multivendor_module_ansible/test_config_firewall_1.yml at master · NETMVAS/multivendor_module_ansible · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
- name: "change_hostname"
  hosts: router_local
  gather_facts: false
  ignore_errors: true
  roles:
      - role: config_ip_firewall
        dst_address: 2.2.2.2
        dst_port: 22
        src_address: 3.3.3.3
        src_port: 22
        chain: input
        firewall_action: drop
        protocol: tcp
        submenu: filter
        action: add

      - role: config_ip_firewall
        ip_firewall_filter: 9
        submenu: filter
        action: disable

      - role: config_ip_firewall
        ip_firewall_filter: 9
        submenu: filter
        action: enable

      - role: config_ip_firewall
        ip_firewall_filter: 9
        dst_address: 4.4.4.4
        dst_port: 22
        src_address: 3.3.3.3
        src_port: 22
        chain: input
        firewall_action: drop
        protocol: tcp
        submenu: filter
        action: set

      - role: config_ip_firewall
        ip_firewall_filter: 9
        submenu: filter
        action: remove

      - role: config_ip_firewall
        dst_address: 2.2.2.2
        dst_port: 22
        src_address: 3.3.3.3
        src_port: 22
        chain: src-nat
        firewall_action: accept
        protocol: tcp
        out_interface: ether4
        submenu: nat
        action: add

      - role: config_ip_firewall
        ip_firewall_nat: 2
        submenu: nat
        action: disable

      - role: config_ip_firewall
        ip_firewall_nat: 2
        submenu: nat
        action: enable

      - role: config_ip_firewall
        ip_firewall_nat: 2
        dst_address: 4.4.4.4
        dst_port: 22
        src_address: 3.3.3.3
        src_port: 22
        chain: src-nat
        firewall_action: accept
        protocol: tcp
        out_interface: ether4
        submenu: nat
        action: set

      - role: config_ip_firewall
        ip_firewall_nat: 2
        submenu: nat
        action: remove