summaryrefslogtreecommitdiff
path: root/interface-definitions/include/policy
diff options
context:
space:
mode:
authorsarthurdev <965089+sarthurdev@users.noreply.github.com>2022-01-18 15:29:03 +0100
committersarthurdev <965089+sarthurdev@users.noreply.github.com>2022-01-18 20:35:03 +0100
commit0a5a78621b2b28f06af1f40c10ee8bb880f860a0 (patch)
treea984e64e7135923430bedcebefc4a824f4ff735b /interface-definitions/include/policy
parent385b72da4845e5c247aaeae9469ca04da216a4cb (diff)
downloadvyos-1x-0a5a78621b2b28f06af1f40c10ee8bb880f860a0.tar.gz
vyos-1x-0a5a78621b2b28f06af1f40c10ee8bb880f860a0.zip
firewall: T3560: Add support for MAC address groups
Diffstat (limited to 'interface-definitions/include/policy')
-rw-r--r--interface-definitions/include/policy/route-common-rule-ipv6.xml.i3
-rw-r--r--interface-definitions/include/policy/route-common-rule.xml.i3
2 files changed, 6 insertions, 0 deletions
diff --git a/interface-definitions/include/policy/route-common-rule-ipv6.xml.i b/interface-definitions/include/policy/route-common-rule-ipv6.xml.i
index 735edbd48..406125e55 100644
--- a/interface-definitions/include/policy/route-common-rule-ipv6.xml.i
+++ b/interface-definitions/include/policy/route-common-rule-ipv6.xml.i
@@ -232,6 +232,9 @@
<format>!&lt;MAC address&gt;</format>
<description>Match everything except the specified MAC address</description>
</valueHelp>
+ <constraint>
+ <validator name="mac-address-firewall"/>
+ </constraint>
</properties>
</leafNode>
#include <include/firewall/port.xml.i>
diff --git a/interface-definitions/include/policy/route-common-rule.xml.i b/interface-definitions/include/policy/route-common-rule.xml.i
index 4452f78fc..33c4ba77c 100644
--- a/interface-definitions/include/policy/route-common-rule.xml.i
+++ b/interface-definitions/include/policy/route-common-rule.xml.i
@@ -232,6 +232,9 @@
<format>!&lt;MAC address&gt;</format>
<description>Match everything except the specified MAC address</description>
</valueHelp>
+ <constraint>
+ <validator name="mac-address-firewall"/>
+ </constraint>
</properties>
</leafNode>
#include <include/firewall/port.xml.i>