summaryrefslogtreecommitdiff
path: root/manifests
diff options
context:
space:
mode:
authormh <mh@immerda.ch>2013-01-03 18:31:05 +0100
committermh <mh@immerda.ch>2013-01-03 18:31:05 +0100
commit5ce46c56e0ed95e03c3322f6eba53488a0615207 (patch)
treeee2226bad8fb7110d0259b021710cafcaf5cb8fe /manifests
parent19faa5112c736788ac0ad73eaad8009267be0ad0 (diff)
automatically configure a subnet for all listening ips
Diffstat (limited to 'manifests')
-rw-r--r--manifests/base.pp3
-rw-r--r--manifests/init.pp1
2 files changed, 3 insertions, 1 deletions
diff --git a/manifests/base.pp b/manifests/base.pp
index 982b3f1..ce0f255 100644
--- a/manifests/base.pp
+++ b/manifests/base.pp
@@ -45,7 +45,8 @@ class strongswan::base {
# export
@@strongswan::remote_host{$::fqdn:
right_cert_content => $::strongswan_cert,
- right_ip_address => $default_left_ip_address,
+ right_ip_address => $strongswan::default_left_ip_address,
+ right_subnet => $strongswan::default_left_subnet,
tag => $::fqdn
}
#Strongswan::Remote_Host<<| tag == 'auto' and tag != $::fqdn |>>
diff --git a/manifests/init.pp b/manifests/init.pp
index 06d5250..5458ed8 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -5,6 +5,7 @@ class strongswan(
$monkeysphere_publish_key = false,
$ipsec_nat = false,
$default_left_ip_address = $::ipaddress,
+ $default_left_subnet = reject(split($::strongswan_ips,','),$::ipaddress),
$additional_options = '',
$auto_remote_host = false
) {