That would be nice, but it will require a very different approach — there's no quick fix.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Jan 10 2024
Jan 10 2024
dmbaturin triaged T4541: Improve `strip-private` to make stripped configs reproducible as Low priority.
dmbaturin triaged T4529: Backtrace for config-archive when netwofrk is not configured as Low priority.
dmbaturin added a comment to T4488: allow manual configuration changes of interfaces created by high-availability with rfc3768-compatibility option .
dmbaturin triaged T4455: smp-affinity required by some platforms but doesn't exists in the CLI as Normal priority.
Maybe it's working with Kea already in 1.5?
dmbaturin changed Is it a breaking change? from none to compatible on T4451: The DHCPv6 server leases function the display of the hostname.
dmbaturin triaged T4451: The DHCPv6 server leases function the display of the hostname as Low priority.
dmbaturin triaged T4425: Hide DHCP leases from interfaces without active DHCP client as Low priority.
dmbaturin triaged T4422: WAN load-balance status failed on all interfaces if one of them failed as Normal priority.
dmbaturin triaged T4406: Make an API endpoint for for anonymous host info retrieval (e.g. by a login page) as Normal priority.
dmbaturin triaged T4401: Networking needs to be reset during config boot (in some environments) as Low priority.
dmbaturin triaged T4399: nhrp - add or delete nhrp tunnel restart opennhrp process as High priority.
dmbaturin changed Is it a breaking change? from none to compatible on T4285: Add integration with Teleport.
sarthurdev moved T5614: Add conntrack helper matching on firewall from Open to Finished on the VyOS 1.5 Circinus board.
sarthurdev moved T5787: dhcp-server allows duplicate static-mapping for the same IP address from Open to In Progress on the VyOS 1.4 Sagitta board.
sarthurdev added a comment to T5787: dhcp-server allows duplicate static-mapping for the same IP address.
dmbaturin added a comment to T4256: Display static DHCP server leases in the operational command output.
Kea doesn't have that issue, and in 1.5 rolling release builds, static leases are already displayed in show dhcp server leases. But in ISC DHCPd, which is unmaintained, I'm not sure if we should switch from the tried and proved static leases to anything else.
dmbaturin renamed T4256: Display static DHCP server leases in the operational command output from Add support of reserved lease to dhcpd to Display static DHCP server leases in the operational command output.
sarthurdev moved T5550: Source validation on interface does not work properly from Open to Finished on the VyOS 1.5 Circinus board.
sarthurdev added a project to T5550: Source validation on interface does not work properly: VyOS 1.5 Circinus.
dmbaturin edited projects for T4256: Display static DHCP server leases in the operational command output, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin triaged T4114: Allow software running as systemd service write coredumps as Normal priority.
Viacheslav moved T5918: Verification problem for `set vpn ipsec interface` from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav changed the status of T5918: Verification problem for `set vpn ipsec interface` from Open to In progress.
No, installing the miniupnpd_functions.sh file does not correct the problem.
Another bug it that /config/upnp.leases is hardcoded, but there is no script who creates it https://github.com/vyos/vyos-1x/blob/aebb458262072457c6a3840d1b17031fbd780eca/data/templates/firewall/upnpd.conf.j2#L128
sarthurdev changed the status of T5814: VyOS 1.3 to 1.4 LTS Firewall ruleset migration script breaks configuration from In progress to Needs testing.
Viacheslav moved T5916: Added segment routing check for index size and SRGB size from Open to Finished on the VyOS 1.5 Circinus board.
Viacheslav added a project to T5916: Added segment routing check for index size and SRGB size : VyOS 1.5 Circinus.
Will it work if you manually download the functions? https://github.com/miniupnp/miniupnp/blob/miniupnpd_2_3_1/miniupnpd/netfilter_nft/scripts/miniupnpd_functions.sh
Can confirm this is exactly the same in 1.4 rolling (as of Jan 09). Same errors. The miniupnpd daemon receives the request (for either a UPnP, NAT-PMP, or PCP port mapping) and then reports the errors @simplysoft reports in the description.
c-po closed T5766: http: rewrite conf-mode script to get_config_dict() , a subtask of T5782: Use a single config mode script for https and http-api, as Resolved.
c-po closed T5766: http: rewrite conf-mode script to get_config_dict() , a subtask of T5768: Remove auxiliary http-api.conf for simplification of http-api config mode script, as Resolved.
c-po closed T5911: pki: service update ignored if certificate name contains a hyphen (-) as Resolved.
c-po moved T5911: pki: service update ignored if certificate name contains a hyphen (-) from Open to Finished on the VyOS 1.4 Sagitta board.
c-po closed T5902: http: remove virtual-host configuration in webserver, a subtask of T5766: http: rewrite conf-mode script to get_config_dict() , as Resolved.
c-po moved T5902: http: remove virtual-host configuration in webserver from In Progress to Finished on the VyOS 1.4 Sagitta board.
c-po closed T5886: Add support for ACME protocol (LetsEncrypt), a subtask of T5894: Extend get_config_dict() with additional parameter with_pki that defaults to False, as Resolved.
c-po moved T5913: Allow for Peer-Groups in ipv4-labeled-unicast SAFI from Open to Finished on the VyOS 1.5 Circinus board.
c-po changed the status of T5913: Allow for Peer-Groups in ipv4-labeled-unicast SAFI from Open to In progress.
sarthurdev changed the status of T5814: VyOS 1.3 to 1.4 LTS Firewall ruleset migration script breaks configuration from Open to In progress.
jestabro added a comment to T5917: Restore annotations of (running)/(default boot) in select image list.
jestabro triaged T5917: Restore annotations of (running)/(default boot) in select image list as Normal priority.
jestabro changed Issue type from unspecified to feature on T3441: More intelligent config loading scripts.
Viacheslav changed the status of T190: two factor authentication for OpenVPN remote VPN tunnels from Open to Needs testing.
It seems we already have mfa T3834 but it never was documented
https://github.com/vyos/vyos-1x/pull/1008
vyos@r4# set interfaces openvpn vtun0 server mfa totp
Possible completions:
challenge Expect password as result of a challenge response protocol
(default: enable)
digits Number of digits to use for totp hash (default: 6)
drift Time drift in seconds (default: 0)
slop Maximum allowed clock slop in seconds (default: 180)
step Step value for totp in seconds (default: 30)@xrobau Could you test it?
Dec 9 13:04:57 vyos charon: 07[IKE] no matching CHILD_SA config found
Do you have several connections from the hosts behind the same NAT external address to the same hub?
It worked in my previous tests, but it was just one host behind NAT to connect to the HUB.
Re-check please and close if it works fine now. Need to update.
@amcmillen Do you have any examples of how to deploy it on Linux / Debian, etc?
Without live examples, we'll mark it as wont fix and task will be closed.
@ordex Les us know if you have some ideas
Thanks
Viacheslav edited projects for T190: two factor authentication for OpenVPN remote VPN tunnels, added: VyOS 1.5 Circinus; removed VyOS 1.3 Equuleus (1.3.6).
sarthurdev moved T5912: DHCP Static mapping don't work on every first lease from Open to In Progress on the VyOS 1.5 Circinus board.
sarthurdev changed the status of T5912: DHCP Static mapping don't work on every first lease, a subtask of T3316: Use Kea DHCP(v6) instead of ISC DHCP(v6), from Confirmed to Needs testing.
sarthurdev changed the status of T5912: DHCP Static mapping don't work on every first lease from Confirmed to Needs testing.
sarthurdev changed the status of T5787: dhcp-server allows duplicate static-mapping for the same IP address from In progress to Needs testing.
PR for scoped options and bugfixes: https://github.com/vyos/vyos-1x/pull/2785
n.fort changed the status of T5915: Firewall zone - Re add op-mode commands from Confirmed to In progress.
I tried manually loading this config in a VM and I'm still not sure what's causing the issue, maybe something isn't waiting properly for bonded interfaces to be created?:
vyos@vyos# load config.boot-cr01a-vyos.20240109_232428 Loading configuration from 'config.boot-cr01a-vyos.20240109_232428' Load complete. Use 'commit' to make changes effective. [edit] vyos@vyos# commit
@himurae, Permission and ownership of config directory and files and fine. If you are still seeing the DHCP leases not being created, something else is probably going on.
Jan 9 2024
Jan 9 2024
sarthurdev changed the status of T5787: dhcp-server allows duplicate static-mapping for the same IP address from Open to In progress.
I stopped using conntrack-sync before I moved to 1.3 (which I am currently running) so I can't confirm either way.
I expect it's no longer an issue though and this task can be closed.
sarthurdev changed the status of T5912: DHCP Static mapping don't work on every first lease, a subtask of T3316: Use Kea DHCP(v6) instead of ISC DHCP(v6), from Open to Confirmed.