###
### Important: empty values in multiselect fields need to end with a blank!!! Don't do white-space clean-up in those lines!!!
###

# During FAI installation, don't restart networks. This happens only at reboot.
debian-edu-router-config debian-edu-router-config/net-setup-mode string SKIP-NETWORK-SETUP - don't configure network interface assignments for now, at all

# Enable IPv4 only for now, the IPv6 setup needs to be tested before enabling it by default in Debian Edu networks
# Furthermore, Debian Edu is not yet IPv6 ready, either.
debian-edu-router-config debian-edu-router-config/net-ip-versions-enabled multiselect IPv4

# Configure 'Education' as the only internal network (on physical interface)
debian-edu-router-config debian-edu-router-config/net-int-supportednetworks select Education

# Don't use VLANs for internal networks by default.
debian-edu-router-config debian-edu-router-config/net-int-with-vlans boolean false
debian-edu-router-config debian-edu-router-config/net-int-supportednetworks-via-vlan multiselect 

# But set up our favourite VLAN IDs, in case the site admin switches to a VLAN based setup
debian-edu-router-config debian-edu-router-config/vlanid-openlan string 1
debian-edu-router-config debian-edu-router-config/vlanid-education string 2
debian-edu-router-config debian-edu-router-config/vlanid-mgmt string 3
debian-edu-router-config debian-edu-router-config/vlanid-schooladministration string 4
debian-edu-router-config debian-edu-router-config/vlanid-wifistudents string 21
debian-edu-router-config debian-edu-router-config/vlanid-wifiteachers string 22
debian-edu-router-config debian-edu-router-config/vlanid-wifiguests string 24
debian-edu-router-config debian-edu-router-config/vlanid-printers string 40

# In Debian Edu, the Edu-Interface uses a static IPv4 address
debian-edu-router-config debian-edu-router-config/net-networks-staticip-v4 multiselect Education
debian-edu-router-config debian-edu-router-config/net-networks-dhcpclient-v4 multiselect 
debian-edu-router-config debian-edu-router-config/net-networks-manual-v4 multiselect 
debian-edu-router-config debian-edu-router-config/net-networks-staticip-v6 multiselect 
debian-edu-router-config debian-edu-router-config/net-networks-auto-v6 multiselect 
debian-edu-router-config debian-edu-router-config/net-networks-dhcpclient-v6 multiselect 
debian-edu-router-config debian-edu-router-config/net-networks-manual-v6 multiselect Education

# some meaningful defaults for router operation in Debian Edu networks
debian-edu-router-config debian-edu-router-config/net-int-address-v4-openlan string 192.168.100.253/24
debian-edu-router-config debian-edu-router-config/net-int-address-v4-education string 10.0.0.1/8
debian-edu-router-config debian-edu-router-config/net-int-address-v4-mgmt string 172.16.0.253/24
debian-edu-router-config debian-edu-router-config/net-int-address-v4-schooladministration string 172.16.8.253/24
debian-edu-router-config debian-edu-router-config/net-int-address-v4-wifistudents string 172.21.0.1/21
debian-edu-router-config debian-edu-router-config/net-int-address-v4-wifiteachers string 172.21.8.1/21
debian-edu-router-config debian-edu-router-config/net-int-address-v4-wifiguests string 172.21.16.1/21
debian-edu-router-config debian-edu-router-config/net-int-address-v4-printers string 172.16.1.253/24
debian-edu-router-config debian-edu-router-config/net-int-address-v6-openlan string 
debian-edu-router-config debian-edu-router-config/net-int-address-v6-education string 
debian-edu-router-config debian-edu-router-config/net-int-address-v6-mgmt string 
debian-edu-router-config debian-edu-router-config/net-int-address-v6-schooladministration string 
debian-edu-router-config debian-edu-router-config/net-int-address-v6-wifistudents string 
debian-edu-router-config debian-edu-router-config/net-int-address-v6-wifiteachers string 
debian-edu-router-config debian-edu-router-config/net-int-address-v6-wifiguests string 
debian-edu-router-config debian-edu-router-config/net-int-address-v6-printers string 

# Debian Edu does not provide DHCP service via the gateway, but via TJENER
debian-edu-router-config debian-edu-router-config/service-dhcp-networks-v4 multiselect 
debian-edu-router-config debian-edu-router-config/service-dhcp-networks-v6 multiselect 

# Some meaningful DHCP ranges, if DHCP service gets activated for any of the below networks
debian-edu-router-config debian-edu-router-config/service-dhcp-range-v4-openlan string 192.168.100.20,192.168.100.252,12h
debian-edu-router-config debian-edu-router-config/service-dhcp-range-v4-education string 10.16.0.1,10.31.255.255,12h
debian-edu-router-config debian-edu-router-config/service-dhcp-range-v4-mgmt string 172.16.0.20,172.16.0.252,12h
debian-edu-router-config debian-edu-router-config/service-dhcp-range-v4-schooladministration string 172.16.8.20,172.16.8.252,12h
debian-edu-router-config debian-edu-router-config/service-dhcp-range-v4-wifistudents string 172.21.0.2,172.21.7.254,12h
debian-edu-router-config debian-edu-router-config/service-dhcp-range-v4-wifiteachers string 172.21.8.2,172.21.15.254,12h
debian-edu-router-config debian-edu-router-config/service-dhcp-range-v4-wifiguests string 172.21.16.2,172.21.23.254,12h
debian-edu-router-config debian-edu-router-config/service-dhcp-range-v4-printers string 172.16.1.21,172.16.1.80,12h

# Allow internet access from 'Education' network and set up NAT for it
debian-edu-router-config debian-edu-router-config/service-firewall-networks-nat multiselect Education
debian-edu-router-config debian-edu-router-config/service-firewall-networks-routed multiselect 
debian-edu-router-config debian-edu-router-config/service-firewall-networks-hostonly multiselect 
debian-edu-router-config debian-edu-router-config/service-firewall-networks-allow-internet multiselect 
debian-edu-router-config debian-edu-router-config/service-firewall-networks-block-internet multiselect Education

# Enable direct internet access for TJENER
debian-edu-router-config debian-edu-router-config/service-firewall-trustworthy-ips string 10.0.2.2
