Page MenuHomeVyOS Platform

NAT does not work with network-groups
Closed, ResolvedPublicBUG


It is not possible to configure NAT rules with network-groups. For example:

set firewall group network-group NG1 network ''
set nat source rule 110 source group network-group NG1
set nat source rule 110 translation address ''
vyos@vyos# commit

Configuration file errors encountered!

[[nat]] failed


Difficulty level
Normal (likely a few hours)
1.5-rolling-202403011733, 1.4-rolling-202403010309
Why the issue appeared?
Implementation mistake
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)

Event Timeline

zsdc changed the task status from Open to Confirmed.Mar 1 2024, 11:58 PM
zsdc assigned this task to n.fort.
zsdc triaged this task as Unbreak Now! priority.
zsdc created this task.
zsdc changed Why the issue appeared? from Will be filled on close to Implementation mistake.
n.fort changed the task status from Confirmed to In progress.Mar 4 2024, 11:37 AM
n.fort changed the task status from In progress to Needs testing.Mar 4 2024, 2:02 PM