diff options
Diffstat (limited to 'src/conf_mode/interfaces_macsec.py')
| -rwxr-xr-x | src/conf_mode/interfaces_macsec.py | 12 |
1 files changed, 10 insertions, 2 deletions
diff --git a/src/conf_mode/interfaces_macsec.py b/src/conf_mode/interfaces_macsec.py index 3c043e11e..5aae52c02 100755 --- a/src/conf_mode/interfaces_macsec.py +++ b/src/conf_mode/interfaces_macsec.py @@ -23,6 +23,7 @@ from vyos.configdep import set_dependents from vyos.configdep import call_dependents from vyos.configdict import get_interface_dict from vyos.configdict import is_node_changed +from vyos.configdict import is_vrf_changed from vyos.configdict import is_source_interface from vyos.configverify import verify_vrf from vyos.configverify import verify_address @@ -84,6 +85,10 @@ def get_config(config=None): if 'static_arp' in macsec: set_dependents('static_arp', conf) + # Check vrf membership, to ensure firewall is updated + if is_vrf_changed(conf, ifname): + set_dependents('firewall', conf) + return macsec @@ -187,6 +192,9 @@ def apply(macsec): if os.path.isfile(wpa_suppl_conf.format(**macsec)): os.unlink(wpa_suppl_conf.format(**macsec)) + # run the dependents + call_dependents() + return None # It is safe to "re-create" the interface always, there is a sanity @@ -199,8 +207,8 @@ def apply(macsec): if not is_systemd_service_running(systemd_service) or 'shutdown_required' in macsec: call(f'systemctl reload-or-restart {systemd_service}') - if 'static_arp' in macsec: - call_dependents() + # run the dependents + call_dependents() return None |