diff options
| author | Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi> | 2018-09-05 16:43:10 +0300 |
|---|---|---|
| committer | Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi> | 2018-09-05 17:33:42 +0300 |
| commit | 866b4ac69bca08d8b1fd0f1970933ce6e240d29b (patch) | |
| tree | d340d2f10cfd4e228ba9a91b90a0010c469cefc0 /dmvpn.awall | |
| parent | 265aaf936458d4732e0fc10ba558a36129239a9a (diff) | |
| download | dmvpn-tools-866b4ac69bca08d8b1fd0f1970933ce6e240d29b.tar.bz2 dmvpn-tools-866b4ac69bca08d8b1fd0f1970933ce6e240d29b.tar.xz | |
setup-dmvpn: configure spoke firewall if active
Diffstat (limited to 'dmvpn.awall')
| -rw-r--r-- | dmvpn.awall | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/dmvpn.awall b/dmvpn.awall new file mode 100644 index 0000000..339e571 --- /dev/null +++ b/dmvpn.awall @@ -0,0 +1,24 @@ +{ + "description": "DMVPN router", + "zone": { + "dmvpn-ipsec": { "addr": "0.0.0.0/0" }, + "dmvpn-gre": { "addr": "0.0.0.0/0", "ipsec": true }, + "dmvpn-bgp": { + "iface": "$dmvpn_gre_iface", "addr": "0.0.0.0/0" + }, + "dmvpn": { "iface": "$dmvpn_gre_iface", "route-back": true } + }, + "filter": [ + { + "in": "_fw", + "service": [ "dns", "http", "https", "ldap", "ldaps" ] + }, + { "in": "dmvpn-ipsec", "out": "_fw", "service": "ipsec" }, + { "in": "_fw", "out": "dmvpn-ipsec", "service": "ipsec" }, + { "in": "dmvpn-gre", "out": "_fw", "service": "gre" }, + { "in": "_fw", "out": "dmvpn-gre", "service": "gre" }, + { "in": "dmvpn-bgp", "out": "_fw", "service": "bgp" }, + { "in": "_fw", "out": "dmvpn-bgp", "service": "bgp" }, + { "in": "dmvpn", "out": "dmvpn" } + ] +} |