Page MenuHomeVyOS Platform
Feed Search

May 19 2020

c-po committed rVYOSONEXbc060277ab55: nat: do not report unassigned IP address for DNAT.
May 19 2020, 7:55 PM
c-po closed T421: Add Pv6 prefix delegation support as Resolved.
May 19 2020, 7:41 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po added a comment to T421: Add Pv6 prefix delegation support.
21:39:35.057600 IP6 (flowlabel 0xba774, hlim 1, next-header UDP (17) payload length: 76) fe80::20d:b9ff:fe53:7ee.546 > ff02::1:2.547: [udp sum ok] dhcp6 solicit (xid=95b13f (client-ID hwaddr/time type 1 time 643212067 000db95307ec) (IA_NA IAID:1 T1:0 T2:0) (elapsed-time 1681) (option-request DNS-server DNS-search-list) (IA_PD IAID:2 T1:0 T2:0))
May 19 2020, 7:40 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po committed rVYOSONEX77eaf77f4fde: configdict: T2372: add new interface_default_data dict.
May 19 2020, 7:31 PM
c-po committed rVYOSONEX3e76f032c22f: configdict: T2372: use list over string.
May 19 2020, 7:31 PM
c-po committed rVYOSONEXba06bfed4fc8: dhcpv6-pd: T421: support ethernet based interfaces.
May 19 2020, 7:31 PM
c-po committed rVYOSONEXe62218c87a99: configdict: T2372: interfaces must reuse interface_default_data.
May 19 2020, 7:31 PM
c-po added a comment to T421: Add Pv6 prefix delegation support.

Based on a bond interface

May 19 2020, 7:31 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po claimed T2480: NAT: after rewrite commit tells that dnat IP address is not locally connected.
May 19 2020, 6:30 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2480: NAT: after rewrite commit tells that dnat IP address is not locally connected.
May 19 2020, 6:30 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2474: Building instructions with Docker need a little more detail.

@fetzerms thanks for getting back to us - I also successfully tested it.

May 19 2020, 3:53 PM · Restricted Project
c-po committed rVYOSONEX5cbdffd3c1bd: dhcpv6-server: T815: support delegating IPv6 prefixes.
May 19 2020, 3:14 PM
c-po added a comment to T815: Add DHCPv6 server prefix-delegation support.
set service dhcpv6-server shared-network-name TEST subnet 2001:db8::/64 prefix-delegation start 2001:db8:1000:: prefix-length '56'
set service dhcpv6-server shared-network-name TEST subnet 2001:db8::/64 prefix-delegation start 2001:db8:1000:: stop '2001:db8:2000::'
May 19 2020, 3:14 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po closed T815: Add DHCPv6 server prefix-delegation support as Resolved.
May 19 2020, 3:10 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po added a comment to T2474: Building instructions with Docker need a little more detail.

Yes it is, we auto publish it if there is a change.

May 19 2020, 6:02 AM · Restricted Project

May 18 2020

c-po added a comment to T421: Add Pv6 prefix delegation support.

@jack9603301 looking for a „service dhcpv6-server“ configuration which hands out the prefixes via ethernet so I can implement the client side.

May 18 2020, 6:29 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po added a comment to T421: Add Pv6 prefix delegation support.

I know that this does not cover all use cases but it is a PoC working for some users (not all of course). Next step would be adding this to ethernet based interfaces.

May 18 2020, 3:24 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po added a comment to T421: Add Pv6 prefix delegation support.

Documentationnupdated here https://docs.vyos.io/en/latest/interfaces/pppoe.html#ipv6

May 18 2020, 6:07 AM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po added a comment to T421: Add Pv6 prefix delegation support.
In T421#63882, @Azayaka wrote:

@tbr Looking at this post, I don't think EdgeRouter has the capability...

May 18 2020, 5:44 AM · VyOS 1.3 Equuleus (1.3.0-epa1)

May 17 2020

c-po added a comment to T421: Add Pv6 prefix delegation support.

Enjoy testing

May 17 2020, 6:43 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po changed the status of T421: Add Pv6 prefix delegation support from Open to Needs testing.
May 17 2020, 6:43 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po committed rVYOSONEXdd6d46f7a60f: Merge branch 'ipv6-pd' of github.com:c-po/vyos-1x into current.
May 17 2020, 6:42 PM
c-po committed rVYOSONEX8f1fd7ce8e92: pppoe: dhcpv6-pd: T421: change system type to forking.
May 17 2020, 6:42 PM
c-po committed rVYOSONEX2d47eb1eba4f: pppoe: dhcpv6-pd: T421: stop service when config is removed.
May 17 2020, 6:42 PM
c-po committed rVYOSONEXfaa85accc99d: pppoe: dhcpv6-pd: T421: initial support.
May 17 2020, 6:42 PM
c-po committed rVYOSONEX9bcdb58c13b7: pppoe: dhcpv6-pd: T421: start/stop delegation with interface status.
May 17 2020, 6:42 PM
c-po committed rVYOSONEX46d92ac80bda: dhcpv6-pd: T421: migrate from ISC dhclient to wide-dhcpv6-client.
May 17 2020, 6:42 PM
c-po added a comment to T421: Add Pv6 prefix delegation support.

From the Git commit:

May 17 2020, 6:30 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po added a comment to T2471: PPPoE server: always add AdvAutonomousFlag when IPv6 is configured.
set service pppoe-server authentication local-users username test password 'test'
set service pppoe-server authentication mode 'local'
set service pppoe-server client-ip-pool start '192.168.0.1'
set service pppoe-server client-ip-pool stop '192.168.0.10'
set service pppoe-server client-ipv6-pool delegate '2001:db8:8003::/48' delegation-prefix '56'
set service pppoe-server client-ipv6-pool prefix '2001:db8:8002::/48' mask '64'
set service pppoe-server name-server '8.8.8.8'
set service pppoe-server name-server '2001:4860:4860::8888'
set service pppoe-server interface 'eth1'
set service pppoe-server local-ip '10.100.100.1'
May 17 2020, 4:51 PM · VyOS 1.3 Equuleus (1.3.0)
c-po committed rVYOSONEXca2f7e5e62ef: pppoe-server: T2471: add SLAAC support.
May 17 2020, 4:48 PM
c-po closed T2471: PPPoE server: always add AdvAutonomousFlag when IPv6 is configured as Resolved.
May 17 2020, 4:46 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2471: PPPoE server: always add AdvAutonomousFlag when IPv6 is configured.
May 17 2020, 4:45 PM · VyOS 1.3 Equuleus (1.3.0)
c-po committed rVYOSONEX843c789a0e92: xml: split dhcp, dhcpv6 to individual files.
May 17 2020, 2:21 PM
c-po committed rVYOSONEX2411cf35b3cf: frr: combine all templates in frr directory.
May 17 2020, 2:00 PM
c-po committed rVYOSONEX7ba82de32e25: powerdns: T2470: adjust systemd RuntimeDirectory.
May 17 2020, 9:50 AM
c-po committed rVYOSONEX8117270c122c: powerdns: T2470: adjust config file permissions for recursor 4.3.
May 17 2020, 9:04 AM

May 16 2020

c-po committed rVYOSONEX7d01f7fec95f: nat: nptv6: T2198: add XML/Python skeleton.
May 16 2020, 8:53 PM
c-po closed T2470: Update to PowerDNS recursor 4.3 as Resolved.
May 16 2020, 4:50 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2469: Update Linux Kernel to v4.19.123 as Resolved.
May 16 2020, 4:48 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2470: Update to PowerDNS recursor 4.3.
May 16 2020, 4:47 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2469: Update Linux Kernel to v4.19.123.
May 16 2020, 4:44 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2198: Rewrite NAT in new XML/Python style as Resolved.
May 16 2020, 4:39 PM · VyOS 1.3 Equuleus (1.3.0)
c-po committed rVYOSONEX9e305400f281: Merge branch 'nat-nftables' of github.com:c-po/vyos-1x into current.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXd8891acde69b: Debian: add required dependency on systemd.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX2ba8c8499f86: nat: T2198: remove "tcp_udp" from "show nat dest stat"x.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX2a0d1e77e650: nat: T2198: add common ip-protocol validator.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX6f349ee3b4d3: nat: T2198: use Jinja2 macro for common ruleset for SNAT and DNAT.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXd7662ecfff55: nat: T2198: restructure DNAT template part for less duplicated code.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXcf6dcb61e1f1: nat: T2198: add support for SNAT based on source addresses.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXe89f19c5bb0f: nat: T2198: set default protocol to all to be backwards compatible.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX8062afa8a5be: nat: T2198: sync generated SNAT rules with VyOS 1.2.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX9cec8471dae5: nat: T2198: sync generated DNAT rules with VyOS 1.2.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXf75db67c495c: nat: T2198: do not run DNAT rule if rule is disabled.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXb2ead2d037b8: nat: T2198: verify translation address for SNAT and DNAT.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX682bfd2c869a: nat: T2198: restructure DNAT template.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX5abe2db17a6e: nat: T2198: extend verify() for destination ports.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXd0b24799d900: nat: T2198: migrate "log enable" node to only "log".
May 16 2020, 4:37 PM
c-po committed rVYOSONEX756e36da2cf4: nat: T2198: add protocol completion helper and regex constraint.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXf233a9e4073f: nat: T2198: migrate "show nat" commands to XML and Python.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX1e7d01e5b5a1: nat: T2198: add some basic verify() rules.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXac4f99ac3b17: nat: T2198: split nat-address-port include into individual files.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX1330898ed095: nat: T2198: add ipv4-{address,prefix,rage}-exclude validators.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX728e1c6073cb: nat: T2198: add new ipv4-range validator.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXfda762065c03: nat: T2198: implement deletion of NAT subsystem.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXcc2ad34ce61e: nat: T2198: make use of jmespath when walking nftables JSON output.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX1c6ae6f7e7cf: nat: T2198: automatically determine handler numbers.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXa927192af240: nat: T2198: move from iptables to nftables.
May 16 2020, 4:37 PM
c-po committed rVYOSONEXa5650abb6d57: nat: T2198: migrate to common template for source/destination NAT.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX7caf1568bbb6: nat: T2198: destination nat template for iptables-restore.
May 16 2020, 4:37 PM
c-po committed rVYOSONEX40e8938667b0: nat: T2198: initial XML and Python representation.
May 16 2020, 4:37 PM

May 14 2020

c-po updated the task description for T2459: Migrate vyatta-show-nat-rules.pl to Python.
May 14 2020, 4:32 PM
c-po reassigned T2460: Migrate vyatta-nat-translations.pl to Python from c-po to thomas-mangin.
May 14 2020, 4:31 PM · VyOS 1.3 Equuleus (1.3.3)
c-po triaged T2460: Migrate vyatta-nat-translations.pl to Python as Normal priority.
May 14 2020, 4:31 PM · VyOS 1.3 Equuleus (1.3.3)
c-po renamed T2459: Migrate vyatta-show-nat-rules.pl to Python from Migrate to Migrate vyatta-show-nat-rules.pl to Python.
May 14 2020, 4:27 PM
c-po triaged T2459: Migrate vyatta-show-nat-rules.pl to Python as Normal priority.
May 14 2020, 4:27 PM
jack9603301 awarded T2023: Add support for 802.1ae MACsec a Like token.
May 14 2020, 1:59 PM · VyOS 1.3 Equuleus (1.3.0)
c-po claimed T2023: Add support for 802.1ae MACsec.
May 14 2020, 1:43 PM · VyOS 1.3 Equuleus (1.3.0)
c-po assigned T2457: IPv6 ping by address not working to thomas-mangin.
May 14 2020, 1:09 PM
c-po moved T2458: Update FRR to 7.3.1 from Need Triage to Finished on the VyOS 1.3 Equuleus board.
May 14 2020, 11:59 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po closed T2458: Update FRR to 7.3.1 as Unknown Status.
May 14 2020, 11:56 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po created T2458: Update FRR to 7.3.1.
May 14 2020, 11:56 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)

May 12 2020

c-po added a comment to T1876: IPSec VTI tunnels are deleted after rekey and dangling around as A/D.

I have tested the fix in https://github.com/vyos/vyatta-cfg-vpn/pull/31 successfully on VyOS 1.2.5 with the hotfix mentiones. Happy to see this in 1.2.6

May 12 2020, 7:27 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T1291: Under certain conditions the VTI will stay forever down.

I have tested the fix in https://github.com/vyos/vyatta-cfg-vpn/pull/31 successfully on VyOS 1.2.5 with the hotfix mentiones. Happy to see this in 1.2.6

May 12 2020, 7:26 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po added a comment to T2449: 'ipv6 address autoconf' and 'address dhcpv6' don't work because interfaces have accept_ra=1 (they should have accept_ra=2 when forwarding=1).

No Problem - nice to see races for bugfixes

May 12 2020, 7:23 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2392: SSTP with ipv6 as Resolved.
May 12 2020, 7:22 PM · VyOS 1.3 Equuleus (1.3.0), Restricted Project
c-po closed T2454: Update Linux Kernel to v4.19.122 as Resolved.
May 12 2020, 3:23 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2454: Update Linux Kernel to v4.19.122.
May 12 2020, 3:22 PM · VyOS 1.3 Equuleus (1.3.0)

May 11 2020

c-po claimed T2450: Rewrite "protocols vrf" tree in XML and Python.
May 11 2020, 5:58 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a parent task for T2338: Can't delete static IPv6 route on vrf: T2450: Rewrite "protocols vrf" tree in XML and Python.
May 11 2020, 5:58 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a subtask for T2450: Rewrite "protocols vrf" tree in XML and Python: T2338: Can't delete static IPv6 route on vrf.
May 11 2020, 5:58 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2446: VRF IPv6 static routes subnet deletion.

Thank you for the good explanation in the issue!

May 11 2020, 5:57 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2446: VRF IPv6 static routes subnet deletion, a subtask of T2450: Rewrite "protocols vrf" tree in XML and Python, as Wontfix.
May 11 2020, 5:57 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2446: VRF IPv6 static routes subnet deletion as Wontfix.
May 11 2020, 5:57 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a parent task for T2446: VRF IPv6 static routes subnet deletion: T2450: Rewrite "protocols vrf" tree in XML and Python.
May 11 2020, 5:57 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a subtask for T2450: Rewrite "protocols vrf" tree in XML and Python: T2446: VRF IPv6 static routes subnet deletion.
May 11 2020, 5:57 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2450: Rewrite "protocols vrf" tree in XML and Python.
May 11 2020, 5:57 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2446: VRF IPv6 static routes subnet deletion.

Okay the problem here is that FRR stores the network as fe::/64 and not as fe::0/64 which was specified on the VyOS commandline. Thus the grep command used when deleting the route does not find the proper FRR entry and gives that error.

May 11 2020, 5:54 PM · VyOS 1.3 Equuleus (1.3.0)

May 10 2020

c-po claimed T2446: VRF IPv6 static routes subnet deletion.
May 10 2020, 6:50 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2447: Additional boot argument configuration to limit CPU C-States.

That could als help on debugging like adding vyos-config-debug option or as I like on my hosts, vga=773 when debugging and checking for config migration issues.

May 10 2020, 5:16 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
c-po closed T2445: VRF route leaking for ipv4 not working as Resolved.
May 10 2020, 10:51 AM · VyOS 1.3 Equuleus (1.3.0)