rc/network
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

access: enable DHCP snooping on D-Link switches

Browse source 
Use the ifaces_dhcp custom context property to select interfaces where
we should expect DHCP replies.
This commit is contained in:
Timotej Lazar 2024-11-09 19:56:31 +01:00
parent bbf0798d5c
commit de05fd236b
2 changed files with 13 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

12
roles/access/templates/config-d-link.j2
View file

@ -51,6 +51,12 @@ interface {{ iface.name }}
{% set mgmt.gw = iface.custom_fields.gateway.address %}
{% endif %}
{% endif %}
{% if iface.name in ifaces_dhcp | default([]) %}
ip dhcp snooping trust
{% else %}
no ip dhcp snooping trust
{% endif %}
{% endfor %}
{%- if mgmt.ip %}
@ -83,6 +89,12 @@ sntp server {{ address }}
ntp access-group default nomodify noquery
{% if ifaces_dhcp | default(false) %}
ip dhcp snooping
{% else %}
no ip dhcp snooping
{% endif %}
{% if mgmt.gw %}
ip route 0.0.0.0 0.0.0.0 {{ mgmt.gw | ipaddr('address') }} primary
{% endif %}