Page MenuHomeVyOS Platform

Add XML for firewall conf-mode
Closed, ResolvedPublicFEATURE REQUEST

Description

Add XML for firewall configuration mode.

Details

Difficulty level
Hard (possibly days)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Perfectly compatible
Issue type
Unspecified (please specify)

Related Objects

StatusSubtypeAssignedTask
OpenNone
ResolvedFEATURE REQUESTViacheslav

Event Timeline

Viacheslav triaged this task as Normal priority.
Viacheslav changed Difficulty level from Unknown (require assessment) to Hard (possibly days).

PR https://github.com/vyos/vyos-1x/pull/854
Add XML for the firewall. For future rewriting to Python style.

set nfirewall all-ping 'enable'
set nfirewall group address-group ADDR address '10.0.0.1-10.0.0.5'
set nfirewall group address-group ADDR address '192.0.2.1'
set nfirewall name FOO default-action 'drop'
set nfirewall name FOO rule 10 action 'permit'
set nfirewall name FOO rule 10 destination address '192.0.2.1'
set nfirewall name FOO rule 10 destination port '22'
set nfirewall state-policy established log enable

Commit

vyos@r6-roll# commit
[ nfirewall ]
{'all_ping': 'enable',
 'group': {'address_group': {'ADDR': {'address': ['10.0.0.1-10.0.0.5',
                                                  '192.0.2.1']}}},
 'name': {'FOO': {'default_action': 'drop',
                  'rule': {'10': {'action': 'permit',
                                  'destination': {'address': '192.0.2.1',
                                                  'port': '22'}}}}},
 'state_policy': {'established': {'log': {'enable': {}}}}}

[edit]
vyos@r6-roll#
Viacheslav changed the task status from Open to Needs testing.May 25 2021, 8:20 PM
c-po set Issue type to Unspecified (please specify).