] destination-address-sets [ a1_zn23_subz1_set a2_zn23_subz1_set a23_zn12_subz1_set ] application-sets any service-sets [ web-set icmp-set ]
parameters plc_par_2 false

policies policy-case-6 match source-address-sets [ a1_zn1_subz1_set a1_zn1_subz2_set a1_zn1_subz3_set a1_zn1_subz4_set ] destination-address-sets [ a1_zn2_subz1_set a1_zn2_subz2_set a1_zn2_subz3_set a1_zn2_subz4_set ] application-sets any service-sets [ web-set icmp-set ]
parameters plc_par_2 true

policies policy-case-7 match source-address-sets [ a1_zn1_subz1_set a1_zn1_subz2_set a1_zn2_subz1_set a1_zn2_subz2_set ] destination-address-sets [ a1_zn1_subz3_set a1_zn1_subz4_set a1_zn2_subz3_set a1_zn2_subz4_set ] application-sets any service-sets [ web-set icmp-set ]
parameters plc_par_2 true plc_par_4 contract-case-7

policies policy-case-8 match source-address-sets [ a1_zn12_subz1_set ] destination-address-sets [ a1_zn23_subz1_set ] application-sets any service-sets [ web-set icmp-set ]
parameters plc_par_2 false

policies policy-case-9 match source-address-sets [ a1_zn1_subz1_set ] destination-address-sets [ a1_zn1_subz2_set ] application-sets any service-sets [ web-set icmp-set ]
parameters plc_par_2 true