I’m trying to come up with logic to limit connections using tags. I have 1 tag with 3 options, Robot, Operator, Server.
tag device_type id 500 enum 100 operator enum 200 robot enum 300 server default 100
I’m trying to come up with the logic to limit communication for like device types. (i.e. 2 operators can’t connect to each other, but an operators can connect to robots). I’ve tried dropping if tdiff of tag is 0, I’ve tried accepting with different tags and dropping everything else. No matter what I try, it drops all traffic unless I open it up. I’ve also trie this using completely separate tags for each type as well with the same result.
drop tdiff device_type 0 ;
What would the most effective method be to deal with this?