Tested in VyOS 1.4-rolling-202201060842
Works
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Jan 7 2022
Jan 7 2022
Viacheslav moved T3924: VRRP stops working with VRF from Open to Finished on the VyOS 1.4 Sagitta board.
Unknown Object (User) created T4150: VRRP with conntrack-sync does not work.
Jan 6 2022
Jan 6 2022
c-po edited projects for T4141: Set high-availability vrrp sync-group without members error, added: VyOS 1.3 Equuleus ( 1.3.1); removed VyOS 1.3 Equuleus.
Viacheslav changed the status of T4109: Extend high-availability/keepalived for support virtual-server lb from In progress to Needs testing.
sarthurdev moved T4133: Firewall network group error with zone-based firewall rules from Open to In Progress on the VyOS 1.4 Sagitta board.
sarthurdev moved T4145: Conntrack table not showing after firewall rewriting from Open to In Progress on the VyOS 1.4 Sagitta board.
Viacheslav changed the status of T4145: Conntrack table not showing after firewall rewriting from Open to Needs testing.
Updates the vyatta-conntrack package to work without legacy firewall and fixes the op-mode commands. Should also fix some conntrack functionality (untested).
jestabro moved T3785: Add unicode support to configtree backend from Open to Finished on the VyOS 1.4 Sagitta board.
jestabro closed T3785: Add unicode support to configtree backend, a subtask of T2941: Using a non-ASCII character in the description field causes UnicodeDecodeError in configsource.py, as Unknown Status.
Viacheslav renamed T4145: Conntrack table not showing after firewall rewriting from Conntrack table not showing after firewall after firewall rewriting to Conntrack table not showing after firewall rewriting.
Fixed for 1.4 in T4128 with update "keepalived".
In 1.3 we don't update this pkg and it still has this bug.
Unknown Object (User) created T4143: Wrong section for Cloud-init User-Data for OVA images.
Jan 5 2022
Jan 5 2022
relaxes the condition to escape non-ascii bytes. Updating the commit id in the Dockerfile and relaxing the ascii restriction in configsource.py will allow unicode chars in config.
sarthurdev changed the status of T4133: Firewall network group error with zone-based firewall rules from In progress to Needs testing.
Viacheslav moved T4142: Input ifbX interfaces not displayed in op-mode from Open to Backport Candidates on the VyOS 1.4 Sagitta board.
PR https://github.com/vyos/vyos-1x/pull/1138
vyos@r11-roll:~$ show interfaces input Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down Interface IP Address S/L Description --------- ---------- --- ----------- ifb0 - u/u FOO ifb1 - u/u FOO1 vyos@r11-roll:~$
Viacheslav added a project to T4142: Input ifbX interfaces not displayed in op-mode: VyOS 1.3 Equuleus ( 1.3.1).
Viacheslav changed the status of T4142: Input ifbX interfaces not displayed in op-mode from Open to In progress.
erkin changed the status of T4038: Rewrite `vyatta-image-tools.pl` in Python, a subtask of T3355: Remove all remaining legacy Vyatta code, from Open to In progress.
erkin changed the status of T4038: Rewrite `vyatta-image-tools.pl` in Python from Open to In progress.
sarthurdev changed the status of T4133: Firewall network group error with zone-based firewall rules from Open to In progress.
sarthurdev changed the status of T3635: Add ability to use mDNS repeater with VRRP from In progress to Needs testing.
Viacheslav updated the task description for T4141: Set high-availability vrrp sync-group without members error.
Viacheslav changed the status of T4141: Set high-availability vrrp sync-group without members error from Open to Confirmed.
Viacheslav added a project to T4141: Set high-availability vrrp sync-group without members error: VyOS 1.4 Sagitta.
sarthurdev changed the status of T4135: Declare zone policy firewall without local zone errors from In progress to Needs testing.
sarthurdev changed the status of T4135: Declare zone policy firewall without local zone errors from Open to In progress.
Jan 4 2022
Jan 4 2022
Unknown Object (User) renamed T4085: Rewrite L2TP/PPTP/SSTP/PPPoE services to get_config_dict from Rewrite l2tp/pptp remote access to get_config_dict to Rewrite L2TP/PPTP/SSTP/PPPoE services to get_config_dict.
Viacheslav renamed T4134: Incorrect firewall protocol completion help uppercase and duplicates from Some firewall protocol completion help in uppercase to Incorrect firewall protocol completion help uppercase and duplicates.
Viacheslav changed the status of T4134: Incorrect firewall protocol completion help uppercase and duplicates from Open to In progress.
Viacheslav renamed T4138: NAT configuration allows to set incorrect port range and invalid port from NAT configuration allows to set incorrect port range to NAT configuration allows to set incorrect port range and invalid port.
Viacheslav renamed T4137: Firewall group configuration allows to set incorrect port range and invalid port from Firewall group configuration allows incorrect port range to Firewall group configuration allows to set incorrect port range and invalid port.
Viacheslav updated the task description for T4137: Firewall group configuration allows to set incorrect port range and invalid port.
PR https://github.com/vyos/vyos-1x/pull/1131
vyos@r11-roll:~$ show firewall group Possible completions: <Enter> Execute the current command FOO Show firewall group FOO2 NETV6 PORTGRP
In 1.3 it looks like just ipset -L:
vyos@r4:~$ show firewall group
Name : FOO2
Type : address
References : none
Members :
203.0.113.3Can you please add output from VyOS 1.3 as reference?
Duplicate of T4130
sarthurdev changed the status of T4130: Firewall state policy errors chain from In progress to Needs testing.
Jan 3 2022
Jan 3 2022
sarthurdev changed the status of T4130: Firewall state policy errors chain from Open to In progress.
Maybe fixed in T4128
Viacheslav renamed T4135: Declare zone policy firewall without local zone errors from Declare zone policy firewall without local zone erros to Declare zone policy firewall without local zone errors.
Viacheslav renamed T4133: Firewall network group error with zone-based firewall rules from Firewall network group error to Firewall network group error with zone-based firewall rules.
To reproduce it should be zone-policy firewall rules, for example:
Comparing the old iptables firewall it will look like this:
Error still present on VyOS 1.4-rolling-202201020317
keepalived was upgraded to include the above mentioned commits.
Viacheslav renamed T4130: Firewall state policy errors chain from Firewall state policy erros chain to Firewall state policy errors chain.
dcplaya added a comment to T4127: Upgrading from pre-certstore image to certstore image does not handle CA files with multiple certs.
I was able to test and get a screenshot of the exact error eapol spits out when using certstore as well.
c-po closed T4128: keepalived: Upgrade package to add VRF support, a subtask of T3924: VRRP stops working with VRF, as Resolved.
Viacheslav changed the status of T4110: [IPV6-SSH/DNS} enable IPv6 link local adresses as listen-address %eth0 from In progress to Needs testing.
Viacheslav changed the status of T4120: [VXLAN] add ability to set multiple unicast-remotes from Open to In progress.
Viacheslav added a comment to T3976: Missing prefix-list and access-list option from ipv6 route-map.
@egoistdream Just check when this feature was merged. It was implemented in FRR 24th of November, but the latest FRR release was 9th of November
https://frrouting.org/release/8.1/
Unknown Object (User) added a comment to T4081: VRRP health-check script stops working when setting up a sync group.
Checked in 1.3-rolling-202201030317, health-check works
Jan 2 2022
Jan 2 2022
egoistdream added a comment to T3976: Missing prefix-list and access-list option from ipv6 route-map.
Still the same on vyos-1.4-rolling-202201020317-amd64.iso
Jan 1 2022
Jan 1 2022
Dec 31 2021
Dec 31 2021
c-po changed the status of T4121: Nameservers from DHCP client cannot be used in specific cases from In progress to Needs testing.