Require migration scripts to check option set vpn ipsec options disable-route-autoinstall in the configuration
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Oct 29 2021
Oct 29 2021
Viacheslav added a comment to T3953: IPSec with vti interfaces by default add default route to table 220.
Viacheslav added a comment to T3953: IPSec with vti interfaces by default add default route to table 220.
Viacheslav changed the subtype of T3953: IPSec with vti interfaces by default add default route to table 220 from "Bug" to "Feature Request".
Viacheslav added a comment to T3862: "reboot at" command together with date does not work / weird error message on wrong input.
The issue even with 00:00 format
Viacheslav moved T3745: op-mode IPSec show vpn ipse sa sorting from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.9) board.
PR for crux https://github.com/vyos/vyos-1x/pull/1054
Viacheslav moved T3745: op-mode IPSec show vpn ipse sa sorting from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Viacheslav added a project to T3745: op-mode IPSec show vpn ipse sa sorting: VyOS 1.2 Crux (VyOS 1.2.9).
Viacheslav moved T3942: Generate IPSec debug archive from op-mode from Backport Candidates to Finished on the VyOS 1.3 Equuleus (1.3.0-epa3) board.
PR for crux https://github.com/vyos/vyos-1x/pull/1053
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1052
@ajgnet Can you re-test it?
@liam can you re-test it?
@zsdc Provide please options to solve it.
Oct 28 2021
Oct 28 2021
Viacheslav closed T3916: Add additional Linux capabilities to container configuration, a subtask of T3676: Container option to add Linux capabilities, as Resolved.
Viacheslav added a comment to T3941: "show vpn ipsec sa" shows established time of parent SA not child SA's.
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1050
Viacheslav changed the status of T3941: "show vpn ipsec sa" shows established time of parent SA not child SA's from Open to In progress.
Viacheslav updated the task description for T3951: After resetting vti ipsec tunnel old child SA still active.
Viacheslav changed the status of T3951: After resetting vti ipsec tunnel old child SA still active from Open to In progress.
Viacheslav updated the task description for T3951: After resetting vti ipsec tunnel old child SA still active.
The similar FRR tasks
https://github.com/FRRouting/frr/issues/9020
https://github.com/FRRouting/frr/issues/2350
Oct 27 2021
Oct 27 2021
Viacheslav added a project to T3942: Generate IPSec debug archive from op-mode: VyOS 1.2 Crux (VyOS 1.2.9).
Viacheslav moved T3942: Generate IPSec debug archive from op-mode from Need Triage to Backport Candidates on the VyOS 1.3 Equuleus (1.3.0-epa3) board.
Viacheslav moved T3945: Add route-map for bgp aggregate-address from Need Triage to Backport Candidates on the VyOS 1.3 Equuleus board.
Viacheslav moved T3945: Add route-map for bgp aggregate-address from Open to Finished on the VyOS 1.4 Sagitta board.
PR for address-family ipv6-unicast, 1.3 https://github.com/vyos/vyatta-cfg-quagga/pull/91
Oct 26 2021
Oct 26 2021
Viacheslav changed the status of T3945: Add route-map for bgp aggregate-address from Open to Needs testing.
Viacheslav moved T3942: Generate IPSec debug archive from op-mode from Open to Finished on the VyOS 1.4 Sagitta board.
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1046
Viacheslav renamed T3945: Add route-map for bgp aggregate-address from Add route-map for aggregate-address to Add route-map for bgp aggregate-address.
It seems in some cases we need just "reload" to re-read configuration
PR for 1.4 https://github.com/vyos/vyos-1x/pull/1045
Viacheslav changed the status of T3341: Wrong behavior of the "reset vpn ipsec-peer XXX tunnel XXX" command from In progress to Needs testing.
Oct 25 2021
Oct 25 2021
Viacheslav changed the status of T3916: Add additional Linux capabilities to container configuration, a subtask of T3676: Container option to add Linux capabilities, from In progress to Needs testing.
Viacheslav changed the status of T3916: Add additional Linux capabilities to container configuration from In progress to Needs testing.
WIll be added in the next rolling release, @johannrichard could you test it?
Viacheslav changed the status of T2627: 'system static-host-mapping' only allows one IP address per hostname, it should allow one IPv4 and one IPv6 simultaneously, a subtask of T2464: DNS bugs (parent task), from Open to Needs testing.
Viacheslav changed the status of T2627: 'system static-host-mapping' only allows one IP address per hostname, it should allow one IPv4 and one IPv6 simultaneously from Open to Needs testing.
Viacheslav changed the status of T2683: no dual stack in system static-host-mapping host-name from In progress to Needs testing.
Viacheslav changed the status of T2763: New SNMP resource request - SNMP over TCP from In progress to Needs testing.
Viacheslav renamed T3942: Generate IPSec debug archive from op-mode from Generate IPSec debug archive form op-mode to Generate IPSec debug archive from op-mode.
Viacheslav changed the status of T3942: Generate IPSec debug archive from op-mode from Open to In progress.
Viacheslav changed the status of T2763: New SNMP resource request - SNMP over TCP from Open to In progress.
Viacheslav edited projects for T3341: Wrong behavior of the "reset vpn ipsec-peer XXX tunnel XXX" command, added: VyOS 1.2 Crux (VyOS 1.2.9); removed VyOS 1.4 Sagitta.
Viacheslav changed the status of T3341: Wrong behavior of the "reset vpn ipsec-peer XXX tunnel XXX" command from Open to In progress.
Viacheslav added a comment to T3341: Wrong behavior of the "reset vpn ipsec-peer XXX tunnel XXX" command.
Viacheslav changed the status of T3939: When xdp is enabled on ethernet interface, interface crashes on reboot and is not started from Open to Confirmed.
Oct 22 2021
Oct 22 2021
Viacheslav changed the status of T3931: SSTP doesn't work after rewriting to PKI from Open to Confirmed.
Viacheslav changed the status of T2566: sstp not able to run tunnels ipv6 only from In progress to Needs testing.
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1039
Viacheslav changed the status of T2566: sstp not able to run tunnels ipv6 only from Open to In progress.
To reproduce:
[edit vpn sstp]
vyos@r4-epa1# compare
[edit vpn sstp]
+authentication {
+ local-users {
+ username foo {
+ password bar
+ }
+ }
+ mode local
+}
+client-ipv6-pool {
+ prefix 2001:db8::/48 {
+ }
+}
+gateway-address 192.168.122.14
+ssl {
+ ca-cert-file /config/user-data/sstp/ca.crt
+ cert-file /config/user-data/sstp/server.crt
+ key-file /config/user-data/sstp/server.key
+}
[edit vpn sstp]
vyos@r4-epa1# commit
[ vpn ]
Note: the IPsec process will not start until you configure some tunnels, profiles, or L2TP/IPsec settingsIt uses PKI.
Viacheslav changed the status of T3929: No option "key-file" for vpn sstp ssl from Open to In progress.
Viacheslav changed the status of T2683: no dual stack in system static-host-mapping host-name from Open to In progress.
Oct 21 2021
Oct 21 2021
Viacheslav changed the status of T3610: DHCP-Server creation for not primary IP address fails from Open to In progress.
Smoketest can't read configuration file /run/ddclient/ddclient.conf
https://github.com/vyos/vyos-1x/blob/1d89e5196611f06bc1d0f925fc2ac1cb4a5536ec/src/conf_mode/dynamic_dns.py#L134-L135
Viacheslav changed the status of T3897: Dynamic DNS doesn't work with IPv6 addresses from Open to In progress.
Viacheslav changed the status of T3626: Configuring and disabling DHCP Server from Open to In progress.
May be an upstream bug, possible fixed in https://github.com/acassen/keepalived/commit/2f1024d382783742df0e5c3dd705596f958b77b5
and https://github.com/acassen/keepalived/commit/5681838ac21de25b935632c5ec41569f79b48c19
Oct 20 2021
Oct 20 2021