aboutsummaryrefslogtreecommitdiffstats
path: root/heat/vIPsec/vIPsec/base_vipsec.yaml
diff options
context:
space:
mode:
Diffstat (limited to 'heat/vIPsec/vIPsec/base_vipsec.yaml')
-rw-r--r--heat/vIPsec/vIPsec/base_vipsec.yaml70
1 files changed, 35 insertions, 35 deletions
diff --git a/heat/vIPsec/vIPsec/base_vipsec.yaml b/heat/vIPsec/vIPsec/base_vipsec.yaml
index d64f30d3..f59bdc18 100644
--- a/heat/vIPsec/vIPsec/base_vipsec.yaml
+++ b/heat/vIPsec/vIPsec/base_vipsec.yaml
@@ -446,15 +446,15 @@ resources:
user_data:
str_replace:
params:
- __dcae_collector_ip__ : { get_param: dcae_collector_ip }
- __dcae_collector_port__ : { get_param: dcae_collector_port }
- __demo_artifacts_version__ : { get_param: demo_artifacts_version }
- __install_script_version__ : { get_param: install_script_version }
- __vipsec_A_private_ip_0__ : { get_param: vipsec_A_private_ip_0 }
- __vipsec_A_private_ip_1__ : { get_param: vipsec_A_private_ip_1 }
- __protected_clientA_private_net_cidr__ : { get_param: protected_clientA_private_net_cidr }
- __onap_private_net_cidr__ : { get_param: onap_private_net_cidr }
- __cloud_env__ : { get_param: cloud_env }
+ __dcae_collector_ip__: { get_param: dcae_collector_ip }
+ __dcae_collector_port__: { get_param: dcae_collector_port }
+ __demo_artifacts_version__: { get_param: demo_artifacts_version }
+ __install_script_version__: { get_param: install_script_version }
+ __vipsec_A_private_ip_0__: { get_param: vipsec_A_private_ip_0 }
+ __vipsec_A_private_ip_1__: { get_param: vipsec_A_private_ip_1 }
+ __protected_clientA_private_net_cidr__: { get_param: protected_clientA_private_net_cidr }
+ __onap_private_net_cidr__: { get_param: onap_private_net_cidr }
+ __cloud_env__: { get_param: cloud_env }
__nexus_artifact_repo__: { get_param: nexus_artifact_repo }
__vpp_config__: { get_param: vpp_config }
__ipsec_config__: { get_param: ipsec_config }
@@ -543,7 +543,7 @@ resources:
NEWFILE
cat > __ipsec_config__<< NEWFILE
-
+
set interface state __input_interface__ up
set interface state __output_interface__ up
@@ -567,7 +567,7 @@ resources:
ipsec policy add spd 1 inbound priority 100 action protect sa 2 remote-ip-range 004.0.0.0-004.0.0.0
ipsec policy add spd 1 inbound priority 90 protocol 50 action bypass
ipsec policy add spd 1 outbound priority 90 protocol 50 action bypass
-
+
NEWFILE
vpp -c __vpp_config__
@@ -588,15 +588,15 @@ resources:
user_data:
str_replace:
params:
- __dcae_collector_ip__ : { get_param: dcae_collector_ip }
- __dcae_collector_port__ : { get_param: dcae_collector_port }
- __demo_artifacts_version__ : { get_param: demo_artifacts_version }
- __install_script_version__ : { get_param: install_script_version }
- __vipsec_A_private_ip_0__ : { get_param: vipsec_B_private_ip_0 }
- __vipsec_A_private_ip_1__ : { get_param: vipsec_B_private_ip_1 }
- __protected_clientA_private_net_cidr__ : { get_param: protected_clientB_private_net_cidr }
- __onap_private_net_cidr__ : { get_param: onap_private_net_cidr }
- __cloud_env__ : { get_param: cloud_env }
+ __dcae_collector_ip__: { get_param: dcae_collector_ip }
+ __dcae_collector_port__: { get_param: dcae_collector_port }
+ __demo_artifacts_version__: { get_param: demo_artifacts_version }
+ __install_script_version__: { get_param: install_script_version }
+ __vipsec_A_private_ip_0__: { get_param: vipsec_B_private_ip_0 }
+ __vipsec_A_private_ip_1__: { get_param: vipsec_B_private_ip_1 }
+ __protected_clientA_private_net_cidr__: { get_param: protected_clientB_private_net_cidr }
+ __onap_private_net_cidr__: { get_param: onap_private_net_cidr }
+ __cloud_env__: { get_param: cloud_env }
__nexus_artifact_repo__: { get_param: nexus_artifact_repo }
__vpp_config__: { get_param: vpp_config }
__ipsec_config__: { get_param: ipsec_config }
@@ -685,7 +685,7 @@ resources:
NEWFILE
cat > __ipsec_config__<< NEWFILE
-
+
set interface state __input_interface__ up
set interface state __output_interface__ up
@@ -709,7 +709,7 @@ resources:
ipsec policy add spd 1 inbound priority 100 action protect sa 2 remote-ip-range 004.0.0.0-004.0.0.0
ipsec policy add spd 1 inbound priority 90 protocol 50 action bypass
ipsec policy add spd 1 outbound priority 90 protocol 50 action bypass
-
+
NEWFILE
vpp -c __vpp_config__
@@ -759,13 +759,13 @@ resources:
__ipsec_ipaddr__: { get_param: vipsec_A_private_ip_0 }
__protected_clientB_net_cidr__: { get_param: protected_clientB_private_net_cidr }
__sink_ipaddr__: { get_param: vsn_private_ip_0 }
- __demo_artifacts_version__ : { get_param: demo_artifacts_version }
- __install_script_version__ : { get_param: install_script_version }
- __vpg_private_ip_0__ : { get_param: vpg_private_ip_0 }
- __vpg_private_ip_1__ : { get_param: vpg_private_ip_1 }
- __protected_clientA_net_cidr__ : { get_param: protected_clientA_private_net_cidr }
- __onap_private_net_cidr__ : { get_param: onap_private_net_cidr }
- __cloud_env__ : { get_param: cloud_env }
+ __demo_artifacts_version__: { get_param: demo_artifacts_version }
+ __install_script_version__: { get_param: install_script_version }
+ __vpg_private_ip_0__: { get_param: vpg_private_ip_0 }
+ __vpg_private_ip_1__: { get_param: vpg_private_ip_1 }
+ __protected_clientA_net_cidr__: { get_param: protected_clientA_private_net_cidr }
+ __onap_private_net_cidr__: { get_param: onap_private_net_cidr }
+ __cloud_env__: { get_param: cloud_env }
__nexus_artifact_repo__: { get_param: nexus_artifact_repo }
template: |
#!/bin/bash
@@ -837,12 +837,12 @@ resources:
params:
__protected_net_gw__: { get_param: vipsec_B_private_ip_0 }
__protected_net_A__: { get_param: protected_clientA_private_net_cidr }
- __install_script_version__ : { get_param: install_script_version }
- __vsn_private_ip_0__ : { get_param: vsn_private_ip_0 }
- __vsn_private_ip_1__ : { get_param: vsn_private_ip_1 }
- __protected_clientB_private_net_cidr__ : { get_param: protected_clientB_private_net_cidr }
- __onap_private_net_cidr__ : { get_param: onap_private_net_cidr }
- __cloud_env__ : { get_param: cloud_env }
+ __install_script_version__: { get_param: install_script_version }
+ __vsn_private_ip_0__: { get_param: vsn_private_ip_0 }
+ __vsn_private_ip_1__: { get_param: vsn_private_ip_1 }
+ __protected_clientB_private_net_cidr__: { get_param: protected_clientB_private_net_cidr }
+ __onap_private_net_cidr__: { get_param: onap_private_net_cidr }
+ __cloud_env__: { get_param: cloud_env }
__nexus_artifact_repo__: { get_param: nexus_artifact_repo }
template: |
#!/bin/bash