[caclmgrd] Fix application of IPv6 service ACL rules (part 2) (#4036)

sonic-net · Jan 21, 2020 · ccdc097 · ccdc097
1 parent 9618c80
commit ccdc097
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/files/image_config/caclmgrd/caclmgrd b/files/image_config/caclmgrd/caclmgrd
@@ -225,7 +225,9 @@ class ControlPlaneAclManager(object):
                             rule_cmd = "ip6tables" if table_ip_version == 6 else "iptables"
                             rule_cmd += " -A INPUT -p {}".format(ip_protocol)
 
-                            if "SRC_IP" in rule_props and rule_props["SRC_IP"]:
+                            if "SRC_IPV6" in rule_props and rule_props["SRC_IPV6"]:
+                                rule_cmd += " -s {}".format(rule_props["SRC_IPV6"])
+                            elif "SRC_IP" in rule_props and rule_props["SRC_IP"]:
                                 rule_cmd += " -s {}".format(rule_props["SRC_IP"])
 
                             rule_cmd += " --dport {}".format(dst_port)