Page MenuHomeVyOS Platform
Create Task
Maniphest T6086

NAT does not work with network-groups
Closed, ResolvedPublicBUG
Actions

Description

It is not possible to configure NAT rules with network-groups. For example:

set firewall group network-group NG1 network '192.0.2.32/27'
set nat source rule 110 source group network-group NG1
set nat source rule 110 translation address '192.0.2.248/32'
[edit]
vyos@vyos# commit

Configuration file errors encountered!

[[nat]] failed

Details

Difficulty level
Normal (likely a few hours)
Version
1.5-rolling-202403011733, 1.4-rolling-202403010309
Why the issue appeared?
Implementation mistake
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)

Event Timeline

zsdc changed the task status from Open to Confirmed.Mar 1 2024, 11:58 PM
zsdc assigned this task to n.fort.
zsdc triaged this task as Unbreak Now! priority.
zsdc created this task.
zsdc changed Why the issue appeared? from Will be filled on close to Implementation mistake.
n.fort added a comment.Mar 4 2024, 11:37 AM

PR: https://github.com/vyos/vyos-1x/pull/3080

n.fort changed the task status from Confirmed to In progress.Mar 4 2024, 11:37 AM
n.fort changed the task status from In progress to Needs testing.Mar 4 2024, 2:02 PM
n.fort closed this task as Resolved.Mar 8 2024, 12:01 PM
pasik added a subscriber: pasik.Mar 8 2024, 1:08 PM
Viacheslav moved this task from Need Triage to Finished on the VyOS 1.5 Circinus board.Mar 9 2024, 9:33 AM
Viacheslav moved this task from Need Triage to Finished on the VyOS 1.4 Sagitta board.
dmbaturin edited projects, added VyOS 1.4 Sagitta (1.4.0-epa2); removed VyOS 1.4 Sagitta.Mar 11 2024, 6:51 PM