mirror of
https://github.com/checktheroads/hyperglass
synced 2024-05-11 05:55:08 +00:00
99 lines
2.4 KiB
YAML
99 lines
2.4 KiB
YAML
---
|
|
# Credentials
|
|
credentials:
|
|
- credential: &credential1
|
|
username: user1
|
|
password: secret1
|
|
- credential: &credential2
|
|
username: user2
|
|
password: secret2
|
|
|
|
# SSH Proxy/Tunnel Servers
|
|
proxies:
|
|
- proxy: &proxy1
|
|
name: server01
|
|
address: 10.11.6.204
|
|
port: 22
|
|
credential: *credential1
|
|
nos: linux_ssh
|
|
|
|
# Networks
|
|
networks:
|
|
- network: &net_primary
|
|
name: primary
|
|
display_name: Main Network
|
|
- network: &net_secondary
|
|
name: secondary
|
|
display_name: That Other Network
|
|
|
|
# VRFs
|
|
vrfs:
|
|
- &vrf_default
|
|
name: default
|
|
display_name: Global
|
|
ipv4:
|
|
access_list: &vrf_default_ipv4_acl
|
|
- network: 10.0.0.0/8
|
|
action: deny
|
|
- network: 192.168.0.0/16
|
|
action: deny
|
|
- network: 172.16.0.0/12
|
|
action: deny
|
|
- network: 0.0.0.0/0
|
|
action: permit
|
|
ge: 8
|
|
le: 24
|
|
ipv6:
|
|
access_list: &vrf_default_ipv6_acl
|
|
- network: ::/0
|
|
action: permit
|
|
ge: 32
|
|
le: 64
|
|
- &vrf_customer_a
|
|
name: customer_a
|
|
display_name: Customer A
|
|
ipv4:
|
|
access_list: &vrf_customer_a_ipv4_acl
|
|
- network: 192.0.2.0/24
|
|
action: deny
|
|
- network: 10.0.0.0/8
|
|
action: permit
|
|
ipv6: null
|
|
|
|
# Routers
|
|
routers:
|
|
- name: sfo_router01
|
|
address: 10.0.0.1
|
|
network: *net_primary
|
|
credential: *credential1
|
|
display_name: San Francisco, CA
|
|
port: 22
|
|
nos: cisco_ios
|
|
vrfs:
|
|
- <<: *vrf_default
|
|
ipv4:
|
|
source_address: 192.0.2.1
|
|
access_list: *vrf_default_ipv4_acl
|
|
ipv6:
|
|
source_address: 2001:db8::1
|
|
access_list: *vrf_default_ipv6_acl
|
|
- <<: *vrf_customer_a
|
|
ipv4:
|
|
access_list: *vrf_customer_a_ipv4_acl
|
|
source_address: 192.168.1.1
|
|
proxy: null
|
|
- name: atl_router01
|
|
address: 10.0.0.2
|
|
network: *net_secondary
|
|
credential: *credential2
|
|
display_name: Atlanta, GA
|
|
port: 22
|
|
nos: juniper
|
|
vrfs:
|
|
- <<: *vrf_default
|
|
ipv4:
|
|
source_address: 192.0.2.2
|
|
ipv6:
|
|
source_address: 2001:db8::2
|
|
proxy: *proxy1
|