diff --git a/dicos/99_one-master.xml b/dicos/99_one-master.xml index c953b9a..a290c46 100644 --- a/dicos/99_one-master.xml +++ b/dicos/99_one-master.xml @@ -4,6 +4,7 @@ + opennebula @@ -59,6 +60,9 @@ non + + non + @@ -97,6 +101,7 @@ l2_vnet_size l2_vnet_vlan_tag l2_vnet_vlan_trunk + arp_cache_poisoning @@ -151,9 +156,12 @@ l2_vnet_size l2_vnet_vlan_tag l2_vnet_vlan_trunk + arp_cache_poisoning Interface d'administration du Cluster OpenNebula. + Active la protection contre les attaques par empoisonnement ARP. Non compatible avec les réseaux de Niveau 2 + diff --git a/tmpl/OpenNebulaNetwork.conf b/tmpl/OpenNebulaNetwork.conf new file mode 100644 index 0000000..4ee2c85 --- /dev/null +++ b/tmpl/OpenNebulaNetwork.conf @@ -0,0 +1,34 @@ +# -------------------------------------------------------------------------- # +# Copyright 2002-2014, OpenNebula Project (OpenNebula.org), C12G Labs # +# # +# Licensed under the Apache License, Version 2.0 (the "License"); you may # +# not use this file except in compliance with the License. You may obtain # +# a copy of the License at # +# # +# http://www.apache.org/licenses/LICENSE-2.0 # +# # +# Unless required by applicable law or agreed to in writing, software # +# distributed under the License is distributed on an "AS IS" BASIS, # +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # +# See the License for the specific language governing permissions and # +# limitations under the License. # +#--------------------------------------------------------------------------- # + +################################################################################ +# General Options +################################################################################ + +# Configure the initial VLAN ID tag (corresponds to vnet ID = 0) +:start_vlan: 2 + +################################################################################ +# Open vSwitch Options +################################################################################ + +# Enable ARP Cache Poisoning Prevention Rules +%if %%getVar('arp_cache_poisoning','non') == 'oui' +:arp_cache_poisoning: true +%else +:arp_cache_poisoning: false +%end if +