This repository was archived by the owner on Mar 6, 2024. It is now read-only.
This repository was archived by the owner on Mar 6, 2024. It is now read-only.
sub-allocate-ip on EDGE modify Firewall Rules User Created #562
Description
Describe the bug
After applying the NSX Log4Shell workarround, the ip suballocate to the EDGE is getting an error.
What happens is that it modifies the FW rules created by the user at the edge, emptying all the fields and putting ANY in the source, destination and protocols.
The command is:
vcd gateway sub-allocate-ip add S01-INFRA-TRAINING-PROD-E01 --external-network 10.231.1.0-24 --ip-range 10.231.1.29-10.231.1.29
S01-INFRA-TRAINING-PROD-E01: VSE
10.231.1.0-24: External Network Name
10.231.1.29-10.231.1.29: IP Range
Reproduction steps
1. Use ORG
2. Use VDC
3. Suballocate IP with this command: vcd gateway sub-allocate-ip add S01-INFRA-TRAINING-PROD-E01 --external-network 10.231.1.0-24 --ip-range 10.231.1.29-10.231.1.29
...Expected behavior
IP suballocated successfully and EDGE services without changes
Additional context
No response