summaryrefslogtreecommitdiff
path: root/python/vyos/configverify.py
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2021-03-17 20:58:18 +0100
committerChristian Poessinger <christian@poessinger.com>2021-03-25 07:11:03 +0100
commita8a0ec603b0cf03e55b976515a1982782c69195e (patch)
tree0d779f1ee9ef7740f95faff1cb78d7c3dca242c5 /python/vyos/configverify.py
parentcad6be618c10e5710375d022f9b26bf930663bf7 (diff)
downloadvyos-1x-a8a0ec603b0cf03e55b976515a1982782c69195e.tar.gz
vyos-1x-a8a0ec603b0cf03e55b976515a1982782c69195e.zip
vyos.configverify: T3344: verify_vrf() must handle "default" VRF
We can leak routes back to the default VRF, thus the check added by commit 9184dfb5 ("static: vrf: T3344: add target vrf verify()") must have a "bail out" option when one want's to leak routes into the default VRF. (cherry picked from commit 5adcc4ca30676338fca9a06409bbc72af4f68a1f)
Diffstat (limited to 'python/vyos/configverify.py')
-rw-r--r--python/vyos/configverify.py2
1 files changed, 1 insertions, 1 deletions
diff --git a/python/vyos/configverify.py b/python/vyos/configverify.py
index fefe22175..ac1d4210b 100644
--- a/python/vyos/configverify.py
+++ b/python/vyos/configverify.py
@@ -80,7 +80,7 @@ def verify_vrf(config):
recurring validation of VRF configuration.
"""
from netifaces import interfaces
- if 'vrf' in config:
+ if 'vrf' in config and config['vrf'] != 'default':
if config['vrf'] not in interfaces():
raise ConfigError('VRF "{vrf}" does not exist'.format(**config))