class firewall::docker( $implementation = lookup('firewall::implementation', undef, undef, 'shorewall'), $device = 'eth0', ) { class { "firewall::implementations::${implementation}::docker": device => $device, } }