The similar task https://vyos.dev/T4797
You can add manually nft rules that used for firewall group, but they will overwritten per next firewall change/commit. The whole firewall config will overwritten.
There are 2 ways. Somehow use it in CLI or use native (nft) tables, chains, group-sets and rules which are not overlapping with generated “system” firewall ruleset
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
All Stories
Today
Yesterday
On another router I've changed the base mounts to sync ie: mount /dev/md127 /boot -o remount,rw,noatime,sync before upgrading, but after a reboot it came back corrupted.
Thu, Jun 8
PR for VyOS 1.3 branch https://github.com/vyos/vyos-build/pull/358
PR for VyOS 1.3 branch https://github.com/vyos/vyos-build/pull/358
I have been able to get NAT to work with VRFs with 1.4-rolling-202306080317. However:
<?xml version="1.0"?> <interfaceDefinition> <node name="show"> <children> <node name="interfaces"> <properties> <help>Show network interface information</help> </properties> <command>${vyos_op_scripts_dir}/interfaces.py show_summary</command> <children> <leafNode name="counters"> <properties> <help>Show network interface counters</help> </properties> <command>${vyos_op_scripts_dir}/interfaces.py show_counters</command> </leafNode> <leafNode name="detail"> <properties> <help>Show detailed information of all interfaces</help> </properties> <command>${vyos_op_scripts_dir}/interfaces.py show</command> </leafNode> </children> </node> </children> </node> </interfaceDefinition>
It's actually an old issue.
With Base Configuration, it's don't have any issues. but after commit command here, error will show error:
Wed, Jun 7
PR for VyOS 1.3 https://github.com/vyos/vyatta-wanloadbalance/pull/19
Found the problem with command:
Tue, Jun 6
Could you please try the configuration in the latest rolling release.
Mon, Jun 5
In this case I found the ipv6-address-group and ipv6-network-group not assigned without name or group. Because it's can't show references.
PR for vyos-1x https://github.com/vyos/vyos-1x/pull/2025
Maybe related with https://vyos.dev/T5048
Sun, Jun 4
Draft PR re-opened following fix of regression with option 'recursive'; simplified logic and added optional args to get_config_defaults to mirror get_config_dict. The latter allows easy manipulation of defaults in cases where the automatic merge is not sufficient.