Page MenuHomeVyOS Platform
Feed Search

Jan 5 2021

Viacheslav changed the status of T2639: sort output of show vpn ipsec sa , a subtask of T2816: Rewrite IPsec scripts with the new XML/Python approach, from Open to Needs testing.
Jan 5 2021, 3:33 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T2639: sort output of show vpn ipsec sa from Open to Needs testing.
Jan 5 2021, 3:33 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T2639: sort output of show vpn ipsec sa .

PR https://github.com/vyos/vyos-1x/pull/670

Jan 5 2021, 11:59 AM · VyOS 1.3 Equuleus (1.3.0)

Jan 4 2021

Viacheslav reopened T3184: Add correct desctiptions for BGP neighbors as "Needs testing".
Jan 4 2021, 7:16 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav closed T3185: [conf-mode] Wrong CompletionHelp for Tunnel local-ip as Resolved.
Jan 4 2021, 4:04 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav closed T3184: Add correct desctiptions for BGP neighbors as Resolved.
Jan 4 2021, 4:03 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav claimed T3185: [conf-mode] Wrong CompletionHelp for Tunnel local-ip.
Jan 4 2021, 2:24 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T3185: [conf-mode] Wrong CompletionHelp for Tunnel local-ip.

PR https://github.com/vyos/vyos-1x/pull/669

Jan 4 2021, 2:24 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T3185: [conf-mode] Wrong CompletionHelp for Tunnel local-ip.
Jan 4 2021, 2:20 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T3173: Need 'nopmtudisc' option for tunnel interface.

Proposed CLI

set interfaces tunnel tun0 parameters ip disable-pmtu-discovery
Jan 4 2021, 12:53 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav claimed T3184: Add correct desctiptions for BGP neighbors.
Jan 4 2021, 10:57 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav added a comment to T3184: Add correct desctiptions for BGP neighbors.

PR https://github.com/vyos/vyatta-cfg-quagga/pull/61

Jan 4 2021, 10:56 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav created T3184: Add correct desctiptions for BGP neighbors.
Jan 4 2021, 10:50 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Dec 30 2020

Viacheslav added a comment to T1519: Firewall get's confused when using the same network-group name for IPv4 and IPv6.

Similar task T2045

Dec 30 2020, 5:16 PM
Viacheslav added a comment to T2874: Add MTU and TCP-MSS discovery tool.

@jack9603301 if you mean option "--clamp-mss-to-pmtu" so it was in wrong chain/hook T2868

Dec 30 2020, 11:47 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T2874: Add MTU and TCP-MSS discovery tool.

Fix typo in script description
PR https://github.com/vyos/vyos-1x/pull/663

Dec 30 2020, 11:28 AM · VyOS 1.3 Equuleus (1.3.0)

Dec 23 2020

Viacheslav added a comment to T2838: Ethernet device names changing, multiple hw-id being added.

I got this when several times change boot with

set system image default-boot

1.2.6 => 1.3 => 1.2.6 => 1.3

Dec 23 2020, 5:34 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
Viacheslav added a comment to T2376: /config/user-data and "preserved during image upgrade!".

I successfully update the image from 1.2.6-s1 to VyOS 1.3-rolling-202012231522

Dec 23 2020, 4:14 PM · VyOS 1.2 Crux
Viacheslav added a comment to T2045: Can't commit due to with the same name, but different firewall groups types.

The main problem is that you use the same name for different group types.

Dec 23 2020, 10:32 AM · VyOS 1.3 Equuleus (1.3.6)
Viacheslav added a comment to T2288: Include iprange package in Vyos.

@tjh How you want to integrate it with CLI or use it as a separate pkg?

Dec 23 2020, 8:18 AM · Restricted Project, VyOS 1.5 Circinus
Viacheslav closed T3139: Cannot create bond SR-IOV XCP-ng X540-T2 as Invalid.
Dec 23 2020, 8:03 AM · VyOS 1.3 Equuleus (1.3.0)

Dec 22 2020

Viacheslav added a comment to T2419: Cannot change udp-fragmentation-offload.

@robertoberto Can you provide next commands?

show interfaces ethernet eth0 physical
sudo ethtool -k eth0 | grep offload
Dec 22 2020, 6:36 PM
Viacheslav added a comment to T2444: Remove keepalived in favor of FRR for VRRP.

@primoz What are the benefits?

Dec 22 2020, 4:50 PM
Viacheslav closed T1316: Support for IS-IS as Resolved.
Dec 22 2020, 4:45 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav closed T2573: BFD op-mode commands are broken, a subtask of T2322: CLI [op-mode] bugs. Root task, as Resolved.
Dec 22 2020, 4:45 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav closed T2573: BFD op-mode commands are broken as Resolved.
Dec 22 2020, 4:45 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux
Viacheslav changed the status of T2982: show protocols bfd command parse failure from Unknown Status to Resolved.
Dec 22 2020, 4:09 PM · Ready for Crux (1.2.x), VyOS 1.2 Crux
Viacheslav closed T2495: Add xml for ISIS [conf_mode], a subtask of T1316: Support for IS-IS , as Resolved.
Dec 22 2020, 4:05 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav closed T2495: Add xml for ISIS [conf_mode] as Resolved.
Dec 22 2020, 4:05 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav closed T2940: Update FRR to 7.4 as Resolved.
Dec 22 2020, 2:46 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T2859: show nat source translation - Errors out.

PR https://github.com/vyos/vyos-1x/pull/656

Dec 22 2020, 2:45 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T2061: protocol logs not sent to remote syslog.

PR for crux https://github.com/vyos/vyos-build/pull/138

Dec 22 2020, 12:54 PM · VyOS 1.2 Crux (VyOS 1.2.7)

Dec 21 2020

Viacheslav closed T2619: Bug: Changes in NAT or ZONES from 1.2 to 1.3 as Resolved.
Dec 21 2020, 9:13 AM · VyOS 1.3 Equuleus (1.3.0)

Dec 19 2020

Viacheslav added a comment to T2216: Containerized third-party applications for VyOS.

PR https://github.com/vyos/vyos-build/pull/137
PR https://github.com/vyos/vyos-1x/pull/651

Dec 19 2020, 6:50 PM · VyOS 1.4 Sagitta

Dec 17 2020

Viacheslav added a comment to T3133: conf; policy prefix-list: ge is not allowed to be the same as prefix length.

It's FRR logic.

Dec 17 2020, 3:56 PM

Dec 16 2020

Viacheslav assigned T3131: Typo in ipsec preshared-secret help to SrividyaA.
Dec 16 2020, 4:10 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a project to T3131: Typo in ipsec preshared-secret help: VyOS 1.3 Equuleus.
Dec 16 2020, 4:07 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T3131: Typo in ipsec preshared-secret help.
Dec 16 2020, 3:57 PM · VyOS 1.3 Equuleus (1.3.0)

Dec 11 2020

Viacheslav added a comment to T3124: Cannot add user to group via configuration.

It was deleted/deprecated in T1990

Dec 11 2020, 1:15 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav closed T3123: Configuration of vti interface impossible as Resolved.
Dec 11 2020, 1:08 PM · VyOS 1.3 Equuleus (1.3.0)

Dec 10 2020

Viacheslav changed the status of T3123: Configuration of vti interface impossible from Confirmed to Needs testing.

@vlesk Will be fixed in the next rolling release.
Can you check the release after 10 Dec?

Dec 10 2020, 3:36 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T3123: Configuration of vti interface impossible .

PR https://github.com/vyos/vyos-1x/pull/641

Dec 10 2020, 1:35 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav changed the status of T3123: Configuration of vti interface impossible from Open to Confirmed.
Dec 10 2020, 12:36 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T3123: Configuration of vti interface impossible .
vyos@r11# set interfaces vti vti2 ?
Dec 10 2020, 12:34 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T3123: Configuration of vti interface impossible .

To reproduce

set interfaces vti vti2 address '10.0.0.1/30'
set interfaces vti vti2 description 'Tunnel to 100.64.0.2'
Dec 10 2020, 12:12 PM · VyOS 1.3 Equuleus (1.3.0)

Dec 8 2020

Viacheslav added a comment to T2174: Rewrite protocol BGP to new XML/Python style.

PR for fixing bgp template (prefix-list) and add the ability to use updated frr.py framework functions.

Dec 8 2020, 9:39 AM · VyOS 1.3 Equuleus (1.3.0)

Dec 4 2020

Viacheslav added a comment to T2996: Checking digital signature failed on downgrade from rolling to stable..

Not sure that it makes sense to downgrade the image from 1.3 to 1.2.
Because there are also no migration "downgrade" scripts.
I propose to add an additional check and disable downgrade images for "add system image".

Dec 4 2020, 9:42 AM · VyOS 1.3 Equuleus (1.3.5)
Viacheslav added a comment to T3020: The "scp" example is wrong in the bash-completion for "set system config-management commit-archive location".

Still old format for completion help

Dec 4 2020, 9:25 AM · VyOS 1.3 Equuleus (1.3.5)
Viacheslav created T3110: Broken pipe in show interfaces.
Dec 4 2020, 8:31 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav closed T3108: Section config overlapped match with FRRConfig as Resolved.
Dec 4 2020, 7:36 AM · VyOS 1.3 Equuleus (1.3.0)

Dec 3 2020

Viacheslav added a comment to T3108: Section config overlapped match with FRRConfig.

PR https://github.com/vyos/vyos-1x/pull/632
fix regex in smoketest.

Dec 3 2020, 7:07 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T3108: Section config overlapped match with FRRConfig.
Dec 3 2020, 4:49 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T1316: Support for IS-IS .

PR https://github.com/vyos/vyos-1x/pull/630

Dec 3 2020, 7:35 AM · VyOS 1.3 Equuleus (1.3.0)

Dec 2 2020

Viacheslav added a comment to T3105: static-host-mapping writing in one line.

maybe it happened after that commit https://github.com/vyos/vyos-1x/commit/c87ad948999c28c3c9449f98d60b545481ea29d5
because it was work in VyOS 1.3-rolling-202011250217

Dec 2 2020, 11:30 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav updated the task description for T3105: static-host-mapping writing in one line.
Dec 2 2020, 10:20 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T3105: static-host-mapping writing in one line.
Dec 2 2020, 10:18 AM · VyOS 1.3 Equuleus (1.3.0)

Dec 1 2020

Viacheslav changed the status of T3093: Add xml for vpn ipsec, a subtask of T2816: Rewrite IPsec scripts with the new XML/Python approach, from Open to Needs testing.
Dec 1 2020, 5:26 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T3093: Add xml for vpn ipsec from Open to Needs testing.
Dec 1 2020, 5:26 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T1316: Support for IS-IS .

Perhaps replace config (from_re "interface" | from_re "isis *") delete also and route-maps/prefix-lists from FRR configuration.
https://github.com/vyos/vyos-1x/blob/current/src/conf_mode/protocols_isis.py#L121

Dec 1 2020, 10:47 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T2713: VyOS must not change permissions on files in /config/auth.

Before update

Dec 1 2020, 8:28 AM · VyOS 1.3 Equuleus (1.3.0)

Nov 30 2020

Viacheslav added a comment to T3094: Can not specify multiple deny ports in FW rule.

@c-po It's mean all NOT ports. If you want to drop not 22,23,24,25

Nov 30 2020, 6:28 PM · VyOS 1.2 Crux (VyOS 1.2.7)
Viacheslav closed T3091: Add "tag" for static route as Resolved.
Nov 30 2020, 3:30 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav changed the status of T1316: Support for IS-IS from Open to Needs testing.
Nov 30 2020, 11:03 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T3093: Add xml for vpn ipsec.

PR https://github.com/vyos/vyos-1x/pull/626

Nov 30 2020, 9:03 AM · VyOS 1.4 Sagitta

Nov 29 2020

Viacheslav claimed T3093: Add xml for vpn ipsec.
Nov 29 2020, 9:30 AM · VyOS 1.4 Sagitta
Viacheslav created T3093: Add xml for vpn ipsec.
Nov 29 2020, 9:30 AM · VyOS 1.4 Sagitta

Nov 28 2020

Viacheslav changed the status of T3091: Add "tag" for static route from Open to Needs testing.
Nov 28 2020, 4:41 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav closed T2890: NAT error adding translation address range as Resolved.

Fixed.

Nov 28 2020, 4:39 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav closed T2539: Issues with parsing ip range for source nat translation address as Resolved.

Fixed

set nat source rule 1000 outbound-interface 'eth1'
set nat source rule 1000 source address '203.0.113.1-203.0.113.4'
set nat source rule 1000 translation address '10.0.0.1-10.0.0.4'
vyos@r5# commit
[ nat ]
Warning: IP address 10.0.0.1 does not exist on the system!
Warning: IP address 10.0.0.4 does not exist on the system!
Nov 28 2020, 4:37 PM · VyConf
Viacheslav changed the status of T3020: The "scp" example is wrong in the bash-completion for "set system config-management commit-archive location" from In progress to Needs testing.
Nov 28 2020, 4:20 PM · VyOS 1.3 Equuleus (1.3.5)
Viacheslav added a comment to T3091: Add "tag" for static route.

PR https://github.com/vyos/vyatta-cfg-quagga/pull/57

Nov 28 2020, 4:16 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav updated the task description for T3091: Add "tag" for static route.
Nov 28 2020, 4:03 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav updated the task description for T3091: Add "tag" for static route.
Nov 28 2020, 3:07 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T3091: Add "tag" for static route.
Nov 28 2020, 2:37 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T3090: Move 'adjust-mss' firewall options to the interface section..
Nov 28 2020, 2:16 PM · VyOS 1.4 Sagitta
Viacheslav closed T2868: Tcp-mss option in policy calls kernel-panic as Resolved.
Nov 28 2020, 1:14 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T2713: VyOS must not change permissions on files in /config/auth.

@jjakob can you check the latest rolling?

Nov 28 2020, 10:41 AM · VyOS 1.3 Equuleus (1.3.0)

Nov 27 2020

Viacheslav added a comment to T2713: VyOS must not change permissions on files in /config/auth.

PR https://github.com/vyos/vyatta-cfg-system/pull/132

Nov 27 2020, 3:00 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav changed the status of T2868: Tcp-mss option in policy calls kernel-panic from Open to Needs testing.
Nov 27 2020, 1:56 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T2868: Tcp-mss option in policy calls kernel-panic.

PR https://github.com/vyos/vyatta-cfg-firewall/pull/19

Nov 27 2020, 1:19 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T2713: VyOS must not change permissions on files in /config/auth.

This probably happens at this stage.
https://github.com/vyos/vyatta-cfg-system/blob/current/scripts/install/install-image-existing#L217-L224

Nov 27 2020, 9:09 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T2868: Tcp-mss option in policy calls kernel-panic.

It seems a wrong logic.
We want that option to have an effect on "local" and "forward" directions, so we use table mangle and "PREROUTING" and VYATTA_FW_IN_HOOK hook
Generated rules

Nov 27 2020, 7:58 AM · VyOS 1.3 Equuleus (1.3.0)

Nov 26 2020

Viacheslav added a comment to T2868: Tcp-mss option in policy calls kernel-panic.

T490

Nov 26 2020, 6:11 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T2061: protocol logs not sent to remote syslog.

@olofl Can you check the latest rolling release? Are all logs sent correctly?

Nov 26 2020, 4:17 PM · VyOS 1.2 Crux (VyOS 1.2.7)

Nov 25 2020

Viacheslav added a comment to T2061: protocol logs not sent to remote syslog.

PR https://github.com/vyos/vyos-build/pull/133

Nov 25 2020, 11:14 AM · VyOS 1.2 Crux (VyOS 1.2.7)

Nov 24 2020

Viacheslav added a comment to T2061: protocol logs not sent to remote syslog.

Another bug that the following configuration doesn't configure vtysh level debug

Nov 24 2020, 2:33 PM · VyOS 1.2 Crux (VyOS 1.2.7)
Viacheslav added a comment to T2061: protocol logs not sent to remote syslog.

The main reason is frr code for placing log files in a separate file.
https://github.com/FRRouting/frr/blob/master/tools/etc/rsyslog.d/45-frr.conf

Nov 24 2020, 11:43 AM · VyOS 1.2 Crux (VyOS 1.2.7)

Nov 23 2020

Viacheslav claimed T3085: IPv6 BGP Neighbor Weight.
Nov 23 2020, 4:31 PM · VyOS 1.2 Crux (VyOS 1.2.7)
Viacheslav added a subtask for T2174: Rewrite protocol BGP to new XML/Python style: T3085: IPv6 BGP Neighbor Weight.
Nov 23 2020, 4:31 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a parent task for T3085: IPv6 BGP Neighbor Weight: T2174: Rewrite protocol BGP to new XML/Python style.
Nov 23 2020, 4:31 PM · VyOS 1.2 Crux (VyOS 1.2.7)
Viacheslav assigned T3083: Add feature event-handler to dmbaturin.
Nov 23 2020, 8:42 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
Viacheslav created T3083: Add feature event-handler.
Nov 23 2020, 8:42 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta

Nov 22 2020

Viacheslav added a comment to T3074: OpenVPN site-to-site creates wrong peer address.

Device-type tap option works incorrectly

set interfaces openvpn vtun20 device-type 'tap'
set interfaces openvpn vtun20 local-address 10.0.0.0
set interfaces openvpn vtun20 local-host '100.64.0.1'
set interfaces openvpn vtun20 local-port '22222'
set interfaces openvpn vtun20 mode 'site-to-site'
set interfaces openvpn vtun20 remote-address '10.0.0.1'
set interfaces openvpn vtun20 remote-host '100.64.0.2'
set interfaces openvpn vtun20 remote-port '22222'
set interfaces openvpn vtun20 shared-secret-key-file '/config/auth/foo.key'
Nov 22 2020, 1:51 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T235: Ability to configure manual IP Rules.

@Dataforce @fetzerms
ip rule "from" already in CLI T439

Nov 22 2020, 1:26 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T439: local PBR support.

@pasik Can you check if it solves your expectation?

Nov 22 2020, 12:20 PM · VyOS 1.4 Sagitta

Nov 20 2020

Viacheslav changed the status of T439: local PBR support from Open to Needs testing.
Nov 20 2020, 4:19 PM · VyOS 1.4 Sagitta

Nov 19 2020

Viacheslav added a comment to T439: local PBR support.

PR https://github.com/vyos/vyos-1x/pull/614
Add the ability to use policy local-route

Nov 19 2020, 6:11 PM · VyOS 1.4 Sagitta

Nov 17 2020

Viacheslav added a comment to T439: local PBR support.

Propose to use that format

Nov 17 2020, 3:19 PM · VyOS 1.4 Sagitta

Nov 16 2020

Viacheslav added a comment to T160: Support NAT64.

Jool can handle 2 times as many packets.
https://link.springer.com/article/10.1007/s11235-020-00681-x

Nov 16 2020, 6:03 PM · VyOS 1.4 Sagitta (1.4.0-epa1)
Viacheslav added a comment to T3074: OpenVPN site-to-site creates wrong peer address.
vyos@r4-roll# sudo cat /run/openvpn/vtun30365.conf 
### Autogenerated by interfaces-openvpn.py ###
#
# See https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage
# for individual keyword definition
#
# 
#
Nov 16 2020, 5:06 PM · VyOS 1.3 Equuleus (1.3.0)