addnet

manifests/init.pp

@@ -45,4 +45,17 @@ class egg (
     family  => 'ipv4',
     zone    => 'liu',
   }
+  server_firewall::address_set { 'liu_itn_vpn':
+    addresses => [
+      '10.8.0.0/16',
+    ],
+  }
+
+  firewalld_rich_rule { 'allow ssh via itn vpn':
+    action  => 'accept',
+    service => 'ssh',
+    source  => { 'ipset' => 'liu_itn_vpn_v4', },
+    family  => 'ipv4',
+    zone    => 'liu',
+  }
 }