summaryrefslogtreecommitdiff
path: root/interface-definitions/include/firewall/fib.xml.i
diff options
context:
space:
mode:
authorRuben Herold <ruben@puettmann.net>2026-09-11 16:28:09 +0200
committerGitHub <noreply@github.com>2026-09-11 15:28:09 +0100
commit8fec254b2d17d5aec30589f0b3c5444ad1dfd1f5 (patch)
tree36d23d74daba786b9e67d2b31e706e021306172d /interface-definitions/include/firewall/fib.xml.i
parent148dd2b2f5ac5f0cd3671650aa11100fc293b588 (diff)
downloadvyos-1x-8fec254b2d17d5aec30589f0b3c5444ad1dfd1f5.tar.gz
vyos-1x-8fec254b2d17d5aec30589f0b3c5444ad1dfd1f5.zip
Merge pull request #5372 from ruben-herold/T9157-fib-type-match
firewall: T9157: add fib-type match for destination/source
Diffstat (limited to 'interface-definitions/include/firewall/fib.xml.i')
-rw-r--r--interface-definitions/include/firewall/fib.xml.i79
1 files changed, 79 insertions, 0 deletions
diff --git a/interface-definitions/include/firewall/fib.xml.i b/interface-definitions/include/firewall/fib.xml.i
new file mode 100644
index 000000000..56826e3f9
--- /dev/null
+++ b/interface-definitions/include/firewall/fib.xml.i
@@ -0,0 +1,79 @@
+<!-- include start from firewall/fib.xml.i -->
+<node name="fib">
+ <properties>
+ <help>Match based on the result of a Forwarding Information Base (FIB) lookup</help>
+ </properties>
+ <children>
+ <leafNode name="lookup">
+ <properties>
+ <help>Key to use for the FIB lookup</help>
+ <completionHelp>
+ <list>source-address destination-address</list>
+ </completionHelp>
+ <valueHelp>
+ <format>source-address</format>
+ <description>Look up a route to the packet's source address (reverse path)</description>
+ </valueHelp>
+ <valueHelp>
+ <format>destination-address</format>
+ <description>Look up a route to the packet's destination address</description>
+ </valueHelp>
+ <constraint>
+ <regex>(source-address|destination-address)</regex>
+ </constraint>
+ <multi/>
+ </properties>
+ </leafNode>
+ <node name="match">
+ <properties>
+ <help>FIB lookup result to match against</help>
+ </properties>
+ <children>
+ <leafNode name="route-type">
+ <properties>
+ <help>Match based on the address type returned by the FIB lookup</help>
+ <completionHelp>
+ <list>local unicast broadcast multicast anycast blackhole unreachable prohibit</list>
+ </completionHelp>
+ <valueHelp>
+ <format>local</format>
+ <description>Address is local to this router</description>
+ </valueHelp>
+ <valueHelp>
+ <format>unicast</format>
+ <description>Address is a unicast address</description>
+ </valueHelp>
+ <valueHelp>
+ <format>broadcast</format>
+ <description>Address is a broadcast address</description>
+ </valueHelp>
+ <valueHelp>
+ <format>multicast</format>
+ <description>Address is a multicast address</description>
+ </valueHelp>
+ <valueHelp>
+ <format>anycast</format>
+ <description>Address is an anycast address</description>
+ </valueHelp>
+ <valueHelp>
+ <format>blackhole</format>
+ <description>Address is blackholed</description>
+ </valueHelp>
+ <valueHelp>
+ <format>unreachable</format>
+ <description>Address is unreachable</description>
+ </valueHelp>
+ <valueHelp>
+ <format>prohibit</format>
+ <description>Address is administratively prohibited</description>
+ </valueHelp>
+ <constraint>
+ <regex>(!?(local|unicast|broadcast|multicast|anycast|blackhole|unreachable|prohibit))</regex>
+ </constraint>
+ </properties>
+ </leafNode>
+ </children>
+ </node>
+ </children>
+</node>
+<!-- include end -->