diff options
| author | Alex W <embezzle.dev@proton.me> | 2025-01-30 20:22:41 +0000 |
|---|---|---|
| committer | Alex W <embezzle.dev@proton.me> | 2025-03-21 21:08:50 +0100 |
| commit | 9e2bdc96ea63e7ee1adb002df17e0d9ecc1cd410 (patch) | |
| tree | 29af39c615a3b3cbcf327af4839f578f29af00d9 /data | |
| parent | 7eec4583bf7feb900fad02e009b9ded11b52fd5d (diff) | |
| download | vyos-1x-9e2bdc96ea63e7ee1adb002df17e0d9ecc1cd410.tar.gz vyos-1x-9e2bdc96ea63e7ee1adb002df17e0d9ecc1cd410.zip | |
firewall: T5493: Implement remote-group
Diffstat (limited to 'data')
| -rw-r--r-- | data/templates/firewall/nftables-defines.j2 | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/data/templates/firewall/nftables-defines.j2 b/data/templates/firewall/nftables-defines.j2 index fa6cd74c0..3147b4c37 100644 --- a/data/templates/firewall/nftables-defines.j2 +++ b/data/templates/firewall/nftables-defines.j2 @@ -35,6 +35,15 @@ } {% endfor %} {% endif %} +{% if group.remote_group is vyos_defined and is_l3 and not is_ipv6 %} +{% for name, name_config in group.remote_group.items() %} + set R_{{ name }} { + type {{ ip_type }} + flags interval + auto-merge + } +{% endfor %} +{% endif %} {% if group.mac_group is vyos_defined %} {% for group_name, group_conf in group.mac_group.items() %} {% set includes = group_conf.include if group_conf.include is vyos_defined else [] %} |