diff options
| author | Christian Poessinger <christian@poessinger.com> | 2021-03-17 20:58:18 +0100 |
|---|---|---|
| committer | Christian Poessinger <christian@poessinger.com> | 2021-03-25 07:11:03 +0100 |
| commit | a8a0ec603b0cf03e55b976515a1982782c69195e (patch) | |
| tree | 0d779f1ee9ef7740f95faff1cb78d7c3dca242c5 | |
| parent | cad6be618c10e5710375d022f9b26bf930663bf7 (diff) | |
| download | vyos-1x-a8a0ec603b0cf03e55b976515a1982782c69195e.tar.gz vyos-1x-a8a0ec603b0cf03e55b976515a1982782c69195e.zip | |
vyos.configverify: T3344: verify_vrf() must handle "default" VRF
We can leak routes back to the default VRF, thus the check added by commit
9184dfb5 ("static: vrf: T3344: add target vrf verify()") must have a "bail out"
option when one want's to leak routes into the default VRF.
(cherry picked from commit 5adcc4ca30676338fca9a06409bbc72af4f68a1f)
| -rw-r--r-- | python/vyos/configverify.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/python/vyos/configverify.py b/python/vyos/configverify.py index fefe22175..ac1d4210b 100644 --- a/python/vyos/configverify.py +++ b/python/vyos/configverify.py @@ -80,7 +80,7 @@ def verify_vrf(config): recurring validation of VRF configuration. """ from netifaces import interfaces - if 'vrf' in config: + if 'vrf' in config and config['vrf'] != 'default': if config['vrf'] not in interfaces(): raise ConfigError('VRF "{vrf}" does not exist'.format(**config)) |