network, fwdriver: open VXLAN port

salt/fwdriver/files/open_ports.sh

@@ -30,3 +30,6 @@ ADDRULE="python /home/{{ pillar['user'] }}/circle/circle/manage.py add_rule"
 # NFS server ports
 {{ open_ports(pillar['nfs_server_ports']) }}
 
+# VXLAN port
+{% set vxlan_port = (pillar["network"]["vxlan_port"], ) %}
+{{ open_ports(vxlan_port) }}

salt/network/configuration.sls

+{% if pillar["deployment_mode"] == "node" %}
+
+{% set vxlan_port =  pillar["network"]["vxlan_port"]["port"] %}
+{% set vxlan_proto = pillar["network"]["vxlan_port"]["proto"] %}
+
+open_vxlan_port:
+  cmd.run:
+    {% if grains['os_family'] == 'RedHat' %}
+    - name: >
+        firewall-cmd --complete-reload ;
+        firewall-cmd --permanent --zone=public --add-port={{ vxlan_port }}/{{ vxlan_proto }} ;
+        firewall-cmd --reload
+    {% else %}
+    - name: ufw allow {{ vxlan_port }}/{{ vxlan_proto }}
+    {% endif %}
+
+{% endif %}

salt/network/init.sls

 include:
   - openvswitch
-
+  - network.configuration
 
 ovs-bridge:
   openvswitch_bridge.present: