summaryrefslogtreecommitdiff
path: root/python
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2021-03-17 20:58:18 +0100
committerChristian Poessinger <christian@poessinger.com>2021-03-17 20:58:18 +0100
commit5adcc4ca30676338fca9a06409bbc72af4f68a1f (patch)
treef7dc3f2772ff7b75297d718a7d59b8cc3c466475 /python
parent5591edc5358c88a8ff947831fdc03b5949f09bee (diff)
downloadvyos-1x-5adcc4ca30676338fca9a06409bbc72af4f68a1f.tar.gz
vyos-1x-5adcc4ca30676338fca9a06409bbc72af4f68a1f.zip
vyos.configverify: T3344: verify_vrf() must handle "default" VRF
We can leak routes back to the default VRF, thus the check added by commit 9184dfb5 ("static: vrf: T3344: add target vrf verify()") must have a "bail out" option when one want's to leak routes into the default VRF.
Diffstat (limited to 'python')
-rw-r--r--python/vyos/configverify.py2
1 files changed, 1 insertions, 1 deletions
diff --git a/python/vyos/configverify.py b/python/vyos/configverify.py
index 7cf2cb8f9..718b7445d 100644
--- a/python/vyos/configverify.py
+++ b/python/vyos/configverify.py
@@ -80,7 +80,7 @@ def verify_vrf(config):
recurring validation of VRF configuration.
"""
from netifaces import interfaces
- if 'vrf' in config:
+ if 'vrf' in config and config['vrf'] != 'default':
if config['vrf'] not in interfaces():
raise ConfigError('VRF "{vrf}" does not exist'.format(**config))