|
39 | 39 | metadata: |
40 | 40 | ipsec: |
41 | 41 | - local: 10.0.10.2 |
42 | | - remote 10.0.40.2 |
| 42 | + remote: 10.0.40.2 |
43 | 43 | peer: rtr2 |
44 | 44 | tunnels: |
45 | 45 | - local: 192.168.10.0/24 |
|
83 | 83 | dnsServers: |
84 | 84 | - 192.168.0.254 |
85 | 85 | staticAssignments: |
86 | | - 00:00:00:00:00:BB: 192.168.0.50 |
| 86 | + "00:00:00:00:00:BB": 192.168.0.50 |
87 | 87 | dns: |
88 | | - 1.2.3.4: foo.com |
| 88 | + "1.2.3.4": foo.com |
| 89 | + snmp: |
| 90 | + listenAddress: 10.0.0.254 |
| 91 | + system_name: edge-router-01 |
| 92 | + location: "Lab A, Rack 2, U 24" |
| 93 | + |
| 94 | + communities: |
| 95 | + - name: readonly-community |
| 96 | + authorization: ro |
| 97 | + trap_targets: |
| 98 | + - 10.0.50.5 |
| 99 | + - name: readwrite-community |
| 100 | + authorization: rw |
| 101 | + clients: |
| 102 | + - 10.0.1.11 |
| 103 | + trap_targets: |
| 104 | + - 10.0.50.5 |
89 | 105 | snat: |
90 | 106 | - interface: eth0 |
91 | 107 | srcAddr: 192.168.0.0/24 |
@@ -197,6 +213,26 @@ spec: |
197 | 213 |
|
198 | 214 | * `dns`: if present, map of IP-to-domain DNS entries to create on the router. |
199 | 215 |
|
| 216 | +* `snmp`: if present, SNMP is configured on the router. |
| 217 | + |
| 218 | + * `listenAddress`: IP address on a local interface to bind SNMP to. Defaults to listening on all interfaces. |
| 219 | + |
| 220 | + * `systemName`: a string describing the system. |
| 221 | + |
| 222 | + * `location`: a string for the system's physical location. |
| 223 | + |
| 224 | + * `contact`: a string for the system's contact information. |
| 225 | + |
| 226 | + * `communities`: a list of SNMP communities to configure. |
| 227 | + |
| 228 | + * `name`: the community string/name. This is required. |
| 229 | + |
| 230 | + * `authorization`: the authorization level for the community. Can be `ro` (read-only) or `rw` (read-write). Defaults to `ro` if not specified. |
| 231 | + |
| 232 | + * `clients`: a list of client IP addresses that are allowed to use this community. |
| 233 | + |
| 234 | + * `trapTargets`: a list of IP addresses to send SNMP traps to. |
| 235 | + |
200 | 236 | * `emulators`: if present, a list of network emulator traffic policies to apply |
201 | 237 | to one or more interfaces on egress. For each emulator in the list, only the |
202 | 238 | `name` key is required, though the traffic policy will not get applied if |
@@ -233,7 +269,7 @@ spec: |
233 | 269 | rules are actually applied to packets "egressing out of" interface `eth0`. |
234 | 270 |
|
235 | 271 | !!! note |
236 | | - Currently, the `ipsec`, `emulators`, and `snat`/`dnat` metadata sections only |
| 272 | + Currently, the `ipsec`, `emulators`, `snmp`, and `snat`/`dnat` metadata sections only |
237 | 273 | apply to Vyatta/VyOS routers. |
238 | 274 |
|
239 | 275 | !!! note |
|
0 commit comments