Skip to content
Snippets Groups Projects

[nftables] Install and enable nftables on routers

Merged Benjamin Graillot requested to merge firewall into newinfra
2 files
+ 18
2
Compare changes
  • Side-by-side
  • Inline
Files
2
+ 3
2
@@ -4,13 +4,14 @@
- hosts: crans_routeurs
roles:
- sysctl-forwarding
- nftables
- hosts: routeur-sam.adm.crans.org
roles:
- arp-proxy
# Deploy firewall
- hosts: crans_routeurs,gulp.adm.crans.org
- hosts: crans_routeurs
vars:
re2o:
server: re2o.adm.crans.org
@@ -20,7 +21,7 @@
- firewall
# Deploy BGP server configuration on IPv4 routers
- hosts: crans_routeurs,gulp.adm.crans.org
- hosts: crans_routeurs
vars:
zebra:
password: "{{ vault_zebra_password }}"
Loading