@Viacheslav , I tested in the 1.4 version, it seems that the neighborship is stuck in ExStart state with basic config. This behavior is not seen in 1.2.5 and 1.3
And also no frr.log is created.

PR: https://github.com/vyos/vyos-1x/pull/718

To round out the effort, i've added an optional patch to the series which provides granular AAA/RBAC from ring0 and can also deliver the W^X functionality for userspace along with those functions.

Since 5.10 appears to be holding solid, and grsecurity is using 5.10 for their beta branch, i've completed the forward port of these core functions to the same kernel revision being used in the current branch (at the time of commit).
Whats the intent with Intel drivers there? If we want to pull in from Intel, i think we ought to do the same in-tree patch process to build and sign the modules at build-time (and enforce module signing validation to load at runtime).

It is also allowed in VyOS 1.2 but the Kernel errors out:

If you create a VIF and VIF-S interface with the same ID, the resulting device names collide:

This is caused by the omission of a call to conntrack --orig-dst in the new Python script.

PR https://github.com/vyos/vyos-1x/pull/717

I have successfully replicated this on 1.3-rolling-202101052023 and 1.4-rolling-202101240218. It's absent in 1.2.6. I'm going to investigate this regression.

PR https://github.com/vyos/vyos-1x/pull/715

Looks good on 1.4-rolling-202102010218 and 1.3-beta-202102010443:

Looks good on 1.4-rolling-202102010218 and 1.3-beta-202102010443:

Looks good on 1.3-beta-202102010443:

vyos@vyos:~$ configure
[edit]
vyos@vyos# set interfaces ethernet eth0 dhcpv6-options
[edit]
vyos@vyos# commit
[edit]
vyos@vyos# exit
Warning: configuration changes have not been saved.
exit
vyos@vyos:~$ ps ax | grep dhcp6c
 1877 ttyS0    R+     0:00 grep dhcp6c
vyos@vyos:~$ show version

Looks good on 1.3-beta-202102010443:

vyos@vyos:~$ configure
[edit]
vyos@vyos# set interfaces dummy dum0
[edit]
vyos@vyos# set interfaces ethernet eth0 dhcpv6-options pd 0 interface dum0
[edit]
vyos@vyos# set interfaces ethernet eth0 dhcpv6-options duid 00:02:00:00:0d:e9:30:30:31:45:34:36:2d:58:58:58:58:58:58:58:58:58:58:58:58:58:58
[edit]
vyos@vyos# commit
[edit]
vyos@vyos# exit
Warning: configuration changes have not been saved.
exit
vyos@vyos:~$ show version

There's an easy workaround to hack this into your "configure" scripts:

On the other hand, it will not be possible to use login with "_"
https://github.com/vyos/vyos-1x/blob/current/data/templates/accel-ppp/chap-secrets.config_dict.tmpl#L6-L8

@dirtycache a lot of dependences which not present in 1.2, for example, dict_merge/node_changed/leaf_node_changed/render/call/airbag.

PR https://github.com/vyos/vyos-1x/pull/713

@Viacheslav , working on it and update you soon.