Looks fine on boot now.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Jun 23 2021
Jun 23 2021
I've not checked later versions. Maybe it was already fixed on 1.2.7 or 1.3/1.4 ?
Now that the Paramiko and Cryptography versions have been updated, does this problem persist with the newer nightlies? @SrividyaA @FileGo
erkin closed T3356: Script for remote file transfers, a subtask of T3355: Remove all remaining legacy Vyatta code, as Resolved.
erkin changed the status of T3506: Migrate loadkey command to op-mode, a subtask of T3355: Remove all remaining legacy Vyatta code, from In progress to On hold.
Done with generate public-key-command. loadkey is deprecated and will be removed in a future version.
erkin changed the status of T3506: Migrate loadkey command to op-mode, a subtask of T3356: Script for remote file transfers, from In progress to On hold.
In T3640#96876, @c-po wrote:If your host is behind NAT, could it possibly be that the NAT translation entry expired?
Does the following work:
ip link set dev wg0 down; ip link set dev wg0 up
In T3638#96831, @Viacheslav wrote:Try to set single quotes.
Jun 22 2021
Jun 22 2021
yes, I am using the following version :
c-po closed T3645: Bullseye: ethtool changed output for ring-buffer information, a subtask of T3641: Upgrade base system from Debian Buster -> Debian Bullseye, as Resolved.
c-po changed the status of T3645: Bullseye: ethtool changed output for ring-buffer information, a subtask of T3641: Upgrade base system from Debian Buster -> Debian Bullseye, from Open to In progress.
c-po changed the status of T3645: Bullseye: ethtool changed output for ring-buffer information from Open to In progress.
GitHub <noreply@github.com> committed rVYOSONEX308069860351: Debian: add missing dependency on bridge-utils (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEXed6b185c40f2: T3644: build: replace GCC preprocessor with a Python script for template… (authored by erkin).
GitHub <noreply@github.com> committed rVYOSONEX91afeaca18e8: Debian: T3641: add dependency on squashfs-tools (authored by c-po).
If your host is behind NAT, could it possibly be that the NAT translation entry expired?
c-po changed the status of T3641: Upgrade base system from Debian Buster -> Debian Bullseye from Open to In progress.
Viacheslav edited projects for T3582: 'delete log file' does not work, added: VyOS 1.2 Crux (VyOS 1.2.8); removed VyOS 1.2 Crux (VyOS 1.2.7).
erkin changed the status of T3644: Replace GCC with a simpler preprocessor for including nested XML snippets in XML documents from Open to In progress.
Viacheslav added a comment to T1790: OSPF Exchanged Routes marked as invalid when run through a GRE PTMP/PTP OSPF between peers .
@SquirePug Can you check 1.2.7 release?
In T3640#96771, @Viacheslav wrote:We don't use any configuration file for it, so I think we can't use wg-quick
We use "wg set"$ sudo wg set --help Usage: wg set <interface> [listen-port <port>] [fwmark <mark>] [private-key <file path>] [peer <base64 public key> [remove] [preshared-key <file path>] [endpoint <ip>:<port>] [persistent-keepalive <interval seconds>] [allowed-ips <ip1>/<cidr1>[,<ip2>/<cidr2>]...] ]...
Viacheslav added a comment to T2892: Remove command: "set firewall options interface <interface> disable".
I don't see the reason to delete the "disable" option, as it uses for adjust-mss and adjust-mss6.
And you need temporarily disable it.
GitHub <noreply@github.com> committed rVYOSONEXdebd7996f89b: Merge pull request #895 from sever-sever/T3636 (authored by c-po).
Viacheslav reassigned T3629: IPoE server shifting address in the range from Viacheslav to Unknown Object (User).
Try to set single quotes.
Different format
vyos@r1-roll:~$ show vpn ipsec sa Connection State Uptime Bytes In/Out Packets In/Out Remote address Remote ID Proposal ------------------------ ------- -------- -------------- ---------------- ---------------- ----------- ---------- peer_192-0-2-2_tunnel_1 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_10 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_11 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_12 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_13 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_14 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_15 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_16 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_17 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_18 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_19 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_2 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_20 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_3 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_4 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_5 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_6 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_7 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_8 down N/A N/A N/A N/A N/A N/A peer_192-0-2-2_tunnel_9 down N/A N/A N/A N/A N/A N/A vyos@r1-roll:~$
Confirmed that's what is happening:
vyos@cr01a-vyos# TEST='variable' [edit] vyos@cr01a-vyos# set system login user vyos authentication plaintext-password HqNzXaK27k19$TEST [edit] vyos@cr01a-vyos# comp [edit system login user vyos authentication] +plaintext-password HqNzXaK27k19variable
@fernando Are you sure you're testing this on 1.3?
vyos@cr01a-vyos# run show ver
sarthurdev <965089+sarthurdev@users.noreply.github.com> committed rVYOSONEXa1aaf4fb9c0e: ipsec: T3643: T2816: Update IPSec VPN op-mode commands.
GitHub <noreply@github.com> committed rVYOSONEX395595f832ac: Merge pull request #894 from sarthurdev/T3643 (authored by c-po).
@SrividyaA Fixed in PR https://github.com/vyos/vyos-1x/pull/894
Jun 21 2021
Jun 21 2021
I 've been checking this behavior with a different password , also I used the same password as you . But I couldn't reproduce the issue , both cases i add $ in the word and change the hash, let me show :
Viacheslav updated the task description for T3643: show vpn ipsec sa doesn't show tunnels in "down" state.
Viacheslav changed the subtype of T3636: SSTP / L2TP ipv6 support broken from "Bug" to "Feature Request".
Viacheslav renamed T3643: show vpn ipsec sa doesn't show tunnels in "down" state from show vpn ipsec sa doesn't show tunnel in "down" state to show vpn ipsec sa doesn't show tunnels in "down" state.
In fresh/new setup, the output of the command "show vpn ike sa" is throwing an exception error:
We don't use any configuration file for it, so I think we can't use wg-quick
We use "wg set"
$ sudo wg set --help Usage: wg set <interface> [listen-port <port>] [fwmark <mark>] [private-key <file path>] [peer <base64 public key> [remove] [preshared-key <file path>] [endpoint <ip>:<port>] [persistent-keepalive <interval seconds>] [allowed-ips <ip1>/<cidr1>[,<ip2>/<cidr2>]...] ]...
In T3640#96759, @Viacheslav wrote:Is it helps in your case?
set interfaces wireguard wg0 disable commit del interfaces wireguard wg0 disable commitThere is no any native command for reset wireguard interface in Linux (as I know). Also, we don't use any daemons which we can restart to "re-establish" session.
Is one host behind nat?
erkin renamed T3378: commit-archive source-address broken for IPv6 addresses from commit-archive source-address Broken to commit-archive source-address broken for IPv6 addresses.
erkin changed the subtype of T3378: commit-archive source-address broken for IPv6 addresses from "Task" to "Bug".
c-po added a reverting change for rVYOSONEXb776edb38a47: vmware: add tools.conf: rVYOSONEX5b09d3571340: Revert "vmware: add tools.conf".
Is it helps in your case?
set interfaces wireguard wg0 disable commit del interfaces wireguard wg0 disable commit
There is no any native command for reset wireguard interface in Linux (as I know). Also, we don't use any daemons which we can restart to "re-establish" session.
Is one host behind nat?
erkin closed T3628: commit-archive source-address Interface Broken, a subtask of T3356: Script for remote file transfers, as Resolved.
erkin closed T3563: commit-archive breaks with IPv6 source addresses, a subtask of T3356: Script for remote file transfers, as Resolved.
Jun 20 2021
Jun 20 2021
GitHub <noreply@github.com> committed rVYOSONEX0de84e53c366: Merge pull request #893 from erkin/T3628 (authored by c-po).
c-po moved T3641: Upgrade base system from Debian Buster -> Debian Bullseye from Open to In Progress on the VyOS 1.4 Sagitta board.
GitHub <noreply@github.com> committed rVYOSONEX62b501acee27: Debian: add missing dependencies on iproute2, sudo, sed and vyatta-bash (authored by c-po).