Set firewall zone wan interface

General questions
1

I’m on Vyos 1.5. I am building a zone-based firewall. Whenever I assign an interface to the zone, it errors-out.

vyos@vyos-router# set firewall zone wan interface eth0
Configuration path: firewall zone wan [interface] is not valid
Set failed

The interface exists:

eth0         192.168.3.9/24    20:7c:14:f8:35:8e  default   9000  u/u    WAN

The zone exists:

+zone WAN {

+    default-action drop

+}

But I can’t set the interface. With or without quotes.

2

set firewall zone WAN member interface 'eth0'

You can use tab completion and ? to see possible completions.

-> set firewall zone WAN
Possible completions:
   default-action       Default-action for traffic coming into this zone (default: drop)
   default-log          Log packets hitting default-action
   description          Description
+> from                 Zone from which to filter traffic
 > intra-zone-filtering Intra-zone filtering
   local-zone           Zone to be local-zone
 > member               Interface associated with zone

-> set firewall zone WAN member interface
Possible completions:
   <text>               Interface name, wildcard (*) supported
   eth0
   eth0.2
   eth0.3
   eth0.4
   eth0.5
   eth0.6
   eth1
   eth2
   eth3
   eth4
   eth5
   eth6
   eth7
   lo
   veth0
   veth1
   veth2
   veth3
   wwan0
3

Thank you! The “member” was missing. Was not in any examples …