sub-allocate-ip on EDGE modify Firewall Rules User Created

Open cgonzalez-uy opened this issue 4 years ago • 0 comments

Describe the bug

After applying the NSX Log4Shell workarround, the ip suballocate to the EDGE is getting an error.

What happens is that it modifies the FW rules created by the user at the edge, emptying all the fields and putting ANY in the source, destination and protocols.

The command is: vcd gateway sub-allocate-ip add S01-INFRA-TRAINING-PROD-E01 --external-network 10.231.1.0-24 --ip-range 10.231.1.29-10.231.1.29

S01-INFRA-TRAINING-PROD-E01: VSE 10.231.1.0-24: External Network Name 10.231.1.29-10.231.1.29: IP Range

Reproduction steps

1. Use ORG
2. Use VDC
3. Suballocate IP with this command: vcd gateway sub-allocate-ip add S01-INFRA-TRAINING-PROD-E01 --external-network 10.231.1.0-24 --ip-range 10.231.1.29-10.231.1.29
...

Expected behavior

IP suballocated successfully and EDGE services without changes

Additional context

No response

Dec 27 '21 15:12 cgonzalez-uy