summaryrefslogtreecommitdiff
path: root/interface-definitions/firewall-options.xml.in
blob: 1bcee2011cbbe0db34b98b65b38448e87b04275b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
<?xml version="1.0"?>
<interfaceDefinition>
  <node name="firewall">
    <children>
      <node name="options">
        <properties>
          <help>Firewall options/Packet manipulation</help>
          <priority>990</priority>
        </properties>
        <children>
          <tagNode name="interface" owner="${vyos_conf_scripts_dir}/firewall_options.py">
            <properties>
              <help>Interface clamping options</help>
              <completionHelp>
                <script>${vyos_completion_dir}/list_interfaces.py</script>
              </completionHelp>
            </properties>
            <children>
              #include <include/generic-disable-node.xml.i>
              <leafNode name="adjust-mss">
                <properties>
                  <help>Adjust MSS for IPv4 transit packets</help>
                  <completionHelp>
                      <list>clamp-mss-to-pmtu</list>
                  </completionHelp>
                  <valueHelp>
                      <format>clamp-mss-to-pmtu</format>
                      <description>Automatically sets the MSS to the proper value</description>
                 </valueHelp>
                  <valueHelp>
                    <format>536-65535</format>
                    <description>TCP Maximum segment size in bytes</description>
                  </valueHelp>
                  <constraint>
                    <validator name="numeric" argument="--range 536-65535"/>
                    <regex>(clamp-mss-to-pmtu)</regex>
                  </constraint>
                </properties>
              </leafNode>
              <leafNode name="adjust-mss6">
                <properties>
                  <help>Adjust MSS for IPv6 transit packets</help>
                  <completionHelp>
                      <list>clamp-mss-to-pmtu</list>
                  </completionHelp>
                  <valueHelp>
                      <format>clamp-mss-to-pmtu</format>
                      <description>Automatically sets the MSS to the proper value</description>
                  </valueHelp>
                  <valueHelp>
                    <format>1220-65535</format>
                    <description>TCP Maximum segment size in bytes</description>
                  </valueHelp>
                  <constraint>
                    <validator name="numeric" argument="--range 1220-65535"/>
                    <regex>(clamp-mss-to-pmtu)</regex>
                  </constraint>
                </properties>
              </leafNode>
            </children>
          </tagNode>
        </children>
      </node>
    </children>
  </node>
</interfaceDefinition>