Page MenuHomeVyOS Platform

NHRP unable to commit.
Closed, ResolvedPublic


If we have wrong configured tunX, e.g. keep tun0 remote-ip x.x.x.x, after commit NHRP-script creates too early iptables rules.

set interfaces tunnel tun0 address ''
set interfaces tunnel tun0 encapsulation 'gre'
set interfaces tunnel tun0 local-ip ''
set interfaces tunnel tun0 multicast 'enable'
set interfaces tunnel tun0 parameters ip key '1'
set interfaces tunnel tun0 remote-ip ''

set protocols nhrp tunnel tun0 cisco-authentication 'testPass'
set protocols nhrp tunnel tun0 map nbma-address ''
set protocols nhrp tunnel tun0 map register
set protocols nhrp tunnel tun0 multicast 'nhs'
set protocols nhrp tunnel tun0 redirect
set protocols nhrp tunnel tun0 shortcut

After commit we have failed

vyos@R1# commit
[ protocols nhrp ]
tun0 is not 'mGRE' tunnel'

[[protocols nhrp]] failed
Commit failed

If we delete wrong tun0 remote-ip x.x.x.x and commit again, we have error

vyos@R1# delete interfaces tunnel tun0 remote-ip 
vyos@R1# commit
[ interfaces tunnel tun0 ]
No remote-ip configured for tun0, tunnel can only be used for mGRE.

[ protocols nhrp tunnel tun0 ]
iptables: Chain already exists.
System call failed:  at /opt/vyatta/sbin/ line 469.

[[protocols nhrp]] failed
Commit failed


Difficulty level
Unknown (require assessment)
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)

Event Timeline

Unknown Object (User) changed the task status from Open to In progress.Oct 17 2019, 11:55 PM
Unknown Object (User) triaged this task as Normal priority.
Unknown Object (User) created this task.
Unknown Object (User) created this object in space S1 VyOS Public.
Unknown Object (User) created this object with visibility "No One".
Unknown Object (User) changed the visibility from "No One" to "Public (No Login Required)".Oct 18 2019, 12:15 AM
Unknown Object (User) added a project: VyOS 1.3 Equuleus.
syncer moved this task from Need Triage to Finished on the VyOS 1.3 Equuleus board.