PR for 1.3
https://github.com/vyos/vyatta-op-vpn/pull/34
https://github.com/vyos/vyos-1x/pull/1672
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Nov 21 2022
Nov 21 2022
I think the issue is realated to this: https://blog.ipspace.net/2014/09/ipv6-neighbor-discovery-nd-and.html
I add here what I just found and I can reproduce the issue everytime.
You can test with 3-5 servers, the config is basic for each server:
Could you provide config from several items?
How many nodes do we need to reproduce it?
Nov 20 2022
Nov 20 2022
Viacheslav added a project to T4812: IPsec ability to show all configured connections: VyOS 1.3 Equuleus (1.3.3).
Viacheslav changed the status of T4823: swanctl.conf is broken when ipsec site-to-site peer set. from Open to In progress.
Viacheslav changed the status of T4812: IPsec ability to show all configured connections, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from In progress to Needs testing.
Viacheslav changed the status of T4812: IPsec ability to show all configured connections from In progress to Needs testing.
GitHub <noreply@github.com> committed rVYOSONEX2e011313a9b5: Merge pull request #1657 from sever-sever/T4812 (authored by dmbaturin).
1.3 backport https://github.com/vyos/vyos-1x/pull/1670
ipsec site-to-site peer <name> - it is just a connection name and is not related to the IP address
I'll take a look at TS
Viacheslav changed the status of T4830: nat66 - Error in port translation rules from Confirmed to Needs testing.
vyos@r14# set policy route-map FOO rule 100 action permit [edit] vyos@r14# set policy route-map FOO rule 50 action 'deny' [edit] vyos@r14# set policy route-map FOO rule 50 continue '100' [edit] vyos@r14# [edit] vyos@r14# commit [ policy ] rule 50 "continue" cannot be used with action deny!
GitHub <noreply@github.com> committed rVYOSONEXb7e203d168d5: Merge pull request #1667 from sever-sever/T4827 (authored by c-po).
Viacheslav changed the status of T4831: implement Telegraf build on arm64 / fix hardcoded x86-64 reference from Open to Needs testing.
mcbridematt added a comment to T4831: implement Telegraf build on arm64 / fix hardcoded x86-64 reference.
Pull request: https://github.com/vyos/vyos-build/pull/286
Nov 19 2022
Nov 19 2022
jestabro updated the task description for T4829: Tunnel argument to 'reset_peer' in ipsec.py should have type hint Optional.
GitHub <noreply@github.com> committed rVYOSONEX2fa43aea9c47: Merge pull request #1666 from nicolas-fort/T4830-nat66 (authored by c-po).
Viacheslav closed T4720: Ability to configure SSH HostKeyAlgorithms, a subtask of T4712: Collaborative Protection Profile cPP for Network Devices root task, as Resolved.
Thanks
Don’t think that there should be a migration
As new keys were added several days ago.
jestabro closed T4828: Raise appropriate op-mode errors in ipsec.py 'reset_peer', a subtask of T4552: Unable to reset IPsec IPv6 peer, as Resolved.
Unknown Object (User) added a comment to T4720: Ability to configure SSH HostKeyAlgorithms.
@Viacheslav Works!
It works as expected now on 1.4-rolling-202211190627, but my system failed to boot with the old key types in the config, so I had to remove them before switching to the new image. Thanks for the quick fix!
c-po edited projects for T4760: VyOS does not support running multiple instances of DHCPv6 clients, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
c-po moved T4760: VyOS does not support running multiple instances of DHCPv6 clients from Open to Finished on the VyOS 1.4 Sagitta board.
c-po changed the status of T4760: VyOS does not support running multiple instances of DHCPv6 clients from Open to Needs testing.
GitHub <noreply@github.com> committed rVYOSONEX0cec72de1716: Merge pull request #1665 from jestabro/op-mode-value-error (authored by c-po).
Nov 18 2022
Nov 18 2022
jestabro triaged T4829: Tunnel argument to 'reset_peer' in ipsec.py should have type hint Optional as Normal priority.
jestabro added a parent task for T4828: Raise appropriate op-mode errors in ipsec.py 'reset_peer': T4552: Unable to reset IPsec IPv6 peer.
jestabro triaged T4828: Raise appropriate op-mode errors in ipsec.py 'reset_peer' as Normal priority.
as we talked , this behavior is the same on vyos1.3.x/frr7.5.x . the main difference is that on vyos-cli doesn't add this command .
In T973#137840, @elico wrote:@Viacheslav I want to test this, what should be done?
@Arc771 Thanks, Could you check it in the next rolling release after 20221118?
Viacheslav changed the status of T4826: Wrong key type is used for SSH SK public keys from Open to Needs testing.
@DerEnderKeks Could you check it in the next rolling release after 20221118?
GitHub <noreply@github.com> committed rVYOSONEX95abda42a4ef: Merge pull request #1664 from sever-sever/T4826 (authored by c-po).
jestabro closed T4821: Correct calling of config mode script dependencies from firewall.py as Resolved.
jestabro closed T4821: Correct calling of config mode script dependencies from firewall.py, a subtask of T4820: Support for inter-config-mode script dependencies, as Resolved.
GitHub <noreply@github.com> committed rVYOSONEX97056cad1866: Merge pull request #1662 from jestabro/config-script-dependency (authored by dmbaturin).
@Viacheslav I want to test this, what should be done?
Viacheslav changed the status of T4819: Allow printing Warning messages in multiple lines with \n from In progress to Needs testing.
set policy route-map MAP-ISP1-AS1001-EXPORT rule 50 action 'deny' set policy route-map MAP-ISP1-AS1001-EXPORT rule 50 continue '100'
GitHub <noreply@github.com> committed rVYOSONEX0094bdfd15b4: Merge pull request #1645 from aapostoliuk/T4793-sagitta (authored by c-po).
Nov 17 2022
Nov 17 2022
I guess it was implemented in the T4750
Should be easy to fix
@marc_s thanks for testing !
GitHub <noreply@github.com> committed rVYOSONEXa295c8fd127c: Merge pull request #1654 from sarthurdev/pbr_refactor (authored by c-po).
Added file:// parser to vyos.remote.download and used that to simplify the code, no need to check if it's local now.
TheSin- updated the task description for T4797: External address/network lists for firewall (Local and remote).
Viacheslav edited projects for T4824: PBR/FW rulesets are ignored in rfc3768-compatibility VRRP setups, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus.
GitHub <noreply@github.com> committed rVYOSONEX4545c51f37e8: Merge pull request #1660 from aapostoliuk/T4819-sagitta (authored by c-po).
jestabro changed the status of T4821: Correct calling of config mode script dependencies from firewall.py, a subtask of T4820: Support for inter-config-mode script dependencies, from Open to Needs testing.
jestabro changed the status of T4821: Correct calling of config mode script dependencies from firewall.py from Open to Needs testing.
jestabro added a comment to T4821: Correct calling of config mode script dependencies from firewall.py.
jestabro renamed T4821: Correct calling of config mode script dependencies from firewall.py from Fix calling of config mode script dependencies from firewall.py to Correct calling of config mode script dependencies from firewall.py.
Nov 16 2022
Nov 16 2022
syncer raised the priority of T1797: Implement DPDK Fast-Path using FRR's Alternate Forwarding Planes and VPP from Wishlist to Normal.
Now as linux-cp available we can consider adding support
GitHub <noreply@github.com> committed rVYOSONEX15a8c72391ba: Merge pull request #1661 from roedie/T4794 (authored by c-po).
thank you
fernando added a subtask for T4686: Provides support for veth: T4825: interfaces veth/veth-pairs -standalone used.