Puppet Class: ferm::ipsec_allow
- Defined in:
- modules/ferm/manifests/ipsec_allow.pp
Overview
Class ferm::ipsec_allow
Installs the rules needed to allow the all IPsec traffic
5 6 7 8 9 10 11 12 13 14 15 16 17 18 |
# File 'modules/ferm/manifests/ipsec_allow.pp', line 5
class ferm::ipsec_allow {
#firewall allow ipsec esp
ferm::rule { 'ferm-ipsec-esp':
rule => 'proto esp { saddr $DOMAIN_NETWORKS ACCEPT; }',
}
#firewall allow ipsec ike udp 500
ferm::service { 'ferm-ipsec-ike':
proto => 'udp',
port => '500',
srange => '$DOMAIN_NETWORKS',
}
}
|