There are use cases when it would be ideal to force a password at boot to protect the contents of the configuration. For example, a portable router with sensitive keys meant for temporary network connectivity.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Aug 12 2023
Aug 12 2023
The problem is how to make sure that the router can boot and reboot (for example "set system option reboot-on-panic" is handy) on itself without somebody having to connect to its console before it starts to function again. Really shitty situation for a remote site because then somebody needs to visit it aswell.
Viacheslav committed rVYOSONEX58a20e42087c: vyos.util: extend process_named_running() signature with cmdline (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX616bdb5299bf: Merge pull request #2127 from sever-sever/T2298-eq (authored by c-po).
- How is the physical topology (can you provide a drawing)?
I am having this exact problem and it evidently has been a problem for quite a few years.
Can this be accomplished with LUKS?
Aug 11 2023
Aug 11 2023
That CLI node ipv6 only implements a minor subset of the entire featureset of port forwarding.
c-po changed the status of T5467: ospf(v3): removing an interface from the OSPF process does not clear FRR configuration from Open to In progress.
GitHub <noreply@github.com> committed rVYOSONEX482f7e352272: Merge pull request #2016 from nicolas-fort/T5160 (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX142ace2a16fc: Merge pull request #2148 from sever-sever/T5448 (authored by dmbaturin).
Adding comments : maybe discontinue show ip bgp gives some issues / problems with automation tools (ansible o some custom script)While thinking out loud, it can be useful for new users create to alias.
Its not possible to "symlink" it?
c-po changed the status of T5465: adjust-mss: config migration fails if applied to a VLAN or Q-in-Q interface, a subtask of T3090: Move 'adjust-mss' firewall options to the interface section., from Open to In progress.
c-po changed the status of T5465: adjust-mss: config migration fails if applied to a VLAN or Q-in-Q interface from Open to In progress.
Unfortunately this is "not that easy" as out CLI commands are passed down to FRR raw.
c-po moved T5459: ospfv3: add authentication support from Open to In Progress on the VyOS 1.4 Sagitta board.
c-po moved T5461: Improve rootfs directory variable from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T5464: ipv6: add support for per-interface dad (duplicate address detection) setting from Open to In Progress on the VyOS 1.4 Sagitta board.
GitHub <noreply@github.com> committed rVYOSONEX11f46a2b4f85: T5440: Restore pre/postconfig scripts if user deleted them (authored by Apachez).
But at the same time it would help others who migrate to VyOS from Cisco, Arista etc.
jestabro closed T5434: Replace remaining calls of vyos.xml library, a subtask of T5218: Revise vyos xml lib for bug fixes and extensions, as Resolved.
jestabro closed T5319: Remove remaining workarounds for incorrect defaults, a subtask of T5308: Remove workarounds for incorrect defaults in get_interface_dict, as Resolved.
Viacheslav renamed T5462: Add actual Openssl version 1.1.1v from Add acual Openssl version 1.1.1v to Add actual Openssl version 1.1.1v.
show ip bgp is an old command, it comes from quagga ...So in my point of view , adding more command to do the same , could generate more confusion . show bgp address-family should be used.
Viacheslav changed the subtype of T5462: Add actual Openssl version 1.1.1v from "Bug" to "Feature Request".
Viacheslav moved T5416: Ignoring "ipsec match-none" for firewall from Open to Finished on the VyOS 1.4 Sagitta board.
GitHub <noreply@github.com> committed rVYOSONEX43294da10313: Merge pull request #2147 from jestabro/remaining-defaults (authored by Viacheslav).
PR created: https://github.com/vyos/vyatta-op/pull/66
GitHub <noreply@github.com> committed rVYOSONEX4659f25804bd: Merge pull request #2146 from dmbaturin/T5270-openvpn-dh-optional (authored by c-po).
Aug 10 2023
Aug 10 2023
Its good for traceability to get a snmp trap sent when the firewall config has been altered/changed/(re-)applied.
GitHub <noreply@github.com> committed rVYOSONEXbfbd7273b331: Merge pull request #2140 from sever-sever/T5448 (authored by dmbaturin).
Apachez added a comment to T5458: USB Console options is missing for a new image after "add system image" upgrade.
Yeah, no worries.
Im biased but here are my testresults using modified VyOS 1.4-rolling-202308060317:
Unknown Object (User) added a comment to T5458: USB Console options is missing for a new image after "add system image" upgrade.
@Apachez thank you for your response 🙏
Sorry, I really have attached screenshots but didn't grant access to them. Fixed.
Viacheslav changed the status of T5457: Add environmental variable pointing to current rootfs directory from In progress to Needs testing.
Some internal test where done, using integration between:
- Traffic shaper. Currently supported in vyos cli
- Bridge firewall. Currently not supported in vyos cli.
Viacheslav committed rVYOSONEXe27f566f0f65: T5329 : priority: tunnel config is committed before wireguard (authored by SrividyaA).
GitHub <noreply@github.com> committed rVYOSONEX80465e2cb222: Merge pull request #2126 from sever-sever/T5329-eq (authored by c-po).
Unknown Object (User) attached a referenced file: F3821514: screenshots.zip.
GitHub <noreply@github.com> committed rVYOSONEXe146f9c30033: tunnel: T5223: clear GRE key id after deletion (authored by srividya0208 <68350089+srividya0208@users.noreply.github.com>).
Apachez added a comment to T5458: USB Console options is missing for a new image after "add system image" upgrade.
There were no screenshots included with this task?
Unknown Object (User) created T5458: USB Console options is missing for a new image after "add system image" upgrade.
Viacheslav changed the status of T5457: Add environmental variable pointing to current rootfs directory from Open to In progress.