Feed Search

Search
Use Results
Edit Query
Hide Query

Jun 29 2021

sarthurdev added a comment to T3642: PKI configuration.

PR is in: https://github.com/vyos/vyos-1x/pull/901

Jun 29 2021, 4:39 PM · VyOS 1.4 Sagitta (1.4.0-epa1)

sarthurdev changed the status of T3642: PKI configuration, a subtask of T2799: VyOS Certificates Manager, from Open to In progress.

Jun 29 2021, 12:37 PM · VyOS 1.3 Equuleus (1.3.6)

sarthurdev changed the status of T3642: PKI configuration from Open to In progress.

I should soon have a PR ready for this, including an update to IPSec config to show how to port existing configs to use PKI.

Jun 29 2021, 12:37 PM · VyOS 1.4 Sagitta (1.4.0-epa1)

Jun 26 2021

sarthurdev added a comment to T3642: PKI configuration.

When using show pki ... commands you would be able to see the relation between certificates and CAs.

Jun 26 2021, 5:27 PM · VyOS 1.4 Sagitta (1.4.0-epa1)

Jun 22 2021

sarthurdev added a comment to T2816: Rewrite IPsec scripts with the new XML/Python approach.

@SrividyaA Fixed in PR https://github.com/vyos/vyos-1x/pull/894

Jun 22 2021, 7:45 AM · VyOS 1.4 Sagitta

sarthurdev added a comment to T3643: show vpn ipsec sa doesn't show tunnels in "down" state.

PR: https://github.com/vyos/vyos-1x/pull/894

Jun 22 2021, 7:44 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Jun 21 2021

sarthurdev updated the task description for T3642: PKI configuration.

Jun 21 2021, 5:18 PM · VyOS 1.4 Sagitta (1.4.0-epa1)

sarthurdev updated the task description for T3642: PKI configuration.

Jun 21 2021, 5:18 PM · VyOS 1.4 Sagitta (1.4.0-epa1)

sarthurdev created T3642: PKI configuration.

Jun 21 2021, 5:14 PM · VyOS 1.4 Sagitta (1.4.0-epa1)

Jun 19 2021

sarthurdev added a comment to T3635: Add ability to use mDNS repeater with VRRP.

PR: https://github.com/vyos/vyos-1x/pull/887

Jun 19 2021, 11:55 AM · VyOS 1.4 Sagitta

sarthurdev changed the status of T3635: Add ability to use mDNS repeater with VRRP from Open to In progress.

Jun 19 2021, 11:48 AM · VyOS 1.4 Sagitta

Jun 17 2021

sarthurdev added a comment to T2816: Rewrite IPsec scripts with the new XML/Python approach.

@SrividyaA Fixed in PR: https://github.com/vyos/vyos-1x/pull/884

Jun 17 2021, 7:58 PM · VyOS 1.4 Sagitta

Jun 15 2021

sarthurdev added a comment to T2816: Rewrite IPsec scripts with the new XML/Python approach.

Swanctl migration PR: https://github.com/vyos/vyos-1x/pull/881

Jun 15 2021, 8:43 AM · VyOS 1.4 Sagitta

Jun 12 2021

sarthurdev added a comment to T1501: VPN Commit Errors.

PR: https://github.com/vyos/vyos-1x/pull/875

Jun 12 2021, 7:21 PM · VyOS 1.3 Equuleus (1.3.0), test

Jun 11 2021

sarthurdev added a comment to T645: Allow multiple prefixes in ipsec tunnel.

Included in PR: https://github.com/vyos/vyos-1x/pull/881

Jun 11 2021, 8:45 PM · VyOS 1.4 Sagitta

sarthurdev added a comment to T3613: Selectors for route-based IPsec tunnel (vti).

I've left vti esp-group to keep backwards compatibility with current behaviour when vti is configured without any tunnels (when it uses 0.0.0.0/0), in that scenario it would still use the group specified.

Jun 11 2021, 5:00 PM · VyOS 1.4 Sagitta

sarthurdev added a comment to T3613: Selectors for route-based IPsec tunnel (vti).

I wonder if instead it should just use the existing tunnel node for this. So if VTI is set on a peer, all configured tunnels get marked for the VTI interface. Current VyOS behaviour allows only for tunnels, or VTI - not both.

Jun 11 2021, 4:27 PM · VyOS 1.4 Sagitta

sarthurdev added a comment to T3613: Selectors for route-based IPsec tunnel (vti).

@krox2 Oh I think I understand what you mean. You'd want to also be able to create multiple child SAs each with unique left/right subnets?

Jun 11 2021, 11:45 AM · VyOS 1.4 Sagitta

Jun 10 2021

sarthurdev added a comment to T3613: Selectors for route-based IPsec tunnel (vti).

PR https://github.com/vyos/vyos-1x/pull/881

Jun 10 2021, 10:20 PM · VyOS 1.4 Sagitta

Jun 7 2021

sarthurdev added a comment to T3588: IPSec: migrate no longer available options from CLI which are now hardcoded/enabled in strongSwan.

Clarifying as requested by c-po:

Jun 7 2021, 9:12 AM · VyOS 1.4 Sagitta

Jun 4 2021

sarthurdev changed the status of T3599: Migrate NHRP to XML/Python from In progress to Needs testing.

PR: https://github.com/vyos/vyos-1x/pull/865

Jun 4 2021, 9:55 PM · VyOS 1.4 Sagitta

sarthurdev changed the status of T3599: Migrate NHRP to XML/Python from Open to In progress.

Jun 4 2021, 5:28 PM · VyOS 1.4 Sagitta

Jun 3 2021

sarthurdev created T3598: DMVPN/IPSec does not work with upstream Strongswan 5.9.

Jun 3 2021, 2:32 PM · VyOS 1.4 Sagitta (1.4.0-GA)

Jun 1 2021

sarthurdev changed the status of T3594: Disable by default service strongswan-starter, a subtask of T2816: Rewrite IPsec scripts with the new XML/Python approach, from Open to In progress.

Jun 1 2021, 1:28 PM · VyOS 1.4 Sagitta

sarthurdev changed the status of T3594: Disable by default service strongswan-starter from Open to In progress.

PR: https://github.com/vyos/vyos-build/pull/168

Jun 1 2021, 1:28 PM · VyOS 1.4 Sagitta

May 30 2021

sarthurdev added a comment to T3588: IPSec: migrate no longer available options from CLI which are now hardcoded/enabled in strongSwan.

Also vpn ipsec site-to-site peer x tunnel x allow-nat-networks and vpn ipsec site-to-site peer x tunnel x allow-public-networks

May 30 2021, 9:46 AM · VyOS 1.4 Sagitta

May 28 2021

sarthurdev added a comment to T3585: Fix NHRP module for updated interfaces tunnel syntax.

PR: https://github.com/vyos/vyos-nhrp/pull/6

May 28 2021, 9:49 AM · VyOS 1.4 Sagitta

sarthurdev changed the status of T3585: Fix NHRP module for updated interfaces tunnel syntax from Open to In progress.

May 28 2021, 9:19 AM · VyOS 1.4 Sagitta

May 27 2021

sarthurdev added a comment to T2816: Rewrite IPsec scripts with the new XML/Python approach.

IPSec / DMVPN PR: https://github.com/vyos/vyos-1x/pull/856

May 27 2021, 5:09 PM · VyOS 1.4 Sagitta

May 24 2021

sarthurdev added a comment to T3577: Generating vpn x509 key pair fails with command not found.

The main issue seems to be a lack of execute permissions on the script vyatta-gen-x509-keypair

May 24 2021, 12:48 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta

sarthurdev created T3577: Generating vpn x509 key pair fails with command not found.

May 24 2021, 12:41 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta

May 22 2021

sarthurdev added a comment to T3570: Prevent setting of a larger MTU on child interfaces.

PR: https://github.com/vyos/vyos-1x/pull/853

May 22 2021, 7:49 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

sarthurdev changed the status of T3570: Prevent setting of a larger MTU on child interfaces from Open to In progress.

May 22 2021, 7:37 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

May 12 2021

sarthurdev created T3543: Support for setting lacp_rate on LACP bonded interfaces.

May 12 2021, 10:05 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta