Fixed in T3217
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Sep 7 2021
Sep 7 2021
Viacheslav closed T1894: FRR config not loaded after daemons segfault or restart, a subtask of T3217: Save FRR configuration on each commit, as Resolved.
Viacheslav moved T3217: Save FRR configuration on each commit from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Viacheslav moved T3217: Save FRR configuration on each commit from In Progress to Finished on the VyOS 1.4 Sagitta board.
please refer to the PKI documentation at https://docs.vyos.io/en/latest/configuration/pki/index.html or https://blog.vyos.io/pki-and-ipsec-ikev2-remote-access-vpn about how the PKI feature is used.
You don't need line like "begin|end"
For example
set pki ca openvpn_vtun10 certificate 'MIIDSzCCAjOgAwIBAgIUEtkjCVKmZCwUeYLenoznpkxMeZswQ=='
I tested it on ESXi
Sep 6 2021
Sep 6 2021
It seems some bug in KVM.
I still see this bug
VyOS 1.3.0-rc6 config
vyos@r4-1.3# run show conf com | match mac set interfaces macsec macsec1 address '10.0.0.2/30' set interfaces macsec macsec1 security cipher 'gcm-aes-128' set interfaces macsec macsec1 security encrypt set interfaces macsec macsec1 security mka cak 'f42e15acecc0c1634582bdd32429efdf' set interfaces macsec macsec1 security mka ckn '0ef5ebf77ba031e45ad270e9f80c804d500a2649789db1c87b751114f329e032' set interfaces macsec macsec1 source-interface 'eth1'
Viacheslav closed T2920: Commit crash when adding the second mGRE tunnel with the same key as Resolved.
Works as designed. Note that the MACSec interface will only change its state to u/u after a successful key-exchange.
c-po moved T3800: DHCPv6 client get incorrect mask /128 from Open to In Progress on the VyOS 1.4 Sagitta board.
c-po moved T3803: Add source-address option to the ping CLI from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3803: Add source-address option to the ping CLI from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3806: Don't set link local ipv6 address if MTU less then 1280 from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3806: Don't set link local ipv6 address if MTU less then 1280 from Open to Finished on the VyOS 1.4 Sagitta board.
c-po changed the status of T3806: Don't set link local ipv6 address if MTU less then 1280 from Open to In progress.
Viacheslav added a comment to T2920: Commit crash when adding the second mGRE tunnel with the same key.
PR for 1.3 https://github.com/vyos/vyos-1x/pull/999
Viacheslav added a project to T3806: Don't set link local ipv6 address if MTU less then 1280: VyOS 1.4 Sagitta.
c-po added a comment to T3805: OpenVPN insufficient privileges for rtnetlink when closing TUN/TAP interface.
Does it work if you grand the capabilities to the openvpn group in /etc/security/capability.conf?
Required migration script to set commands to proper AFI.
Viacheslav edited projects for T3396: syslog can't be configured with an ipv6 literal destination in 1.2.x, added: VyOS 1.3 Equuleus (1.3.0-epa1); removed VyOS 1.3 Equuleus.
Viacheslav moved T3396: syslog can't be configured with an ipv6 literal destination in 1.2.x from Backport Candidates to Finished on the VyOS 1.4 Sagitta board.
Viacheslav added a comment to T3396: syslog can't be configured with an ipv6 literal destination in 1.2.x.
PR for 1.3 https://github.com/vyos/vyos-1x/pull/998
Viacheslav moved T3431: Show version all bug from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
Viacheslav moved T3431: Show version all bug from Backport Candidates to Finished on the VyOS 1.4 Sagitta board.
Viacheslav edited projects for T3431: Show version all bug, added: VyOS 1.3 Equuleus (1.3.0-epa1); removed VyOS 1.3 Equuleus.
We tested this on 1.4-rolling-202103040218 on our router, unfortunately as this is a production device I couldn't spend long diagnosing this. After upgrading the system image the device didn't come back up (I have layer 2 connectivity to the device via a VLAN on eth1 normally). So I logged in via our serial console and did a show interfaces
Viacheslav moved T3643: show vpn ipsec sa doesn't show tunnels in "down" state from Open to Finished on the VyOS 1.4 Sagitta board.
If to use modified Regex --regex \'^((eth|lan)[0-9]+|(eth)[0-9]v.+|(eno|ens|enp|enx).+)$\'
https://github.com/vyos/vyos-1x/blob/10814c4d3360598262e991e4b20768dfcde91d75/interface-definitions/interfaces-ethernet.xml.in#L17
Sep 5 2021
Sep 5 2021
syncer moved T3790: Does not possible to configure PPTP static ip-address to users from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T1176: FRR - BGP replicating routes from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T2432: dhcpd: Can't create new lease file: Permission denied from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3601: Error in ssh keys for vmware cloud-init if ssh keys is left empty. from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3634: Add op command option for ping for do not fragment bit to be set from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3574: Add constraintGroup for combining validators with logical AND from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3788: Keys are not allowed with ipip and sit tunnels from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3738: openvpn fails if server and authentication are configured from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3756: VyOS generates invalid QR code for wireguard clients from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3794: MACsec interfaces in down state after create from Need Triage to In Progress on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3708: isisd and gre-bridge commit error from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3736: openvpn-option keeps and adds double dashes ''--" from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3768: Remove early syntaxVersion implementation from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3731: verify_accel_ppp_base_service return wrong config error for SSP from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3740: HTTPs API breaks when the address is IPv6 from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3776: Rename FRR daemon restart op-mode commands from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3772: VRRP virtual interfaces are not shown in show interfaces from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3782: Ingress Shaping with IFB No Longer Functional with 1.3 from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3790: Does not possible to configure PPTP static ip-address to users from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3789: Add custom validator for base64 encoded CLI data from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3783: "set protocols isis spf-delay-ietf" is not working from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po moved T3797: show interface errors with vrrp configuration from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa1) board.
c-po edited a custom field on T3804: cli: Migrate and merge "system name-servers-dhcp" into "system name-server".
Sep 4 2021
Sep 4 2021
Client should also enable "SLAAC"
Works as expected it seems https://serverfault.com/a/918480 and https://teamarin.net/2018/06/25/common-mistake-dhcpv6/
Duplicate of T3772
- The problem about DHCPv6 has been solved
- The communication problem has been solved
jack9603301 moved T3778: Abnormal network communication and settings from Open to Finished on the VyOS 1.4 Sagitta board.
It seems that the problem is related to IPv6 MSS. When I set IPv6 MSS to 1280 and IPv4 MSS to 1452, the problem seems to disappear
c-po updated the task description for T3801: containers: do not use podman CLI to create container networks.
Let me add a verify step…
Sep 3 2021
Sep 3 2021
Crashes if replace-as is set without no-prepend (see "Unknown command: neighbor 192.0.2.1 local-as 300 replace-as"):
Viacheslav changed the status of T3797: show interface errors with vrrp configuration from Open to Confirmed.
Viacheslav added projects to T3797: show interface errors with vrrp configuration: test, VyOS 1.3 Equuleus.
PR for equuleus https://github.com/vyos/vyos-1x/pull/994