5 files changed, 2708 insertions, 1677 deletions
diff --git a/openecomp-be/lib/openecomp-sdc-translator-lib/openecomp-sdc-translator-core/src/test/resources/mock/services/heattotosca/getAttrDynamicParam/expectedoutputfiles/MainServiceTemplate.yaml b/openecomp-be/lib/openecomp-sdc-translator-lib/openecomp-sdc-translator-core/src/test/resources/mock/services/heattotosca/getAttrDynamicParam/expectedoutputfiles/MainServiceTemplate.yaml
index 91020444b2..8fc30c8468 100644
--- a/openecomp-be/lib/openecomp-sdc-translator-lib/openecomp-sdc-translator-core/src/test/resources/mock/services/heattotosca/getAttrDynamicParam/expectedoutputfiles/MainServiceTemplate.yaml
+++ b/openecomp-be/lib/openecomp-sdc-translator-lib/openecomp-sdc-translator-core/src/test/resources/mock/services/heattotosca/getAttrDynamicParam/expectedoutputfiles/MainServiceTemplate.yaml
@@ -1,1082 +1,586 @@
-tosca_definitions_version: tosca_simple_yaml_1_0_0
-metadata:
-  template_name: Main
-imports:
-- openecomp_heat_index:
-    file: openecomp-heat/_index.yml
-node_types:
-  org.openecomp.resource.vfc.nodes.heat.cgi_fw:
-    derived_from: org.openecomp.resource.vfc.nodes.heat.nova.Server
-topology_template:
-  inputs:
-    vf_module_id:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: vf_module_id
-      type: string
-      description: Unique ID for this VF Module instance
-      default: dummy_vf_module_id
-    nimbus_hsl_interface_type:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: nimbus_hsl_interface_type
-      type: string
-      description: service_interface_type for ServiceInstance
-      default: other
-    cgi_fw_pt_vlan_VM2_name_fqdn:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: cgi_fw_pt_vlan_VM2_name_fqdn
-      type: json
-      description: fqdn of the ServiceInstance in PortTuple Resource
-      default: [
-        ]
-    cgi_fw_vmi_ecmp_src_ip:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: cgi_fw_vmi_ecmp_src_ip
-      type: boolean
-      description: source_ip for the VirtualMachineInterface
-      default: true
-    cgi_fw_names:
-      label: Firewall VM Name
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: cgi_fw_names
-      type: list
-      description: Comma Delimited List of Names for ServiceInstance VMs
-      default:
-      - zsde1fcgi02fgi001
-      - zsde1fcgi02fgi002
-      entry_schema:
-        type: string
-    cgi_fw_vmi_ecmp_dst_ip:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: cgi_fw_vmi_ecmp_dst_ip
-      type: boolean
-      description: destination_ip for the VirtualMachineInterface
-      default: true
-    sgi_direct_interface_type:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: sgi_direct_interface_type
-      type: string
-      description: service_interface_type for ServiceInstance
-      default: right
-    vnf_name:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: vnf_name
-      type: string
-      description: Unique name for this VF instance
-      default: zrdm3firstnetfcgi02
-    cgi_fw_flavor_name:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: cgi_fw_flavor_name
-      type: string
-      description: flavor for the ServiceInstance VM
-      default: m1.xlarge
-    vf_module_name:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: vf_module_name
-      type: string
-      description: Unique name for this VF Module instance
-      default: zsde1fcgi02
-    cgi_fw_st_type:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: cgi_fw_st_type
-      type: string
-      description: service_type for the ServiceTemplate
-      default: firewall
-    sgi_protected_net_dummy_fqdn:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: sgi_protected_net_dummy_fqdn
-      type: string
-      description: fq_name for the VirtualNetwork
-      default: default-domain:ALU-L3:firstnet_dummy_net_1
-    cgi_fw_vmi_ecmp_src_port:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: cgi_fw_vmi_ecmp_src_port
-      type: boolean
-      description: source_port for the VirtualMachineInterface
-      default: false
-    sgi_protected_net_dummy1:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: sgi_protected_net_dummy1
-      type: string
-      description: name for the VirtualNetwork
-    vnf_id:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: vnf_id
-      type: string
-      description: Unique ID for this VF instance
-      default: dummy_vnf_id
-    sgi_direct_net_fqdn:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: sgi_direct_net_fqdn
-      type: string
-      description: fq_name for the VirtualNetwork
-      default: default-domain:ALU-L3:fgi_direct
-    sgi_protected_interface_type:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: sgi_protected_interface_type
-      type: string
-      description: service_interface_type for ServiceInstance
-      default: left
-    cgi_fw_vmi_ecmp_dst_port:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: cgi_fw_vmi_ecmp_dst_port
-      type: boolean
-      description: destination_port for the VirtualMachineInterface
-      default: false
-    sgi_direct_family_v6:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: sgi_direct_family_v6
-      type: string
-      description: IP Family Address for InstanceIp
-      default: v6
-    availability_zone_0:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: availability_zone_0
-      type: string
-      description: availability_zone for the ServiceInstance
-      default: nova
-    availability_zone_1:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: availability_zone_1
-      type: string
-      description: availability_zone for the ServiceInstance
-      default: nova
-    nimbus_hsl_net_fqdn:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: nimbus_hsl_net_fqdn
-      type: string
-      description: fq_name for the VirtualNetwork
-      default: default-domain:ALU-L3:alu-firstnet-net
-    sgi_protected_net_dummy:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: sgi_protected_net_dummy
-      type: string
-      description: name for the VirtualNetwork
-      default: firstnet_dummy_net_1
-    cgi_fw_pt_vlan_VM1_name_fqdn:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: cgi_fw_pt_vlan_VM1_name_fqdn
-      type: json
-      description: fqdn of the ServiceInstance in PortTuple Resource
-      default: [
-        ]
-    cgi_fw_vmi_ecmp_configured:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: cgi_fw_vmi_ecmp_configured
-      type: boolean
-      description: hashing_configured for the VirtualMachineInterface
-      default: true
-    cgi_fw_vmi_ecmp_ip_protocol:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: cgi_fw_vmi_ecmp_ip_protocol
-      type: boolean
-      description: ip_protocol for the VirtualMachineInterface
-      default: false
-    oam_protected_net_fqdn:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: oam_protected_net_fqdn
-      type: string
-      description: fq_name for the VirtualNetwork
-      default: default-domain:ALU-L3:alu_l3_mt_net
-    oam_protected_interface_type:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: oam_protected_interface_type
-      type: string
-      description: service_interface_type for ServiceInstance
-      default: management
-    cgi_fw_st_mode:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: cgi_fw_st_mode
-      type: string
-      description: service_mode for the ServiceTemplate
-      default: in-network-nat
-    sgi_direct_ipv6_subnet_id:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: sgi_direct_ipv6_subnet_id
-      type: string
-      description: Subnet UUID for InstanceIp
-      default: 4560666e-f306-4d7b-b0ec-a2d4330e9600
-    contrail_vmi_subinterface:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: contrail_vmi_subinterface
-      type: string
-    port_name:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: port_name
-      type: string
-    cgi_fw_image_name:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: cgi_fw_image_name
-      type: string
-      description: image_name for the ServiceInstance VM
-      default: F5_LB-FW_F5_12_1_HF1_Startup
-    cgi_fw_oam_protected_ips:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: cgi_fw_oam_protected_ips
-      type: list
-      description: the ips of the management network for CGI FW
-      default:
-      - 192.168.50.40
-      - 192.168.50.41
-      entry_schema:
-        type: string
-    sgi_direct_subnet_id:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: sgi_direct_subnet_id
-      type: string
-      description: Subnet UUID for InstanceIp
-      default: 63858a9d-696b-4731-b3b3-7c8dfd777b9e
-    domain:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: domain
-      type: string
-      description: domain for the ServiceTemplate
-      default: default-domain
-    cgi_fw_st_version:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: cgi_fw_st_version
-      type: float
-      description: version for the ServiceTemplate
-      default: 2
-      constraints:
-      - in_range:
-        - 0
-        - 99
-    cgi_fw_st_virtualization_type:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: cgi_fw_st_virtualization_type
-      type: string
-      description: service_virtualization_type for the ServiceTemplate
-      default: virtual-machine
-    subinterface_name_prefix:
-      hidden: false
-      immutable: false
-      annotations:
-        source:
-          type: org.openecomp.annotations.Source
-          properties:
-            vf_module_label:
-            - base_firstnet_fgi_frwl
-            source_type: HEAT
-            param_name: subinterface_name_prefix
-      type: string
-  node_templates:
-    CGI_FW_OAM_PROTECTED_RVMI_2:
-      type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
-      properties:
-        name:
-          str_replace:
-            template: VM_NAME_vmi_1
-            params:
-              VM_NAME:
-                get_input:
-                - cgi_fw_names
-                - 1
-        security_group_refs:
-        - CGI_FW_RSG_SI_1
-        virtual_network_refs:
-        - get_input: oam_protected_net_fqdn
-        virtual_machine_interface_properties:
-          service_interface_type:
-            get_input: oam_protected_interface_type
-      requirements:
-      - binding:
-          capability: tosca.capabilities.network.Bindable
-          node: CGI_FW_SERVER_2
-          relationship: tosca.relationships.network.BindsTo
-    CGI_FW_SGI_DIRECT_RVMI_1:
-      type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
-      properties:
-        name:
-          str_replace:
-            template: VM_NAME_vmi_3
-            params:
-              VM_NAME:
-                get_input:
-                - cgi_fw_names
-                - 0
-        security_group_refs:
-        - CGI_FW_RSG_SI_1
-        virtual_network_refs:
-        - get_input: sgi_direct_net_fqdn
-        virtual_machine_interface_properties:
-          service_interface_type:
-            get_input: sgi_direct_interface_type
-        port_tuple_refs:
-          get_input: cgi_fw_pt_vlan_VM1_name_fqdn
-      requirements:
-      - binding:
-          capability: tosca.capabilities.network.Bindable
-          node: CGI_FW_SERVER_1
-          relationship: tosca.relationships.network.BindsTo
-    CGI_FW_OAM_PROTECTED_RVMI_1:
-      type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
-      properties:
-        name:
-          str_replace:
-            template: VM_NAME_vmi_1
-            params:
-              VM_NAME:
-                get_input:
-                - cgi_fw_names
-                - 0
-        security_group_refs:
-        - CGI_FW_RSG_SI_1
-        virtual_network_refs:
-        - get_input: oam_protected_net_fqdn
-        virtual_machine_interface_properties:
-          service_interface_type:
-            get_input: oam_protected_interface_type
-      requirements:
-      - binding:
-          capability: tosca.capabilities.network.Bindable
-          node: CGI_FW_SERVER_1
-          relationship: tosca.relationships.network.BindsTo
-    CGI_FW_SGI_DIRECT_RVMI_2:
-      type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
-      properties:
-        name:
-          str_replace:
-            template: VM_NAME_vmi_3
-            params:
-              VM_NAME:
-                get_input:
-                - cgi_fw_names
-                - 1
-        security_group_refs:
-        - CGI_FW_RSG_SI_1
-        virtual_network_refs:
-        - get_input: sgi_direct_net_fqdn
-        virtual_machine_interface_properties:
-          service_interface_type:
-            get_input: sgi_direct_interface_type
-        port_tuple_refs:
-          get_input: cgi_fw_pt_vlan_VM2_name_fqdn
-      requirements:
-      - binding:
-          capability: tosca.capabilities.network.Bindable
-          node: CGI_FW_SERVER_2
-          relationship: tosca.relationships.network.BindsTo
-    CGI_FW_NIMBUS_HSL_RVMI_2:
-      type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
-      properties:
-        name:
-          str_replace:
-            template: VM_NAME_vmi_4
-            params:
-              VM_NAME:
-                get_input:
-                - cgi_fw_names
-                - 1
-        security_group_refs:
-        - CGI_FW_RSG_SI_1
-        virtual_network_refs:
-        - get_input: nimbus_hsl_net_fqdn
-        virtual_machine_interface_properties:
-          service_interface_type:
-            get_input: nimbus_hsl_interface_type
-      requirements:
-      - binding:
-          capability: tosca.capabilities.network.Bindable
-          node: CGI_FW_SERVER_2
-          relationship: tosca.relationships.network.BindsTo
-    CGI_FW_NIMBUS_HSL_RVMI_1:
-      type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
-      properties:
-        name:
-          str_replace:
-            template: VM_NAME_vmi_4
-            params:
-              VM_NAME:
-                get_input:
-                - cgi_fw_names
-                - 0
-        security_group_refs:
-        - CGI_FW_RSG_SI_1
-        virtual_network_refs:
-        - get_input: nimbus_hsl_net_fqdn
-        virtual_machine_interface_properties:
-          service_interface_type:
-            get_input: nimbus_hsl_interface_type
-      requirements:
-      - binding:
-          capability: tosca.capabilities.network.Bindable
-          node: CGI_FW_SERVER_1
-          relationship: tosca.relationships.network.BindsTo
-    CGI_FW_SERVER_1:
-      type: org.openecomp.resource.vfc.nodes.heat.cgi_fw
-      properties:
-        flavor:
-          get_input: cgi_fw_flavor_name
-        availability_zone:
-          get_input: availability_zone_0
-        image:
-          get_input: cgi_fw_image_name
-        metadata:
-          vf_module_id:
-            get_input: vf_module_id
-          vnf_id:
-            get_input: vnf_id
-          vnf_name:
-            get_input: vnf_name
-          vf_module_name:
-            get_input: vf_module_name
-        contrail_service_instance_ind: true
-        name:
-          get_input:
-          - cgi_fw_names
-          - 0
-        scheduler_hints:
-          group: CGI_FW_RAG_group
-    CGI_FW_RSG_SI_1:
-      type: org.openecomp.resource.vfc.rules.nodes.heat.network.neutron.SecurityRules
-      properties:
-        name:
-          str_replace:
-            template: VNF_NAME_sg_cgi_fw
-            params:
-              VNF_NAME:
-                get_input: vnf_name
-        description: Security Group of CGI FW ServiceInstance
-        rules:
-        - protocol: tcp
-          ethertype: IPv4
-          remote_ip_prefix: 0.0.0.0/0
-          port_range_max: 65535
-          direction: egress
-          port_range_min: 0
-        - protocol: udp
-          ethertype: IPv4
-          remote_ip_prefix: 0.0.0.0/0
-          port_range_max: 65535
-          direction: egress
-          port_range_min: 0
-        - protocol: '132'
-          ethertype: IPv4
-          remote_ip_prefix: 0.0.0.0/0
-          port_range_max: 65535
-          direction: egress
-          port_range_min: 0
-        - protocol: icmp
-          ethertype: IPv4
-          remote_ip_prefix: 0.0.0.0/0
-          direction: egress
-        - protocol: tcp
-          ethertype: IPv6
-          remote_ip_prefix: ::/0
-          port_range_max: 65535
-          direction: egress
-          port_range_min: 0
-        - protocol: udp
-          ethertype: IPv6
-          remote_ip_prefix: ::/0
-          port_range_max: 65535
-          direction: egress
-          port_range_min: 0
-        - protocol: '132'
-          ethertype: IPv6
-          remote_ip_prefix: ::/0
-          port_range_max: 65535
-          direction: egress
-          port_range_min: 0
-        - protocol: '58'
-          ethertype: IPv6
-          remote_ip_prefix: ::/0
-          direction: egress
-        - protocol: tcp
-          ethertype: IPv4
-          remote_ip_prefix: 0.0.0.0/0
-          port_range_max: 65535
-          direction: ingress
-          port_range_min: 0
-        - protocol: udp
-          ethertype: IPv4
-          remote_ip_prefix: 0.0.0.0/0
-          port_range_max: 65535
-          direction: ingress
-          port_range_min: 0
-        - protocol: '132'
-          ethertype: IPv4
-          remote_ip_prefix: 0.0.0.0/0
-          port_range_max: 65535
-          direction: ingress
-          port_range_min: 0
-        - protocol: icmp
-          ethertype: IPv4
-          remote_ip_prefix: 0.0.0.0/0
-          direction: ingress
-        - protocol: tcp
-          ethertype: IPv6
-          remote_ip_prefix: ::/0
-          port_range_max: 65535
-          direction: ingress
-          port_range_min: 0
-        - protocol: udp
-          ethertype: IPv6
-          remote_ip_prefix: ::/0
-          port_range_max: 65535
-          direction: ingress
-          port_range_min: 0
-        - protocol: '132'
-          ethertype: IPv6
-          remote_ip_prefix: ::/0
-          port_range_max: 65535
-          direction: ingress
-          port_range_min: 0
-        - protocol: '58'
-          ethertype: IPv6
-          remote_ip_prefix: ::/0
-          direction: ingress
-    CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2:
-      type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
-      properties:
-        name:
-          str_replace:
-            template: VM_NAME_vmi_dummy
-            params:
-              VM_NAME:
-                get_input:
-                - cgi_fw_names
-                - 1
-        security_group_refs:
-        - CGI_FW_RSG_SI_1
-        virtual_network_refs:
-        - get_input: sgi_protected_net_dummy_fqdn
-      requirements:
-      - binding:
-          capability: tosca.capabilities.network.Bindable
-          node: CGI_FW_SERVER_2
-          relationship: tosca.relationships.network.BindsTo
-    CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1:
-      type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
-      properties:
-        name:
-          str_replace:
-            template: VM_NAME_vmi_dummy
-            params:
-              VM_NAME:
-                get_input:
-                - cgi_fw_names
-                - 0
-        security_group_refs:
-        - CGI_FW_RSG_SI_1
-        virtual_network_refs:
-        - get_input: sgi_protected_net_dummy_fqdn
-      requirements:
-      - binding:
-          capability: tosca.capabilities.network.Bindable
-          node: CGI_FW_SERVER_1
-          relationship: tosca.relationships.network.BindsTo
-    CGI_FW_SERVER_2:
-      type: org.openecomp.resource.vfc.nodes.heat.cgi_fw
-      properties:
-        flavor:
-          get_input: cgi_fw_flavor_name
-        availability_zone:
-          get_attribute:
-          - CGI_FW_SERVER_2
-          - addresses
-          - get_input:
-            - sgi_protected_net_dummy
-            - 0
-          - 0
-          - OS-EXT-IPS-MAC:mac_addr
-        image:
-          get_input: cgi_fw_image_name
-        metadata:
-          vf_module_id:
-            get_input: vf_module_id
-          vnf_id:
-            get_input: vnf_id
-          vnf_name:
-            get_input: vnf_name
-          vf_module_name:
-            get_input: vf_module_name
-        contrail_service_instance_ind: true
-        name:
-          get_input:
-          - cgi_fw_names
-          - 1
-        scheduler_hints:
-          group: CGI_FW_RAG_group
-    contrail_vmi_subinterface:
-      type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
-      properties:
-        name:
-          str_replace:
-            template: VM_NAME_PORT_3
-            params:
-              VM_NAME:
-                get_input: vipr_atm_name_0
-        virtual_network_refs:
-        - get_input: oam_protected_net_fqdn
-        virtual_machine_interface_properties:
-          service_interface_type: left
-        port_tuple_refs:
-        - get_input: port_name
-  groups:
-    CGI_FW_RAG_group:
-      type: tosca.groups.Root
-      members:
-      - CGI_FW_SERVER_1
-      - CGI_FW_SERVER_2
-    base_firstnet_fgi_frwl_group:
-      type: org.openecomp.groups.heat.HeatStack
-      properties:
-        heat_file: ../Artifacts/base_firstnet_fgi_frwl.yml
-        description: |
-          HOT template to create SecurityGroup//ServerGroup//ServiceTemplate:
-      members:
-      - CGI_FW_OAM_PROTECTED_RVMI_2
-      - CGI_FW_SGI_DIRECT_RVMI_1
-      - CGI_FW_OAM_PROTECTED_RVMI_1
-      - CGI_FW_SGI_DIRECT_RVMI_2
-      - CGI_FW_NIMBUS_HSL_RVMI_2
-      - CGI_FW_NIMBUS_HSL_RVMI_1
-      - CGI_FW_SERVER_1
-      - CGI_FW_RSG_SI_1
-      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2
-      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1
-      - CGI_FW_SERVER_2
-      - contrail_vmi_subinterface
-  outputs:
-    cgi_fw_01_left_mac_10:
-      description: cgi fw01 left interface Mac-Address
-      value:
-        get_attribute:
-        - CGI_FW_SERVER_2
-        - addresses
-        - str_split:
-          - ','
-          - get_attribute:
-            - contrail_vmi_subinterface
-            - virtual_machine_interface_allowed_address_pairs
-            - allowed_address_pair
-        - 0
-        - OS-EXT-IPS-MAC:mac_addr
-    cgi_fw_st_name_fqdn:
-      description: FQDN of the FW_CGI ServiceTemplate
-      value:
-        list_join:
-        - ':'
-        - get_attr:
-          - CGI_FW_RST_1
-          - fq_name
-    VMA-EXT_IPS:
-      description: IP addresses assigned to the first external network.
-      value:
-      - UNSUPPORTED_ATTRIBUTE_CGI_FW_SERVER_2.{get_param=[vnf_id, {get_param=sgi_protected_interface_type}]}
-    VMA-DynamicResource:
-      description: IP addresses assigned to the first external network.
-      value:
-      - UNSUPPORTED_RESOURCE_{get_param=vnf_id}
-    cgi_fw_01_left_mac_7:
-      description: cgi fw01 left interface Mac-Address
-      value:
-        get_attribute:
-        - contrail_vmi_subinterface
-        - virtual_machine_interface_properties
-    cgi_fw_01_left_mac_6:
-      description: cgi fw01 left interface Mac-Address
-      value:
-        get_attribute:
-        - CGI_FW_SERVER_2
-        - addresses
-        - str_split:
-          - ','
-          - string,to,split
-        - 0
-        - OS-EXT-IPS-MAC:mac_addr
-    cgi_fw_01_left_mac_9:
-      description: cgi fw01 left interface Mac-Address
-      value:
-        get_attribute:
-        - CGI_FW_SERVER_2
-        - addresses
-        - str_split:
-          - ','
-          - get_input: sgi_protected_net_dummy
-        - 0
-        - OS-EXT-IPS-MAC:mac_addr
-    cgi_fw_01_left_mac_8:
-      description: cgi fw01 left interface Mac-Address
-      value:
-        get_attribute:
-        - contrail_vmi_subinterface
-        - virtual_machine_interface_allowed_address_pairs
-        - allowed_address_pair
-    cgi_fw_01_left_mac_3:
-      description: cgi fw01 left interface Mac-Address
-      value:
-        get_attribute:
-        - CGI_FW_SERVER_2
-        - addresses
-        - get_input:
-          - sgi_protected_net_dummy
-          - 0
-        - 0
-        - OS-EXT-IPS-MAC:mac_addr
-    cgi_fw_01_left_mac_2:
-      description: cgi fw01 left interface Mac-Address
-      value:
-        get_attribute:
-        - CGI_FW_SERVER_2
-        - addresses
-        - get_input: sgi_protected_net_dummy
-        - 0
-        - OS-EXT-IPS-MAC:mac_addr
-    cgi_fw_01_left_mac_5:
-      description: cgi fw01 left interface Mac-Address
-      value:
-        get_attribute:
-        - CGI_FW_SERVER_2
-        - addresses
-        - get_attribute:
-          - CGI_FW_SERVER_2
-          - addresses
-          - get_input:
-            - sgi_protected_net_dummy
-            - 0
-          - 0
-          - OS-EXT-IPS-MAC:mac_addr
-        - 0
-        - OS-EXT-IPS-MAC:mac_addr
-    cgi_fw_01_left_mac_4:
-      description: cgi fw01 left interface Mac-Address
-      value:
-        get_attribute:
-        - CGI_FW_SERVER_2
-        - addresses
-        - get_input:
-          - sgi_protected_net_dummy
-          - 0
-          - get_input:
-            - sgi_protected_net_dummy1
-            - 1
-        - 0
-        - OS-EXT-IPS-MAC:mac_addr
-    cgi_fw_01_left_mac_1:
-      description: cgi fw01 left interface Mac-Address
-      value:
-        get_attribute:
-        - CGI_FW_SERVER_1
-        - addresses
-        - get_input: sgi_protected_net_dummy
-        - 0
-        - OS-EXT-IPS-MAC:mac_addr
-  policies:
-    CGI_FW_RAG_policy:
-      type: org.openecomp.policies.placement.Antilocate
-      properties:
-        name:
-          str_replace:
-            template: VNF_NAME_srg_cgi_fw
-            params:
-              VNF_NAME:
-                get_input: vnf_name
-        container_type: host
-      targets:
-      - CGI_FW_RAG_group
+tosca_definitions_version: tosca_simple_yaml_1_0_0
+metadata:
+  template_name: Main
+imports:
+- openecomp_heat_index:
+    file: openecomp-heat/_index.yml
+- GlobalSubstitutionTypes:
+    file: GlobalSubstitutionTypesServiceTemplate.yaml
+topology_template:
+  inputs:
+    vf_module_id:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: vf_module_id
+      type: string
+      description: Unique ID for this VF Module instance
+      default: dummy_vf_module_id
+    nimbus_hsl_interface_type:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: nimbus_hsl_interface_type
+      type: string
+      description: service_interface_type for ServiceInstance
+      default: other
+    cgi_fw_pt_vlan_VM2_name_fqdn:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: cgi_fw_pt_vlan_VM2_name_fqdn
+      type: json
+      description: fqdn of the ServiceInstance in PortTuple Resource
+      default: [
+        ]
+    cgi_fw_vmi_ecmp_src_ip:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: cgi_fw_vmi_ecmp_src_ip
+      type: boolean
+      description: source_ip for the VirtualMachineInterface
+      default: true
+    cgi_fw_names:
+      label: Firewall VM Name
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: cgi_fw_names
+      type: list
+      description: Comma Delimited List of Names for ServiceInstance VMs
+      default:
+      - zsde1fcgi02fgi001
+      - zsde1fcgi02fgi002
+      entry_schema:
+        type: string
+    cgi_fw_vmi_ecmp_dst_ip:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: cgi_fw_vmi_ecmp_dst_ip
+      type: boolean
+      description: destination_ip for the VirtualMachineInterface
+      default: true
+    sgi_direct_interface_type:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: sgi_direct_interface_type
+      type: string
+      description: service_interface_type for ServiceInstance
+      default: right
+    vnf_name:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: vnf_name
+      type: string
+      description: Unique name for this VF instance
+      default: zrdm3firstnetfcgi02
+    cgi_fw_flavor_name:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: cgi_fw_flavor_name
+      type: string
+      description: flavor for the ServiceInstance VM
+      default: m1.xlarge
+    vf_module_name:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: vf_module_name
+      type: string
+      description: Unique name for this VF Module instance
+      default: zsde1fcgi02
+    cgi_fw_st_type:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: cgi_fw_st_type
+      type: string
+      description: service_type for the ServiceTemplate
+      default: firewall
+    sgi_protected_net_dummy_fqdn:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: sgi_protected_net_dummy_fqdn
+      type: string
+      description: fq_name for the VirtualNetwork
+      default: default-domain:ALU-L3:firstnet_dummy_net_1
+    cgi_fw_vmi_ecmp_src_port:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: cgi_fw_vmi_ecmp_src_port
+      type: boolean
+      description: source_port for the VirtualMachineInterface
+      default: false
+    sgi_protected_net_dummy1:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: sgi_protected_net_dummy1
+      type: string
+      description: name for the VirtualNetwork
+    vnf_id:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: vnf_id
+      type: string
+      description: Unique ID for this VF instance
+      default: dummy_vnf_id
+    sgi_direct_net_fqdn:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: sgi_direct_net_fqdn
+      type: string
+      description: fq_name for the VirtualNetwork
+      default: default-domain:ALU-L3:fgi_direct
+    sgi_protected_interface_type:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: sgi_protected_interface_type
+      type: string
+      description: service_interface_type for ServiceInstance
+      default: left
+    cgi_fw_vmi_ecmp_dst_port:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: cgi_fw_vmi_ecmp_dst_port
+      type: boolean
+      description: destination_port for the VirtualMachineInterface
+      default: false
+    sgi_direct_family_v6:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: sgi_direct_family_v6
+      type: string
+      description: IP Family Address for InstanceIp
+      default: v6
+    availability_zone_0:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: availability_zone_0
+      type: string
+      description: availability_zone for the ServiceInstance
+      default: nova
+    availability_zone_1:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: availability_zone_1
+      type: string
+      description: availability_zone for the ServiceInstance
+      default: nova
+    nimbus_hsl_net_fqdn:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: nimbus_hsl_net_fqdn
+      type: string
+      description: fq_name for the VirtualNetwork
+      default: default-domain:ALU-L3:alu-firstnet-net
+    sgi_protected_net_dummy:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: sgi_protected_net_dummy
+      type: string
+      description: name for the VirtualNetwork
+      default: firstnet_dummy_net_1
+    cgi_fw_pt_vlan_VM1_name_fqdn:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: cgi_fw_pt_vlan_VM1_name_fqdn
+      type: json
+      description: fqdn of the ServiceInstance in PortTuple Resource
+      default: [
+        ]
+    cgi_fw_vmi_ecmp_configured:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: cgi_fw_vmi_ecmp_configured
+      type: boolean
+      description: hashing_configured for the VirtualMachineInterface
+      default: true
+    cgi_fw_vmi_ecmp_ip_protocol:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: cgi_fw_vmi_ecmp_ip_protocol
+      type: boolean
+      description: ip_protocol for the VirtualMachineInterface
+      default: false
+    oam_protected_net_fqdn:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: oam_protected_net_fqdn
+      type: string
+      description: fq_name for the VirtualNetwork
+      default: default-domain:ALU-L3:alu_l3_mt_net
+    oam_protected_interface_type:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: oam_protected_interface_type
+      type: string
+      description: service_interface_type for ServiceInstance
+      default: management
+    cgi_fw_st_mode:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: cgi_fw_st_mode
+      type: string
+      description: service_mode for the ServiceTemplate
+      default: in-network-nat
+    sgi_direct_ipv6_subnet_id:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: sgi_direct_ipv6_subnet_id
+      type: string
+      description: Subnet UUID for InstanceIp
+      default: 4560666e-f306-4d7b-b0ec-a2d4330e9600
+    contrail_vmi_subinterface:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: contrail_vmi_subinterface
+      type: string
+    port_name:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: port_name
+      type: string
+    cgi_fw_image_name:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: cgi_fw_image_name
+      type: string
+      description: image_name for the ServiceInstance VM
+      default: F5_LB-FW_F5_12_1_HF1_Startup
+    cgi_fw_oam_protected_ips:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: cgi_fw_oam_protected_ips
+      type: list
+      description: the ips of the management network for CGI FW
+      default:
+      - 192.168.50.40
+      - 192.168.50.41
+      entry_schema:
+        type: string
+    sgi_direct_subnet_id:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: sgi_direct_subnet_id
+      type: string
+      description: Subnet UUID for InstanceIp
+      default: 63858a9d-696b-4731-b3b3-7c8dfd777b9e
+    domain:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: domain
+      type: string
+      description: domain for the ServiceTemplate
+      default: default-domain
+    cgi_fw_st_version:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: cgi_fw_st_version
+      type: float
+      description: version for the ServiceTemplate
+      default: 2
+      constraints:
+      - in_range:
+        - 0
+        - 99
+    cgi_fw_st_virtualization_type:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: cgi_fw_st_virtualization_type
+      type: string
+      description: service_virtualization_type for the ServiceTemplate
+      default: virtual-machine
+    subinterface_name_prefix:
+      hidden: false
+      immutable: false
+      annotations:
+        source:
+          type: org.openecomp.annotations.Source
+          properties:
+            vf_module_label:
+            - base_firstnet_fgi_frwl
+            source_type: HEAT
+            param_name: subinterface_name_prefix
+      type: string
+  node_templates:
+    template_VMInt_INT1_VLC:
+      type: org.openecomp.resource.abstract.nodes.heat.firstnet_fgi_frwl
+      directives:
+      - substitutable
+      properties:
+        service_template_filter:
+          substitute_service_template: firstnet_fgi_frwlServiceTemplate.yaml
+          count: 3
+          mandatory: true
+        virtual_machine_interface_properties:
+          virtual_machine_interface_properties_service_interface_type:
+            get_input: contrail_vmi_subinterface
+  groups:
+    base_firstnet_fgi_frwl_group:
+      type: org.openecomp.groups.heat.HeatStack
+      properties:
+        heat_file: ../Artifacts/base_firstnet_fgi_frwl.yml
+        description: |
+          HOT template to create SecurityGroup//ServerGroup//ServiceTemplate:
+      members:
+      - template_VMInt_INT1_VLC
+\ No newline at end of file
diff --git a/openecomp-be/lib/openecomp-sdc-translator-lib/openecomp-sdc-translator-core/src/test/resources/mock/services/heattotosca/getAttrDynamicParam/expectedoutputfiles/firstnet_fgi_frwlServiceTemplate.yaml b/openecomp-be/lib/openecomp-sdc-translator-lib/openecomp-sdc-translator-core/src/test/resources/mock/services/heattotosca/getAttrDynamicParam/expectedoutputfiles/firstnet_fgi_frwlServiceTemplate.yaml
new file mode 100644
index 0000000000..42fe5a2e87
--- /dev/null
+++ b/openecomp-be/lib/openecomp-sdc-translator-lib/openecomp-sdc-translator-core/src/test/resources/mock/services/heattotosca/getAttrDynamicParam/expectedoutputfiles/firstnet_fgi_frwlServiceTemplate.yaml
@@ -0,0 +1,1365 @@
+tosca_definitions_version: tosca_simple_yaml_1_0_0
+metadata:
+  template_name: firstnet_fgi_frwl
+imports:
+- openecomp_heat_index:
+    file: openecomp-heat/_index.yml
+- GlobalSubstitutionTypes:
+    file: GlobalSubstitutionTypesServiceTemplate.yaml
+node_types:
+  org.openecomp.resource.vfc.nodes.heat.cgi_fw:
+    derived_from: org.openecomp.resource.vfc.nodes.heat.nova.Server
+topology_template:
+  inputs:
+    vf_module_id:
+      hidden: false
+      immutable: false
+      type: string
+      description: Unique ID for this VF Module instance
+    nimbus_hsl_interface_type:
+      hidden: false
+      immutable: false
+      type: string
+      description: service_interface_type for ServiceInstance
+    cgi_fw_pt_vlan_VM2_name_fqdn:
+      hidden: false
+      immutable: false
+      type: json
+      description: fqdn of the ServiceInstance in PortTuple Resource
+    cgi_fw_vmi_ecmp_src_ip:
+      hidden: false
+      immutable: false
+      type: boolean
+      description: source_ip for the VirtualMachineInterface
+    cgi_fw_names:
+      label: Firewall VM Name
+      hidden: false
+      immutable: false
+      type: list
+      description: Comma Delimited List of Names for ServiceInstance VMs
+      entry_schema:
+        type: string
+    cgi_fw_vmi_ecmp_dst_ip:
+      hidden: false
+      immutable: false
+      type: boolean
+      description: destination_ip for the VirtualMachineInterface
+    sgi_direct_interface_type:
+      hidden: false
+      immutable: false
+      type: string
+      description: service_interface_type for ServiceInstance
+    vnf_name:
+      hidden: false
+      immutable: false
+      type: string
+      description: Unique name for this VF instance
+    cgi_fw_flavor_name:
+      hidden: false
+      immutable: false
+      type: string
+      description: flavor for the ServiceInstance VM
+    vf_module_name:
+      hidden: false
+      immutable: false
+      type: string
+      description: Unique name for this VF Module instance
+    cgi_fw_st_type:
+      hidden: false
+      immutable: false
+      type: string
+      description: service_type for the ServiceTemplate
+    sgi_protected_net_dummy_fqdn:
+      hidden: false
+      immutable: false
+      type: string
+      description: fq_name for the VirtualNetwork
+    cgi_fw_vmi_ecmp_src_port:
+      hidden: false
+      immutable: false
+      type: boolean
+      description: source_port for the VirtualMachineInterface
+    sgi_protected_net_dummy1:
+      hidden: false
+      immutable: false
+      type: string
+      description: name for the VirtualNetwork
+    vnf_id:
+      hidden: false
+      immutable: false
+      type: string
+      description: Unique ID for this VF instance
+    sgi_direct_net_fqdn:
+      hidden: false
+      immutable: false
+      type: string
+      description: fq_name for the VirtualNetwork
+    sgi_protected_interface_type:
+      hidden: false
+      immutable: false
+      type: string
+      description: service_interface_type for ServiceInstance
+    cgi_fw_vmi_ecmp_dst_port:
+      hidden: false
+      immutable: false
+      type: boolean
+      description: destination_port for the VirtualMachineInterface
+    sgi_direct_family_v6:
+      hidden: false
+      immutable: false
+      type: string
+      description: IP Family Address for InstanceIp
+    availability_zone_0:
+      hidden: false
+      immutable: false
+      type: string
+      description: availability_zone for the ServiceInstance
+    availability_zone_1:
+      hidden: false
+      immutable: false
+      type: string
+      description: availability_zone for the ServiceInstance
+    nimbus_hsl_net_fqdn:
+      hidden: false
+      immutable: false
+      type: string
+      description: fq_name for the VirtualNetwork
+    sgi_protected_net_dummy:
+      hidden: false
+      immutable: false
+      type: string
+      description: name for the VirtualNetwork
+    cgi_fw_pt_vlan_VM1_name_fqdn:
+      hidden: false
+      immutable: false
+      type: json
+      description: fqdn of the ServiceInstance in PortTuple Resource
+    cgi_fw_vmi_ecmp_configured:
+      hidden: false
+      immutable: false
+      type: boolean
+      description: hashing_configured for the VirtualMachineInterface
+    cgi_fw_vmi_ecmp_ip_protocol:
+      hidden: false
+      immutable: false
+      type: boolean
+      description: ip_protocol for the VirtualMachineInterface
+    oam_protected_net_fqdn:
+      hidden: false
+      immutable: false
+      type: string
+      description: fq_name for the VirtualNetwork
+    oam_protected_interface_type:
+      hidden: false
+      immutable: false
+      type: string
+      description: service_interface_type for ServiceInstance
+    cgi_fw_st_mode:
+      hidden: false
+      immutable: false
+      type: string
+      description: service_mode for the ServiceTemplate
+    sgi_direct_ipv6_subnet_id:
+      hidden: false
+      immutable: false
+      type: string
+      description: Subnet UUID for InstanceIp
+    contrail_vmi_subinterface:
+      hidden: false
+      immutable: false
+      type: string
+    port_name:
+      hidden: false
+      immutable: false
+      type: string
+    cgi_fw_image_name:
+      hidden: false
+      immutable: false
+      type: string
+      description: image_name for the ServiceInstance VM
+    cgi_fw_oam_protected_ips:
+      hidden: false
+      immutable: false
+      type: list
+      description: the ips of the management network for CGI FW
+      entry_schema:
+        type: string
+    sgi_direct_subnet_id:
+      hidden: false
+      immutable: false
+      type: string
+      description: Subnet UUID for InstanceIp
+    domain:
+      hidden: false
+      immutable: false
+      type: string
+      description: domain for the ServiceTemplate
+    cgi_fw_st_version:
+      hidden: false
+      immutable: false
+      type: float
+      description: version for the ServiceTemplate
+      constraints:
+      - in_range:
+        - 0
+        - 99
+    cgi_fw_st_virtualization_type:
+      hidden: false
+      immutable: false
+      type: string
+      description: service_virtualization_type for the ServiceTemplate
+    subinterface_name_prefix:
+      hidden: false
+      immutable: false
+      type: string
+  node_templates:
+    CGI_FW_OAM_PROTECTED_RVMI_2:
+      type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
+      properties:
+        name:
+          str_replace:
+            template: VM_NAME_vmi_1
+            params:
+              VM_NAME:
+                get_input:
+                - cgi_fw_names
+                - 1
+        security_group_refs:
+        - CGI_FW_RSG_SI_1
+        virtual_network_refs:
+        - get_input: oam_protected_net_fqdn
+        virtual_machine_interface_properties:
+          service_interface_type:
+            get_input: oam_protected_interface_type
+      requirements:
+      - binding:
+          capability: tosca.capabilities.network.Bindable
+          node: CGI_FW_SERVER_2
+          relationship: tosca.relationships.network.BindsTo
+    CGI_FW_SGI_DIRECT_RVMI_1:
+      type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
+      properties:
+        name:
+          str_replace:
+            template: VM_NAME_vmi_3
+            params:
+              VM_NAME:
+                get_input:
+                - cgi_fw_names
+                - 0
+        security_group_refs:
+        - CGI_FW_RSG_SI_1
+        virtual_network_refs:
+        - get_input: sgi_direct_net_fqdn
+        virtual_machine_interface_properties:
+          service_interface_type:
+            get_input: sgi_direct_interface_type
+        port_tuple_refs:
+          get_input: cgi_fw_pt_vlan_VM1_name_fqdn
+      requirements:
+      - binding:
+          capability: tosca.capabilities.network.Bindable
+          node: CGI_FW_SERVER_1
+          relationship: tosca.relationships.network.BindsTo
+    CGI_FW_OAM_PROTECTED_RVMI_1:
+      type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
+      properties:
+        name:
+          str_replace:
+            template: VM_NAME_vmi_1
+            params:
+              VM_NAME:
+                get_input:
+                - cgi_fw_names
+                - 0
+        security_group_refs:
+        - CGI_FW_RSG_SI_1
+        virtual_network_refs:
+        - get_input: oam_protected_net_fqdn
+        virtual_machine_interface_properties:
+          service_interface_type:
+            get_input: oam_protected_interface_type
+      requirements:
+      - binding:
+          capability: tosca.capabilities.network.Bindable
+          node: CGI_FW_SERVER_1
+          relationship: tosca.relationships.network.BindsTo
+    CGI_FW_SGI_DIRECT_RVMI_2:
+      type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
+      properties:
+        name:
+          str_replace:
+            template: VM_NAME_vmi_3
+            params:
+              VM_NAME:
+                get_input:
+                - cgi_fw_names
+                - 1
+        security_group_refs:
+        - CGI_FW_RSG_SI_1
+        virtual_network_refs:
+        - get_input: sgi_direct_net_fqdn
+        virtual_machine_interface_properties:
+          service_interface_type:
+            get_input: sgi_direct_interface_type
+        port_tuple_refs:
+          get_input: cgi_fw_pt_vlan_VM2_name_fqdn
+      requirements:
+      - binding:
+          capability: tosca.capabilities.network.Bindable
+          node: CGI_FW_SERVER_2
+          relationship: tosca.relationships.network.BindsTo
+    CGI_FW_NIMBUS_HSL_RVMI_2:
+      type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
+      properties:
+        name:
+          str_replace:
+            template: VM_NAME_vmi_4
+            params:
+              VM_NAME:
+                get_input:
+                - cgi_fw_names
+                - 1
+        security_group_refs:
+        - CGI_FW_RSG_SI_1
+        virtual_network_refs:
+        - get_input: nimbus_hsl_net_fqdn
+        virtual_machine_interface_properties:
+          service_interface_type:
+            get_input: nimbus_hsl_interface_type
+      requirements:
+      - binding:
+          capability: tosca.capabilities.network.Bindable
+          node: CGI_FW_SERVER_2
+          relationship: tosca.relationships.network.BindsTo
+    CGI_FW_NIMBUS_HSL_RVMI_1:
+      type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
+      properties:
+        name:
+          str_replace:
+            template: VM_NAME_vmi_4
+            params:
+              VM_NAME:
+                get_input:
+                - cgi_fw_names
+                - 0
+        security_group_refs:
+        - CGI_FW_RSG_SI_1
+        virtual_network_refs:
+        - get_input: nimbus_hsl_net_fqdn
+        virtual_machine_interface_properties:
+          service_interface_type:
+            get_input: nimbus_hsl_interface_type
+      requirements:
+      - binding:
+          capability: tosca.capabilities.network.Bindable
+          node: CGI_FW_SERVER_1
+          relationship: tosca.relationships.network.BindsTo
+    CGI_FW_SERVER_1:
+      type: org.openecomp.resource.vfc.nodes.heat.cgi_fw
+      properties:
+        flavor:
+          get_input: cgi_fw_flavor_name
+        availability_zone:
+          get_input: availability_zone_0
+        image:
+          get_input: cgi_fw_image_name
+        metadata:
+          vf_module_id:
+            get_input: vf_module_id
+          vnf_id:
+            get_input: vnf_id
+          vnf_name:
+            get_input: vnf_name
+          vf_module_name:
+            get_input: vf_module_name
+        contrail_service_instance_ind: true
+        name:
+          get_input:
+          - cgi_fw_names
+          - 0
+        scheduler_hints:
+          group: CGI_FW_RAG_group
+    CGI_FW_RSG_SI_1:
+      type: org.openecomp.resource.vfc.rules.nodes.heat.network.neutron.SecurityRules
+      properties:
+        name:
+          str_replace:
+            template: VNF_NAME_sg_cgi_fw
+            params:
+              VNF_NAME:
+                get_input: vnf_name
+        description: Security Group of CGI FW ServiceInstance
+        rules:
+        - protocol: tcp
+          ethertype: IPv4
+          remote_ip_prefix: 0.0.0.0/0
+          port_range_max: 65535
+          direction: egress
+          port_range_min: 0
+        - protocol: udp
+          ethertype: IPv4
+          remote_ip_prefix: 0.0.0.0/0
+          port_range_max: 65535
+          direction: egress
+          port_range_min: 0
+        - protocol: '132'
+          ethertype: IPv4
+          remote_ip_prefix: 0.0.0.0/0
+          port_range_max: 65535
+          direction: egress
+          port_range_min: 0
+        - protocol: icmp
+          ethertype: IPv4
+          remote_ip_prefix: 0.0.0.0/0
+          direction: egress
+        - protocol: tcp
+          ethertype: IPv6
+          remote_ip_prefix: ::/0
+          port_range_max: 65535
+          direction: egress
+          port_range_min: 0
+        - protocol: udp
+          ethertype: IPv6
+          remote_ip_prefix: ::/0
+          port_range_max: 65535
+          direction: egress
+          port_range_min: 0
+        - protocol: '132'
+          ethertype: IPv6
+          remote_ip_prefix: ::/0
+          port_range_max: 65535
+          direction: egress
+          port_range_min: 0
+        - protocol: '58'
+          ethertype: IPv6
+          remote_ip_prefix: ::/0
+          direction: egress
+        - protocol: tcp
+          ethertype: IPv4
+          remote_ip_prefix: 0.0.0.0/0
+          port_range_max: 65535
+          direction: ingress
+          port_range_min: 0
+        - protocol: udp
+          ethertype: IPv4
+          remote_ip_prefix: 0.0.0.0/0
+          port_range_max: 65535
+          direction: ingress
+          port_range_min: 0
+        - protocol: '132'
+          ethertype: IPv4
+          remote_ip_prefix: 0.0.0.0/0
+          port_range_max: 65535
+          direction: ingress
+          port_range_min: 0
+        - protocol: icmp
+          ethertype: IPv4
+          remote_ip_prefix: 0.0.0.0/0
+          direction: ingress
+        - protocol: tcp
+          ethertype: IPv6
+          remote_ip_prefix: ::/0
+          port_range_max: 65535
+          direction: ingress
+          port_range_min: 0
+        - protocol: udp
+          ethertype: IPv6
+          remote_ip_prefix: ::/0
+          port_range_max: 65535
+          direction: ingress
+          port_range_min: 0
+        - protocol: '132'
+          ethertype: IPv6
+          remote_ip_prefix: ::/0
+          port_range_max: 65535
+          direction: ingress
+          port_range_min: 0
+        - protocol: '58'
+          ethertype: IPv6
+          remote_ip_prefix: ::/0
+          direction: ingress
+    CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2:
+      type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
+      properties:
+        name:
+          str_replace:
+            template: VM_NAME_vmi_dummy
+            params:
+              VM_NAME:
+                get_input:
+                - cgi_fw_names
+                - 1
+        security_group_refs:
+        - CGI_FW_RSG_SI_1
+        virtual_network_refs:
+        - get_input: sgi_protected_net_dummy_fqdn
+      requirements:
+      - binding:
+          capability: tosca.capabilities.network.Bindable
+          node: CGI_FW_SERVER_2
+          relationship: tosca.relationships.network.BindsTo
+    CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1:
+      type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
+      properties:
+        name:
+          str_replace:
+            template: VM_NAME_vmi_dummy
+            params:
+              VM_NAME:
+                get_input:
+                - cgi_fw_names
+                - 0
+        security_group_refs:
+        - CGI_FW_RSG_SI_1
+        virtual_network_refs:
+        - get_input: sgi_protected_net_dummy_fqdn
+      requirements:
+      - binding:
+          capability: tosca.capabilities.network.Bindable
+          node: CGI_FW_SERVER_1
+          relationship: tosca.relationships.network.BindsTo
+    CGI_FW_SERVER_2:
+      type: org.openecomp.resource.vfc.nodes.heat.cgi_fw
+      properties:
+        flavor:
+          get_input: cgi_fw_flavor_name
+        availability_zone:
+          get_attribute:
+          - CGI_FW_SERVER_2
+          - addresses
+          - get_input:
+            - sgi_protected_net_dummy
+            - 0
+          - 0
+          - OS-EXT-IPS-MAC:mac_addr
+        image:
+          get_input: cgi_fw_image_name
+        metadata:
+          vf_module_id:
+            get_input: vf_module_id
+          vnf_id:
+            get_input: vnf_id
+          vnf_name:
+            get_input: vnf_name
+          vf_module_name:
+            get_input: vf_module_name
+        contrail_service_instance_ind: true
+        name:
+          get_input:
+          - cgi_fw_names
+          - 1
+        scheduler_hints:
+          group: CGI_FW_RAG_group
+    contrail_vmi_subinterface:
+      type: org.openecomp.resource.cp.nodes.heat.contrailV2.VirtualMachineInterface
+      properties:
+        name:
+          str_replace:
+            template: VM_NAME_PORT_3
+            params:
+              VM_NAME:
+                get_input: vipr_atm_name_0
+        virtual_network_refs:
+        - get_input: oam_protected_net_fqdn
+        virtual_machine_interface_properties:
+          service_interface_type: left
+        port_tuple_refs:
+        - get_input: port_name
+  groups:
+    CGI_FW_RAG_group:
+      type: tosca.groups.Root
+      members:
+      - CGI_FW_SERVER_1
+      - CGI_FW_SERVER_2
+    firstnet_fgi_frwl_group:
+      type: org.openecomp.groups.heat.HeatStack
+      properties:
+        heat_file: ../Artifacts/firstnet_fgi_frwl.yml
+        description: |
+          HOT template to create SecurityGroup//ServerGroup//ServiceTemplate:
+      members:
+      - CGI_FW_OAM_PROTECTED_RVMI_2
+      - CGI_FW_SGI_DIRECT_RVMI_1
+      - CGI_FW_OAM_PROTECTED_RVMI_1
+      - CGI_FW_SGI_DIRECT_RVMI_2
+      - CGI_FW_NIMBUS_HSL_RVMI_2
+      - CGI_FW_NIMBUS_HSL_RVMI_1
+      - CGI_FW_SERVER_1
+      - CGI_FW_RSG_SI_1
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1
+      - CGI_FW_SERVER_2
+      - contrail_vmi_subinterface
+  outputs:
+    cgi_fw_01_left_mac_10:
+      description: cgi fw01 left interface Mac-Address
+      value:
+        get_attribute:
+        - CGI_FW_SERVER_2
+        - addresses
+        - str_split:
+          - ','
+          - get_attribute:
+            - contrail_vmi_subinterface
+            - virtual_machine_interface_allowed_address_pairs
+            - allowed_address_pair
+        - 0
+        - OS-EXT-IPS-MAC:mac_addr
+    cgi_fw_st_name_fqdn:
+      description: FQDN of the FW_CGI ServiceTemplate
+      value:
+        list_join:
+        - ':'
+        - get_attr:
+          - CGI_FW_RST_1
+          - fq_name
+    cgi_fw_sec_grp_id:
+      description: uuid of the security group
+      value: CGI_FW_RSG_SI_1
+    VMA-EXT_IPS:
+      description: IP addresses assigned to the first external network.
+      value:
+      - UNSUPPORTED_ATTRIBUTE_CGI_FW_SERVER_2.{get_param=[vnf_id, {get_param=sgi_protected_interface_type}]}
+    VMA-DynamicResource:
+      description: IP addresses assigned to the first external network.
+      value:
+      - UNSUPPORTED_RESOURCE_{get_param=vnf_id}
+    cgi_fw_01_left_mac_7:
+      description: cgi fw01 left interface Mac-Address
+      value:
+        get_attribute:
+        - contrail_vmi_subinterface
+        - virtual_machine_interface_properties
+    cgi_fw_01_left_mac_6:
+      description: cgi fw01 left interface Mac-Address
+      value:
+        get_attribute:
+        - CGI_FW_SERVER_2
+        - addresses
+        - str_split:
+          - ','
+          - string,to,split
+        - 0
+        - OS-EXT-IPS-MAC:mac_addr
+    cgi_fw_01_left_mac_9:
+      description: cgi fw01 left interface Mac-Address
+      value:
+        get_attribute:
+        - CGI_FW_SERVER_2
+        - addresses
+        - str_split:
+          - ','
+          - get_input: sgi_protected_net_dummy
+        - 0
+        - OS-EXT-IPS-MAC:mac_addr
+    cgi_fw_01_left_mac_8:
+      description: cgi fw01 left interface Mac-Address
+      value:
+        get_attribute:
+        - contrail_vmi_subinterface
+        - virtual_machine_interface_allowed_address_pairs
+        - allowed_address_pair
+    cgi_fw_01_left_mac_3:
+      description: cgi fw01 left interface Mac-Address
+      value:
+        get_attribute:
+        - CGI_FW_SERVER_2
+        - addresses
+        - get_input:
+          - sgi_protected_net_dummy
+          - 0
+        - 0
+        - OS-EXT-IPS-MAC:mac_addr
+    cgi_fw_01_left_mac_2:
+      description: cgi fw01 left interface Mac-Address
+      value:
+        get_attribute:
+        - CGI_FW_SERVER_2
+        - addresses
+        - get_input: sgi_protected_net_dummy
+        - 0
+        - OS-EXT-IPS-MAC:mac_addr
+    cgi_fw_01_left_mac_5:
+      description: cgi fw01 left interface Mac-Address
+      value:
+        get_attribute:
+        - CGI_FW_SERVER_2
+        - addresses
+        - get_attribute:
+          - CGI_FW_SERVER_2
+          - addresses
+          - get_input:
+            - sgi_protected_net_dummy
+            - 0
+          - 0
+          - OS-EXT-IPS-MAC:mac_addr
+        - 0
+        - OS-EXT-IPS-MAC:mac_addr
+    cgi_fw_01_left_mac_4:
+      description: cgi fw01 left interface Mac-Address
+      value:
+        get_attribute:
+        - CGI_FW_SERVER_2
+        - addresses
+        - get_input:
+          - sgi_protected_net_dummy
+          - 0
+          - get_input:
+            - sgi_protected_net_dummy1
+            - 1
+        - 0
+        - OS-EXT-IPS-MAC:mac_addr
+    cgi_fw_left_vmi_id_1:
+      description: uuid of the right dummy interface
+      value: CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1
+    cgi_fw_01_left_mac_1:
+      description: cgi fw01 left interface Mac-Address
+      value:
+        get_attribute:
+        - CGI_FW_SERVER_1
+        - addresses
+        - get_input: sgi_protected_net_dummy
+        - 0
+        - OS-EXT-IPS-MAC:mac_addr
+    cgi_fw_left_vmi_id_2:
+      description: uuid of the right dummy interface
+      value: CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2
+  substitution_mappings:
+    node_type: org.openecomp.resource.abstract.nodes.heat.firstnet_fgi_frwl
+    capabilities:
+      feature_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - feature
+      feature_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - feature
+      cpu_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - cpu
+      network.outgoing.bytes_CGI_FW_NIMBUS_HSL_RVMI_2:
+      - CGI_FW_NIMBUS_HSL_RVMI_2
+      - network.outgoing.bytes
+      cpu_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - cpu
+      network.outgoing.bytes_CGI_FW_NIMBUS_HSL_RVMI_1:
+      - CGI_FW_NIMBUS_HSL_RVMI_1
+      - network.outgoing.bytes
+      instance_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - instance
+      os_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - os
+      disk.write.bytes_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.write.bytes
+      os_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - os
+      disk.write.bytes_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.write.bytes
+      network.incoming.packets_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2
+      - network.incoming.packets
+      network.incoming.packets_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1
+      - network.incoming.packets
+      binding_CGI_FW_SGI_DIRECT_RVMI_1:
+      - CGI_FW_SGI_DIRECT_RVMI_1
+      - binding
+      binding_CGI_FW_SGI_DIRECT_RVMI_2:
+      - CGI_FW_SGI_DIRECT_RVMI_2
+      - binding
+      network.incoming.packets.rate_CGI_FW_NIMBUS_HSL_RVMI_1:
+      - CGI_FW_NIMBUS_HSL_RVMI_1
+      - network.incoming.packets.rate
+      network.incoming.packets.rate_CGI_FW_NIMBUS_HSL_RVMI_2:
+      - CGI_FW_NIMBUS_HSL_RVMI_2
+      - network.incoming.packets.rate
+      network.incoming.bytes.rate_contrail_vmi_subinterface:
+      - contrail_vmi_subinterface
+      - network.incoming.bytes.rate
+      disk.capacity_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.capacity
+      disk.read.requests_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.read.requests
+      disk.read.requests_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.read.requests
+      disk.capacity_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.capacity
+      forwarder_contrail_vmi_subinterface:
+      - contrail_vmi_subinterface
+      - forwarder
+      disk.device.write.bytes_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.device.write.bytes
+      network.incoming.packets.rate_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1
+      - network.incoming.packets.rate
+      network.incoming.packets.rate_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2
+      - network.incoming.packets.rate
+      network.incoming.bytes_CGI_FW_NIMBUS_HSL_RVMI_2:
+      - CGI_FW_NIMBUS_HSL_RVMI_2
+      - network.incoming.bytes
+      disk.ephemeral.size_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.ephemeral.size
+      network.incoming.packets.rate_CGI_FW_SGI_DIRECT_RVMI_2:
+      - CGI_FW_SGI_DIRECT_RVMI_2
+      - network.incoming.packets.rate
+      disk.device.capacity_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.device.capacity
+      network.incoming.packets.rate_CGI_FW_SGI_DIRECT_RVMI_1:
+      - CGI_FW_SGI_DIRECT_RVMI_1
+      - network.incoming.packets.rate
+      network.incoming.bytes_CGI_FW_NIMBUS_HSL_RVMI_1:
+      - CGI_FW_NIMBUS_HSL_RVMI_1
+      - network.incoming.bytes
+      disk.ephemeral.size_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.ephemeral.size
+      disk.device.capacity_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.device.capacity
+      network.outgoing.packets.rate_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2
+      - network.outgoing.packets.rate
+      network.outgoing.packets.rate_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1
+      - network.outgoing.packets.rate
+      disk.device.write.bytes.rate_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.device.write.bytes.rate
+      disk.allocation_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.allocation
+      network.outgoing.packets.rate_CGI_FW_OAM_PROTECTED_RVMI_2:
+      - CGI_FW_OAM_PROTECTED_RVMI_2
+      - network.outgoing.packets.rate
+      disk.device.iops_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.device.iops
+      disk.allocation_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.allocation
+      disk.device.write.bytes.rate_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.device.write.bytes.rate
+      disk.device.iops_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.device.iops
+      network.outgoing.bytes_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1
+      - network.outgoing.bytes
+      network.outgoing.packets.rate_CGI_FW_OAM_PROTECTED_RVMI_1:
+      - CGI_FW_OAM_PROTECTED_RVMI_1
+      - network.outgoing.packets.rate
+      network.outgoing.bytes_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2
+      - network.outgoing.bytes
+      feature_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2
+      - feature
+      feature_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1
+      - feature
+      disk.device.read.bytes.rate_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.device.read.bytes.rate
+      instance_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - instance
+      disk.device.read.bytes.rate_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.device.read.bytes.rate
+      network.incoming.packets_CGI_FW_SGI_DIRECT_RVMI_2:
+      - CGI_FW_SGI_DIRECT_RVMI_2
+      - network.incoming.packets
+      binding_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1
+      - binding
+      network.incoming.packets_CGI_FW_SGI_DIRECT_RVMI_1:
+      - CGI_FW_SGI_DIRECT_RVMI_1
+      - network.incoming.packets
+      binding_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2
+      - binding
+      disk.device.read.requests_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.device.read.requests
+      host_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - host
+      disk.write.requests_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.write.requests
+      network.incoming.bytes_contrail_vmi_subinterface:
+      - contrail_vmi_subinterface
+      - network.incoming.bytes
+      host_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - host
+      disk.write.requests_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.write.requests
+      feature_CGI_FW_OAM_PROTECTED_RVMI_2:
+      - CGI_FW_OAM_PROTECTED_RVMI_2
+      - feature
+      feature_CGI_FW_OAM_PROTECTED_RVMI_1:
+      - CGI_FW_OAM_PROTECTED_RVMI_1
+      - feature
+      network.outgoing.bytes_CGI_FW_SGI_DIRECT_RVMI_1:
+      - CGI_FW_SGI_DIRECT_RVMI_1
+      - network.outgoing.bytes
+      network.outgoing.bytes_CGI_FW_SGI_DIRECT_RVMI_2:
+      - CGI_FW_SGI_DIRECT_RVMI_2
+      - network.outgoing.bytes
+      disk.root.size_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.root.size
+      disk.root.size_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.root.size
+      disk.write.bytes.rate_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.write.bytes.rate
+      disk.read.bytes_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.read.bytes
+      disk.write.bytes.rate_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.write.bytes.rate
+      disk.read.bytes_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.read.bytes
+      disk.device.read.bytes_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.device.read.bytes
+      network.incoming.packets.rate_CGI_FW_OAM_PROTECTED_RVMI_1:
+      - CGI_FW_OAM_PROTECTED_RVMI_1
+      - network.incoming.packets.rate
+      disk.device.read.bytes_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.device.read.bytes
+      network.incoming.packets.rate_CGI_FW_OAM_PROTECTED_RVMI_2:
+      - CGI_FW_OAM_PROTECTED_RVMI_2
+      - network.incoming.packets.rate
+      scalable_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - scalable
+      disk.device.write.bytes_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.device.write.bytes
+      network.incoming.bytes_CGI_FW_OAM_PROTECTED_RVMI_1:
+      - CGI_FW_OAM_PROTECTED_RVMI_1
+      - network.incoming.bytes
+      network.incoming.bytes_CGI_FW_SGI_DIRECT_RVMI_2:
+      - CGI_FW_SGI_DIRECT_RVMI_2
+      - network.incoming.bytes
+      network.incoming.bytes_CGI_FW_SGI_DIRECT_RVMI_1:
+      - CGI_FW_SGI_DIRECT_RVMI_1
+      - network.incoming.bytes
+      network.incoming.bytes_CGI_FW_OAM_PROTECTED_RVMI_2:
+      - CGI_FW_OAM_PROTECTED_RVMI_2
+      - network.incoming.bytes
+      scalable_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - scalable
+      disk.write.requests.rate_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.write.requests.rate
+      disk.write.requests.rate_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.write.requests.rate
+      network.incoming.packets_contrail_vmi_subinterface:
+      - contrail_vmi_subinterface
+      - network.incoming.packets
+      network.outpoing.packets_CGI_FW_OAM_PROTECTED_RVMI_1:
+      - CGI_FW_OAM_PROTECTED_RVMI_1
+      - network.outpoing.packets
+      forwarder_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2
+      - forwarder
+      network.outpoing.packets_CGI_FW_OAM_PROTECTED_RVMI_2:
+      - CGI_FW_OAM_PROTECTED_RVMI_2
+      - network.outpoing.packets
+      network.outgoing.bytes.rate_CGI_FW_NIMBUS_HSL_RVMI_1:
+      - CGI_FW_NIMBUS_HSL_RVMI_1
+      - network.outgoing.bytes.rate
+      network.outgoing.packets.rate_CGI_FW_NIMBUS_HSL_RVMI_1:
+      - CGI_FW_NIMBUS_HSL_RVMI_1
+      - network.outgoing.packets.rate
+      forwarder_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1
+      - forwarder
+      disk.device.allocation_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.device.allocation
+      disk.device.usage_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.device.usage
+      disk.device.allocation_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.device.allocation
+      disk.device.usage_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.device.usage
+      network.outgoing.bytes_CGI_FW_OAM_PROTECTED_RVMI_2:
+      - CGI_FW_OAM_PROTECTED_RVMI_2
+      - network.outgoing.bytes
+      feature_CGI_FW_SGI_DIRECT_RVMI_1:
+      - CGI_FW_SGI_DIRECT_RVMI_1
+      - feature
+      network.outgoing.bytes_CGI_FW_OAM_PROTECTED_RVMI_1:
+      - CGI_FW_OAM_PROTECTED_RVMI_1
+      - network.outgoing.bytes
+      network.outgoing.packets.rate_CGI_FW_NIMBUS_HSL_RVMI_2:
+      - CGI_FW_NIMBUS_HSL_RVMI_2
+      - network.outgoing.packets.rate
+      network.incoming.packets_CGI_FW_NIMBUS_HSL_RVMI_2:
+      - CGI_FW_NIMBUS_HSL_RVMI_2
+      - network.incoming.packets
+      feature_CGI_FW_SGI_DIRECT_RVMI_2:
+      - CGI_FW_SGI_DIRECT_RVMI_2
+      - feature
+      network.outgoing.bytes.rate_CGI_FW_NIMBUS_HSL_RVMI_2:
+      - CGI_FW_NIMBUS_HSL_RVMI_2
+      - network.outgoing.bytes.rate
+      network.incoming.packets_CGI_FW_NIMBUS_HSL_RVMI_1:
+      - CGI_FW_NIMBUS_HSL_RVMI_1
+      - network.incoming.packets
+      disk.iops_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.iops
+      network.outpoing.packets_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2
+      - network.outpoing.packets
+      disk.iops_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.iops
+      endpoint_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - endpoint
+      network.outpoing.packets_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1
+      - network.outpoing.packets
+      binding_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - binding
+      network.outgoing.bytes.rate_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1
+      - network.outgoing.bytes.rate
+      network.outgoing.bytes.rate_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2
+      - network.outgoing.bytes.rate
+      network.incoming.packets_CGI_FW_OAM_PROTECTED_RVMI_2:
+      - CGI_FW_OAM_PROTECTED_RVMI_2
+      - network.incoming.packets
+      binding_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - binding
+      memory_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - memory
+      cpu.delta_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - cpu.delta
+      network.incoming.bytes.rate_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2
+      - network.incoming.bytes.rate
+      network.incoming.bytes.rate_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1
+      - network.incoming.bytes.rate
+      memory_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - memory
+      cpu.delta_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - cpu.delta
+      network.outpoing.packets_CGI_FW_NIMBUS_HSL_RVMI_1:
+      - CGI_FW_NIMBUS_HSL_RVMI_1
+      - network.outpoing.packets
+      memory.usage_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - memory.usage
+      network.outpoing.packets_CGI_FW_NIMBUS_HSL_RVMI_2:
+      - CGI_FW_NIMBUS_HSL_RVMI_2
+      - network.outpoing.packets
+      memory.usage_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - memory.usage
+      network.incoming.packets_CGI_FW_OAM_PROTECTED_RVMI_1:
+      - CGI_FW_OAM_PROTECTED_RVMI_1
+      - network.incoming.packets
+      network.outgoing.bytes.rate_CGI_FW_OAM_PROTECTED_RVMI_1:
+      - CGI_FW_OAM_PROTECTED_RVMI_1
+      - network.outgoing.bytes.rate
+      network.outgoing.bytes.rate_CGI_FW_OAM_PROTECTED_RVMI_2:
+      - CGI_FW_OAM_PROTECTED_RVMI_2
+      - network.outgoing.bytes.rate
+      feature_CGI_FW_NIMBUS_HSL_RVMI_1:
+      - CGI_FW_NIMBUS_HSL_RVMI_1
+      - feature
+      feature_CGI_FW_NIMBUS_HSL_RVMI_2:
+      - CGI_FW_NIMBUS_HSL_RVMI_2
+      - feature
+      network.incoming.bytes.rate_CGI_FW_OAM_PROTECTED_RVMI_2:
+      - CGI_FW_OAM_PROTECTED_RVMI_2
+      - network.incoming.bytes.rate
+      disk.latency_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.latency
+      forwarder_CGI_FW_NIMBUS_HSL_RVMI_1:
+      - CGI_FW_NIMBUS_HSL_RVMI_1
+      - forwarder
+      vcpus_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - vcpus
+      forwarder_CGI_FW_NIMBUS_HSL_RVMI_2:
+      - CGI_FW_NIMBUS_HSL_RVMI_2
+      - forwarder
+      disk.latency_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.latency
+      network.incoming.bytes.rate_CGI_FW_OAM_PROTECTED_RVMI_1:
+      - CGI_FW_OAM_PROTECTED_RVMI_1
+      - network.incoming.bytes.rate
+      feature_CGI_FW_RSG_SI_1:
+      - CGI_FW_RSG_SI_1
+      - feature
+      network.outgoing.packets.rate_CGI_FW_SGI_DIRECT_RVMI_2:
+      - CGI_FW_SGI_DIRECT_RVMI_2
+      - network.outgoing.packets.rate
+      disk.device.write.requests_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.device.write.requests
+      network.outgoing.packets.rate_CGI_FW_SGI_DIRECT_RVMI_1:
+      - CGI_FW_SGI_DIRECT_RVMI_1
+      - network.outgoing.packets.rate
+      endpoint_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - endpoint
+      disk.device.write.requests_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.device.write.requests
+      network.outgoing.bytes.rate_CGI_FW_SGI_DIRECT_RVMI_1:
+      - CGI_FW_SGI_DIRECT_RVMI_1
+      - network.outgoing.bytes.rate
+      network.outgoing.bytes.rate_CGI_FW_SGI_DIRECT_RVMI_2:
+      - CGI_FW_SGI_DIRECT_RVMI_2
+      - network.outgoing.bytes.rate
+      vcpus_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - vcpus
+      disk.device.read.requests_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.device.read.requests
+      disk.device.write.requests.rate_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.device.write.requests.rate
+      disk.device.write.requests.rate_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.device.write.requests.rate
+      network.outgoing.bytes.rate_contrail_vmi_subinterface:
+      - contrail_vmi_subinterface
+      - network.outgoing.bytes.rate
+      memory.resident_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - memory.resident
+      network.incoming.bytes_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1
+      - network.incoming.bytes
+      binding_CGI_FW_NIMBUS_HSL_RVMI_2:
+      - CGI_FW_NIMBUS_HSL_RVMI_2
+      - binding
+      network.incoming.bytes_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2
+      - network.incoming.bytes
+      binding_CGI_FW_NIMBUS_HSL_RVMI_1:
+      - CGI_FW_NIMBUS_HSL_RVMI_1
+      - binding
+      binding_CGI_FW_OAM_PROTECTED_RVMI_2:
+      - CGI_FW_OAM_PROTECTED_RVMI_2
+      - binding
+      binding_CGI_FW_OAM_PROTECTED_RVMI_1:
+      - CGI_FW_OAM_PROTECTED_RVMI_1
+      - binding
+      network.incoming.bytes.rate_CGI_FW_SGI_DIRECT_RVMI_1:
+      - CGI_FW_SGI_DIRECT_RVMI_1
+      - network.incoming.bytes.rate
+      memory.resident_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - memory.resident
+      network.incoming.bytes.rate_CGI_FW_SGI_DIRECT_RVMI_2:
+      - CGI_FW_SGI_DIRECT_RVMI_2
+      - network.incoming.bytes.rate
+      network.outpoing.packets_CGI_FW_SGI_DIRECT_RVMI_1:
+      - CGI_FW_SGI_DIRECT_RVMI_1
+      - network.outpoing.packets
+      network.outpoing.packets_CGI_FW_SGI_DIRECT_RVMI_2:
+      - CGI_FW_SGI_DIRECT_RVMI_2
+      - network.outpoing.packets
+      network.outpoing.packets_contrail_vmi_subinterface:
+      - contrail_vmi_subinterface
+      - network.outpoing.packets
+      feature_contrail_vmi_subinterface:
+      - contrail_vmi_subinterface
+      - feature
+      disk.device.read.requests.rate_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.device.read.requests.rate
+      disk.device.read.requests.rate_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.device.read.requests.rate
+      binding_contrail_vmi_subinterface:
+      - contrail_vmi_subinterface
+      - binding
+      network.incoming.bytes.rate_CGI_FW_NIMBUS_HSL_RVMI_2:
+      - CGI_FW_NIMBUS_HSL_RVMI_2
+      - network.incoming.bytes.rate
+      disk.device.latency_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.device.latency
+      disk.device.latency_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.device.latency
+      network.incoming.bytes.rate_CGI_FW_NIMBUS_HSL_RVMI_1:
+      - CGI_FW_NIMBUS_HSL_RVMI_1
+      - network.incoming.bytes.rate
+      network.outgoing.packets.rate_contrail_vmi_subinterface:
+      - contrail_vmi_subinterface
+      - network.outgoing.packets.rate
+      forwarder_CGI_FW_SGI_DIRECT_RVMI_1:
+      - CGI_FW_SGI_DIRECT_RVMI_1
+      - forwarder
+      forwarder_CGI_FW_OAM_PROTECTED_RVMI_1:
+      - CGI_FW_OAM_PROTECTED_RVMI_1
+      - forwarder
+      forwarder_CGI_FW_OAM_PROTECTED_RVMI_2:
+      - CGI_FW_OAM_PROTECTED_RVMI_2
+      - forwarder
+      cpu_util_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - cpu_util
+      cpu_util_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - cpu_util
+      network.incoming.packets.rate_contrail_vmi_subinterface:
+      - contrail_vmi_subinterface
+      - network.incoming.packets.rate
+      disk.usage_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.usage
+      disk.read.bytes.rate_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.read.bytes.rate
+      disk.read.bytes.rate_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - disk.read.bytes.rate
+      disk.usage_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - disk.usage
+      network.outgoing.bytes_contrail_vmi_subinterface:
+      - contrail_vmi_subinterface
+      - network.outgoing.bytes
+      forwarder_CGI_FW_SGI_DIRECT_RVMI_2:
+      - CGI_FW_SGI_DIRECT_RVMI_2
+      - forwarder
+    requirements:
+      dependency_CGI_FW_SGI_DIRECT_RVMI_1:
+      - CGI_FW_SGI_DIRECT_RVMI_1
+      - dependency
+      dependency_CGI_FW_SGI_DIRECT_RVMI_2:
+      - CGI_FW_SGI_DIRECT_RVMI_2
+      - dependency
+      dependency_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - dependency
+      dependency_CGI_FW_OAM_PROTECTED_RVMI_2:
+      - CGI_FW_OAM_PROTECTED_RVMI_2
+      - dependency
+      dependency_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - dependency
+      dependency_CGI_FW_RSG_SI_1:
+      - CGI_FW_RSG_SI_1
+      - dependency
+      link_contrail_vmi_subinterface:
+      - contrail_vmi_subinterface
+      - link
+      dependency_contrail_vmi_subinterface:
+      - contrail_vmi_subinterface
+      - dependency
+      dependency_CGI_FW_OAM_PROTECTED_RVMI_1:
+      - CGI_FW_OAM_PROTECTED_RVMI_1
+      - dependency
+      link_CGI_FW_SGI_DIRECT_RVMI_2:
+      - CGI_FW_SGI_DIRECT_RVMI_2
+      - link
+      link_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1
+      - link
+      binding_contrail_vmi_subinterface:
+      - contrail_vmi_subinterface
+      - binding
+      link_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2
+      - link
+      local_storage_CGI_FW_SERVER_2:
+      - CGI_FW_SERVER_2
+      - local_storage
+      link_CGI_FW_OAM_PROTECTED_RVMI_2:
+      - CGI_FW_OAM_PROTECTED_RVMI_2
+      - link
+      link_CGI_FW_OAM_PROTECTED_RVMI_1:
+      - CGI_FW_OAM_PROTECTED_RVMI_1
+      - link
+      local_storage_CGI_FW_SERVER_1:
+      - CGI_FW_SERVER_1
+      - local_storage
+      dependency_CGI_FW_NIMBUS_HSL_RVMI_2:
+      - CGI_FW_NIMBUS_HSL_RVMI_2
+      - dependency
+      dependency_CGI_FW_NIMBUS_HSL_RVMI_1:
+      - CGI_FW_NIMBUS_HSL_RVMI_1
+      - dependency
+      link_CGI_FW_SGI_DIRECT_RVMI_1:
+      - CGI_FW_SGI_DIRECT_RVMI_1
+      - link
+      link_CGI_FW_NIMBUS_HSL_RVMI_2:
+      - CGI_FW_NIMBUS_HSL_RVMI_2
+      - link
+      link_CGI_FW_NIMBUS_HSL_RVMI_1:
+      - CGI_FW_NIMBUS_HSL_RVMI_1
+      - link
+      port_CGI_FW_RSG_SI_1:
+      - CGI_FW_RSG_SI_1
+      - port
+      dependency_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2
+      - dependency
+      dependency_CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1
+      - dependency
+  policies:
+    CGI_FW_RAG_policy:
+      type: org.openecomp.policies.placement.Antilocate
+      properties:
+        name:
+          str_replace:
+            template: VNF_NAME_srg_cgi_fw
+            params:
+              VNF_NAME:
+                get_input: vnf_name
+        container_type: host
+      targets:
+      - CGI_FW_RAG_group
+\ No newline at end of file
diff --git a/openecomp-be/lib/openecomp-sdc-translator-lib/openecomp-sdc-translator-core/src/test/resources/mock/services/heattotosca/getAttrDynamicParam/inputfiles/MANIFEST.json b/openecomp-be/lib/openecomp-sdc-translator-lib/openecomp-sdc-translator-core/src/test/resources/mock/services/heattotosca/getAttrDynamicParam/inputfiles/MANIFEST.json
index a4168d91ca..875549f43f 100644
--- a/openecomp-be/lib/openecomp-sdc-translator-lib/openecomp-sdc-translator-core/src/test/resources/mock/services/heattotosca/getAttrDynamicParam/inputfiles/MANIFEST.json
+++ b/openecomp-be/lib/openecomp-sdc-translator-lib/openecomp-sdc-translator-core/src/test/resources/mock/services/heattotosca/getAttrDynamicParam/inputfiles/MANIFEST.json
@@ -1,10 +1,10 @@
 {
-    "name": "", 
-    "description": "", 
+    "name": "",
+    "description": "",
     "data": [
         {
             "file": "base_firstnet_fgi_frwl.yml",
-            "type": "HEAT", 
+            "type": "HEAT",
             "isBase": "true",
             "data": [
                 {
@@ -12,6 +12,11 @@
                     "type": "HEAT_ENV"
                 }
             ]
+        },
+        {
+            "file": "firstnet_fgi_frwl.yml",
+            "type": "HEAT",
+            "isBase": "false"
         }
     ]
 }
 \ No newline at end of file
diff --git a/openecomp-be/lib/openecomp-sdc-translator-lib/openecomp-sdc-translator-core/src/test/resources/mock/services/heattotosca/getAttrDynamicParam/inputfiles/base_firstnet_fgi_frwl.yml b/openecomp-be/lib/openecomp-sdc-translator-lib/openecomp-sdc-translator-core/src/test/resources/mock/services/heattotosca/getAttrDynamicParam/inputfiles/base_firstnet_fgi_frwl.yml
index 59a8f0af67..57e3e17abc 100644
--- a/openecomp-be/lib/openecomp-sdc-translator-lib/openecomp-sdc-translator-core/src/test/resources/mock/services/heattotosca/getAttrDynamicParam/inputfiles/base_firstnet_fgi_frwl.yml
+++ b/openecomp-be/lib/openecomp-sdc-translator-lib/openecomp-sdc-translator-core/src/test/resources/mock/services/heattotosca/getAttrDynamicParam/inputfiles/base_firstnet_fgi_frwl.yml
@@ -1,592 +1,157 @@
-heat_template_version: 2015-04-30
-#FIRSTNET - FW -FGI// Contrail 3.0 Version 2 Template
-#AUTHORS: Rajesh Anne (ja702x)
-description: >
-  HOT template to create SecurityGroup//ServerGroup//ServiceTemplate:
-
-#####################
-parameters:
-#####################
-
-## GLOBAL//Basic Parameters
-## OPENECOMP VNF//VM Parameters
-  vnf_name:
-    type: string
-    description: Unique name for this VF instance
-#   For manual spinups, value must be in the ENV file. Must be removed from ENV before uploading to ASDC
-
-  domain:
-    type: string
-    description: domain for the ServiceTemplate
-#   For manual spinups, value must be in the ENV file. Must be removed from ENV before uploading to ASDC
-  vnf_id:
-    type: string
-    description: Unique ID for this VF instance
-#   For manual spinups, value must be in the ENV file. Must be removed from ENV before uploading to ASDC
-  vf_module_id:
-    type: string
-    description: Unique ID for this VF Module instance
-#   For manual spinups, value must be in the ENV file. Must be removed from ENV before uploading to ASDC
-  vf_module_name:
-    type: string
-    description: Unique name for this VF Module instance
-#   For manual spinups, value must be in the ENV file. Must be removed from ENV before uploading to ASDC 
-## GLOBAL//Network Parameters
-  sgi_protected_interface_type:
-    type: string
-    description: service_interface_type for ServiceInstance
-  sgi_direct_interface_type:
-    type: string
-    description: service_interface_type for ServiceInstance
-  oam_protected_net_fqdn:
-    type: string
-    description: fq_name for the VirtualNetwork
-  sgi_protected_net_dummy:
-    type: string
-    description: name for the VirtualNetwork
-  sgi_protected_net_dummy1:
-    type: string
-    description: name for the VirtualNetwork
-  sgi_protected_net_dummy_fqdn:
-    type: string
-    description: fq_name for the VirtualNetwork
-  sgi_direct_net_fqdn:
-    type: string
-    description: fq_name for the VirtualNetwork
-  nimbus_hsl_net_fqdn:
-    type: string
-    description: fq_name for the VirtualNetwork
-  oam_protected_interface_type:
-    type: string
-    description: service_interface_type for ServiceInstance
-
-  nimbus_hsl_interface_type:
-    type: string
-    description: service_interface_type for ServiceInstance
-## PT//PortTuple Parameters
-  cgi_fw_pt_vlan_VM1_name_fqdn:
-    type: json
-    description: fqdn of the ServiceInstance in PortTuple Resource
-  cgi_fw_pt_vlan_VM2_name_fqdn:
-    type: json
-    description: fqdn of the ServiceInstance in PortTuple Resource
-## ST//ServiceTemplate Parameters
-  cgi_fw_st_version:
-    type: number
-    description: version for the ServiceTemplate
-    constraints:
-      - range: { min: 0, max: 99 }
-        description: Must be a number between 0 and 99
-  cgi_fw_st_mode:
-    type: string
-    description: service_mode for the ServiceTemplate
-  cgi_fw_st_type:
-    type: string
-    description: service_type for the ServiceTemplate
-  cgi_fw_st_virtualization_type:
-    type: string
-    description: service_virtualization_type for the ServiceTemplate
-## VMI//VirtualMachineInterface ECMP Parameters
-  cgi_fw_vmi_ecmp_configured:
-    type: boolean
-    description: hashing_configured for the VirtualMachineInterface
-  cgi_fw_vmi_ecmp_src_ip:
-    type: boolean
-    description: source_ip for the VirtualMachineInterface
-  cgi_fw_vmi_ecmp_dst_ip:
-    type: boolean
-    description: destination_ip for the VirtualMachineInterface
-  cgi_fw_vmi_ecmp_ip_protocol:
-    type: boolean
-    description: ip_protocol for the VirtualMachineInterface
-  cgi_fw_vmi_ecmp_src_port:
-    type: boolean
-    description: source_port for the VirtualMachineInterface
-  cgi_fw_vmi_ecmp_dst_port:
-    type: boolean
-    description: destination_port for the VirtualMachineInterface
-## II//InstanceIp
-  sgi_direct_family_v6:
-    type: string
-    description: IP Family Address for InstanceIp
-  sgi_direct_subnet_id:
-    type: string
-    description: Subnet UUID for InstanceIp
-  sgi_direct_ipv6_subnet_id:
-    type: string
-    description: Subnet UUID for InstanceIp
-## VM//NovaServer Parameters
-  cgi_fw_image_name:
-    type: string
-    description: image_name for the ServiceInstance VM
-  cgi_fw_flavor_name:
-    type: string
-    description: flavor for the ServiceInstance VM
-  availability_zone_0:
-    type: string
-    description: availability_zone for the ServiceInstance
-  availability_zone_1:
-    type: string
-    description: availability_zone for the ServiceInstance
-  cgi_fw_names:
-    type: comma_delimited_list
-    label: Firewall VM Name
-    description: Comma Delimited List of Names for ServiceInstance VMs
-  cgi_fw_oam_protected_ips:
-    type: comma_delimited_list
-    description: the ips of the management network for CGI FW
-  contrail_vmi_subinterface:
-    type: string
-  port_name:
-    type: string
-  subinterface_name_prefix:
-    type: string
-#####################
-resources:
-#####################
-
-## RSG//Resource:SecurityGroup
-  CGI_FW_RSG_SI_1:
-    type: OS::Neutron::SecurityGroup
-    properties:
-      description: Security Group of CGI FW ServiceInstance
-      name:
-        str_replace:
-          template: VNF_NAME_sg_cgi_fw
-          params:
-            VNF_NAME: { get_param: vnf_name }
-      rules:
-        - {"direction": "egress", "remote_ip_prefix": "0.0.0.0/0", "protocol": "tcp", "ethertype": "IPv4", "port_range_max": 65535, "port_range_min": 0}
-        - {"direction": "egress", "remote_ip_prefix": "0.0.0.0/0", "protocol": "udp", "ethertype": "IPv4", "port_range_max": 65535, "port_range_min": 0}
-        - {"direction": "egress", "remote_ip_prefix": "0.0.0.0/0", "protocol": "132", "ethertype": "IPv4", "port_range_max": 65535, "port_range_min": 0}
-        - {"direction": "egress", "remote_ip_prefix": "0.0.0.0/0", "protocol": "icmp", "ethertype": "IPv4"}
-        - {"direction": "egress", "remote_ip_prefix": "::/0", "protocol": "tcp", "ethertype": "IPv6", "port_range_max": 65535, "port_range_min": 0}
-        - {"direction": "egress", "remote_ip_prefix": "::/0", "protocol": "udp", "ethertype": "IPv6", "port_range_max": 65535, "port_range_min": 0}
-        - {"direction": "egress", "remote_ip_prefix": "::/0", "protocol": "132", "ethertype": "IPv6", "port_range_max": 65535, "port_range_min": 0}
-        - {"direction": "egress", "remote_ip_prefix": "::/0", "protocol": "58", "ethertype": "IPv6"}
-        - {"direction": "ingress", "remote_ip_prefix": "0.0.0.0/0", "protocol": "tcp", "ethertype": "IPv4", "port_range_max": 65535, "port_range_min": 0}
-        - {"direction": "ingress", "remote_ip_prefix": "0.0.0.0/0", "protocol": "udp", "ethertype": "IPv4", "port_range_max": 65535, "port_range_min": 0}
-        - {"direction": "ingress", "remote_ip_prefix": "0.0.0.0/0", "protocol": "132", "ethertype": "IPv4", "port_range_max": 65535, "port_range_min": 0}
-        - {"direction": "ingress", "remote_ip_prefix": "0.0.0.0/0", "protocol": "icmp", "ethertype": "IPv4"}
-        - {"direction": "ingress", "remote_ip_prefix": "::/0", "protocol": "tcp", "ethertype": "IPv6", "port_range_max": 65535, "port_range_min": 0}
-        - {"direction": "ingress", "remote_ip_prefix": "::/0", "protocol": "udp", "ethertype": "IPv6", "port_range_max": 65535, "port_range_min": 0}
-        - {"direction": "ingress", "remote_ip_prefix": "::/0", "protocol": "132", "ethertype": "IPv6", "port_range_max": 65535, "port_range_min": 0}
-        - {"direction": "ingress", "remote_ip_prefix": "::/0", "protocol": "58", "ethertype": "IPv6"}
-
-## RAG//Resource:Anti-Affinity Group
-  CGI_FW_RAG:
-    type: OS::Nova::ServerGroup
-    properties:
-      name:
-        str_replace:
-          template: VNF_NAME_srg_cgi_fw
-          params:
-            VNF_NAME: { get_param: vnf_name }
-      policies:
-        - anti-affinity
-
-## RST//Resource:ServiceTemplate
-  CGI_FW_RST_1:
-    type: OS::ContrailV2::ServiceTemplate
-    properties:
-      domain: { get_param: domain }
-      name:
-        str_replace:
-          template: VNF_NAME_st_cgi_fw
-          params:
-            VNF_NAME: { get_param: vnf_name }
-      service_template_properties:
-        service_template_properties_version: { get_param: cgi_fw_st_version }
-        service_template_properties_service_mode: { get_param: cgi_fw_st_mode }
-        service_template_properties_service_type: { get_param: cgi_fw_st_type }
-        service_template_properties_service_virtualization_type: { get_param: cgi_fw_st_virtualization_type }
-        service_template_properties_interface_type:
-          - service_template_properties_interface_type_service_interface_type: { get_param: sgi_protected_interface_type }
-          - service_template_properties_interface_type_service_interface_type: { get_param: sgi_direct_interface_type }
-
-## RVMI//Resource:VirtualMachineInterface
-#### CGI_FW VirtualMachineInterface for 1st Interface // MGMT // oam_protected_NET_1
-  CGI_FW_OAM_PROTECTED_RVMI_1:
-    type: OS::ContrailV2::VirtualMachineInterface
-    properties:
-      name:
-        str_replace:
-          template: VM_NAME_vmi_1
-          params:
-            VM_NAME: { get_param: [ cgi_fw_names,0 ] }
-      virtual_machine_interface_properties:
-        virtual_machine_interface_properties_service_interface_type: { get_param: oam_protected_interface_type }
-      virtual_network_refs:
-        - get_param: oam_protected_net_fqdn
-      security_group_refs:
-        - get_resource: CGI_FW_RSG_SI_1
-  CGI_FW_OAM_PROTECTED_RVMI_2:
-    type: OS::ContrailV2::VirtualMachineInterface
-    properties:
-      name:
-        str_replace:
-          template: VM_NAME_vmi_1
-          params:
-            VM_NAME: { get_param: [ cgi_fw_names,1 ] }
-      virtual_machine_interface_properties:
-        virtual_machine_interface_properties_service_interface_type: { get_param: oam_protected_interface_type }
-      virtual_network_refs:
-        - get_param: oam_protected_net_fqdn
-      security_group_refs:
-        - get_resource: CGI_FW_RSG_SI_1
-
-#### CGI_FW VirtualMachineInterface for 2nd Interface // LEFT // PROTECTED_NET_1 (ServiceChain)
-  CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1:
-    type: OS::ContrailV2::VirtualMachineInterface
-    properties:
-      name:
-        str_replace:
-          template: VM_NAME_vmi_dummy
-          params:
-            VM_NAME: { get_param: [ cgi_fw_names,0 ] }
-      virtual_network_refs:
-        - get_param: sgi_protected_net_dummy_fqdn
-      security_group_refs:
-        - get_resource: CGI_FW_RSG_SI_1
-
-  CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2:
-    type: OS::ContrailV2::VirtualMachineInterface
-    properties:
-      name:
-        str_replace:
-          template: VM_NAME_vmi_dummy
-          params:
-            VM_NAME: { get_param: [ cgi_fw_names,1 ] }
-      virtual_network_refs:
-        - get_param: sgi_protected_net_dummy_fqdn
-      security_group_refs:
-        - get_resource: CGI_FW_RSG_SI_1
-
-#### CGI_FW VirtualMachineInterface for 3rd Interface // RIGHT // DIRECT_NET_1 (ServiceChain)
-  CGI_FW_SGI_DIRECT_RVMI_1:
-    type: OS::ContrailV2::VirtualMachineInterface
-    properties:
-      name:
-        str_replace:
-          template: VM_NAME_vmi_3
-          params:
-            VM_NAME: { get_param: [ cgi_fw_names,0 ] }
-      ecmp_hashing_include_fields:
-        ecmp_hashing_include_fields_hashing_configured:
-          get_param: cgi_fw_vmi_ecmp_configured
-        ecmp_hashing_include_fields_source_ip:
-          get_param: cgi_fw_vmi_ecmp_src_ip
-        ecmp_hashing_include_fields_destination_ip:
-          get_param: cgi_fw_vmi_ecmp_dst_ip
-        ecmp_hashing_include_fields_ip_protocol:
-          get_param: cgi_fw_vmi_ecmp_ip_protocol
-        ecmp_hashing_include_fields_source_port:
-          get_param: cgi_fw_vmi_ecmp_src_port
-        ecmp_hashing_include_fields_destination_port:
-          get_param: cgi_fw_vmi_ecmp_dst_port
-      virtual_machine_interface_properties:
-        virtual_machine_interface_properties_service_interface_type: { get_param: sgi_direct_interface_type }
-      port_tuple_refs: { get_param: cgi_fw_pt_vlan_VM1_name_fqdn }   
-      virtual_network_refs:
-        - get_param: sgi_direct_net_fqdn
-      security_group_refs:
-        - get_resource: CGI_FW_RSG_SI_1
-  CGI_FW_SGI_DIRECT_RVMI_2:
-    type: OS::ContrailV2::VirtualMachineInterface
-    properties:
-      name:
-        str_replace:
-          template: VM_NAME_vmi_3
-          params:
-            VM_NAME: { get_param: [ cgi_fw_names,1 ] }
-      ecmp_hashing_include_fields:
-        ecmp_hashing_include_fields_hashing_configured:
-          get_param: cgi_fw_vmi_ecmp_configured
-        ecmp_hashing_include_fields_source_ip:
-          get_param: cgi_fw_vmi_ecmp_src_ip
-        ecmp_hashing_include_fields_destination_ip:
-          get_param: cgi_fw_vmi_ecmp_dst_ip
-        ecmp_hashing_include_fields_ip_protocol:
-          get_param: cgi_fw_vmi_ecmp_ip_protocol
-        ecmp_hashing_include_fields_source_port:
-          get_param: cgi_fw_vmi_ecmp_src_port
-        ecmp_hashing_include_fields_destination_port:
-          get_param: cgi_fw_vmi_ecmp_dst_port
-      virtual_machine_interface_properties:
-        virtual_machine_interface_properties_service_interface_type: { get_param: sgi_direct_interface_type }
-      port_tuple_refs: { get_param: cgi_fw_pt_vlan_VM2_name_fqdn }   
-      virtual_network_refs:
-        - get_param: sgi_direct_net_fqdn
-      security_group_refs:
-        - get_resource: CGI_FW_RSG_SI_1
-
-#### CGI_FW VirtualMachineInterface for 4th Interface // OTHER // HSL_NET_1
-  CGI_FW_NIMBUS_HSL_RVMI_1:
-    type: OS::ContrailV2::VirtualMachineInterface
-    properties:
-      name:
-        str_replace:
-          template: VM_NAME_vmi_4
-          params:
-            VM_NAME: { get_param: [ cgi_fw_names,0 ] }
-      virtual_machine_interface_properties:
-        virtual_machine_interface_properties_service_interface_type: { get_param: nimbus_hsl_interface_type }
-      virtual_network_refs:
-        - get_param: nimbus_hsl_net_fqdn
-      security_group_refs:
-        - get_resource: CGI_FW_RSG_SI_1
-  CGI_FW_NIMBUS_HSL_RVMI_2:
-    type: OS::ContrailV2::VirtualMachineInterface
-    properties:
-      name:
-        str_replace:
-          template: VM_NAME_vmi_4
-          params:
-            VM_NAME: { get_param: [ cgi_fw_names,1 ] }
-      virtual_machine_interface_properties:
-        virtual_machine_interface_properties_service_interface_type: { get_param: nimbus_hsl_interface_type }
-      virtual_network_refs:
-        - get_param: nimbus_hsl_net_fqdn
-      security_group_refs:
-        - get_resource: CGI_FW_RSG_SI_1
-
-## RII//Resource:InstanceIp
-#### CGI_FW InstanceIp for 1st Interface // MGMT // oam_protected_NET_1
-  CGI_FW_OAM_PROTECTED_RII_1:
-    type: OS::ContrailV2::InstanceIp
-    depends_on:
-      - CGI_FW_OAM_PROTECTED_RVMI_1
-    properties:
-      virtual_machine_interface_refs:
-        - get_resource: CGI_FW_OAM_PROTECTED_RVMI_1
-      virtual_network_refs:
-        - get_param: oam_protected_net_fqdn
-      instance_ip_address: { get_param: [cgi_fw_oam_protected_ips,0 ] }
-  CGI_FW_OAM_PROTECTED_RII_2:
-    type: OS::ContrailV2::InstanceIp
-    depends_on:
-      - CGI_FW_OAM_PROTECTED_RVMI_2
-    properties:
-      virtual_machine_interface_refs:
-        - get_resource: CGI_FW_OAM_PROTECTED_RVMI_2
-      virtual_network_refs:
-        - get_param: oam_protected_net_fqdn
-      instance_ip_address: { get_param: [cgi_fw_oam_protected_ips,1 ] }
-
-#### CGI_FW InstanceIp for 2nd Interface // DUMMY // PROTECTED_NET_1
-  CGI_FW_SGI_PROTECTED_RII_DUMMY_1:
-    type: OS::ContrailV2::InstanceIp
-    depends_on:
-      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1
-    properties:
-      virtual_machine_interface_refs:
-        - get_resource: CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1
-      virtual_network_refs:
-        - get_param: sgi_protected_net_dummy_fqdn
-  CGI_FW_SGI_PROTECTED_RII_DUMMY_2:
-    type: OS::ContrailV2::InstanceIp
-    depends_on:
-      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2
-    properties:
-      virtual_machine_interface_refs:
-        - get_resource: CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2
-      virtual_network_refs:
-        - get_param: sgi_protected_net_dummy_fqdn
-
-#### CGI_FW InstanceIp for 3rd Interface // RIGHT // DIRECT_NET_1
-  CGI_FW_SGI_DIRECT_RII_1:
-    type: OS::ContrailV2::InstanceIp
-    depends_on:
-      - CGI_FW_SGI_DIRECT_RVMI_1
-    properties:
-      virtual_machine_interface_refs:
-        - get_resource: CGI_FW_SGI_DIRECT_RVMI_1
-      virtual_network_refs:
-        - get_param: sgi_direct_net_fqdn
-      subnet_uuid: { get_param: sgi_direct_subnet_id }
-  CGI_FW_SGI_DIRECT_RII_2:
-    type: OS::ContrailV2::InstanceIp
-    depends_on:
-      - CGI_FW_SGI_DIRECT_RVMI_2
-    properties:
-      virtual_machine_interface_refs:
-        - get_resource: CGI_FW_SGI_DIRECT_RVMI_2
-      virtual_network_refs:
-        - get_param: sgi_direct_net_fqdn
-      subnet_uuid: { get_param: sgi_direct_subnet_id }
-
-#### CGI_FW InstanceIp for 3rd Interface v6 // RIGHT // DIRECT_NET_1
-  CGI_FW_SGI_DIRECT_V6_RII_1:
-    type: OS::ContrailV2::InstanceIp
-    depends_on:
-      - CGI_FW_SGI_DIRECT_RVMI_2
-    properties:
-      virtual_machine_interface_refs:
-        - get_resource: CGI_FW_SGI_DIRECT_RVMI_1
-      virtual_network_refs:
-        - get_param: sgi_direct_net_fqdn
-      subnet_uuid: { get_param: sgi_direct_ipv6_subnet_id }
-      instance_ip_family: { get_param: sgi_direct_family_v6 }
-  CGI_FW_SGI_DIRECT_V6_RII_2:
-    type: OS::ContrailV2::InstanceIp
-    depends_on:
-      - CGI_FW_SGI_DIRECT_RVMI_2
-    properties:
-      virtual_machine_interface_refs:
-        - get_resource: CGI_FW_SGI_DIRECT_RVMI_2
-      virtual_network_refs:
-        - get_param: sgi_direct_net_fqdn
-      subnet_uuid: { get_param: sgi_direct_ipv6_subnet_id }
-      instance_ip_family: { get_param: sgi_direct_family_v6 }
-
-#### CGI_FW InstanceIp for 4th Interface // OTHER // HSL_NET_1
-  CGI_FW_NIMBUS_HSL_RII_1:
-    type: OS::ContrailV2::InstanceIp
-    depends_on:
-      - CGI_FW_NIMBUS_HSL_RVMI_1
-    properties:
-      virtual_machine_interface_refs:
-        - get_resource: CGI_FW_NIMBUS_HSL_RVMI_1
-      virtual_network_refs:
-        - get_param: nimbus_hsl_net_fqdn
-  CGI_FW_NIMBUS_HSL_RII_2:
-    type: OS::ContrailV2::InstanceIp
-    depends_on:
-      - CGI_FW_NIMBUS_HSL_RVMI_2
-    properties:
-      virtual_machine_interface_refs:
-        - get_resource: CGI_FW_NIMBUS_HSL_RVMI_2
-      virtual_network_refs:
-        - get_param: nimbus_hsl_net_fqdn
-
-## RNS//Resource:NovaServer
-#### CGI_FW ServiceInstance OS::Nova::Server VM 1
-  CGI_FW_SERVER_1:
-    type: OS::Nova::Server
-    depends_on:
-      - CGI_FW_OAM_PROTECTED_RII_1
-      - CGI_FW_SGI_PROTECTED_RII_DUMMY_1
-      - CGI_FW_SGI_DIRECT_RII_1
-      - CGI_FW_SGI_DIRECT_V6_RII_1
-      - CGI_FW_NIMBUS_HSL_RII_1
-    properties:
-      name: { get_param: [ cgi_fw_names,0 ] }
-      image: { get_param:  cgi_fw_image_name }
-      flavor: { get_param: cgi_fw_flavor_name }
-      availability_zone: { get_param: availability_zone_0 }
-      scheduler_hints: { group: {get_resource: CGI_FW_RAG } }
-      networks:
-        - port: { get_resource: CGI_FW_OAM_PROTECTED_RVMI_1 }
-        - port: { get_resource: CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1 }
-        - port: { get_resource: CGI_FW_SGI_DIRECT_RVMI_1 }
-        - port: { get_resource: CGI_FW_NIMBUS_HSL_RVMI_1 }
-      metadata:
-        vf_module_name:  { get_param: vf_module_name }
-        vnf_name: { get_param: vnf_name }
-        vnf_id: { get_param: vnf_id }
-        vf_module_id:  { get_param: vf_module_id }
-  CGI_FW_SERVER_2:
-    type: OS::Nova::Server
-    depends_on:
-      - CGI_FW_OAM_PROTECTED_RII_2
-      - CGI_FW_SGI_PROTECTED_RII_DUMMY_2
-      - CGI_FW_SGI_DIRECT_RII_2
-      - CGI_FW_SGI_DIRECT_V6_RII_2
-      - CGI_FW_NIMBUS_HSL_RII_2
-    properties:
-      name: { get_param: [ cgi_fw_names,1 ] }
-      image: { get_param:  cgi_fw_image_name }
-      flavor: { get_param: cgi_fw_flavor_name }
-      availability_zone: { get_attr: [CGI_FW_SERVER_2, addresses, get_param: [sgi_protected_net_dummy, 0], 0, "OS-EXT-IPS-MAC:mac_addr"] }
-      scheduler_hints: { group: {get_resource: CGI_FW_RAG } }
-      networks:
-        - port: { get_resource: CGI_FW_OAM_PROTECTED_RVMI_2 }
-        - port: { get_resource: CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2 }
-        - port: { get_resource: CGI_FW_SGI_DIRECT_RVMI_2 }
-        - port: { get_resource: CGI_FW_NIMBUS_HSL_RVMI_2 }
-      metadata:
-        vf_module_name:  { get_param: vf_module_name }
-        vnf_name: { get_param: vnf_name }
-        vnf_id: { get_param: vnf_id }
-        vf_module_id:  { get_param: vf_module_id }
-
-  contrail_vmi_subinterface:
-      type: OS::ContrailV2::VirtualMachineInterface
-      properties:
-        name:
-          str_replace:
-            template: VM_NAME_PORT_3
-            params:
-              VM_NAME: { get_param: vipr_atm_name_0 }
-        virtual_machine_interface_properties:
-          {
-          virtual_machine_interface_properties_service_interface_type: 'left'
-          }
-        port_tuple_refs: [{ get_param: port_name }]
-        virtual_network_refs: [{ get_param: oam_protected_net_fqdn }]
-
-outputs:
-  cgi_fw_left_vmi_id_1:
-    description:  uuid of the right dummy interface
-    value: {get_resource: CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1 }
-
-  cgi_fw_01_left_mac_1:
-    description:  cgi fw01 left interface Mac-Address
-    value: { get_attr: [CGI_FW_SERVER_1, addresses, get_param: sgi_protected_net_dummy, 0, "OS-EXT-IPS-MAC:mac_addr"] }
-  cgi_fw_left_vmi_id_2:
-    description:  uuid of the right dummy interface
-    value: {get_resource: CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2 }
-
-  cgi_fw_01_left_mac_2:
-    description:  cgi fw01 left interface Mac-Address
-    value: { get_attr: [CGI_FW_SERVER_2, addresses, get_param: sgi_protected_net_dummy, 0, "OS-EXT-IPS-MAC:mac_addr"] }
-
-  cgi_fw_st_name_fqdn:
-    description:  FQDN of the FW_CGI ServiceTemplate
-    value: {list_join: [':', { get_attr: [ CGI_FW_RST_1, fq_name ] } ] }
-
-  cgi_fw_sec_grp_id:
-    description:  uuid of the security group
-    value: {get_resource: CGI_FW_RSG_SI_1 }
-
-  cgi_fw_01_left_mac_3:
-    description:  cgi fw01 left interface Mac-Address
-    value: { get_attr: [CGI_FW_SERVER_2, addresses, get_param: [sgi_protected_net_dummy, 0], 0, "OS-EXT-IPS-MAC:mac_addr"] }
-
-  cgi_fw_01_left_mac_4:
-    description:  cgi fw01 left interface Mac-Address
-    value: { get_attr: [CGI_FW_SERVER_2, addresses, get_param: [sgi_protected_net_dummy, 0, get_param: [sgi_protected_net_dummy1,1] ], 0, "OS-EXT-IPS-MAC:mac_addr"] }
-
-  cgi_fw_01_left_mac_5:
-    description:  cgi fw01 left interface Mac-Address
-    value: { get_attr: [CGI_FW_SERVER_2, addresses, get_attr: [CGI_FW_SERVER_2, addresses, get_param: [sgi_protected_net_dummy, 0], 0, "OS-EXT-IPS-MAC:mac_addr"], 0,
-    "OS-EXT-IPS-MAC:mac_addr"] }
-
-  cgi_fw_01_left_mac_6:
-    description:  cgi fw01 left interface Mac-Address
-    value: { get_attr: [CGI_FW_SERVER_2, addresses,str_split: [',', 'string,to,split'], 0, "OS-EXT-IPS-MAC:mac_addr"] }
-
-  cgi_fw_01_left_mac_7:
-    description:  cgi fw01 left interface Mac-Address
-    value: { get_attr: [contrail_vmi_subinterface, virtual_machine_interface_properties ] }
-
-  cgi_fw_01_left_mac_8:
-    description:  cgi fw01 left interface Mac-Address
-    value: { get_attr: [contrail_vmi_subinterface, virtual_machine_interface_allowed_address_pairs, virtual_machine_interface_allowed_address_pairs_allowed_address_pair ] }
-
-  cgi_fw_01_left_mac_9:
-    description:  cgi fw01 left interface Mac-Address
-    value: { get_attr: [CGI_FW_SERVER_2, addresses,str_split: [',', get_param: sgi_protected_net_dummy ], 0, "OS-EXT-IPS-MAC:mac_addr"] }
-
-  cgi_fw_01_left_mac_10:
-    description:  cgi fw01 left interface Mac-Address
-    value: { get_attr: [CGI_FW_SERVER_2, addresses,str_split: [',', get_attr: [contrail_vmi_subinterface,
-                                                                              virtual_machine_interface_allowed_address_pairs,
-                                                                              virtual_machine_interface_allowed_address_pairs_allowed_address_pair ]], 0, "OS-EXT-IPS-MAC:mac_addr"] }
-  VMA-EXT_IPS:
-    description: IP addresses assigned to the first external network.
-    value: { get_attr: [CGI_FW_SERVER_2, {get_param: [vnf_id, {get_param: sgi_protected_interface_type}]}, ASSIGNED_IPS]}
-
-  VMA-DynamicResource:
-    description: IP addresses assigned to the first external network.
-    value: { get_attr: [{get_param: vnf_id}, {get_param: [vnf_id, {get_param:  sgi_protected_interface_type}]},  ASSIGNED_IPS]}
+heat_template_version: 2015-04-30
+#FIRSTNET - FW -FGI// Contrail 3.0 Version 2 Template
+#AUTHORS: Rajesh Anne (ja702x)
+description: >
+  HOT template to create SecurityGroup//ServerGroup//ServiceTemplate:
+
+#####################
+parameters:
+#####################
+
+## GLOBAL//Basic Parameters
+## OPENECOMP VNF//VM Parameters
+  vnf_name:
+    type: string
+    description: Unique name for this VF instance
+#   For manual spinups, value must be in the ENV file. Must be removed from ENV before uploading to ASDC
+
+  domain:
+    type: string
+    description: domain for the ServiceTemplate
+#   For manual spinups, value must be in the ENV file. Must be removed from ENV before uploading to ASDC
+  vnf_id:
+    type: string
+    description: Unique ID for this VF instance
+#   For manual spinups, value must be in the ENV file. Must be removed from ENV before uploading to ASDC
+  vf_module_id:
+    type: string
+    description: Unique ID for this VF Module instance
+#   For manual spinups, value must be in the ENV file. Must be removed from ENV before uploading to ASDC
+  vf_module_name:
+    type: string
+    description: Unique name for this VF Module instance
+#   For manual spinups, value must be in the ENV file. Must be removed from ENV before uploading to ASDC 
+## GLOBAL//Network Parameters
+  sgi_protected_interface_type:
+    type: string
+    description: service_interface_type for ServiceInstance
+  sgi_direct_interface_type:
+    type: string
+    description: service_interface_type for ServiceInstance
+  oam_protected_net_fqdn:
+    type: string
+    description: fq_name for the VirtualNetwork
+  sgi_protected_net_dummy:
+    type: string
+    description: name for the VirtualNetwork
+  sgi_protected_net_dummy1:
+    type: string
+    description: name for the VirtualNetwork
+  sgi_protected_net_dummy_fqdn:
+    type: string
+    description: fq_name for the VirtualNetwork
+  sgi_direct_net_fqdn:
+    type: string
+    description: fq_name for the VirtualNetwork
+  nimbus_hsl_net_fqdn:
+    type: string
+    description: fq_name for the VirtualNetwork
+  oam_protected_interface_type:
+    type: string
+    description: service_interface_type for ServiceInstance
+
+  nimbus_hsl_interface_type:
+    type: string
+    description: service_interface_type for ServiceInstance
+## PT//PortTuple Parameters
+  cgi_fw_pt_vlan_VM1_name_fqdn:
+    type: json
+    description: fqdn of the ServiceInstance in PortTuple Resource
+  cgi_fw_pt_vlan_VM2_name_fqdn:
+    type: json
+    description: fqdn of the ServiceInstance in PortTuple Resource
+## ST//ServiceTemplate Parameters
+  cgi_fw_st_version:
+    type: number
+    description: version for the ServiceTemplate
+    constraints:
+      - range: { min: 0, max: 99 }
+        description: Must be a number between 0 and 99
+  cgi_fw_st_mode:
+    type: string
+    description: service_mode for the ServiceTemplate
+  cgi_fw_st_type:
+    type: string
+    description: service_type for the ServiceTemplate
+  cgi_fw_st_virtualization_type:
+    type: string
+    description: service_virtualization_type for the ServiceTemplate
+## VMI//VirtualMachineInterface ECMP Parameters
+  cgi_fw_vmi_ecmp_configured:
+    type: boolean
+    description: hashing_configured for the VirtualMachineInterface
+  cgi_fw_vmi_ecmp_src_ip:
+    type: boolean
+    description: source_ip for the VirtualMachineInterface
+  cgi_fw_vmi_ecmp_dst_ip:
+    type: boolean
+    description: destination_ip for the VirtualMachineInterface
+  cgi_fw_vmi_ecmp_ip_protocol:
+    type: boolean
+    description: ip_protocol for the VirtualMachineInterface
+  cgi_fw_vmi_ecmp_src_port:
+    type: boolean
+    description: source_port for the VirtualMachineInterface
+  cgi_fw_vmi_ecmp_dst_port:
+    type: boolean
+    description: destination_port for the VirtualMachineInterface
+## II//InstanceIp
+  sgi_direct_family_v6:
+    type: string
+    description: IP Family Address for InstanceIp
+  sgi_direct_subnet_id:
+    type: string
+    description: Subnet UUID for InstanceIp
+  sgi_direct_ipv6_subnet_id:
+    type: string
+    description: Subnet UUID for InstanceIp
+## VM//NovaServer Parameters
+  cgi_fw_image_name:
+    type: string
+    description: image_name for the ServiceInstance VM
+  cgi_fw_flavor_name:
+    type: string
+    description: flavor for the ServiceInstance VM
+  availability_zone_0:
+    type: string
+    description: availability_zone for the ServiceInstance
+  availability_zone_1:
+    type: string
+    description: availability_zone for the ServiceInstance
+  cgi_fw_names:
+    type: comma_delimited_list
+    label: Firewall VM Name
+    description: Comma Delimited List of Names for ServiceInstance VMs
+  cgi_fw_oam_protected_ips:
+    type: comma_delimited_list
+    description: the ips of the management network for CGI FW
+  contrail_vmi_subinterface:
+    type: string
+  port_name:
+    type: string
+  subinterface_name_prefix:
+    type: string
+#####################
+resources:
+#####################
+  template_VMInt_INT1_VLC:
+    type: OS::Heat::ResourceGroup
+    properties:
+      count: 3
+      resource_def:
+        type: firstnet_fgi_frwl.yml
+        properties:
+          virtual_machine_interface_properties:
+            {
+              virtual_machine_interface_properties_service_interface_type: { get_param: contrail_vmi_subinterface },
+            }
+\ No newline at end of file
diff --git a/openecomp-be/lib/openecomp-sdc-translator-lib/openecomp-sdc-translator-core/src/test/resources/mock/services/heattotosca/getAttrDynamicParam/inputfiles/firstnet_fgi_frwl.yml b/openecomp-be/lib/openecomp-sdc-translator-lib/openecomp-sdc-translator-core/src/test/resources/mock/services/heattotosca/getAttrDynamicParam/inputfiles/firstnet_fgi_frwl.yml
new file mode 100644
index 0000000000..59a8f0af67
--- /dev/null
+++ b/openecomp-be/lib/openecomp-sdc-translator-lib/openecomp-sdc-translator-core/src/test/resources/mock/services/heattotosca/getAttrDynamicParam/inputfiles/firstnet_fgi_frwl.yml
@@ -0,0 +1,592 @@
+heat_template_version: 2015-04-30
+#FIRSTNET - FW -FGI// Contrail 3.0 Version 2 Template
+#AUTHORS: Rajesh Anne (ja702x)
+description: >
+  HOT template to create SecurityGroup//ServerGroup//ServiceTemplate:
+
+#####################
+parameters:
+#####################
+
+## GLOBAL//Basic Parameters
+## OPENECOMP VNF//VM Parameters
+  vnf_name:
+    type: string
+    description: Unique name for this VF instance
+#   For manual spinups, value must be in the ENV file. Must be removed from ENV before uploading to ASDC
+
+  domain:
+    type: string
+    description: domain for the ServiceTemplate
+#   For manual spinups, value must be in the ENV file. Must be removed from ENV before uploading to ASDC
+  vnf_id:
+    type: string
+    description: Unique ID for this VF instance
+#   For manual spinups, value must be in the ENV file. Must be removed from ENV before uploading to ASDC
+  vf_module_id:
+    type: string
+    description: Unique ID for this VF Module instance
+#   For manual spinups, value must be in the ENV file. Must be removed from ENV before uploading to ASDC
+  vf_module_name:
+    type: string
+    description: Unique name for this VF Module instance
+#   For manual spinups, value must be in the ENV file. Must be removed from ENV before uploading to ASDC 
+## GLOBAL//Network Parameters
+  sgi_protected_interface_type:
+    type: string
+    description: service_interface_type for ServiceInstance
+  sgi_direct_interface_type:
+    type: string
+    description: service_interface_type for ServiceInstance
+  oam_protected_net_fqdn:
+    type: string
+    description: fq_name for the VirtualNetwork
+  sgi_protected_net_dummy:
+    type: string
+    description: name for the VirtualNetwork
+  sgi_protected_net_dummy1:
+    type: string
+    description: name for the VirtualNetwork
+  sgi_protected_net_dummy_fqdn:
+    type: string
+    description: fq_name for the VirtualNetwork
+  sgi_direct_net_fqdn:
+    type: string
+    description: fq_name for the VirtualNetwork
+  nimbus_hsl_net_fqdn:
+    type: string
+    description: fq_name for the VirtualNetwork
+  oam_protected_interface_type:
+    type: string
+    description: service_interface_type for ServiceInstance
+
+  nimbus_hsl_interface_type:
+    type: string
+    description: service_interface_type for ServiceInstance
+## PT//PortTuple Parameters
+  cgi_fw_pt_vlan_VM1_name_fqdn:
+    type: json
+    description: fqdn of the ServiceInstance in PortTuple Resource
+  cgi_fw_pt_vlan_VM2_name_fqdn:
+    type: json
+    description: fqdn of the ServiceInstance in PortTuple Resource
+## ST//ServiceTemplate Parameters
+  cgi_fw_st_version:
+    type: number
+    description: version for the ServiceTemplate
+    constraints:
+      - range: { min: 0, max: 99 }
+        description: Must be a number between 0 and 99
+  cgi_fw_st_mode:
+    type: string
+    description: service_mode for the ServiceTemplate
+  cgi_fw_st_type:
+    type: string
+    description: service_type for the ServiceTemplate
+  cgi_fw_st_virtualization_type:
+    type: string
+    description: service_virtualization_type for the ServiceTemplate
+## VMI//VirtualMachineInterface ECMP Parameters
+  cgi_fw_vmi_ecmp_configured:
+    type: boolean
+    description: hashing_configured for the VirtualMachineInterface
+  cgi_fw_vmi_ecmp_src_ip:
+    type: boolean
+    description: source_ip for the VirtualMachineInterface
+  cgi_fw_vmi_ecmp_dst_ip:
+    type: boolean
+    description: destination_ip for the VirtualMachineInterface
+  cgi_fw_vmi_ecmp_ip_protocol:
+    type: boolean
+    description: ip_protocol for the VirtualMachineInterface
+  cgi_fw_vmi_ecmp_src_port:
+    type: boolean
+    description: source_port for the VirtualMachineInterface
+  cgi_fw_vmi_ecmp_dst_port:
+    type: boolean
+    description: destination_port for the VirtualMachineInterface
+## II//InstanceIp
+  sgi_direct_family_v6:
+    type: string
+    description: IP Family Address for InstanceIp
+  sgi_direct_subnet_id:
+    type: string
+    description: Subnet UUID for InstanceIp
+  sgi_direct_ipv6_subnet_id:
+    type: string
+    description: Subnet UUID for InstanceIp
+## VM//NovaServer Parameters
+  cgi_fw_image_name:
+    type: string
+    description: image_name for the ServiceInstance VM
+  cgi_fw_flavor_name:
+    type: string
+    description: flavor for the ServiceInstance VM
+  availability_zone_0:
+    type: string
+    description: availability_zone for the ServiceInstance
+  availability_zone_1:
+    type: string
+    description: availability_zone for the ServiceInstance
+  cgi_fw_names:
+    type: comma_delimited_list
+    label: Firewall VM Name
+    description: Comma Delimited List of Names for ServiceInstance VMs
+  cgi_fw_oam_protected_ips:
+    type: comma_delimited_list
+    description: the ips of the management network for CGI FW
+  contrail_vmi_subinterface:
+    type: string
+  port_name:
+    type: string
+  subinterface_name_prefix:
+    type: string
+#####################
+resources:
+#####################
+
+## RSG//Resource:SecurityGroup
+  CGI_FW_RSG_SI_1:
+    type: OS::Neutron::SecurityGroup
+    properties:
+      description: Security Group of CGI FW ServiceInstance
+      name:
+        str_replace:
+          template: VNF_NAME_sg_cgi_fw
+          params:
+            VNF_NAME: { get_param: vnf_name }
+      rules:
+        - {"direction": "egress", "remote_ip_prefix": "0.0.0.0/0", "protocol": "tcp", "ethertype": "IPv4", "port_range_max": 65535, "port_range_min": 0}
+        - {"direction": "egress", "remote_ip_prefix": "0.0.0.0/0", "protocol": "udp", "ethertype": "IPv4", "port_range_max": 65535, "port_range_min": 0}
+        - {"direction": "egress", "remote_ip_prefix": "0.0.0.0/0", "protocol": "132", "ethertype": "IPv4", "port_range_max": 65535, "port_range_min": 0}
+        - {"direction": "egress", "remote_ip_prefix": "0.0.0.0/0", "protocol": "icmp", "ethertype": "IPv4"}
+        - {"direction": "egress", "remote_ip_prefix": "::/0", "protocol": "tcp", "ethertype": "IPv6", "port_range_max": 65535, "port_range_min": 0}
+        - {"direction": "egress", "remote_ip_prefix": "::/0", "protocol": "udp", "ethertype": "IPv6", "port_range_max": 65535, "port_range_min": 0}
+        - {"direction": "egress", "remote_ip_prefix": "::/0", "protocol": "132", "ethertype": "IPv6", "port_range_max": 65535, "port_range_min": 0}
+        - {"direction": "egress", "remote_ip_prefix": "::/0", "protocol": "58", "ethertype": "IPv6"}
+        - {"direction": "ingress", "remote_ip_prefix": "0.0.0.0/0", "protocol": "tcp", "ethertype": "IPv4", "port_range_max": 65535, "port_range_min": 0}
+        - {"direction": "ingress", "remote_ip_prefix": "0.0.0.0/0", "protocol": "udp", "ethertype": "IPv4", "port_range_max": 65535, "port_range_min": 0}
+        - {"direction": "ingress", "remote_ip_prefix": "0.0.0.0/0", "protocol": "132", "ethertype": "IPv4", "port_range_max": 65535, "port_range_min": 0}
+        - {"direction": "ingress", "remote_ip_prefix": "0.0.0.0/0", "protocol": "icmp", "ethertype": "IPv4"}
+        - {"direction": "ingress", "remote_ip_prefix": "::/0", "protocol": "tcp", "ethertype": "IPv6", "port_range_max": 65535, "port_range_min": 0}
+        - {"direction": "ingress", "remote_ip_prefix": "::/0", "protocol": "udp", "ethertype": "IPv6", "port_range_max": 65535, "port_range_min": 0}
+        - {"direction": "ingress", "remote_ip_prefix": "::/0", "protocol": "132", "ethertype": "IPv6", "port_range_max": 65535, "port_range_min": 0}
+        - {"direction": "ingress", "remote_ip_prefix": "::/0", "protocol": "58", "ethertype": "IPv6"}
+
+## RAG//Resource:Anti-Affinity Group
+  CGI_FW_RAG:
+    type: OS::Nova::ServerGroup
+    properties:
+      name:
+        str_replace:
+          template: VNF_NAME_srg_cgi_fw
+          params:
+            VNF_NAME: { get_param: vnf_name }
+      policies:
+        - anti-affinity
+
+## RST//Resource:ServiceTemplate
+  CGI_FW_RST_1:
+    type: OS::ContrailV2::ServiceTemplate
+    properties:
+      domain: { get_param: domain }
+      name:
+        str_replace:
+          template: VNF_NAME_st_cgi_fw
+          params:
+            VNF_NAME: { get_param: vnf_name }
+      service_template_properties:
+        service_template_properties_version: { get_param: cgi_fw_st_version }
+        service_template_properties_service_mode: { get_param: cgi_fw_st_mode }
+        service_template_properties_service_type: { get_param: cgi_fw_st_type }
+        service_template_properties_service_virtualization_type: { get_param: cgi_fw_st_virtualization_type }
+        service_template_properties_interface_type:
+          - service_template_properties_interface_type_service_interface_type: { get_param: sgi_protected_interface_type }
+          - service_template_properties_interface_type_service_interface_type: { get_param: sgi_direct_interface_type }
+
+## RVMI//Resource:VirtualMachineInterface
+#### CGI_FW VirtualMachineInterface for 1st Interface // MGMT // oam_protected_NET_1
+  CGI_FW_OAM_PROTECTED_RVMI_1:
+    type: OS::ContrailV2::VirtualMachineInterface
+    properties:
+      name:
+        str_replace:
+          template: VM_NAME_vmi_1
+          params:
+            VM_NAME: { get_param: [ cgi_fw_names,0 ] }
+      virtual_machine_interface_properties:
+        virtual_machine_interface_properties_service_interface_type: { get_param: oam_protected_interface_type }
+      virtual_network_refs:
+        - get_param: oam_protected_net_fqdn
+      security_group_refs:
+        - get_resource: CGI_FW_RSG_SI_1
+  CGI_FW_OAM_PROTECTED_RVMI_2:
+    type: OS::ContrailV2::VirtualMachineInterface
+    properties:
+      name:
+        str_replace:
+          template: VM_NAME_vmi_1
+          params:
+            VM_NAME: { get_param: [ cgi_fw_names,1 ] }
+      virtual_machine_interface_properties:
+        virtual_machine_interface_properties_service_interface_type: { get_param: oam_protected_interface_type }
+      virtual_network_refs:
+        - get_param: oam_protected_net_fqdn
+      security_group_refs:
+        - get_resource: CGI_FW_RSG_SI_1
+
+#### CGI_FW VirtualMachineInterface for 2nd Interface // LEFT // PROTECTED_NET_1 (ServiceChain)
+  CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1:
+    type: OS::ContrailV2::VirtualMachineInterface
+    properties:
+      name:
+        str_replace:
+          template: VM_NAME_vmi_dummy
+          params:
+            VM_NAME: { get_param: [ cgi_fw_names,0 ] }
+      virtual_network_refs:
+        - get_param: sgi_protected_net_dummy_fqdn
+      security_group_refs:
+        - get_resource: CGI_FW_RSG_SI_1
+
+  CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2:
+    type: OS::ContrailV2::VirtualMachineInterface
+    properties:
+      name:
+        str_replace:
+          template: VM_NAME_vmi_dummy
+          params:
+            VM_NAME: { get_param: [ cgi_fw_names,1 ] }
+      virtual_network_refs:
+        - get_param: sgi_protected_net_dummy_fqdn
+      security_group_refs:
+        - get_resource: CGI_FW_RSG_SI_1
+
+#### CGI_FW VirtualMachineInterface for 3rd Interface // RIGHT // DIRECT_NET_1 (ServiceChain)
+  CGI_FW_SGI_DIRECT_RVMI_1:
+    type: OS::ContrailV2::VirtualMachineInterface
+    properties:
+      name:
+        str_replace:
+          template: VM_NAME_vmi_3
+          params:
+            VM_NAME: { get_param: [ cgi_fw_names,0 ] }
+      ecmp_hashing_include_fields:
+        ecmp_hashing_include_fields_hashing_configured:
+          get_param: cgi_fw_vmi_ecmp_configured
+        ecmp_hashing_include_fields_source_ip:
+          get_param: cgi_fw_vmi_ecmp_src_ip
+        ecmp_hashing_include_fields_destination_ip:
+          get_param: cgi_fw_vmi_ecmp_dst_ip
+        ecmp_hashing_include_fields_ip_protocol:
+          get_param: cgi_fw_vmi_ecmp_ip_protocol
+        ecmp_hashing_include_fields_source_port:
+          get_param: cgi_fw_vmi_ecmp_src_port
+        ecmp_hashing_include_fields_destination_port:
+          get_param: cgi_fw_vmi_ecmp_dst_port
+      virtual_machine_interface_properties:
+        virtual_machine_interface_properties_service_interface_type: { get_param: sgi_direct_interface_type }
+      port_tuple_refs: { get_param: cgi_fw_pt_vlan_VM1_name_fqdn }   
+      virtual_network_refs:
+        - get_param: sgi_direct_net_fqdn
+      security_group_refs:
+        - get_resource: CGI_FW_RSG_SI_1
+  CGI_FW_SGI_DIRECT_RVMI_2:
+    type: OS::ContrailV2::VirtualMachineInterface
+    properties:
+      name:
+        str_replace:
+          template: VM_NAME_vmi_3
+          params:
+            VM_NAME: { get_param: [ cgi_fw_names,1 ] }
+      ecmp_hashing_include_fields:
+        ecmp_hashing_include_fields_hashing_configured:
+          get_param: cgi_fw_vmi_ecmp_configured
+        ecmp_hashing_include_fields_source_ip:
+          get_param: cgi_fw_vmi_ecmp_src_ip
+        ecmp_hashing_include_fields_destination_ip:
+          get_param: cgi_fw_vmi_ecmp_dst_ip
+        ecmp_hashing_include_fields_ip_protocol:
+          get_param: cgi_fw_vmi_ecmp_ip_protocol
+        ecmp_hashing_include_fields_source_port:
+          get_param: cgi_fw_vmi_ecmp_src_port
+        ecmp_hashing_include_fields_destination_port:
+          get_param: cgi_fw_vmi_ecmp_dst_port
+      virtual_machine_interface_properties:
+        virtual_machine_interface_properties_service_interface_type: { get_param: sgi_direct_interface_type }
+      port_tuple_refs: { get_param: cgi_fw_pt_vlan_VM2_name_fqdn }   
+      virtual_network_refs:
+        - get_param: sgi_direct_net_fqdn
+      security_group_refs:
+        - get_resource: CGI_FW_RSG_SI_1
+
+#### CGI_FW VirtualMachineInterface for 4th Interface // OTHER // HSL_NET_1
+  CGI_FW_NIMBUS_HSL_RVMI_1:
+    type: OS::ContrailV2::VirtualMachineInterface
+    properties:
+      name:
+        str_replace:
+          template: VM_NAME_vmi_4
+          params:
+            VM_NAME: { get_param: [ cgi_fw_names,0 ] }
+      virtual_machine_interface_properties:
+        virtual_machine_interface_properties_service_interface_type: { get_param: nimbus_hsl_interface_type }
+      virtual_network_refs:
+        - get_param: nimbus_hsl_net_fqdn
+      security_group_refs:
+        - get_resource: CGI_FW_RSG_SI_1
+  CGI_FW_NIMBUS_HSL_RVMI_2:
+    type: OS::ContrailV2::VirtualMachineInterface
+    properties:
+      name:
+        str_replace:
+          template: VM_NAME_vmi_4
+          params:
+            VM_NAME: { get_param: [ cgi_fw_names,1 ] }
+      virtual_machine_interface_properties:
+        virtual_machine_interface_properties_service_interface_type: { get_param: nimbus_hsl_interface_type }
+      virtual_network_refs:
+        - get_param: nimbus_hsl_net_fqdn
+      security_group_refs:
+        - get_resource: CGI_FW_RSG_SI_1
+
+## RII//Resource:InstanceIp
+#### CGI_FW InstanceIp for 1st Interface // MGMT // oam_protected_NET_1
+  CGI_FW_OAM_PROTECTED_RII_1:
+    type: OS::ContrailV2::InstanceIp
+    depends_on:
+      - CGI_FW_OAM_PROTECTED_RVMI_1
+    properties:
+      virtual_machine_interface_refs:
+        - get_resource: CGI_FW_OAM_PROTECTED_RVMI_1
+      virtual_network_refs:
+        - get_param: oam_protected_net_fqdn
+      instance_ip_address: { get_param: [cgi_fw_oam_protected_ips,0 ] }
+  CGI_FW_OAM_PROTECTED_RII_2:
+    type: OS::ContrailV2::InstanceIp
+    depends_on:
+      - CGI_FW_OAM_PROTECTED_RVMI_2
+    properties:
+      virtual_machine_interface_refs:
+        - get_resource: CGI_FW_OAM_PROTECTED_RVMI_2
+      virtual_network_refs:
+        - get_param: oam_protected_net_fqdn
+      instance_ip_address: { get_param: [cgi_fw_oam_protected_ips,1 ] }
+
+#### CGI_FW InstanceIp for 2nd Interface // DUMMY // PROTECTED_NET_1
+  CGI_FW_SGI_PROTECTED_RII_DUMMY_1:
+    type: OS::ContrailV2::InstanceIp
+    depends_on:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1
+    properties:
+      virtual_machine_interface_refs:
+        - get_resource: CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1
+      virtual_network_refs:
+        - get_param: sgi_protected_net_dummy_fqdn
+  CGI_FW_SGI_PROTECTED_RII_DUMMY_2:
+    type: OS::ContrailV2::InstanceIp
+    depends_on:
+      - CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2
+    properties:
+      virtual_machine_interface_refs:
+        - get_resource: CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2
+      virtual_network_refs:
+        - get_param: sgi_protected_net_dummy_fqdn
+
+#### CGI_FW InstanceIp for 3rd Interface // RIGHT // DIRECT_NET_1
+  CGI_FW_SGI_DIRECT_RII_1:
+    type: OS::ContrailV2::InstanceIp
+    depends_on:
+      - CGI_FW_SGI_DIRECT_RVMI_1
+    properties:
+      virtual_machine_interface_refs:
+        - get_resource: CGI_FW_SGI_DIRECT_RVMI_1
+      virtual_network_refs:
+        - get_param: sgi_direct_net_fqdn
+      subnet_uuid: { get_param: sgi_direct_subnet_id }
+  CGI_FW_SGI_DIRECT_RII_2:
+    type: OS::ContrailV2::InstanceIp
+    depends_on:
+      - CGI_FW_SGI_DIRECT_RVMI_2
+    properties:
+      virtual_machine_interface_refs:
+        - get_resource: CGI_FW_SGI_DIRECT_RVMI_2
+      virtual_network_refs:
+        - get_param: sgi_direct_net_fqdn
+      subnet_uuid: { get_param: sgi_direct_subnet_id }
+
+#### CGI_FW InstanceIp for 3rd Interface v6 // RIGHT // DIRECT_NET_1
+  CGI_FW_SGI_DIRECT_V6_RII_1:
+    type: OS::ContrailV2::InstanceIp
+    depends_on:
+      - CGI_FW_SGI_DIRECT_RVMI_2
+    properties:
+      virtual_machine_interface_refs:
+        - get_resource: CGI_FW_SGI_DIRECT_RVMI_1
+      virtual_network_refs:
+        - get_param: sgi_direct_net_fqdn
+      subnet_uuid: { get_param: sgi_direct_ipv6_subnet_id }
+      instance_ip_family: { get_param: sgi_direct_family_v6 }
+  CGI_FW_SGI_DIRECT_V6_RII_2:
+    type: OS::ContrailV2::InstanceIp
+    depends_on:
+      - CGI_FW_SGI_DIRECT_RVMI_2
+    properties:
+      virtual_machine_interface_refs:
+        - get_resource: CGI_FW_SGI_DIRECT_RVMI_2
+      virtual_network_refs:
+        - get_param: sgi_direct_net_fqdn
+      subnet_uuid: { get_param: sgi_direct_ipv6_subnet_id }
+      instance_ip_family: { get_param: sgi_direct_family_v6 }
+
+#### CGI_FW InstanceIp for 4th Interface // OTHER // HSL_NET_1
+  CGI_FW_NIMBUS_HSL_RII_1:
+    type: OS::ContrailV2::InstanceIp
+    depends_on:
+      - CGI_FW_NIMBUS_HSL_RVMI_1
+    properties:
+      virtual_machine_interface_refs:
+        - get_resource: CGI_FW_NIMBUS_HSL_RVMI_1
+      virtual_network_refs:
+        - get_param: nimbus_hsl_net_fqdn
+  CGI_FW_NIMBUS_HSL_RII_2:
+    type: OS::ContrailV2::InstanceIp
+    depends_on:
+      - CGI_FW_NIMBUS_HSL_RVMI_2
+    properties:
+      virtual_machine_interface_refs:
+        - get_resource: CGI_FW_NIMBUS_HSL_RVMI_2
+      virtual_network_refs:
+        - get_param: nimbus_hsl_net_fqdn
+
+## RNS//Resource:NovaServer
+#### CGI_FW ServiceInstance OS::Nova::Server VM 1
+  CGI_FW_SERVER_1:
+    type: OS::Nova::Server
+    depends_on:
+      - CGI_FW_OAM_PROTECTED_RII_1
+      - CGI_FW_SGI_PROTECTED_RII_DUMMY_1
+      - CGI_FW_SGI_DIRECT_RII_1
+      - CGI_FW_SGI_DIRECT_V6_RII_1
+      - CGI_FW_NIMBUS_HSL_RII_1
+    properties:
+      name: { get_param: [ cgi_fw_names,0 ] }
+      image: { get_param:  cgi_fw_image_name }
+      flavor: { get_param: cgi_fw_flavor_name }
+      availability_zone: { get_param: availability_zone_0 }
+      scheduler_hints: { group: {get_resource: CGI_FW_RAG } }
+      networks:
+        - port: { get_resource: CGI_FW_OAM_PROTECTED_RVMI_1 }
+        - port: { get_resource: CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1 }
+        - port: { get_resource: CGI_FW_SGI_DIRECT_RVMI_1 }
+        - port: { get_resource: CGI_FW_NIMBUS_HSL_RVMI_1 }
+      metadata:
+        vf_module_name:  { get_param: vf_module_name }
+        vnf_name: { get_param: vnf_name }
+        vnf_id: { get_param: vnf_id }
+        vf_module_id:  { get_param: vf_module_id }
+  CGI_FW_SERVER_2:
+    type: OS::Nova::Server
+    depends_on:
+      - CGI_FW_OAM_PROTECTED_RII_2
+      - CGI_FW_SGI_PROTECTED_RII_DUMMY_2
+      - CGI_FW_SGI_DIRECT_RII_2
+      - CGI_FW_SGI_DIRECT_V6_RII_2
+      - CGI_FW_NIMBUS_HSL_RII_2
+    properties:
+      name: { get_param: [ cgi_fw_names,1 ] }
+      image: { get_param:  cgi_fw_image_name }
+      flavor: { get_param: cgi_fw_flavor_name }
+      availability_zone: { get_attr: [CGI_FW_SERVER_2, addresses, get_param: [sgi_protected_net_dummy, 0], 0, "OS-EXT-IPS-MAC:mac_addr"] }
+      scheduler_hints: { group: {get_resource: CGI_FW_RAG } }
+      networks:
+        - port: { get_resource: CGI_FW_OAM_PROTECTED_RVMI_2 }
+        - port: { get_resource: CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2 }
+        - port: { get_resource: CGI_FW_SGI_DIRECT_RVMI_2 }
+        - port: { get_resource: CGI_FW_NIMBUS_HSL_RVMI_2 }
+      metadata:
+        vf_module_name:  { get_param: vf_module_name }
+        vnf_name: { get_param: vnf_name }
+        vnf_id: { get_param: vnf_id }
+        vf_module_id:  { get_param: vf_module_id }
+
+  contrail_vmi_subinterface:
+      type: OS::ContrailV2::VirtualMachineInterface
+      properties:
+        name:
+          str_replace:
+            template: VM_NAME_PORT_3
+            params:
+              VM_NAME: { get_param: vipr_atm_name_0 }
+        virtual_machine_interface_properties:
+          {
+          virtual_machine_interface_properties_service_interface_type: 'left'
+          }
+        port_tuple_refs: [{ get_param: port_name }]
+        virtual_network_refs: [{ get_param: oam_protected_net_fqdn }]
+
+outputs:
+  cgi_fw_left_vmi_id_1:
+    description:  uuid of the right dummy interface
+    value: {get_resource: CGI_FW_SGI_PROTECTED_RVMI_DUMMY_1 }
+
+  cgi_fw_01_left_mac_1:
+    description:  cgi fw01 left interface Mac-Address
+    value: { get_attr: [CGI_FW_SERVER_1, addresses, get_param: sgi_protected_net_dummy, 0, "OS-EXT-IPS-MAC:mac_addr"] }
+  cgi_fw_left_vmi_id_2:
+    description:  uuid of the right dummy interface
+    value: {get_resource: CGI_FW_SGI_PROTECTED_RVMI_DUMMY_2 }
+
+  cgi_fw_01_left_mac_2:
+    description:  cgi fw01 left interface Mac-Address
+    value: { get_attr: [CGI_FW_SERVER_2, addresses, get_param: sgi_protected_net_dummy, 0, "OS-EXT-IPS-MAC:mac_addr"] }
+
+  cgi_fw_st_name_fqdn:
+    description:  FQDN of the FW_CGI ServiceTemplate
+    value: {list_join: [':', { get_attr: [ CGI_FW_RST_1, fq_name ] } ] }
+
+  cgi_fw_sec_grp_id:
+    description:  uuid of the security group
+    value: {get_resource: CGI_FW_RSG_SI_1 }
+
+  cgi_fw_01_left_mac_3:
+    description:  cgi fw01 left interface Mac-Address
+    value: { get_attr: [CGI_FW_SERVER_2, addresses, get_param: [sgi_protected_net_dummy, 0], 0, "OS-EXT-IPS-MAC:mac_addr"] }
+
+  cgi_fw_01_left_mac_4:
+    description:  cgi fw01 left interface Mac-Address
+    value: { get_attr: [CGI_FW_SERVER_2, addresses, get_param: [sgi_protected_net_dummy, 0, get_param: [sgi_protected_net_dummy1,1] ], 0, "OS-EXT-IPS-MAC:mac_addr"] }
+
+  cgi_fw_01_left_mac_5:
+    description:  cgi fw01 left interface Mac-Address
+    value: { get_attr: [CGI_FW_SERVER_2, addresses, get_attr: [CGI_FW_SERVER_2, addresses, get_param: [sgi_protected_net_dummy, 0], 0, "OS-EXT-IPS-MAC:mac_addr"], 0,
+    "OS-EXT-IPS-MAC:mac_addr"] }
+
+  cgi_fw_01_left_mac_6:
+    description:  cgi fw01 left interface Mac-Address
+    value: { get_attr: [CGI_FW_SERVER_2, addresses,str_split: [',', 'string,to,split'], 0, "OS-EXT-IPS-MAC:mac_addr"] }
+
+  cgi_fw_01_left_mac_7:
+    description:  cgi fw01 left interface Mac-Address
+    value: { get_attr: [contrail_vmi_subinterface, virtual_machine_interface_properties ] }
+
+  cgi_fw_01_left_mac_8:
+    description:  cgi fw01 left interface Mac-Address
+    value: { get_attr: [contrail_vmi_subinterface, virtual_machine_interface_allowed_address_pairs, virtual_machine_interface_allowed_address_pairs_allowed_address_pair ] }
+
+  cgi_fw_01_left_mac_9:
+    description:  cgi fw01 left interface Mac-Address
+    value: { get_attr: [CGI_FW_SERVER_2, addresses,str_split: [',', get_param: sgi_protected_net_dummy ], 0, "OS-EXT-IPS-MAC:mac_addr"] }
+
+  cgi_fw_01_left_mac_10:
+    description:  cgi fw01 left interface Mac-Address
+    value: { get_attr: [CGI_FW_SERVER_2, addresses,str_split: [',', get_attr: [contrail_vmi_subinterface,
+                                                                              virtual_machine_interface_allowed_address_pairs,
+                                                                              virtual_machine_interface_allowed_address_pairs_allowed_address_pair ]], 0, "OS-EXT-IPS-MAC:mac_addr"] }
+  VMA-EXT_IPS:
+    description: IP addresses assigned to the first external network.
+    value: { get_attr: [CGI_FW_SERVER_2, {get_param: [vnf_id, {get_param: sgi_protected_interface_type}]}, ASSIGNED_IPS]}
+
+  VMA-DynamicResource:
+    description: IP addresses assigned to the first external network.
+    value: { get_attr: [{get_param: vnf_id}, {get_param: [vnf_id, {get_param:  sgi_protected_interface_type}]},  ASSIGNED_IPS]}