summaryrefslogtreecommitdiff
path: root/interface-definitions/include/firewall/address-mask-ipv6.xml.i
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2024-07-20 10:35:44 +0200
committerChristian Breunig <christian@breunig.cc>2024-07-20 11:46:28 +0200
commit452068ce78581bb6fba2df4dba197e95b9aeb33d (patch)
treed6446320a87996d1b2cd1a54e92a162f960b5c20 /interface-definitions/include/firewall/address-mask-ipv6.xml.i
parent35644bc5a166c86596272c8b020679aa92034a9f (diff)
downloadvyos-1x-452068ce78581bb6fba2df4dba197e95b9aeb33d.tar.gz
vyos-1x-452068ce78581bb6fba2df4dba197e95b9aeb33d.zip
interfaces: T6592: moving an interface between VRF instances failed
To reproduce: set vrf name mgmt table '150' set vrf name no-mgmt table '151' set interfaces ethernet eth2 vrf 'mgmt' commit set interfaces ethernet eth2 vrf no-mgmt commit This resulted in an error while interacting with nftables: [Errno 1] failed to run command: nft add element inet vrf_zones ct_iface_map { "eth2" : 151 } The reason is that the old mapping entry still exists and was not removed. This commit adds a new utility function get_vrf_tableid() and compares the current and new VRF table IDs assigned to an interface. If the IDs do not match, the nftables ct_iface_map entry is removed before the new entry is added.
Diffstat (limited to 'interface-definitions/include/firewall/address-mask-ipv6.xml.i')
0 files changed, 0 insertions, 0 deletions