Page MenuHomeVyOS Platform
Feed Search

Search
Use Results
Hide Query

May 2 2023

a.apostoliuk closed T5042: Command 'show vpn ipsec remote-access' does not work as Resolved.
May 2 2023, 8:34 AM · VyOS 1.4 Sagitta
a.apostoliuk changed the status of T5042: Command 'show vpn ipsec remote-access' does not work from In progress to Needs testing.
May 2 2023, 7:46 AM · VyOS 1.4 Sagitta

Apr 21 2023

a.apostoliuk committed rVYOSONEXb251a183b30a: ipsec: T5042: Rewritten 'show vpn ipsec remote-access' command.
Apr 21 2023, 8:04 PM

Apr 5 2023

a.apostoliuk closed T5135: Rewrite opennhrp script using vyos.ipsec library as Resolved.
Apr 5 2023, 8:07 AM · VyOS 1.4 Sagitta
a.apostoliuk changed the status of T5135: Rewrite opennhrp script using vyos.ipsec library from In progress to Needs testing.
Apr 5 2023, 7:30 AM · VyOS 1.4 Sagitta

Apr 4 2023

a.apostoliuk committed rVYOSONEXa3ce38b4a290: opennhrp: T5135: Rewritten opennhrp script using vyos.ipsec.
Apr 4 2023, 5:24 PM
a.apostoliuk closed T5093: Command 'reset vpn ipsec-profile' doesn't work as Resolved.
Apr 4 2023, 8:53 AM · VyOS 1.4 Sagitta
a.apostoliuk changed the status of T5093: Command 'reset vpn ipsec-profile' doesn't work from In progress to Needs testing.
Apr 4 2023, 8:50 AM · VyOS 1.4 Sagitta

Apr 1 2023

a.apostoliuk changed the status of T5135: Rewrite opennhrp script using vyos.ipsec library from Open to In progress.
Apr 1 2023, 2:58 PM · VyOS 1.4 Sagitta
a.apostoliuk created T5135: Rewrite opennhrp script using vyos.ipsec library.
Apr 1 2023, 2:58 PM · VyOS 1.4 Sagitta
a.apostoliuk committed rVYOSONEXa78982625a8a: ipsec: T5093: Fixed 'reset vpn ipsec profile' command.
Apr 1 2023, 8:52 AM

Mar 28 2023

a.apostoliuk closed T5043: Need to create reset command for IKEv2 remote-access vpn connections as Resolved.
Mar 28 2023, 8:03 AM · VyOS 1.4 Sagitta

Mar 22 2023

a.apostoliuk changed the status of T5093: Command 'reset vpn ipsec-profile' doesn't work from Open to In progress.
Mar 22 2023, 8:48 AM · VyOS 1.4 Sagitta
a.apostoliuk claimed T5093: Command 'reset vpn ipsec-profile' doesn't work.
Mar 22 2023, 8:47 AM · VyOS 1.4 Sagitta
a.apostoliuk changed the status of T5043: Need to create reset command for IKEv2 remote-access vpn connections from Open to Needs testing.
Mar 22 2023, 8:42 AM · VyOS 1.4 Sagitta

Mar 21 2023

a.apostoliuk committed rVYOSONEXecdc9b1f0bf4: ipsec: T5043: Rewritten and fixed 'reset vpn' commands.
Mar 21 2023, 8:00 PM

Mar 19 2023

a.apostoliuk closed T4925: Need to add the possibility to configure Pseudo-Random Functions (PRF) in IKEv2 as Resolved.
Mar 19 2023, 1:48 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
a.apostoliuk changed the status of T4925: Need to add the possibility to configure Pseudo-Random Functions (PRF) in IKEv2 from In progress to Needs testing.
Mar 19 2023, 1:47 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta

Mar 16 2023

a.apostoliuk created T5093: Command 'reset vpn ipsec-profile' doesn't work.
Mar 16 2023, 9:50 AM · VyOS 1.4 Sagitta

Mar 13 2023

a.apostoliuk closed T5074: Show IPSEC SA failed if remote access IKEv2 vpn is used. as Resolved.
Mar 13 2023, 10:18 AM · VyOS 1.4 Sagitta
a.apostoliuk moved T5074: Show IPSEC SA failed if remote access IKEv2 vpn is used. from Open to Finished on the VyOS 1.4 Sagitta board.
Mar 13 2023, 10:17 AM · VyOS 1.4 Sagitta

Mar 10 2023

a.apostoliuk committed rVYOSONEX72ef87421bd4: util: T5074: Fixed decoding of certificate value to UTF-8 string.
Mar 10 2023, 12:00 PM
a.apostoliuk changed the status of T4925: Need to add the possibility to configure Pseudo-Random Functions (PRF) in IKEv2 from Open to In progress.
Mar 10 2023, 9:35 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
a.apostoliuk added a project to T4925: Need to add the possibility to configure Pseudo-Random Functions (PRF) in IKEv2: VyOS 1.3 Equuleus (1.3.3).
Mar 10 2023, 9:35 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
a.apostoliuk reopened T4925: Need to add the possibility to configure Pseudo-Random Functions (PRF) in IKEv2 as "Open".
Mar 10 2023, 9:34 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
a.apostoliuk changed the status of T5074: Show IPSEC SA failed if remote access IKEv2 vpn is used. from Open to In progress.
Mar 10 2023, 8:18 AM · VyOS 1.4 Sagitta
a.apostoliuk claimed T5074: Show IPSEC SA failed if remote access IKEv2 vpn is used..
Mar 10 2023, 8:18 AM · VyOS 1.4 Sagitta

Mar 9 2023

a.apostoliuk created T5074: Show IPSEC SA failed if remote access IKEv2 vpn is used..
Mar 9 2023, 9:25 AM · VyOS 1.4 Sagitta

Mar 8 2023

a.apostoliuk changed the status of T5042: Command 'show vpn ipsec remote-access' does not work from Open to In progress.
Mar 8 2023, 8:14 AM · VyOS 1.4 Sagitta

Mar 1 2023

a.apostoliuk claimed T5043: Need to create reset command for IKEv2 remote-access vpn connections.
Mar 1 2023, 3:49 PM · VyOS 1.4 Sagitta
a.apostoliuk created T5043: Need to create reset command for IKEv2 remote-access vpn connections.
Mar 1 2023, 3:48 PM · VyOS 1.4 Sagitta
a.apostoliuk claimed T5042: Command 'show vpn ipsec remote-access' does not work.
Mar 1 2023, 3:27 PM · VyOS 1.4 Sagitta
a.apostoliuk created T5042: Command 'show vpn ipsec remote-access' does not work.
Mar 1 2023, 3:27 PM · VyOS 1.4 Sagitta

Feb 28 2023

a.apostoliuk created T5039: Can't add new local user.
Feb 28 2023, 3:49 PM · VyOS 1.4 Sagitta
a.apostoliuk closed T4955: Openconnect radiusclient.conf generating with extra authserver as Resolved.
Feb 28 2023, 2:01 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
a.apostoliuk moved T4955: Openconnect radiusclient.conf generating with extra authserver from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
Feb 28 2023, 2:01 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
a.apostoliuk moved T4955: Openconnect radiusclient.conf generating with extra authserver from Open to Finished on the VyOS 1.4 Sagitta board.
Feb 28 2023, 2:01 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta

Feb 27 2023

a.apostoliuk committed rVYOSONEXeaba3bdfb3f8: openconnect: T4955: Renamed function and changed error messages.
Feb 27 2023, 5:11 PM
a.apostoliuk closed T4985: reset vpn ipsec-peer command with peer name does not work as Resolved.
Feb 27 2023, 10:20 AM · VyOS 1.4 Sagitta
a.apostoliuk moved T4985: reset vpn ipsec-peer command with peer name does not work from Open to Finished on the VyOS 1.4 Sagitta board.
Feb 27 2023, 10:20 AM · VyOS 1.4 Sagitta
a.apostoliuk moved T5008: MACsec CKN of 32 chars is not allowed in CLI, but works fine from Open to Finished on the VyOS 1.4 Sagitta board.
Feb 27 2023, 10:08 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
a.apostoliuk committed rVYOSONEX1bde9ebee681: T4790: Added check of the sum of radius timeouts.
Feb 27 2023, 7:56 AM

Feb 24 2023

a.apostoliuk committed rVYOSONEXbaa8eb854348: openconnect: T4955: Removed wrong authserver in radiusclient.conf.
Feb 24 2023, 3:15 PM
a.apostoliuk committed rVYOSONEX391b7333c836: macsec: T5008: Changed length of CKN to (2..64 hex-digits).
Feb 24 2023, 3:13 PM
a.apostoliuk committed rVYOSONEXf4ecfaf1cd1a: ipsec: T4985: Changed 'reset vpn ipsec-peer' to use vici library.
Feb 24 2023, 2:33 PM
a.apostoliuk changed the status of T5008: MACsec CKN of 32 chars is not allowed in CLI, but works fine from Needs testing to In progress.
Feb 24 2023, 2:30 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
a.apostoliuk added a project to T5008: MACsec CKN of 32 chars is not allowed in CLI, but works fine: VyOS 1.3 Equuleus (1.3.3).
Feb 24 2023, 9:25 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta

Feb 20 2023

a.apostoliuk changed the status of T5008: MACsec CKN of 32 chars is not allowed in CLI, but works fine from In progress to Needs testing.
Feb 20 2023, 1:45 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta

Feb 17 2023

a.apostoliuk committed rVYOSONEX1ea2d583d857: macsec: T5008: Changed length of CKN to (2..64 hex-digits).
Feb 17 2023, 4:26 PM

Feb 15 2023

a.apostoliuk changed the status of T5008: MACsec CKN of 32 chars is not allowed in CLI, but works fine from Open to In progress.
Feb 15 2023, 2:40 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
a.apostoliuk claimed T5008: MACsec CKN of 32 chars is not allowed in CLI, but works fine.
Feb 15 2023, 1:59 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
a.apostoliuk added a comment to T4593: Upgrade strongswan to 5.9.8.

I was wrong. NOT 6 CHILSD_SAs on one tunnel.
6 IKE SAs on one configured tunnel.

Feb 15 2023, 11:50 AM · VyOS 1.4 Sagitta
a.apostoliuk added a comment to T4593: Upgrade strongswan to 5.9.8.

I met 2 issues after the last commit.
My config:

Feb 15 2023, 10:11 AM · VyOS 1.4 Sagitta
a.apostoliuk moved T4993: Can't delete conntrack ignore rule from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
Feb 15 2023, 9:22 AM · VyOS 1.3 Equuleus (1.3.3)
a.apostoliuk moved T4993: Can't delete conntrack ignore rule from Finished to 1.3.3 on the VyOS 1.3 Equuleus board.
Feb 15 2023, 9:22 AM · VyOS 1.3 Equuleus (1.3.3)
a.apostoliuk closed T4993: Can't delete conntrack ignore rule as Resolved.
Feb 15 2023, 9:19 AM · VyOS 1.3 Equuleus (1.3.3)
a.apostoliuk moved T4993: Can't delete conntrack ignore rule from 1.3.3 to Finished on the VyOS 1.3 Equuleus board.
Feb 15 2023, 9:18 AM · VyOS 1.3 Equuleus (1.3.3)
a.apostoliuk reopened T4993: Can't delete conntrack ignore rule as "In progress".
Feb 15 2023, 9:18 AM · VyOS 1.3 Equuleus (1.3.3)
a.apostoliuk changed the status of T4985: reset vpn ipsec-peer command with peer name does not work from In progress to Needs testing.
Feb 15 2023, 8:49 AM · VyOS 1.4 Sagitta

Feb 14 2023

a.apostoliuk committed rVYOSONEX2e61af88961d: ipsec: T4985: Fixed 'reset vpn ipsec-peer {peer}' command.
Feb 14 2023, 4:42 PM
a.apostoliuk closed T4968: VPN IPsec check dpd and close action for empty values as Resolved.
Feb 14 2023, 8:17 AM · VyOS 1.4 Sagitta
a.apostoliuk moved T4968: VPN IPsec check dpd and close action for empty values from Open to Finished on the VyOS 1.4 Sagitta board.
Feb 14 2023, 8:16 AM · VyOS 1.4 Sagitta
a.apostoliuk changed the status of T4968: VPN IPsec check dpd and close action for empty values from Open to Needs testing.
Feb 14 2023, 7:54 AM · VyOS 1.4 Sagitta
a.apostoliuk changed the status of T4985: reset vpn ipsec-peer command with peer name does not work from Open to In progress.
Feb 14 2023, 7:53 AM · VyOS 1.4 Sagitta
a.apostoliuk claimed T4985: reset vpn ipsec-peer command with peer name does not work .
Feb 14 2023, 7:53 AM · VyOS 1.4 Sagitta

Feb 13 2023

a.apostoliuk committed rVYOSONEXb0f34f5fbdb0: ipsec: T4968: Added default values to dpd and close action.
Feb 13 2023, 5:07 PM
a.apostoliuk closed T4993: Can't delete conntrack ignore rule as Resolved.
Feb 13 2023, 10:28 AM · VyOS 1.3 Equuleus (1.3.3)
a.apostoliuk changed the status of T4993: Can't delete conntrack ignore rule from In progress to Needs testing.
Feb 13 2023, 10:28 AM · VyOS 1.3 Equuleus (1.3.3)
a.apostoliuk closed T4905: Convert show nhrp tunnel to tabulate format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
Feb 13 2023, 9:58 AM · VyOS Rolling
a.apostoliuk closed T4905: Convert show nhrp tunnel to tabulate format as Resolved.
Feb 13 2023, 9:58 AM · VyOS 1.4 Sagitta
a.apostoliuk moved T4905: Convert show nhrp tunnel to tabulate format from Open to Finished on the VyOS 1.4 Sagitta board.
Feb 13 2023, 9:58 AM · VyOS 1.4 Sagitta
a.apostoliuk changed the status of T4905: Convert show nhrp tunnel to tabulate format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from In progress to Needs testing.
Feb 13 2023, 9:58 AM · VyOS Rolling
a.apostoliuk changed the status of T4905: Convert show nhrp tunnel to tabulate format from In progress to Needs testing.
Feb 13 2023, 9:58 AM · VyOS 1.4 Sagitta

Feb 10 2023

a.apostoliuk changed the status of T4993: Can't delete conntrack ignore rule from Open to In progress.
Feb 10 2023, 1:30 PM · VyOS 1.3 Equuleus (1.3.3)
a.apostoliuk claimed T4993: Can't delete conntrack ignore rule.
Feb 10 2023, 1:30 PM · VyOS 1.3 Equuleus (1.3.3)
a.apostoliuk created T4993: Can't delete conntrack ignore rule.
Feb 10 2023, 10:44 AM · VyOS 1.3 Equuleus (1.3.3)

Feb 9 2023

a.apostoliuk committed rVYOSONEXcccfa2b3df2f: nhrp: T4905: Rewritten nhrp op-mode in new style.
Feb 9 2023, 3:00 PM

Feb 6 2023

a.apostoliuk added a comment to T4943: Radius SSH login displays "permission denied" on 1.4 rolling release.

It is a problem with mapping user to radius_priv_user
This problem began after https://github.com/vyos/vyos-1x/commit/765f84386b6e94984ff79db2eab36d51f759159b#diff-0ab0ed71ce757261c4a6ae2f3a5bc441d6257d477bfb5435ae38f230777ff81cR51
If I set in sshd_config

Feb 6 2023, 2:15 PM · VyOS 1.4 Sagitta

Jan 27 2023

a.apostoliuk committed rVYOSONEX02004325f166: openconnect: T4955: Removed wrong authserver in radiusclient.conf.
Jan 27 2023, 7:58 PM
a.apostoliuk changed the status of T4905: Convert show nhrp tunnel to tabulate format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from Open to In progress.
Jan 27 2023, 9:45 AM · VyOS Rolling
a.apostoliuk changed the status of T4905: Convert show nhrp tunnel to tabulate format from Open to In progress.
Jan 27 2023, 9:45 AM · VyOS 1.4 Sagitta
a.apostoliuk claimed T4905: Convert show nhrp tunnel to tabulate format.
Jan 27 2023, 9:45 AM · VyOS 1.4 Sagitta

Jan 26 2023

a.apostoliuk changed the status of T4955: Openconnect radiusclient.conf generating with extra authserver from Open to In progress.
Jan 26 2023, 8:04 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
a.apostoliuk claimed T4955: Openconnect radiusclient.conf generating with extra authserver.
Jan 26 2023, 7:43 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta

Jan 20 2023

a.apostoliuk added a comment to T4943: Radius SSH login displays "permission denied" on 1.4 rolling release.

Confirm.
Version: VyOS 1.4-rolling-202301200317

Jan 20 2023, 1:07 PM · VyOS 1.4 Sagitta
a.apostoliuk closed T4925: Need to add the possibility to configure Pseudo-Random Functions (PRF) in IKEv2 as Resolved.
Jan 20 2023, 8:43 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
a.apostoliuk closed T4551: IPsec rekeying collisions bug as Resolved.
Jan 20 2023, 8:43 AM · VyOS 1.4 Sagitta
a.apostoliuk moved T4551: IPsec rekeying collisions bug from Open to Finished on the VyOS 1.4 Sagitta board.
Jan 20 2023, 8:43 AM · VyOS 1.4 Sagitta
a.apostoliuk reopened T4551: IPsec rekeying collisions bug as "Needs testing".
Jan 20 2023, 8:42 AM · VyOS 1.4 Sagitta
a.apostoliuk closed T4551: IPsec rekeying collisions bug as Resolved.
Jan 20 2023, 8:41 AM · VyOS 1.4 Sagitta
a.apostoliuk moved T4925: Need to add the possibility to configure Pseudo-Random Functions (PRF) in IKEv2 from Open to Finished on the VyOS 1.4 Sagitta board.
Jan 20 2023, 8:40 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta

Jan 19 2023

a.apostoliuk committed rVYOSONEX7a663a75dc8b: ipsec: T4925: Added PRF into IKE group.
Jan 19 2023, 7:08 AM

Jan 17 2023

a.apostoliuk changed the status of T4864: `show firewall` command errors from In progress to Needs testing.
Jan 17 2023, 3:17 PM · VyOS 1.4 Sagitta
a.apostoliuk committed rVYOSONEX8ed0c7f09979: firewall: T4864: Fixed show zone-policy command output.
Jan 17 2023, 2:27 PM
a.apostoliuk changed the status of T4551: IPsec rekeying collisions bug from Open to In progress.
Jan 17 2023, 10:08 AM · VyOS 1.4 Sagitta

Jan 16 2023

a.apostoliuk changed the status of T4925: Need to add the possibility to configure Pseudo-Random Functions (PRF) in IKEv2 from Open to In progress.
Jan 16 2023, 3:04 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta

Jan 11 2023

a.apostoliuk committed rVYOSONEXa74af52ce857: webproxy: T4927: Changed restart to reload-or-restart in commit.
Jan 11 2023, 3:02 PM
a.apostoliuk committed rVYOSONEXf6397c1e63f2: webproxy: T4927: Changed restart to reload-or-restart in commit.
Jan 11 2023, 9:28 AM
a.apostoliuk changed the status of T4927: Need to change restart to reload-or-restart in Webproxy module from Open to In progress.
Jan 11 2023, 6:48 AM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta

Jan 10 2023

a.apostoliuk added a comment to T4551: IPsec rekeying collisions bug.

I found that if IPSEC lifetime is large(28800) then this problem occurs.
If lifetime eq 1800 sec, everything works.

Jan 10 2023, 3:46 PM · VyOS 1.4 Sagitta
First
Prev
Next