From 728e1c6073cb216d3cb8b66f519bd590458165e6 Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Tue, 12 May 2020 18:44:20 +0200
Subject: nat: T2198: add new ipv4-range validator

---
 interface-definitions/nat.xml.in | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

(limited to 'interface-definitions')

diff --git a/interface-definitions/nat.xml.in b/interface-definitions/nat.xml.in
index bcbdb37af..af9dd1eff 100644
--- a/interface-definitions/nat.xml.in
+++ b/interface-definitions/nat.xml.in
@@ -95,7 +95,12 @@
                         <format>masquerade</format>
                         <description>NAT to the primary address of outbound-interface</description>
                       </valueHelp>
-                      <!-- TODO: add general iptables constraint script -->
+                      <constraint>
+                        <validator name="ipv4-prefix"/>
+                        <validator name="ipv4-address"/>
+                        <validator name="ipv4-range"/>
+                        <regex>(masquerade)</regex>
+                      </constraint>
                     </properties>
                   </leafNode>
                   #include <include/nat-translation-port.xml.i>
-- 
cgit v1.2.3