Page MenuHomeVyOS Platform

firewall: port-group requires protocol to be set - but not in VyOS 1.3
Closed, ResolvedPublicBUG

Description

From: https://forum.vyos.io/t/wireguard-not-functioning-on-latest-builds/8361/2

image.png (102×591 px, 1 KB)

image.png (495×544 px, 5 KB)

Reproduce

The following CLI commands worked on VyOS 1.3 but no longer do on 1.4 - protocol must be specified.
During config migration protocol is set to tcp_udp

set firewall group port-group ipsec port '4500'
set firewall name out-local default-action 'drop'
set firewall name out-local rule 10 action 'accept'
set firewall name out-local rule 10 state established 'enable'
set firewall name out-local rule 10 state related 'enable'
set firewall name out-local rule 11 action 'drop'
set firewall name out-local rule 11 state invalid 'enable'
set firewall name out-local rule 50 action 'accept'
set firewall name out-local rule 50 destination group port-group 'ipsec'
set firewall name out-local rule 50 source address '1.2.3.4/32'
set firewall name out-local rule 50 state new 'enable'

Details

Difficulty level
Easy (less than an hour)
Version
1.4-rolling
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Config syntax change (migratable)
Issue type
Bug (incorrect behavior)

Event Timeline

c-po changed the task status from Open to In progress.Jan 28 2022, 9:11 PM
c-po claimed this task.
c-po triaged this task as Normal priority.
c-po created this task.