Project

General

Profile

Actions
Copy link

Feature #16613

open

Allow using interface subnet macros with interfaces which only contain VIPs

Added by Marcos M 22 days ago. Updated about 3 hours ago.

Status:
Feedback
Priority:
Normal
Assignee:
Marcos M
Category:
Aliases / Tables
Target version:
2.9.0
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
25.11.1
Release Notes:
Default

Description

Rules which use interface macros (e.g. OPT1 subnets) are only generated when the interface contains a primary address. If the interface does not have an address assigned but does have a VIP, the rule is omitted from the ruleset.

Files

clipboard-202512311356-g7nph.png (11.3 KB) clipboard-202512311356-g7nph.png Alhusein Zawi, 12/31/2025 09:56 PM
Actions
Copy link
 #1

Updated by Marcos M 22 days ago

  • Status changed from New to In Progress
  • Target version set to 2.9.0
  • Plus Target Version set to 26.03
Actions
Copy link
 #2

Updated by Marcos M 21 days ago

  • Status changed from In Progress to Feedback
  • % Done changed from 0 to 100
Actions
Copy link
 #3

Updated by Alhusein Zawi 19 days ago

When attempting to add a VIP to an interface that does not have a primary IP address, a validation message appears and prevents the VIP from being added.

In my opinion, if an interface does not have a primary IP address, it would be better to remove the interface address and interface subnet (for example, OPT1 address and OPT1 subnets) and then add the VIP subnets instead.

26.03.a.20251231.2004

Actions
Copy link
 #4

Updated by Marcos M 19 days ago

The situation occurs when the WAN is set to DHCP and the interface loses its address (e.g. the DHCP server is unavailable to give a lease). The rule generation needs to account for this when a VIP has already been assigned (while it still had an address).

Actions
Copy link
 #5

Updated by Marcos M 6 days ago

  • Plus Target Version changed from 26.03 to 25.11.1
Actions
Copy link
 #6

Updated by Jim Pingle about 3 hours ago

  • Subject changed from Allow using interface subnet macros which only have VIPs to Allow using interface subnet macros with interfaces which only contain VIPs
Actions
Copy link

Also available in: Atom PDF