-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathfgt-routes.tf
87 lines (81 loc) · 2.41 KB
/
fgt-routes.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
resource "azurerm_route_table" "dmz" {
name = "DMZRouteTable"
location = azurerm_resource_group.resource_group.location
resource_group_name = azurerm_resource_group.resource_group.name
route = [
{
address_prefix = "0.0.0.0/0"
name = "default"
next_hop_in_ip_address = var.fgtiface2
next_hop_type = "VirtualAppliance"
},
{
address_prefix = "10.0.3.0/24"
name = "internal-subnet"
next_hop_in_ip_address = var.fgtiface2
next_hop_type = "VirtualAppliance"
},
{
address_prefix = "10.0.1.0/24"
name = "external-subnet"
next_hop_in_ip_address = var.fgtiface2
next_hop_type = "VirtualAppliance"
},
]
}
resource "azurerm_route_table" "internal" {
name = "INTERNALRouteTable"
location = azurerm_resource_group.resource_group.location
resource_group_name = azurerm_resource_group.resource_group.name
route = [
{
address_prefix = "0.0.0.0/0"
name = "default"
next_hop_in_ip_address = var.fgtiface3
next_hop_type = "VirtualAppliance"
},
{
address_prefix = "10.0.1.0/24"
name = "external-subnet"
next_hop_in_ip_address = var.fgtiface3
next_hop_type = "VirtualAppliance"
},
{
address_prefix = "10.0.2.0/24"
name = "dmz-subnet"
next_hop_in_ip_address = var.fgtiface3
next_hop_type = "VirtualAppliance"
},
]
}
resource "azurerm_route_table" "public" {
name = "PUBLICRouteTable"
location = azurerm_resource_group.resource_group.location
resource_group_name = azurerm_resource_group.resource_group.name
route = [
{
address_prefix = "10.0.3.0/24"
name = "internal-subnet"
next_hop_in_ip_address = var.fgtiface1
next_hop_type = "VirtualAppliance"
},
{
address_prefix = "10.0.2.0/24"
name = "dmz-subnet"
next_hop_in_ip_address = var.fgtiface1
next_hop_type = "VirtualAppliance"
},
]
}
resource "azurerm_subnet_route_table_association" "dmz-associate" {
subnet_id = azurerm_subnet.dmz_subnet.id
route_table_id = azurerm_route_table.dmz.id
}
resource "azurerm_subnet_route_table_association" "internal-associate" {
subnet_id = azurerm_subnet.internal_subnet.id
route_table_id = azurerm_route_table.internal.id
}
resource "azurerm_subnet_route_table_association" "public-associate" {
subnet_id = azurerm_subnet.public_subnet.id
route_table_id = azurerm_route_table.public.id
}