My fault. Sorry.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Oct 14 2022
Oct 14 2022
We already have task T4720
Arc771 changed Difficulty level from unknown to easy on T4750: Support of higher level SSH keys (sk-ssh-ed25519).
Viacheslav changed the status of T4725: Unable to reset vpn IPsec peer from In progress to Needs testing.
PR https://github.com/vyos/vyos-1x/pull/1596
vyos@r14:~$ show vpn ipsec sa
Connection State Uptime Bytes In/Out Packets In/Out Remote address Remote ID Proposal
----------------- ------- -------- -------------- ---------------- ---------------- ----------- ---------------------------------------
OFFICE-B-tunnel-0 up 4s 0B/0B 0/0 192.0.2.2 192.0.2.2 AES_CBC_256/HMAC_SHA2_256_128/MODP_1024
vyos@r14:~$
vyos@r14:~$
vyos@r14:~$ reset vpn ipsec-peer OFFICE-B
closing CHILD_SA OFFICE-B-tunnel-0{16} with SPIs cc364877_i (0 bytes) c521f540_o (0 bytes) and TS 192.168.0.0/24 === 10.0.0.0/21
CHILD_SA {16} closed successfully
generating QUICK_MODE request 1449430238 [ HASH SA No KE ID ID ]
sending packet: from 192.0.2.1[500] to 192.0.2.2[500] (332 bytes)
received packet: from 192.0.2.2[500] to 192.0.2.1[500] (332 bytes)
parsed QUICK_MODE response 1449430238 [ HASH SA No KE ID ID ]
selected proposal: ESP:AES_CBC_256/HMAC_SHA2_256_128/MODP_1024/NO_EXT_SEQ
CHILD_SA OFFICE-B-tunnel-0{17} established with SPIs cd451e27_i cfb63c3c_o and TS 192.168.0.0/24 === 10.0.0.0/21
generating QUICK_MODE request 1449430238 [ HASH ]
sending packet: from 192.0.2.1[500] to 192.0.2.2[500] (76 bytes)
connection 'OFFICE-B-tunnel-0' established successfully
Peer reset result: success
vyos@r14:~$Put in hopefully the last PR for this here, https://github.com/vyos/vyos-1x/pull/1595
Cheeze_It renamed T4739: ISIS and OSPF segment routing being refactored from ISIS segment routing being refactored to ISIS and OSPF segment routing being refactored.
Oct 13 2022
Oct 13 2022
jestabro changed the status of T4749: Use config_dict for conf_mode http-api.py from Open to In progress.
Viacheslav changed the subtype of T2958: DHCP server doesn't work from a live CD from "Task" to "Bug".
Viacheslav edited projects for T3011: router becomes unreachable for few minutes when vti interfaces goes down, added: VyOS 1.4 Sagitta; removed vyos-frr.
Oct 13 2022, 4:02 PM · Restricted Project
Viacheslav added a project to T2113: OpenVPN Options error: you cannot use --verify-x509-name with --compat-names or --no-name-remapping: VyOS 1.4 Sagitta.
Oct 13 2022, 3:59 PM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project, VyOS 1.3 Equuleus (1.3.7), openvpn
Viacheslav changed the status of T3965: arm: Extend configure scripts to allow for arm builds from Open to Needs testing.
Viacheslav added a project to T4303: BGP neighbor interface v6only fails to commit: VyOS 1.4 Sagitta.
I can't reproduce this bug with the latest rolling
vyos@r14# run show conf com | match bgp set protocols bgp address-family ipv4-unicast redistribute connected set protocols bgp neighbor eth1 interface remote-as '65001' set protocols bgp neighbor eth1 interface v6only peer-group 'SPING' set protocols bgp peer-group SPING address-family ipv4-unicast set protocols bgp peer-group SPING address-family ipv6-unicast set protocols bgp peer-group SPING capability extended-nexthop set protocols bgp peer-group SPING password 'foo' set protocols bgp system-as '65001'
Viacheslav changed the status of T3721: ARM64: 1.4: Fastnetmon in current is a precompiled custom "blob" and amd64 only. (blocks all arm64 builds) from Open to Needs testing.
Viacheslav added a project to T3652: BGP handshake with cisco router ends in timeout: VyOS 1.4 Sagitta.
@ernstjo Can you reproduce it again?
Viacheslav edited projects for T3625: Configuring and deletting DHCP Server, added: VyOS 1.2 Crux (VyOS 1.2.9); removed VyOS 1.2 Crux.
Viacheslav changed the subtype of T3501: Allow using more than one tuned profile from "Task" to "Feature Request".
Viacheslav moved T4343: Expose powerdns network-timeout for service dns forwarding from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Viacheslav moved T4274: Extend OpenConnect RADIUS Timeout to Permit 2FA Entry from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Should be fixed
@primoz Could you check it again?
Viacheslav added a comment to T4488: allow manual configuration changes of interfaces created by high-availability with rfc3768-compatibility option .
As a workaround, you can try to use the "transition script" to manipulate with interfaces
Viacheslav changed the status of T4728: Crontab file for vyos-wwan is ignored due to missing newline at EOF from Open to Needs testing.
ISC-DHCP-Server does not support vrf's
https://kb.isc.org/docs/isc-dhcp-44-manual-pages-dhcpd
danhusan awarded T1237: Static Route Path Monitoring, failover a Orange Medal token.
Viacheslav added a project to T4733: Feature Request: dhcp server: add VRF support: VyOS 1.4 Sagitta.
I can't reproduce it
vyos@r14:~$ show conf com | match "vrf|tele" set interfaces ethernet eth1 vrf 'mgmt' set service monitoring telegraf influxdb authentication organization '[email protected]' set service monitoring telegraf influxdb authentication token 'GuRJc12tIzfjnYdKRAIYbxdWd2aTpOT9PVYNddzDnFV4HkAcD7u7-kndTFXjGuXzJN6TTxmrvPODB4mnFcseDV==' set service monitoring telegraf influxdb port '8086' set service monitoring telegraf influxdb url 'https://foo.local' set service monitoring telegraf prometheus-client set service monitoring telegraf vrf 'mgmt' set vrf name mgmt table '1010' vyos@r14:~$
After reboot, the service telegraf works correctly
vyos@r14:~$ sudo systemctl status telegraf
● telegraf.service - The plugin-driven server agent for reporting metrics into InfluxDB
Loaded: loaded (/lib/systemd/system/telegraf.service; disabled; vendor preset: enabled)
Drop-In: /etc/systemd/system/telegraf.service.d
└─10-override.conf
Active: active (running) since Thu 2022-10-13 15:24:23 EEST; 1min 19s ago
Docs: https://github.com/influxdata/telegraf
Main PID: 1868 (telegraf)
Tasks: 10 (limit: 9404)
Memory: 54.4M
CPU: 2.650s
CGroup: /system.slice/telegraf.service
└─vrf
└─mgmt
└─1868 /usr/bin/telegraf --config /run/telegraf/telegraf.conf --config-directory /etc/telegraf/telegraf.d --pidfile /run/telegraf/telegraf.pidViacheslav closed T4716: SSH ability to configure RekeyLimit, a subtask of T4712: Collaborative Protection Profile cPP for Network Devices root task, as Resolved.
KEA DHCP have some hook limitations https://kea.readthedocs.io/en/kea-2.2.0/arm/hooks.html?#available-hook-libraries
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1593
Viacheslav changed the status of T4746: Monitoring nft. table vyos_filter by default does not exist but telegraf checks this table from Open to In progress.
Viacheslav moved T4312: Telegraf configuration doesn't accept IPs for URL from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Viacheslav changed the status of T4312: Telegraf configuration doesn't accept IPs for URL from Open to In progress.
Viacheslav added a project to T4312: Telegraf configuration doesn't accept IPs for URL: VyOS 1.4 Sagitta.
i dont know if this is good or not, next version of radvd will include options la RFC8781 which are not even though for frrouting, even im opening them a request for such feature but i dont expect it to be available anytime soon.
Oct 12 2022
Oct 12 2022
Viacheslav changed the status of T4744: BGP directly connected neighbors don't compatible with ebgp-multihop from In progress to Needs testing.
Viacheslav added a comment to T4744: BGP directly connected neighbors don't compatible with ebgp-multihop.
PR https://github.com/vyos/vyos-1x/pull/1586
vyos@r14# commit [ protocols bgp ] Ebgp-multihop can not be used with directly connected neighbor "eth0"
Viacheslav changed the status of T4744: BGP directly connected neighbors don't compatible with ebgp-multihop from Open to In progress.
Unknown Object (User) added a comment to T4734: Feature Request: openvpn: add OTP 2FA support.
It is highly desirable to reflect this feature in the documentation
Now it is not clear how to configure and use it
For 1.4 was implemented in T3834
That does not change the behavior. I get five messages on session start from bfdd, bgpd, ospfd processes, and 16 messages from all FRR daemons on session stop.
The only way to get rid of them is 'log syslog emergencies' but this filters important events as well.
Viacheslav added a project to T4734: Feature Request: openvpn: add OTP 2FA support: VyOS 1.3 Equuleus (1.3.3).
@aserkin as workaround try to change facility level
vtysh -c "conf t" -c "log facility local0"
But it can affect to bgp logs
+1 for @Viacheslav proposal.
Any suggestions on the problem, guys?
I see a lot of messages regarding these messages appearing in various scenarios since 2017 or even earlier in FRR community. But did not find any solution actually.
@thetooth There is a new feature failover route where you can set metrics
https://github.com/vyos/vyos-1x/pull/1358
It could be extended to some "load-balancing"
I have used this feature in the past but not anymore due to the issues listed in the regressions task. We are now running pfsense purely for LB since this (mostly) works as advertised. Looking back at this current implementation there are some very useful features that are missing.
Oct 11 2022
Oct 11 2022
Viacheslav removed a project from T3316: Use Kea DHCP(v6) instead of ISC DHCP(v6): VyOS 1.3 Equuleus (1.3.3).
Viacheslav changed the status of T4747: Monitoring influxdb template input exec plugin does not work from In progress to Needs testing.
PR https://github.com/vyos/vyos-1x/pull/1584
vyos@r14# cat /run/telegraf/telegraf.conf | grep 'inputs.exec' -A 8
[[inputs.exec]]
commands = [
"/etc/telegraf/custom_scripts/show_firewall_input_filter.py",
"/etc/telegraf/custom_scripts/show_interfaces_input_filter.py",
"/etc/telegraf/custom_scripts/vyos_services_input_filter.py"
]
timeout = "10s"
data_format = "influx"
[edit]
vyos@r14#Viacheslav changed the status of T4747: Monitoring influxdb template input exec plugin does not work from Open to In progress.
Viacheslav moved T4680: Telegraf prometheus-client listen-address invalid format from Need Triage to Finished on the VyOS 1.4 Sagitta board.
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1583
Viacheslav changed the status of T4740: Show conntrack table ipv6 fail from In progress to Needs testing.
I believe the ISC DHCP is now officially deprecated and EOLed:
Viacheslav added a comment to T4730: Conntrack-sync error - listen-address is not the correct type in config as it should be.
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1582
PR https://github.com/vyos/vyos-1x/pull/1581
vyos@r14:~$ show conntrack table ipv6 Entries not found vyos@r14:~$
In T4729#135230, @pasik wrote:Ah, yeah, that's a valid point for gretap.
Anyway, my point was, it would be good to test if the issue/bug also affects plain 'gre', as behind the scenes 'gre' and 'gretap' are handled and configured differently, even though they might seem as very similar in vyos cli/config.
The bug might affect both, but it would be good to check and verify.
a.apostoliuk changed the status of T4492: Incorrect list of neighbors in help for "show bgp vrf VRF neighbors" from Open to In progress.
a.apostoliuk changed the status of T4704: Allow to set metric (MED) to rtt with rtt,+rtt or -rtt from Open to In progress.
Oct 10 2022
Oct 10 2022
PR https://github.com/vyos/vyos-1x/pull/1579
set service dns dynamic interface eth2 ipv6-enable set service dns dynamic interface eth2 service dynv6 host-name 'xxx.dynv6.net' set service dns dynamic interface eth2 service dynv6 login 'none' set service dns dynamic interface eth2 service dynv6 password 'passWorD' set service dns dynamic interface eth2 service dynv6 protocol 'dyndns2' set service dns dynamic interface eth2 service dynv6 server 'dynv6.com'
Viacheslav changed the status of T4716: SSH ability to configure RekeyLimit, a subtask of T4712: Collaborative Protection Profile cPP for Network Devices root task, from In progress to Needs testing.
Viacheslav changed the status of T4716: SSH ability to configure RekeyLimit from In progress to Needs testing.
Viacheslav changed the status of T4743: Enable IPv6 address for Dynamic DNS from Open to In progress.
Viacheslav changed the subtype of T4743: Enable IPv6 address for Dynamic DNS from "Bug" to "Feature Request".
sarthurdev changed the status of T4742: Autocomplete in policy route rule x set table / does not show the tables created in the static protocols from Open to Needs testing.
sarthurdev changed the status of T4741: set firewall zone Local local-zone failed from Open to Needs testing.
Viacheslav changed the subtype of T4730: Conntrack-sync error - listen-address is not the correct type in config as it should be from "Task" to "Bug".