mirror of
https://github.com/OpenNebula/one.git
synced 2025-03-21 14:50:08 +03:00
Feature #3175: Add support for IPSEC
This commit is contained in:
parent
05fa0053d8
commit
86be6b2764
@ -259,7 +259,13 @@ class Rule
|
||||
|
||||
# Getters
|
||||
def protocol
|
||||
@rule[:protocol].downcase.to_sym rescue nil
|
||||
p = @rule[:protocol].downcase.to_sym rescue nil
|
||||
|
||||
if p == :ipsec
|
||||
:esp
|
||||
else
|
||||
p
|
||||
end
|
||||
end
|
||||
|
||||
def rule_type
|
||||
@ -283,7 +289,7 @@ class Rule
|
||||
valid = true
|
||||
error_message = []
|
||||
|
||||
if !protocol || ![:tcp, :udp, :icmp].include?(protocol)
|
||||
if !protocol || ![:tcp, :udp, :icmp, :esp].include?(protocol)
|
||||
error_message << "Invalid protocol: #{protocol}"
|
||||
valid = false
|
||||
end
|
||||
@ -298,6 +304,11 @@ class Rule
|
||||
valid = false
|
||||
end
|
||||
|
||||
if range && protocol == :esp
|
||||
error_message << "IPSEC does not support port ranges"
|
||||
valid = false
|
||||
end
|
||||
|
||||
if net && !valid_net?
|
||||
error_message << "Invalid net: IP:'#{@rule[:ip]}' SIZE:'#{@rule[:size]}'"
|
||||
valid = false
|
||||
|
Loading…
x
Reference in New Issue
Block a user