At boot time, router-001 had net.inet.ip.forwarding at 0.
As a router, net.inet.ip.forwarding MUST be enabled:
This is already configured in Salt in ef7f71ee + f8190dedfbcf, but NOT applied:
$ ls /etc/rc.conf.d/routing/router ls: /etc/rc.conf.d/routing/router: No such file or directory
$ salt router-001 state.sls_id /etc/rc.conf.d/routing/router roles/core/network router-001: ---------- ID: /etc/rc.conf.d/routing/router Function: file.managed Result: True Comment: File /etc/rc.conf.d/routing/router updated Started: 21:04:46.305696 Duration: 48.049 ms Changes: ---------- diff: New file mode: 0644 Summary for router-001 ------------ Succeeded: 1 (changed=1) Failed: 0 ------------ Total states run: 1 Total run time: 48.049 ms
$ cat /etc/rc.conf.d/routing/router # ------------------------------------------------------------- # Network — rc configuration # - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - # Project: Nasqueron # License: Trivial work, not eligible to copyright # Source file: roles/core/network/files/FreeBSD/router.rc # ------------------------------------------------------------- # # <auto-generated> # This file is managed by our rOPS SaltStack repository. # # Changes to this file may cause incorrect behavior # and will be lost if the state is redeployed. # </auto-generated> gateway_enable="YES"