summaryrefslogtreecommitdiff
path: root/templates-cfg/zone-policy/zone/node.tag/interface/node.def
blob: c9137c45001de4c24515002d12b389b40e5ca044 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
multi:
type: txt
help: Interface associated with zone
allowed: /opt/vyatta/sbin/vyatta-interfaces.pl --show=all | sed -e s/'lo '//

syntax:expression: $VAR(@) != "lo" ; "Cannot assign loopback interface to a transit zone. It's part of local-zone"

create: /opt/vyatta/sbin/vyatta-interfaces.pl --dev=$VAR(@) --warn

create: 
	# fw zone actions
	if ! /opt/vyatta/sbin/vyatta-zone.pl 		\
	  --action=add-zone-interface			\
	  --zone-name="$VAR(../@)"			\
	  --interface="$VAR(@)"; then
	  exit 1
	fi

	# ips zone actions
	if ! /opt/vyatta/sbin/vyatta-zone-ips.pl    	\
	  --action=add-zone-interface           	\
	  --zone-name="$VAR(../@)"              	\
	  --interface="$VAR(@)"; then
	  exit 1
	fi

delete: 
	# fw zone actions
	if ! /opt/vyatta/sbin/vyatta-zone.pl 		\
	  --action=delete-zone-interface		\
	  --zone-name="$VAR(../@)"	 		\
	  --interface="$VAR(@)"; then
	  exit 1
	fi

	# ips zone actions
	if ! /opt/vyatta/sbin/vyatta-zone-ips.pl    	\
	  --action=delete-zone-interface        	\
	  --zone-name="$VAR(../@)"              	\
	  --interface="$VAR(@)"; then
	  exit 1
	fi