Being able to quickly see reservations in an operational mode command would be convenient, avoiding the need to pull up the config.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Feb 20 2022
Feb 20 2022
eronlloyd added a comment to T4256: Display static DHCP server leases in the operational command output.
Feb 19 2022
Feb 19 2022
It is used in keepalived Template
Viacheslav changed the status of T4249: Add support for device mapping in containers from Open to In progress.
c-po moved T4258: [DHCP-SERVER] error parameter on Failover from Need Triage to Finished on the VyOS 1.3 Equuleus ( 1.3.1) board.
c-po moved T4258: [DHCP-SERVER] error parameter on Failover from Need Triage to 1.3.1 on the VyOS 1.3 Equuleus board.
c-po moved T4258: [DHCP-SERVER] error parameter on Failover from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Feb 18 2022
Feb 18 2022
fernando renamed T4258: [DHCP-SERVER] error parameter on Failover from [DHCP-SERVER] error paramater on Failover to [DHCP-SERVER] error parameter on Failover.
Viacheslav updated the task description for T4254: VPN IPSec charon add options cisco_flexvpn and install_virtual_ip_on.
@kirvio Could you check it on 1.3/1.4?
chenxiaolong added a comment to T4245: eapol: Support for specifying the full CA chain of trust for both client and server.
PR for documentation: https://github.com/vyos/vyos-documentation/pull/719
chenxiaolong added a comment to T4245: eapol: Support for specifying the full CA chain of trust for both client and server.
I've submitted a PR here: https://github.com/vyos/vyos-1x/pull/1227
Feb 17 2022
Feb 17 2022
Viacheslav updated the task description for T4254: VPN IPSec charon add options cisco_flexvpn and install_virtual_ip_on.
It's not a bug, to automatically add the routes when the link is disconnected, set the connect-on-demand parameter.
c-po moved T4255: Unexpected print of dict bridge on delete from Need Triage to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4255: Unexpected print of dict bridge on delete from Need Triage to Finished on the VyOS 1.3 Equuleus ( 1.3.1) board.
c-po changed the status of T4255: Unexpected print of dict bridge on delete from Open to In progress.
Viacheslav changed the status of T3600: DHCP Interface static route breaks PBR, a subtask of T3505: Commits do not respect changes in FRR that are not stored in a config, from In progress to Needs testing.
Viacheslav changed the status of T3600: DHCP Interface static route breaks PBR from In progress to Needs testing.
vplehto updated the task description for T4256: Display static DHCP server leases in the operational command output.
Viacheslav closed T4241: ocserv openconnect looks broken in recent bulds of 1.3 Equuleus as Resolved.
@dutty Thanks for confirming.
I just built ISO from the 1.3 branch and tried (1.3-rolling-202202171824). ocserv works normal. The issue is probably resolved.
Thank you.
Viacheslav changed the status of T4254: VPN IPSec charon add options cisco_flexvpn and install_virtual_ip_on from Open to In progress.
Viacheslav changed the status of T1972: Allow setting interface name for virtual_ipaddress in VRRP VRID from In progress to Needs testing.
jestabro moved T3474: Revisit storing syntax version of interface definitions in XML file from Need Triage to Finished on the VyOS 1.4 Sagitta board.
jestabro changed the status of T3474: Revisit storing syntax version of interface definitions in XML file, a subtask of T1962: Add syntax version to schema, from In progress to Backport candidate.
jestabro changed the status of T3474: Revisit storing syntax version of interface definitions in XML file, a subtask of T3475: XML dictionary cache unable to process syntaxVersion elements, from In progress to Backport candidate.
jestabro changed the status of T3474: Revisit storing syntax version of interface definitions in XML file from In progress to Backport candidate.
c-po moved T4240: Cannot add wlan0 to bridge via configure from Need Triage to Finished on the VyOS 1.3 Equuleus ( 1.3.1) board.
Viacheslav changed the status of T4241: ocserv openconnect looks broken in recent bulds of 1.3 Equuleus from Confirmed to Needs testing.
Viacheslav added a comment to T4241: ocserv openconnect looks broken in recent bulds of 1.3 Equuleus.
CI job for re-build pkg ocserv should fix this issue.
chenxiaolong renamed T4245: eapol: Support for specifying the full CA chain of trust for both client and server from eapol: Support for multiple CA certificates (eg. intermediate + root) to eapol: Support for specifying the full CA chain of trust for both client and server.
chenxiaolong added a comment to T4245: eapol: Support for specifying the full CA chain of trust for both client and server.
After further testing, it looks like it's not necessary to have <iface>_ca.pem contain both the server and client chains of trust.
chenxiaolong added a comment to T4245: eapol: Support for specifying the full CA chain of trust for both client and server.
I started working on implementing my "alternative" idea. It's a little bit more complicated than I first thought because we have to consider both the server and client chain of trust.
jestabro added a comment to T3474: Revisit storing syntax version of interface definitions in XML file.
@c-po Thank you for the work on this.
Feb 16 2022
Feb 16 2022
Viacheslav edited projects for T4241: ocserv openconnect looks broken in recent bulds of 1.3 Equuleus, added: VyOS 1.3 Equuleus ( 1.3.1); removed VyOS 1.3 Equuleus.
Viacheslav changed the status of T4197: Vyos arm64-latest build issue with telegraf pkg from Open to Needs testing.
c-po moved T4240: Cannot add wlan0 to bridge via configure from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Viacheslav added a comment to T4241: ocserv openconnect looks broken in recent bulds of 1.3 Equuleus.
Install official pkg solve the issue
wget http://ftp.de.debian.org/debian/pool/main/o/ocserv/ocserv_0.12.2-3_amd64.deb dpkg -i *.deb `
c-po changed the status of T4240: Cannot add wlan0 to bridge via configure from Open to Needs testing.
Viacheslav added a comment to T4241: ocserv openconnect looks broken in recent bulds of 1.3 Equuleus.
Can be related
Found out some strange things, client address was banned:
ocserv[2072]: main: added 1 points (total 1) for IP '192.168.122.1' to ban list
Viacheslav changed the status of T4241: ocserv openconnect looks broken in recent bulds of 1.3 Equuleus from Open to Confirmed.
Viacheslav added a comment to T4241: ocserv openconnect looks broken in recent bulds of 1.3 Equuleus.
I don't see any issues with LTS 1.3.0
Thanks
Is it required point of binding in a container?
For example:
podman run --rm -it --device=/dev/vdb:/dev/xvdc:rwm --net host ubuntu bash
In T4249#118633, @Viacheslav wrote:You can get access to host netwoks with set container name foo allow-host-networks
You can get access to host netwoks with set container name foo allow-host-networks
Viacheslav added a comment to T1972: Allow setting interface name for virtual_ipaddress in VRRP VRID.
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1224
Viacheslav reopened T1972: Allow setting interface name for virtual_ipaddress in VRRP VRID as "In progress".
@anthr76 we have ready telegraf exporter, maybe it will work for you?
https://docs.vyos.io/en/latest/configuration/service/monitoring.html
Does anyone at least have an example of how to use the snmp exporter? For example a snmp.yml or generate one with the given mibs?
Tested on 1.4-rolling-202202150317 and 1.3.0, all works
Viacheslav changed the subtype of T4248: There isn't a way to remove the only rule from the (traffic-policy) class. from "Task" to "Bug".
Unknown Object (User) triaged T4248: There isn't a way to remove the only rule from the (traffic-policy) class. as Low priority.
Feb 15 2022
Feb 15 2022
this is very similar to https://phabricator.vyos.net/T3657 , so it seems that this is going to be fixed in 1.4 ( proof https://forum.vyos.io/t/bgp-peering-with-ipv6-link-local-addresses/7309/14 ). Is this going to be backported to 1.3 ? Anyone is able to find the commit that introduced the feature on 1.4? Maybe it is something easy to patch
Viacheslav moved T1292: Issues while deleting all rules from a firewall from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Comman "show conntrack ..." not available any more in latest?
n.fort added a comment to T3989: Firewall - Can't delete rule in firewall entry and leave just default-action when firewall entry is in used.
Duplicate T1292 was assigned to 1.4 version, and I close it because it was solved.
This bug remains open for 1.3 Equuleus
n.fort closed T1292: Issues while deleting all rules from a firewall, a subtask of T2199: Rewrite firewall in new XML/Python style, as Resolved.
Tested on VyOS 1.4-rolling-202202150317 and working as expected.
n.fort closed T4160: Firewall - Error in rules that matches everything except something as Resolved.
vyos@vyos# run show config comm | grep fire
set firewall name FOO rule 10 action 'accept'
set firewall name FOO rule 10 protocol 'tcp'
set firewall name FOO rule 10 tcp flags not ack
set firewall name FOO rule 10 tcp flags syn
set firewall name FOO rule 40 action 'accept'
set firewall name FOO rule 40 protocol '!gre'
[edit]
vyos@vyos# sudo nft list chain ip filter NAME_FOO
table ip filter {
chain NAME_FOO {
tcp flags & (syn | ack) == syn counter packets 0 bytes 0 return comment "FOO-10"
meta l4proto != gre counter packets 0 bytes 0 return comment "FOO-40"
counter packets 0 bytes 0 return comment "FOO default-action accept"
}
}Solved. New commands:
Viacheslav moved T4237: Conntrack-sync error - error adding listen-address command from Need Triage to Finished on the VyOS 1.3 Equuleus ( 1.3.1) board.
PR for current https://github.com/vyos/vyos-1x/pull/1223
Unknown Object (User) added a comment to T3494: DHCPv6 leases traceback when PD using.
PR for equuleus https://github.com/vyos/vyos-1x/pull/1222
Viacheslav moved T3686: Bridging OpenVPN tap with no local-address breaks from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Viacheslav edited projects for T3686: Bridging OpenVPN tap with no local-address breaks, added: VyOS 1.3 Equuleus ( 1.3.1); removed VyOS 1.3 Equuleus (1.3.0).
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1221