Page MenuHomeVyOS Platform
Feed All Stories

Aug 22 2020

c-po closed T2821: Support DHCPv6-PD without "address dhcpv6", a subtask of T2677: Proposal for clearer DHCPv6-PD configuration options, as Resolved.
Aug 22 2020, 11:19 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2821: Support DHCPv6-PD without "address dhcpv6" as Resolved.
Aug 22 2020, 11:19 PM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T2821: Support DHCPv6-PD without "address dhcpv6", a subtask of T2677: Proposal for clearer DHCPv6-PD configuration options, from Open to In progress.
Aug 22 2020, 10:06 PM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T2821: Support DHCPv6-PD without "address dhcpv6" from Open to In progress.
Aug 22 2020, 10:06 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2821: Support DHCPv6-PD without "address dhcpv6".
Aug 22 2020, 10:06 PM · VyOS 1.3 Equuleus (1.3.0)
erkin closed T2647: ipsec disableuniqreqids generate a wrong ipsec.conf as Resolved.
Aug 22 2020, 3:02 PM · VyOS 1.2 Crux (VyOS 1.2.7)
marekm added a comment to T2820: BGP crash in if_destroy_via_zapi.

Maybe related - https://github.com/FRRouting/frr/issues/6439

Aug 22 2020, 2:50 PM · VyOS 1.2 Crux
marekm created T2820: BGP crash in if_destroy_via_zapi.
Aug 22 2020, 2:21 PM · VyOS 1.2 Crux
jack9603301 added a comment to T2518: Add support for IPv6 NAT (NPTv6).

The SNPT and DNPT functions are basically implemented, but because they have not been reviewed and approved for the time being, they enter the hold state, waiting for processing and discussion

Aug 22 2020, 2:12 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
jack9603301 changed the status of T2518: Add support for IPv6 NAT (NPTv6) from In progress to On hold.
Aug 22 2020, 2:09 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
c-po renamed T2819: Evaluate DDNS (Dynamic DNS client) as successor to ddclient from Evaluate DDNS (Dynamic DNS client for IPFire) as successor to ddclient to Evaluate DDNS (Dynamic DNS client) as successor to ddclient.
Aug 22 2020, 1:51 PM
c-po renamed T2819: Evaluate DDNS (Dynamic DNS client) as successor to ddclient from Evaluate DDNS (Dynamic DNS client for IPFire.) as successor to ddclient to Evaluate DDNS (Dynamic DNS client for IPFire) as successor to ddclient.
Aug 22 2020, 1:51 PM
c-po created T2819: Evaluate DDNS (Dynamic DNS client) as successor to ddclient.
Aug 22 2020, 1:51 PM
c-po placed T2769: Add VRF support for syslog up for grabs.
Aug 22 2020, 1:21 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po added a comment to T2769: Add VRF support for syslog.

Enabling this requires a full rewrite of syslog as also the configuration must be altered, see example at https://manpages.debian.org/testing/rsyslog/rsyslog.conf.5.en.html

Aug 22 2020, 1:21 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
Cheeze_It added a comment to T2081: Support Ethernet over IP (EoIP) .

Version of Vyos I have is:

Aug 22 2020, 5:34 AM · VyOS 1.5 Circinus

Aug 21 2020

craterman added a comment to T915: MPLS Support.

@craterman Can you share an example of a configuration or how it looks in the frr? So that I can reproduce this in a test lab.
And share additional show the output and what you expect to see.

Aug 21 2020, 4:38 AM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

Aug 20 2020

c-po added a comment to T2818: Add the possibility to passthrough LLDP, LACP, etc..

bitmap is too nerdy, just use a multinode withe the mentioned capabilities in human readable form.

Aug 20 2020, 9:31 PM
c-po committed rVYOSONEX50a7544ad69c: Debian: alphabetically sort (build-)dependencies.
Aug 20 2020, 9:20 PM
c-po committed rVYOSONEX2be5f188b6eb: lcd: T2564: add lcdproc dependency.
Aug 20 2020, 9:18 PM
c-po committed rVYOSONEX654a96285721: Debian: alphabetically sort (build-)dependencies.
Aug 20 2020, 9:18 PM
c-po committed rVYOSONEX16f6fc66429a: Debian: alphabetically sort (build-)dependencies.
Aug 20 2020, 8:55 PM
Unknown Object (User) created T2818: Add the possibility to passthrough LLDP, LACP, etc..
Aug 20 2020, 8:36 PM
c-po committed rVYOSONEX20e66514c00c: lcd: T2564: remove lcdproc-extra-drivers package.
Aug 20 2020, 8:27 PM
shaferstockton created T2817: Bring back the event-handler.
Aug 20 2020, 6:36 PM · VyOS 1.3 Equuleus (1.3.0)
dmbaturin changed the status of T2081: Support Ethernet over IP (EoIP) from Open to Needs testing.

According to https://help.mikrotik.com/docs/pages/viewpage.action?pageId=24805521 , "EoIP" is simply Ethernet over GRE. We already support that, with the "gre-bridge" encapsulation.

Aug 20 2020, 4:13 PM · VyOS 1.5 Circinus
dmbaturin added a comment to T2126: show vpn ipsec sa IPSec - Process NOT Running.

@erkin Could you verify if this is reproducible?

Aug 20 2020, 4:02 PM · VyOS 1.3 Equuleus (1.3.0)
dmbaturin assigned T2126: show vpn ipsec sa IPSec - Process NOT Running to erkin.
Aug 20 2020, 4:02 PM · VyOS 1.3 Equuleus (1.3.0)
dmbaturin merged task T2540: Support XFRM interfaces for route based IPSEC into T1441: Add support for IPSec XFRM interfaces.
Aug 20 2020, 4:01 PM
dmbaturin merged T2540: Support XFRM interfaces for route based IPSEC into T1441: Add support for IPSec XFRM interfaces.
Aug 20 2020, 4:01 PM · VyOS 1.4 Sagitta
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T2806: ipsec generates false warning on commit when local prefix is sourced from loopback.
Aug 20 2020, 4:00 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T2806: ipsec generates false warning on commit when local prefix is sourced from loopback: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 4:00 PM · VyOS 1.2 Crux (VyOS 1.2.8)
dmbaturin assigned T2647: ipsec disableuniqreqids generate a wrong ipsec.conf to erkin.
Aug 20 2020, 3:59 PM · VyOS 1.2 Crux (VyOS 1.2.7)
dmbaturin removed a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T2647: ipsec disableuniqreqids generate a wrong ipsec.conf.
Aug 20 2020, 3:58 PM · VyOS 1.4 Sagitta
dmbaturin removed a parent task for T2647: ipsec disableuniqreqids generate a wrong ipsec.conf: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:58 PM · VyOS 1.2 Crux (VyOS 1.2.7)
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T2647: ipsec disableuniqreqids generate a wrong ipsec.conf.
Aug 20 2020, 3:57 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T2647: ipsec disableuniqreqids generate a wrong ipsec.conf: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:57 PM · VyOS 1.2 Crux (VyOS 1.2.7)
dmbaturin added a parent task for T2641: Rewrite vpn ipsec OP commands in new style XML syntax: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:57 PM · VyOS 1.4 Sagitta
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T2641: Rewrite vpn ipsec OP commands in new style XML syntax.
Aug 20 2020, 3:57 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T2639: sort output of show vpn ipsec sa : T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:57 PM · VyOS 1.3 Equuleus (1.3.0)
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T2639: sort output of show vpn ipsec sa .
Aug 20 2020, 3:57 PM · VyOS 1.4 Sagitta
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T2620: Add ipsec peer-name to log to simplifies grepping and troubleshooting.
Aug 20 2020, 3:56 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T2620: Add ipsec peer-name to log to simplifies grepping and troubleshooting: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:56 PM · VyOS 1.2 Crux (VyOS 1.2.8)
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T2049: Update strongSwan cipher suites list for IPSec settings.
Aug 20 2020, 3:55 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T2049: Update strongSwan cipher suites list for IPSec settings: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:55 PM · VyOS 1.3 Equuleus (1.3.0)
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T1501: VPN Commit Errors.
Aug 20 2020, 3:55 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T1501: VPN Commit Errors: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:55 PM · VyOS 1.3 Equuleus (1.3.0), test
dmbaturin merged T1363: output from "show vpn ipsec sa" bugged into T1319: 'show vpn ipsec sa' throws errors .
Aug 20 2020, 3:54 PM
dmbaturin merged task T1363: output from "show vpn ipsec sa" bugged into T1319: 'show vpn ipsec sa' throws errors .
Aug 20 2020, 3:54 PM
dmbaturin removed a project from T1363: output from "show vpn ipsec sa" bugged: VyOS 1.3 Equuleus.
Aug 20 2020, 3:54 PM
dmbaturin closed T1339: When configuring L2TP with IPsec on 1.2.0 (201904160337), the `xl2tpd` daemon isn't automatically started as Resolved.

xl2tpd has been long replaced with accel-ppp, so this shouldn't be an issue anymore.

Aug 20 2020, 3:52 PM
Cheeze_It added a comment to T915: MPLS Support.

Ok, I got the new version of code and here is what I found. As a baseline here's the Vyos config, and it's more or less the same as before but I moved lab environments:

Aug 20 2020, 3:52 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta
dmbaturin closed T1319: 'show vpn ipsec sa' throws errors as Resolved.

It's been working for a while, so I think this is safe to close.

Aug 20 2020, 3:51 PM
dmbaturin closed T1256: Execute "show ipsec vpn ipsec sa" returns incorrect results as Resolved.
Aug 20 2020, 3:50 PM · VyOS 1.2 Crux (VyOS 1.2.0-rc10)
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T1233: ipsec vpn sa showing down.
Aug 20 2020, 3:50 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T1233: ipsec vpn sa showing down: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:50 PM · VyOS 1.4 Sagitta
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T1210: About IKEv2 IPSec VPN remote access.
Aug 20 2020, 3:49 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T1210: About IKEv2 IPSec VPN remote access: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:49 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T1101: Spoke site dynamic IP over NAT connect to Hub site: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:47 PM
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T1101: Spoke site dynamic IP over NAT connect to Hub site.
Aug 20 2020, 3:47 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T1070: SWANCTL: DMVPN: ALL peers are deleted in swan when opennhrp tries to delete ONE peer: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:47 PM · Bugs, VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-GA), Restricted Project
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T1070: SWANCTL: DMVPN: ALL peers are deleted in swan when opennhrp tries to delete ONE peer.
Aug 20 2020, 3:47 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T842: Adopt VyOS CLI to latest StrongSwan options and deprecated Keywords: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:47 PM · VyOS 1.4 Sagitta
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T842: Adopt VyOS CLI to latest StrongSwan options and deprecated Keywords.
Aug 20 2020, 3:47 PM · VyOS 1.4 Sagitta
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T645: Allow multiple prefixes in ipsec tunnel.
Aug 20 2020, 3:46 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T645: Allow multiple prefixes in ipsec tunnel: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:46 PM · VyOS 1.4 Sagitta
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T627: IPSec configuration directive deletion fails, causes bad IPSec state on reboot. .
Aug 20 2020, 3:46 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T627: IPSec configuration directive deletion fails, causes bad IPSec state on reboot. : T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:46 PM · VyOS 1.2 Crux (VyOS 1.2.7)
dmbaturin added a parent task for T406: VPN configuration error: IPv6 over IPv4 IPsec is not supported when using IPv6 ONLY tunnel.: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:45 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T406: VPN configuration error: IPv6 over IPv4 IPsec is not supported when using IPv6 ONLY tunnel..
Aug 20 2020, 3:45 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T440: VTI/IPSec with dynamic peer: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:45 PM · VyOS 1.3 Equuleus (1.3.6)
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T440: VTI/IPSec with dynamic peer.
Aug 20 2020, 3:45 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T71: Add virtual IP and route installation policy options for IPsec: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:44 PM · Restricted Project, VyOS 1.4 Sagitta
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T71: Add virtual IP and route installation policy options for IPsec.
Aug 20 2020, 3:44 PM · VyOS 1.4 Sagitta
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T66: IPSec v6 over v6 support.
Aug 20 2020, 3:44 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T66: IPSec v6 over v6 support: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:44 PM · Restricted Project
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T57: Make it possible to disable the entire IPsec peer.
Aug 20 2020, 3:44 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T57: Make it possible to disable the entire IPsec peer: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:44 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T2606: ikev2 mobike commit failed : T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:40 PM · VyOS 1.2 Crux
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T2606: ikev2 mobike commit failed .
Aug 20 2020, 3:40 PM · VyOS 1.4 Sagitta
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T1925: DMVPN is always listed as down in "show vpn ipsec sa".
Aug 20 2020, 3:39 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T1925: DMVPN is always listed as down in "show vpn ipsec sa": T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:39 PM · VyOS 1.3 Equuleus (1.3.6)
dmbaturin added a parent task for T1856: Support configuring IPSec SA bytes: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:39 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.0)
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T1856: Support configuring IPSec SA bytes.
Aug 20 2020, 3:39 PM · VyOS 1.4 Sagitta
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T1549: ipsec ikev2 multi usergroup roadwarrior configuration.
Aug 20 2020, 3:39 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T1549: ipsec ikev2 multi usergroup roadwarrior configuration: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:39 PM
dmbaturin added a parent task for T1534: IPSec w/ IKEv2 Invalid local-address "any": T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:38 PM · VyOS 1.4 Sagitta
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T1534: IPSec w/ IKEv2 Invalid local-address "any".
Aug 20 2020, 3:38 PM · VyOS 1.4 Sagitta
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T2728: Protocol option ignored for IPSec peers in transport mode.
Aug 20 2020, 3:38 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T2728: Protocol option ignored for IPSec peers in transport mode: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:38 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
dmbaturin created T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:38 PM · VyOS 1.4 Sagitta
dmbaturin closed T2426: vymgmt unparsable output as Resolved.
Aug 20 2020, 3:34 PM · Python Management Library
dmbaturin closed T2209: Documentation has reference to the old 'user x level admin' option as Resolved.
Aug 20 2020, 3:32 PM · VyOS 1.3 Equuleus (1.3.0), Restricted Project
dmbaturin reassigned T1463: Missing command `show ip bgp scan` appears in command completion from dmbaturin to erkin.
Aug 20 2020, 2:52 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
dmbaturin closed T1665: prefix-list and prefix-list6 rules incorrectly accept a host address where prefix is required as Resolved.
Aug 20 2020, 2:44 PM · VyOS 1.3 Equuleus (1.3.0)
GitHub <noreply@github.com> committed rVYOSONEX6eac2ebc60e6: Merge pull request #532 from erkin/current (authored by dmbaturin).
Aug 20 2020, 1:25 PM
mafiosa added a watcher for VyOS 1.2 Crux: mafiosa.
Aug 20 2020, 10:43 AM
jack9603301 awarded T439: local PBR support a Like token.
Aug 20 2020, 10:32 AM · VyOS 1.4 Sagitta
pasik added a comment to T439: local PBR support.

So I'd love to have this feature back in, but I still don't understand why it was removed. It's ok if it needs to be implemented in some other ways, but for some reason there hasn't been any communication/replies to this issue.

Aug 20 2020, 10:27 AM · VyOS 1.4 Sagitta
Unknown Object (User) raised the priority of T439: local PBR support from Normal to High.
Aug 20 2020, 10:06 AM · VyOS 1.4 Sagitta