Skip to content
This repository has been archived by the owner on Jul 19, 2024. It is now read-only.

Commit

Permalink
Update VPN ansible examples to insert pod_id for st0 unit number
Browse files Browse the repository at this point in the history
  • Loading branch information
kwbales committed Apr 7, 2015
1 parent 42a1a23 commit 9c968e9
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 2 deletions.
2 changes: 1 addition & 1 deletion ansible/playbooks/vpn_config.yml
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@
build_dir: "/tmp/"
mss_entries: [ {'protocol': 'ipsec-vpn', 'mss': '1350'} ]
interfaces: [
{'interface': 'st0', 'unit': '1', 'family': 'inet', 'addr_type': 'address', 'addr': '10.255.{{pod_id}}.2/30', 'zone':'vpn', 'hit_protocols': ['ospf', 'bgp'], 'hit_services': ['ping', 'traceroute']},
{'interface': 'st0', 'unit': '{{pod_id}}', 'family': 'inet', 'addr_type': 'address', 'addr': '10.255.{{pod_id}}.2/30', 'zone':'vpn', 'hit_protocols': ['ospf', 'bgp'], 'hit_services': ['ping', 'traceroute']},
{'interface': 'ge-0/0/2', 'unit': '0', 'family': 'inet', 'addr_type': 'dhcp', 'zone':'untrust', 'hit_services': ['ike','ping','ssh','netconf']}
]
ike: [ {'ike_name': 'ike-vpn', 'gateway_ip': '10.10.0.5', 'ext_interface': 'ge-0/0/2.0', 'ike_policy_name': 'ike-policy1', 'ike_policy_mode': 'main', 'ike_policy_proposal': 'standard', 'shared_secret': 'AwesomePassword123'} ]
Expand Down
2 changes: 1 addition & 1 deletion ansible/playbooks/vpn_ospf_config.yml
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@
junos_password: "Juniper"
build_dir: "/tmp/"
interfaces: [
{'interface': 'st0', 'unit': '1', 'family': 'inet', 'addr_type': 'address', 'addr': '10.255.{{pod_id}}.2/30', 'zone':'vpn', 'hit_protocols': ['ospf', 'bgp'], 'hit_services': ['ping', 'traceroute'],'ospf': {'area': '0'}},
{'interface': 'st0', 'unit': '{{pod_id}}', 'family': 'inet', 'addr_type': 'address', 'addr': '10.255.{{pod_id}}.2/30', 'zone':'vpn', 'hit_protocols': ['ospf', 'bgp'], 'hit_services': ['ping', 'traceroute'],'ospf': {'area': '0'}},
{'interface': 'lo0', 'unit': '0', 'family': 'inet', 'addr_type': 'address', 'addr': '10.255.255.{{pod_id}}/32', 'zone':'trust', 'ospf': {'area': '0', 'passive': True}}
]

Expand Down

0 comments on commit 9c968e9

Please sign in to comment.