Duplicate T2859

PR https://github.com/vyos/vyos-1x/pull/612
Add IS-IS routing.

Possible reason - ipset should be converted to nft list set

T2802

@cjeanneret Can you re-check it? And close it if all works fine.

T3060

Fix for "remote-host" on client side
PR https://github.com/vyos/vyos-1x/pull/606

Server conf

set interfaces openvpn vtun0 encryption cipher 'aes256gcm'
set interfaces openvpn vtun0 encryption disable-ncp
set interfaces openvpn vtun0 hash 'sha512'
set interfaces openvpn vtun0 local-host '100.64.0.1'
set interfaces openvpn vtun0 local-port '1194'
set interfaces openvpn vtun0 mode 'server'
set interfaces openvpn vtun0 openvpn-option 'tls-version-min 1.3'
set interfaces openvpn vtun0 openvpn-option 'comp-lzo no'
set interfaces openvpn vtun0 persistent-tunnel
set interfaces openvpn vtun0 protocol 'tcp-passive'
set interfaces openvpn vtun0 server client client1 ip '10.10.3.2'
set interfaces openvpn vtun0 server client client1 subnet '10.10.3.0/29'
set interfaces openvpn vtun0 server client client1 subnet '10.20.0.0/16'
set interfaces openvpn vtun0 server subnet '10.10.3.0/29'
set interfaces openvpn vtun0 server topology 'subnet'
set interfaces openvpn vtun0 tls ca-cert-file '/config/auth/ovpn/ca.crt'
set interfaces openvpn vtun0 tls cert-file '/config/auth/ovpn/central.crt'
set interfaces openvpn vtun0 tls dh-file '/config/auth/ovpn/dh.pem'
set interfaces openvpn vtun0 tls key-file '/config/auth/ovpn/central.key'

In the new version client configuration

@Zer0t3ch Can you share your configuration?

Imagine if you use for example BGP and don't have a default route or set it to blackhole.
Then you originate the default route for a neighbor.
Why it should not announce the default route to the neighbor?

This is expected behavior, so routes not installed in the routing table.

PR https://github.com/vyos/vyos-1x/pull/600

Neet to retest, the related task T2100

@trae32566 Are there any updates for this task?

PR https://github.com/vyos/vyos-1x/pull/593
Fix validators for "neighbor update-source"

It can be work with XFRM interfaces https://wiki.strongswan.org/projects/strongswan/wiki/RouteBasedVPN#XFRM-interfaces-in-VRFs

PR https://github.com/vyos/vyos-1x/pull/591

@phillipmcmahon Try to check if vlan works correctly without DHCP?
I met several nuances associated with vlans on ESXi.

PR https://github.com/vyos/vyos-1x/pull/589

We need some expressions like

I see correct state "disabled"

Like this?

This logic does not allow for the complete removal of the protocol.
https://github.com/vyos/vyatta-cfg-quagga/blob/32cbb1e5059c6c27449b7013f790aff1c50a9831/templates/protocols/ospf/passive-interface/node.def#L29-L35

@Azayaka do you mean import routes to a specific table? T3032
Can you check it with the next rolling release?

@rizkidtn Update, please your request. Is the community works for you for blackholing?

PR https://github.com/vyos/vyos-1x/pull/588

PR https://github.com/vyos/vyatta-cfg-quagga/pull/56

Do you mean that?

set interfaces ethernet eth1 mirror

1. Not all interfaces can be used as "update-source"

Missed "vti | dum | lo" etc.
https://github.com/vyos/vyos-1x/blob/current/interface-definitions/protocols-bgp.xml.in#L639

PR https://github.com/vyos/vyos-1x/pull/587
Fix the FRR template for new bgp implementation.

How to do it?

Fixed

vyos@r4-roll# run show version

@klase Check these options in the next rolling release (after 20201027)

FRR doesn't delete isis configuration related "interfaces" with

delete protocols isis foo interface eth1

protocol "isisd" in the test was added here https://github.com/vyos/vyos-1x/pull/483/files#diff-060cdf269ea89160caa0deaebe8e323f0559aa6dfd19e5634a33634f3e38e461R72

@kroy What PR?

PR https://github.com/vyos/vyos-1x/pull/584

@SrividyaA Thanks.

@craterman it seems bug with your resolution.

PR for crux https://github.com/vyos/vyos-1x/pull/582

Update from VyOS 1.3-rolling-202010210152 to latest rolling vyos-1.3-rolling-202010260327-amd64.iso Failed.

Proposed CLI

set system options disable-spectre

Updated PR with section "parameters"
https://github.com/vyos/vyos-1x/pull/580

PR https://github.com/vyos/vyos-1x/pull/581

@Dmitry Your suggestions? Is it possible?
What parameter do we need to change?

We need to check what's going on here https://github.com/vyos/vyatta-cfg/blob/current/etc/bash_completion.d/vyatta-cfg#L930-L962

Will be fixed in the new LTS release.

PR for crux https://github.com/vyos/vyatta-conntrack-sync/pull/4

Possible bug with "admin_state"

@tjh can you edit one file?

@c-po What do you propose?

@banditos13 can you send a link to the file, which you suggest to fix, or create PR?

Do we need it for "crux"?
This does not affect the work of VPN service.

@Magnum Can you test it?

@Cheeze_It thank you for testing.

Can you provide a simple config of R1 R3 and R4?
I want to reproduce it in the test lab.

Which files in /config/tinc0/hosts ?

Thank you.
Reopen the task or create a new one if you find some problems.

PR https://github.com/vyos/vyos-1x/pull/579

I think it some code like

@Merijn Can you check the latest rolling?
Or write please which commands do you use?

@lbv2rus Can you try the latest rolling release?

@Gunni can you check the latest rolling?

@Dmitry

set interfaces ethernet eth1 address 2001:db8::2/64
set interfaces l2tpv3 l2tpeth1010 address '192.168.37.2/27'
set interfaces l2tpv3 l2tpeth1010 encapsulation 'ip'
set interfaces l2tpv3 l2tpeth1010 local-ip '2001:db8::2'
set interfaces l2tpv3 l2tpeth1010 peer-session-id '100'
set interfaces l2tpv3 l2tpeth1010 peer-tunnel-id '200'
set interfaces l2tpv3 l2tpeth1010 remote-ip '2001:db8::1'
set interfaces l2tpv3 l2tpeth1010 session-id '100'
set interfaces l2tpv3 l2tpeth1010 tunnel-id '200'

@jjcordon can you test the latest rolling?

@D0peX Can you check the latest rolling?

Works as expected.

Check out the October versions on both sides.