regarding this behavior , I found a similar task where there was a bug with chain VYOS_PRE_SNAT_HOOK that jumps to WANLOADBALANCE ,although it was solved .
However , policy traffic rule seems to be affected with this issues(the main difference is that now there is a pass on this chain/ POSTROUTING) , below I'll share the task just to know where you can find the problem.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Apr 11 2022
Apr 11 2022
teleport Linux 64-bit DEB - 94 Mb
https://goteleport.com/teleport/download/
dmbaturin renamed T4327: Ethernet interface configuration fails on Hyper-V due to speed/duplex/autoneg ethtool command error from no ability to configure interfaces at all on Hyper-V to Ethernet interface configuration fails on Hyper-V due to speed/duplex/autoneg ethtool command error.
Unknown Object (User) added a comment to T4301: The "arp-monitor" option in bonding interface settings does not work.
VyOS 1.4-rolling-202204090217 works well.
Apr 10 2022
Apr 10 2022
higebu moved T4279: vyos-vm-images: add vagrant virtualbox box from Restricted Project Column to Restricted Project Column on the Restricted Project board.
higebu moved T4278: vyos-vm-images: fix vagrant libvirt box from Restricted Project Column to Restricted Project Column on the Restricted Project board.
Unknown Object (User) changed the status of T4288: IPsec tunnel will break when ESP timeout from In progress to Needs testing.
I've tested the scenario using VyOS 1.4-rolling-202204090217 and (esp lifetime '30'). Attached is the config.
After turning on the right and left routers, IPsec creates two tunnels that are updated every 10 seconds. (Tunnels are updated using strange intervals, the first 1-10 seconds, the second 10-20 seconds).
@hakwerk I'm sorry for the delay of the response. It seems that this PR(https://github.com/vyos/vyos-vm-images/pull/28) fixes the enable_dhcp issue.
I can't reproduce the install-grub issue for now. If I get the warning, I will try to fix it.
VyOS 1.3 and 1.2 use the legacy Perl based IPSec implementation. A test would still be good just to be sure!
Viacheslav moved T4344: DHCP statistics not matching, conf-mode generates incorrect pool name with dash from Open to Finished on the VyOS 1.4 Sagitta board.
Unknown Object (User) changed the status of T4288: IPsec tunnel will break when ESP timeout from Needs testing to In progress.
I tested it with VyOS 1.4-rolling-202204090217 and it works well for a while.
Apr 9 2022
Apr 9 2022
Apr 8 2022
Apr 8 2022
Viacheslav renamed T4344: DHCP statistics not matching, conf-mode generates incorrect pool name with dash from DHCP statistics not matching, conf-mode generates incorrect poll name with dash to DHCP statistics not matching, conf-mode generates incorrect pool name with dash.
Viacheslav added a comment to T4344: DHCP statistics not matching, conf-mode generates incorrect pool name with dash.
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1280
I missed option network vlan:
set service ipoe-server interface eth2 network 'vlan'
configs looks good:
[ipoe] verbose=1 interface=re:eth2\.\d+,shared=0,mode=L2,ifcfg=1,range=192.168.0.0/24,start=dhcpv4,ipv6=1 username=ifname password=csid proxy-arp=1
Viacheslav changed Version from VyOS 1.3.1-S1 to VyOS 1.3.1-S1, VyOS 1.4-rolling-202204080957 on T4349: Vlan-range vlan_mon not working for ipoe service.
Viacheslav added a project to T4349: Vlan-range vlan_mon not working for ipoe service: VyOS 1.4 Sagitta.
Unknown Object (User) added a comment to T3427: Show prefix received via IA_PD in interface info.
I would like to see this too, with Ethernet interfaces.
c-po moved T4338: wwan: changing interface description should not trigger reconnect from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
Apr 7 2022
Apr 7 2022
jestabro changed the status of T4347: Return complete and consistent error codes from HTTP API from Needs testing to In progress.
Changes and fixes to smoketest at link; in testing before PR:
https://github.com/vyos/vyos-1x/compare/current...jestabro:api-smoketest
jestabro changed the status of T4347: Return complete and consistent error codes from HTTP API from In progress to Needs testing.
jestabro changed the status of T4347: Return complete and consistent error codes from HTTP API from Open to In progress.
c-po moved T4346: Deprecate "system ipv6 disable" option to disable address family within OS kernel from Open to Finished on the VyOS 1.4 Sagitta board.
c-po added a comment to T4346: Deprecate "system ipv6 disable" option to disable address family within OS kernel.
VyOS 1.3 (equuleus) PR https://github.com/vyos/vyos-1x/pull/1276
c-po updated the task description for T4346: Deprecate "system ipv6 disable" option to disable address family within OS kernel.
c-po changed the status of T4346: Deprecate "system ipv6 disable" option to disable address family within OS kernel from Open to In progress.
c-po moved T4330: MTU settings cannot be applied when IPv6 is disabled from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
c-po moved T4336: isis: add support for MD5 authentication password on a circuit from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
c-po moved T4341: login: disable user-account prior to deletion and wait until deletion is complete from Open to Finished on the VyOS 1.4 Sagitta board.
Apr 6 2022
Apr 6 2022
Is there a way to get this to work with a dynamically assigned /64 PD from my ISP?
devon added a comment to T4331: IPv6 link local addresses are not configured when an interface is in a VRF.
@Viacheslav Link local addresses were added successfully on boot on 1.4-rolling-202204060217.
c-po added a comment to T4345: New firewall code does not accept "rate/time interval" syntax used in old config.
Thank you very much @sdev !
sarthurdev changed the status of T4345: New firewall code does not accept "rate/time interval" syntax used in old config from In progress to Needs testing.
sarthurdev moved T4345: New firewall code does not accept "rate/time interval" syntax used in old config from Open to In Progress on the VyOS 1.4 Sagitta board.
sarthurdev changed the status of T4345: New firewall code does not accept "rate/time interval" syntax used in old config from Open to In progress.
SrividyaA added a comment to T4342: "show ip ospf neighbor address x.x.x.x" gives "unknown command" error.
submitted PR: https://github.com/vyos/vyos-1x/pull/1274
c-po added a comment to T4331: IPv6 link local addresses are not configured when an interface is in a VRF.
PR for 1.3 (equuleus) https://github.com/vyos/vyos-1x/pull/1273
c-po added a comment to T4331: IPv6 link local addresses are not configured when an interface is in a VRF.
@Viacheslav fix verified - also the new smoketest detected the bug prior to your fix and no longer seen the bug after your fix.
c-po edited projects for T4331: IPv6 link local addresses are not configured when an interface is in a VRF, added: VyOS 1.3 Equuleus (1.3.2); removed VyOS 1.3 Equuleus.
c-po moved T4331: IPv6 link local addresses are not configured when an interface is in a VRF from Open to Finished on the VyOS 1.4 Sagitta board.
Apr 5 2022
Apr 5 2022
@NceAirport do you have a minimum required configuration?
As I see it should be something like:
set service monitoring xxx prometheus authentication login xxx set service monitoring xxx prometheus authentication password xxx set service monitoring xxx prometheus port 9273 set service monitoring xxx prometheus network 192.0.2.0/24
Viacheslav added a comment to T4331: IPv6 link local addresses are not configured when an interface is in a VRF.
@devon Will be fixed in the next rolling release, could you check it?
n.fort added a comment to T4331: IPv6 link local addresses are not configured when an interface is in a VRF.
Applying patch from the PR I could not reproduce issue anymore
cherry-pick for 1.3 https://github.com/vyos/vyos-1x/pull/1271
Viacheslav changed the status of T4331: IPv6 link local addresses are not configured when an interface is in a VRF from Open to In progress.
Viacheslav moved T2580: Support for ip pools for ippoe from Open to Backport Candidates on the VyOS 1.4 Sagitta board.
c-po updated the task description for T3804: cli: Migrate and merge "system name-servers-dhcp" into "system name-server".
c-po updated the task description for T3804: cli: Migrate and merge "system name-servers-dhcp" into "system name-server".
Apr 4 2022
Apr 4 2022
c-po updated the task description for T4341: login: disable user-account prior to deletion and wait until deletion is complete.
c-po updated the task description for T4341: login: disable user-account prior to deletion and wait until deletion is complete.
c-po renamed T4341: login: disable user-account prior to deletion and wait until deletion is complete from login: disable user-account prior to deletion to login: disable user-account prior to deletion and wait until deletion is complete.
c-po changed Issue type from vulnerability to bug on T4341: login: disable user-account prior to deletion and wait until deletion is complete.
c-po triaged T4341: login: disable user-account prior to deletion and wait until deletion is complete as Low priority.
c-po renamed T4341: login: disable user-account prior to deletion and wait until deletion is complete from login: disable user-account prior to deletion and force file removal to login: disable user-account prior to deletion.
c-po changed the status of T4341: login: disable user-account prior to deletion and wait until deletion is complete from Open to In progress.
c-po added a comment to T4339: wwan: tab-completion results in "No such file or directory" if there is no WWAN interface.
c-po moved T4338: wwan: changing interface description should not trigger reconnect from Need Triage to In Progress on the VyOS 1.3 Equuleus (1.3.2) board.
c-po moved T4338: wwan: changing interface description should not trigger reconnect from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4339: wwan: tab-completion results in "No such file or directory" if there is no WWAN interface from Open to Finished on the VyOS 1.4 Sagitta board.
c-po renamed T4339: wwan: tab-completion results in "No such file or directory" if there is no WWAN interface from wwan: tab-comletion results in "No such file or directory" if there is no WWAN interface to wwan: tab-completion results in "No such file or directory" if there is no WWAN interface.