local stratum 10
allow {{ pillar['network']['netaddress'] }}/{{ pillar['network']['netmask'] }}