vyos_firewall_rules: Support for `log enable` on individual rules - Githubissues

vyos / vyos.vyos

Ansible Network Collection for VyOS

GNU General Public License v3.0

72 stars 66 forks source link

vyos_firewall_rules: Support for `log enable` on individual rules #235

Closed chenxiaolong closed 2 years ago

chenxiaolong commented 2 years ago

SUMMARY

It looks like the vyos_firewall_rules module currently supports enabling logging for the default rule, but not for user-specified rules. Specifically, it doesn't seem like it's currently possible to set: https://docs.vyos.io/en/latest/configuration/firewall/index.html#cfgcmd-set-firewall-name-name-rule-1-999999-log-disable-enable

ISSUE TYPE

Feature Idea

COMPONENT NAME

vyos_firewall_rules

ADDITIONAL INFORMATION

I'd imagine a new field might look something like:

- vyos.vyos.vyos_firewall_rules:
    config:
      - afi: ipv6
        rule_sets:
         - name: wan-lan
            rules:
              - number: 2
                action: drop
                state:
                  invalid: true
                log: true

GomathiselviS commented 2 years ago

Closed by https://github.com/ansible-collections/vyos.vyos/pull/238