aurore/ansible
aurore/ansible
11
2
Fork 0
Code Issues 1 Pull requests 13 Releases Wiki Activity

Enable IP forwarding on routed interfaces

Browse source 
Signed-off-by: Yohann D'ANELLO <ynerant@crans.org>
This commit is contained in:
ynerant 2021-07-19 21:07:42 +02:00
parent 4ebb4b6ad3
commit e030b26475
Signed by untrusted user: ynerant
GPG key ID: 3A75C55819C8CF85
2 changed files with 19 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
roles/router/templates/interfaces-aurore
View file

@ -11,9 +11,11 @@ iface lo inet loopback
auto ens18 auto ens18
iface ens18 inet static iface ens18 inet static
address 10.129.0.{{ router_hard_ip_suffix }}/16 address 10.129.0.{{ router_hard_ip_suffix }}/16
ip-forward 1 # FIXME adm should not be routed in the future
iface ens18 inet6 static iface ens18 inet6 static
address 2a09:6840:129::0:{{ router_hard_ip_suffix }}/64 address 2a09:6840:129::0:{{ router_hard_ip_suffix }}/64
ip-forward 1
# The primary network interface # The primary network interface
@ -21,9 +23,11 @@ allow-hotplug ens19
iface ens19 inet static iface ens19 inet static
address 10.128.0.{{ router_hard_ip_suffix }}/16 address 10.128.0.{{ router_hard_ip_suffix }}/16
dns-search adm.auro.re dns-search adm.auro.re
ip-forward 1
iface ens19 inet6 static iface ens19 inet6 static
address 2a09:6840:128::0:{{ router_hard_ip_suffix }}/64 address 2a09:6840:128::0:{{ router_hard_ip_suffix }}/64
ip-forward 1
# VlAN 130: switches # VlAN 130: switches
auto ens20 auto ens20
@ -37,6 +41,7 @@ iface ens20 inet6 static
auto ens21 auto ens21
iface ens21 inet static iface ens21 inet static
address 45.66.111.{{ router_hard_ip_suffix }}/24 address 45.66.111.{{ router_hard_ip_suffix }}/24
ip-forward 1
# Nécessaire pour contacter re2o et bootstrap le firewall. # Nécessaire pour contacter re2o et bootstrap le firewall.
# Ces directives sont _aussi_ set par aurore-firewall ! # Ces directives sont _aussi_ set par aurore-firewall !
@ -46,14 +51,17 @@ iface ens21 inet static
iface ens21 inet6 static iface ens21 inet6 static
address 2a09:6840:111::{{ router_hard_ip_suffix }}/48 address 2a09:6840:111::{{ router_hard_ip_suffix }}/48
ip-forward 1
# VLAN 110: IP publiques adhérents # VLAN 110: IP publiques adhérents
auto ens22 auto ens22
iface ens22 inet static iface ens22 inet static
address 45.66.110.{{ router_hard_ip_suffix }}/24 address 45.66.110.{{ router_hard_ip_suffix }}/24
ip-forward 1
iface ens22 inet6 static iface ens22 inet6 static
address 2a09:6840:110::{{ router_hard_ip_suffix }}/48 address 2a09:6840:110::{{ router_hard_ip_suffix }}/48
ip-forward 1
# VLAN 131: onduleurs et PDU # VLAN 131: onduleurs et PDU
auto ens23 auto ens23
@ -65,10 +73,16 @@ iface ens23 inet6 static
# VLAN 120: Interco Zayo # VLAN 120: Interco Zayo
auto ens1 auto ens1
iface ens1 inet manual iface ens1 inet static
iface ens1 inet6 manual ip-forward 1
iface ens1 inet6 static
ip-forward 1
# VLAN 121: Interco Crans # VLAN 121: Interco Crans
auto ens2 auto ens2
iface ens2 inet manual iface ens2 inet static
iface ens2 inet6 manual ip-forward 1
iface ens2 inet6 static
ip-forward 1

2
roles/router/templates/keepalived-aurore.conf
View file

@ -57,7 +57,7 @@ vrrp_instance VI_ROUT_aurore_IPv4 {
10.131.0.254/16 brd 10.131.255.255 dev ens23 scope global 10.131.0.254/16 brd 10.131.255.255 dev ens23 scope global
# VLAN 121: Interco Crans # VLAN 121: Interco Crans
185.230.79.254/29 dev ens2 scope global 185.230.79.254/29 brd 185.230.79.255 dev ens2 scope global
} }
virtual_routes { virtual_routes {