In T3578#95246, @fernando wrote:Hi
I tried to replicate that issue with the same version but I couldn't , let me show
vyos@vipv6-lp# run show version
Version: VyOS 1.4-rolling-202104270417
Release Train: sagittaBuilt by: autobuild@vyos.net
Built on: Wed 28 Apr 2021 01:17 UTC
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
May 31 2021
May 31 2021
May 30 2021
May 30 2021
c-po moved T3524: Please implement bgp graceful-shutdown from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.8) board.
c-po moved T3524: Please implement bgp graceful-shutdown from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Turns out this was actually a very small change in the old framework - implemented also on 1.3 and backported to 1.2.8
c-po moved T3524: Please implement bgp graceful-shutdown from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T2641: Rewrite vpn ipsec OP commands in new style XML syntax from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3590: bgp: add option for limiting maximum number of prefixes to be sent to a peer from Open to Finished on the VyOS 1.4 Sagitta board.
c-po updated the task description for T3590: bgp: add option for limiting maximum number of prefixes to be sent to a peer.
c-po closed T3590: bgp: add option for limiting maximum number of prefixes to be sent to a peer, a subtask of T2174: Rewrite protocol BGP to new XML/Python style, as Resolved.
thank you for the suggestion, I will work on this.
c-po closed T2641: Rewrite vpn ipsec OP commands in new style XML syntax, a subtask of T2816: Rewrite IPsec scripts with the new XML/Python approach, as Resolved.
c-po edited projects for T3093: Add xml for vpn ipsec, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
c-po closed T3093: Add xml for vpn ipsec, a subtask of T2816: Rewrite IPsec scripts with the new XML/Python approach, as Resolved.
Also mentioned here: https://forum.vyos.io/t/roadwarrior-config-with-ikev2-and-different-user-groups/2457
Maybe a completion helper could work here, too?
When the following command "set system syslog file <filename> facility <keyword> level <keyword>" is applied, then the files are stored in the /var/log/user directory. These files can be deleted using the command "delete log file <text>"
erkin changed the status of T3506: Migrate loadkey command to op-mode, a subtask of T3355: Remove all remaining legacy Vyatta code, from Open to In progress.
erkin changed the status of T3506: Migrate loadkey command to op-mode, a subtask of T3356: Script for remote file transfers, from Open to In progress.
This is possibly a problem on curl's end but funnily enough, there's a similar problem with the native implementation over T3563. Once that's solved, this bug will be rendered moot.
c-po moved T3589: op-mode: support clearing out logfiles from CLI from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3589: op-mode: support clearing out logfiles from CLI from Need Triage to Finished on the VyOS 1.3 Equuleus board.
GitHub <noreply@github.com> committed rVYOSONEXd79cbf74142d: ipsec: T2816: Refactor to remove global variable and tidy up (authored by simon).
erkin renamed T3563: commit-archive breaks with IPv6 source addresses from commit-archive Broken to commit-archive breaks with IPv6 source addresses.
erkin closed T3508: Check if there's enough drive space for an upgrade before downloading an image, a subtask of T3356: Script for remote file transfers, as Resolved.
erkin closed T3508: Check if there's enough drive space for an upgrade before downloading an image as Resolved.
install-image now calls a routine that queries the size of the remote file and aborts if there isn't enough space to download the image.
erkin changed the status of T3563: commit-archive breaks with IPv6 source addresses, a subtask of T3356: Script for remote file transfers, from Open to Needs testing.
erkin changed the status of T3563: commit-archive breaks with IPv6 source addresses from Open to Needs testing.
erkin closed T1506: commit-archive scp/sftp public key authentication, a subtask of T3356: Script for remote file transfers, as Resolved.
commit-archive now uses Paramiko for SSH connections instead of curl and directly reads ~/.ssh/known_hosts if it exists.
erkin closed T3518: Warning messages when using SCP commit-archive, a subtask of T3356: Script for remote file transfers, as Resolved.
This is a consequence of using an old Paramiko version. I just sent a PR upping the version of cryptography and Paramiko.
erkin added a parent task for T1866: Commit archive over SFTP doesn't work with non-standard ports: T3356: Script for remote file transfers.
New file transfer script parses the port field in the URL.
erkin triaged T1522: If a config session is not close cleanly, the unionfs-mount is not cleaned up as Low priority.
erkin changed the status of T1522: If a config session is not close cleanly, the unionfs-mount is not cleaned up from Open to Confirmed.
sarthurdev added a comment to T3588: IPSec: migrate no longer available options from CLI which are now hardcoded/enabled in strongSwan.
Also vpn ipsec site-to-site peer x tunnel x allow-nat-networks and vpn ipsec site-to-site peer x tunnel x allow-public-networks
c-po updated the task description for T3588: IPSec: migrate no longer available options from CLI which are now hardcoded/enabled in strongSwan.
c-po updated the task description for T3588: IPSec: migrate no longer available options from CLI which are now hardcoded/enabled in strongSwan.
c-po updated the task description for T3588: IPSec: migrate no longer available options from CLI which are now hardcoded/enabled in strongSwan.
c-po triaged T3588: IPSec: migrate no longer available options from CLI which are now hardcoded/enabled in strongSwan as Normal priority.
c-po changed the status of T3587: Intel QAT support is broken on VyOS 1.4 due to a Kernel Crash from Open to In progress.
May 29 2021
May 29 2021
c-po moved T1995: "show vpn ike sa" command always show child-sas as down from Backport Candidates to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3258: ethernet smoke test damaged from Backlog to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3374: IPv6 GRE Tunnel issues from In Progress to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3321: Bgp not possible to use internal|external remote as from Backlog to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3404: Exception thrown when executing configuration load from Backlog to Finished on the VyOS 1.4 Sagitta board.
c-po moved T483: Add google-authenticator 2fa from Backlog to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3179: Add the ability to generate a support file from Backlog to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3385: Support for disabling ARP responses from Backlog to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3241: Allow configuration of XAuth on IPsec Tunnels from Backlog to Finished on the VyOS 1.4 Sagitta board.
c-po edited projects for T2816: Rewrite IPsec scripts with the new XML/Python approach, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
c-po changed the status of T2816: Rewrite IPsec scripts with the new XML/Python approach from In progress to Needs testing.
c-po renamed T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Update Linux Kernel to v5.4.122 / 5.10.40 to Update Linux Kernel to v5.4.123 / 5.10.41.
c-po added a parent task for T2173: Add the ability to use VRF on VTI interfaces: T1888: Update to StrongSwan 5.9.1.
c-po added a subtask for T1888: Update to StrongSwan 5.9.1: T2173: Add the ability to use VRF on VTI interfaces.
c-po renamed T1888: Update to StrongSwan 5.9.1 from Update to StrongSwan 5.8.1 to Update to StrongSwan 5.9.1.
We have had a lot of tickets about SNMP MIBS for BGP - most of them beeing for IPv6.
GitHub <noreply@github.com> committed rVYOSONEX2d3a2c56a33b: ipsec: vti: T2816: Update to use correct VTI mark, code cleanup (authored by simon).
c-po committed rVYOSONEX0593173f6b70: vti: ipsec: T2816: Fix vti-up-down (authored by sarthurdev <965089+sarthurdev@users.noreply.github.com>).
root@r2-lts:/home/vyos# snmpget -v 2c -c public 192.168.122.11 IF-MIB::ifAdminStatus.1 IF-MIB::ifAdminStatus.1 = INTEGER: up(1)
c-po reopened T2173: Add the ability to use VRF on VTI interfaces, a subtask of T2579: The root task for VRF features, as Open.