- Vyos Router <-> Switch <-> Multiple Computers
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Aug 12 2023
Aug 12 2023
A workaround in the meantime:
And in that case the attacker would just replace your router with their own since they already got physical access to the box.
There are use cases when it would be ideal to force a password at boot to protect the contents of the configuration. For example, a portable router with sensitive keys meant for temporary network connectivity.
The problem is how to make sure that the router can boot and reboot (for example "set system option reboot-on-panic" is handy) on itself without somebody having to connect to its console before it starts to function again. Really shitty situation for a remote site because then somebody needs to visit it aswell.
Viacheslav committed rVYOSONEX58a20e42087c: vyos.util: extend process_named_running() signature with cmdline (authored by c-po).
GitHub <[email protected]> committed rVYOSONEX616bdb5299bf: Merge pull request #2127 from sever-sever/T2298-eq (authored by c-po).
- How is the physical topology (can you provide a drawing)?
I am having this exact problem and it evidently has been a problem for quite a few years.
Can this be accomplished with LUKS?
Aug 11 2023
Aug 11 2023
That CLI node ipv6 only implements a minor subset of the entire featureset of port forwarding.
c-po changed the status of T5467: ospf(v3): removing an interface from the OSPF process does not clear FRR configuration from Open to In progress.
GitHub <[email protected]> committed rVYOSONEX482f7e352272: Merge pull request #2016 from nicolas-fort/T5160 (authored by c-po).
GitHub <[email protected]> committed rVYOSONEX142ace2a16fc: Merge pull request #2148 from sever-sever/T5448 (authored by dmbaturin).
Adding comments : maybe discontinue show ip bgp gives some issues / problems with automation tools (ansible o some custom script)While thinking out loud, it can be useful for new users create to alias.
Its not possible to "symlink" it?
c-po changed the status of T5465: adjust-mss: config migration fails if applied to a VLAN or Q-in-Q interface, a subtask of T3090: Move 'adjust-mss' firewall options to the interface section., from Open to In progress.
c-po changed the status of T5465: adjust-mss: config migration fails if applied to a VLAN or Q-in-Q interface from Open to In progress.
Unfortunately this is "not that easy" as out CLI commands are passed down to FRR raw.
c-po moved T5459: ospfv3: add authentication support from Open to In Progress on the VyOS 1.4 Sagitta board.
c-po moved T5461: Improve rootfs directory variable from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T5464: ipv6: add support for per-interface dad (duplicate address detection) setting from Open to In Progress on the VyOS 1.4 Sagitta board.
GitHub <[email protected]> committed rVYOSONEX11f46a2b4f85: T5440: Restore pre/postconfig scripts if user deleted them (authored by Apachez).
But at the same time it would help others who migrate to VyOS from Cisco, Arista etc.
jestabro closed T5434: Replace remaining calls of vyos.xml library, a subtask of T5218: Revise vyos xml lib for bug fixes and extensions, as Resolved.
jestabro closed T5319: Remove remaining workarounds for incorrect defaults, a subtask of T5308: Remove workarounds for incorrect defaults in get_interface_dict, as Resolved.
Viacheslav renamed T5462: Add actual Openssl version 1.1.1v from Add acual Openssl version 1.1.1v to Add actual Openssl version 1.1.1v.
show ip bgp is an old command, it comes from quagga ...So in my point of view , adding more command to do the same , could generate more confusion . show bgp address-family should be used.
Viacheslav changed the subtype of T5462: Add actual Openssl version 1.1.1v from "Bug" to "Feature Request".
Viacheslav moved T5416: Ignoring "ipsec match-none" for firewall from Open to Finished on the VyOS 1.4 Sagitta board.
GitHub <[email protected]> committed rVYOSONEX43294da10313: Merge pull request #2147 from jestabro/remaining-defaults (authored by Viacheslav).
PR created: https://github.com/vyos/vyatta-op/pull/66
GitHub <[email protected]> committed rVYOSONEX4659f25804bd: Merge pull request #2146 from dmbaturin/T5270-openvpn-dh-optional (authored by c-po).
Aug 10 2023
Aug 10 2023
Its good for traceability to get a snmp trap sent when the firewall config has been altered/changed/(re-)applied.
GitHub <[email protected]> committed rVYOSONEXbfbd7273b331: Merge pull request #2140 from sever-sever/T5448 (authored by dmbaturin).
Apachez added a comment to T5458: USB Console options is missing for a new image after "add system image" upgrade.
Yeah, no worries.
Im biased but here are my testresults using modified VyOS 1.4-rolling-202308060317:
unity added a comment to T5458: USB Console options is missing for a new image after "add system image" upgrade.
@Apachez thank you for your response 🙏
Sorry, I really have attached screenshots but didn't grant access to them. Fixed.
Viacheslav changed the status of T5457: Add environmental variable pointing to current rootfs directory from In progress to Needs testing.
Some internal test where done, using integration between:
- Traffic shaper. Currently supported in vyos cli
- Bridge firewall. Currently not supported in vyos cli.
Viacheslav committed rVYOSONEXe27f566f0f65: T5329 : priority: tunnel config is committed before wireguard (authored by SrividyaA).
GitHub <[email protected]> committed rVYOSONEX80465e2cb222: Merge pull request #2126 from sever-sever/T5329-eq (authored by c-po).