Working as expected in VyOS 1.3.1-S1
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Jul 30 2022
Jul 30 2022
It's applied but masked by another part, looking into it. A brief workaround is to just change the description on br0 and commit - then the bridge vlan is re-created.
@Viacheslav can you save your config and reboot?
Jul 26 2022
Jul 26 2022
Jul 25 2022
Jul 25 2022
Jul 22 2022
Jul 22 2022
Commit fails b/c of frr-reload output: 200 % Local-AS allowed only for EBGP peers - we should add an appropriate verify() stage I guess.
c-po added a comment to T4561: reset ip bgp <neighbor> allows reset bgp peer for ipv4, also it should exist one for ipv6.
Unfortunately not all commands are present when using the bgp <afi> syntax. We should find the remaining ones and then move all to the new syntax - less confusing
Jul 21 2022
Jul 21 2022
c-po renamed T4537: MACsec not working with cipher gcm-aes-256 from Macsec not working with cipher gcm-aes-256 to MACsec not working with cipher gcm-aes-256.
That's XPN support but GCM-AES-256 was added back in 2018 in https://w1.fi/cgit/hostap/commit/?id=1ff8605775
That's what commit 5e510e45f6f9 did :)
c-po added a project to T4553: Allow to set ban time on ddos-protection configuration: VyOS 1.4 Sagitta.
Jul 19 2022
Jul 19 2022
Can you check with the latest rolling release? it uses FRR 8.3
Will be fixed in the next rolling release. Thanks!
@dannyvanderaa this is true - but as of VyOS 1.3 there is no longer an operator mode due to security issues. Operator level was removed, it will come back once the entire codebase rewrite is complete.
Jul 18 2022
Jul 18 2022
Also cipher changes require a reboot. Nice bug - thanks for this riddle ;)
c-po added a comment to T4490: BGP- warning message that AFI/SAFI is needed to establish the neighborship.
set protocols bgp local-as 200 set protocols bgp peer-group foo remote-as external set protocols bgp peer-group foo address-family ipv4-unicast ipv6-unicast set protocols bgp neighbor 1.1.1.1 peer-group foo commit
This might confuse the users as now there is sensitive information again, but a different one.
c-po closed T4539: qat: update Intel QuickAssist release version 1.7.L.4.16.0-00017, a subtask of T3318: Update Linux Kernel to v5.4.208 / 5.10.142, as Resolved.
c-po closed T4540: firmware: update to Linux release 20220708, a subtask of T3318: Update Linux Kernel to v5.4.208 / 5.10.142, as Resolved.
c-po moved T4525: Delete interface from VRF and add it to bonding error from Open to Finished on the VyOS 1.4 Sagitta board.
c-po closed T4534: bond: bridge: error out if member interface is assigned to a VRF instance as Resolved.
c-po closed T4534: bond: bridge: error out if member interface is assigned to a VRF instance, a subtask of T4525: Delete interface from VRF and add it to bonding error, as Resolved.
c-po moved T4521: bond: ARP monitor interval is not configured despite set via CLI from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
c-po moved T4522: bond: add ability to specify mii monitor interval via CLI from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
c-po moved T4525: Delete interface from VRF and add it to bonding error from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
c-po moved T2763: New SNMP resource request - SNMP over TCP from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
c-po moved T4532: Flow-accounting IPv6 server/receiver bug from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
c-po moved T4534: bond: bridge: error out if member interface is assigned to a VRF instance from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
c-po committed rVYOSONEX3a1c690e22e3: vrf: T4527: Prevent to create VRF with reserved names (authored by Viacheslav).
In T4533#126578, @Viacheslav wrote:It is operator level, that shouldn’t have permission for configurations. Only basic diagnostics (op-mode)
This seems to be more inconsistent than it has been before.
can you please share your configuration? Using Microsoft NPS as RADIUS backend with this configuration I can not reproduce the issue.
c-po moved T4534: bond: bridge: error out if member interface is assigned to a VRF instance from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4535: FRR: upgrade to stable/8.3 version from Open to In Progress on the VyOS 1.4 Sagitta board.
Jul 17 2022
Jul 17 2022
Jul 15 2022
Jul 15 2022
c-po closed T4536: FRR: move to systemd for daemon control, a subtask of T4535: FRR: upgrade to stable/8.3 version, as Resolved.