The real bug is it shouldn't allow port-range values as it is not implemented.
Or just add this feature T2798
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Oct 14 2021
Oct 14 2021
Viacheslav changed the status of T3865: loadkey command help text missing escape sequence from Open to In progress.
Viacheslav moved T3763: wireguard checks if port already binding from Open to Finished on the VyOS 1.4 Sagitta board.
Oct 12 2021
Oct 12 2021
Viacheslav moved T3868: Regex and/or wildcard not accepted with large-community-list from Open to Finished on the VyOS 1.4 Sagitta board.
@foxbox Will be fixed in the next rolling release.
Viacheslav changed the status of T3868: Regex and/or wildcard not accepted with large-community-list from Open to In progress.
Viacheslav moved T3881: Wrong description for container section restart from Open to Finished on the VyOS 1.4 Sagitta board.
@BiMW Can you re-check it?
Viacheslav closed T3701: ipoe server fails to start when configuring radius dynamic-author on ipoe as Resolved.
Not reproducible, VyOS 1.4-rolling-202109300217
set service ipoe-server authentication radius dynamic-author key 'ssss' set service ipoe-server authentication radius dynamic-author server '192.168.122.11' set service ipoe-server authentication radius nas-ip-address '192.168.122.11' set service ipoe-server authentication radius server 192.168.122.11 key 'ciscoradiuskey' set service ipoe-server interface eth1 client-subnet '192.0.2.0/24'
Viacheslav added a comment to T3902: Firewall does not load on boot, address-group not found, even though it exists.
@FileGo Can you replace double-quotes with single-quotes?
Viacheslav closed T3216: Removal of restricted-shell broke configure mode for RADIUS users, a subtask of T671: Identify and remove dead code, as Resolved.
Viacheslav closed T3216: Removal of restricted-shell broke configure mode for RADIUS users as Resolved.
Fixed
sever@sever:~$ ssh vyosuser@192.168.122.11
Viacheslav added a project to T3896: Extend ocserv support to allow for per-group configs: VyOS 1.4 Sagitta.
Oct 11 2021
Oct 11 2021
Viacheslav closed T2607: Support for pppoe-server radius mode auth and config radius accouting port as Resolved.
Present in 1.4 and 1.3.0-epa1
set service pppoe-server authentication radius server 192.0.2.1 acct-port Possible completions: <1-65535> Numeric IP port (default: 1813)
@c-po in 1.3.0-epa1 works fine.
Re-opened, the same bug in VyOS 1.4-rolling-202109300217
sever@sever:~/docker$ ssh user@192.168.122.11
@SquirePug Can you share more details, which templates and parameters did you edit?
Oct 8 2021
Oct 8 2021
Viacheslav changed the subtype of T3897: Dynamic DNS doesn't work with IPv6 addresses from "Bug" to "Feature Request".
Viacheslav renamed T3897: Dynamic DNS doesn't work with IPv6 addresses from Dynamic DNS doesn't work with IPv6 addresses bug. to Dynamic DNS doesn't work with IPv6 addresses.
Viacheslav changed the status of T3892: BGP Route Reflects to all neighbors when one neighbor has route-reflect-client from Open to Needs testing.
@RyVolodya can you check a new image and close this task if it was fixed?
Oct 7 2021
Oct 7 2021
Viacheslav added a comment to T3892: BGP Route Reflects to all neighbors when one neighbor has route-reflect-client.
@francis It is not clear. Can you provide an example of configuration? What do you get and what do you expect?
Oct 5 2021
Oct 5 2021
Oct 4 2021
Oct 4 2021
The same bug described there T2845
Not sure why we should check the primary ip address, but to fix it possible to change:
if is_subnet_connected(subnet, primary=False)
It was described there T3610 and requires more tests.
Oct 1 2021
Oct 1 2021
Sep 30 2021
Sep 30 2021
Sep 29 2021
Sep 29 2021
Viacheslav changed the subtype of T3873: Zone based Firewall - Filter traffic in same zone from "Task" to "Feature Request".
Sep 28 2021
Sep 28 2021
Viacheslav closed T3853: nat66 rules gets deleted on reboot in 1.4-rolling-202109240217 as Resolved.
Sep 27 2021
Sep 27 2021
Viacheslav changed the status of T690: Allow OpenVPN servers to push routes with custom metric values from Open to Needs testing.
Viacheslav changed the status of T3853: nat66 rules gets deleted on reboot in 1.4-rolling-202109240217 from Confirmed to Needs testing.
@danielpo Will be fixed in the next rolling release.
Viacheslav added a comment to T3853: nat66 rules gets deleted on reboot in 1.4-rolling-202109240217.
PR https://github.com/vyos/vyos-1x/pull/1016
Change priority for nat66
Not all clients support the gateway option (get issues in mac and windows):
Mac
tun_prop_route_error: route destinations other than vpn_gateway or net_gateway are not supported
set interfaces openvpn vtun20 openvpn-option '--push dhcp-option DNS 203.0.113.1'
generated config:
--push dhcp-option DNS 203.0.113.1
expected configuration:
push dhcp-option "DNS 203.0.113.1"
Sep 24 2021
Sep 24 2021
Viacheslav edited projects for T3855: Bgp peer-group and neighbor specific confiugration bugs, added: VyOS 1.3 Equuleus (1.3.0-epa1); removed VyOS 1.3 Equuleus.
Viacheslav updated the task description for T3855: Bgp peer-group and neighbor specific confiugration bugs.
Viacheslav added a comment to T3853: nat66 rules gets deleted on reboot in 1.4-rolling-202109240217.
Additional logs:
Sep 24 12:32:23 r1-roll systemd[1]: Starting NDP Proxy Daemon... Sep 24 12:32:23 r1-roll ndppd[2150]: (notice) ndppd (NDP Proxy Daemon) version 0.2.4 Sep 24 12:32:23 r1-roll ndppd[2150]: (notice) Using configuration file '/run/ndppd/ndppd.conf' Sep 24 12:32:23 r1-roll ndppd[2150]: (warning) Low prefix length (80 <= 120) when using 'static' method Sep 24 12:32:23 r1-roll ndppd[2150]: (warning) Low prefix length (80 <= 120) when using 'static' method Sep 24 12:32:23 r1-roll systemd[1]: ndppd.service: Can't open PID file /run/ndppd/ndppd.pid (yet?) after start: Operation not permitted Sep 24 12:32:23 r1-roll kernel: [ 131.465473] NET: Registered protocol family 17 Sep 24 12:32:23 r1-roll isisd[1006]: circuit already connected
Viacheslav added a comment to T3853: nat66 rules gets deleted on reboot in 1.4-rolling-202109240217.
[ OK ] Finished Update UTMP about System Runlevel Changes. [ 117.227867] vyos-router[751]: Starting VyOS router: migrate firewall configure [ 117.228588] vyos-router[2121]: failed! [ 117.482910] vyos-config[1646]: Configuration error
Viacheslav changed the status of T3853: nat66 rules gets deleted on reboot in 1.4-rolling-202109240217 from Open to Confirmed.
Sep 22 2021
Sep 22 2021
Viacheslav changed the subtype of T3848: Abbility to set local/remote id for dmvpn from "Bug" to "Feature Request".
Sep 21 2021
Sep 21 2021
Duplicate T1797
This command already exists, VyOS 1.3.0-rc6
Viacheslav changed the status of T3843: l2tp configuration not cleared after delete from Open to Confirmed.
Sep 16 2021
Sep 16 2021
Viacheslav changed the status of T3831: External traffic stops routing when IPSEC tunnel comes up with interface vti0 from Open to Confirmed.
xfrm if_id should not be 0
Sep 14 2021
Sep 14 2021
This line doesn't match ipv6 addresses https://github.com/vyos/vyos-1x/blob/f86b7314d025fd0cf11c2d91638ed3cc7c4fa507/src/helpers/strip-private.py#L66
Sep 13 2021
Sep 13 2021
To start the proposed CLI:
Needs to be discussed.
Viacheslav added a parent task for T478: Firewall address group (multi and nesting): T2199: Rewrite firewall in new XML/Python style.
FRR behaviour without "interface" in route - it replaced metric with value without metric
r12-lts(config)# ip route 0.0.0.0/0 192.168.122.1 r12-lts(config)# r12-lts(config)# do sho run | include 0.0.0.0 ip route 0.0.0.0/0 192.168.122.1 r12-lts(config)# r12-lts(config)# ip route 0.0.0.0/0 192.168.122.1 210 r12-lts(config)# r12-lts(config)# do sho run | include 0.0.0.0 ip route 0.0.0.0/0 192.168.122.1 210 r12-lts(config)# r12-lts(config)# ip route 0.0.0.0/0 192.168.122.1 r12-lts(config)# r12-lts(config)# do sho run | include 0.0.0.0 ip route 0.0.0.0/0 192.168.122.1 r12-lts(config)# r12-lts(config)# ip route 0.0.0.0/0 192.168.122.1 eth0 210 r12-lts(config)# r12-lts(config)# do sho run | include 0.0.0.0 ip route 0.0.0.0/0 192.168.122.1 ip route 0.0.0.0/0 192.168.122.1 eth0 210 r12-lts(config)#
To reproduce:
set interfaces ethernet eth0 address 'dhcp' set protocols static route 0.0.0.0/0 next-hop 192.168.122.1
Viacheslav edited projects for T3825: [DHCP]removes default route , added: VyOS 1.2 Crux (VyOS 1.2.9); removed VyOS 1.2 Crux.
Viacheslav changed the status of T3810: webproxy squidguard rules don't work properly after rewriting to python. from Open to Needs testing.
Sep 10 2021
Sep 10 2021
Viacheslav updated the task description for T3810: webproxy squidguard rules don't work properly after rewriting to python. .
Viacheslav updated the task description for T3810: webproxy squidguard rules don't work properly after rewriting to python. .
Viacheslav edited projects for T1770: webproxy breaks commit and http access on routed client, added: VyOS 1.3 Equuleus (1.3.0-epa1); removed test, VyOS 1.3 Equuleus.
Viacheslav closed T1770: webproxy breaks commit and http access on routed client, a subtask of T563: webproxy: migrate 'service webproxy' to get_config_dict(), as Resolved.
Viacheslav added a comment to T2738: Modifying configuration in the "interfaces" section from VRRP transition scripts causes configuration lockup and high CPU utilization.
Not reproducible in 1.2.8
Sep 9 2021
Sep 9 2021
Viacheslav renamed T3810: webproxy squidguard rules don't work properly after rewriting to python. from webproxy squidguard rules doesn't work properly to webproxy squidguard rules don't work properly after rewriting to python. .