rc/network
2
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

firewall: don’t import or advertise subnets for inside networks

Browse source 
This is part two to commit 3b3e759c.
This commit is contained in:
Timotej Lazar 2025-03-26 10:14:15 +01:00
parent cafa938da3
commit f9f71bb337
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
roles/firewall/templates/frr.conf.j2
View file

@ -75,9 +75,9 @@ ip prefix-list fabric permit 10.34.0.0/24 ge 32
{% for prefix in vrf_prefixes | rejectattr('vrf.name', '==', 'outside') {% for prefix in vrf_prefixes | rejectattr('vrf.name', '==', 'outside')
| sort(attribute='family.value') %} | sort(attribute='family.value') %}
{% if prefix.family.value == 4 %} {% if prefix.family.value == 4 %}
ip prefix-list office permit {{ prefix.prefix }} ge {{ prefix.prefix | ipaddr('prefix') }} ip prefix-list office permit {{ prefix.prefix }}
{% elif prefix.family.value == 6 %} {% elif prefix.family.value == 6 %}
ipv6 prefix-list office permit {{ prefix.prefix }} ge {{ prefix.prefix | ipaddr('prefix') }} ipv6 prefix-list office permit {{ prefix.prefix }}
{% endif %} {% endif %}
{% endfor %} {% endfor %}