By the way, mikrotik IPoE format doesn't compatible with VyOS

https://github.com/vyos/vyos-1x/blob/1353757247c027f6352000a9450b502c25c460c8/src/utils/vyos-hostsd-client#L123-L139
entry['address']] expect list

Zebra configuration:

root@r11-roll:/home/vyos# cat foo.txt 
!
frr version 7.5.1-20210619-12-g3f8a74e70
frr defaults traditional
hostname r11-roll
log syslog
log facility local7
service integrated-vtysh-config
!
vrf blue
 vni 2000
 exit-vrf
!
vrf red
 vni 3000
 exit-vrf
!
line vty
!
end

This brings up an interesting issue: validate_value.ml could easily be modified to print warnings, while maintaining T2759 (namely, only print fatal errors if _all_ validators fail for a given setting), however, is this reasonable behaviour ? One would think that a 'validator' is either pass or fail, and if it is just giving a warning, it is no longer a validator.

I will take a look; thanks for the report !

Note, the host was upgraded from 1.2.8

PRs 1069 and 1070 will be merged

Adding set zone-policy zone SERVER interface SERVER to the presented test case should solve the issue. This is because the traffic needs to pass both eth1 and its associated VRF "master" interface, in this case TEST.

PR https://github.com/vyos/vyos-1x/pull/1071

From what I understand this looks to be due to https://github.com/vyos/vyos-utils/blob/master/src/validate_value.ml catching both stdout and stderr output from the validators and only printing the captured output if the validator exit status is 0 so there isn't a way to print warnings unless it always prints the output or handling for a special 'warning' exit code was added.

Certificates can be wound there:

loaded certificate from '/etc/swanctl/x509/R1.pem'
loaded certificate from '/etc/swanctl/x509ca/CA.pem'
loaded RSA key from '/etc/swanctl/private/x509_R1.pem'

This doesn't seem to help, whatever is calling the validator script seems to hide the output unless the exit status is non-zero.

https://github.com/pmacct/pmacct/blob/master/QUICKSTART#L603-L621

Try to restart vyos-configd after changing script file

A simple re-prdoucer is

Indeed, this looks like the commit

Hardcoded version of the fix for 1.4:
https://github.com/vyos/vyos-1x/pull/1068
https://github.com/vyos/vyos-build/pull/201

FRR doesn't support it.

OK, thanks.

In this case, there is no difference, the bug/feature is the same.

In T3975#111054, @Viacheslav wrote:

Duplicate T1375

Duplicate T1375

When I manually add the "vrf red" with vtysh, then the frr config is like the one you reported.

If you add configuration to "vtysh" will you see config like this or another:

My thoughts on this for a proper implementation would be to change how static routes are installed in the system.