Project

General

Profile

Actions

Bug #543

closed

IP alias input validation problem

Added by Chris Buechler almost 14 years ago. Updated over 13 years ago.

Status:
Resolved
Priority:
Low
Assignee:
-
Category:
Virtual IP Addresses
Target version:
Start date:
04/24/2010
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.0
Affected Architecture:

Description

When you have an interface with IP "none" configured, and have an IP alias on that interface, after adding the IP alias you can no longer edit that IP alias. It triggers input validation "The $interface IP address may not be used in a virtual entry."

Interface config:

                <opt2>
                        <descr>OPT2</descr>
                        <if>em3</if>
                        <enable/>
                        <alias-address/>
                        <alias-subnet>32</alias-subnet>
                        <spoofmac/>
                </opt2>

VIP config:

                <vip>
                        <mode>ipalias</mode>
                        <interface>opt2</interface>
                        <descr/>
                        <type>single</type>
                        <subnet_bits>24</subnet_bits>
                        <subnet>192.168.4.5</subnet>
                </vip>

It's initially added fine, but if you go in and edit it, you cannot save it.

Actions #1

Updated by Ermal Luçi almost 14 years ago

  • Status changed from New to Feedback

I cannot reproduce this on latest snapshots.

Actions #2

Updated by Chris Buechler almost 14 years ago

  • Status changed from Feedback to New

Sent you a config to replicate it.

Actions #3

Updated by Ermal Luçi almost 14 years ago

I am not sure if there is a solution to this.
I investigated on providing a fix for this but otherwise it will break cases when an openvpn/ppp/gre/gif type interface is assigned.
Not sure if this should be allowed to have an alias for interfaces that do not have an ip address configured at all, since it does not make even sense to have an alias in an interface that has not an ip?!
This alias will be treated as the interface ip. I will look if this can be handled directly in the pfSense php module though i think not.

Actions #4

Updated by Chris Buechler almost 14 years ago

It probably really doesn't make sense to add a VIP IP alias on an interface configured without an IP. So the solution can be as simple as not allowing an alias VIP if the interface IP is set to "none". No sense in putting a lot of time into such an unusual situation that people aren't likely to hit anyway.

Actions #5

Updated by Erik Fonnesbeck almost 14 years ago

When changing it to none, if there are already existing alias VIPs, it could either not allow changing it to none until they are removed, or warn that they will be deleted when changing it to none.

Actions #6

Updated by Ermal Luçi over 13 years ago

  • Priority changed from Normal to Low
Actions #7

Updated by Ermal Luçi over 13 years ago

  • Status changed from New to Feedback
Actions #8

Updated by Chris Buechler over 13 years ago

  • Status changed from Feedback to Resolved
Actions

Also available in: Atom PDF