From a6ebdd0d3e973d5e3be63ba282bac192d13b65df Mon Sep 17 00:00:00 2001 From: Yohann D'ANELLO Date: Sun, 4 Jul 2021 12:28:41 +0200 Subject: [PATCH] Hello Crans! Signed-off-by: Yohann D'ANELLO --- roles/router/templates/firewall_config_aurore.py | 9 ++++++++- roles/router/templates/interfaces-aurore | 7 +++++++ 2 files changed, 15 insertions(+), 1 deletion(-) diff --git a/roles/router/templates/firewall_config_aurore.py b/roles/router/templates/firewall_config_aurore.py index 91a4808..0309591 100644 --- a/roles/router/templates/firewall_config_aurore.py +++ b/roles/router/templates/firewall_config_aurore.py @@ -29,7 +29,7 @@ role = ['routeur'] interfaces_type = { 'routable' : ['ens21', 'ens22'], - 'sortie' : ['ens18', 'ens1'], + 'sortie' : ['ens18', 'ens1', 'ens2'], 'admin' : ['ens19', 'ens20', 'ens23'] } @@ -55,3 +55,10 @@ nat = [ } } ] + +### Specifiy tuples of interfaces that should be directly forwarded without any +### firewall rule. + +external_forward = [ + ('ens1', 'ens2'), +] diff --git a/roles/router/templates/interfaces-aurore b/roles/router/templates/interfaces-aurore index fa38fbd..ce8b55a 100644 --- a/roles/router/templates/interfaces-aurore +++ b/roles/router/templates/interfaces-aurore @@ -77,5 +77,12 @@ iface ens23 inet static iface ens23 inet6 static address 2a09:6840:131::0:{{ router_hard_ip_suffix }}/64 +# VLAN 120: Interco Zayo auto ens1 +iface ens1 inet manual iface ens1 inet6 manual + +# VLAN 121: Interco Crans +auto ens2 +iface ens2 inet manual +iface ens2 inet6 manual