This update is where I have managed to get all the pieces together to form a complete Infrastructure as Code pipeline for the self-service firewall rules on the Cisco ASA. The Go firewall project incorporates the ASA API Terraform project and a GitLab pipeline. The flow of the application in the current prototype is as […]
Go Firewall Rule Self-Service – v0.04 Milestone Read More »
This current version will use the Go web application to create a Cisco ASA firewall rule on the OUTSIDE interface to permit traffic to my DMZ server on port 8000. The firewall rule on the ASA will be created without any Cisco ASA CLI commands used. Currently, it is a manual process to have any
Go Firewall Rule Self-Service – v0.03 Read More »
This post will be an overview of the project progress for Firewall Rule Self-Service portal that I am creating with Go.The code can be found as release v0.02 in my GitHub The project is to allow non-technical users to create a firewall rule in Terraform. Currently, the project has a single main page, which is
Go Firewall Rule Self-Service – v0.02 Read More »
As part of the ASA API Terraform Project, in this post I will be demonstrating the creation of ACLs using objects, object groups and standard IP addressing. Lab I’m going to set up a simple ASA lab using the previous post from the project. Creating Objects with Terraform I have created a network object and
ASA Access Lists with Terraform Read More »
Creating GitLab Project I have started this off by creating a new in GitLab. As I have previously setup my SSH key for GitLab I will just clone the repo and I’ll be able to push changes that way. My lab is up and running GNS3, I just ensure that I can ping and SSH
ASA Terraform Setup Read More »
This post follows on from the NetBox setup post, upto the API token setup. SSL Configuration with Nginx In that previous post, SSL was not used. The connection was made insecure and ignored. Here, I will detail the steps to use Nginx as a proxy for the NetBox docker container. Add SAN to SSL Creation
NetBox and Terraform Setup Read More »
If you already have ACI running and then want to move to a DevOps approach and bring that configuration into Terraform, how can that be performed? The ACI Terraform provider supports importing configuration. All that is required is the resource and name of that resource. In the following example, I will use the Cisco ACI
Importing ACI Configuration to Terraform Read More »
In my previous ACI automation post, I used Terraform and the credentials were in plain text inside the main.tf file. I have updated this, so the credentials are stored in GitLab environment variables, which is a much more secure method. The process of the credentials from GitLab to Terraform are as follows; Create Environment Variables
GitLab Variables for Credentials – ACI Lab Read More »
In a previous post, I have created a sample of FortiGate config with Terraform. This was all performed locally from a Windows machine. While this is good in a lab environment, the major problem with it is that the management doesn’t scale. If there is more than a single network engineer, they need to share
FortiGate Terraform with GitLab CI/CD Pipeline Read More »
After setting up the GitLab CI/CI pipeline, the next step I wanted to take is to use Terraform to make changes to AWS infrastructure. There are several steps to configure a GitLab pipeline for Terraform. This example is for a new project with nothing yet configured in AWS yet. Create a New Project in GitLab
GitLab Terraform AWS Pipeline Read More »