[vagrant] Don't block eth0 if eth1 is configured

Eth0 is vagrant's main interface to access the box

1 files changed, 8 insertions, 4 deletions

diff --git a/puppet/modules/site_config/manifests/vagrant.pp b/puppet/modules/site_config/manifests/vagrant.pp
index 23ca4de1..1682de8b 100644
--- a/puppet/modules/site_config/manifests/vagrant.pp
+++ b/puppet/modules/site_config/manifests/vagrant.pp
@@ -2,10 +2,14 @@
 class site_config::vagrant {
 
   include site_shorewall::defaults
-  # eth0 on vagrant nodes is the uplink
-  shorewall::interface { 'eth0':
-    zone    => 'net',
-    options => 'tcpflags,blacklist,nosmurfs';
+
+  if ( $::site_config::params::interface == 'eth1' ) {
+    # Don't block eth0 even if eth1 is configured, because
+    # it's vagrant's main interface to access the box
+    shorewall::interface { 'eth0':
+      zone    => 'net',
+      options => 'tcpflags,blacklist,nosmurfs';
+    }
   }
 
 }