diff --git a/files/ospfd.conf b/files/ospfd.conf index dfe6c0f..c7c37b5 100644 --- a/files/ospfd.conf +++ b/files/ospfd.conf @@ -31,4 +31,7 @@ area 0.0.0.0 { interface wg2 { type p2p } + interface wg3 { + type p2p + } } diff --git a/files/pf.wg3.conf b/files/pf.wg3.conf new file mode 100644 index 0000000..6d88ee5 --- /dev/null +++ b/files/pf.wg3.conf @@ -0,0 +1,11 @@ +# allow incoming udp packets for wg3 +pass in proto udp from any to self port 51823 + +# allow ospf on wg3 +pass on wg3 proto ospf + +# allow prometheus on wg3 +pass on wg3 proto tcp from any to self port 9100 + +# allow outgoing snmp on wg3 +pass out on wg3 proto udp from self to any port snmp diff --git a/templates/hostname.wg3 b/templates/hostname.wg3 new file mode 100644 index 0000000..d54eb01 --- /dev/null +++ b/templates/hostname.wg3 @@ -0,0 +1,5 @@ +inet 10.86.254.0/31 +mtu 1350 +wgport 51823 +wgkey {{ lookup('passwordstore', 'wg/wg3/eae-adp-jump01') }} +wgpeer {{ lookup('passwordstore', 'wg/wg3/sax-rgs-gw-core01.pub') }} wgpsk {{ lookup('passwordstore', 'wg/wg3/psk') }} wgaip 0.0.0.0/0