Feed Search

Search
Use Results
Edit Query
Hide Query

Jul 21 2021

c-po closed T3675: L2TP over IPSEC broken as Resolved.

Jul 21 2021, 7:33 PM

Jul 20 2021

c-po committed rVYOSONEX936b36fdf180: ipsec: T1210: create uuid from empty string in ios profile.

Jul 20 2021, 7:03 PM

c-po committed rVYOSONEX69614d7d5018: ipsec: T1210: add op-mode command for macOS and iOS profile generation.

Jul 20 2021, 6:59 PM

c-po closed T3691: GRETAP: key is not applied when interface is created as Resolved.

Jul 20 2021, 6:04 PM · VyOS 1.3 Equuleus (1.3.0)

c-po moved T3691: GRETAP: key is not applied when interface is created from Need Triage to Finished on the VyOS 1.3 Equuleus board.

Jul 20 2021, 6:04 PM · VyOS 1.3 Equuleus (1.3.0)

c-po removed a project from T3691: GRETAP: key is not applied when interface is created: VyOS 1.4 Sagitta.

Jul 20 2021, 6:04 PM · VyOS 1.3 Equuleus (1.3.0)

c-po changed the status of T3691: GRETAP: key is not applied when interface is created from Open to Confirmed.

Jul 20 2021, 5:13 PM · VyOS 1.3 Equuleus (1.3.0)

c-po created T3691: GRETAP: key is not applied when interface is created.

Jul 20 2021, 5:13 PM · VyOS 1.3 Equuleus (1.3.0)

Jul 19 2021

c-po committed rVYOSONEX2975c5e835fd: vrf: T3655: fix potential error when removing VRF connection tracking table.

Jul 19 2021, 6:54 PM

c-po added a project to T3576: ISIS does not support IPV6: VyOS 1.3 Equuleus.

Jul 19 2021, 5:59 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

c-po merged T3687: IS-IS is missing IPv6 support into T3576: ISIS does not support IPV6.

Jul 19 2021, 5:59 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

c-po merged task T3687: IS-IS is missing IPv6 support into T3576: ISIS does not support IPV6.

Jul 19 2021, 5:59 PM · VyOS 1.3 Equuleus (1.3.0)

c-po committed rVYOSONEXba4e07155e49: isis: T3576: add IPv6 support.

Jul 19 2021, 5:59 PM

c-po added a comment to T3687: IS-IS is missing IPv6 support.

This is already available in VyOS 1.4

Jul 19 2021, 5:57 PM · VyOS 1.3 Equuleus (1.3.0)

c-po committed rVYOSONEX02043297db68: ipsec: T1210: add "unique" option to specify how to handle multiple connections.

Jul 19 2021, 5:23 PM

c-po committed rVYOSONEX9556d78b1d54: ipsec: T1210: split out pool from remote-access configuration.

Jul 19 2021, 5:23 PM

Jul 18 2021

c-po committed rVYOSONEX48c768abbf53: ipsec: T1210: remote-access pools can not hold both IPv4 and IPv6 prefixes.

Jul 18 2021, 7:36 PM

c-po committed rVYOSONEX0a9ff39b4880: ipsec: T2816: limit remote-access nameservers to two IPv4 and two for IPv6.

Jul 18 2021, 6:37 PM

c-po committed rVYOSONEXe202bff78246: ipsec: l2tp: T2816: use common if 'key' in dict pattern.

Jul 18 2021, 6:37 PM

c-po added a reverting change for rVYOSONEX70f7f06e778e: T3641: fastnetmon package is not available for Debian Bullseye: rVYOSONEXcb58eaaeff50: Revert "T3641: fastnetmon package is not available for Debian Bullseye".

Jul 18 2021, 6:37 PM

c-po committed rVYOSONEXcb58eaaeff50: Revert "T3641: fastnetmon package is not available for Debian Bullseye".

Jul 18 2021, 6:37 PM

c-po committed rVYOSONEX62725916c44e: smoketest: ospf: extend passive-interface debugging with kernel log.

Jul 18 2021, 4:12 PM

c-po merged T3684: Bridge doesn't show stp states / macs into T3667: brctl is damaged.

Jul 18 2021, 2:02 PM · VyOS 1.4 Sagitta

c-po merged task T3684: Bridge doesn't show stp states / macs into T3667: brctl is damaged.

Jul 18 2021, 2:02 PM · VyOS 1.4 Sagitta

c-po added a comment to T3684: Bridge doesn't show stp states / macs .

Can you please try running this test on a more recent VyOS version?

Jul 18 2021, 2:01 PM · VyOS 1.4 Sagitta

c-po committed rVYOSONEX13dfa7e0756b: bridge: remove obsolete helper script.

Jul 18 2021, 1:59 PM

Jul 17 2021

c-po changed the status of T3684: Bridge doesn't show stp states / macs from Open to Confirmed.

Jul 17 2021, 10:05 PM · VyOS 1.4 Sagitta

c-po added a comment to T3684: Bridge doesn't show stp states / macs .

brctl is a deprecated package and superseeded by iproute2. Commands will be adjusted, thanks for reporting.

Jul 17 2021, 10:05 PM · VyOS 1.4 Sagitta

c-po claimed T3684: Bridge doesn't show stp states / macs .

Jul 17 2021, 10:04 PM · VyOS 1.4 Sagitta

c-po committed rVYOSONEXc8639be885e1: ipsec: T2816: add missing +x permission on Python helper.

Jul 17 2021, 8:34 PM

c-po added a comment to T56: Add pkcs11 support to OpenVPN interfaces.

You can find the test here: https://github.com/vyos/vyos-1x/blob/current/smoketest/scripts/cli/test_interfaces_openvpn.py

Jul 17 2021, 6:50 PM · Invalid

c-po committed rVYOSONEX94531412e730: ipsec: T2816: restore erroneous deleted file.

Jul 17 2021, 6:14 PM

c-po added a comment to T56: Add pkcs11 support to OpenVPN interfaces.

Unfortunately I had to revert this PR as it broke the smoketests and also triggered the following OpenVPN error:

Jul 17 2021, 5:20 PM · Invalid

c-po committed rVYOSONEX363d8fb22c98: Revert "openvpn: T56: remove strict checks for tls cert-file and key-file".

Jul 17 2021, 5:19 PM

c-po added a reverting change for rVYOSONEXc414479fdf1d: openvpn: T56: remove strict checks for tls cert-file and key-file: rVYOSONEX363d8fb22c98: Revert "openvpn: T56: remove strict checks for tls cert-file and key-file".

Jul 17 2021, 5:19 PM

c-po renamed T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Update Linux Kernel to v5.4.131 / 5.10.49 to Update Linux Kernel to v5.4.132 / 5.10.50.

Jul 17 2021, 7:16 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta

c-po committed rVYOSONEX3c7f7fea1956: vxlan: T3683: bugfix on MTU calculation for IPv6 underlay.

Jul 17 2021, 7:15 AM

c-po committed rVYOSONEXeb8cd3af91ba: vxlan: T3683: bugfix on MTU calculation for IPv6 underlay.

Jul 17 2021, 7:13 AM

c-po committed rVYOSONEX6a8080e1c0a7: xml: provide common "pre-shared-secret" include block.

Jul 17 2021, 7:13 AM

c-po committed rVYOSONEX227391443df0: ipsec: T2816: migrate "ipsec interfaces" to "interface".

Jul 17 2021, 7:13 AM

c-po committed rVYOSONEXed361a825407: xml: provide common "dhcp-interface" include block.

Jul 17 2021, 7:13 AM

Jul 15 2021

c-po committed rVYOSONEXa2ff17e46ec0: vyos-1x-vmware: T3682: remove dhclient from ether-resume.py (authored by yun).

Jul 15 2021, 3:52 AM

Jul 13 2021

c-po added a comment to T3680: Static routes with dhcp-interface are flaky.

Most likely related to T3505

Jul 13 2021, 9:06 PM · VyOS 1.4 Sagitta (1.4.4)

Jul 12 2021

c-po added a comment to T56: Add pkcs11 support to OpenVPN interfaces.

thanks for your detailed bisection of this issue. You mind submitting a GitHub PullRequest as per https://docs.vyos.io/en/equuleus/contributing/development.html?

Jul 12 2021, 6:56 PM · Invalid

c-po renamed T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Update Linux Kernel to v5.4.129 / 5.10.47 to Update Linux Kernel to v5.4.131 / 5.10.49.

Jul 12 2021, 4:45 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta

c-po closed T3661: [vrf} route-leaking missing command as Invalid.

Jul 12 2021, 4:41 PM · VyOS 1.3 Equuleus (1.3.0)

c-po committed rVYOSONEX83721c1ce672: vrf: T31: remove supefluous new-lines for each VRF instance.

Jul 12 2021, 4:41 PM

c-po committed rVYOSONEX73e58b7d000c: vrf: route: static: T2450: we also need to migrate the interface based routes.

Jul 12 2021, 4:41 PM

c-po committed rVYOSONEX2f3043ffce8a: op-mode: T427: add "summary" command for WireGuard interface information.

Jul 12 2021, 6:11 AM

c-po committed rVYOSONEX84305a8b98bb: op-mode: T427: add "summary" command for WireGuard interface information.

Jul 12 2021, 6:11 AM

Jul 11 2021

c-po committed rVYOSONEX562f4c276215: ipsec: T2816: use common "if key in dict:" pattern.

Jul 11 2021, 6:08 PM

c-po committed rVYOSONEXbffd2687fa55: ipsec: T2816: fix NameError.

Jul 11 2021, 6:08 PM

c-po added a comment to T3661: [vrf} route-leaking missing command.

I did a short lab test using the following topology based on my assumptions what you wan't to do using VyOS 1.3.0-rc5:

Jul 11 2021, 1:54 PM · VyOS 1.3 Equuleus (1.3.0)

c-po added a comment to T2773: EIGRP support for VRF.

@Viacheslav but that sounds more of a decent FRR bug. We could still consider adding EIGRP support for 1.4

Jul 11 2021, 1:13 PM · VyOS 1.4 Sagitta

c-po moved T3659: Configuration won't accept IPv6 addresses for site-to-site VPN tunnel prefixes/traffic selectors from Open to In Progress on the VyOS 1.4 Sagitta board.

Jul 11 2021, 1:12 PM · VyOS 1.4 Sagitta

c-po moved T3663: Use inotify file watching where applicable from Open to In Progress on the VyOS 1.4 Sagitta board.

Jul 11 2021, 1:12 PM · VyOS 1.4 Sagitta

c-po moved T1210: About IKEv2 IPSec VPN remote access from Open to In Progress on the VyOS 1.4 Sagitta board.

Jul 11 2021, 1:12 PM · VyOS 1.4 Sagitta

c-po changed the status of T1210: About IKEv2 IPSec VPN remote access, a subtask of T2816: Rewrite IPsec scripts with the new XML/Python approach, from Open to Needs testing.

Jul 11 2021, 1:12 PM · VyOS 1.4 Sagitta

c-po changed the status of T1210: About IKEv2 IPSec VPN remote access from Open to Needs testing.

Jul 11 2021, 1:12 PM · VyOS 1.4 Sagitta

c-po closed T3665: Missing VRF support for VxLAN but already documented as Resolved.

Jul 11 2021, 1:09 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

c-po committed rVYOSONEX7acd5e4b5319: vxlan: T3665: add VRF support.

Jul 11 2021, 1:09 PM

c-po committed rVYOSONEX701613fc6ec8: smoketest: T3637: add testcase for vrf bind-to-all option.

Jul 11 2021, 1:09 PM

c-po committed rVYOSONEX12bc0e667d66: vxlan: T3665: add VRF support.

Jul 11 2021, 1:08 PM

c-po claimed T3665: Missing VRF support for VxLAN but already documented.

Jul 11 2021, 1:06 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

c-po added a project to T3637: vrf: bind-to-all didn't work properly: VyOS 1.3 Equuleus.

Jul 11 2021, 12:33 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

c-po committed rVYOSONEXcc5fdd0bbc95: vrf: T3637: bind-to-all didn't work properly (authored by tjjh89017).

Jul 11 2021, 12:32 PM

c-po added a comment to T3666: VRF bind-to-all - it doesn't apply the settings ..

Backported fix from T3637

Jul 11 2021, 12:31 PM · VyOS 1.3 Equuleus (1.3.0)

c-po merged T3666: VRF bind-to-all - it doesn't apply the settings . into T3637: vrf: bind-to-all didn't work properly.

Jul 11 2021, 12:31 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

c-po merged task T3666: VRF bind-to-all - it doesn't apply the settings . into T3637: vrf: bind-to-all didn't work properly.

Jul 11 2021, 12:31 PM · VyOS 1.3 Equuleus (1.3.0)

c-po claimed T3661: [vrf} route-leaking missing command.

Jul 11 2021, 11:39 AM · VyOS 1.3 Equuleus (1.3.0)

c-po changed the status of T3666: VRF bind-to-all - it doesn't apply the settings . from Open to In progress.

Jul 11 2021, 11:36 AM · VyOS 1.3 Equuleus (1.3.0)

Jul 10 2021

c-po added a comment to T3675: L2TP over IPSEC broken.

I can confirm this on the latest rolling versions, seems to be a problem with the IPSec rewrite/move to swanctl.conf.

Jul 10 2021, 9:00 AM

c-po changed the status of T3675: L2TP over IPSEC broken from Open to Confirmed.

Jul 10 2021, 9:00 AM

Jul 6 2021

c-po closed T3660: Conntrack-Sync configuration command to specify destination udp port for peer as Resolved.

Jul 6 2021, 5:33 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

c-po added a comment to T3660: Conntrack-Sync configuration command to specify destination udp port for peer.

Thanks for the confirmation

Jul 6 2021, 5:33 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Jul 4 2021

c-po committed rVYOSONEX70efa3dd54bc: vyos.util: T3663: move inotify-based imports to function level.

Jul 4 2021, 7:43 PM

c-po committed rVYOSONEXb2bf1592189f: ipsec: T1210: T1251: IKEv2 road-warrior support.

Jul 4 2021, 7:19 PM

c-po committed rVYOSONEX79f1c891f3ae: ipsec: T1210: T1251: extend ra config with address pools/traffic selectors (authored by sarthurdev <965089+sarthurdev@users.noreply.github.com>).

Jul 4 2021, 7:19 PM

c-po committed rVYOSONEXa89554bae49d: ipsec: T2816: use common building block/include for port definition.

Jul 4 2021, 7:19 PM

c-po committed rVYOSONEX3851818b7a26: ipsec: T2816: add include definition for ipsec local-address.

Jul 4 2021, 7:19 PM

c-po committed rVYOSONEXb16827699604: ipsec: T2816: add completion helper for VTI interfaces.

Jul 4 2021, 7:19 PM

c-po committed rVYOSONEXc8bf1deec9ce: ipsec: T1210: T1251: add remote-access "name-server" definition to pool config.

Jul 4 2021, 7:19 PM

c-po committed rVYOSONEX1c727bd25ef2: ipsec: T1210: T1251: add "local" traffic-selector include definition.

Jul 4 2021, 7:19 PM

c-po committed rVYOSONEX40c6a0402511: ipsec: T2816: add completion helper for tunnel interfaces.

Jul 4 2021, 7:19 PM

c-po committed rVYOSONEX2680712b7416: smoketest: pki: adjust to "type" node removal on CLI.

Jul 4 2021, 10:15 AM

c-po added a comment to T1251: IKEv2 Agile VPN Support.

@dongjunbo this is a very very basic PR for VyOS 1.4 with the goal to implement this into the main VyOS release.

Jul 4 2021, 10:03 AM · VyOS 1.3 Equuleus (1.3.0)

c-po added a comment to T1210: About IKEv2 IPSec VPN remote access.

https://github.com/vyos/vyos-1x/pull/908

Jul 4 2021, 10:00 AM · VyOS 1.4 Sagitta

c-po added a comment to T1251: IKEv2 Agile VPN Support.

https://github.com/vyos/vyos-1x/pull/908

Jul 4 2021, 10:00 AM · VyOS 1.3 Equuleus (1.3.0)

Jul 3 2021

c-po committed rVYOSONEXce3847239493: ipsec: T2816: remove erroneously added config snipped for road-warriors.

Jul 3 2021, 8:32 PM

c-po added a reverting change for rVYOSONEXfb1802111155: ipsec: T2816: drop duplicate dict key "data" from generate(): rVYOSONEXe30668287ad0: Revert "ipsec: T2816: drop duplicate dict key "data" from generate()".

Jul 3 2021, 7:54 PM

c-po committed rVYOSONEXe30668287ad0: Revert "ipsec: T2816: drop duplicate dict key "data" from generate()".

Jul 3 2021, 7:54 PM

c-po committed rVYOSONEX405954522b8e: ipsec: T1210: T1251: add dependency on libcharon-extauth-plugins.

Jul 3 2021, 5:58 PM

c-po committed rVYOSONEXfb1802111155: ipsec: T2816: drop duplicate dict key "data" from generate().

Jul 3 2021, 5:58 PM

c-po committed rVYOSONEX2aec3e61c913: ipsec: T2816: provide x509 certificate base auth building blocks.

Jul 3 2021, 5:58 PM

c-po committed rVYOSONEX32fab6c7c5a7: ipsec: T2816: provide esp and ike-group XML building block.

Jul 3 2021, 5:58 PM

c-po claimed T1210: About IKEv2 IPSec VPN remote access.

Jul 3 2021, 5:22 PM · VyOS 1.4 Sagitta

c-po closed T57: Make it possible to disable the entire IPsec peer, a subtask of T2816: Rewrite IPsec scripts with the new XML/Python approach, as Resolved.

Jul 3 2021, 5:22 PM · VyOS 1.4 Sagitta

c-po closed T57: Make it possible to disable the entire IPsec peer as Resolved.

Jul 3 2021, 5:22 PM · VyOS 1.4 Sagitta

c-po edited projects for T1210: About IKEv2 IPSec VPN remote access, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.

Jul 3 2021, 5:20 PM · VyOS 1.4 Sagitta

c-po merged task T1251: IKEv2 Agile VPN Support into T1210: About IKEv2 IPSec VPN remote access.

Jul 3 2021, 5:20 PM · VyOS 1.3 Equuleus (1.3.0)