Search
Use Results
Edit Query
Hide Query

	Include stories about projects I am a member of.

Aug 17 2021

Viacheslav closed T2525: OSPFv3 missing route map, not establishing as Resolved.

Not reproducible update from 1.2.4 to 1.3-rc5
1.2.4 config

set interfaces ethernet eth1 bond-group bond0
set interfaces ethernet eth1 bond-group bond0
set interfaces bonding bond0 vif 29 address '192.168.159.167/31'
set interfaces bonding bond0 vif 29 address 'fd12:45:fff:29::2/126'
set interfaces bonding bond0 vif 29 description 'Point to Point - DMZ'
set interfaces bonding bond0 vif 29 ip ospf dead-interval '20'
set interfaces bonding bond0 vif 29 ip ospf hello-interval '10'
set interfaces bonding bond0 vif 29 ip ospf priority '220'
set interfaces bonding bond0 vif 29 ip ospf retransmit-interval '5'
set interfaces bonding bond0 vif 29 ip ospf transmit-delay '1'
set interfaces bonding bond0 vif 29 ipv6 dup-addr-detect-transmits '1'
set interfaces bonding bond0 vif 29 ipv6 ospfv3 cost '1'
set interfaces bonding bond0 vif 29 ipv6 ospfv3 dead-interval '20'
set interfaces bonding bond0 vif 29 ipv6 ospfv3 hello-interval '10'
set interfaces bonding bond0 vif 29 ipv6 ospfv3 instance-id '0'
set interfaces bonding bond0 vif 29 ipv6 ospfv3 priority '220'
set interfaces bonding bond0 vif 29 ipv6 ospfv3 retransmit-interval '5'
set interfaces bonding bond0 vif 29 ipv6 ospfv3 transmit-delay '1'
set interfaces bonding bond0 vif 29 mtu '1500'
set interfaces loopback lo address 'fd12:45::14/128'
set policy route-map OSPF-Filter description 'This route map will apply to outgoing routes sent via OSPF'
set policy route-map OSPF-Filter rule 10 action 'permit'
set policy route-map OSPF-Filter rule 10 description 'Only permit loopback interface'
set policy route-map OSPF-Filter rule 10 match interface 'lo'
set policy route-map OSPF-Filter rule 100 action 'deny'
set policy route-map OSPF-Filter rule 100 description 'Default deny'
set protocols ospfv3 area 0.0.0.0 interface 'lo'
set protocols ospfv3 area 0.0.0.0 interface 'bond0.29'
set protocols ospfv3 area 0.0.0.0 range fd12:45:fff:29::/126
set protocols ospfv3 parameters router-id '192.168.159.241'
set protocols ospfv3 redistribute connected route-map 'OSPF-Filter'

Aug 17 2021, 8:08 AM · VyOS 1.3 Equuleus (1.3.0-epa1)

Viacheslav closed T1550: Add support for Large BGP Community show commands as Resolved.

Large-community and large-community-list it is different functions.
It seems all works fine

Aug 17 2021, 7:50 AM · VyOS 1.3 Equuleus (1.3.0), test

Viacheslav changed the status of T690: Allow OpenVPN servers to push routes with custom metric values from Open to Needs testing.

Aug 17 2021, 7:34 AM · VyOS 1.3 Equuleus (1.3.0-epa1)

Viacheslav added a comment to T690: Allow OpenVPN servers to push routes with custom metric values.

@darkdragon-001 It will be available in the next rolling release, can you test it?

Aug 17 2021, 7:33 AM · VyOS 1.3 Equuleus (1.3.0-epa1)

Aug 16 2021

Viacheslav closed T1594: l2tpv3 error on IPv6 local-ip as Resolved.

Aug 16 2021, 9:19 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta, test

Viacheslav added a comment to T690: Allow OpenVPN servers to push routes with custom metric values.

PR for current https://github.com/vyos/vyos-1x/pull/974

Aug 16 2021, 8:39 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

Viacheslav added a project to T690: Allow OpenVPN servers to push routes with custom metric values: VyOS 1.4 Sagitta.

Aug 16 2021, 4:20 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

Viacheslav moved T3738: openvpn fails if server and authentication are configured from Need Triage to Finished on the VyOS 1.3 Equuleus board.

Aug 16 2021, 9:40 AM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

Viacheslav closed T3738: openvpn fails if server and authentication are configured as Resolved.

Fixed, 1.3-beta-202108151336

vyos@r4-1.3# run show conf com | match openvpn
set interfaces openvpn vtun10 encryption cipher 'aes256'
set interfaces openvpn vtun10 hash 'sha512'
set interfaces openvpn vtun10 local-host '192.168.122.14'
set interfaces openvpn vtun10 local-port '1194'
set interfaces openvpn vtun10 mode 'server'
set interfaces openvpn vtun10 persistent-tunnel
set interfaces openvpn vtun10 protocol 'udp'
set interfaces openvpn vtun10 server client client1 ip '10.10.0.10'
set interfaces openvpn vtun10 server domain-name 'vyos.net'
set interfaces openvpn vtun10 server max-connections '250'
set interfaces openvpn vtun10 server name-server '172.16.254.30'
set interfaces openvpn vtun10 server subnet '10.10.0.0/24'
set interfaces openvpn vtun10 server topology 'subnet'
set interfaces openvpn vtun10 tls ca-cert-file '/config/auth/ca.crt'
set interfaces openvpn vtun10 tls cert-file '/config/auth/central.crt'
set interfaces openvpn vtun10 tls dh-file '/config/auth/dh.pem'
set interfaces openvpn vtun10 tls key-file '/config/auth/central.key'
set interfaces openvpn vtun10 tls tls-version-min '1.0'
set interfaces openvpn vtun10 use-lzo-compression
[edit]
vyos@r4-1.3#
vyos@r4-1.3# set interfaces openvpn vtun10 authentication username foo
[edit]
vyos@r4-1.3# commit

Aug 16 2021, 9:40 AM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

Aug 15 2021

c-po closed T3756: VyOS generates invalid QR code for wireguard clients as Resolved.

Aug 15 2021, 3:22 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

erkin closed T3275: Disable conntrack helpers by default as Resolved.

Aug 15 2021, 10:55 AM · VyOS 1.5 Circinus

Aug 14 2021

erkin closed T1083: Implement persistent/random address and port mapping options for NAT rules, a subtask of T3710: Upgrade the kernel in 1.3 to 5.10, as Resolved.

Aug 14 2021, 5:54 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

erkin closed T1083: Implement persistent/random address and port mapping options for NAT rules as Resolved.

I can confirm that this works fine on the latest 1.3 nightly.

Aug 14 2021, 5:54 PM · VyOS 1.2 Crux (VyOS 1.2.9), VyOS 1.3 Equuleus (1.3.0), test, VyOS 1.4 Sagitta

erkin claimed T1083: Implement persistent/random address and port mapping options for NAT rules.

Aug 14 2021, 5:16 PM · VyOS 1.2 Crux (VyOS 1.2.9), VyOS 1.3 Equuleus (1.3.0), test, VyOS 1.4 Sagitta

erkin closed T521: Network services may fail if vyatta-router.service startup takes longer than a few seconds as Resolved.

I cannot replicate this in 1.2.8 or 1.3.0-rc5. No matter how long vyos-router.service (even absurdly high times) stalls, ssh.service happily starts. This was probably resolved a long time ago, making this a ghost bug.

Aug 14 2021, 4:39 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

Aug 13 2021

jestabro moved T3234: multi_to_list fails in certain cases, with root cause an element redundancy in XML interface-definitions from Need Triage to Finished on the VyOS 1.3 Equuleus board.

Aug 13 2021, 7:41 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

Viacheslav added a comment to T3736: openvpn-option keeps and adds double dashes ''--".

https://github.com/vyos/vyos-1x/blob/595ab70a5d50ef1f9e166959affd96ea1ee8c8c8/data/templates/openvpn/server.conf.tmpl#L228

Aug 13 2021, 5:23 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

Viacheslav moved T3738: openvpn fails if server and authentication are configured from Open to Backport Candidates on the VyOS 1.4 Sagitta board.

Aug 13 2021, 5:19 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

Viacheslav claimed T3738: openvpn fails if server and authentication are configured.

Aug 13 2021, 4:47 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

jestabro added a project to T3234: multi_to_list fails in certain cases, with root cause an element redundancy in XML interface-definitions: test.

Aug 13 2021, 4:35 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

Viacheslav added a comment to T3738: openvpn fails if server and authentication are configured.

PR https://github.com/vyos/vyos-1x/pull/968

Aug 13 2021, 3:59 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

Viacheslav claimed T3708: isisd and gre-bridge commit error.

Aug 13 2021, 3:43 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

dmbaturin reassigned T927: IPv6 GRE packets not being forwarded from zsdc to erkin.

Aug 13 2021, 1:52 PM · VyOS 1.3 Equuleus (1.3.6), test

Viacheslav added a comment to T3708: isisd and gre-bridge commit error.

PR for current https://github.com/vyos/vyos-1x/pull/967

Aug 13 2021, 12:37 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

c-po closed T3740: HTTPs API breaks when the address is IPv6 as Resolved.

Aug 13 2021, 10:35 AM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

c-po added projects to T3740: HTTPs API breaks when the address is IPv6: test, VyOS 1.3 Equuleus.

Aug 13 2021, 10:32 AM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

Aug 12 2021

c-po closed T3746: Inform users logging into the system about a pending reboot as Resolved.

Aug 12 2021, 7:00 PM · VyOS 1.3 Equuleus (1.3.0-epa1), test, VyOS 1.4 Sagitta

c-po changed the status of T3746: Inform users logging into the system about a pending reboot from Open to In progress.

Aug 12 2021, 6:21 PM · VyOS 1.3 Equuleus (1.3.0-epa1), test, VyOS 1.4 Sagitta

c-po added a subtask for T3710: Upgrade the kernel in 1.3 to 5.10: T3318: Update Linux Kernel to v5.4.208 / 5.10.142.

Aug 12 2021, 5:56 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

jestabro reopened T3732: override-default helper should support adding defaultValues to default less nodes as "Open".

Aug 12 2021, 4:25 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

jestabro reopened T3574: Add constraintGroup for combining validators with logical AND as "Open".

Aug 12 2021, 4:24 PM · VyOS 1.4 Sagitta (1.4.0-epa1)

Unknown Object (User) changed the status of T2432: dhcpd: Can't create new lease file: Permission denied from Unknown Status to Resolved.

Aug 12 2021, 2:35 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

c-po closed T3744: Dns forwarding statistics formatting missing a new line as Resolved.

Aug 12 2021, 12:12 PM · VyOS 1.3 Equuleus (1.3.0), test, VyOS 1.4 Sagitta

Viacheslav added a comment to T3708: isisd and gre-bridge commit error.

Another bug.
From time to time I get errors in debug mode ("touch /tmp/vyos.frr.debug" and "sudo systemctl stop vyos-configd") when changing lsp-mtu size

vyos@r1-roll# set protocols isis lsp-mtu 1308
[edit]
vyos@r1-roll# commit
[ protocols isis ]

Aug 12 2021, 11:36 AM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

erkin changed the status of T521: Network services may fail if vyatta-router.service startup takes longer than a few seconds from Open to In progress.

Aug 12 2021, 10:42 AM · VyOS 1.3 Equuleus (1.3.0-epa1)

c-po closed T3731: verify_accel_ppp_base_service return wrong config error for SSP as Resolved.

Aug 12 2021, 8:00 AM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

c-po added a comment to T3737: openvpn-option needs to be able to support quotes as since openvpn 2.4..

We have this problem in more then one case. The solution so gar is to use " as quote which we later on render in Jinja2

Aug 12 2021, 7:45 AM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.4 Sagitta

c-po added a comment to T3738: openvpn fails if server and authentication are configured.

Sounds like a missing validator. Wo should prevent users from doing such things ;)

Aug 12 2021, 7:33 AM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

Aug 11 2021

SrividyaA added a comment to T3437: BGP Confederation Addition Causes Error.

I added a new neighbor belonging to the sub-AS 65031 to the existing bgp configuration:

Aug 11 2021, 1:56 PM · VyOS 1.3 Equuleus (1.3.7)

Viacheslav added a project to T3708: isisd and gre-bridge commit error: VyOS 1.4 Sagitta.

Aug 11 2021, 12:07 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

Viacheslav added a comment to T3708: isisd and gre-bridge commit error.

To reproduce in 1.4:

Aug 11 2021, 12:07 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

Viacheslav added a comment to T3737: openvpn-option needs to be able to support quotes as since openvpn 2.4..

As Workaround in T3350 set raw option "config /path/to/config/file"

Aug 11 2021, 10:14 AM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.4 Sagitta

UnicronNL triaged T3738: openvpn fails if server and authentication are configured as Normal priority.

Aug 11 2021, 9:16 AM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

UnicronNL added projects to T3736: openvpn-option keeps and adds double dashes ''--": test, VyOS 1.3 Equuleus.

Aug 11 2021, 8:51 AM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

UnicronNL created T3737: openvpn-option needs to be able to support quotes as since openvpn 2.4..

Aug 11 2021, 8:13 AM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.4 Sagitta

Aug 10 2021

dmbaturin reopened T770: Bonded interfaces get updated with incorrect hw-id in config. as "Open".

Aug 10 2021, 2:13 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

Viacheslav closed T3730: op-mode conntrack-sync miss some functions as Resolved.

Aug 10 2021, 9:25 AM · VyOS 1.3 Equuleus (1.3.0-epa1)

Aug 9 2021

Unknown Object (User) added a comment to T3731: verify_accel_ppp_base_service return wrong config error for SSP.

PR for Equuleus https://github.com/vyos/vyos-1x/pull/959

Aug 9 2021, 9:08 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

Unknown Object (User) changed the status of T3731: verify_accel_ppp_base_service return wrong config error for SSP from Open to In progress.

Aug 9 2021, 8:55 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

Viacheslav added a project to T3730: op-mode conntrack-sync miss some functions: test.

Aug 9 2021, 7:08 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

UnicronNL closed T1501: VPN Commit Errors as Resolved.

https://github.com/vyos/vyatta-cfg-vpn/commit/2cec760601a6e85ca8e0b6a30c173196a97a777a
Back-ported the dhcp ip check loop to 1.3

Aug 9 2021, 2:09 PM · VyOS 1.3 Equuleus (1.3.0), test

Viacheslav added a comment to T3537: Unable to override the default OSPFv3 link cost for wireguard interface.

@dtoux Did you test it in 1.3.0-rc5?

Aug 9 2021, 12:18 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

Viacheslav assigned T3677: "sipcalc" not included in 1.3 to dmbaturin.

Aug 9 2021, 12:11 PM · VyOS 1.3 Equuleus (1.3.0), test

Unknown Object (User) closed T2776: QAT acceleration not working for IPSec AES-128 (CBC) / SHA256 tunnel as Invalid.

Aug 9 2021, 11:17 AM · VyOS 1.3 Equuleus (1.3.0-epa1)

Unknown Object (User) added a comment to T2776: QAT acceleration not working for IPSec AES-128 (CBC) / SHA256 tunnel .

Tested on 1.3-rc5, all works properly

set vpn ipsec esp-group ESP_DEFAULT compression 'disable'
set vpn ipsec esp-group ESP_DEFAULT lifetime '3600'
set vpn ipsec esp-group ESP_DEFAULT mode 'tunnel'
set vpn ipsec esp-group ESP_DEFAULT pfs 'dh-group19'
set vpn ipsec esp-group ESP_DEFAULT proposal 10 encryption 'aes128'
set vpn ipsec esp-group ESP_DEFAULT proposal 10 hash 'sha256'
set vpn ipsec ike-group IKEv2_DEFAULT close-action 'none'
set vpn ipsec ike-group IKEv2_DEFAULT dead-peer-detection action 'hold'
set vpn ipsec ike-group IKEv2_DEFAULT dead-peer-detection interval '30'
set vpn ipsec ike-group IKEv2_DEFAULT dead-peer-detection timeout '120'
set vpn ipsec ike-group IKEv2_DEFAULT ikev2-reauth 'no'
set vpn ipsec ike-group IKEv2_DEFAULT key-exchange 'ikev2'
set vpn ipsec ike-group IKEv2_DEFAULT lifetime '10800'
set vpn ipsec ike-group IKEv2_DEFAULT mobike 'disable'
set vpn ipsec ike-group IKEv2_DEFAULT proposal 10 dh-group '19'
set vpn ipsec ike-group IKEv2_DEFAULT proposal 10 encryption 'aes128'
set vpn ipsec ike-group IKEv2_DEFAULT proposal 10 hash 'sha256'

Flow served QAT

vyos@R2-QAT#  run show system acceleration qat device qat_dev0 flows 
+------------------------------------------------+
| FW Statistics for Qat Device                   |
+------------------------------------------------+
| Firmware Requests [AE  0]:               60046 |
| Firmware Responses[AE  0]:               60046 |
+------------------------------------------------+
| Firmware Requests [AE  1]:              112720 |
| Firmware Responses[AE  1]:              112720 |
+------------------------------------------------+
| Firmware Requests [AE  2]:              219657 |
| Firmware Responses[AE  2]:              219657 |
+------------------------------------------------+
| Firmware Requests [AE  3]:               60046 |
| Firmware Responses[AE  3]:               60046 |
+------------------------------------------------+
| Firmware Requests [AE  4]:              112722 |
| Firmware Responses[AE  4]:              112722 |
+------------------------------------------------+
| Firmware Requests [AE  5]:              219657 |
| Firmware Responses[AE  5]:              219657 |
+------------------------------------------------+

Interrupts

vyos@R2-QAT# run show system acceleration qat interrupts 
140:      44039          0          0          0          0          0          0          0  IR-PCI-MSI 524288-edge      qat0-bundle0
141:          0      42358          0          0          0          0          0          0  IR-PCI-MSI 524289-edge      qat0-bundle1
142:          0          0          0          0          0          0          0          0  IR-PCI-MSI 524290-edge      qat0-bundle2
143:          0          0          0          0          0          0          0          0  IR-PCI-MSI 524291-edge      qat0-bundle3
144:          0          0          0          0          0          0          0          0  IR-PCI-MSI 524292-edge      qat0-bundle4
145:          0          0          0          0          0          0          0          0  IR-PCI-MSI 524293-edge      qat0-bundle5
146:          0          0          0          0          0          0          0          0  IR-PCI-MSI 524294-edge      qat0-bundle6
147:          0          0          0          0          0          0          0          0  IR-PCI-MSI 524295-edge      qat0-bundle7
148:          0          0          0          0          0          0          0          0  IR-PCI-MSI 524296-edge      qat0-bundle8
149:          0          0          0          0          0          0          0          0  IR-PCI-MSI 524297-edge      qat0-bundle9
150:          0          0          0          0          0          0          0          0  IR-PCI-MSI 524298-edge      qat0-bundle10
151:          0          0          0          0          0          0          0          0  IR-PCI-MSI 524299-edge      qat0-bundle11
152:          0          0          0          0          0          0          0          0  IR-PCI-MSI 524300-edge      qat0-bundle12
153:          0          0          0          0          0          0          0          0  IR-PCI-MSI 524301-edge      qat0-bundle13
154:          0          0          0          0          0          0          0          0  IR-PCI-MSI 524302-edge      qat0-bundle14
155:          0          0          0          0          0          0          0          0  IR-PCI-MSI 524303-edge      qat0-bundle15
156:          0          0          0          0          0          0          0          0  IR-PCI-MSI 524304-edge      qat0-ae-cluster

Aug 9 2021, 11:17 AM · VyOS 1.3 Equuleus (1.3.0-epa1)

Unknown Object (User) changed the status of T3695: OpenConnect reports commit success when ocserv fails to start due to SSL cert/key file issues from Open to Needs testing.

PR for 1.3 https://github.com/vyos/vyos-1x/pull/957

Aug 9 2021, 9:58 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Aug 8 2021

c-po closed T2027: get_config_dict is failing when the configuration section is empty/missing as Resolved.

Aug 8 2021, 4:48 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

c-po added a comment to T2027: get_config_dict is failing when the configuration section is empty/missing.

>>> from vyos.config import Config
>>> conf = Config()
>>> conf.get_config_dict(['service', 'ssh'])
{'ssh': {'disable-host-validation': {}, 'port': ['22']}}
>>> conf.get_config_dict(['service', 'non-existing'])
{}

Aug 8 2021, 4:47 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

UnicronNL closed T169: Image install should put correct serial console device in created GRUB menu entry as Resolved.

Checks the grub config rule by rule if ttyS/ttyUSB is used then updates the newly to be included grub template to the same.

Aug 8 2021, 4:22 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

dmbaturin changed the status of T169: Image install should put correct serial console device in created GRUB menu entry from Open to Needs testing.

Aug 8 2021, 3:53 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

erkin changed the status of T3275: Disable conntrack helpers by default from Open to In progress.

Aug 8 2021, 12:14 PM · VyOS 1.5 Circinus

Aug 7 2021

SrividyaA added a comment to T3219: Typo in openvpn server client config for IPv6 iroute.

I see these error in the openvpn log:

Aug 7 2021, 2:55 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

SrividyaA added a comment to T3219: Typo in openvpn server client config for IPv6 iroute.

I don't think so the configuration is working, the interface is down. It is not assigning the ipv6 addresses to the tunnel interfaces.

Aug 7 2021, 1:59 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

Viacheslav closed T548: BGP IPv6 multipath support as Resolved.

Aug 7 2021, 7:44 AM · VyOS 1.3 Equuleus (1.3.0-epa1)

dmbaturin added a project to T3712: route-map comm-list can't be used without option delete: VyOS 1.2 Crux (VyOS 1.2.9).

Aug 7 2021, 7:22 AM

dmbaturin added a comment to T3712: route-map comm-list can't be used without option delete.

It's not a bug, it's simply a weird syntax. That command could never be used without the delete option, so your config example wouldn't work in 1.2 or 1.1.8 either.

Aug 7 2021, 7:21 AM

Aug 6 2021

dmbaturin closed T3196: No NAT translations showing up as Resolved.

Thanks! This is definitely a non-issue then, closing.

Aug 6 2021, 9:18 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

dmbaturin added a comment to T2947: Nat translation many-many with prefix does not map 1-1..

Since we cannot update the kernel in 1.3 due to the QAT issues, we likely need to backport netmap support. It seems to have been introduced by this commit: https://github.com/torvalds/linux/commit/3ff7ddb1353da

Aug 6 2021, 9:15 PM · VyOS 1.4 Sagitta

dmbaturin changed the status of T1083: Implement persistent/random address and port mapping options for NAT rules, a subtask of T3710: Upgrade the kernel in 1.3 to 5.10, from Open to Needs testing.

Aug 6 2021, 8:26 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

dmbaturin changed the status of T1083: Implement persistent/random address and port mapping options for NAT rules from Open to Needs testing.

I've tested it on 1.3 with kernel 5.4.138, and for me the persistent option works as expected. I think it's a non-issue for equuleus already and the task can be closed, though I'd like other people to test that first.

Aug 6 2021, 8:26 PM · VyOS 1.2 Crux (VyOS 1.2.9), VyOS 1.3 Equuleus (1.3.0), test, VyOS 1.4 Sagitta

UnicronNL closed T1153: VyOS 1.2.0RC10, RAID-1, fresh install, unable to save config as Resolved.

Aug 6 2021, 10:26 AM · VyOS 1.3 Equuleus (1.3.0-epa1), test

Aug 5 2021

Viacheslav closed T696: Rewrite conntrack sync to XML as Resolved.

Already rewritten in 1.4 and 1.3 T3535
https://phabricator.vyos.net/rVYOSONEX21527ef4551613fe9b7eed9e4b2ce33ad46fe540

Aug 5 2021, 9:28 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

Viacheslav added a project to T681: Shaper QoS policy does not recognize 'lowdelay' DSCP value: VyOS 1.4 Sagitta.

Aug 5 2021, 7:51 PM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS 1.4 Sagitta (1.4.2), VyOS Rolling

Viacheslav added a comment to T548: BGP IPv6 multipath support.

PR https://github.com/vyos/vyatta-cfg-quagga/pull/87
PR https://github.com/vyos/vyos-1x/pull/954
PR https://github.com/vyos/vyos-1x/pull/955

Aug 5 2021, 7:04 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

lawrencepan added a comment to T2851: Invalid passthrough routes installing by strongSwan into table 220.

ipsec start error ..

Aug 5 2021, 3:44 PM · Bugs, VyOS 1.3 Equuleus (1.3.9), test

jestabro added a project to T3574: Add constraintGroup for combining validators with logical AND: test.

Aug 5 2021, 3:02 PM · VyOS 1.4 Sagitta (1.4.0-epa1)

jestabro removed a project from T2759: validate-value prints error messages from validators that fail even if overall validation succeeds: VyOS 1.4 Sagitta.

Aug 5 2021, 2:55 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

jestabro added a project to T2759: validate-value prints error messages from validators that fail even if overall validation succeeds: VyOS 1.4 Sagitta.

Aug 5 2021, 2:55 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

Unknown Object (User) added a comment to T2851: Invalid passthrough routes installing by strongSwan into table 220.

It is not critical, please test without this package "libstrongswan-standard-plugins"
All necessary data is already installed.

Aug 5 2021, 1:36 PM · Bugs, VyOS 1.3 Equuleus (1.3.9), test

lawrencepan added a comment to T2851: Invalid passthrough routes installing by strongSwan into table 220.

Setting up libstrongswan (5.7.2-1) ...
Setting up libstrongswan-extra-plugins (5.7.2-1) ...
dpkg: dependency problems prevent configuration of libstrongswan-standard-plugins:
 libstrongswan-standard-plugins depends on libssl1.0.0 (>= 1.0.2~beta3); however:
  Version of libssl1.0.0:amd64 on system is 1.0.1t-1+deb8u14.

Aug 5 2021, 12:37 PM · Bugs, VyOS 1.3 Equuleus (1.3.9), test

Unknown Object (User) added a comment to T2851: Invalid passthrough routes installing by strongSwan into table 220.

strongswan.tar2 MBDownload

I have patched packages for 1.2.8. It works on my routers in the virtual environment.
Instruction:

Upload package to the router
Unarchiv it

sudo tar -xvf strongswan.tar

Install packages

sudo dpkg -i *.deb

Reboot router or reconfigure IPSec

Aug 5 2021, 10:14 AM · Bugs, VyOS 1.3 Equuleus (1.3.9), test

Viacheslav added a comment to T3219: Typo in openvpn server client config for IPv6 iroute.

As I understand there are 2 bugs:

It expected --iroute-ipv6, i.e

iroute-ipv6 2001:470:1f14:af1:: ffff:ffff:ffff:ffff::

Something wrong with such format (ipv6 address/ ipv4 mask)

ifconfig-push 2001:470:1f14:af1::2 255.255.240.0

Aug 5 2021, 7:58 AM · VyOS 1.3 Equuleus (1.3.0-epa1)

Aug 4 2021

c-po added a comment to T3219: Typo in openvpn server client config for IPv6 iroute.

@SrividyaA does this configuration work or not?

Aug 4 2021, 6:37 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

SrividyaA added a comment to T3219: Typo in openvpn server client config for IPv6 iroute.

set interfaces openvpn vtun10 encryption cipher 'aes256'
set interfaces openvpn vtun10 hash 'sha512'
set interfaces openvpn vtun10 local-host '10.2.0.15'
set interfaces openvpn vtun10 local-port '1194'
set interfaces openvpn vtun10 mode 'server'
set interfaces openvpn vtun10 persistent-tunnel
set interfaces openvpn vtun10 protocol 'udp'
set interfaces openvpn vtun10 server client client1 ip '2001:470:1f14:af1::2'
set interfaces openvpn vtun10 server client client1 subnet '2001:470:1f14:af1::/64'
set interfaces openvpn vtun10 server push-route '2001:db8:0:abc::/64'
set interfaces openvpn vtun10 server subnet '10.140.0.0/20'
set interfaces openvpn vtun10 server topology 'subnet'
set interfaces openvpn vtun10 tls ca-cert-file '/config/auth/ea1/ca.crt'
set interfaces openvpn vtun10 tls cert-file '/config/auth/ea1/central.crt'
set interfaces openvpn vtun10 tls dh-file '/config/auth/ea1/dh.pem'
set interfaces openvpn vtun10 tls key-file '/config/auth/ea1/central.key'

Aug 4 2021, 5:15 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

Viacheslav closed T320: OSPF does not redistribute connected routes associated with virtual tunnel interfaces as Resolved.

I don't see this bug in 1.3.0-rc5,

Aug 4 2021, 11:24 AM · VyOS 1.3 Equuleus (1.3.0-epa1)

Aug 3 2021

lawrencepan added a comment to T2851: Invalid passthrough routes installing by strongSwan into table 220.

OK , Thank you!

Aug 3 2021, 7:55 PM · Bugs, VyOS 1.3 Equuleus (1.3.9), test

Viacheslav added a comment to T2851: Invalid passthrough routes installing by strongSwan into table 220.

In T2851#99364, @lawrencepan wrote:

Aug 3 2021, 5:27 PM · Bugs, VyOS 1.3 Equuleus (1.3.9), test

lawrencepan added a comment to T2851: Invalid passthrough routes installing by strongSwan into table 220.

sudo ip rule add prio 219 from 192.0.2.48/30 to 192.0.2.48/30 lookup main
}

Aug 3 2021, 5:15 PM · Bugs, VyOS 1.3 Equuleus (1.3.9), test

Viacheslav added a comment to T2851: Invalid passthrough routes installing by strongSwan into table 220.

As a workaround it can help in such cases:

Aug 3 2021, 4:58 PM · Bugs, VyOS 1.3 Equuleus (1.3.9), test

lawrencepan added a comment to T2851: Invalid passthrough routes installing by strongSwan into table 220.

I get the same issue in 1.2.8.

Aug 3 2021, 4:46 PM · Bugs, VyOS 1.3 Equuleus (1.3.9), test

Unknown Object (User) closed T2432: dhcpd: Can't create new lease file: Permission denied as Unknown Status.

Aug 3 2021, 8:13 AM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

Unknown Object (User) added a comment to T2661: SSTP wrong certificates check.

@Viacheslav I believe it is still actual for 1.3 https://github.com/vyos/vyos-1x/blob/equuleus/src/conf_mode/vpn_sstp.py#L60-L78
I saw we changed the PKI model only for 1.4. Implement PKI model for 1.3-epa1 a risky

Aug 3 2021, 6:42 AM · VyOS 1.3 Equuleus (1.3.0)

Aug 2 2021

UnicronNL closed T3601: Error in ssh keys for vmware cloud-init if ssh keys is left empty. as Resolved.

https://github.com/vyos/vyos-cloud-init/commit/9dd5fa374ccfd74d46551641fb68428e4860b820
https://github.com/vyos/vyos-cloud-init/commit/e979e3d269ce8cbdb3933a141853bb35b9ed7b74

Aug 2 2021, 8:19 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

Viacheslav closed T2623: Creating sit tunnel fails with “Can not set “local” for tunnel sit tun1 at tunnel creation” as Resolved.

Fixed, tested in 1.3.0-rc5

set firewall ipv6-name WAN6_IN6
set firewall ipv6-name WAN6_LOCAL6
set interfaces ethernet eth1 address '192.0.2.1/24'
set interfaces ethernet eth1 description 'FOO'
set interfaces tunnel tun1 6rd-prefix '2607:FA48:6ED8::/45'
set interfaces tunnel tun1 6rd-relay-prefix '24.225.128.0/17'
set interfaces tunnel tun1 address '2607:FA48:6ED8:8A50::1/60'
set interfaces tunnel tun1 description 'Videotron 6rd Tunnel'
set interfaces tunnel tun1 encapsulation 'sit'
set interfaces tunnel tun1 firewall in ipv6-name 'WAN6_IN6'
set interfaces tunnel tun1 firewall local ipv6-name 'WAN6_LOCAL6'
set interfaces tunnel tun1 mtu '1480'
set interfaces tunnel tun1 multicast 'disable'
set interfaces tunnel tun1 parameters ip ttl '255'
set interfaces tunnel tun1 remote '192.0.2.2'
set interfaces tunnel tun1 source-address '192.0.2.1'

Commit:

vyos@r4-1.3# commit
[edit]
vyos@r4-1.3# sudo ip tunnel show
sit0: ipv6/ip remote any local any ttl 64 nopmtudisc 6rd-prefix 2002::/16
tun1: ipv6/ip remote 192.0.2.2 local 192.0.2.1 ttl 255 tos inherit 6rd-prefix 2002::/16
[edit]
vyos@r4-1.3#

Aug 2 2021, 4:09 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

Viacheslav added a parent task for T2194: "show firewall" garbled output: T2199: Rewrite firewall in new XML/Python style.

Aug 2 2021, 3:49 PM · VyOS 1.3 Equuleus (1.3.2), test

Viacheslav added a comment to T2434: Duplicate Address Detection Breaks Interfaces.

@trae32566 Can you re-check it?

Aug 2 2021, 3:39 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

Viacheslav added a comment to T2194: "show firewall" garbled output.

There are different outputs from "iptables" between 1.2 and 1.3:

Aug 2 2021, 10:06 AM · VyOS 1.3 Equuleus (1.3.2), test

Viacheslav closed T2161: snmpd cannot start if ipv6 disabled as Resolved.

By default:

vyos@r4-1.3:~$ sudo netstat -tulpn | grep 161
udp        0      0 0.0.0.0:161             0.0.0.0:*                           1405/snmpd          
udp6       0      0 :::161                  :::*                                1405/snmpd          
vyos@r4-1.3:~$

Aug 2 2021, 9:10 AM · VyOS 1.3 Equuleus (1.3.0-epa1)

Viacheslav added a comment to T2005: Two CEASE notifications sent to BGP peers during reboot.

After rebooting router starts with a clean routing configuration.
After that, it loads/commits configuration from /config/config.boot file.
It can be a cause, needs more tests.
It will be must impossible to get another behavior.

Aug 2 2021, 8:37 AM

Viacheslav added a comment to T1594: l2tpv3 error on IPv6 local-ip.

PR for current version https://github.com/vyos/vyos-1x/pull/952

Aug 2 2021, 7:47 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta, test