The root cause of this problem is that OpenVPN when the deamon is started and in tries to connect to the server, yet did not create the vtun11 interface on the system. Thus all calls to the ifconfig python library will fail big time.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Oct 18 2020
Oct 18 2020
c-po closed T2985: Add glue code to create bridge interface on demand, a subtask of T2653: "set interfaces" Python handler code improvements - next iteration, as Resolved.
c-po changed the status of T2992: Automatically verify sha256 checksum on ISO download from Open to In progress.
c-po added a comment to T2969: OpenVPN: command_set on interface is not applied, if interface doesn't come up in commit.
Oct 17 2020
Oct 17 2020
c-po changed the status of T2985: Add glue code to create bridge interface on demand, a subtask of T2653: "set interfaces" Python handler code improvements - next iteration, from In progress to Needs testing.
c-po changed the status of T2985: Add glue code to create bridge interface on demand from In progress to Needs testing.
c-po closed T2991: Update WireGuard to 1.0.20200908, a subtask of T2990: Update Linux Kernel to v4.19.152, as Resolved.
c-po edited projects for T2792: Failed to run `sudo make qemu` with vyos-build container due to the change of packer, added: VyOS 1.3 Equuleus; removed vyos-build.
This will break builds in out Docker environment where we ship a packer version. See T2792 and https://github.com/vyos/vyos-build/commit/e2dd9db8a2539b6d13c98d89e18872336cf8f974
c-po changed Version from - to 1.3-rolling-202010081758 on T2985: Add glue code to create bridge interface on demand.
c-po changed the status of T2985: Add glue code to create bridge interface on demand from Open to In progress.
c-po changed the status of T2985: Add glue code to create bridge interface on demand, a subtask of T2653: "set interfaces" Python handler code improvements - next iteration, from Open to In progress.
Oct 16 2020
Oct 16 2020
That would be a workaround only - see IPv6 syntax above. Using the refactored interface handling (T2653) makes this a low-hanging fruit.
Oct 15 2020
Oct 15 2020
c-po renamed T2980: FRR bfdd crash due to invalid length from FRR bfdd crash due to invlid length to FRR bfdd crash due to invalid length.
trae32566 awarded T2980: FRR bfdd crash due to invalid length a Like token.
Also submitted PR for FRR 7.3 series https://github.com/FRRouting/frr/pull/7318
Oct 14 2020
Oct 14 2020
Could you share also Client1 and Client2 configuration? Would be nice adding this lab setup to the docs
c-po added a comment to T2969: OpenVPN: command_set on interface is not applied, if interface doesn't come up in commit.
Please share your OpenVPN config
c-po changed the status of T2972: PPPoE server rate limiter allows max 65535 kbps to be set from In progress to Needs testing.
Oct 13 2020
Oct 13 2020
Oct 12 2020
Oct 12 2020
Oct 11 2020
Oct 11 2020
c-po closed T2974: Migrate tftp-server to get_config_dict(), a subtask of T692: TFTP server functionality, as Resolved.
c-po moved T2891: Support to change ring-buffers from CLI from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.7) board.
c-po moved T2973: tftp-server cannot listen on IPv6 address from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.7) board.
@Dmitry is this a limitation of Accel-PPP or can we increase the limits on the CLI?
c-po renamed T2972: PPPoE server rate limiter allows max 65535 kbps to be set from Rate limiter of PPPoE session allows max 65535 kbps to be set to PPPoE server rate limiter allows max 65535 kbps to be set.
c-po added a comment to T2969: OpenVPN: command_set on interface is not applied, if interface doesn't come up in commit.
I can feel that pain! When looking at the source from VyOS 1.2 (crux) it looks like it always behaved in this way.
Oct 10 2020
Oct 10 2020
@christophedc0 Have you enabled NAT rule logging?
Oct 9 2020
Oct 9 2020
vyos@vyos# lsmod | grep qat qat_200xx 20480 0 intel_qat 299008 2 usdm_drv,qat_200xx dh_generic 16384 1 intel_qat uio 20480 1 intel_qat authenc 16384 1 intel_qat
c-po renamed T2968: Add support for Intel Atom C2000 series QAT from Ssupport qat_200xx to Add support for Intel Atom C2000 series QAT.
Oct 6 2020
Oct 6 2020
Oct 5 2020
Oct 5 2020
c-po updated the task description for T2963: Wireless: WIFI is not password protected when security wpa mode is not defined but passphrase is.
c-po updated the task description for T2963: Wireless: WIFI is not password protected when security wpa mode is not defined but passphrase is.
c-po changed the status of T2963: Wireless: WIFI is not password protected when security wpa mode is not defined but passphrase is from Open to Confirmed.
Okay 2017 is like yesterday in NIS history so we then should keep it!
Any rolling newer then vyos-1.3-rolling-202010050117-amd64.iso will have this included.
I did a minor improvement and reused the fqdn validator in our system. In addition I refactored the domain-search into an includable snippet - so changing grammar, validators can be done in one single file.
@christophedc0 please check out any rolling release which is newer then vyos-1.3-rolling-202010050117-amd64.iso as I have found two bugs in the implementation (one for source nat logging) and the other for the warning you have posted.
Oct 4 2020
Oct 4 2020
This was infact only a warning - but for whatever reason nftables is not logging to kernel log :/
c-po closed T2960: sstp: migrate to get_config_dict(), a subtask of T2953: Accel-PPP services CLI config cleanup (SSTP, L2TP, PPPoE, IPoE), as Resolved.