IPSec / DMVPN PR: https://github.com/vyos/vyos-1x/pull/856
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
May 27 2021
May 27 2021
dmbaturin committed rVYOSONEXd80d8d598bb8: login: T3455: Fix edit level configuration for user (authored by sever-sever <v.gletenko@vyos.io>).
dmbaturin committed rVYOSONEXd618dea8c51b: openconnect: T3461: Delete CA crt file checks (authored by sever-sever <v.gletenko@vyos.io>).
dmbaturin committed rVYOSONEX929cf34a41fa: op-mode: T3431: Fix show version all (authored by sever-sever <v.gletenko@vyos.io>).
dmbaturin triaged T3584: Migrate NTP server addresses from *.pool.ntp.org to our own as Low priority.
Viacheslav changed the status of T1976: deleting address-family under neighbor will disable neighbor from Needs testing to Confirmed.
The reason it such script https://github.com/vyos/vyatta-cfg-quagga/blob/d962ef0f2c15333411e719f7d1b02dd7575ebdee/scripts/bgp/vyatta-bgp.pl#L385
That do
router bgp xxx address-family ipv4 unicast no neighbor x.x.x.x activate
Viacheslav closed T2512: vyatta-op-quagga [show ip] to XML format, a subtask of T2511: Migrate vyatta-op-quagga to new XML format, as Resolved.
Viacheslav closed T2617: Rewrite vyatta-op-quagga "show" to XML, a subtask of T2546: The root task for rewriting [op-mode] to XML, as Resolved.
Unknown Object (User) added a comment to T2123: Configure 3 NTP servers.
PR https://github.com/vyos/vyos-build/pull/166
server "time1.vyos.net" server "time2.vyos.net" server "time3.vyos.net"
UnicronNL triaged T3583: Overwrite default config ntp settings when custom ntp servers are provided. as Normal priority.
@Viacheslav Done. Looks to be working fine in VyOS 1.4-rolling-202105250417
@sever Done. Looks to be working fine in VyOS 1.4-rolling-202105250417
May 26 2021
May 26 2021
We are seeing this on an X722 NIC that's still the i40e driver (the server in question also has an X710 NIC, but there's no cables connected to the X710 but I should be able to get cables connected to the X710 next week). We are using 1.4 on this machine.
That mist actually be habdled by vbash and the backend code.
Unknown Object (User) added a comment to T3546: Add support for running scripts on PPPoE server session events.
I propose something like
set service pppoe-server extended-scripts on-pre-up <path> set service pppoe-server extended-scripts on-up <path> set service pppoe-server extended-scripts on-down <path> set service pppoe-server extended-scripts on-change <path>
FRR doing normalization for ipv6
GitHub <noreply@github.com> committed rVYOSONEX87ccd1b8242b: ospfv3: T3581: Fix op-mode for linkstate (authored by Viacheslav).
Possible was fixed in that task T3502
c-po renamed T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Update Linux Kernel to v5.4.121 / 5.10.39 to Update Linux Kernel to v5.4.122 / 5.10.40.
Unfortunately, I can't reproduce it.
Also, all smoke test for static routes looks good.
Viacheslav closed T3558: autocomplete options for dhcp-interface is not showing for the static route command as Resolved.
vyos@r4-1.3# set protocols static route 192.0.2.0/24 dhcp-interface Possible completions: <text> DHCP interface name eth0 eth1 lo
@olofl Add please a separate task for JSON.
Viacheslav added a comment to T3546: Add support for running scripts on PPPoE server session events.
As I understand the needed section
[pppd-compat] verbose=1 #ip-pre-up=/etc/ppp/ip-pre-up ip-up=/etc/ppp/ip-up ip-down=/etc/ppp/ip-down #ip-change=/etc/ppp/ip-change radattr-prefix=/var/run/radattr #fork-limit=16
dtoux added a comment to T3553: OSPFv3 redistribute configuration remains in frr running config after removal.
Where can I get the rc4? The last RR I see is vyos-1.3-rolling-202105011026-amd64.iso.
Viacheslav added a parent task for T3560: Ability to create groups of MAC addresses: T2199: Rewrite firewall in new XML/Python style.
@masimo Can you check/test it?
Viacheslav changed the status of T3581: Incomplete command `show ipv6 ospfv3 linkstate` from Open to Confirmed.
The word "detail" is cut off for some reason.
https://github.com/vyos/vyos-1x/blob/32bc1e5babd1bd31909a93ca1818998bf46db003/op-mode-definitions/include/ospfv3-detail.xml.i#L7
Viacheslav added a comment to T3553: OSPFv3 redistribute configuration remains in frr running config after removal.
I can't reproduce it in 1.3-rc4
vyos@r4-1.3# run show conf com | match ospf set protocols ospfv3 area 0 interface 'lo' set protocols ospfv3 area 0 interface 'eth0' set protocols ospfv3 area 0 interface 'eth1' set protocols ospfv3 parameters router-id '1.2.3.4' set protocols ospfv3 redistribute static route-map 'FOO' [edit] vyos@r4-1.3#
krox2 closed T3540: Keepalived memory utilisation issue when constantly getting its state in JSON format as Resolved.
@Viacheslav We have been running the new rolling realse in the lab since 24th May with no issues. Thanks for help.
dtoux added a comment to T3553: OSPFv3 redistribute configuration remains in frr running config after removal.
BTW, the same happens when adding/removing interfaces to an area.
dtoux added a comment to T3553: OSPFv3 redistribute configuration remains in frr running config after removal.
I did some more digging and found a reliable way of reproducing it:
May 25 2021
May 25 2021
Viacheslav changed the subtype of T3580: Refactoring firewall ipv6 rule icmpv6 from "Task" to "Feature Request".
Viacheslav changed the status of T3568: Add XML for firewall conf-mode, a subtask of T2199: Rewrite firewall in new XML/Python style, from Open to Needs testing.
GitHub <noreply@github.com> committed rVYOSONEX654c8cad2daa: firewall: T3568: add XML definitions for firewall (authored by Viacheslav).
c-po changed the status of T3579: Rewrite vyatta-conntrack in new XML and Python flavour, a subtask of T3535: Rewrite vyatta-conntrack-sync in new XML and Python flavor, from Open to In progress.
c-po changed the status of T3579: Rewrite vyatta-conntrack in new XML and Python flavour from Open to In progress.
c-po closed T3569: Firewall wrong completion help values, a subtask of T2199: Rewrite firewall in new XML/Python style, as Resolved.
c-po moved T3569: Firewall wrong completion help values from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3569: Firewall wrong completion help values from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T3569: Firewall wrong completion help values from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.8) board.
SrividyaA changed the status of T3569: Firewall wrong completion help values, a subtask of T2199: Rewrite firewall in new XML/Python style, from Open to Confirmed.
SrividyaA changed the status of T3569: Firewall wrong completion help values from Open to Confirmed.
Providing an entire path of the file i.e. /opt/vyatta/etc/key-pair.template instead of "@sysconfdir@/key-pair.template", makes the command executable.
IPSec VPN in X509 mode needs ca cert file, also server/client cert has to be signed by the CA for identification.
So, maybe rewriting this script will be helpful.
Any suggestions are welcome.
May 24 2021
May 24 2021
fernando added a comment to T2807: IPv6 Link-Local Address - Automatically generation/configuration on GRE Interfaces.
I`m Sorry! it maybe was an error that version , actually I try with Vyos 1.3-rc4 and It works well :
c-po moved T3321: Bgp not possible to use internal|external remote as from Open to Backlog on the VyOS 1.4 Sagitta board.
c-po moved T3179: Add the ability to generate a support file from Open to Backlog on the VyOS 1.4 Sagitta board.
c-po moved T3241: Allow configuration of XAuth on IPsec Tunnels from Open to Backlog on the VyOS 1.4 Sagitta board.
c-po moved T3385: Support for disabling ARP responses from Open to Backlog on the VyOS 1.4 Sagitta board.
c-po moved T3404: Exception thrown when executing configuration load from Open to Backlog on the VyOS 1.4 Sagitta board.
c-po moved T3184: Add correct desctiptions for BGP neighbors from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3304: No way to use ipv4 address as next-hop in route-map from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3157: salt-minion fails to start due to permission error accessing /root/.salt/minion.log from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T936: Reimplementation of tech-support diagnostic file generation from Open to Backlog on the VyOS 1.4 Sagitta board.
c-po moved T3132: Enable egress flow accounting from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T1875: Add the ability to use network address as BGP neighbor (bgp listen range) from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3514: NIC flap at any interface change from Open to Backlog on the VyOS 1.4 Sagitta board.