When using IPv6 zone base firewalling it is not possible to alter a firewall rule, still in use error is reported:
Reproduce:
vyos@vyos# show firewall ipv6-name ipv6-name WAN-LOCAL-v6 { default-action accept + enable-default-log } vyos@vyos# show zone-policy zone LOCAL from WAN firewall { ipv6-name WAN-LOCAL-v6 name WAN-LOCAL }
vyos@vyos# commit [ firewall ipv6-name WAN-LOCAL-v6 ] Firewall configuration error: Cannot delete rule set "WAN-LOCAL-v6" (still in use) [[firewall ipv6-name WAN-LOCAL-v6]] failed Commit failed