diff options
| author | Christian Breunig <christian@breunig.cc> | 2023-12-21 16:27:53 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-12-21 16:27:53 +0100 |
| commit | 2df14d0a2b07061835d1718457925355a7a951c3 (patch) | |
| tree | ad3c2657c66ea7e94bb28fd41b8b99a79607b05c /src/conf_mode/vrf.py | |
| parent | 11b3750c4a01a120dc386e72a6781b1c16ed1120 (diff) | |
| parent | 774cc97eda61eb0b91df820797fb3c705d0073d5 (diff) | |
| download | vyos-1x-2df14d0a2b07061835d1718457925355a7a951c3.tar.gz vyos-1x-2df14d0a2b07061835d1718457925355a7a951c3.zip | |
Merge pull request #2663 from c-po/srv6-part2
srv6: T591: enable SR enabled packet processing on defined interfaces
Diffstat (limited to 'src/conf_mode/vrf.py')
| -rwxr-xr-x | src/conf_mode/vrf.py | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/src/conf_mode/vrf.py b/src/conf_mode/vrf.py index 37625142c..9b1b6355f 100755 --- a/src/conf_mode/vrf.py +++ b/src/conf_mode/vrf.py @@ -214,6 +214,18 @@ def apply(vrf): # Delete the VRF Kernel interface call(f'ip link delete dev {tmp}') + # Enable/Disable VRF strict mode + # When net.vrf.strict_mode=0 (default) it is possible to associate multiple + # VRF devices to the same table. Conversely, when net.vrf.strict_mode=1 a + # table can be associated to a single VRF device. + # + # A VRF table can be used by the VyOS CLI only once (ensured by verify()), + # this simply adds an additional Kernel safety net + strict_mode = '0' + # Set to 1 if any VRF is defined + if 'name' in vrf: strict_mode = '1' + sysctl_write('net.vrf.strict_mode', strict_mode) + if 'name' in vrf: # Separate VRFs in conntrack table # check if table already exists |