After disable/enable interface ethX the routes reappear
vyos@r11-roll:~$ sudo ip link set dev eth0 down vyos@r11-roll:~$ sudo ip link set dev eth0 up
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Nov 30 2021
Nov 30 2021
Viacheslav closed T4010: DMVPN generates incorrect configuration life_time for swanctl.conf as Resolved.
Viacheslav moved T3725: show configuration in json format from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0) board.
Viacheslav added a comment to T4028: FRR 8.1 routes not being applied to routing table after reboot if an interface has 2 ip addresses.
Nov 29 2021
Nov 29 2021
Viacheslav changed the status of T3979: vyos-hostd unable to hostfile-update from Open to Needs testing.
PR https://github.com/vyos/vyos-1x/pull/1090
vyos@r11-roll:~$ show configuration json pretty
{
"interfaces": {
"ethernet": {
"eth0": {
"address": [
"192.168.122.11/24"
],
"hw-id": "52:54:00:48:a0:c6"
},
"eth1": {
"hw-id": "52:54:00:fc:50:0b"
},
"eth2": {
"hw-id": "52:54:00:e5:2f:51"
}
},
"loopback": {
"lo": {}
}
},
"protocols": {
"static": {
"route": {
"0.0.0.0/0": {
"next-hop": {
"192.168.122.1": {}
}
}
}
}
},
"service": {
"ssh": {
"disable-host-validation": {}
}
},
"system": {
"config-management": {
"commit-revisions": "100"
},
"conntrack": {
"modules": {
"ftp": {},
"h323": {},
"nfs": {},
"pptp": {},
"sip": {},
"sqlnet": {},
"tftp": {}
}
},
"console": {
"device": {
"ttyS0": {
"speed": "115200"
}
}
},
"host-name": "r11-roll",
"login": {
"user": {
"vyos": {
"authentication": {
"encrypted-password": "$45OXXXX",
"plaintext-password": "",
"public-keys": {
"vyos@vyos": {
"key": "AAXXXXk=",
"type": "ssh-rsa"
}
}
}
}
}
},
"name-server": [
"1.1.1.1"
],
"ntp": {
"server": {
"time1.vyos.net": {},
"time2.vyos.net": {},
"time3.vyos.net": {}
}
},
"syslog": {
"global": {
"facility": {
"all": {
"level": "info"
},
"protocols": {
"level": "debug"
}
}
}
},
"time-zone": "Europe/Madrid"
}
}PR https://github.com/vyos/vyos-build/pull/206
vyos@vyos:~$ show version all | match cloud ii amazon-cloudwatch-agent 1.247349.0b251399-1 amd64 Amazon CloudWatch Agent ii cloud-init 20.4-404-g0a9f4841-1~bddeb all Init scripts for cloud instances vyos@vyos:~$
Nov 26 2021
Nov 26 2021
Require rewriting vyatta-config-mgmt to XML/Python
Viacheslav closed T3978: containers add network without declaring prefix raise ConfigError as Resolved.
Nov 25 2021
Nov 25 2021
Viacheslav added a comment to T3973: Feature Request: Multicast ping. Change TTL in Echo-reply from VyOS.
@NikolayP Can you play with it?
Viacheslav added a comment to T3976: Missing prefix-list and access-list option from ipv6 route-map.
Already implemented in FRR 8.x, so for first, we should migrate to FRR 8.x if it is possible T3753
Viacheslav added a comment to T3978: containers add network without declaring prefix raise ConfigError.
Viacheslav changed the status of T3978: containers add network without declaring prefix raise ConfigError from Open to In progress.
We try not to use "raw options" of commands.
But I don't see another universal solution for it.
Viacheslav moved T4005: Feature Request: IPsec IKEv1 + IKEv2 for one peer from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa3) board.
Nov 23 2021
Nov 23 2021
As the first step:
Nov 22 2021
Nov 22 2021
Viacheslav changed the subtype of T4005: Feature Request: IPsec IKEv1 + IKEv2 for one peer from "Task" to "Feature Request".
Nov 21 2021
Nov 21 2021
Nov 18 2021
Nov 18 2021
Viacheslav changed the status of T4010: DMVPN generates incorrect configuration life_time for swanctl.conf from Open to In progress.
Viacheslav updated the task description for T4010: DMVPN generates incorrect configuration life_time for swanctl.conf.
Viacheslav changed the status of T4006: Add additional Linux capabilities to container configuration from Open to Needs testing.
Viacheslav added a comment to T4004: IPsec ike-group parameters are not saved correctly (after reboot).
I don't think that it is a bug.
If you don't set any value, it gets default value ikev1
https://github.com/vyos/vyatta-cfg-vpn/blob/d2d4361bffaa0b99c85c7fbf46ddd760ae6512f0/templates/vpn/ipsec/ike-group/node.tag/key-exchange/node.def#L3
Nov 16 2021
Nov 16 2021
@daniil Can you provide the output of json format?
Nov 15 2021
Nov 15 2021
By the way, mikrotik IPoE format doesn't compatible with VyOS
https://github.com/vyos/vyos-1x/blob/1353757247c027f6352000a9450b502c25c460c8/src/utils/vyos-hostsd-client#L123-L139
entry['address']] expect list
Viacheslav reassigned T3960: FRR Misconfig when using multiple VRF VNI from Unknown Object (User) to c-po.
Zebra configuration:
root@r11-roll:/home/vyos# cat foo.txt ! frr version 7.5.1-20210619-12-g3f8a74e70 frr defaults traditional hostname r11-roll log syslog log facility local7 service integrated-vtysh-config ! vrf blue vni 2000 exit-vrf ! vrf red vni 3000 exit-vrf ! line vty ! end
Still reproducible VyOS 1.3-beta-202111150443
After reboot
Viacheslav added a comment to T3988: Feature Request: IPsec Multiple local/remote prefix for the tunnel.
For 1.4 it was implemented in T645
IPSec was completely rewritten in 1.4
Viacheslav closed T645: Allow multiple prefixes in ipsec tunnel, a subtask of T2816: Rewrite IPsec scripts with the new XML/Python approach, as Resolved.
Viacheslav closed T3934: Openconnect VPN broken: ocserv-worker general protection fault on client connect as Resolved.
Fixed VyOS 1.3-beta-202111150443
Viacheslav added a comment to T3989: Firewall - Can't delete rule in firewall entry and leave just default-action when firewall entry is in used.
Duplicate T1292
Nov 12 2021
Nov 12 2021
Note, the host was upgraded from 1.2.8
Viacheslav changed the status of T3986: Incorrect description for vpn ipsec site-to-site authentication and connection from Open to In progress.
Nov 11 2021
Nov 11 2021
Viacheslav added a comment to T3985: vpn IPSec site-to-site continues to work if certificates are deleted.
Certificates can be wound there:
loaded certificate from '/etc/swanctl/x509/R1.pem' loaded certificate from '/etc/swanctl/x509ca/CA.pem' loaded RSA key from '/etc/swanctl/private/x509_R1.pem'
Viacheslav changed the status of T3985: vpn IPSec site-to-site continues to work if certificates are deleted from Open to Confirmed.
Nov 10 2021
Nov 10 2021
Viacheslav added a comment to T3980: vrrp transition-script validator makes warning fatal and also causes a python NameError exception.
Try to restart vyos-configd after changing script file
@anastrophe Describe please how to reproduce it?
Can be related to this commit d9b1c3df T2683
Nov 9 2021
Nov 9 2021
Viacheslav added a comment to T3976: Missing prefix-list and access-list option from ipv6 route-map.
FRR doesn't support it.
Viacheslav changed the status of T3947: Route based IPSec VPN: Child_SA is not establishing when the peer connection-type are initiate/respond combination from Open to Confirmed.
Nov 8 2021
Nov 8 2021
I don't see any option like "source address"
https://manpages.debian.org/testing/isc-dhcp-relay/dhcrelay.8.en.html
Viacheslav changed the subtype of T3976: Missing prefix-list and access-list option from ipv6 route-map from "Task" to "Feature Request".
In this case, there is no difference, the bug/feature is the same.
Duplicate T1375
Nov 7 2021
Nov 7 2021
It is better to use containers for it:
Nov 6 2021
Nov 6 2021
Viacheslav changed the subtype of T3971: Ability to build ISO images for XCP-NG hypervisor from "Bug" to "Feature Request".
Nov 5 2021
Nov 5 2021
Viacheslav moved T3971: Ability to build ISO images for XCP-NG hypervisor from Need Triage to Finished on the VyOS 1.3 Equuleus board.
PR for crux https://github.com/vyos/vyos-build/pull/198
vyos@vyos:~$ show version all | match xe-g ii xe-guest-utilities 7.16.0-2 amd64 Virtual Machine Monitoring Scripts vyos@vyos:~$
Viacheslav changed the status of T3971: Ability to build ISO images for XCP-NG hypervisor from In progress to Needs testing.
Viacheslav added a project to T3971: Ability to build ISO images for XCP-NG hypervisor: VyOS 1.2 Crux (VyOS 1.2.9).
Viacheslav changed the status of T3971: Ability to build ISO images for XCP-NG hypervisor from Open to In progress.
Nov 4 2021
Nov 4 2021
Viacheslav closed T3969: Container incorrect raiseError format if network doesn't exist as Resolved.
Viacheslav changed the status of T3931: SSTP doesn't work after rewriting to PKI, a subtask of T3642: PKI configuration, from Confirmed to Needs testing.
Viacheslav changed the status of T3931: SSTP doesn't work after rewriting to PKI from Confirmed to Needs testing.
Viacheslav added a comment to T3969: Container incorrect raiseError format if network doesn't exist.