From 069f8414fc5c62585aa7fe84b7b3c074a98fc034 Mon Sep 17 00:00:00 2001
From: kylerisse <kylerisse@users.noreply.github.com>
Date: Wed, 18 Feb 2026 20:02:34 -0800
Subject: [PATCH] inventory: limit ZTP to Infra vlans

---
 facts/inventory.py | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/facts/inventory.py b/facts/inventory.py
index 63c9c6ef..65f6bfec 100755
--- a/facts/inventory.py
+++ b/facts/inventory.py
@@ -855,6 +855,13 @@ def generatekeaconfig(servers, aps, vlans, outputdir):
                 subnet["valid-lifetime"] = 300
                 subnet["min-valid-lifetime"] = 300
                 subnet["max-valid-lifetime"] = 300
+                # ZTP should only be possible from the management vlans
+                subnet["require-client-classes"] = [
+                    "Juniper-EX-Series",
+                    "ex2300-c-series",
+                    "ex4200-series",
+                    "ex4300-series",
+                ]
             subnets_dict.append(subnet)
 
     kea_config["Dhcp4"]["subnet4"] = subnets_dict