Before that, should we consider completely migrating the vyos firewall implementation?
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
All Stories
Dec 5 2020
Dec 4 2020
yes, specifying "ipv6" has the same effect as "ipv6 enable"
Do I only need to execute the following commands when I want to start ipv6?
Not sure that it makes sense to downgrade the image from 1.3 to 1.2.
Because there are also no migration "downgrade" scripts.
I propose to add an additional check and disable downgrade images for "add system image".
Still old format for completion help
Dec 3 2020
To clarify the fault here. the smoketest is looking for the word "Config()" inside all conf_mode scripts without taking into account that this could be part of another name. the patch above modifies the behavior to not mat when a alpha-character is in front of the C in Config.
full regex: [^a-ZA-Z]Config\(\)
PR https://github.com/vyos/vyos-1x/pull/632
fix regex in smoketest.
Thanks, @c-po , works as expected.
vyos@vyos:~$ show lldp neighbors
Capability Codes: R - Router, B - Bridge, W - Wlan r - Repeater, S - Station
D - Docsis, T - Telephone, O - OtherDec 2 2020
Calculating setting is always the smartest idea. I also have a WIFI6 NIC with me, the problem is it is not supported by Linux 4.19. which we currently are forced to use.
It seems related to this patch https://github.com/vyos/vyos-1x/commit/b39d623170377b2e99fd7e88b627afea71e4d00c#diff-e4557e4a7b41f0e9328ac0e7d7c0305416f0f1e42d46af27c2135ca976434fce
Appears only if you have 2 or more lldp neighbors.
Cool let me know if you still need my config
Ok, with cisco device and added vif 1 I can reproduce this issue
vyos@vyos# run show lldp neighbors
Traceback (most recent call last):
File "/usr/libexec/vyos/op_mode/lldp_op.py", line 121, in <module>
config_text = tmpl.render(parse_data(neighbors))
File "/usr/libexec/vyos/op_mode/lldp_op.py", line 50, in parse_data
for local_if, values in data.items():
AttributeError: 'list' object has no attribute 'items'I still can't reproduce this issue.
vyos@vyos:~$ show configuration commands | match lldp
set service lldp interface eth1
set service lldp legacy-protocols cdp
set service lldp management-address '192.168.255.31'
set service lldp snmp enable
vyos@vyos:~$ show lldp neighbors
Capability Codes: R - Router, B - Bridge, W - Wlan r - Repeater, S - Station
D - Docsis, T - Telephone, O - OtherIt looks like the issue is CDP. If I remove the CDP piece of the config then it works.
I just upgraded to the absolute latest rolling release that came out early this morning and it has the same issue.
As far as I know, you only need to work in the vyos-1x repo
I just tried the show lldp neighbors again and it doesn't work but sudo lldpcli show neighbors works
mlaney@vyos:~$ sudo lldpcli show neighbors
LLDP neighbors:
Interface: eth1, via: CDPv2, RID: 1, Time: 0 day, 08:19:01
Chassis:
ChassisID: local Cisco-Sw1.local
SysName: Cisco-Sw1.local
SysDescr: cisco WS-C2960S-48LPS-L running on
Cisco IOS Software, C2960S Software (C2960S-UNIVERSALK9-M), Version 15.2(2)E9, RELEASE SOFTWARE (fc4)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2018 by Cisco Systems, Inc.
Compiled Sat 08-Sep-18 14:56 by prod_rel_team
MgmtIP: 10.22.87.254
Capability: Bridge, on
Port:
PortID: ifname GigabitEthernet1/0/9
PortDescr: GigabitEthernet1/0/9
TTL: 180Interface: eth1, via: CDPv2, RID: 1, Time: 0 day, 08:18:47
Chassis:
ChassisID: local Cisco-Sw1.local
SysName: Cisco-Sw1.local
SysDescr: cisco WS-C2960S-48LPS-L running on
Cisco IOS Software, C2960S Software (C2960S-UNIVERSALK9-M), Version 15.2(2)E9, RELEASE SOFTWARE (fc4)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2018 by Cisco Systems, Inc.
Compiled Sat 08-Sep-18 14:56 by prod_rel_teamHere is my lldp config. ETH0 is WAN ETH1 is lan that is why only eth1 has lldp enabled.
maybe it happened after that commit https://github.com/vyos/vyos-1x/commit/c87ad948999c28c3c9449f98d60b545481ea29d5
because it was work in VyOS 1.3-rolling-202011250217
Hi, guys, I found an interesting script in frrouter's github repo. In fact, this is purely because someone wrote a script and submitted the following bug report:
@thadrumr please provide your lldp configuration. show configuration commands | match lldp
I can't reproduce this issue in lab with the latest rolling. Provide please detailed reproducing steps, also will be helpful to get an output
sudo lldpcli show neighbors
Does this mean to to disallow installing the syslinux bootloader to the iso by default? The reason for asking is the arm builds we try to make, as syslinux is incompatible with arm, and a iso cant be generated for such a system as it tries to install syslinux when building the image.
LiveCD is usually only used for temporary testing and installation, isn't it? Will using this restriction cause the normal use of livecd to become troublesome?
I think the intention here is by default build with no liveCD support, and use the flag to explicitly build liveCD images when needed. The justification is if an image is cloud type image, there are certain security assumptions about the live network the image is connected to (because many cloud providers provision an image via information over specific link local addresses). If you boot a physical PC with a cloud ISO, you run the risk of exposing cloud-init to the local network, which would allow trivial takeover.
Dec 1 2020
table ip nat {
chain PREROUTING {
type nat hook prerouting priority dstnat; policy accept;
iifname "eth1" tcp dport { 22 } counter packets 0 bytes 0 dnat to 192.168.1.4 comment "DST-NAT-100"
}
}Thank you @Dmitry, it will be in tomorrows rolling release.
I am a little confused. What is the specific function of the --allow-cd-boot compilation parameter that this task hopes to add? Forgive me for not seeming to understand!