ppayne/rollout — comment on commit e55e7dc9e8f838331b8c993b92d6ed578507bcb2
File:  line 0
By ppayne:

The existing routine assumed that each device defined its networks. This may be okay for interfaces but not for networks where I may want to specify a class, e.g.:

class Hadoop_Cluster => {
network => [ 'hadoop_cluster' ],
firewall_accept => [
'hadoop_cluster' => '2345 # hadoop cluster port',
],
};

device cluster_node_a => {
ISA => { Hadoop_Cluster => 1, },
};

device cluster_node_b => {
ISA => { Hadoop_Cluster => 1, },
};

device cluster_node_c => {
ISA => { Hadoop_Cluster => 1, },
};

The proposed change allows a network to be defined in a class and then each inheriting node can then automatically permit other participating nodes firewall access.