Page MenuHomeVyOS Platform
Feed Search

Jul 3 2021

c-po merged T1251: IKEv2 Agile VPN Support into T1210: About IKEv2 IPSec VPN remote access.
Jul 3 2021, 5:20 PM · VyOS 1.4 Sagitta
c-po committed rVYOSONEX469cd1de9f90: ipsec: T2816: rework log options for debugging.
Jul 3 2021, 3:49 PM
c-po committed rVYOSONEXdcfeb0de0a51: Merge branch 'ipsec-ikev2-remote-access' of github.com:c-po/vyos-1x into current.
Jul 3 2021, 1:43 PM
c-po committed rVYOSONEXa1abb118c9eb: ipsec: T2816: rework IKE and ESP key assignment.
Jul 3 2021, 1:43 PM
c-po committed rVYOSONEX1e74c0df2179: ipsec: T2816: remove default values from Jinja2 template and place them in XML.
Jul 3 2021, 1:43 PM
c-po committed rVYOSONEX2d79a5000c8a: ipsec: T2816: add Jinja2 converter for ESP/IKE groups to string.
Jul 3 2021, 1:43 PM
c-po committed rVYOSONEXff004bee54df: ipsec: T2816: adjust Jinja2 template to coding style.
Jul 3 2021, 1:43 PM
c-po committed rVYOSONEX1a859a97f840: xml: provide building block for a generic description node.
Jul 3 2021, 1:43 PM
c-po added a comment to T3661: [vrf} route-leaking missing command.

Commands are implemented.

Jul 3 2021, 12:07 PM · VyOS 1.3 Equuleus (1.3.0)

Jul 2 2021

c-po added a comment to T3660: Conntrack-Sync configuration command to specify destination udp port for peer.

Added command set service conntrack-sync interface <intrerface> port <port>

Jul 2 2021, 8:26 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po committed rVYOSONEX68d8250fe525: conntrack: T3660: make peer port configurable.
Jul 2 2021, 8:25 PM
c-po committed rVYOSONEX13924804aafa: conntrack: T3535: add support for multiple failsave links.
Jul 2 2021, 8:25 PM
c-po committed rVYOSONEXbc01277bdfdf: conntrack: T3660: make peer port configurable.
Jul 2 2021, 8:25 PM
c-po changed the status of T3660: Conntrack-Sync configuration command to specify destination udp port for peer from Confirmed to Needs testing.
Jul 2 2021, 8:23 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po committed rVYOSONEX7c1f2dab543f: conntrack: T3535: add missing valueHelp/constraint for peer CLI node.
Jul 2 2021, 7:56 PM
c-po committed rVYOSONEX96dce0f47805: conntrack: T3535: add missing valueHelp/constraint for peer CLI node.
Jul 2 2021, 7:55 PM
c-po committed rVYOSONEXbfcc86ea5cf6: smoketest: ipam: add site2site x509 auth testcase.
Jul 2 2021, 4:16 PM
c-po committed rVYOSONEX7f97e165a8f3: smoketest: ipsec: IKE and ESP settings can be done one time in setUp().
Jul 2 2021, 4:16 PM
c-po committed rVYOSONEX9c5462908617: smoketest: ipsec: place peer local-address into variable.
Jul 2 2021, 4:16 PM

Jul 1 2021

c-po changed the status of T3660: Conntrack-Sync configuration command to specify destination udp port for peer from Open to Confirmed.
Jul 1 2021, 7:50 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po added a project to T3660: Conntrack-Sync configuration command to specify destination udp port for peer: VyOS 1.4 Sagitta.
Jul 1 2021, 7:50 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po added a comment to T3660: Conntrack-Sync configuration command to specify destination udp port for peer.

conntrack implementation changed form 1.3 -> 1.4 by a rewrite. Can you please tell us which version of VyOS you are using?

Jul 1 2021, 7:46 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po assigned T3659: Configuration won't accept IPv6 addresses for site-to-site VPN tunnel prefixes/traffic selectors to sarthurdev.
Jul 1 2021, 7:45 PM · VyOS 1.4 Sagitta
c-po renamed T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Update Linux Kernel to v5.4.128 / 5.10.46 to Update Linux Kernel to v5.4.129 / 5.10.47.
Jul 1 2021, 7:43 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po committed rVYOSONEXc232fdc4c546: vyos.util: remove no longer needed copy_file helper method.
Jul 1 2021, 7:39 PM
c-po committed rVYOSONEX469e57398f3a: Merge branch 'pki_ipsec' of https://github.com/sarthurdev/vyos-1x into pki-cli.
Jul 1 2021, 7:39 PM
c-po committed rVYOSONEXd565d4baffb9: ipsec: T3643: bugfix on wrong destination file path for x509 key file.
Jul 1 2021, 6:50 PM
c-po committed rVYOSONEX63e6c00864a8: vyos.util: fix IsADirectoryError and SameFileError for copy_file.
Jul 1 2021, 6:50 PM
c-po moved T3083: Add feature event-handler from Open to Backlog on the VyOS 1.4 Sagitta board.
Jul 1 2021, 9:11 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po closed T2035: Executing vyos-smoketest multiple times makes ssh test fail on execution as Resolved.
Jul 1 2021, 9:09 AM · VyOS 1.4 Sagitta
c-po added a comment to T2035: Executing vyos-smoketest multiple times makes ssh test fail on execution.

Should be addresses using the new vyos smoketest shim from 1.4 branch.

Jul 1 2021, 9:09 AM · VyOS 1.4 Sagitta
c-po removed a project from T2035: Executing vyos-smoketest multiple times makes ssh test fail on execution: VyOS 1.3 Equuleus.
Jul 1 2021, 9:09 AM · VyOS 1.4 Sagitta
c-po moved T3636: SSTP / L2TP ipv6 support broken from Open to In Progress on the VyOS 1.4 Sagitta board.
Jul 1 2021, 9:08 AM · VyOS 1.4 Sagitta
c-po moved T3642: PKI configuration from Open to Backlog on the VyOS 1.4 Sagitta board.
Jul 1 2021, 9:08 AM · VyOS 1.4 Sagitta (1.4.0-epa1)
c-po moved T2778: Migrate "system syslog" to get_config_dict() to support new features from Open to Backlog on the VyOS 1.4 Sagitta board.
Jul 1 2021, 9:08 AM · VyOS 1.4 Sagitta
c-po moved T2769: Add VRF support for syslog from Open to Backlog on the VyOS 1.4 Sagitta board.
Jul 1 2021, 9:08 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po added a comment to T3657: BGP neighbors ipv6 not able to establish with IPv6 link-local addresses.

Please share your configuration.

Jul 1 2021, 7:39 AM · VyOS 1.4 Sagitta

Jun 30 2021

c-po added a comment to T3657: BGP neighbors ipv6 not able to establish with IPv6 link-local addresses.

Please share your entire setup then somwe are able to help out.

Jun 30 2021, 7:39 PM · VyOS 1.4 Sagitta
c-po added a comment to T3657: BGP neighbors ipv6 not able to establish with IPv6 link-local addresses.

please stop the idea of "deprecated" command. VyOS commands are in no relation to FRR commands.
If (and when) the FRR syntax changes, we will ensure it will still work by either migrating the VyOS CLI configuration dynamically on upgrade or by adjusting to the FRR configuration "under the hood" with our Jinja2 template.

Jun 30 2021, 6:48 PM · VyOS 1.4 Sagitta
c-po edited projects for T2769: Add VRF support for syslog, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
Jun 30 2021, 6:43 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po removed a project from T2778: Migrate "system syslog" to get_config_dict() to support new features: VyOS 1.3 Equuleus.
Jun 30 2021, 6:43 PM · VyOS 1.4 Sagitta
c-po changed the status of T3658: Add support for dhcpdv6 fixed-prefix6 from In progress to Needs testing.
Jun 30 2021, 6:43 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po moved T3658: Add support for dhcpdv6 fixed-prefix6 from Open to Finished on the VyOS 1.4 Sagitta board.
Jun 30 2021, 6:43 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po moved T3658: Add support for dhcpdv6 fixed-prefix6 from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Jun 30 2021, 6:42 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po committed rVYOSONEXf4dd2ea487d6: smoketest: ipsec: add more re-usable variable definitions throughout the test.
Jun 30 2021, 6:42 PM
c-po committed rVYOSONEXcef8147afd1d: dhcpdv6: T3658: add support for dhcpdv6 fixed-prefix6 (authored by stepler).
Jun 30 2021, 6:09 PM

Jun 29 2021

c-po committed rVYOSONEX31bbac481c53: Debian: T3641: remove absolut path to tcpdump which now resides in /usr/bin.
Jun 29 2021, 7:45 PM
c-po committed rVYOSONEX35b2fbbf7dc9: pppoe-server: T3593: Change called-sid position in template (authored by Unknown Object (User)).
Jun 29 2021, 6:41 PM
c-po added a comment to T3657: BGP neighbors ipv6 not able to establish with IPv6 link-local addresses.

the new build is already available. I am unsure if this works or is even supported by FRR.
Please consult FRR manual and try configuring this manually from vtysh.

Jun 29 2021, 6:26 PM · VyOS 1.4 Sagitta
c-po committed rVYOSONEX6fdb90a43e91: pppoe-server: T3405: Add interface cache feature (authored by Unknown Object (User)).
Jun 29 2021, 5:58 PM
c-po committed rVYOSONEXb50f2ffb470e: openvpn: T3641: adjust deprecated "openvpn --genkey" command.
Jun 29 2021, 5:58 PM
c-po committed rVYOSONEX065c6b620cb5: pppoe-server: T3405: Add interface cache feature (authored by Unknown Object (User)).
Jun 29 2021, 5:55 PM
c-po closed T1441: Add support for IPSec XFRM interfaces as Resolved.
Jun 29 2021, 4:38 PM · VyOS 1.4 Sagitta
c-po changed Is it a breaking change? from none to validation on T3657: BGP neighbors ipv6 not able to establish with IPv6 link-local addresses.
Jun 29 2021, 4:36 PM · VyOS 1.4 Sagitta
c-po changed Version from -VyOS 1.4-rolling-202106260417 to 1.4-rolling-202106260417 on T3657: BGP neighbors ipv6 not able to establish with IPv6 link-local addresses.
Jun 29 2021, 4:36 PM · VyOS 1.4 Sagitta
c-po closed T3657: BGP neighbors ipv6 not able to establish with IPv6 link-local addresses as Resolved.
Jun 29 2021, 4:36 PM · VyOS 1.4 Sagitta
c-po added a comment to T3657: BGP neighbors ipv6 not able to establish with IPv6 link-local addresses.

Bug confirmed and fixed,

Jun 29 2021, 4:36 PM · VyOS 1.4 Sagitta
c-po committed rVYOSONEX6152084f5f49: smoketest: bgp: T3657: test ipv6 link-local peering.
Jun 29 2021, 4:34 PM
c-po committed rVYOSONEX0751065ffa21: ipsec: T1441: switch from vti to xfrm interfaces.
Jun 29 2021, 4:34 PM
c-po committed rVYOSONEX5a5c0cd2e6f5: bgp: T3657: fix remote-as validator for IPv6 link-local peering.
Jun 29 2021, 4:34 PM

Jun 28 2021

c-po changed the status of T3657: BGP neighbors ipv6 not able to establish with IPv6 link-local addresses from Open to Confirmed.
Jun 28 2021, 7:07 PM · VyOS 1.4 Sagitta
c-po added a comment to T3657: BGP neighbors ipv6 not able to establish with IPv6 link-local addresses.

even if FRR manual states the deprecation notice, we have our own layer of abstraction and will deal with it once it is required.
For the time beeing, I just checked the commands (using tab completion).

Jun 28 2021, 6:59 PM · VyOS 1.4 Sagitta
c-po added a comment to T3657: BGP neighbors ipv6 not able to establish with IPv6 link-local addresses.

I wonder why you use ebgp multihop wirh link local addresses?

Jun 28 2021, 5:45 PM · VyOS 1.4 Sagitta

Jun 27 2021

c-po committed rVYOSONEX09efa0550dd1: op-mode: bond: T2546: implement "show interface bond * slaves" command.
Jun 27 2021, 9:14 AM
c-po added a comment to T2770: Allow any character to be used in the SNMP community field.

What would be the "full set" up supported characters? If I remember correctly this regex is inherited from VyOS 1.1

Jun 27 2021, 7:42 AM · VyOS Rolling
c-po moved T2770: Allow any character to be used in the SNMP community field from Open to Backlog on the VyOS 1.4 Sagitta board.
Jun 27 2021, 7:42 AM · VyOS Rolling
c-po moved T3651: Move certbot request to op-mode from Open to Backlog on the VyOS 1.4 Sagitta board.
Jun 27 2021, 7:42 AM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.4 Sagitta
c-po added a comment to T3652: BGP handshake with cisco router ends in timeout.

Please share your Cisco and VyOS config, and also the Cisco router Model/Version

Jun 27 2021, 7:41 AM · VyOS 1.4 Sagitta

Jun 26 2021

c-po committed rVYOSONEX707fe801eac4: Debian: drop ipsec key removal from postinst script - done on every system boot.
Jun 26 2021, 9:00 PM
c-po committed rVYOSONEXc121218b4883: Import vyos-postconfig-bootup.script from vyatta-cfg-system.
Jun 26 2021, 9:00 PM
c-po committed rVYOSONEX0f6ec4722215: Import configuration files from vyatta-cfg-system.
Jun 26 2021, 9:00 PM
c-po committed rVYOSONEX87c7a1243e0b: Debian: no need to disable salt-minion in postinst script.
Jun 26 2021, 8:12 PM
c-po committed rVYOSONEX120b866bf28f: Import sudoers configuration from vyatta-cfg-system.
Jun 26 2021, 8:12 PM
c-po committed rVYOSONEX2124089f7d83: banner: T2135: adjust to raw strings from vyatta-cfg repo.
Jun 26 2021, 7:32 PM
c-po committed rVYOSONEX3d2f2ca9696c: banner: T2135: adjust to raw strings from vyatta-cfg repo.
Jun 26 2021, 5:56 PM
c-po committed rVYOSONEXf98bad44fc9c: nat: T1083: fix Jinja2 templating error.
Jun 26 2021, 2:57 PM
c-po closed T3586: Tunnel/Wireguard/VTI: replace random get_mac function with addrgenmode as Invalid.
Jun 26 2021, 7:43 AM · VyOS 1.4 Sagitta
c-po added a comment to T3586: Tunnel/Wireguard/VTI: replace random get_mac function with addrgenmode.

THis is infact only relevant when IPv6 addressing is used.

Jun 26 2021, 7:39 AM · VyOS 1.4 Sagitta
c-po committed rVYOSONEX3ffe114e8e89: openvpn: T3641: adjust deprecated "openvpn --genkey" command.
Jun 26 2021, 7:34 AM
c-po committed rVYOSONEXa6b526fd9826: ipsec: T3643: us vyos.util.copy_file() over raw UNIX cp command.
Jun 26 2021, 7:25 AM
c-po committed rVYOSONEX5303ec39f6f0: vyos.util: add new helper copy_file().
Jun 26 2021, 7:25 AM
c-po committed rVYOSONEX8108ca69e7d8: ipsec: T3643: use variable for path names.
Jun 26 2021, 7:25 AM
c-po added a reverting change for rVYOSONEX95bbbb8bed92: ipsec: T3643: move swanctl.conf to /run: rVYOSONEX03e1d273acf3: Revert "ipsec: T3643: move swanctl.conf to /run".
Jun 26 2021, 7:25 AM
c-po committed rVYOSONEX03e1d273acf3: Revert "ipsec: T3643: move swanctl.conf to /run".
Jun 26 2021, 7:25 AM

Jun 25 2021

c-po added a comment to T3642: PKI configuration.

I ver much like this idea. Certificates can then easily be migrated from device to device, and very easy be referenced in a service.

Jun 25 2021, 8:17 PM · VyOS 1.4 Sagitta (1.4.0-epa1)
c-po closed T3641: Upgrade base system from Debian Buster -> Debian Bullseye as Resolved.
Jun 25 2021, 7:42 PM · VyOS 1.4 Sagitta
c-po committed rVYOSONEXde065cb9c423: openvpn: T1512: T3641: drop deprecated "compat-names" option.
Jun 25 2021, 7:21 PM
c-po committed rVYOSONEX5187acf7babe: openvpn: T3641: remove deprecated iproute option.
Jun 25 2021, 7:21 PM
c-po committed rVYOSONEX05a7114a4a97: smoketest: ospf: sometimes the passive-interface-test fails - add debug code.
Jun 25 2021, 7:06 PM
c-po committed rVYOSONEX23cb8c338ad3: openvpn: T1704: drop deprecated disable-ncp option.
Jun 25 2021, 5:42 PM
c-po committed rVYOSONEX6b7b19c93f90: openvpn: T1704: drop deprecated disable-ncp option.
Jun 25 2021, 5:40 PM
c-po closed T3650: OpenVPN: Upgrade package to 2.5.1 before releasing VyOS 1.3.0 as Resolved.
Jun 25 2021, 5:28 PM · VyOS 1.3 Equuleus (1.3.0)
c-po moved T3650: OpenVPN: Upgrade package to 2.5.1 before releasing VyOS 1.3.0 from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Jun 25 2021, 5:27 PM · VyOS 1.3 Equuleus (1.3.0)
c-po updated the task description for T3650: OpenVPN: Upgrade package to 2.5.1 before releasing VyOS 1.3.0.
Jun 25 2021, 5:26 PM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T3650: OpenVPN: Upgrade package to 2.5.1 before releasing VyOS 1.3.0 from Open to In progress.
Jun 25 2021, 5:20 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T3650: OpenVPN: Upgrade package to 2.5.1 before releasing VyOS 1.3.0.
Jun 25 2021, 5:20 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T3649: Add bonding additional hash-policy as Resolved.
Jun 25 2021, 4:58 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po moved T3649: Add bonding additional hash-policy from Open to Finished on the VyOS 1.4 Sagitta board.
Jun 25 2021, 4:58 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po moved T3649: Add bonding additional hash-policy from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Jun 25 2021, 4:58 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po committed rVYOSONEX3e9aab9adb12: smoketest: bonding: T3649: fix typo in testcase name.
Jun 25 2021, 4:57 PM