vyos: how does one use an address group in a rule?

Question

I have a (modified) configuration looking like this:

When I try to commit, however, I get an error message: "Configuration error: "OUR-SERVERS" is not a valid IP range. I really want to have individual (/32) addresses in the group that the rule references. How can I do that?

score 1 · Accepted Answer · answered Oct 23 '18 at 04:39

1

From what I can tell, you just have one extra item in rule 1 (address OUR-SERVERS). This should fix it:

delete firewall name outside-in rule 1 source address OUR-SERVERS

answered Oct 23 '18 at 04:39

fission

3,506
2
20
27

1

So, you are saying only the "group { }" entry belongs there. So, all I need for the rule source is: `set firewall name outside-in rule 1 source group address-group OUR-SERVERS` Thanks. – Kevin Buchs Oct 23 '18 at 15:46

vyos: how does one use an address group in a rule?

1 Answers1