Query: All Stories

	Include stories about projects I am a member of.

Oops. Thank you Nicolas.
Suddenly found myself far behind the current rolling release. Will upgrade first.

I have made the change in my configuration and tested as many configuration changes as I could (I have not tested radius authentication, and other options that are not valid in my setup) and it seems to work with this change without any unwanted side effects.

@dmbaturin It shows only IPv4 routes
Could you also add IPv6?

Should be fixed in T4794
Check please the newest version

@aserkin . Viacheslav commands are present in more recent nighly builds.
Try with one of the latests images.

There's no

set firewall interface

option here:
admin@vyos-lns-1:~$ show version
Version: VyOS 1.4-rolling-202209131208

@klase could you make some changes?

sudo nano -c +253 /usr/libexec/vyos/conf_mode/vpn_openconnect.py

and change

call('systemctl restart ocserv.service')

to:

call('systemctl reload-or-restart ocserv.service')

Does it do the same?

set firewall interface l2tp* out name 'FOO'
set firewall name FOO rule 10 action 'accept'
set firewall name FOO rule 10 protocol 'tcp'
set firewall name FOO rule 10 tcp flags syn
set firewall name FOO rule 10 tcp mss '1300'

nft

table ip vyos_filter {
	chain VYOS_FW_FORWARD {
		type filter hook forward priority filter; policy accept;
		oifname "l2tp*" counter packets 0 bytes 0 jump NAME_FOO
		jump VYOS_POST_FW
	}
...
	chain NAME_FOO {
		tcp flags & syn == syn tcp option maxseg size 1300 counter packets 0 bytes 0 return comment "FOO-10"
		counter packets 0 bytes 0 drop comment "FOO default-action drop"
	}
}

CNI Plugins compatible with nftables https://github.com/greenpau/cni-plugins/

@klase will be fixed in the next rolling release

We can do it the same way

vyos@r1# set service snmp oid-enable 
Possible completions:
   route-table          Enable routing table OIDs (ipCidrRouteTable inetCidrRouteTable)

so by default they should be disabled

Error also present in vyos-1.4-rolling-202212020318

Verify if you are trying to add a new vethX to exists pair (veth12 link to veth0 should be RaiseConfigerror)

set interfaces virtual-ethernet veth0 peer-name 'veth1'
set interfaces virtual-ethernet veth1 peer-name 'veth0'
set interfaces virtual-ethernet veth12 peer-name 'veth0'
commit

commit

vyos@r1# commit
[ interfaces virtual-ethernet veth12 ]
{'ifname': 'veth12',
 'other_interfaces': {'veth0': {'peer_name': 'veth1'},
                      'veth1': {'peer_name': 'veth0'},
                      'veth12': {'peer_name': 'veth0'}},
 'peer_name': 'veth0'}
VyOS had an issue completing a command.

All Stories
Use Results
Edit Query
Hide Query

Dec 7 2022

Dec 6 2022

Dec 5 2022

Dec 4 2022

Dec 3 2022

Dec 2 2022

Dec 1 2022

All StoriesUse ResultsEdit QueryHide Query