Okay, trying to reproduce this. In the meantime, can you please check the behavior with vtysh as restarting bgpd is actually a bad idea.
My gut tells me this might be an FRR issue.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Sep 12 2021
Sep 12 2021
Sep 11 2021
Sep 11 2021
Sep 10 2021
Sep 10 2021
c-po added a project to T3802: Commit fails if ethernet interface doesn't support flow control: VyOS 1.4 Sagitta.
c-po changed the status of T3802: Commit fails if ethernet interface doesn't support flow control from Open to In progress.
Can you please share your entire config and what to type to reproduce it? Happy to have a look later on.
Can you please retrst with the latest 1.4? the was a bug related to route-maps in bgpd
c-po changed Issue type from feature to upgrade on T3819: Upgrade Salt Stack 3002.3 -> 3003 release train.
c-po moved T3820: PowerDNS recursor - update from 4.3 -> 4.4 to sync with current from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po changed Issue type from feature to upgrade on T3820: PowerDNS recursor - update from 4.3 -> 4.4 to sync with current.
c-po moved T3819: Upgrade Salt Stack 3002.3 -> 3003 release train from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3819: Upgrade Salt Stack 3002.3 -> 3003 release train from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3819: Upgrade Salt Stack 3002.3 -> 3003 release train from Need Triage to 1.3.0-epa1 on the VyOS 1.3 Equuleus board.
c-po changed the status of T3819: Upgrade Salt Stack 3002.3 -> 3003 release train from Open to In progress.
Setting this to resolved as implementation is almost complete. Please file individual tasks for bugs so we can properly track them in the 1.3 release cycle.
Sep 9 2021
Sep 9 2021
Will be fixed in tomorrows rolling - thanks for reporting this.
c-po moved T3817: PKI: add "import" keyword when in "configure" mode from Open to Backlog on the VyOS 1.4 Sagitta board.
c-po added a comment to T3815: pki : the file command 'generate pki wireguard key-pair file' is not working.
cpo@LR1.wue3:~$ generate pki wireguard key-pair file test Private key: QG039BeDoy2MXKxQwFRhYYea7B50crYvZ1RUn+N0c3A= Public key: iXVG4GSHc0O7NHgX47DhhNO/WWSTZS83/eF2z4GHYSE= File written to /config/auth/test_public.key File written to /config/auth/test_private.key
c-po moved T3816: Error after entering outbound-interface command in NAT from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po changed the status of T3816: Error after entering outbound-interface command in NAT from Open to In progress.
c-po edited a custom field on T3814: wireguard: commit error showing incorrect peer name from the configured name.
c-po moved T3805: OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface from Need Triage to 1.3.0-epa1 on the VyOS 1.3 Equuleus board.
c-po moved T3814: wireguard: commit error showing incorrect peer name from the configured name from Open to In Progress on the VyOS 1.4 Sagitta board.
Your problem is that this is not a CA certificate, it's the servers certificate.
Sep 8 2021
Sep 8 2021
Can you share your CAs public cert for testing?
c-po added a comment to T3805: OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface.
A new ISO 1.4-rolling-202109081242 is currently build - you may check in 30 minutes and try if this works for you - it did in my example config.
That would only work if accept_local will be added as proper CLI node on the tunnel interface, or use set system sysctl parameter net.ipv4.conf.default.accept_local value '1'
c-po moved T3805: OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface from Open to Finished on the VyOS 1.4 Sagitta board.
c-po changed the status of T3805: OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface from Confirmed to Needs testing.
c-po changed the status of T3805: OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface from Open to Confirmed.
Sep 7 2021
Sep 7 2021
c-po edited projects for T3796: Wireguard interfaces are not shown in op-mode, added: VyOS 1.2 Crux (VyOS 1.2.9); removed VyOS 1.2 Crux.
@absolutesantaja this is definately a bug in the 1.2.9 op-mode commands
c-po added a comment to T3805: OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface.
Can you please share a version of your anonymized client configuration?
c-po edited a custom field on T3807: Op Command "show interfaces wireguard" does not show the output.
c-po moved T3807: Op Command "show interfaces wireguard" does not show the output from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3807: Op Command "show interfaces wireguard" does not show the output from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3807: Op Command "show interfaces wireguard" does not show the output from Need Triage to 1.3.0-epa1 on the VyOS 1.3 Equuleus board.
Same happens to other op-mode commands:
please refer to the PKI documentation at https://docs.vyos.io/en/latest/configuration/pki/index.html or https://blog.vyos.io/pki-and-ipsec-ikev2-remote-access-vpn about how the PKI feature is used.
c-po committed rVYOSONEXd9f20383323a: login: T971 allow quoting in public-keys options (authored by plett).
I tested it on ESXi
Sep 6 2021
Sep 6 2021
Works as designed. Note that the MACSec interface will only change its state to u/u after a successful key-exchange.