1 files changed, 10 insertions, 0 deletions
diff --git a/src/conf_mode/interfaces_openvpn.py b/src/conf_mode/interfaces_openvpn.py
index f2a49327a..ec5840369 100755
--- a/src/conf_mode/interfaces_openvpn.py
+++ b/src/conf_mode/interfaces_openvpn.py
@@ -32,7 +32,10 @@ from vyos.base import DeprecationWarning
 from vyos.config import Config
 from vyos.configdict import get_interface_dict
 from vyos.configdict import is_node_changed
+from vyos.configdict import is_vrf_changed
 from vyos.configdiff import get_config_diff
+from vyos.configdep import set_dependents
+from vyos.configdep import call_dependents
 from vyos.configverify import verify_vrf
 from vyos.configverify import verify_bridge_delete
 from vyos.configverify import verify_mirror_redirect
@@ -181,6 +184,10 @@ def get_config(config=None):
     else:
         openvpn['protocol_modifier'] = ''
 
+    # Check vrf membership, to ensure firewall is updated
+    if is_vrf_changed(conf, ifname):
+        set_dependents('firewall', conf)
+
     return openvpn
 
 def is_ec_private_key(pki, cert_name):
@@ -855,6 +862,9 @@ def apply(openvpn):
     o = VTunIf(**openvpn)
     o.update(openvpn)
 
+    # run the dependents
+    call_dependents()
+
     return None