rc/network
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

exit: add routes for VPN IPv4 addresses to outside and default VRFs

Browse source 
Like commit 7b5980f but for VPN addresses.
This commit is contained in:
Timotej Lazar 2024-09-16 17:19:25 +02:00
parent 6c8309f1c9
commit 70c909e134
2 changed files with 15 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

12
roles/firewall/templates/frr.conf.j2
View file

@ -139,11 +139,13 @@ route-map outside->default permit 11
# Send inside and NAT addresses to outside peers so inbound packets go through the firewall.
route-map default->outside permit 1
match interface lo
route-map default->outside permit 10
match ip address prefix-list office
route-map default->outside permit 11
match ipv6 address prefix-list office
route-map default->outside permit 20
match ip address prefix-list office
route-map default->outside permit 21
match ipv6 address prefix-list office
route-map default->outside permit 30
match ip address prefix-list nat
route-map default->outside permit 31
route-map default->outside permit 40
match ip address prefix-list vpn
route-map default->outside permit 41
match ipv6 address prefix-list vpn