From a15dccb8b9b187db60127c2e748f0d618760d5a1 Mon Sep 17 00:00:00 2001
From: Peter Palfrader <peter@palfrader.org>
Date: Sat, 13 Apr 2013 14:39:40 +0200
Subject: [PATCH] Allow all from vlan20

---
 modules/ferm/manifests/per-host.pp | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/modules/ferm/manifests/per-host.pp b/modules/ferm/manifests/per-host.pp
index bb40a0a16..575050f8c 100644
--- a/modules/ferm/manifests/per-host.pp
+++ b/modules/ferm/manifests/per-host.pp
@@ -307,4 +307,12 @@ REJECT reject-with icmp-admin-prohibited
 		}
 		default: {}
 	}
+	case $::hostname {
+		bm-bl1,bm-bl2,bm-bl3,bm-bl4,bm-bl5,bm-bl6,bm-bl7,bm-bl8,bm-bl9,bm-bl10,bm-bl11,bm-bl12,bm-bl13,bm-bl14: {
+			@ferm::rule { 'dsa-hwnet-vlan20':
+				rule            => 'interface vlan20 jump ACCEPT',
+			}
+		}
+		default: {}
+	}
 }
-- 
2.20.1