EOX GitLab Instance

Skip to content
Snippets Groups Projects
Commit 6dd02b72 authored by Karl Grube's avatar Karl Grube
Browse files

added support for nat servers

parent eab94344
No related branches found
No related tags found
No related merge requests found
...@@ -55,7 +55,7 @@ router bgp {{bgp_asn}} ...@@ -55,7 +55,7 @@ router bgp {{bgp_asn}}
neighbor firewall4s prefix-list my-networks in neighbor firewall4s prefix-list my-networks in
neighbor nat activate neighbor nat activate
neighbor nat prefix-list all out neighbor nat prefix-list all out
neighbor nat prefix-list my-networks in neighbor nat prefix-list nat in
{% for neighbor in internet_connections %} {% for neighbor in internet_connections %}
{% for ip in neighbor.peer_ips %} {% for ip in neighbor.peer_ips %}
{% if ip|ansible.utils.ipv4 %} {% if ip|ansible.utils.ipv4 %}
...@@ -163,6 +163,13 @@ ip prefix-list internet seq {{(loop.index|int)*10+170}} permit any ...@@ -163,6 +163,13 @@ ip prefix-list internet seq {{(loop.index|int)*10+170}} permit any
{% endif %} {% endif %}
{% endfor %} {% endfor %}
! !
{% for range in dc4_ranges %}
ip prefix-list nat seq {{(loop.index|int)*20-10}} permit {{range}}
ip prefix-list nat seq {{(loop.index|int)*20}} permit {{range}} ge {{((range|regex_replace('.*/',''))|int)+1}}
{% if loop.last %}
ip prefix-list nat seq {{(loop.index|int)*20+10}} deny any
{% endif %}
{% endfor %}
{% for range in dc4_ranges + anycast4_ranges %} {% for range in dc4_ranges + anycast4_ranges %}
ip prefix-list my-networks seq {{(loop.index|int)*10}} permit {{range}} ip prefix-list my-networks seq {{(loop.index|int)*10}} permit {{range}}
{% if loop.last %} {% if loop.last %}
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment