T9393: new rolesmain

1 files changed, 43 insertions, 0 deletions

diff --git a/tests/render/cases/vrf_firewall/docs_four_vrfs/vars.yml b/tests/render/cases/vrf_firewall/docs_four_vrfs/vars.yml
new file mode 100644
index 0000000..38626df
--- /dev/null
+++ b/tests/render/cases/vrf_firewall/docs_four_vrfs/vars.yml
@@ -0,0 +1,43 @@
+---
+# docs.vyos.io/en/1.5/configexamples/fwall-and-vrf.html
+# Interface addresses and the PPPoE interface itself are outside this role
+# (base role / a later PPPoE role); everything else is from the page.
+vrf_firewall_vrfs:
+  - name: MGMT
+    table: 102
+    interfaces: [eth1]
+    routes:
+      - {dest: 10.150.150.0/24, interface: eth2.150, vrf: LAN}
+      - {dest: 10.160.160.0/24, interface: eth2.160, vrf: LAN}
+      - {dest: 172.16.20.0/24, interface: eth2.3500, vrf: PROD}
+  - name: WAN
+    table: 101
+    interfaces: [pppoe0]
+    routes:
+      - {dest: 10.150.150.0/24, interface: eth2.150, vrf: LAN}
+      - {dest: 10.160.160.0/24, interface: eth2.160, vrf: LAN}
+      - {dest: 172.16.20.0/24, interface: eth2.3500, vrf: PROD}
+  - name: LAN
+    table: 103
+    interfaces: [eth2.150, eth2.160]
+    routes:
+      - {dest: 0.0.0.0/0, interface: pppoe0, vrf: WAN}
+      - {dest: 10.100.100.0/24, interface: eth1, vrf: MGMT}
+      - {dest: 172.16.20.0/24, interface: eth2.3500, vrf: PROD}
+  - name: PROD
+    table: 104
+    interfaces: [eth2.3500]
+    routes:
+      - {dest: 0.0.0.0/0, interface: pppoe0, vrf: WAN}
+      - {dest: 10.100.100.0/24, interface: eth1, vrf: MGMT}
+      - {dest: 10.150.150.0/24, interface: eth2.150, vrf: LAN}
+      - {dest: 10.160.160.0/24, interface: eth2.160, vrf: LAN}
+
+vrf_firewall_forward_rules:
+  - {number: 10, description: MGMT - Allow to LAN and PROD, inbound_interface: MGMT, outbound_interface: eth2*}
+  - {number: 99, action: drop, description: MGMT - Drop all going to mgmt, outbound_interface: eth1}
+  - {number: 120, description: LAN - Allow to PROD, inbound_interface: LAN, outbound_interface: eth2.3500}
+  - {number: 130, description: LAN - Allow internet, inbound_interface: LAN, outbound_interface: pppoe0}
+
+vrf_firewall_input_rules:
+  - {number: 10, description: MGMT - Allow input, inbound_interface: MGMT}