ansible/roles/re2o-firewall-gulp/templates/re2o-services/firewall/firewall_config.py.j2

42 lines
1.1 KiB
Django/Jinja

# -*- mode: python; coding: utf-8 -*-
{{ ansible_header | comment }}
### Give me a role
role = ['routeur4']
### Specify each interface role
interfaces_type = {
'routable' : ['eno1.1', 'ens1f0.21', 'ens1f0.22', 'ens1f0.23', 'ens1f0.24'],
'sortie' : ['ens1f0.26', 'ens1f0.1132'],
'admin' : ['eno1.2', 'eno1.3'],
'6in4' : [('ens1f0.23', 'ens1f0.26')]
}
### Specify nat settings: name, interfaces with range, and global range for nat
### WARNING : "interface_ip_to_nat' MUST contain /24 ranges, and ip_sources MUST
### contain /16 range
nat = [
{
'name' : 'Wifi',
'interfaces_ip_to_nat' : {
'ens1f0.26' : '185.230.76.0/24',
'eno1.1' : '138.231.144.0/24',
'ens1f0.1132' : '138.231.144.0/24',
},
'ip_sources' : '10.53.0.0/16'
},
{
'name' : 'Filaire',
'interfaces_ip_to_nat' : {
'ens1f0.26' : '185.230.77.0/24',
'eno1.1' : '138.231.145.0/24',
'ens1f0.1132' : '138.231.145.0/24',
},
'ip_sources' : '10.54.0.0/16'
}
]