api: fix scoping for ipset endpoint

[pve-firewall.git] / src / PVE / API2 / Firewall / IPSet.pm

diff --git a/src/PVE/API2/Firewall/IPSet.pm b/src/PVE/API2/Firewall/IPSet.pm
index ed92d877ee0685726f69fc5f807c3a316a925dbe..baa57cabc2ebf96bd51a267b6d1a300291904c0b 100644 (file)
--- a/src/PVE/API2/Firewall/IPSet.pm
+++ b/src/PVE/API2/Firewall/IPSet.pm
@@ -203,6 +203,8 @@ sub register_create_ip {
                if ($cidr =~ m@^(dc/|guest/)?(${PVE::Firewall::ip_alias_pattern})$@) {
                    my $scope = $1 // "";
                    my $alias = $2;
+                   # on the cluster level
+                   $cluster_conf = $fw_conf if (!$cluster_conf);
                    # make sure alias exists (if $cidr is an alias)
                    PVE::Firewall::resolve_alias($cluster_conf, $fw_conf, $alias, $scope);
                } else {