@giuavo I didn't test "default route", only regular routes for some prefixes, and it worked.
Could you create a PR?
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Nov 7 2023
Nov 7 2023
Viacheslav added a comment to T5722: Commit failure when trying to add a route in failover if the gateway is not in the same interface network.
Viacheslav added a project to T5720: PPPoE-server adding new interface does not work: VyOS 1.4 Sagitta.
Backport to 1.4 https://github.com/vyos/vyos-1x/pull/2449
Nov 6 2023
Nov 6 2023
Viacheslav changed the status of T5716: PPPoE-server shaper template bug down-limiter option does not rely on fwmark from Open to In progress.
Viacheslav moved T5704: PPPoE-server add max-starting option from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav edited projects for T5715: IPSec VPN: restart vpn is not working, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus (1.3.4).
Viacheslav edited projects for T5714: IPSec VPN: op-mode: "show log vpn" does not show results, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus (1.3.4).
Nov 5 2023
Nov 5 2023
Nov 4 2023
Nov 4 2023
Viacheslav changed the status of T5706: Systemd-udevd high CPU utilization for multiple dynamic ppp/l2tp/ipoe interfaces from Open to In progress.
Viacheslav added a comment to T5702: Add ability to set include_ifmib_iface_prefix and ifmib_max_num_ifaces for SNMP.
PR https://github.com/vyos/vyos-1x/pull/2434
set service snmp community public client '127.0.0.1' set service snmp mib interface-max '25' set service snmp mib interface 'eth' set service snmp mib interface 'bond'
Viacheslav changed the status of T5702: Add ability to set include_ifmib_iface_prefix and ifmib_max_num_ifaces for SNMP from Open to In progress.
Viacheslav updated the task description for T5702: Add ability to set include_ifmib_iface_prefix and ifmib_max_num_ifaces for SNMP.
Nov 3 2023
Nov 3 2023
Viacheslav moved T5700: Monitoring telegraf deprecated plugins inputs outputs from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav added a comment to T5706: Systemd-udevd high CPU utilization for multiple dynamic ppp/l2tp/ipoe interfaces .
To fix it
sudo nano -c /lib/udev/rules.d/99-systemd.rules
Find sysctl line
# Apply sysctl variables to network devices (and only to those) as they appear. ACTION=="add", SUBSYSTEM=="net", KERNEL!="lo", RUN+="/lib/systemd/systemd-sysctl --prefix=/net/ipv4/conf/$name --prefix=/net/ipv4/neigh/$name --prefix=/net/ipv6/conf/$name --prefix=/net/ipv6/neigh/$name"
Replace to:
# Apply sysctl variables to network devices (and only to those) as they appear. ACTION=="add", SUBSYSTEM=="net", KERNEL!="lo|ppp*|ipoe*", RUN+="/lib/systemd/systemd-sysctl --prefix=/net/ipv4/conf/$name --prefix=/net/ipv4/neigh/$name --prefix=/net/ipv6/conf/$name --prefix=/net/ipv6/neigh/$name"
Viacheslav triaged T5706: Systemd-udevd high CPU utilization for multiple dynamic ppp/l2tp/ipoe interfaces as High priority.
Viacheslav added a comment to T5706: Systemd-udevd high CPU utilization for multiple dynamic ppp/l2tp/ipoe interfaces .
vyos@r4:~$ sudo udevadm monitor KERNEL[717.626843] remove /devices/virtual/net/ppp3466/queues/rx-0 (queues) KERNEL[717.626859] remove /devices/virtual/net/ppp3466/queues/tx-0 (queues) KERNEL[717.626903] remove /devices/virtual/net/ppp3466 (net) KERNEL[717.635679] remove /devices/virtual/net/ppp3468/queues/rx-0 (queues) KERNEL[717.635695] remove /devices/virtual/net/ppp3468/queues/tx-0 (queues) KERNEL[717.635769] remove /devices/virtual/net/ppp3468 (net) KERNEL[717.636144] remove /devices/virtual/net/ppp3469/queues/rx-0 (queues) KERNEL[717.636155] remove /devices/virtual/net/ppp3469/queues/tx-0 (queues) KERNEL[717.636181] remove /devices/virtual/net/ppp3469 (net) KERNEL[717.636536] remove /devices/virtual/net/ppp3458/queues/rx-0 (queues) KERNEL[717.636548] remove /devices/virtual/net/ppp3458/queues/tx-0 (queues) KERNEL[717.636614] remove /devices/virtual/net/ppp3458 (net) KERNEL[717.648940] remove /devices/virtual/net/ppp3470/queues/rx-0 (queues) KERNEL[717.648965] remove /devices/virtual/net/ppp3470/queues/tx-0 (queues) KERNEL[717.649018] remove /devices/virtual/net/ppp3470 (net) KERNEL[717.662658] remove /devices/virtual/net/ppp3473/queues/rx-0 (queues) KERNEL[717.662694] remove /devices/virtual/net/ppp3473/queues/tx-0 (queues) KERNEL[717.662705] remove /devices/virtual/net/ppp3473 (net) KERNEL[717.663198] remove /devices/virtual/net/ppp3471/queues/rx-0 (queues) KERNEL[717.663211] remove /devices/virtual/net/ppp3471/queues/tx-0 (queues) KERNEL[717.663255] remove /devices/virtual/net/ppp3471 (net) KERNEL[717.663423] remove /devices/virtual/net/ppp3472/queues/rx-0 (queues) KERNEL[717.663436] remove /devices/virtual/net/ppp3472/queues/tx-0 (queues) KERNEL[717.663465] remove /devices/virtual/net/ppp3472 (net) ^C
Viacheslav renamed T5709: IPoE-server fails if next pool mentioned but not defined from IPoE server fails if next pool mentioned but not defined to IPoE-server fails if next pool mentioned but not defined.
Nov 2 2023
Nov 2 2023
Viacheslav changed the status of T5700: Monitoring telegraf deprecated plugins inputs outputs from Open to In progress.
Viacheslav changed the status of T5705: rsyslog - Not working when using facility=all from In progress to Needs testing.
Viacheslav changed the status of T5704: PPPoE-server add max-starting option from Open to In progress.
In T5681#163634, @JeffWDH wrote:When moving from vyos-1.5-rolling-202310090023 to vyos-1.5-rolling-202311020022 all of my inbound-interfaces got dropped from my firewall config. The NAT ones got migrated successfully.
Snippet from vyos-migrate.log:
List of executed migration scripts: List of executed migration scripts: List of executed migration scripts: /opt/vyatta/etc/config-migrate/migrate/cluster/1-to-2 /opt/vyatta/etc/config-migrate/migrate/interfaces/31-to-32 /opt/vyatta/etc/config-migrate/migrate/nat/5-to-6 - op: delete path: ['nat', 'source', 'rule', '40', 'outbound-interface'] - op: set path: ['nat', 'source', 'rule', '40', 'outbound-interface', 'interface-name'] value: vtun0 replace: True - op: delete path: ['nat', 'source', 'rule', '41', 'outbound-interface'] - op: set path: ['nat', 'source', 'rule', '41', 'outbound-interface', 'interface-name'] value: vtun1 replace: True <omitted a bunch of NAT rules> /opt/vyatta/etc/config-migrate/migrate/nat/6-to-7 - op: delete path: ['nat', 'source', 'rule', '40', 'outbound-interface', 'interface-name'] - op: set path: ['nat', 'source', 'rule', '40', 'outbound-interface', 'name'] value: vtun0 replace: True - op: delete path: ['nat', 'source', 'rule', '41', 'outbound-interface', 'interface-name'] - op: set path: ['nat', 'source', 'rule', '41', 'outbound-interface', 'name'] value: vtun1 replace: True <omitted a bunch of NAT rules> /opt/vyatta/etc/config-migrate/migrate/nat66/1-to-2After readding them with the new syntax all is good, but it looks like for some reason the migration script didn't run on my system.
Part of those is fixed with telegraf update in T5701
Nov 1 2023
Nov 1 2023
Viacheslav moved T5701: Update telegraf package from Open to Finished on the VyOS 1.5 Circinus board.
Viacheslav added a comment to T4726: Add completion and validation for the accel-ppp RADIUS vendor option.
There is a bug when we use lowercase "cisco"
set service pppoe-server authentication radius rate-limit vendor 'cisco'
It doesn't work as vendor is Cisco not cisco
vyos@vyos-lns# sudo cat /usr/share/accel-ppp/radius/dictionary.cisco | grep -i vendor VENDOR Cisco
PR for 1.4 https://github.com/vyos/vyos-build/pull/451
Fix build PR https://github.com/vyos/vyos-build/pull/450
Oct 31 2023
Oct 31 2023
Viacheslav changed the status of T5586: Disable by default SNMP for Keepalived VRRP from In progress to Needs testing.
Viacheslav renamed T5702: Add ability to set include_ifmib_iface_prefix and ifmib_max_num_ifaces for SNMP from Add ability to set include_ifmib_iface_prefix for SNMP to Add ability to set include_ifmib_iface_prefix and ifmib_max_num_ifaces for SNMP.
Viacheslav changed the status of T5695: Build FRR with LUA scripts --enable-scripting option from Open to Needs testing.
Oct 30 2023
Oct 30 2023
Oct 28 2023
Oct 28 2023
Viacheslav updated the task description for T5695: Build FRR with LUA scripts --enable-scripting option.
Viacheslav updated the task description for T5695: Build FRR with LUA scripts --enable-scripting option.
Oct 27 2023
Oct 27 2023
Is your WAN interface also in net 192.168.0.0/16?
Viacheslav changed the status of T4057: Commit time for deleting sflow configuration ~1.5 min from Open to Needs testing.
Viacheslav moved T3774: atop logs are not limited in size from Open to Finished on the VyOS 1.4 Sagitta board.
Should be fixed in https://vyos.dev/T5232
needs to re-check
Oct 26 2023
Oct 26 2023
Viacheslav moved T5683: reverse-proxy pki filenames mismatch from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav changed the status of T5684: services using VRF generates the error "Failed to load BPF prog: 'Operation not permitted'" when the system boots. from In progress to Needs testing.
Do you have any idea for CLI?
Oct 25 2023
Oct 25 2023
Viacheslav changed the status of T5683: reverse-proxy pki filenames mismatch from Open to In progress.
Oct 24 2023
Oct 24 2023
Viacheslav added a project to T5682: create more robust access controls for sshd and snmpd: VyOS 1.5 Circinus.
Viacheslav added a project to T3722: op-mode IPSec show vpn ike sa always shows L-TIME 0: VyOS 1.5 Circinus.
So, do you want to add a new syntax to archive the same behavior that we have for qos policy ?
The global state-policy was dropped from CLI.
Close it for now.
Oct 23 2023
Oct 23 2023
Viacheslav moved T5299: QoS shaper ceiling does not work from Open to Finished on the VyOS 1.5 Circinus board.
Viacheslav closed T5299: QoS shaper ceiling does not work, a subtask of T5048: QoS doesn't work correctly root task, as Resolved.
Viacheslav changed the status of T5677: show lldp neighbors generates TypeError when neighbor has no `descr` from Open to Needs testing.
Oct 22 2023
Oct 22 2023
Viacheslav changed the status of T5299: QoS shaper ceiling does not work, a subtask of T5048: QoS doesn't work correctly root task, from Open to Needs testing.
Viacheslav changed the status of T5299: QoS shaper ceiling does not work from Open to Needs testing.
Viacheslav renamed T5646: QoS policy limiter broken if class without match from QoS policy limiter broken to QoS policy limiter broken if class without match.