Merge pull request #984 from sever-sever/T3786

tunnel: T3786: Add checks for source any and not key
vyos · Aug 30, 2021 · 9711774 · 9711774
2 parents 7050223 + 5c29377
commit 9711774
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/conf_mode/interfaces-tunnel.py b/src/conf_mode/interfaces-tunnel.py
@@ -94,6 +94,12 @@ def verify(tunnel):
             if 'direction' not in tunnel['parameters']['erspan']:
                 raise ConfigError('ERSPAN version 2 requires direction to be set!')
 
+    # If tunnel source address any and key not set
+    if tunnel['encapsulation'] in ['gre'] and \
+       tunnel['source_address'] == '0.0.0.0' and \
+       dict_search('parameters.ip.key', tunnel) == None:
+        raise ConfigError('Tunnel parameters ip key must be set!')
+
     verify_mtu_ipv6(tunnel)
     verify_address(tunnel)
     verify_vrf(tunnel)