diff options
| author | Christian Poessinger <christian@poessinger.com> | 2021-04-05 14:41:05 +0200 |
|---|---|---|
| committer | Christian Poessinger <christian@poessinger.com> | 2021-04-08 21:35:36 +0200 |
| commit | 3877bb83519f8f92a6e69380341abfe0832e3d72 (patch) | |
| tree | b19bc298881a9a1387cb1bb0b3b333a322861a9f | |
| parent | 2ff346300a7b4c4eb2d1998b9b32ab3483a97a8b (diff) | |
| download | vyatta-cfg-firewall-3877bb83519f8f92a6e69380341abfe0832e3d72.tar.gz vyatta-cfg-firewall-3877bb83519f8f92a6e69380341abfe0832e3d72.zip | |
T3456: add missing priority when deleting interface policy
set interfaces ethernet eth1 policy route 'LAN-POLICY-BASED-ROUTING'
set policy route LAN-POLICY-BASED-ROUTING rule 10 destination
set policy route LAN-POLICY-BASED-ROUTING rule 10 disable
set policy route LAN-POLICY-BASED-ROUTING rule 10 set table '10'
set policy route LAN-POLICY-BASED-ROUTING rule 10 source address '192.168.0.119/32'
set policy route LAN-POLICY-BASED-ROUTING rule 20 destination
set policy route LAN-POLICY-BASED-ROUTING rule 20 set table '100'
set policy route LAN-POLICY-BASED-ROUTING rule 20 source address '192.168.0.240'
This was not able to be deleted in only one commit, two commits were required.
vyos@vyos# delete policy
vyos@vyos# delete interfaces ethernet eth1 policy
vyos@vyos# commit
[ policy route LAN-POLICY-BASED-ROUTING ]
Firewall configuration error: Cannot delete rule set "LAN-POLICY-BASED-ROUTING" (still in use)
delete [ policy route LAN-POLICY-BASED-ROUTING ] failed
[[]] failed
Commit failed
copy failed [/opt/vyatta/config/tmp/tmp_7724/work/.unionfs-fuse][/opt/vyatta/config/tmp/new_config_7724/.unionfs-fuse]
Failed to generate committed config
[edit]
vyos@vyos#
(cherry picked from commit dc80ce45f95e243afc6c3d9016f051cfab690846)
| -rwxr-xr-x | gen-interface-policy-templates.pl | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/gen-interface-policy-templates.pl b/gen-interface-policy-templates.pl index e02e85d..97b4dc0 100755 --- a/gen-interface-policy-templates.pl +++ b/gen-interface-policy-templates.pl @@ -141,6 +141,7 @@ sub gen_template { print $tp <<EOF; type: txt +priority: 615 help: $table_help_hash{$table} ruleset for interface allowed: local -a params eval "params=(\$(cli-shell-api listNodes policy $table))" |