2019-10-04 16:55:17 -07:00
|
|
|
---
|
2019-10-12 23:44:52 -07:00
|
|
|
# Credentials
|
|
|
|
credentials:
|
|
|
|
- credential: &credential1
|
2020-02-15 00:21:01 -07:00
|
|
|
username: user1
|
|
|
|
password: secret1
|
2019-10-12 23:44:52 -07:00
|
|
|
- credential: &credential2
|
2020-02-15 00:21:01 -07:00
|
|
|
username: user2
|
|
|
|
password: secret2
|
2019-10-04 16:55:17 -07:00
|
|
|
|
2019-10-12 23:44:52 -07:00
|
|
|
# SSH Proxy/Tunnel Servers
|
|
|
|
proxies:
|
|
|
|
- proxy: &proxy1
|
2020-02-15 00:21:01 -07:00
|
|
|
name: server01
|
|
|
|
address: 10.11.6.204
|
|
|
|
port: 22
|
|
|
|
credential: *credential1
|
|
|
|
nos: linux_ssh
|
2019-10-04 16:55:17 -07:00
|
|
|
|
2019-10-12 23:44:52 -07:00
|
|
|
# Networks
|
|
|
|
networks:
|
|
|
|
- network: &net_primary
|
2020-02-15 00:21:01 -07:00
|
|
|
name: primary
|
|
|
|
display_name: Main Network
|
2019-10-12 23:44:52 -07:00
|
|
|
- network: &net_secondary
|
2020-02-15 00:21:01 -07:00
|
|
|
name: secondary
|
|
|
|
display_name: That Other Network
|
2019-10-04 16:55:17 -07:00
|
|
|
|
2019-10-12 23:44:52 -07:00
|
|
|
# VRFs
|
|
|
|
vrfs:
|
|
|
|
- &vrf_default
|
2020-02-15 00:21:01 -07:00
|
|
|
name: default
|
2019-10-12 23:44:52 -07:00
|
|
|
display_name: Global
|
2020-02-16 19:13:58 -07:00
|
|
|
ipv4:
|
|
|
|
access_list: &vrf_default_ipv4_acl
|
|
|
|
- network: 10.0.0.0/8
|
|
|
|
action: deny
|
|
|
|
- network: 192.168.0.0/16
|
|
|
|
action: deny
|
|
|
|
- network: 172.16.0.0/12
|
|
|
|
action: deny
|
|
|
|
- network: 0.0.0.0/0
|
|
|
|
action: permit
|
|
|
|
ge: 8
|
|
|
|
le: 24
|
|
|
|
ipv6:
|
|
|
|
access_list: &vrf_default_ipv6_acl
|
|
|
|
- network: ::/0
|
|
|
|
action: permit
|
|
|
|
ge: 32
|
|
|
|
le: 64
|
2019-10-12 23:44:52 -07:00
|
|
|
- &vrf_customer_a
|
|
|
|
name: customer_a
|
|
|
|
display_name: Customer A
|
2020-02-16 19:13:58 -07:00
|
|
|
ipv4:
|
|
|
|
access_list: &vrf_customer_a_ipv4_acl
|
|
|
|
- network: 192.0.2.0/24
|
|
|
|
action: deny
|
|
|
|
- network: 10.0.0.0/8
|
|
|
|
action: permit
|
2019-10-12 23:44:52 -07:00
|
|
|
ipv6: null
|
|
|
|
|
|
|
|
# Routers
|
|
|
|
routers:
|
2020-02-16 19:13:58 -07:00
|
|
|
- name: sfo_router01
|
2019-10-12 23:44:52 -07:00
|
|
|
address: 10.0.0.1
|
|
|
|
network: *net_primary
|
|
|
|
credential: *credential1
|
2020-02-16 19:13:58 -07:00
|
|
|
display_name: San Francisco, CA
|
2019-10-12 23:44:52 -07:00
|
|
|
port: 22
|
|
|
|
nos: cisco_ios
|
|
|
|
vrfs:
|
|
|
|
- <<: *vrf_default
|
|
|
|
ipv4:
|
|
|
|
source_address: 192.0.2.1
|
2020-02-16 19:13:58 -07:00
|
|
|
access_list: *vrf_default_ipv4_acl
|
2019-10-12 23:44:52 -07:00
|
|
|
ipv6:
|
2020-02-16 19:13:58 -07:00
|
|
|
source_address: 2001:db8::1
|
|
|
|
access_list: *vrf_default_ipv6_acl
|
2019-10-12 23:44:52 -07:00
|
|
|
- <<: *vrf_customer_a
|
|
|
|
ipv4:
|
2020-02-16 19:13:58 -07:00
|
|
|
access_list: *vrf_customer_a_ipv4_acl
|
2019-10-12 23:44:52 -07:00
|
|
|
source_address: 192.168.1.1
|
|
|
|
proxy: null
|
2020-02-16 19:13:58 -07:00
|
|
|
- name: atl_router01
|
2019-10-12 23:44:52 -07:00
|
|
|
address: 10.0.0.2
|
|
|
|
network: *net_secondary
|
|
|
|
credential: *credential2
|
|
|
|
display_name: Atlanta, GA
|
|
|
|
port: 22
|
|
|
|
nos: juniper
|
|
|
|
vrfs:
|
|
|
|
- <<: *vrf_default
|
|
|
|
ipv4:
|
2020-02-16 19:13:58 -07:00
|
|
|
source_address: 192.0.2.2
|
2019-10-12 23:44:52 -07:00
|
|
|
ipv6:
|
2020-02-16 19:13:58 -07:00
|
|
|
source_address: 2001:db8::2
|
2020-02-15 00:21:01 -07:00
|
|
|
proxy: *proxy1
|