diff options
| author | Christian Breunig <christian@breunig.cc> | 2023-09-06 20:25:02 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-09-06 20:25:02 +0200 |
| commit | e0825b52df4a2a4ce6d137bb8adc553f6e71fc0b (patch) | |
| tree | 997c774d1d77276337d51a7e6431074bbcc28eb4 /interface-definitions | |
| parent | e208d75edd79f5b8637276c27f23ee21fd423d06 (diff) | |
| parent | be3d2f9f6623396f2e9c6543f67d81161c7ad94b (diff) | |
| download | vyos-1x-e0825b52df4a2a4ce6d137bb8adc553f6e71fc0b.tar.gz vyos-1x-e0825b52df4a2a4ce6d137bb8adc553f6e71fc0b.zip | |
Merge pull request #2208 from sarthurdev/T5550
interface: T5550: Interface source-validation priority over global value
Diffstat (limited to 'interface-definitions')
| -rw-r--r-- | interface-definitions/include/firewall/global-options.xml.i | 32 |
1 files changed, 28 insertions, 4 deletions
diff --git a/interface-definitions/include/firewall/global-options.xml.i b/interface-definitions/include/firewall/global-options.xml.i index a63874cb0..e655cd6ac 100644 --- a/interface-definitions/include/firewall/global-options.xml.i +++ b/interface-definitions/include/firewall/global-options.xml.i @@ -145,21 +145,21 @@ </leafNode> <leafNode name="source-validation"> <properties> - <help>Policy for source validation by reversed path, as specified in RFC3704</help> + <help>Policy for IPv4 source validation by reversed path, as specified in RFC3704</help> <completionHelp> <list>strict loose disable</list> </completionHelp> <valueHelp> <format>strict</format> - <description>Enable Strict Reverse Path Forwarding as defined in RFC3704</description> + <description>Enable IPv4 Strict Reverse Path Forwarding as defined in RFC3704</description> </valueHelp> <valueHelp> <format>loose</format> - <description>Enable Loose Reverse Path Forwarding as defined in RFC3704</description> + <description>Enable IPv4 Loose Reverse Path Forwarding as defined in RFC3704</description> </valueHelp> <valueHelp> <format>disable</format> - <description>No source validation</description> + <description>No IPv4 source validation</description> </valueHelp> <constraint> <regex>(strict|loose|disable)</regex> @@ -227,6 +227,30 @@ </properties> <defaultValue>disable</defaultValue> </leafNode> + <leafNode name="ipv6-source-validation"> + <properties> + <help>Policy for IPv6 source validation by reversed path, as specified in RFC3704</help> + <completionHelp> + <list>strict loose disable</list> + </completionHelp> + <valueHelp> + <format>strict</format> + <description>Enable IPv6 Strict Reverse Path Forwarding as defined in RFC3704</description> + </valueHelp> + <valueHelp> + <format>loose</format> + <description>Enable IPv6 Loose Reverse Path Forwarding as defined in RFC3704</description> + </valueHelp> + <valueHelp> + <format>disable</format> + <description>No IPv6 source validation</description> + </valueHelp> + <constraint> + <regex>(strict|loose|disable)</regex> + </constraint> + </properties> + <defaultValue>disable</defaultValue> + </leafNode> <leafNode name="ipv6-src-route"> <properties> <help>Policy for handling IPv6 packets with routing extension header</help> |