From: Peter Palfrader <peter@palfrader.org>
Date: Sat, 13 Apr 2013 12:39:40 +0000 (+0200)
Subject: Allow all from vlan20
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=a15dccb8b9b187db60127c2e748f0d618760d5a1;p=mirror%2Fdsa-puppet.git

Allow all from vlan20
---

diff --git a/modules/ferm/manifests/per-host.pp b/modules/ferm/manifests/per-host.pp
index bb40a0a16..575050f8c 100644
--- a/modules/ferm/manifests/per-host.pp
+++ b/modules/ferm/manifests/per-host.pp
@@ -307,4 +307,12 @@ REJECT reject-with icmp-admin-prohibited
 		}
 		default: {}
 	}
+	case $::hostname {
+		bm-bl1,bm-bl2,bm-bl3,bm-bl4,bm-bl5,bm-bl6,bm-bl7,bm-bl8,bm-bl9,bm-bl10,bm-bl11,bm-bl12,bm-bl13,bm-bl14: {
+			@ferm::rule { 'dsa-hwnet-vlan20':
+				rule            => 'interface vlan20 jump ACCEPT',
+			}
+		}
+		default: {}
+	}
 }