@trystan It’s one of the old mistaked we inherited with the Vyatta codebase. In Vyatta 6.5, some people (not naming names—sometimes good people get horrible ideas), decided to redesign that syntax, and disregarded a whole bunch of use cases. To add insult to injury, that change was backwards-incompatible and people had to redo their configs by hand.
To undo the damage, we’ll need to rewrite those scripts from scratch (the whole firewall subsystem needs a complete rewrite anyway), and also add a migration script to ensure compatibility.
The new, sane migration script API is already there, and we have already tested full rewrites on smaller components such as VRRP, so we hope we’ll get this done in 1.3.0
For now, we are stuck with it though.