diff options
| author | Christian Breunig <christian@breunig.cc> | 2023-12-20 22:25:47 +0100 |
|---|---|---|
| committer | Mergify <37929162+mergify[bot]@users.noreply.github.com> | 2023-12-21 15:28:51 +0000 |
| commit | 9219b5e2e0f2a9d6aa181fc6bc460459d727f399 (patch) | |
| tree | 8277f28bc1474c8236b55a5fb8f715d4b39ce09d /data/templates/firewall/nftables-zone.j2 | |
| parent | 5c91424daafbee512f7c87caa418cd05f0bc4633 (diff) | |
| download | vyos-1x-9219b5e2e0f2a9d6aa181fc6bc460459d727f399.tar.gz vyos-1x-9219b5e2e0f2a9d6aa181fc6bc460459d727f399.zip | |
vrf: T591: define sysctl setting for net.vrf.strict_mode
Enable/Disable VRF strict mode, when net.vrf.strict_mode=0 (default) it is
possible to associate multiple VRF devices to the same table. Conversely, when
net.vrf.strict_mode=1 a table can be associated to a single VRF device.
A VRF table can be used by the VyOS CLI only once (ensured by verify()), this
simply adds an additional Kernel safety net, but a requirement for IPv6 segment
routing headers.
(cherry picked from commit 10701108fecb36f7be7eb7ef5f1e54e63da5fb4e)
Diffstat (limited to 'data/templates/firewall/nftables-zone.j2')
0 files changed, 0 insertions, 0 deletions