From f9f71bb33728b5086c62670142d81da0a586ef99 Mon Sep 17 00:00:00 2001 From: Timotej Lazar Date: Wed, 26 Mar 2025 10:14:15 +0100 Subject: [PATCH] =?UTF-8?q?firewall:=20don=E2=80=99t=20import=20or=20adver?= =?UTF-8?q?tise=20subnets=20for=20inside=20networks?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This is part two to commit 3b3e759c. --- roles/firewall/templates/frr.conf.j2 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/roles/firewall/templates/frr.conf.j2 b/roles/firewall/templates/frr.conf.j2 index 9937aa8..9078004 100644 --- a/roles/firewall/templates/frr.conf.j2 +++ b/roles/firewall/templates/frr.conf.j2 @@ -75,9 +75,9 @@ ip prefix-list fabric permit 10.34.0.0/24 ge 32 {% for prefix in vrf_prefixes | rejectattr('vrf.name', '==', 'outside') | sort(attribute='family.value') %} {% if prefix.family.value == 4 %} -ip prefix-list office permit {{ prefix.prefix }} ge {{ prefix.prefix | ipaddr('prefix') }} +ip prefix-list office permit {{ prefix.prefix }} {% elif prefix.family.value == 6 %} -ipv6 prefix-list office permit {{ prefix.prefix }} ge {{ prefix.prefix | ipaddr('prefix') }} +ipv6 prefix-list office permit {{ prefix.prefix }} {% endif %} {% endfor %}