Page MenuHomeVyOS Platform
Feed All Stories

Nov 20 2020

c-po changed the status of T3077: WireGuard: automatically create link-local IPv6 adresses, a subtask of T2653: "set interfaces" Python handler code improvements - next iteration, from Open to In progress.
Nov 20 2020, 1:27 PM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T3077: WireGuard: automatically create link-local IPv6 adresses from Open to In progress.
Nov 20 2020, 1:27 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T3077: WireGuard: automatically create link-local IPv6 adresses.
Nov 20 2020, 1:27 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2997: DHCP: disallow/do-not-request certain options when requesting IP address from server as Resolved.
Nov 20 2020, 1:16 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2997: DHCP: disallow/do-not-request certain options when requesting IP address from server.

DNS domain name servers are always requested from the server but must be explicitly "allowed" by set systems name-servers-dhcp

Nov 20 2020, 1:16 PM · VyOS 1.3 Equuleus (1.3.0)
Cremator added a comment to T578: Support Linux Container.

Running Docker on 1.3 rolling works, but there is no integration with the docker bridge interfaces and docker iptables rules obviously.
My goal was to run Traefik and Pihole and it works so far.
https://gist.github.com/Cremator/183c1a4d24e7812f94ec4bd41f7718b3

Nov 20 2020, 12:58 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po closed T2550: OpenVPN: IPv4 not working in client mode as Resolved.
Nov 20 2020, 11:58 AM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T1405: dhclient runs before mac overrides are applied as Resolved.
Nov 20 2020, 11:58 AM
c-po closed T3060: OpenVPN virtual interface not coming up after upgrade as Resolved.
Nov 20 2020, 11:58 AM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T3065: Add "interfaces wirelessmodem" IPv6 support, a subtask of T3063: Add support for Huawei LTE Module ME909s-120, as Resolved.
Nov 20 2020, 11:57 AM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T3065: Add "interfaces wirelessmodem" IPv6 support as Resolved.
Nov 20 2020, 11:57 AM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T3072: Migrate tunnel interfaces to new get_config_dict() approach, a subtask of T2653: "set interfaces" Python handler code improvements - next iteration, as Resolved.
Nov 20 2020, 11:57 AM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T3072: Migrate tunnel interfaces to new get_config_dict() approach as Resolved.
Nov 20 2020, 11:57 AM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T3068: Automatic generation of IPv6 link local addresses for tunnel interfaces, a subtask of T3072: Migrate tunnel interfaces to new get_config_dict() approach, as Resolved.
Nov 20 2020, 11:57 AM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T3068: Automatic generation of IPv6 link local addresses for tunnel interfaces as Resolved.
Nov 20 2020, 11:57 AM
c-po committed rVYOSONEX7ad026794bee: Merge branch 'tunnel-rewrite' into current.
Nov 20 2020, 11:56 AM
c-po committed rVYOSONEX672eaeb2be1c: tunnel: T3068: automatic generate link-local adresses.
Nov 20 2020, 11:56 AM
c-po committed rVYOSONEX4eef27f0e834: tunnel: T3072: interfaces used for NHRP can not be deleted.
Nov 20 2020, 11:56 AM
c-po committed rVYOSONEX246808bc33a2: tunnel: T3072: xml: harden regex validators.
Nov 20 2020, 11:56 AM
c-po committed rVYOSONEXd98e01da6b18: tunnel: T3072: migrate to get_config_dict().
Nov 20 2020, 11:56 AM
jack9603301 moved T3067: Wireless interface can no longer be added to the bridge after bridge VLAN support from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Nov 20 2020, 11:44 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a subtask for T3072: Migrate tunnel interfaces to new get_config_dict() approach: T3068: Automatic generation of IPv6 link local addresses for tunnel interfaces.
Nov 20 2020, 11:28 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a parent task for T3068: Automatic generation of IPv6 link local addresses for tunnel interfaces: T3072: Migrate tunnel interfaces to new get_config_dict() approach.
Nov 20 2020, 11:28 AM
varac added a comment to T1286: DHCP hostfile-update isn't removing hostfile entries on expiry..

https://marc.info/?l=dhcp-hackers&m=128755776831463 describes the solution.
Setting ClientName, ClientIp, ClientMac, ClientDomain on release and expire fails, and there's no need for that since they are already known.
Simply removing all "set" commands in the release and expire section fixes this bug and restores the desired behaviour that i.e. the leases are removed from /etc/hosts.

Nov 20 2020, 8:30 AM · VyOS 1.3 Equuleus (1.3.0)
tjh added a comment to T2977: Permissions Denied doing "show conntrack-sync status" on backup router.

I just saw the patch above for how to fix this and yes, with that line changed to sudo it now works correctly.
Thanks!

Nov 20 2020, 12:23 AM
tjh created T3076: Router reboot adds unwanted 'conntrack-sync mcast-group '225.0.0.50'' line to configuration.
Nov 20 2020, 12:20 AM · VyOS 1.3 Equuleus (1.3.0-epa1)

Nov 19 2020

c-po closed T3075: Update Linux Kernel to v4.19.158 as Resolved.
Nov 19 2020, 9:37 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T3075: Update Linux Kernel to v4.19.158.
Nov 19 2020, 9:35 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T1405: dhclient runs before mac overrides are applied.

I have adjust the logic which now sets the interface MAC address before any other parameter. Using the OSI model this makes sense as the MAC layer is below IP.

Nov 19 2020, 9:10 PM
c-po committed rVYOSONEX1b3cde673ad0: ifconfig: T1405: ensure MAC address is configured first.
Nov 19 2020, 9:09 PM
c-po changed the status of T1405: dhclient runs before mac overrides are applied from In progress to Needs testing.
Nov 19 2020, 9:09 PM
c-po changed the status of T1405: dhclient runs before mac overrides are applied from Open to In progress.
Nov 19 2020, 9:06 PM
jack9603301 closed T3067: Wireless interface can no longer be added to the bridge after bridge VLAN support as Resolved.
Nov 19 2020, 8:19 PM · VyOS 1.3 Equuleus (1.3.0)
GitHub <noreply@github.com> committed rVYOSONEXf01b0ae9e5e7: bridge: T3067: Fix VLAN aware setting failure under WLAN (#613) (authored by jack9603301).
Nov 19 2020, 7:54 PM
Viacheslav added a comment to T439: local PBR support.

PR https://github.com/vyos/vyos-1x/pull/614
Add the ability to use policy local-route

Nov 19 2020, 6:11 PM · VyOS 1.4 Sagitta
carazzim0 added a comment to T1405: dhclient runs before mac overrides are applied.

Hi there,

Nov 19 2020, 8:28 AM

Nov 18 2020

c-po committed rVYOSONEXf00985ccc246: Revert "wireless: T2241: add "wds" CLI option".
Nov 18 2020, 8:43 PM
c-po added a reverting change for rVYOSONEX806f35b5856c: wireless: T2241: add "wds" CLI option: rVYOSONEXf00985ccc246: Revert "wireless: T2241: add "wds" CLI option".
Nov 18 2020, 8:43 PM
jack9603301 added a comment to T3073: sh nat source translations Python error.

Let the responsible person of T2859 take care of it. I have not been able to see the problem from the information you provided for the time being. If you are familiar with python and linux, you can consider troubleshooting by yourself to try to find the problem. If not, just ask Maintenance personnel reproduce the fault

Nov 18 2020, 9:58 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T3067: Wireless interface can no longer be added to the bridge after bridge VLAN support.

@c-po I have changed the PR to prohibit WLAN ports from joining VLAN-aware bridge ports

Nov 18 2020, 9:08 AM · VyOS 1.3 Equuleus (1.3.0)

Nov 17 2020

c-po added a comment to T3067: Wireless interface can no longer be added to the bridge after bridge VLAN support.

I can now again bridge the WIFI interface to br0, please resolve the outstanding commit message changes and then it feels good to me! Thanks

Nov 17 2020, 7:16 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T3067: Wireless interface can no longer be added to the bridge after bridge VLAN support.
# Bridge port handling of wireless interfaces is done by hostapd.
        if 'wlan' in interface:
            return

Why can't wlan be completed in bridge.py?

Nov 17 2020, 7:12 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T439: local PBR support.

Propose to use that format

Nov 17 2020, 3:19 PM · VyOS 1.4 Sagitta
jack9603301 added a comment to T3067: Wireless interface can no longer be added to the bridge after bridge VLAN support.

Contains 2 patch submissions

Nov 17 2020, 3:09 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T3067: Wireless interface can no longer be added to the bridge after bridge VLAN support.
# Bridge port handling of wireless interfaces is done by hostapd.
        if 'wlan' in interface:
            return
Nov 17 2020, 2:57 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T3067: Wireless interface can no longer be added to the bridge after bridge VLAN support.

This patch changes the settings and does not modify the vlan filter settings when VLAN awareness is not set, but the root cause of different problems is that the following code does not set the wireless port to the bridge normally:

Nov 17 2020, 8:57 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T3067: Wireless interface can no longer be added to the bridge after bridge VLAN support.

Strange, the problem seems to be that the interface has not been added to the bridge. I may submit a patch about VLAN awareness to refuse to operate the vlan filter setting without enabling VLAN awareness, but I am not sure whether it has any Relationship, manual operation is normal:

Nov 17 2020, 8:47 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T3067: Wireless interface can no longer be added to the bridge after bridge VLAN support.
Nov 17 2020, 8:22 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T3067: Wireless interface can no longer be added to the bridge after bridge VLAN support.

Whether the VLAN aware bridge is activated?

Nov 17 2020, 8:08 AM · VyOS 1.3 Equuleus (1.3.0)

Nov 16 2020

tuxnet added a comment to T3073: sh nat source translations Python error.

@jack9603301 Below the desired information:

Nov 16 2020, 6:10 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T160: Support NAT64.

Jool can handle 2 times as many packets.
https://link.springer.com/article/10.1007/s11235-020-00681-x

Nov 16 2020, 6:03 PM · VyOS 1.4 Sagitta (1.4.0-epa1)
Viacheslav added a comment to T3074: OpenVPN site-to-site creates wrong peer address.
vyos@r4-roll# sudo cat /run/openvpn/vtun30365.conf 
### Autogenerated by interfaces-openvpn.py ###
#
# See https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage
# for individual keyword definition
#
# 
#
Nov 16 2020, 5:06 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T3074: OpenVPN site-to-site creates wrong peer address.
Nov 16 2020, 4:54 PM · VyOS 1.3 Equuleus (1.3.0)
jestabro closed T2899: remote syslog server migration error on update as Resolved.
Nov 16 2020, 2:31 PM · Restricted Project
jestabro closed T3003: Extend smoketest framework to allow loading an arbitrary config file as Resolved.
Nov 16 2020, 2:29 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T3073: sh nat source translations Python error.

Duplicate T2859

Nov 16 2020, 10:17 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T3073: sh nat source translations Python error.

Please execute and analyze the following command to return the result, and carry out fault exploration, if possible, please output the result

Nov 16 2020, 10:07 AM · VyOS 1.3 Equuleus (1.3.0)
tuxnet added a comment to T3073: sh nat source translations Python error.

Sorry, I have forgotten to copy them.
the error does not occur with every query (nor as a supplement)

Nov 16 2020, 9:48 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T1316: Support for IS-IS .

PR https://github.com/vyos/vyos-1x/pull/612
Add IS-IS routing.

Nov 16 2020, 9:25 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T3073: sh nat source translations Python error.

Is there no NAT policy?

Nov 16 2020, 9:09 AM · VyOS 1.3 Equuleus (1.3.0)
tuxnet created T3073: sh nat source translations Python error.
Nov 16 2020, 8:24 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T3030: Support ERSPAN Tunnel Protocol.

I'm curious about how to do ERSPAN?

Nov 16 2020, 2:43 AM · VyOS 1.4 Sagitta

Nov 15 2020

c-po added a comment to T3030: Support ERSPAN Tunnel Protocol.

Why not use ERSPAN?

Nov 15 2020, 9:13 PM · VyOS 1.4 Sagitta
jack9603301 updated the task description for T3071: Display VLAN mode information on the network interface.
Nov 15 2020, 4:44 PM
jack9603301 renamed T3071: Display VLAN mode information on the network interface from Change network interface display to Display VLAN mode information on the network interface.
Nov 15 2020, 4:43 PM
runar added a comment to T3071: Display VLAN mode information on the network interface.

In the example above you only included the header, could you extend the examples with example information you want to display there?

Nov 15 2020, 4:40 PM
c-po committed rVYOSONEX4dc93212f77c: smoketest: tunnel: local-ip and dhcp-interface can not be used together.
Nov 15 2020, 3:45 PM
c-po closed T3069: OpenVPN routed networks not available as Resolved.
Nov 15 2020, 3:35 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T3069: OpenVPN routed networks not available.

Resolved as informed by @tuxnet

Nov 15 2020, 3:34 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T3071: Display VLAN mode information on the network interface.

If you do not change show int, you can output the specific information of vlan id in the command show interfaces bridge vlan

Nov 15 2020, 1:52 PM
c-po added a comment to T3071: Display VLAN mode information on the network interface.

Ungortunately this is a -1 from me.

Nov 15 2020, 1:47 PM
Viacheslav added a comment to T3070: Firewall going OOM, possible related to nftables migration.

Possible reason - ipset should be converted to nft list set

Nov 15 2020, 1:09 PM · VyOS 1.3 Equuleus (1.3.4)
c-po committed rVYOSONEX273fedf74156: smoketest: tunnel: validate if local/remote address matches proper address….
Nov 15 2020, 11:24 AM
c-po closed T1677: Support configuration of Ethernet SMP affinity in new Python/XML implementation, a subtask of T1637: Rewrite ethernet interface in new style XML syntax, as Wontfix.
Nov 15 2020, 10:46 AM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T1677: Support configuration of Ethernet SMP affinity in new Python/XML implementation as Wontfix.
Nov 15 2020, 10:46 AM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T1677: Support configuration of Ethernet SMP affinity in new Python/XML implementation, a subtask of T3048: Drop static smp-affinity for a more dynamic way using tuned, as Wontfix.
Nov 15 2020, 10:46 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T1677: Support configuration of Ethernet SMP affinity in new Python/XML implementation.

This will be resolved / migrated away in T3048.

Nov 15 2020, 10:46 AM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T2564: Extend VyOS to support appliance LCDs from Unknown Status to Resolved.
Nov 15 2020, 10:28 AM · VyOS 1.2 Crux (VyOS 1.2.7)
c-po added a comment to T2564: Extend VyOS to support appliance LCDs.

We have a basic implementation available. Additional changes should be submitted via feature requests.

Nov 15 2020, 10:28 AM · VyOS 1.2 Crux (VyOS 1.2.7)
c-po closed T2993: op-mode: lldp: show lldp neighbors - AttributeError: 'str' object has no attribute 'items' as Resolved.
Nov 15 2020, 10:27 AM · VyOS 1.3 Equuleus (1.3.0)
c-po moved T1315: Allow BGP to use address-family l2vpn evpn from Need Triage to Backlog on the VyOS 1.3 Equuleus board.
Nov 15 2020, 10:27 AM · VyOS 1.3 Equuleus (1.3.0)
c-po moved T2817: Bring back the event-handler from Need Triage to Backlog on the VyOS 1.3 Equuleus board.
Nov 15 2020, 10:27 AM · VyOS 1.3 Equuleus (1.3.0)
c-po moved T3065: Add "interfaces wirelessmodem" IPv6 support from Need Triage to Backlog on the VyOS 1.3 Equuleus board.
Nov 15 2020, 10:26 AM · VyOS 1.3 Equuleus (1.3.0)
c-po moved T3072: Migrate tunnel interfaces to new get_config_dict() approach from Need Triage to In Progress on the VyOS 1.3 Equuleus board.
Nov 15 2020, 10:26 AM · VyOS 1.3 Equuleus (1.3.0)
c-po committed rVYOSONEX9152e5b3665a: op-mode: fix "show arp interface" argument level.
Nov 15 2020, 9:39 AM
c-po renamed T2966: tunnel: add new encapsulation types ip6tnl and ip6gretap from Add tunnel type ip6tnl to tunnel: add new encapsulation type ip6tnl.
Nov 15 2020, 9:33 AM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T3072: Migrate tunnel interfaces to new get_config_dict() approach, a subtask of T2653: "set interfaces" Python handler code improvements - next iteration, from Open to In progress.
Nov 15 2020, 9:32 AM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T3072: Migrate tunnel interfaces to new get_config_dict() approach from Open to In progress.
Nov 15 2020, 9:32 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a subtask for T3072: Migrate tunnel interfaces to new get_config_dict() approach: T2966: tunnel: add new encapsulation types ip6tnl and ip6gretap.
Nov 15 2020, 9:32 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a parent task for T2966: tunnel: add new encapsulation types ip6tnl and ip6gretap: T3072: Migrate tunnel interfaces to new get_config_dict() approach.
Nov 15 2020, 9:32 AM · VyOS 1.3 Equuleus (1.3.0)
c-po created T3072: Migrate tunnel interfaces to new get_config_dict() approach.
Nov 15 2020, 9:32 AM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T3038: Supporting AZERTY keyboards as Resolved.
Nov 15 2020, 8:44 AM · VyOS 1.3 Equuleus (1.3.0)

Nov 14 2020

c-po added a comment to T3068: Automatic generation of IPv6 link local addresses for tunnel interfaces.

VyOS 1.2 adds a random link-local address on tunnel interfaces by default.

Nov 14 2020, 6:07 PM
c-po changed the status of T3068: Automatic generation of IPv6 link local addresses for tunnel interfaces from Open to In progress.
Nov 14 2020, 6:07 PM
jack9603301 added a comment to T3042: Support VLAN filter and VLAN sub-interface on the bridge.

Now there is a new plan, please see T3071

Nov 14 2020, 4:09 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T1354: Add support for VLAN-Aware bridges.

Now there is a new plan, please see T3071

Nov 14 2020, 4:09 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
jack9603301 created T3071: Display VLAN mode information on the network interface.
Nov 14 2020, 4:08 PM
jack9603301 added a comment to T1354: Add support for VLAN-Aware bridges.

@runar The latest image already supports VLAN aware bridge, so this task list can be closed

Nov 14 2020, 3:28 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
hagbard placed T696: Rewrite conntrack sync to XML up for grabs.
Nov 14 2020, 3:17 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
hagbard placed T874: Support for Two Factor Authentication for CLI access via Google Authenticator/OTP up for grabs.
Nov 14 2020, 3:16 PM · VyOS 1.4 Sagitta (1.4.0-epa1)