diff options
author | Christian Breunig <christian@breunig.cc> | 2024-07-20 10:35:44 +0200 |
---|---|---|
committer | Christian Breunig <christian@breunig.cc> | 2024-07-20 11:46:28 +0200 |
commit | 452068ce78581bb6fba2df4dba197e95b9aeb33d (patch) | |
tree | d6446320a87996d1b2cd1a54e92a162f960b5c20 /interface-definitions/include/firewall/ipv4-hook-forward.xml.i | |
parent | 35644bc5a166c86596272c8b020679aa92034a9f (diff) | |
download | vyos-1x-452068ce78581bb6fba2df4dba197e95b9aeb33d.tar.gz vyos-1x-452068ce78581bb6fba2df4dba197e95b9aeb33d.zip |
interfaces: T6592: moving an interface between VRF instances failed
To reproduce:
set vrf name mgmt table '150'
set vrf name no-mgmt table '151'
set interfaces ethernet eth2 vrf 'mgmt'
commit
set interfaces ethernet eth2 vrf no-mgmt
commit
This resulted in an error while interacting with nftables:
[Errno 1] failed to run command: nft add element inet vrf_zones ct_iface_map { "eth2" : 151 }
The reason is that the old mapping entry still exists and was not removed.
This commit adds a new utility function get_vrf_tableid() and compares the
current and new VRF table IDs assigned to an interface. If the IDs do not
match, the nftables ct_iface_map entry is removed before the new entry is added.
Diffstat (limited to 'interface-definitions/include/firewall/ipv4-hook-forward.xml.i')
0 files changed, 0 insertions, 0 deletions