Page MenuHomeVyOS Platform

Migrate "firewall groups" to new CLI syntax
Open, NormalPublicFEATURE REQUEST

Description

Summary

firewall groups like IPv4/IPv4 addresses or prefixes are no longer not only used for the firewall subsystem - but also on other parts of the system. See T7923 for more info.

Use case

Add a more prominent subsystem for shared ressources like address groups.

Additional information

Old CLINew CLI
set firewall group address-groupset resource-group ipv4-address
set firewall group domain-groupset resource-group domain
set firewall group dynamic-groupset resource-group <TBD>
set firewall group interface-groupset resource-group interface
set firewall group ipv6-address-groupset resource-group ipv6-address
set firewall group ipv6-network-groupset resource-group ipv6-network
set firewall group mac-groupset resource-group mac-address
set firewall group network-groupset resource-group ipv4-network
set firewall group port-groupset resource-group port-group
set firewall group remote-groupset resource-group <TBD>

Details

Version
-
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Feature (new functionality)

Related Objects