In T915#73396, @craterman wrote:@Viacheslav what about abnormal label allocation behavior which I wrote earlier? Was it fixed?
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Aug 20 2020
Aug 20 2020
Unknown Object (User) added a comment to T320: OSPF does not redistribute connected routes associated with virtual tunnel interfaces.
In this lab I used VyOS 1.3-rolling-202008170118. The connected routes redistributed in OSPF at HUB are being properly exchanged to WAN router, including the route to the virtual tunnel interface vti50.
Thanks
Yes, nft_chain_nat_ipv6 is also affected by this, and needs the same adjustments as the nat module
GitHub <noreply@github.com> committed rVYOSONEX106073a1899f: Merge pull request #530 from DmitriyEshenko/1x-anyconnect-fix01 (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEXc7707363bd9b: Merge pull request #531 from sever-sever/T915-timers (authored by c-po).
jestabro changed the status of T2815: Move certbot config directory under /config/auth from Open to In progress.
Although nat66 (NPT) is not currently incorporated into the mainline, I may need to modify my implementation if it is also modified
Hello, here is a request beyond the outline. Please help me check whether the NAT kernel module of IPv6 has also changed? It turned out to be nft_chain_nat_ipv6?
Aug 19 2020
Aug 19 2020
So I fixed this on my setup by kill -9 conntrackd
and then sudo /etc/init.d/conntrackd start
Would it be reasonable to use BFD for this? Since BFD is already implemented we might be able to use that as well?
runar updated the task description for T2814: kernel 5.1+ : NAT : module `nft_chain_nat_ipv4` renamed.
runar added a project to T2814: kernel 5.1+ : NAT : module `nft_chain_nat_ipv4` renamed: VyOS 1.3 Equuleus.
runar renamed T2813: NAT: possible to commit illegal source nat without translation from NAT: possible to commit illegal source nat without destination to NAT: possible to commit illegal source nat without translation .
In T915#73449, @Viacheslav wrote:PR https://github.com/vyos/vyos-1x/pull/531
Add discovery hello timers
PR https://github.com/vyos/vyos-1x/pull/531
Add discovery hello timers
c-po closed T2794: op-mode: lldp: "show lldp neighbors" IndexError: list index out of range as Resolved.
In T915#73395, @Viacheslav wrote:@Cheeze_It Thank's. Can you describe what features you are missing?
And if possible, an example configuration.
Viacheslav added a comment to T2807: IPv6 Link-Local Address - Automatically generation/configuration on GRE Interfaces.
It's doesn't work only for GRE encapsulation.
All other interfaces work as expected.
Unknown Object (User) renamed T2807: IPv6 Link-Local Address - Automatically generation/configuration on GRE Interfaces from IPv6 Link-Local Address - Automatically generation/configuration on Interfaces to IPv6 Link-Local Address - Automatically generation/configuration on GRE Interfaces.
Unknown Object (User) added a comment to T2802: Tunnel interface does not apply EUI-64 IPv6 Address.
In VyOS 1.3-rolling-202008170118 the interfaces do not generate/get the configured IPv6-EUI Address, as in the image:
Unknown Object (User) added a comment to T2807: IPv6 Link-Local Address - Automatically generation/configuration on GRE Interfaces.
In version VyOS 1.3-rolling-202008170118 physical interfaces have an automatic generated IPv6 Link-Local Address set, though Tunnel interfaces does not have it and it is necessary to set manually an IPv6 Link-Local Address ramdomly created. Tunnel interfaces also do not present a Layer-2 address from which a Link-Local IPv6 could be derived.
Unknown Object (User) added a comment to T2807: IPv6 Link-Local Address - Automatically generation/configuration on GRE Interfaces.
Unknown Object (User) changed the status of T2812: Add basic smoketest for anyconnect, a subtask of T2036: Open Connect VPN Server () support, from Open to In progress.
Unknown Object (User) changed the status of T2812: Add basic smoketest for anyconnect from Open to In progress.
"monitor dhcp" parse /var/log/messages and not use tcpdump
Viacheslav closed T1515: FRR ospf6d crashes when performing: "show ipv6 ospfv3 database" as Resolved.
Fixed, VyOS 1.3-rolling-202008190118
Unknown Object (User) changed the status of T2811: Cannot delete vpn anyconnect from Open to In progress.
Unknown Object (User) created T2811: Cannot delete vpn anyconnect.
Viacheslav added a comment to T2163: Disabled vif interface with "address dhcp" requests DHCP address.
dhclient script up this interface after hooks
Unknown Object (User) added a comment to T2809: An issue with config migration (system ntp server).
This happens only when in config before migration exists nodes system 'ntp' without other params.
@Viacheslav what about abnormal label allocation behavior which I wrote earlier? Was it fixed?
@Cheeze_It Thank's. Can you describe what features you are missing?
And if possible, an example configuration.
Works as expected on VyOS 1.3-rolling-202008190118
I also want to add more verification. I was able to bring up LDP *properly* to a Juniper as well. The one thing I was not able to 100% verify was that the labels themselves were proper from end to end *BUT* the Junipers did properly see the labels and did allocate from Vyos. Vyos itself also did the same. Due to a lack of ability to specify an explicit null I cannot absolutely verify yet, but I hope to be able to in the future. SO far though it seems that you guys have done a good job making sure that the P functionality works, and label allocation works. Well done. I was *ALSO* able to make the MPLS label pop up properly. Please check the very bottom for the verification of it working :)
Aug 18 2020
Aug 18 2020
Unknown Object (User) changed the status of T2036: Open Connect VPN Server () support from Open to Needs testing.
GitHub <noreply@github.com> committed rVYOSONEX01609e08e3bf: op-mode: T2791: Add monitor traceroute explicit for ipv4-ipv6 and vrf (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX865cba395223: anyconnect: T2036: add anyconnect VPN support (authored by Unknown Object (User)).
Unknown Object (User) created T2809: An issue with config migration (system ntp server).
lundgrenolof updated the task description for T2806: ipsec generates false warning on commit when local prefix is sourced from loopback.
Unknown Object (User) claimed T2036: Open Connect VPN Server () support.
As it turned out, the problem was on the client-side dhcpv6c and was fixed in T2510
Next Rolling release will be without this bug.
vyos@r2-roll:~$ sudo tcpdump -ntvi eth1 port 546 tcpdump: listening on eth1, link-type EN10MB (Ethernet), capture size 262144 bytes IP6 (flowlabel 0x630bb, hlim 1, next-header UDP (17) payload length: 60) fe80::5054:ff:fe78:6e81.546 > ff02::1:2.547: [bad udp cksum 0xbc21 -> 0x1ea8!] dhcp6 solicit (xid=f47a17 (client-ID hwaddr/time type 1 time 651069356 5254004ba2c4) (IA_NA IAID:1 T1:0 T2:0) (elapsed-time 103) (option-request DNS-server DNS-search-list)) IP6 (flowlabel 0x0d161, hlim 64, next-header UDP (17) payload length: 128) fe80::5054:ff:fe3c:7c1f.547 > fe80::5054:ff:fe78:6e81.546: [bad udp cksum 0x8790 -> 0xfa6f!] dhcp6 advertise (xid=f47a17 (IA_NA IAID:1 T1:0 T2:0 (IA_ADDR 2001:db8::199 pltime:27000 vltime:43200)) (client-ID hwaddr/time type 1 time 651069356 5254004ba2c4) (server-ID hwaddr/time type 1 time 651085104 5254003c7c1f) (DNS-server 2001:db8::ffff 2001:db8::1)) IP6 (flowlabel 0x630bb, hlim 1, next-header UDP (17) payload length: 106) fe80::5054:ff:fe78:6e81.546 > ff02::1:2.547: [bad udp cksum 0xbc4f -> 0x44a5!] dhcp6 request (xid=a568a (client-ID hwaddr/time type 1 time 651069356 5254004ba2c4) (server-ID hwaddr/time type 1 time 651085104 5254003c7c1f) (IA_NA IAID:1 T1:0 T2:0 (IA_ADDR 2001:db8::199 pltime:27000 vltime:43200)) (elapsed-time 0) (option-request DNS-server DNS-search-list)) IP6 (flowlabel 0x0d161, hlim 64, next-header UDP (17) payload length: 128) fe80::5054:ff:fe3c:7c1f.547 > fe80::5054:ff:fe78:6e81.546: [bad udp cksum 0x8790 -> 0x19e7!] dhcp6 reply (xid=a568a (IA_NA IAID:1 T1:0 T2:0 (IA_ADDR 2001:db8::199 pltime:27000 vltime:43200)) (client-ID hwaddr/time type 1 time 651069356 5254004ba2c4) (server-ID hwaddr/time type 1 time 651085104 5254003c7c1f) (DNS-server 2001:db8::ffff 2001:db8::1))
jestabro changed the status of T2808: Add smoketest to ensure script consistency with config daemon from Open to Needs testing.
The problem is not with the restart.
I think the problem with the template dhclient-ipv6.tmpl
ajgnet added a comment to T2760: In a load-balanced multi-wan configuration with DHCP assigned addresses, IPsec "dhcp-interface" does not work.
Enabling sticky connections had no effect in my testing. The only temporary solution was T2747. Unfortunately, this solution no longer works once the IP address changes on a DHCP-assigned interface.
Viacheslav added a comment to T1944: FRR: Invalid route in BGP causes update storm, memory leak, and failure of Zebra.
@bbabich any udpates?
32-bit Xen PV support was dropped recently from upstream Linux kernel 5.9.
64-bit Xen PV is still supported in upstream Linux kernel.
Aug 18 2020, 6:33 AM · Restricted Project
Aug 17 2020
Aug 17 2020
I believe we should stick to the same format as ntp.conf.
Another idea would be to introduce a new option „pool“ for any specified server to use the pool keyword over server. But I see no downside of always using pool, do you?
That would do a 2 for 1 solution.
SrividyaA added a comment to T2760: In a load-balanced multi-wan configuration with DHCP assigned addresses, IPsec "dhcp-interface" does not work.
In addition to the workaround provided in the task T2747, the following configuration could also be added to the existing configuration:
Unknown Object (User) updated the task description for T2802: Tunnel interface does not apply EUI-64 IPv6 Address.
Unknown Object (User) updated the task description for T2807: IPv6 Link-Local Address - Automatically generation/configuration on GRE Interfaces.
GitHub <noreply@github.com> committed rVYOSONEX2357a5e412ee: Merge pull request #527 from zdc/T2332-crux (authored by c-po).
zsdc changed the status of T2332: Backport node option for a syslog server, a subtask of T2327: Unable to create syslog server entry with different port, from Open to In progress.
zsdc changed the status of T2332: Backport node option for a syslog server from Open to In progress.
Unknown Object (User) added a comment to T2802: Tunnel interface does not apply EUI-64 IPv6 Address.
Tunnel Interfaces also do not generate/configure a Link-Local IPv6. It looks like Tunnel interfaces do not have any MAC Address associated to it.
Unknown Object (User) changed Is it a breaking change? from none to behavior on T2807: IPv6 Link-Local Address - Automatically generation/configuration on GRE Interfaces.
Unknown Object (User) created T2807: IPv6 Link-Local Address - Automatically generation/configuration on GRE Interfaces.
lundgrenolof updated the task description for T2806: ipsec generates false warning on commit when local prefix is sourced from loopback.
lundgrenolof updated the task description for T2806: ipsec generates false warning on commit when local prefix is sourced from loopback.
@ronie can you build an example with frr?
Aug 17 2020, 9:57 AM · Restricted Project
Merged
This is not solved in 1.2.6-epa1. Will this be solved in 1.2.6?
Unknown Object (User) added a comment to T486: Static IPv6 default route via OSPFv3-learned loopback is not activated.
It seems that making the tunnel connection a Stub Area would reach the same design goal without relying on a recursive static route, but it also seems that this feature is not supported in OSPFv3 by now. I´ve opened the following feature requests: https://phabricator.vyos.net/T2804 & https://phabricator.vyos.net/T2803 .
Unknown Object (User) created T2804: OSPFv3 Stub / NSSA [no summary].
@thomas-mangin in further tests, I've seen wide variability in timing tests, independent of caching, with the original quote being the high-end. That will need to be investigated, but I think performance should not be considered a road-block for now.
Unknown Object (User) added a comment to T486: Static IPv6 default route via OSPFv3-learned loopback is not activated.
I´ve tyred to reproduce this scenario with VyOS 1.3-rolling-202007300117.
The static-default-route is correctly installed in the routing table after rebooting the router.
Sorry, I don't understand what you mean. Can you tell me more about it? What is using net-snmp to submit feature requests?
Please file feature request with net-snmp.
The list of oids currently supported by vyos is as follows:
Unknown Object (User) updated subscribers of T2803: OSPFv3 - Default-Information Originate [always].
Unknown Object (User) created T2803: OSPFv3 - Default-Information Originate [always].
Aug 16 2020
Aug 16 2020
Unknown Object (User) added a comment to T486: Static IPv6 default route via OSPFv3-learned loopback is not activated.