summaryrefslogtreecommitdiff
path: root/interface-definitions/include/firewall
diff options
context:
space:
mode:
authorNicolas Fort <nicolasfort1988@gmail.com>2022-04-23 12:05:57 +0000
committerNicolas Fort <nicolasfort1988@gmail.com>2022-04-23 12:05:57 +0000
commit15e55af88e6104608487c1138641fcff54594d89 (patch)
tree8ea6c87fd55f274a8fb43493675f273d2fcd3924 /interface-definitions/include/firewall
parent19d38aa98cd656a2d4c558f6c99635b3d662b9cb (diff)
downloadvyos-1x-15e55af88e6104608487c1138641fcff54594d89.tar.gz
vyos-1x-15e55af88e6104608487c1138641fcff54594d89.zip
Firewall: T990: Modifications for new connection-status cli
Diffstat (limited to 'interface-definitions/include/firewall')
-rw-r--r--interface-definitions/include/firewall/common-rule.xml.i39
1 files changed, 23 insertions, 16 deletions
diff --git a/interface-definitions/include/firewall/common-rule.xml.i b/interface-definitions/include/firewall/common-rule.xml.i
index e74ce4ee4..85e586e1b 100644
--- a/interface-definitions/include/firewall/common-rule.xml.i
+++ b/interface-definitions/include/firewall/common-rule.xml.i
@@ -95,25 +95,32 @@
</constraint>
</properties>
</leafNode>
-<leafNode name="connection-status">
+<node name="connection-status">
<properties>
<help>Connection status</help>
- <completionHelp>
- <list>dnat snat</list>
- </completionHelp>
- <valueHelp>
- <format>dnat</format>
- <description>Match connections that are subject to destination NAT</description>
- </valueHelp>
- <valueHelp>
- <format>snat</format>
- <description>Match connections that are subject to source NAT</description>
- </valueHelp>
- <constraint>
- <regex>^(dnat|snat)$</regex>
- </constraint>
</properties>
-</leafNode>
+ <children>
+ <leafNode name="nat">
+ <properties>
+ <help>NAT connection status</help>
+ <completionHelp>
+ <list>destination source</list>
+ </completionHelp>
+ <valueHelp>
+ <format>destination</format>
+ <description>Match connections that are subject to destination NAT</description>
+ </valueHelp>
+ <valueHelp>
+ <format>source</format>
+ <description>Match connections that are subject to source NAT</description>
+ </valueHelp>
+ <constraint>
+ <regex>^(destination|source)$</regex>
+ </constraint>
+ </properties>
+ </leafNode>
+ </children>
+</node>
<leafNode name="protocol">
<properties>
<help>Protocol to match (protocol name, number, or "all")</help>