I was able to fix by adding the following code in /config/scripts/vyos-postconfig-bootup.script you can edit and save by running:
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Aug 13 2023
Aug 13 2023
Aug 12 2023
Aug 12 2023
I can confirm that the issue is still here, something is wrong and usually when you assign ipv6 address to sub-interface like vlan or bridge etc.
How is your IPv6 config from the VyOS config?
GitHub <noreply@github.com> committed rVYOSONEX485585e19e7a: Merge pull request #2117 from zdc/T5410-sagitta (authored by dmbaturin).
Enabled inside VyOS kernel - please check with the next available rolling ISO
c-po changed the status of T5470: wlan: can not disable interface if SSID is not configured from Open to In progress.
- Vyos Router <-> Switch <-> Multiple Computers
A workaround in the meantime:
And in that case the attacker would just replace your router with their own since they already got physical access to the box.
There are use cases when it would be ideal to force a password at boot to protect the contents of the configuration. For example, a portable router with sensitive keys meant for temporary network connectivity.
The problem is how to make sure that the router can boot and reboot (for example "set system option reboot-on-panic" is handy) on itself without somebody having to connect to its console before it starts to function again. Really shitty situation for a remote site because then somebody needs to visit it aswell.
Viacheslav committed rVYOSONEX58a20e42087c: vyos.util: extend process_named_running() signature with cmdline (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX616bdb5299bf: Merge pull request #2127 from sever-sever/T2298-eq (authored by c-po).
- How is the physical topology (can you provide a drawing)?
I am having this exact problem and it evidently has been a problem for quite a few years.
Can this be accomplished with LUKS?
Aug 11 2023
Aug 11 2023
That CLI node ipv6 only implements a minor subset of the entire featureset of port forwarding.
c-po changed the status of T5467: ospf(v3): removing an interface from the OSPF process does not clear FRR configuration from Open to In progress.
GitHub <noreply@github.com> committed rVYOSONEX482f7e352272: Merge pull request #2016 from nicolas-fort/T5160 (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX142ace2a16fc: Merge pull request #2148 from sever-sever/T5448 (authored by dmbaturin).
Adding comments : maybe discontinue show ip bgp gives some issues / problems with automation tools (ansible o some custom script)While thinking out loud, it can be useful for new users create to alias.
Its not possible to "symlink" it?
c-po changed the status of T5465: adjust-mss: config migration fails if applied to a VLAN or Q-in-Q interface, a subtask of T3090: Move 'adjust-mss' firewall options to the interface section., from Open to In progress.
c-po changed the status of T5465: adjust-mss: config migration fails if applied to a VLAN or Q-in-Q interface from Open to In progress.
Unfortunately this is "not that easy" as out CLI commands are passed down to FRR raw.
c-po moved T5459: ospfv3: add authentication support from Open to In Progress on the VyOS 1.4 Sagitta board.
c-po moved T5461: Improve rootfs directory variable from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T5464: ipv6: add support for per-interface dad (duplicate address detection) setting from Open to In Progress on the VyOS 1.4 Sagitta board.
GitHub <noreply@github.com> committed rVYOSONEX11f46a2b4f85: T5440: Restore pre/postconfig scripts if user deleted them (authored by Apachez).
But at the same time it would help others who migrate to VyOS from Cisco, Arista etc.
jestabro closed T5434: Replace remaining calls of vyos.xml library, a subtask of T5218: Revise vyos xml lib for bug fixes and extensions, as Resolved.
jestabro closed T5319: Remove remaining workarounds for incorrect defaults, a subtask of T5308: Remove workarounds for incorrect defaults in get_interface_dict, as Resolved.
Viacheslav renamed T5462: Add actual Openssl version 1.1.1v from Add acual Openssl version 1.1.1v to Add actual Openssl version 1.1.1v.
show ip bgp is an old command, it comes from quagga ...So in my point of view , adding more command to do the same , could generate more confusion . show bgp address-family should be used.
Viacheslav changed the subtype of T5462: Add actual Openssl version 1.1.1v from "Bug" to "Feature Request".
Viacheslav moved T5416: Ignoring "ipsec match-none" for firewall from Open to Finished on the VyOS 1.4 Sagitta board.
GitHub <noreply@github.com> committed rVYOSONEX43294da10313: Merge pull request #2147 from jestabro/remaining-defaults (authored by Viacheslav).
PR created: https://github.com/vyos/vyatta-op/pull/66