Page MenuHomeVyOS Platform

"update geoip" fails when vrf is being configured
Open, NormalPublicBUG


When having vrfs configured attempting to run "update geoip" from op-mode fails:

vyos@vyos:~$ update geoip 
Error: Failed to download GeoIP database
GeoIP not in use by firewall

Workaround is to first switch context into the vrf who can reach internet like so:

vyos@vyos:~$ force vrf INTERNET

vyos@vyos:INTERNET:~$ update geoip
Downloaded GeoIP database
GeoIP not in use by firewall

Suggestion is that "update geoip" should get the same syntax as "add system image" where one from op-mode can specify which vrf the command should run under like so:

vyos@vyos:~$ update geoip vrf INTERNET


Difficulty level
Unknown (require assessment)
VyOS 1.4-rolling-202307250317
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Bug (incorrect behavior)

Event Timeline

dmbaturin triaged this task as Normal priority.Jan 11 2024, 11:52 AM
dmbaturin added a project: VyOS 1.5 Circinus.

For 1.5-rolling-202406120020 it doesnt work even without having a vrf:

vyos@vyos-a# run update geoip 
Downloaded GeoIP database
Error: GeoIP failed to update firewall

Unfortunately there is no explaining logging (at least I didn't found any).