I can confirm that happens only if you ssh via vrf and set static route6 in default vrf
And it works without debug, if you stop vyos-configd service
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Jul 23 2021
I can't reproduce it in any version.
Let's check what is different, and why only in your case do you have a problem, but other users never have this issue.
The latest .deb with fixed in pr above
Jul 22 2021
Interesting. But I never saw it.
Can you check the latest rolling? I have no other ideas yet.
I think it is already fixed in T3674
@ramaxlo You can try to set this workaround:
In T3694#98436, @ernstjo wrote:How to get the debug logs? I already enabled debug mode.
Tested configuration:
set interfaces ethernet eth1 address '192.0.2.1/24' set interfaces ethernet eth1 address 'dead:beef:b004:3::1/64' set interfaces tunnel tun0 address '2a0f:5707:b004:3::1/64' set interfaces tunnel tun0 encapsulation 'sit' set interfaces tunnel tun0 parameters ip ttl '255' set interfaces tunnel tun0 parameters ipv6 hoplimit '255' set interfaces tunnel tun0 remote '192.0.2.2' set interfaces tunnel tun0 source-address '192.0.2.1' set protocols static route6 cafe:e1f:b046:1::/64 next-hop 2a0f:5707:b004:3::2 set protocols static route6 cafe:e1f:b046:c000::/56 next-hop 2a0f:5707:b004:3::2
Try to touch frr debug to collect more information
https://docs.vyos.io/en/latest/debugging.html#frr
@ernstjo Can you share an example of your tunnel interface?
I don't understand yet how to reproduce it.
If you delete routes and add again, do you get the same result?
Jul 21 2021
Will be available in the next 1.3 beta release.
PR https://github.com/vyos/vyatta-cfg-quagga/pull/85
set protocols static table 1 route6 ::/0 next-hop fe80::11 interface eth0 commit
To reproduce, without the "interface" option
set protocols static table 1 route6 ::/0 next-hop fe80::11 commit
Jul 20 2021
Also, the bug still present, fix for which I sent above in diff
vyos@r5-1.3-myb# compare
[edit interfaces]
+vxlan vxlan0 {
+ mtu 1430
+ remote fe80::2
+ source-address fe80::3
+ source-interface eth0
+ vni 0
+}
[edit]
vyos@r5-1.3-myb# commit
WARNING: RFC7348 recommends VXLAN tunnels preserve a 1500 byte MTU@c-po It seems doesn't work
Jul 19 2021
@Scoopta Provide please example of configuration with every task.
If it a possible example of frr, for what you get and what you expected.
Can you send more examples how it looks like in podman cli?
Which parameters do you set, and how to check if it is successfully applied?
Jul 17 2021
In T3686#98142, @Scoopta wrote:My config which breaks
set interfaces openvpn vtun2 device-type tap set interfaces openvpn vtun2 mode site-to-site
Jul 16 2021
For first we have to solve this bug T3689
In my test configuration all works fine.
set interfaces bridge br0 address '10.0.0.1/30' set interfaces bridge br0 member interface vtun0 set interfaces openvpn vtun0 device-type 'tap' set interfaces openvpn vtun0 encryption cipher 'aes128' set interfaces openvpn vtun0 mode 'server' set interfaces openvpn vtun0 server subnet '192.168.1.0/24' set interfaces openvpn vtun0 tls ca-cert-file '/config/auth/openvpn/ca.crt' set interfaces openvpn vtun0 tls cert-file '/config/auth/openvpn/central.crt' set interfaces openvpn vtun0 tls dh-file '/config/auth/openvpn/dh.pem' set interfaces openvpn vtun0 tls key-file '/config/auth/openvpn/central.key'
It looks like was the same bug T1866
Try ssh keyscan
https://docs.vyos.io/en/latest/cli.html#remote-archive
@Scoopta Can you share commands on how to reproduce it?
It will be easier for developers to reproduce this bug.
Jul 15 2021
I can't reproduce it.
Re-open the task if you get this issue again.
@jingyun Can you describe more details?
PR for 1.3 https://github.com/vyos/vyos-1x/pull/925
PR for 1.4 https://github.com/vyos/vyos-1x/pull/926
Jul 13 2021
More details https://github.com/vyos/vyatta-webproxy/pull/17
Jul 12 2021
Jul 10 2021
Jul 9 2021
It is a feature request.
So we don't have a "large-comm-list" for set in our CLI. It is incorrect to compare "large-community" with "large-comm-list"
The option "delete" is preset only for the "lists"
I can't reproduce it in 1.3-rc5
set interfaces wireguard wg0 address '10.1.0.3/24' set interfaces wireguard wg0 address 'cafe:c01d:c01a::2/64' set interfaces wireguard wg0 description 'VPN-to-wg-PEER01-192.0.2.1' set interfaces wireguard wg0 ipv6 ospfv3 cost '24' set interfaces wireguard wg0 ipv6 ospfv3 dead-interval '40' set interfaces wireguard wg0 ipv6 ospfv3 hello-interval '10' set interfaces wireguard wg0 ipv6 ospfv3 instance-id '0' set interfaces wireguard wg0 ipv6 ospfv3 priority '1' set interfaces wireguard wg0 ipv6 ospfv3 retransmit-interval '5' set interfaces wireguard wg0 ipv6 ospfv3 transmit-delay '1' set interfaces wireguard wg0 peer PEER01 address '192.0.2.1' set interfaces wireguard wg0 peer PEER01 allowed-ips '0.0.0.0/0' set interfaces wireguard wg0 peer PEER01 allowed-ips '10.0.3.0/24' set interfaces wireguard wg0 peer PEER01 allowed-ips '::/0' set interfaces wireguard wg0 peer PEER01 port '12345' set interfaces wireguard wg0 peer PEER01 pubkey 'Cpqy8=' set interfaces wireguard wg0 port '54321' set protocols ospf area 0 network '10.1.0.0/24' set protocols ospf passive-interface 'default' set protocols ospf passive-interface-exclude 'wg0' set protocols ospfv3 area 0 interface 'wg0'
In the latest rolling release all works fine without any changes
vyos@r1-roll:~$ show version
Jul 8 2021
It seems there were changes in squid , but not in our code.
It is not used /var/log/frr anymore T2061
Jul 5 2021
@tjh If you have a test lab, can you check conntrack-sync in the latest 1.3?
Jul 4 2021
Jul 2 2021
Fixed for 1.3 in commit https://github.com/vyos/vyos-1x/commit/21527ef4551613fe9b7eed9e4b2ce33ad46fe540
Fixed for 1.3 in commit https://github.com/vyos/vyos-1x/commit/21527ef4551613fe9b7eed9e4b2ce33ad46fe540 and T3535
Jun 29 2021
Is it worked in 1.3/1.2?
Jun 28 2021
For 1.2.7 it adds unexpected multicast group per "save"
Configs for reproduce:
To reproduce (VyOS 1.3-beta-202106271614):
Doesn't work, VyOS 1.4-rolling-202106271939