CASMNET-2158 add dhcp hmn acl (#435)

add dhcp hmn acl Co-authored-by: lukebates123 <[email protected]>
Cray-HPE · Sep 12, 2023 · e67e064 · e67e064
1 parent db5dec7
commit e67e064
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/network_modeling/configs/templates/1.5/aruba/common/acl.j2 b/network_modeling/configs/templates/1.5/aruba/common/acl.j2
@@ -55,6 +55,9 @@ access-list ip nmn-hmn
 {% set sequence = sequence+10 %}    {{ sequence }} permit udp {{ variables.NMNLB_DHCP }} range 67 68 any
 {% set sequence = sequence+10 %}    {{ sequence }} permit udp any range 67 68 {{ variables.NMNLB_DHCP }}
 {% set sequence = sequence+10 %}    {{ sequence }} deny any any {{ variables.NMNLB_DHCP }}
+{% set sequence = sequence+10 %}    {{ sequence }} permit udp {{ variables.HMNLB_DHCP }} range 67 68 any
+{% set sequence = sequence+10 %}    {{ sequence }} permit udp any range 67 68 {{ variables.HMNLB_DHCP }}
+{% set sequence = sequence+10 %}    {{ sequence }} deny any any {{ variables.HMNLB_DHCP }}
 {% set sequence = sequence+10 %}    {{ sequence }} permit any any any
 access-list ip cmn-can
 {%- set sequence = 0 %}

diff --git a/network_modeling/configs/templates/1.5/dellmellanox/common/acl-mellanox.j2 b/network_modeling/configs/templates/1.5/dellmellanox/common/acl-mellanox.j2
@@ -29,6 +29,10 @@ ipv4 access-list nmn-hmn seq-number {% set sequence = sequence+10 %}{{ sequence
 ipv4 access-list nmn-hmn seq-number {% set sequence = sequence+10 %}{{ sequence }} permit udp any {{ variables.NMNLB_DHCP }} mask 255.255.255.255 src-port-range 67 68
 ipv4 access-list nmn-hmn seq-number {% set sequence = sequence+10 %}{{ sequence }} deny udp any {{ variables.NMNLB_DHCP }} mask 255.255.255.255
 ipv4 access-list nmn-hmn seq-number {% set sequence = sequence+10 %}{{ sequence }} deny udp {{ variables.NMNLB_DHCP }} mask 255.255.255.255 any
+ipv4 access-list nmn-hmn seq-number {% set sequence = sequence+10 %}{{ sequence }} permit udp {{ variables.HMNLB_DHCP }} mask 255.255.255.255 any src-port-range 67 68
+ipv4 access-list nmn-hmn seq-number {% set sequence = sequence+10 %}{{ sequence }} permit udp any {{ variables.HMNLB_DHCP }} mask 255.255.255.255 src-port-range 67 68
+ipv4 access-list nmn-hmn seq-number {% set sequence = sequence+10 %}{{ sequence }} deny udp any {{ variables.HMNLB_DHCP }} mask 255.255.255.255
+ipv4 access-list nmn-hmn seq-number {% set sequence = sequence+10 %}{{ sequence }} deny udp {{ variables.HMNLB_DHCP }} mask 255.255.255.255 any
 ipv4 access-list nmn-hmn seq-number {% set sequence = sequence+10 %}{{ sequence }} permit ip any any
 ipv4 access-list cmn-can
 ipv4 access-list cmn-can bind-point rif