fix rule

[mirror/dsa-puppet.git] / modules / roles / manifests / bgp.pp

diff --git a/modules/roles/manifests/bgp.pp b/modules/roles/manifests/bgp.pp
index d3fbb39..315054e 100644 (file)
--- a/modules/roles/manifests/bgp.pp
+++ b/modules/roles/manifests/bgp.pp
@@ -11,6 +11,6 @@ class roles::bgp {
        @ferm::rule { 'dsa-bgp':
                description => 'Allow BGP from peers',
                domain      => '(ip ip6)',
-               rule        => '&SERVICE_RANGE(tcp, ssh, $bgp_peers)'
+               rule        => "&SERVICE_RANGE(tcp, bgp, ($bgp_peers))"
        }
 }