firewall: port-group requires protocol to be set - but not in VyOS 1.3
Closed, ResolvedPublicBUG
Actions

Assigned To

Authored By

	c-po
	Jan 28 2022, 9:11 PM

Description

From: https://forum.vyos.io/t/wireguard-not-functioning-on-latest-builds/8361/2

Reproduce

The following CLI commands worked on VyOS 1.3 but no longer do on 1.4 - protocol must be specified.
During config migration protocol is set to tcp_udp

set firewall group port-group ipsec port '4500'
set firewall name out-local default-action 'drop'
set firewall name out-local rule 10 action 'accept'
set firewall name out-local rule 10 state established 'enable'
set firewall name out-local rule 10 state related 'enable'
set firewall name out-local rule 11 action 'drop'
set firewall name out-local rule 11 state invalid 'enable'
set firewall name out-local rule 50 action 'accept'
set firewall name out-local rule 50 destination group port-group 'ipsec'
set firewall name out-local rule 50 source address '1.2.3.4/32'
set firewall name out-local rule 50 state new 'enable'