Page MenuHomeVyOS Platform
Create Task
Maniphest T2173

Add the ability to use VRF on VTI interfaces
Closed, ResolvedPublicFEATURE REQUEST
Actions

Description

Add the ability to use VRF on IPSec VTI tunnel interfaces.

Details

Difficulty level
Hard (possibly days)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)

Related Objects
Search...

Event Timeline

Viacheslav created this task.Mar 28 2020, 5:11 PM
thomas-mangin added a subscriber: thomas-mangin.Mar 28 2020, 10:02 PM

It requires a migration of the VTI interface to python first.

syncer updated the task description. (Show Details)Mar 28 2020, 10:03 PM
Viacheslav added a subtask: T2028: Convert "interfaces tunnel" to new XML/Python representation.Mar 29 2020, 9:37 AM
Viacheslav removed a subtask: T2028: Convert "interfaces tunnel" to new XML/Python representation.Mar 29 2020, 9:58 AM
mpueschel added a subscriber: mpueschel.Jun 7 2020, 11:44 PM
Viacheslav added a parent task: T2579: The root task for VRF features.Jun 10 2020, 12:55 PM
pasik added a subscriber: pasik.Jun 10 2020, 4:55 PM
Viacheslav added a comment.Nov 3 2020, 3:24 PM

It can be work with XFRM interfaces https://wiki.strongswan.org/projects/strongswan/wiki/RouteBasedVPN#XFRM-interfaces-in-VRFs

c-po added a subtask: T1513: Move OSPF and RIP interface configuration under protocols.Feb 5 2021, 4:23 PM
c-po changed the status of subtask T1513: Move OSPF and RIP interface configuration under protocols from Open to In progress.
c-po closed subtask T1513: Move OSPF and RIP interface configuration under protocols as Resolved.Mar 14 2021, 2:04 PM
c-po closed this task as Resolved.May 28 2021, 7:46 PM
c-po claimed this task.
c-po added a parent task: T2816: Rewrite IPsec scripts with the new XML/Python approach.
c-po added a comment.May 29 2021, 9:29 AM

Re-Open - requires a strongswan update first - sorry

c-po reopened this task as Open.May 29 2021, 9:29 AM
c-po removed c-po as the assignee of this task.
c-po triaged this task as Normal priority.
c-po changed Difficulty level from Unknown (require assessment) to Hard (possibly days).
c-po added a subscriber: c-po.
c-po added a parent task: T1888: Update to StrongSwan 5.9.1.May 29 2021, 4:46 PM
zsdc raised the priority of this task from Normal to High.Jun 11 2021, 7:33 PM
zsdc added a subscriber: zsdc.

It also works with the current VTI interfaces (sudo ip l set vti1 vrf VRF1).

c-po added a comment.Jun 13 2021, 9:26 AM

@zsdc thanks for confirming. Re-added CLI node

c-po closed this task as Resolved.Jun 13 2021, 9:27 AM
c-po claimed this task.
c-po edited projects, added VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
c-po moved this task from Need Triage to Finished on the VyOS 1.4 Sagitta board.Jun 13 2021, 11:23 AM