feat(vault01): add admin ipv4

This commit is contained in:
catvayor 2025-04-05 18:37:34 +02:00
parent 08e4576f06
commit ca9d1b1b1d
Signed by: lbailly
GPG key ID: CE3E645251AC63F3

View file

@ -108,7 +108,10 @@ let
vlan-admin = { vlan-admin = {
Id = 3000; Id = 3000;
address = [ "fd26:baf9:d250:8000::1/64" ]; address = [
"fd26:baf9:d250:8000::1/64"
"192.168.129.1/24"
];
}; };
vlan-admin-ap = { vlan-admin-ap = {
@ -372,6 +375,9 @@ in
ip6 daddr { ip6 daddr {
fd26:baf9:d250::/48, fd26:baf9:d250::/48,
} jump forward_reject; } jump forward_reject;
ip daddr {
192.168.129.0/24
} jump forward_reject;
# These are being deployed, and so are not trusted # These are being deployed, and so are not trusted
ip saddr 10.0.255.0/24 jump forward_reject; ip saddr 10.0.255.0/24 jump forward_reject;