@SquirePug Can you check 1.2.7 release?
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Jun 22 2021
Jun 22 2021
erkin changed the status of T3644: Replace GCC with a simpler preprocessor for including nested XML snippets in XML documents from Open to In progress.
Viacheslav added a comment to T1790: OSPF Exchanged Routes marked as invalid when run through a GRE PTMP/PTP OSPF between peers .
In T3640#96771, @Viacheslav wrote:We don't use any configuration file for it, so I think we can't use wg-quick
We use "wg set"$ sudo wg set --help Usage: wg set <interface> [listen-port <port>] [fwmark <mark>] [private-key <file path>] [peer <base64 public key> [remove] [preshared-key <file path>] [endpoint <ip>:<port>] [persistent-keepalive <interval seconds>] [allowed-ips <ip1>/<cidr1>[,<ip2>/<cidr2>]...] ]...
Viacheslav added a comment to T2892: Remove command: "set firewall options interface <interface> disable".
I don't see the reason to delete the "disable" option, as it uses for adjust-mss and adjust-mss6.
And you need temporarily disable it.
GitHub <noreply@github.com> committed rVYOSONEXdebd7996f89b: Merge pull request #895 from sever-sever/T3636 (authored by c-po).
Viacheslav reassigned T3629: IPoE server shifting address in the range from Viacheslav to Unknown Object (User).
Try to set single quotes.
Different format
vyos@r1-roll:~$ show vpn ipsec sa Connection State Uptime Bytes In/Out Packets In/Out Remote address Remote ID Proposal ------------------------ ------- -------- -------------- ---------------- ---------------- ----------- ---------- peer_192-0-2-2_tunnel_1 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_10 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_11 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_12 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_13 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_14 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_15 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_16 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_17 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_18 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_19 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_2 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_20 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_3 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_4 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_5 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_6 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_7 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_8 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_9 down N/A N/A N/A N/A N/A N/A vyos@r1-roll:~$
Confirmed that's what is happening:
vyos@cr01a-vyos# TEST='variable' [edit] vyos@cr01a-vyos# set system login user vyos authentication plaintext-password HqNzXaK27k19$TEST [edit] vyos@cr01a-vyos# comp [edit system login user vyos authentication] +plaintext-password HqNzXaK27k19variable
@fernando Are you sure you're testing this on 1.3?
vyos@cr01a-vyos# run show ver
sarthurdev <965089+sarthurdev@users.noreply.github.com> committed rVYOSONEXa1aaf4fb9c0e: ipsec: T3643: T2816: Update IPSec VPN op-mode commands.
GitHub <noreply@github.com> committed rVYOSONEX395595f832ac: Merge pull request #894 from sarthurdev/T3643 (authored by c-po).
@SrividyaA Fixed in PR https://github.com/vyos/vyos-1x/pull/894
Jun 21 2021
Jun 21 2021
I 've been checking this behavior with a different password , also I used the same password as you . But I couldn't reproduce the issue , both cases i add $ in the word and change the hash, let me show :
Viacheslav updated the task description for T3643: show vpn ipsec sa doesn't show tunnels in "down" state.
Viacheslav changed the subtype of T3636: SSTP / L2TP ipv6 support broken from "Bug" to "Feature Request".
Viacheslav renamed T3643: show vpn ipsec sa doesn't show tunnels in "down" state from show vpn ipsec sa doesn't show tunnel in "down" state to show vpn ipsec sa doesn't show tunnels in "down" state.
In fresh/new setup, the output of the command "show vpn ike sa" is throwing an exception error:
We don't use any configuration file for it, so I think we can't use wg-quick
We use "wg set"
$ sudo wg set --help Usage: wg set <interface> [listen-port <port>] [fwmark <mark>] [private-key <file path>] [peer <base64 public key> [remove] [preshared-key <file path>] [endpoint <ip>:<port>] [persistent-keepalive <interval seconds>] [allowed-ips <ip1>/<cidr1>[,<ip2>/<cidr2>]...] ]...
In T3640#96759, @Viacheslav wrote:Is it helps in your case?
set interfaces wireguard wg0 disable commit del interfaces wireguard wg0 disable commitThere is no any native command for reset wireguard interface in Linux (as I know). Also, we don't use any daemons which we can restart to "re-establish" session.
Is one host behind nat?
erkin renamed T3378: commit-archive source-address broken for IPv6 addresses from commit-archive source-address Broken to commit-archive source-address broken for IPv6 addresses.
erkin changed the subtype of T3378: commit-archive source-address broken for IPv6 addresses from "Task" to "Bug".
c-po added a reverting change for rVYOSONEXb776edb38a47: vmware: add tools.conf: rVYOSONEX5b09d3571340: Revert "vmware: add tools.conf".
Is it helps in your case?
set interfaces wireguard wg0 disable commit del interfaces wireguard wg0 disable commit
There is no any native command for reset wireguard interface in Linux (as I know). Also, we don't use any daemons which we can restart to "re-establish" session.
Is one host behind nat?
erkin closed T3628: commit-archive source-address Interface Broken, a subtask of T3356: Script for remote file transfers, as Resolved.
erkin closed T3563: commit-archive breaks with IPv6 source addresses, a subtask of T3356: Script for remote file transfers, as Resolved.
Jun 20 2021
Jun 20 2021
GitHub <noreply@github.com> committed rVYOSONEX0de84e53c366: Merge pull request #893 from erkin/T3628 (authored by c-po).
c-po moved T3641: Upgrade base system from Debian Buster -> Debian Bullseye from Open to In Progress on the VyOS 1.4 Sagitta board.
GitHub <noreply@github.com> committed rVYOSONEX62b501acee27: Debian: add missing dependencies on iproute2, sudo, sed and vyatta-bash (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEXab3be6ad4eac: Merge pull request #889 from erkin/current (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX3eda414cb86a: Merge pull request #892 from erkin/T3563 (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEXc6c22c2a2c54: Merge pull request #891 from erkin/preprocessor-fix (authored by c-po).
erkin changed the status of T3628: commit-archive source-address Interface Broken, a subtask of T3356: Script for remote file transfers, from Open to In progress.
erkin changed the status of T3628: commit-archive source-address Interface Broken from Open to In progress.
Now that all major instances of curl have been replaced with the in-house script, we can begin to backport these changes to v1.3 in small pieces ahead of the first stable version.
c-po moved T1522: If a config session is not close cleanly, the unionfs-mount is not cleaned up from Open to Backlog on the VyOS 1.4 Sagitta board.
c-po moved T3635: Add ability to use mDNS repeater with VRRP from Open to Finished on the VyOS 1.4 Sagitta board.
c-po renamed T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Update Linux Kernel to v5.4.126 / 5.10.44 to Update Linux Kernel to v5.4.127 / 5.10.45.
Now I see the problem. paramiko.client.SSHClient().close() calls paramiko.transport.Transport().close() which implicitly calls socket.close() regardless of whether the socket was internally created or externally provided. This is a bit counterintuitive but I'll simply remove the socket closing logic then.
sarthurdev <965089+sarthurdev@users.noreply.github.com> committed rVYOSONEX0dbddd8b9e10: ipsec: T3617: Correct typo on encryption variable.
GitHub <noreply@github.com> committed rVYOSONEXc9c5949c525f: Merge pull request #890 from sarthurdev/T3617_typo (authored by c-po).
erkin changed the subtype of T1522: If a config session is not close cleanly, the unionfs-mount is not cleaned up from "Task" to "Bug".
sarthurdev <965089+sarthurdev@users.noreply.github.com> committed rVYOSONEXd372734bfd2e: mdns: vrrp: T3635: Add ability to use mDNS repeater with VRRP.
GitHub <noreply@github.com> committed rVYOSONEXfdb1e8756fd4: Merge pull request #887 from sarthurdev/mdns_vrrp (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX6f11089458a5: Merge pull request #888 from tjjh89017/fix_vrf_bind-to-all (authored by c-po).