Skip to content

Commit 268c57a

Browse files
authored
[cacl] Update DHCP rules per change in caclmgrd (#1925)
Update control plane application test to reflect the changes made to DHCP rules in sonic-net/sonic-buildimage#4995 (i.e., no longer filtering on source port).
1 parent e98c12a commit 268c57a

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

tests/cacl/test_cacl_application.py

+4-4
Original file line numberDiff line numberDiff line change
@@ -192,12 +192,12 @@ def generate_expected_rules(duthost):
192192
ip6tables_rules.append("-A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j ACCEPT")
193193

194194
# Allow all incoming IPv4 DHCP packets
195-
iptables_rules.append("-A INPUT -p udp -m udp --sport 67:68 --dport 67:68 -j ACCEPT")
196-
ip6tables_rules.append("-A INPUT -p udp -m udp --sport 67:68 --dport 67:68 -j ACCEPT")
195+
iptables_rules.append("-A INPUT -p udp -m udp --dport 67:68 -j ACCEPT")
196+
ip6tables_rules.append("-A INPUT -p udp -m udp --dport 67:68 -j ACCEPT")
197197

198198
# Allow all incoming IPv6 DHCP packets
199-
iptables_rules.append("-A INPUT -p udp -m udp --sport 546:547 --dport 546:547 -j ACCEPT")
200-
ip6tables_rules.append("-A INPUT -p udp -m udp --sport 546:547 --dport 546:547 -j ACCEPT")
199+
iptables_rules.append("-A INPUT -p udp -m udp --dport 546:547 -j ACCEPT")
200+
ip6tables_rules.append("-A INPUT -p udp -m udp --dport 546:547 -j ACCEPT")
201201

202202
# Allow all incoming BGP traffic
203203
iptables_rules.append("-A INPUT -p tcp -m tcp --dport 179 -j ACCEPT")

0 commit comments

Comments
 (0)