wip: begin updating 'router' role for IPv6
pending: update virtual routes
This commit is contained in:
parent
194c19fbf3
commit
56808e4e60
3 changed files with 17 additions and 4 deletions
|
@ -6,6 +6,12 @@
|
||||||
value: '1'
|
value: '1'
|
||||||
sysctl_set: yes
|
sysctl_set: yes
|
||||||
|
|
||||||
|
- name: Enable IPv6 packet forwarding
|
||||||
|
ansible.posix.sysctl:
|
||||||
|
name: net.ipv6.ip_forward
|
||||||
|
value: '1'
|
||||||
|
sysctl_set: yes
|
||||||
|
|
||||||
- name: Install aurore-firewall (re2o-service)
|
- name: Install aurore-firewall (re2o-service)
|
||||||
import_role:
|
import_role:
|
||||||
name: re2o-service
|
name: re2o-service
|
||||||
|
|
|
@ -25,7 +25,7 @@
|
||||||
### Give me a role
|
### Give me a role
|
||||||
|
|
||||||
# routeur4 = routeur IPv4
|
# routeur4 = routeur IPv4
|
||||||
role = ['routeur4']
|
role = ['routeur4', 'routeur6']
|
||||||
|
|
||||||
|
|
||||||
### Specify each interface role
|
### Specify each interface role
|
||||||
|
|
|
@ -26,7 +26,6 @@ vrrp_instance VI_ROUT_{{ apartment_block }} {
|
||||||
# Timeout in seconds before failover kicks in.
|
# Timeout in seconds before failover kicks in.
|
||||||
advert_int 2
|
advert_int 2
|
||||||
|
|
||||||
|
|
||||||
# Used to authenticate VRRP communication between master and backup.
|
# Used to authenticate VRRP communication between master and backup.
|
||||||
authentication {
|
authentication {
|
||||||
auth_type PASS
|
auth_type PASS
|
||||||
|
@ -38,18 +37,26 @@ vrrp_instance VI_ROUT_{{ apartment_block }} {
|
||||||
virtual_ipaddress {
|
virtual_ipaddress {
|
||||||
# Routing subnet
|
# Routing subnet
|
||||||
10.129.{{ apartment_block_id }}.254/16 brd 10.129.255.255 dev ens19 scope global
|
10.129.{{ apartment_block_id }}.254/16 brd 10.129.255.255 dev ens19 scope global
|
||||||
|
{{ ipv6_base_prefix }}:129:0::{{ apartment_block_id }}:254/64 dev ens19 scope global
|
||||||
|
|
||||||
# Public subnet: wired
|
|
||||||
|
# NATed subnet: wired
|
||||||
45.66.108.25{{ apartment_block_id }}/24 brd 45.66.108.255 dev ens19 scope global
|
45.66.108.25{{ apartment_block_id }}/24 brd 45.66.108.255 dev ens19 scope global
|
||||||
# Public subnet: wifi
|
|
||||||
|
# NATed subnet: wifi
|
||||||
45.66.109.25{{ apartment_block_id }}/24 brd 45.66.109.255 dev ens19 scope global
|
45.66.109.25{{ apartment_block_id }}/24 brd 45.66.109.255 dev ens19 scope global
|
||||||
|
|
||||||
# Wired
|
# Wired
|
||||||
10.{{ subnet_ids.users_wired }}.0.254/16 brd 10.{{ subnet_ids.users_wired }}.255.255 dev ens20 scope global
|
10.{{ subnet_ids.users_wired }}.0.254/16 brd 10.{{ subnet_ids.users_wired }}.255.255 dev ens20 scope global
|
||||||
|
{{ ipv6_base_prefix }}:{{ subnet_ids.users_wired }}::0:254/64 dev ens20 scope global
|
||||||
|
|
||||||
# Wifi
|
# Wifi
|
||||||
10.{{ subnet_ids.users_wifi }}.0.254/16 brd 10.{{ subnet_ids.users_wifi }}.255.255 dev ens21 scope global
|
10.{{ subnet_ids.users_wifi }}.0.254/16 brd 10.{{ subnet_ids.users_wifi }}.255.255 dev ens21 scope global
|
||||||
|
{{ ipv6_base_prefix }}:{{ subnet_ids.users_wifi }}::0:254/64 dev ens21 scope global
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
|
# FIXME: update for IPv6
|
||||||
virtual_routes {
|
virtual_routes {
|
||||||
# 10.129.0.1 is Yggdrasil
|
# 10.129.0.1 is Yggdrasil
|
||||||
src 10.129.{{ apartment_block_id }}.254 to 0.0.0.0/0 via 10.129.0.1 dev ens19
|
src 10.129.{{ apartment_block_id }}.254 to 0.0.0.0/0 via 10.129.0.1 dev ens19
|
||||||
|
|
Loading…
Reference in a new issue