Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Migration: MAC/IP binding #983

Open
gsanchietti opened this issue Dec 19, 2024 · 0 comments
Open

Migration: MAC/IP binding #983

gsanchietti opened this issue Dec 19, 2024 · 0 comments

Comments

@gsanchietti
Copy link
Member

gsanchietti commented Dec 19, 2024

Allow migrating MAC/IP binding configurations from NethServer7 to ensure a smooth transition for users upgrading to the latest version.

This includes migrating existing bindings and ensuring that the new system can recognize and properly utilize these configurations.

The procedure should:

  • migrate binding status: if binding was enable on NS7, it must be enabled on all NS8 interfaces
    original configuration is stored inside: firewall MACValidation
  • map the original configuration to soft and hard binding

NS7 configuration is stored inside the following options:

  • config getprop firewall MACValidation, to enable or disable the validation
  • config getprop firewall MACValidationPolicy can be drop or accept

These options must be mapped to:

  • 0, if MACValidation is disabled
  • 1 (soft binding), if MACValidation is enabled and MACValidationPolicy is accept
  • 2 (hard binding), if MACValidation is enabled and MACValidationPolicy is drop

Other changes:

  • make sure MAC binding is listed between migrated configuration inside nethserver-firewall-migration UI
  • update the documentation to reflect the new feature
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: ToDo 🕐
Development

No branches or pull requests

1 participant