Page MenuHomeVyOS Platform
Create Task
Maniphest T2173

Add the ability to use VRF on VTI interfaces
Closed, ResolvedPublicFEATURE REQUEST
Actions

Description

Add the ability to use VRF on IPSec VTI tunnel interfaces.

Details

Version
-
Is it a breaking change?
Unspecified (possibly destroys the router)

Related Objects
Search...

Event Timeline

Viacheslav created this task.Mar 28 2020, 5:11 PM
thomas-mangin subscribed.Mar 28 2020, 10:02 PM

It requires a migration of the VTI interface to python first.

syncer updated the task description. (Show Details)Mar 28 2020, 10:03 PM
Viacheslav added a subtask: T2028: Convert "interfaces tunnel" to new XML/Python representation.Mar 29 2020, 9:37 AM
Viacheslav removed a subtask: T2028: Convert "interfaces tunnel" to new XML/Python representation.Mar 29 2020, 9:58 AM
mpueschel subscribed.Jun 7 2020, 11:44 PM
Viacheslav added a parent task: T2579: The root task for VRF features.Jun 10 2020, 12:55 PM
pasik subscribed.Jun 10 2020, 4:55 PM
Viacheslav added a comment.Nov 3 2020, 3:24 PM

It can be work with XFRM interfaces https://wiki.strongswan.org/projects/strongswan/wiki/RouteBasedVPN#XFRM-interfaces-in-VRFs

c-po added a subtask: T1513: Move OSPF and RIP interface configuration under protocols.Feb 5 2021, 4:23 PM
c-po changed the status of subtask T1513: Move OSPF and RIP interface configuration under protocols from Open to In progress.
c-po closed subtask T1513: Move OSPF and RIP interface configuration under protocols as Resolved.Mar 14 2021, 2:04 PM
c-po closed this task as Resolved.May 28 2021, 7:46 PM
c-po claimed this task.
c-po added a parent task: T2816: Rewrite IPsec scripts with the new XML/Python approach.
c-po mentioned this in rVYOSONEXab398d1a063c: vti: T2173: add VRF support for virtual tunnel interfaces.May 28 2021, 7:53 PM
c-po added a comment.May 29 2021, 9:29 AM

Re-Open - requires a strongswan update first - sorry

c-po reopened this task as Open.May 29 2021, 9:29 AM
c-po removed c-po as the assignee of this task.
c-po triaged this task as Normal priority.
c-po edited a custom field.
c-po subscribed.
c-po mentioned this in rVYOSONEX462b3bee0434: Revert "vti: T2173: add VRF support for virtual tunnel interfaces".May 29 2021, 9:30 AM
c-po added a parent task: T1888: Update to StrongSwan 5.9.1.May 29 2021, 4:46 PM
zsdc raised the priority of this task from Normal to High.Jun 11 2021, 7:33 PM
zsdc subscribed.

It also works with the current VTI interfaces (sudo ip l set vti1 vrf VRF1).

c-po mentioned this in rVYOSONEX5c47a1bdb5f5: vti: T2173: add VRF support for virtual tunnel interfaces.Jun 13 2021, 9:26 AM
c-po added a comment.Jun 13 2021, 9:26 AM

@zsdc thanks for confirming. Re-added CLI node

c-po closed this task as Resolved.Jun 13 2021, 9:27 AM
c-po claimed this task.
c-po edited projects, added VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
c-po moved this task from Open to Finished on the VyOS 1.4 Sagitta board.Jun 13 2021, 11:23 AM