crans/scripts
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Support des switchs non adm par switch2.py (desactivation radius, mise en place de la bonne ip)

Browse source
This commit is contained in:
Gabriel Detraz 2015-09-16 17:09:32 +02:00
parent e7aa590314
commit 4e10e930cd
2 changed files with 47 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

8
gestion/gen_confs/switch_conf.tpl
View file

@ -28,7 +28,7 @@ console inactivity-timer 30
logging {{ s }}
{%- endfor %}
;--- IP du switch ---
ip default-gateway 10.231.136.4
ip default-gateway {{ gateway }}
{%- for vlan in vlans %}
vlan {{ vlan.id }}
name "{{ vlan.name|capitalize }}"
@ -54,12 +54,13 @@ no web-management
aaa authentication ssh login public-key none
aaa authentication ssh enable public-key none
ip ssh
ip authorized-managers 10.231.136.0 255.255.255.0
ip authorized-managers {{ network_id }} {{ subnet }}
ip ssh filetransfer
;--- Protection contre les boucles ---
loop-protect disable-timer 30
loop-protect transmit-interval 3
loop-protect {{ non_trusted }}
{%- if not public %}
;--- Serveurs radius ---
radius-server dead-time 2
radius-server key {{ radius_key }}
@ -68,6 +69,7 @@ radius-server host {{ s }}
{%- endfor %}
;--- Filtrage mac ---
aaa port-access mac-based addr-format multi-colon
{%- endif %}
;--- Bricoles ---
no cdp run
no stack
@ -86,7 +88,7 @@ no ipv6 ra-guard ports {{ trusted }}
{% endif %}
;--- Config des prises ---
{%- for port in ports %}
{%- if port.radius_auth() %}
{%- if port.radius_auth() and not public %}
aaa port-access mac-based {{ port|int }}
aaa port-access mac-based {{ port|int }} addr-limit {{ port.num_mac() }}
aaa port-access mac-based {{ port|int }} logoff-period 3600