puppet_infra.pp

node 'itlm.example.com' {
  # ...

  itlm::requirement { 'network-to-backup':
    source_ip => [ '10.0.42.0/24', '10.0.23.0/24' ], # network devices networks
    dest_ip   => '10.0.16.0/24',                     # backup network
    ports     => [ '6123/tcp', '6123/udp' ],
  }

  itlm::requirement { 'users-to-intranet-networks':
    source_ip => [ '192.168.42.0/23', '192.168.16.0/24' ], # users networks
    dest_ip   => [ '10.0.16.0/24', '10.0.15.0/24' ],       # intranet networks
    ports     => [ '80/tcp', '443/tcp', '445/tcp' ],
  }
}