aurore/ansible
aurore/ansible
11
2
Fork 0
Code Issues 1 Pull requests 13 Releases Wiki Activity

Hello Crans!

Browse source 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
This commit is contained in:
ynerant 2021-07-04 12:28:41 +02:00
parent 300fb02f8b
commit a6ebdd0d3e
Signed by untrusted user: ynerant
GPG key ID: 3A75C55819C8CF85
2 changed files with 15 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
roles/router/templates/firewall_config_aurore.py
View file

@ -29,7 +29,7 @@ role = ['routeur']
interfaces_type = { interfaces_type = {
'routable' : ['ens21', 'ens22'], 'routable' : ['ens21', 'ens22'],
'sortie' : ['ens18', 'ens1'], 'sortie' : ['ens18', 'ens1', 'ens2'],
'admin' : ['ens19', 'ens20', 'ens23'] 'admin' : ['ens19', 'ens20', 'ens23']
} }
@ -55,3 +55,10 @@ nat = [
} }
} }
] ]
### Specifiy tuples of interfaces that should be directly forwarded without any
### firewall rule.
external_forward = [
('ens1', 'ens2'),
]

7
roles/router/templates/interfaces-aurore
View file

@ -77,5 +77,12 @@ iface ens23 inet static
iface ens23 inet6 static iface ens23 inet6 static
address 2a09:6840:131::0:{{ router_hard_ip_suffix }}/64 address 2a09:6840:131::0:{{ router_hard_ip_suffix }}/64
# VLAN 120: Interco Zayo
auto ens1 auto ens1
iface ens1 inet manual
iface ens1 inet6 manual iface ens1 inet6 manual
# VLAN 121: Interco Crans
auto ens2
iface ens2 inet manual
iface ens2 inet6 manual