Could you provide config from several items?
How many nodes do we need to reproduce it?
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Nov 21 2022
Nov 21 2022
Nov 20 2022
Nov 20 2022
Viacheslav added a project to T4812: IPsec ability to show all configured connections: VyOS 1.3 Equuleus (1.3.3).
Viacheslav changed the status of T4823: swanctl.conf is broken when ipsec site-to-site peer set. from Open to In progress.
Viacheslav changed the status of T4812: IPsec ability to show all configured connections, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from In progress to Needs testing.
Viacheslav changed the status of T4812: IPsec ability to show all configured connections from In progress to Needs testing.
1.3 backport https://github.com/vyos/vyos-1x/pull/1670
ipsec site-to-site peer <name> - it is just a connection name and is not related to the IP address
I'll take a look at TS
Viacheslav changed the status of T4830: nat66 - Error in port translation rules from Confirmed to Needs testing.
vyos@r14# set policy route-map FOO rule 100 action permit [edit] vyos@r14# set policy route-map FOO rule 50 action 'deny' [edit] vyos@r14# set policy route-map FOO rule 50 continue '100' [edit] vyos@r14# [edit] vyos@r14# commit [ policy ] rule 50 "continue" cannot be used with action deny!
Viacheslav changed the status of T4831: implement Telegraf build on arm64 / fix hardcoded x86-64 reference from Open to Needs testing.
mcbridematt added a comment to T4831: implement Telegraf build on arm64 / fix hardcoded x86-64 reference.
Pull request: https://github.com/vyos/vyos-build/pull/286
Nov 19 2022
Nov 19 2022
jestabro updated the task description for T4829: Tunnel argument to 'reset_peer' in ipsec.py should have type hint Optional.
Viacheslav closed T4720: Ability to configure SSH HostKeyAlgorithms, a subtask of T4712: Collaborative Protection Profile cPP for Network Devices root task, as Resolved.
Thanks
Don’t think that there should be a migration
As new keys were added several days ago.
jestabro closed T4828: Raise appropriate op-mode errors in ipsec.py 'reset_peer', a subtask of T4552: Unable to reset IPsec IPv6 peer, as Resolved.
@Viacheslav Works!
It works as expected now on 1.4-rolling-202211190627, but my system failed to boot with the old key types in the config, so I had to remove them before switching to the new image. Thanks for the quick fix!
c-po edited projects for T4760: VyOS does not support running multiple instances of DHCPv6 clients, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
c-po moved T4760: VyOS does not support running multiple instances of DHCPv6 clients from Need Triage to Finished on the VyOS 1.4 Sagitta board.
c-po changed the status of T4760: VyOS does not support running multiple instances of DHCPv6 clients from Open to Needs testing.
Nov 18 2022
Nov 18 2022
jestabro triaged T4829: Tunnel argument to 'reset_peer' in ipsec.py should have type hint Optional as Normal priority.
jestabro added a parent task for T4828: Raise appropriate op-mode errors in ipsec.py 'reset_peer': T4552: Unable to reset IPsec IPv6 peer.
jestabro triaged T4828: Raise appropriate op-mode errors in ipsec.py 'reset_peer' as Normal priority.
as we talked , this behavior is the same on vyos1.3.x/frr7.5.x . the main difference is that on vyos-cli doesn't add this command .
In T973#137840, @elico wrote:@Viacheslav I want to test this, what should be done?
@Arc771 Thanks, Could you check it in the next rolling release after 20221118?
Viacheslav changed the status of T4826: Wrong key type is used for SSH SK public keys from Open to Needs testing.
@DerEnderKeks Could you check it in the next rolling release after 20221118?
jestabro closed T4821: Correct calling of config mode script dependencies from firewall.py as Resolved.
jestabro closed T4821: Correct calling of config mode script dependencies from firewall.py, a subtask of T4820: Support for inter-config-mode script dependencies, as Resolved.
@Viacheslav I want to test this, what should be done?
Viacheslav changed the status of T4819: Allow printing Warning messages in multiple lines with \n from In progress to Needs testing.
set policy route-map MAP-ISP1-AS1001-EXPORT rule 50 action 'deny' set policy route-map MAP-ISP1-AS1001-EXPORT rule 50 continue '100'
Nov 17 2022
Nov 17 2022
I guess it was implemented in the T4750
Should be easy to fix
@marc_s thanks for testing !
Added file:// parser to vyos.remote.download and used that to simplify the code, no need to check if it's local now.
TheSin- updated the task description for T4797: External address/network lists for firewall (Local and remote).
Viacheslav edited projects for T4824: PBR/FW rulesets are ignored in rfc3768-compatibility VRRP setups, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus.
jestabro changed the status of T4821: Correct calling of config mode script dependencies from firewall.py, a subtask of T4820: Support for inter-config-mode script dependencies, from Open to Needs testing.
jestabro changed the status of T4821: Correct calling of config mode script dependencies from firewall.py from Open to Needs testing.
jestabro added a comment to T4821: Correct calling of config mode script dependencies from firewall.py.
jestabro renamed T4821: Correct calling of config mode script dependencies from firewall.py from Fix calling of config mode script dependencies from firewall.py to Correct calling of config mode script dependencies from firewall.py.
Nov 16 2022
Nov 16 2022
syncer raised the priority of T1797: Implement DPDK Fast-Path using FRR's Alternate Forwarding Planes and VPP from Wishlist to Normal.
Now as linux-cp available we can consider adding support
thank you
fernando added a subtask for T4686: Provides support for veth: T4825: interfaces veth/veth-pairs -standalone used.
fernando added a parent task for T4825: interfaces veth/veth-pairs -standalone used: T4686: Provides support for veth.
Hello sir,
Nov 15 2022
Nov 15 2022
mcbridematt added a comment to T4822: vyatta-cfg-system: install correct version of GRUB for architecture (arm64).
Pull request: https://github.com/vyos/vyatta-cfg-system/pull/189
We figured out the problem. So for OSPF segment routing to work we need to enable opaque LSA capabilities. So by default VyOS doesn't have opaque LSAs (type 9, type 10, type 11) enabled. So after checking the configuration for the OSPF FRR template I noticed that the actual command to enable opaque LSAs is broken because it's not in the OSPF FRR template. Once we fix that, we'll have working OSPF segment routing.
jestabro triaged T4821: Correct calling of config mode script dependencies from firewall.py as Normal priority.
a.apostoliuk renamed T4819: Allow printing Warning messages in multiple lines with \n from Allow printing Warning and Critical messages in multiple lines with \n to Allow printing Warning messages in multiple lines with \n.
First of all, sorry for my late reply. I was on vacation and stayed away from IT for a bit ;)
a.apostoliuk changed the status of T4819: Allow printing Warning messages in multiple lines with \n from Open to In progress.
Nov 14 2022
Nov 14 2022
egoistdream edited projects for T4818: IPv6 NDP not working everytime, added: VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.4).
PR https://github.com/vyos/vyos-1x/pull/1657
vyos@r14:~$ show vpn ipsec connections Connection State Type Remote address Local TS Remote TS Proposal ----------------- ----------- ------ ---------------- -------------- ----------- --------------------------------------- OFFICE-B established IKEv1 192.0.2.2 - - AES_CBC/256/HMAC_SHA2_256_128/MODP_1024 OFFICE-B-tunnel-0 up IPsec 192.0.2.2 192.168.0.0/24 10.0.0.0/21 AES_CBC/256/HMAC_SHA2_256_128/MODP_1024 OFFICE-B-tunnel-1 down IPsec 192.0.2.2 192.168.1.0/24 10.0.0.0/21 - OFFICE-B-tunnel-2 down IPsec 192.0.2.2 192.168.2.0/24 10.0.0.0/21 - OFFICE-C down IKEv1 192.0.2.2 - - - OFFICE-C-tunnel-0 down IPsec 192.0.2.2 192.168.5.0/24 10.0.0.0/21 - vyos@r14:~$
dmbaturin added a comment to T4816: IPv4-mapped and IPv4-compatible IPv6 addresses not valid anymore.
@rcit I can assure you were never planned to explicitly disallow embedded IPv4 notation. Moreover, I thought the current validator supports it, even though we didn't have tests for it. I'll take a look!
Viacheslav changed the status of T4789: Ability to get L2TP/PPTP/SSTP sessions info in a machine readable format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from In progress to Needs testing.
Viacheslav changed the status of T4789: Ability to get L2TP/PPTP/SSTP sessions info in a machine readable format from In progress to Needs testing.
Viacheslav edited projects for T4816: IPv4-mapped and IPv4-compatible IPv6 addresses not valid anymore, added: VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
Created PR to fix this: https://github.com/vyos/vyos-1x/pull/1656
This issue also exists in 1.3 though I didn't backport it.