vrf: T5174: ensure no duplicate VNIs can be defined

1 files changed, 23 insertions, 5 deletions

diff --git a/src/conf_mode/vrf_vni.py b/src/conf_mode/vrf_vni.py
index 87d7798b8..a7424b517 100644
--- a/src/conf_mode/vrf_vni.py
+++ b/src/conf_mode/vrf_vni.py
@@ -19,6 +19,7 @@ from sys import exit
 
 from vyos.config import Config
 from vyos.template import render_to_string
+from vyos.util import dict_search
 from vyos import ConfigError
 from vyos import frr
 from vyos import airbag
@@ -36,11 +37,19 @@ def get_config(config=None):
     else:
         return None
 
-    base = ['vrf', 'name', vrf_name]
-    tmp = conf.get_config_dict(base, key_mangling=('-', '_'),
-                               no_tag_node_value_mangle=True, get_first_key=True)
+    # Using duplicate L3VNIs makes no sense - it's also forbidden in FRR,
+    # thus VyOS CLI must deny this, too. Instead of getting only the dict for
+    # the requested VRF and den comparing it with depenent VRfs to not have any
+    # duplicate we will just grad ALL VRFs by default but only render/apply
+    # the configuration for the requested VRF - that makes the code easier and
+    # hopefully less error prone
+    vrf = conf.get_config_dict(['vrf'], key_mangling=('-', '_'),
+                               no_tag_node_value_mangle=True,
+                               get_first_key=True)
+
+    # Store name of VRF we are interested in for FRR config rendering
+    vrf.update({'only_vrf' : vrf_name})
 
-    vrf = {'name': {vrf_name: tmp}}
     return vrf
 
 def verify(vrf):
@@ -50,6 +59,15 @@ def verify(vrf):
     if len(argv) < 2:
         raise ConfigError('VRF parameter not specified when valling vrf_vni.py')
 
+    if 'name' in vrf:
+        vni_ids = []
+        for name, vrf_config in vrf['name'].items():
+            # VRF VNI (Virtual Network Identifier) must be unique on the system
+            if 'vni' in vrf_config:
+                if vrf_config['vni'] in vni_ids:
+                    raise ConfigError(f'VRF "{name}" VNI is not unique!')
+                vni_ids.append(vrf_config['vni'])
+
     return None
 
 def generate(vrf):
@@ -67,7 +85,7 @@ def apply(vrf):
     frr_cfg.load_configuration(frr_daemon)
     # There is only one VRF inside the dict as we read only one in get_config()
     if vrf and 'name' in vrf:
-        vrf_name = next(iter(vrf['name']))
+        vrf_name = vrf['only_vrf']
         frr_cfg.modify_section(f'^vrf {vrf_name}', stop_pattern='^exit-vrf', remove_stop_mark=True)
     if vrf and 'new_frr_config' in vrf:
         frr_cfg.add_before(frr.default_add_before, vrf['new_frr_config'])