diff options
| author | Christian Poessinger <christian@poessinger.com> | 2021-03-17 20:58:18 +0100 |
|---|---|---|
| committer | Christian Poessinger <christian@poessinger.com> | 2021-03-17 20:58:18 +0100 |
| commit | 5adcc4ca30676338fca9a06409bbc72af4f68a1f (patch) | |
| tree | f7dc3f2772ff7b75297d718a7d59b8cc3c466475 /python/vyos/configverify.py | |
| parent | 5591edc5358c88a8ff947831fdc03b5949f09bee (diff) | |
| download | vyos-1x-5adcc4ca30676338fca9a06409bbc72af4f68a1f.tar.gz vyos-1x-5adcc4ca30676338fca9a06409bbc72af4f68a1f.zip | |
vyos.configverify: T3344: verify_vrf() must handle "default" VRF
We can leak routes back to the default VRF, thus the check added by commit
9184dfb5 ("static: vrf: T3344: add target vrf verify()") must have a "bail out"
option when one want's to leak routes into the default VRF.
Diffstat (limited to 'python/vyos/configverify.py')
| -rw-r--r-- | python/vyos/configverify.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/python/vyos/configverify.py b/python/vyos/configverify.py index 7cf2cb8f9..718b7445d 100644 --- a/python/vyos/configverify.py +++ b/python/vyos/configverify.py @@ -80,7 +80,7 @@ def verify_vrf(config): recurring validation of VRF configuration. """ from netifaces import interfaces - if 'vrf' in config: + if 'vrf' in config and config['vrf'] != 'default': if config['vrf'] not in interfaces(): raise ConfigError('VRF "{vrf}" does not exist'.format(**config)) |