Firewall Rules for Interfaces


#1

I create VLAN interfaces for certain projects. Each project will get an inside and an outside VLAN interface.

How easy would be to modify the VyOS firewall templates to allow this?

Something like this:
set firewall name project199 rule 199 description “Allow from VLAN 199 to VLAN 1199”
set firewall name project199 rule 199 source interface eth0.199
set firewall name project199 rule 199 destination interface eth1.1199
set firewall name project199 rule 199 action accept

This way I can minimize the number of subnet allow rules.

Thanks,
Allan