As we know vyos 1.4 merge iptables to nftables, then ipset command is not working anymore.
Is there any way to implement shell script loading CIDR on VyOS 1.4?
bash #implement with ipset set firewall group network-group us-ip-ranges # cat /config/scripts/vyos-postconfig-bootup.script for l in `cat /config/usipranges.txt`; do sudo ipset add us-ip-ranges $l;done
The similar task https://vyos.dev/T4797
You can add manually nft rules that used for firewall group, but they will overwritten per next firewall change/commit. The whole firewall config will overwritten.
There are 2 ways. Somehow use it in CLI or use native (nft) tables, chains, group-sets and rules which are not overlapping with generated “system” firewall ruleset