!************************** CIRCUIT **************************
circuit VLAN5
  redundancy
  description "DMZ VLAN"

  ip address 172.17.2.1 255.255.255.0

circuit VLAN10
  description "WWW VLAN"
  redundancy

  ip address 172.17.4.1 255.255.255.0

circuit VLAN7
  redundancy
  description "ZWS VLAN"

  ip address 172.17.3.254 255.255.255.0

circuit VLAN6
  description "VRRP VLAN"

  ip address 192.168.254.254 255.255.255.0
    redundancy-protocol

!************************** SERVICE **************************
service OCR_Static1_FTP
  ip address 172.17.4.50
  protocol tcp
  port 21
  keepalive type none
  active

service OCR_Static2_FTP
  ip address 172.17.4.63
  protocol tcp
  port 21
  keepalive type none
  active

service ocr_static1_ftp
  ip address 172.17.4.50
  protocol tcp
  port 21
  keepalive type none
  active

service ocr_static2_ftp
  ip address 172.17.4.63
  protocol tcp
  port 21
  keepalive type none
  active

!*************************** OWNER ***************************
owner Freedom

  content OCR_Static_FTP
    protocol tcp
    port 21
    application ftp-control
    add service OCR_Static1_FTP
    add service OCR_Static2_FTP
    vip address 172.17.2.228
    active

  content ocrftp
    vip address 172.17.4.199
    add service ocr_static1_ftp
    add service ocr_static2_ftp
    protocol tcp
    port 21
    active
!*************************** GROUP ***************************
group OCR_Static_FTP
  vip address 172.17.2.228
  add service OCR_Static1_FTP
  add service OCR_Static2_FTP
  active

group ocrftp
  vip address 172.17.4.199
  active
!**************************** ACL ****************************
acl 5
  clause 100 permit any any destination any
  apply circuit-(VLAN5)

acl 6
  clause 100 permit any any destination any
  apply circuit-(VLAN6)

acl 7
  clause 100 permit any any destination any
  apply circuit-(VLAN7)

acl 10
  clause 10 permit tcp any destination 172.17.4.199 eq 21 sourcegroup ocrftp
  clause 11 permit tcp 172.17.4.50 destination any sourcegroup ocrftp
  clause 12 permit tcp 172.17.4.63 destination any sourcegroup ocrftp
  clause 100 permit any any destination any
  apply circuit-(VLAN10)