104 lines
3.4 KiB
Markdown
104 lines
3.4 KiB
Markdown
# 7u83-ipsec
|
|
|
|
#### Table of Contents
|
|
|
|
1. [Description](#description)
|
|
1. [Setup - The basics of getting started with ipsec](#setup)
|
|
* [What ipsec affects](#what-ipsec-affects)
|
|
* [Setup requirements](#setup-requirements)
|
|
* [Beginning with ipsec](#beginning-with-ipsec)
|
|
1. [Usage - Configuration options and additional functionality](#usage)
|
|
1. [Reference - An under-the-hood peek at what the module is doing and how](#reference)
|
|
1. [Limitations - OS compatibility, etc.](#limitations)
|
|
1. [Development - Guide for contributing to the module](#development)
|
|
|
|
## Description
|
|
|
|
This module installs and configures IPsec transport connections and ipsec
|
|
tunnels as well.
|
|
|
|
|
|
|
|
## Setup
|
|
|
|
The simplest way to use 7u83-ipsec is to include the class:
|
|
|
|
```
|
|
include ipsec
|
|
```
|
|
|
|
|
|
|
|
### What ipsec affects **OPTIONAL**
|
|
|
|
If it's obvious what your module touches, you can skip this section. For
|
|
example, folks can probably figure out that your mysql_instance module affects
|
|
their MySQL instances.
|
|
|
|
If there's more that they should know about, though, this is the place to mention:
|
|
|
|
* A list of files, packages, services, or operations that the module will alter,
|
|
impact, or execute.
|
|
* Dependencies that your module automatically installs.
|
|
* Warnings or other important notices.
|
|
|
|
### Setup Requirements **OPTIONAL**
|
|
|
|
If your module requires anything extra before setting up (pluginsync enabled,
|
|
etc.), mention it here.
|
|
|
|
If your most recent release breaks compatibility or requires particular steps
|
|
for upgrading, you might want to include an additional "Upgrading" section
|
|
here.
|
|
|
|
### Beginning with ipsec
|
|
|
|
To encryp icmp traffic between two nodes using a pre-shared key, include
|
|
this comfiguration:
|
|
|
|
```
|
|
include ipsec
|
|
ipsec::transport {"icmp_encrypt":
|
|
remote_ip => '<ip_of_other_node>',
|
|
proto => 'icmp',
|
|
psk => 'secret'
|
|
}
|
|
|
|
```
|
|
|
|
|
|
## Usage
|
|
|
|
This section is where you describe how to customize, configure, and do the
|
|
fancy stuff with your module here. It's especially helpful if you include usage
|
|
examples and code samples for doing things with your module.
|
|
|
|
## Reference
|
|
|
|
Users need a complete list of your module's classes, types, defined types providers, facts, and functions, along with the parameters for each. You can provide this list either via Puppet Strings code comments or as a complete list in this Reference section.
|
|
|
|
* If you are using Puppet Strings code comments, this Reference section should include Strings information so that your users know how to access your documentation.
|
|
|
|
* If you are not using Puppet Strings, include a list of all of your classes, defined types, and so on, along with their parameters. Each element in this listing should include:
|
|
|
|
* The data type, if applicable.
|
|
* A description of what the element does.
|
|
* Valid values, if the data type doesn't make it obvious.
|
|
* Default value, if any.
|
|
|
|
## Limitations
|
|
|
|
This is where you list OS compatibility, version compatibility, etc. If there
|
|
are Known Issues, you might want to include them under their own heading here.
|
|
|
|
## Development
|
|
|
|
Since your module is awesome, other users will want to play with it. Let them
|
|
know what the ground rules for contributing are.
|
|
|
|
## Release Notes/Contributors/Etc. **Optional**
|
|
|
|
If you aren't using changelog, put your release notes here (though you should
|
|
consider using changelog). You can also add any additional sections you feel
|
|
are necessary or important to include here. Please use the `## ` header.
|