--- datadisks: - 100 network_vip_interfaces: - device: eth1 vhid: 26 ipaddr: 172.20.26.1 netmask: 255.255.0.0 pass: "{{ vip26_pass }}" firewall_in: - {proto: tcp, port: 22, from: [172.20.20.0/22]} - {proto: tcp, port: 443, from: [172.20.20.0/22]} - {proto: tcp, port: 4949, from: [172.20.20.0/22]} firewall_raw: - "-A INPUT -i eth1 -d 224.0.0.0/8 -j ACCEPT" - "-A INPUT -i eth1 -p vrrp -j ACCEPT"