ansible/roles/re2o-firewall-odlyd/templates/re2o-services/firewall/firewall_config.py.j2

42 lines
1.1 KiB
Django/Jinja

# -*- mode: python; coding: utf-8 -*-
# {{ ansible_managed }}
### Give me a role
role = ['routeur4']
### Specify each interface role
interfaces_type = {
'routable' : ['eth0.1', 'ens1f0.21', 'ens1f0.22', 'ens1f0.23', 'ens1f0.24'],
'sortie' : ['ens1f0.26', 'ens1f0.1132'],
'admin' : ['eth0.2', 'eth0.3', 'eth0.9', 'eth0.7', 'eth0.4'],
'6in4' : [('ens1f0.23', 'ens1f0.26')]
}
### Specify nat settings: name, interfaces with range, and global range for nat
### WARNING : "interface_ip_to_nat' MUST contain /24 ranges, and ip_sources MUST
### contain /16 range
nat = [
{
'name' : 'Wifi',
'interfaces_ip_to_nat' : {
'ens1f0.26' : '185.230.76.0/24',
'eth0.1' : '138.231.144.0/24',
'ens1f0.1132' : '138.231.144.0/24',
},
'ip_sources' : '10.53.0.0/16'
},
{
'name' : 'Filaire',
'interfaces_ip_to_nat' : {
'ens1f0.26' : '185.230.77.0/24',
'eth0.1' : '138.231.145.0/24',
'ens1f0.1132' : '138.231.145.0/24',
},
'ip_sources' : '10.54.0.0/16'
}
]