Taking a look ...
Feed All Stories
Sep 9 2020
Sep 9 2020
syncer moved T1934: Change default hostname when deploy from OVA without params. from Needs Triage to In Progress on the VyOS 1.2 Crux (VyOS 1.2.6) board.
jestabro added a comment to T2327: Unable to create syslog server entry with different port.
syncer edited projects for T1774: Add a show config operation to the HTTP API, added: VyOS 1.2 Crux (VyOS 1.2.7); removed VyOS 1.2 Crux (VyOS 1.2.6).
syncer edited projects for T1957: PPPoE server: maintenance mode, added: VyOS 1.2 Crux (VyOS 1.2.7); removed VyOS 1.2 Crux (VyOS 1.2.6).
syncer reassigned T1934: Change default hostname when deploy from OVA without params. from UnicronNL to dmbaturin.
@jestabro can you look if we can do that in 126 or leave it for 127
syncer moved T2701: `vpn ipsec pfs enable` doesn't work with IKE groups from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.6) board.
Viacheslav renamed T2868: Tcp-mss option in policy calls kernel-panic from Tcp-mss option in policy call kernel-panic to Tcp-mss option in policy calls kernel-panic.
syncer edited projects for T2564: Extend VyOS to support appliance LCDs, added: VyOS 1.2 Crux (VyOS 1.2.7); removed VyOS 1.2 Crux (VyOS 1.2.6).
syncer changed the subtype of T2564: Extend VyOS to support appliance LCDs from "Task" to "Enhancement".
syncer closed T2728: Protocol option ignored for IPSec peers in transport mode, a subtask of T2816: Rewrite IPsec scripts with the new XML/Python approach, as Resolved.
syncer moved T2728: Protocol option ignored for IPSec peers in transport mode from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.6) board.
syncer moved T2728: Protocol option ignored for IPSec peers in transport mode from Need Triage to Finished on the VyOS 1.3 Equuleus board.
dmbaturin edited projects for T2800: Pseudo-Ethernet: source-interface must not be member of a bridge, added: VyOS 1.2 Crux (VyOS 1.2.7); removed VyOS 1.2 Crux (VyOS 1.2.6).
erkin renamed T2344: PPPoE server client static IP assignment silently fails from PPPoE server client static IP assignment does not work to PPPoE server client static IP assignment silently fails.
erkin renamed T2448: `monitor protocol bgp` subcommands fail with 'command incomplete' from monitor command does not work for protocol BGP to `monitor protocol bgp` subcommands fail with 'command incomplete'.
erkin renamed T2701: `vpn ipsec pfs enable` doesn't work with IKE groups from VPN ipsec pfs "enabled" doesn't work with IKE groups to `vpn ipsec pfs enable` doesn't work with IKE groups.
erkin renamed T1938: syslog doesn't start automatically from Firewall logging not working to syslog doesn't start automatically.
erkin renamed T1575: `show snmp mib ifmib` crashes with IndexError from `show snmp mib ifmib` crashed to `show snmp mib ifmib` crashes with IndexError.
erkin renamed T1699: Default net.ipv6.route.max_size 32768 is too low from net.ipv6.route.max_size = 32768 to Default net.ipv6.route.max_size 32768 is too low.
erkin renamed T832: `show monitoring protocols bgp` doesn't work with frr from show monitoring protocols bgp not works with frr to `show monitoring protocols bgp` doesn't work with frr.
erkin renamed T2389: BGP community-list unknown command from BGP community-list error to BGP community-list unknown command.
GitHub <noreply@github.com> committed rVYOSONEX32eb4b342e96: Merge pull request #541 from DmitriyEshenko/1x-cur-openconnect (authored by c-po).
Unknown Object (User) added a comment to T2036: Open Connect VPN Server () support.
New PR for fixing it https://github.com/vyos/vyos-1x/pull/541
Unknown Object (User) reopened T2036: Open Connect VPN Server () support as "In progress".
As discussed in the maintainer's slack channel will be good to replace CLI commands from set vpn anyconnect to set vpn openconnect. But in our docs we should use anyconnect-compatible server.
Sep 8 2020
Sep 8 2020
Viacheslav added a comment to T2865: System hangs at boot after mounting config.
I don't see problems with clean installed latest rolling
zsdc changed the status of T1389: Add support for NoCloud cloud-init datasource from Open to Needs testing.
NoCloud (and actually any datasource which provide network-config) must be supported now in VyOS 1.3. Feel free to test it.
zsdc added a comment to T2310: vyos-cloud-init use global config to configure pass and ssh login.
This feature now is in the Cloud-init for 1.3 and must be backported after testing.
zsdc added a comment to T2403: Full support for networking config in Cloud-init.
The configuration module for 1.3 is compatible with both network-config versions now. Initial testing was successful, but let's keep this for some time to collect more cases.
jestabro added a comment to T2865: System hangs at boot after mounting config.
@querubin please try booting with the vyos-configd service masked: add the kernel boot parameter:
zsdc changed the status of T2403: Full support for networking config in Cloud-init from In progress to Needs testing.
zsdc added a comment to T2703: VMWare OVA won't deploy an ed25519 key.
@kroy how about testing this in 1.3? It must work now.
zsdc changed the status of T2726: Allow to use all supported SSH key types in Cloud-init from In progress to Needs testing.
Handling of all supported by VyOS configuration SSH key types was added to the VyOS 1.3 by this commit https://github.com/vyos/vyos-cloud-init/commit/d4004ac6ea1c7c03a35d9410f7c70ab423c926bb
Viacheslav added a comment to T2856: equuleus: `show version all` throws broken pipe exception on abort.
A workaround
Unknown Object (User) changed the status of T2810: Docs for vpn anyconnect-server, a subtask of T2036: Open Connect VPN Server () support, from Open to In progress.
Unknown Object (User) changed the status of T2810: Docs for vpn anyconnect-server from Open to In progress.
Unknown Object (User) added a comment to T2810: Docs for vpn anyconnect-server.
PR from @ronie https://github.com/vyos/vyos-documentation/pull/317
efficiosoft added a comment to T2719: Standardized op mode script structure.
Ok, so this now waits for T2854. I've already drafted some partial implementation and would like to base it on the architecture introduced in that task.
Maltahl added a comment to T2866: Wireguard port 53 not allowed.
Latest rolling has this fixed. Thanks Viacheslav.
Viacheslav added a comment to T2866: Wireguard port 53 not allowed.
@Maltahl try the latest rolling release.
Sep 8 2020, 7:26 AM · Restricted Project
syncer moved T2021: OSPFv3 doesn't support decimal area syntax from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.6) board.
querubin updated the task description for T2865: System hangs at boot after mounting config.
Sep 7 2020
Sep 7 2020
dmbaturin added a comment to T2735: WireGuard cannot configure multiple peers - allowed-ips is overwritten.
I think stricter validation should only be added to 1.3 so that 1.2 LTS behaviour remains stable.
dmbaturin renamed T2701: `vpn ipsec pfs enable` doesn't work with IKE groups from VPN ipsec pfs "enabled" don't work with IKEA-groups to VPN ipsec pfs "enabled" doesn't work with IKE groups.
syncer moved T1220: Show transceiver information from plugin modules, e.g SFP+, QSFP from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.6) board.
syncer moved T1241: Remove of policy route throws CLI error from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.6) board.
syncer moved T2563: Wrong interface binding for Dell VEP 1445 from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.6) board.
syncer moved T2517: vyos-container: link_filter: No such file or directory from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.6) board.
syncer moved T2443: NHRP: Add debugging information to syslog from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.6) board.
syncer closed T2332: Backport node option for a syslog server, a subtask of T2327: Unable to create syslog server entry with different port, as Resolved.
syncer edited projects for T2296: Upgrade WALinux to 2.2.41, added: VyOS 1.2 Crux (VyOS 1.2.7); removed VyOS 1.2 Crux (VyOS 1.2.6).
syncer moved T1956: PPPoE server: support PADO-delay from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.6) board.
syncer moved T125: Missing PPPoE interfaces in l2tp configuration from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.6) board.
syncer moved T1973: Allow route-map to match on BGP local preference value from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.6) board.
syncer moved T1983: Expose route-map when BGP routes are programmed in to FIB from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.6) board.
syncer moved T1729: PIM (Protocol Independent Multicast) implementation from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.6) board.
syncer reopened T1953: DDNS service name validation rejects valid service names as "Open".
syncer moved T2000: strongSwan does not install routes to table 220 in certain cases from Backlog to Finished on the VyOS 1.2 Crux (VyOS 1.2.6) board.
syncer edited projects for T1773: Make it possible to export config to JSON, added: VyOS 1.2 Crux (VyOS 1.2.7); removed VyOS 1.2 Crux (VyOS 1.2.6).
cgb updated subscribers of T292: [ZBF] Allow filtering intra zone traffic.
I hacked this into VyOS/Vyatta some 5 years ago - all it took was commenting out a snippet in Zone.pm and /opt/vyatta/share/vyatta-cfg/templates/zone-policy/zone/node.tag/from/node.def to prevent VyOS from complaining when creating a zonex_to_zonex chain
syncer changed the status of T2448: `monitor protocol bgp` subcommands fail with 'command incomplete' from Unknown Status to Resolved.
Unknown Object (User) added a comment to T2853: Intel QAT acceleration does not work.
Intel QAT works for CRUX brunch. As for rolling with the newest kernel 5.8.5, it seems some issues on the modules building stage.
Sep 6 2020
Sep 6 2020
pscitpro added a comment to T2303: Unable to delete the image version that came from OVA.
Issue seems to be related to quote handling. OS seems to have version as 1.2.5 and GRUB file shows "1.2.5". show system image reflects the GRUB name. If I manually remove the quotes from the GRUB file, I can successfully rename and delete the image.
Unknown Object (User) added a comment to T2853: Intel QAT acceleration does not work.
From official docs
Unknown Object (User) added a comment to T2853: Intel QAT acceleration does not work.
@c-po I build qat manually but add --enable-qat-lkcf to https://github.com/vyos/vyos-build/blob/crux/packages/linux-kernel/build-intel-qat.sh#L55 and it seems it works
vyos@R2-QAT:~$ show system acceleration qat device qat_dev0 flows +------------------------------------------------+ | FW Statistics for Qat Device | +------------------------------------------------+ | Firmware Requests [AE 0]: 147225 | | Firmware Responses[AE 0]: 147225 | +------------------------------------------------+ | Firmware Requests [AE 1]: 113758 | | Firmware Responses[AE 1]: 113758 | +------------------------------------------------+ | Firmware Requests [AE 2]: 144886 | | Firmware Responses[AE 2]: 144886 | +------------------------------------------------+ | Firmware Requests [AE 3]: 147221 | | Firmware Responses[AE 3]: 147221 | +------------------------------------------------+ | Firmware Requests [AE 4]: 113774 | | Firmware Responses[AE 4]: 113774 | +------------------------------------------------+ | Firmware Requests [AE 5]: 144891 | | Firmware Responses[AE 5]: 144891 | +------------------------------------------------+
hagbard added a comment to T563: webproxy: migrate 'service webproxy' to get_config_dict().
The perl scripts didn't create any config line, that's why I'm asking. I have it already implemented and successfully tested with the new python code, but wonder how people were able to use it all by just using the cli. I may need somebody for testing with AD, since I don't have access to any AD environment anymore.
Tested on 1.3-rolling-202009060846
Unknown Object (User) changed the status of T2860: Update Accel-PPP to fix l2tp CVE from Open to Needs testing.
Unknown Object (User) created T2860: Update Accel-PPP to fix l2tp CVE.
c-po added a comment to T563: webproxy: migrate 'service webproxy' to get_config_dict().
Large enterprises usually use LDAP/AD to authenticate and log its users web browsing, so this should be added. Anonymous binding is kinda old fashioned so maybe it was a bug.
Sep 5 2020
Sep 5 2020
hagbard added a comment to T563: webproxy: migrate 'service webproxy' to get_config_dict().
Does anyone know if ldap auth worked at all with the old perl backend? I try to find out how likely I need to migrate cli entries. from what I have seen, ldap auth with anonymous ldap browsing didn't generate any required config for squid.
erkin renamed T1463: Missing command `show ip bgp scan` appears in command completion from Unknown command: show ip bgp scan to Missing command `show ip bgp scan` appears in command completion.