Just tested this on VyOS 1.4-rolling-202207111030, with the following commands:
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
All Stories
Jul 15 2022
Jul 14 2022
It is different shells in 1.4 and 1.3 for this user config
In 1.3 it seems correct:
vyosuser@r1# echo $SHELL /sbin/radius_shell [edit] vyosuser@r1#
I propose a patch to fix this issue:
Demo QPPB implementation supporting bgp-policy destination mode:
Similar problem in the latest rolling releases (vyos-1.4-rolling-202207111030). Traffic policy (limiter) not set in live configuration.
Jul 13 2022
If I want to use also x.pool.ntp.org how should I use it if it will migrate anything from x.pool.ntp.org?
The similar issue and for the 1.3.1-S1
vyos@vyos# run show version
Jul 12 2022
I only see one solution - exclude mirror node from interface and add it as a separate option/service
set service redirect|port-mirror <x> source tunX set service redirect|port-mirror <x> destination tunY
As tc filter applied for every interface step by step and in this case (adding tun0) we don't have tun1 yet
To reproduce:
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1410
Hi, but one more thing related NAT and VRF in 1.4 rolling. As you know it uses NF MAP, to isolate conntrack tables, so we need to create some design to fix this moment. Matbe with adding some mark
set interfaces bonding bond0 member interface 'eth1' set interfaces bonding bond0 member interface 'eth2' set interfaces bonding bond0 vif 10
Jul 11 2022
I've re-tested this issues with the initial configuration, nat source / mesquered/ destination , it seems to work as @Dmitry said. The conntrack doesn't show the connection as [UNREPLIED] , it's established :
Prototype PR using Tayga: https://github.com/vyos/vyos-1x/pull/1408
Similar task T3810 points 5, 8
PR https://github.com/vyos/vyos-1x/pull/1407
vyos@r14# run show conntrack table ipv4 Id Original src Original dst Reply src Reply dst Protocol State Timeout Mark Zone ---------- ------------------- ----------------- ----------------- ------------------- ---------- ----------- --------- ------ ------ 3529842617 192.168.122.1:53508 192.168.122.14:22 192.168.122.14:22 192.168.122.1:53508 tcp ESTABLISHED 431999 0 4102830655 192.0.2.10 1.0.0.1 1.0.0.1 192.168.122.14 icmp 18 0 59651 179791316 192.0.2.10 1.1.1.1 1.1.1.1 192.168.122.14 icmp 12 0 59651 [edit] vyos@r14#
Today I tested VRF route leaking and NAT. It works on 1.3.1-S1. Simple configuration: