PR for crux https://github.com/vyos/vyos-build/pull/198
vyos@vyos:~$ show version all | match xe-g ii xe-guest-utilities 7.16.0-2 amd64 Virtual Machine Monitoring Scripts vyos@vyos:~$
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Nov 6 2021
Nov 6 2021
Viacheslav changed the subtype of T3971: Ability to build ISO images for XCP-NG hypervisor from "Bug" to "Feature Request".
Nov 5 2021
Nov 5 2021
Viacheslav moved T3971: Ability to build ISO images for XCP-NG hypervisor from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Viacheslav changed the status of T3971: Ability to build ISO images for XCP-NG hypervisor from In progress to Needs testing.
Viacheslav added a project to T3971: Ability to build ISO images for XCP-NG hypervisor: VyOS 1.2 Crux (VyOS 1.2.9).
Viacheslav changed the status of T3971: Ability to build ISO images for XCP-NG hypervisor from Open to In progress.
Nov 4 2021
Nov 4 2021
Viacheslav closed T3969: Container incorrect raiseError format if network doesn't exist as Resolved.
Viacheslav changed the status of T3931: SSTP doesn't work after rewriting to PKI, a subtask of T3642: PKI configuration, from Confirmed to Needs testing.
Viacheslav changed the status of T3931: SSTP doesn't work after rewriting to PKI from Confirmed to Needs testing.
Viacheslav added a comment to T3969: Container incorrect raiseError format if network doesn't exist.
Nov 3 2021
Nov 3 2021
Viacheslav changed the status of T2281: DHCP and Static IPs on Same Interface from In progress to Needs testing.
Viacheslav added a comment to T3932: L2TP Configuration with WAN interface DHCP assigned IP address.
@sajiby3k you can use 0.0.0.0
set vpn l2tp remote-access outside-address '0.0.0.0'
Nov 2 2021
Nov 2 2021
Viacheslav added a subtask for T3642: PKI configuration: T3931: SSTP doesn't work after rewriting to PKI.
Viacheslav added a parent task for T3931: SSTP doesn't work after rewriting to PKI: T3642: PKI configuration.
Possibly unrelated, but I'll leave it here
frr-reload output: 0 /usr/lib/frr/frr-reload.py:851: SyntaxWarning: "is not" with a literal. Did you mean "!="? frr-reload output: 1 if line is not "exit-vrf": frr-reload output: 2 2021-11-02 18:33:34,225 INF
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1060
set vpn sstp authentication local-users username foo password 'bar' set vpn sstp authentication local-users username foo2 password 'bar2' set vpn sstp authentication mode 'local' set vpn sstp client-ipv6-pool prefix 2001:db8::/48 set vpn sstp gateway-address '192.168.122.14' set vpn sstp ppp-options ipv4 'deny' set vpn sstp ppp-options ipv6 'allow' set vpn sstp ssl ca-cert-file '/config/user-data/sstp/ca.crt' set vpn sstp ssl cert-file '/config/user-data/sstp/server.crt' set vpn sstp ssl key-file '/config/user-data/sstp/server.key'
Check sessions:
vyos@r4-epa2:~$ show sstp-server s sessions statistics vyos@r4-epa2:~$ show sstp-server sessions ifname | username | ip | ip6 | ip6-dp | calling-sid | rate-limit | state | uptime | rx-bytes | tx-bytes --------+----------+-----------------------+-----------------------+--------+-----------------+------------+--------+----------+----------+---------- sstp0 | foo2 | 2001:db8:0:0:200::/64 | 2001:db8:0:0:200::/64 | | 192.168.122.222 | | active | 00:00:09 | 735 B | 506 B vyos@r4-epa2:~$
Viacheslav added a comment to T3822: OpenVPN processes do not have permission to read key files generated with `run generate openvpn key`.
Still not fixed VyOS 1.3-beta-202110300342:
vyos@r4-epa2:~$ generate openvpn key foo Generating OpenVPN key to /config/auth/foo Your new local OpenVPN key has been generated vyos@r4-epa2:~$ vyos@r4-epa2:~$ ls -la /config/auth/ total 12 drwxrwsr-x 2 root vyattacfg 4096 Nov 2 09:00 . drwxrwxr-x 7 root vyattacfg 4096 Nov 2 08:54 .. -rw------- 1 root vyattacfg 636 Nov 2 09:00 foo vyos@r4-epa2:~$
Nov 1 2021
Nov 1 2021
To enable IPv6 only it is required some new options in CLI, which are not presented in 1.3 yet
Viacheslav changed the status of T3940: DHCP client does not remove IP address when stopped by the 02-vyos-stopdhclient hook from Open to Needs testing.
Viacheslav added a parent task for T3933: The firewall does not filter incoming traffic on the interface with vrf.: T2199: Rewrite firewall in new XML/Python style.
Nov 1 2021, 5:16 PM · Bugs, VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-GA), Restricted Project
Viacheslav moved T2683: no dual stack in system static-host-mapping host-name from Open to Finished on the VyOS 1.4 Sagitta board.
PR for 1.4 https://github.com/vyos/vyos-1x/pull/1058
Viacheslav changed the status of T2281: DHCP and Static IPs on Same Interface from Open to In progress.
For 1.4 it is impossible to set both dhcp + static in one commit.
set interfaces ethernet eth2 address dhcp set interfaces ethernet eth2 address 192.0.2.4/24
Oct 31 2021
Oct 31 2021
Viacheslav added a comment to T2498: Expected error when deleting vif that has dhcp-server configured.
What wrong with it?
As you use some service which belong to some interface
Or what you expected?
Provide please an example of configurations and steps to reproduce.
Viacheslav added a comment to rVYOSONEX17215846b512: netflow: T3953: use warning if "netflow source-ip" does not exist instead of….
The correct task https://phabricator.vyos.net/T3943
Viacheslav added a comment to rVYOSONEX893dd69d975c: netflow: T3953: use warning if "netflow source-ip" does not exist instead of….
The correct task https://phabricator.vyos.net/T3943
Viacheslav removed a project from T3843: l2tp configuration not cleared after delete: VyOS 1.3 Equuleus (1.3.0-epa1).
Viacheslav changed the status of T3846: dmvpn configuration not reapllied after "restart vpn" from Open to In progress.
Viacheslav moved T3945: Add route-map for bgp aggregate-address from Backport Candidates to Finished on the VyOS 1.3 Equuleus board.
Viacheslav closed T3341: Wrong behavior of the "reset vpn ipsec-peer XXX tunnel XXX" command as Resolved.
Viacheslav added a comment to T3341: Wrong behavior of the "reset vpn ipsec-peer XXX tunnel XXX" command.
PR for crux https://github.com/vyos/vyatta-op-vpn/pull/29
Viacheslav changed the subtype of T3955: Allow commit-confirm through http API from "Task" to "Feature Request".
Oct 30 2021
Oct 30 2021
Viacheslav added a comment to T3467: cannot set vrrp virtual-address with /31 mask when router uses networkaddress..
PR for crux https://github.com/vyos/vyos-1x/pull/1057
vyos@r12-lts:~$ show conf com | match vrrp set high-availability vrrp group GRP02 hello-source-address '203.0.113.1' set high-availability vrrp group GRP02 interface 'eth1.50' set high-availability vrrp group GRP02 no-preempt set high-availability vrrp group GRP02 priority '150' set high-availability vrrp group GRP02 rfc3768-compatibility set high-availability vrrp group GRP02 virtual-address '192.168.99.2/31' set high-availability vrrp group GRP02 vrid '10' vyos@r12-lts:~$ show interfaces vrrp Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down Interface IP Address S/L Description --------- ---------- --- ----------- eth1.50v10 192.168.99.2/31 u/u vyos@r12-lts:~$
Viacheslav changed the status of T3467: cannot set vrrp virtual-address with /31 mask when router uses networkaddress. from Confirmed to In progress.
PR for crux https://github.com/vyos/vyos-1x/pull/1056
Viacheslav added a comment to T3654: 1.2.7 - OpenVPN tunnel interface disappears on virtualized VyOS router/ESXi host.
@klipz Could you re-check it with 1.2.8?
Viacheslav closed T1293: Zone-policy implementation does not allow secondary IP on an interface to communicate as Not Applicable.
Oct 29 2021
Oct 29 2021
Viacheslav changed the status of T3394: Error on removing dhcpv6 address from interface from Open to In progress.
Viacheslav renamed T3796: Wireguard interfaces are not shown in op-mode from Crux Wireguard Documentation Seems Incorrect to Wireguard interfaces are not shown in op-mode.
Viacheslav changed the status of T3862: "reboot at" command together with date does not work / weird error message on wrong input from Open to In progress.
Viacheslav added a comment to T3953: IPSec with vti interfaces by default add default route to table 220.
Require migration scripts to check option set vpn ipsec options disable-route-autoinstall in the configuration
Viacheslav added a comment to T3953: IPSec with vti interfaces by default add default route to table 220.
Viacheslav changed the subtype of T3953: IPSec with vti interfaces by default add default route to table 220 from "Bug" to "Feature Request".
Viacheslav added a comment to T3862: "reboot at" command together with date does not work / weird error message on wrong input.
The issue even with 00:00 format
Viacheslav moved T3745: op-mode IPSec show vpn ipse sa sorting from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.9) board.
PR for crux https://github.com/vyos/vyos-1x/pull/1054
Viacheslav moved T3745: op-mode IPSec show vpn ipse sa sorting from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Viacheslav added a project to T3745: op-mode IPSec show vpn ipse sa sorting: VyOS 1.2 Crux (VyOS 1.2.9).
Viacheslav moved T3942: Generate IPSec debug archive from op-mode from Backport Candidates to Finished on the VyOS 1.3 Equuleus (1.3.0-epa3) board.
PR for crux https://github.com/vyos/vyos-1x/pull/1053
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1052
@ajgnet Can you re-test it?
@liam can you re-test it?
@zsdc Provide please options to solve it.
Oct 28 2021
Oct 28 2021
Viacheslav closed T3916: Add additional Linux capabilities to container configuration, a subtask of T3676: Container option to add Linux capabilities, as Resolved.
Viacheslav added a comment to T3941: "show vpn ipsec sa" shows established time of parent SA not child SA's.
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1050
Viacheslav changed the status of T3941: "show vpn ipsec sa" shows established time of parent SA not child SA's from Open to In progress.
Viacheslav updated the task description for T3951: After resetting vti ipsec tunnel old child SA still active.
Viacheslav changed the status of T3951: After resetting vti ipsec tunnel old child SA still active from Open to In progress.
Viacheslav updated the task description for T3951: After resetting vti ipsec tunnel old child SA still active.