You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
362 lines
8.6 KiB
Django/Jinja
362 lines
8.6 KiB
Django/Jinja
interfaces {
|
|
|
|
{% for iface_name, iface_data in pillar['netbox']['interfaces'].items() %}
|
|
{% if iface_data['form_factor']['label'] != 'Virtual' and not iface_data[ 'mgmt_only' ] %}
|
|
ethernet {{ iface_name }} {
|
|
{% for address in iface_data['addresses'] %}
|
|
address {{ address['address'] }}
|
|
{% endfor %}
|
|
duplex auto
|
|
policy {
|
|
}
|
|
smp-affinity auto
|
|
speed auto
|
|
}
|
|
{% endif %}
|
|
{% endfor %}
|
|
|
|
ethernet eth0 {
|
|
address 10.13.0.56/22
|
|
hw-id ac:1f:6b:94:1f:58
|
|
}
|
|
ethernet eth1 {
|
|
address 185.1.101.32/24
|
|
address 2001:7f8:bc::4:1495:1/64
|
|
duplex auto
|
|
hw-id ac:1f:6b:94:1f:59
|
|
ipv6 {
|
|
ospfv3 {
|
|
passive
|
|
}
|
|
}
|
|
smp-affinity auto
|
|
speed auto
|
|
}
|
|
ethernet eth2 {
|
|
duplex auto
|
|
hw-id 3c:fd:fe:d0:20:20
|
|
smp-affinity auto
|
|
speed auto
|
|
}
|
|
ethernet eth3 {
|
|
address 46.227.200.106/26
|
|
address 2a01:9e00:a217:0d00::46.227.200.106/64
|
|
duplex auto
|
|
hw-id 3c:fd:fe:d0:20:21
|
|
ip {
|
|
ospf {
|
|
cost 1
|
|
dead-interval 40
|
|
hello-interval 10
|
|
network broadcast
|
|
priority 1
|
|
retransmit-interval 5
|
|
transmit-delay 1
|
|
}
|
|
}
|
|
ipv6 {
|
|
dup-addr-detect-transmits 1
|
|
ospfv3 {
|
|
cost 40
|
|
dead-interval 40
|
|
hello-interval 10
|
|
instance-id 0
|
|
priority 1
|
|
retransmit-interval 5
|
|
transmit-delay 1
|
|
}
|
|
}
|
|
smp-affinity auto
|
|
speed auto
|
|
}
|
|
ethernet eth4 {
|
|
duplex auto
|
|
hw-id 3c:fd:fe:d0:20:22
|
|
smp-affinity auto
|
|
speed auto
|
|
}
|
|
ethernet eth5 {
|
|
duplex auto
|
|
hw-id 3c:fd:fe:d0:20:23
|
|
smp-affinity auto
|
|
speed auto
|
|
}
|
|
loopback lo {
|
|
address 46.227.204.1/32
|
|
address 2a01:9e00:1234::1/128
|
|
}
|
|
}
|
|
policy {
|
|
prefix-list TEST-EQUINIXIX-OUT {
|
|
rule 1 {
|
|
action permit
|
|
prefix 46.227.204.0/24
|
|
}
|
|
rule 2 {
|
|
action deny
|
|
le 32
|
|
prefix 0.0.0.0/0
|
|
}
|
|
}
|
|
prefix-list6 TEST-EQUINIXIX-OUT {
|
|
rule 1 {
|
|
action permit
|
|
prefix 2a01:9e00:1234::/48
|
|
}
|
|
rule 2 {
|
|
action deny
|
|
le 128
|
|
prefix ::/0
|
|
}
|
|
}
|
|
}
|
|
protocols {
|
|
bgp 41495 {
|
|
address-family {
|
|
ipv4-unicast {
|
|
redistribute {
|
|
static {
|
|
}
|
|
}
|
|
}
|
|
ipv6-unicast {
|
|
redistribute {
|
|
static {
|
|
}
|
|
}
|
|
}
|
|
}
|
|
neighbor 185.1.101.28 {
|
|
address-family {
|
|
ipv4-unicast {
|
|
prefix-list {
|
|
export TEST-EQUINIXIX-OUT
|
|
}
|
|
soft-reconfiguration {
|
|
inbound
|
|
}
|
|
}
|
|
}
|
|
remote-as 6939
|
|
}
|
|
neighbor 185.1.101.250 {
|
|
address-family {
|
|
ipv4-unicast {
|
|
prefix-list {
|
|
export TEST-EQUINIXIX-OUT
|
|
}
|
|
soft-reconfiguration {
|
|
inbound
|
|
}
|
|
}
|
|
ipv6-unicast {
|
|
soft-reconfiguration {
|
|
inbound
|
|
}
|
|
}
|
|
}
|
|
remote-as 65517
|
|
}
|
|
neighbor 185.1.101.251 {
|
|
address-family {
|
|
ipv4-unicast {
|
|
prefix-list {
|
|
export TEST-EQUINIXIX-OUT
|
|
}
|
|
soft-reconfiguration {
|
|
inbound
|
|
}
|
|
}
|
|
}
|
|
remote-as 24115
|
|
}
|
|
neighbor 185.1.101.252 {
|
|
address-family {
|
|
ipv4-unicast {
|
|
prefix-list {
|
|
export TEST-EQUINIXIX-OUT
|
|
}
|
|
soft-reconfiguration {
|
|
inbound
|
|
}
|
|
}
|
|
}
|
|
remote-as 24115
|
|
}
|
|
neighbor 2001:7f8:bc::2:4115:1 {
|
|
address-family {
|
|
ipv6-unicast {
|
|
prefix-list {
|
|
export TEST-EQUINIXIX-OUT
|
|
}
|
|
soft-reconfiguration {
|
|
inbound
|
|
}
|
|
}
|
|
}
|
|
remote-as 24115
|
|
}
|
|
neighbor 2001:7f8:bc::2:4115:2 {
|
|
address-family {
|
|
ipv6-unicast {
|
|
prefix-list {
|
|
export TEST-EQUINIXIX-OUT
|
|
}
|
|
soft-reconfiguration {
|
|
inbound
|
|
}
|
|
}
|
|
}
|
|
remote-as 24115
|
|
}
|
|
neighbor 2001:7f8:bc::6:5517:1 {
|
|
address-family {
|
|
ipv6-unicast {
|
|
prefix-list {
|
|
export TEST-EQUINIXIX-OUT
|
|
}
|
|
soft-reconfiguration {
|
|
inbound
|
|
}
|
|
}
|
|
}
|
|
remote-as 65517
|
|
}
|
|
neighbor 2001:7f8:bc::6939:1 {
|
|
address-family {
|
|
ipv6-unicast {
|
|
prefix-list {
|
|
export TEST-EQUINIXIX-OUT
|
|
}
|
|
soft-reconfiguration {
|
|
inbound
|
|
}
|
|
}
|
|
}
|
|
remote-as 6939
|
|
}
|
|
parameters {
|
|
router-id 46.227.201.1
|
|
}
|
|
}
|
|
ospf {
|
|
area 0.0.0.0 {
|
|
network 46.227.200.64/26
|
|
}
|
|
area 185.1.101.0 {
|
|
network 185.1.101.0/24
|
|
}
|
|
parameters {
|
|
abr-type cisco
|
|
router-id 46.227.201.1
|
|
}
|
|
passive-interface eth1
|
|
}
|
|
ospfv3 {
|
|
area 0.0.0.0 {
|
|
interface eth3
|
|
range 2a01:9e00:a217:0d00::/64 {
|
|
}
|
|
}
|
|
area 185.1.101.0 {
|
|
interface eth1
|
|
range 2001:7f8:bc::/64 {
|
|
}
|
|
}
|
|
parameters {
|
|
router-id 46.227.201.1
|
|
}
|
|
}
|
|
static {
|
|
route 10.0.0.0/8 {
|
|
next-hop 10.13.0.1 {
|
|
}
|
|
}
|
|
route 46.227.204.0/24 {
|
|
blackhole {
|
|
}
|
|
}
|
|
route6 2a01:9e00:1234::/48 {
|
|
blackhole {
|
|
}
|
|
}
|
|
}
|
|
}
|
|
service {
|
|
lldp {
|
|
interface al {
|
|
}
|
|
interface all {
|
|
}
|
|
management-address 10.13.0.56
|
|
}
|
|
salt-minion {
|
|
id {{ grains['fqdn'] }}
|
|
master hphr.salt.faelix.net
|
|
}
|
|
snmp {
|
|
community public {
|
|
}
|
|
trap-source 10.13.0.56
|
|
trap-target 10.13.1.111 {
|
|
}
|
|
}
|
|
ssh {
|
|
listen-address 10.13.0.56
|
|
}
|
|
}
|
|
system {
|
|
config-management {
|
|
commit-revisions 100
|
|
}
|
|
console {
|
|
device ttyS0 {
|
|
speed 9600
|
|
}
|
|
}
|
|
host-name {{ grains['fqdn'] }}
|
|
ip {
|
|
multipath {
|
|
layer4-hashing
|
|
}
|
|
}
|
|
ipv6 {
|
|
multipath {
|
|
layer4-hashing
|
|
}
|
|
}
|
|
login {
|
|
user vyos {
|
|
authentication {
|
|
encrypted-password $6$fXZ3cwEft1XFJTH$twZmVheX0PEi21KqQfv/zvKhuXVc1UwVVXI3Y7KCXYk0osil3QmJqmAYgNQyNqGUROydxp7R6yiPe4N06QnBH1
|
|
plaintext-password ""
|
|
}
|
|
level admin
|
|
}
|
|
}
|
|
{% for nameserver in pillar['nameservers'] %}
|
|
name-server {{ nameserver }}
|
|
{% endfor %}
|
|
ntp {
|
|
{% for ntp_server, ntp_data in pillar['ntp'].items() %}
|
|
server {{ ntp_server }} {
|
|
}
|
|
{% endfor %}
|
|
}
|
|
syslog {
|
|
global {
|
|
facility all {
|
|
level info
|
|
}
|
|
facility protocols {
|
|
level debug
|
|
}
|
|
}
|
|
}
|
|
time-zone UTC
|
|
}
|
|
|
|
/* Warning: Do not remove the following line. */
|
|
/* === vyatta-config-version: "broadcast-relay@1:cluster@1:config-management@1:conntrack-sync@1:conntrack@1:dhcp-relay@2:dhcp-server@5:firewall@5:ipsec@5:l2tp@1:mdns@1:nat@4:ntp@1:pptp@1:qos@1:quagga@3:ssh@1:system@11:vrrp@2:vyos-accel-ppp@1:wanloadbalance@3:webgui@1:webproxy@1:webproxy@2:zone-policy@1" === */
|
|
/* Release version: 1.2.0-rolling+201904240337 */
|