Tested on VyOS 1.3.0-rc5
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Aug 17 2021
Aug 17 2021
Not reproducible update from 1.2.4 to 1.3-rc5
1.2.4 config
set interfaces ethernet eth1 bond-group bond0 set interfaces ethernet eth1 bond-group bond0 set interfaces bonding bond0 vif 29 address '192.168.159.167/31' set interfaces bonding bond0 vif 29 address 'fd12:45:fff:29::2/126' set interfaces bonding bond0 vif 29 description 'Point to Point - DMZ' set interfaces bonding bond0 vif 29 ip ospf dead-interval '20' set interfaces bonding bond0 vif 29 ip ospf hello-interval '10' set interfaces bonding bond0 vif 29 ip ospf priority '220' set interfaces bonding bond0 vif 29 ip ospf retransmit-interval '5' set interfaces bonding bond0 vif 29 ip ospf transmit-delay '1' set interfaces bonding bond0 vif 29 ipv6 dup-addr-detect-transmits '1' set interfaces bonding bond0 vif 29 ipv6 ospfv3 cost '1' set interfaces bonding bond0 vif 29 ipv6 ospfv3 dead-interval '20' set interfaces bonding bond0 vif 29 ipv6 ospfv3 hello-interval '10' set interfaces bonding bond0 vif 29 ipv6 ospfv3 instance-id '0' set interfaces bonding bond0 vif 29 ipv6 ospfv3 priority '220' set interfaces bonding bond0 vif 29 ipv6 ospfv3 retransmit-interval '5' set interfaces bonding bond0 vif 29 ipv6 ospfv3 transmit-delay '1' set interfaces bonding bond0 vif 29 mtu '1500' set interfaces loopback lo address 'fd12:45::14/128' set policy route-map OSPF-Filter description 'This route map will apply to outgoing routes sent via OSPF' set policy route-map OSPF-Filter rule 10 action 'permit' set policy route-map OSPF-Filter rule 10 description 'Only permit loopback interface' set policy route-map OSPF-Filter rule 10 match interface 'lo' set policy route-map OSPF-Filter rule 100 action 'deny' set policy route-map OSPF-Filter rule 100 description 'Default deny' set protocols ospfv3 area 0.0.0.0 interface 'lo' set protocols ospfv3 area 0.0.0.0 interface 'bond0.29' set protocols ospfv3 area 0.0.0.0 range fd12:45:fff:29::/126 set protocols ospfv3 parameters router-id '192.168.159.241' set protocols ospfv3 redistribute connected route-map 'OSPF-Filter'
Large-community and large-community-list it is different functions.
It seems all works fine
Viacheslav changed the status of T690: Allow OpenVPN servers to push routes with custom metric values from Open to Needs testing.
@darkdragon-001 It will be available in the next rolling release, can you test it?
Aug 16 2021
Aug 16 2021
PR for current https://github.com/vyos/vyos-1x/pull/974
Viacheslav moved T3738: openvpn fails if server and authentication are configured from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Fixed, 1.3-beta-202108151336
vyos@r4-1.3# run show conf com | match openvpn set interfaces openvpn vtun10 encryption cipher 'aes256' set interfaces openvpn vtun10 hash 'sha512' set interfaces openvpn vtun10 local-host '192.168.122.14' set interfaces openvpn vtun10 local-port '1194' set interfaces openvpn vtun10 mode 'server' set interfaces openvpn vtun10 persistent-tunnel set interfaces openvpn vtun10 protocol 'udp' set interfaces openvpn vtun10 server client client1 ip '10.10.0.10' set interfaces openvpn vtun10 server domain-name 'vyos.net' set interfaces openvpn vtun10 server max-connections '250' set interfaces openvpn vtun10 server name-server '172.16.254.30' set interfaces openvpn vtun10 server subnet '10.10.0.0/24' set interfaces openvpn vtun10 server topology 'subnet' set interfaces openvpn vtun10 tls ca-cert-file '/config/auth/ca.crt' set interfaces openvpn vtun10 tls cert-file '/config/auth/central.crt' set interfaces openvpn vtun10 tls dh-file '/config/auth/dh.pem' set interfaces openvpn vtun10 tls key-file '/config/auth/central.key' set interfaces openvpn vtun10 tls tls-version-min '1.0' set interfaces openvpn vtun10 use-lzo-compression [edit] vyos@r4-1.3# vyos@r4-1.3# set interfaces openvpn vtun10 authentication username foo [edit] vyos@r4-1.3# commit
Not sure that it is a good idea for this format.
The syntax between versions (1.3/1.4 bgd/isisd) is changed. With every syntax change you should also change and section "service https API ... bgp"
My point API must have a full access to all configuration options.
Aug 15 2021
Aug 15 2021
Aug 14 2021
Aug 14 2021
@c-po It makes sense
Need to try.
Aug 13 2021
Aug 13 2021
Viacheslav moved T3738: openvpn fails if server and authentication are configured from Open to Backport Candidates on the VyOS 1.4 Sagitta board.
Viacheslav added a comment to T3750: pdns-recursor 4.4 issue with dont-query and private DNS servers.
I don't see the repo for "bullseye"
http://repo.powerdns.com/
PR for current https://github.com/vyos/vyos-1x/pull/967
Viacheslav closed T3727: VPN IPsec ESP proposal and ESP presented in config missmatch, a subtask of T2816: Rewrite IPsec scripts with the new XML/Python approach, as Resolved.
Fixed, thanks.
It seems impossible to delete network and container and add a new one in one commit
Aug 12 2021
Aug 12 2021
Another bug.
From time to time I get errors in debug mode ("touch /tmp/vyos.frr.debug" and "sudo systemctl stop vyos-configd") when changing lsp-mtu size
vyos@r1-roll# set protocols isis lsp-mtu 1308 [edit] vyos@r1-roll# commit [ protocols isis ]
Aug 11 2021
Aug 11 2021
Similar task T2315, also there is bug related T1976, etc.
It should be a migration script that determines ip/ipv6 neighbor and set neighbor to properly afi.
So there is one question, how to determine which afi we should to use if we see "peer-group" in configuration?
I don't think that we can implement it in 1.3 as it uses an old codebase.
To reproduce in 1.4:
Viacheslav added a comment to T3737: openvpn-option needs to be able to support quotes as since openvpn 2.4..
As Workaround in T3350 set raw option "config /path/to/config/file"
Viacheslav closed T3709: Snmp: Allow enable MIDs/OIDs ipCidrRouteTable, a subtask of T3706: Add proper priorities for systemd daemons, as Resolved.
@fernando Thanks.
Aug 10 2021
Aug 10 2021
Viacheslav changed the status of T3709: Snmp: Allow enable MIDs/OIDs ipCidrRouteTable, a subtask of T3706: Add proper priorities for systemd daemons, from Open to Needs testing.
Viacheslav changed the status of T3709: Snmp: Allow enable MIDs/OIDs ipCidrRouteTable from Open to Needs testing.
@fernando Can you check this feature in the next rolling release?
set service snmp community public client 127.0.0.1 set service snmp oid-enable route-table
Aug 9 2021
Aug 9 2021
Viacheslav changed the status of T3730: op-mode conntrack-sync miss some functions from Open to Needs testing.
- Backport configquerry.py [Done]
https://github.com/vyos/vyos-1x/commit/2aa75521a829712256c3c34685e60a9d36b33791
Maybe with FRR 8.1
In any case, we'll do more tests.
It is possible this bug.
https://github.com/FRRouting/frr/issues/9181
Viacheslav added a comment to T3537: Unable to override the default OSPFv3 link cost for wireguard interface.
@dtoux Did you test it in 1.3.0-rc5?
@xrobau As I mentioned before, peer-group can't exist without peer-as/remote-as in your case remote-as should be internal. It can exist without remote-as but with "route-reflector-client" it shouldn't
You can check it with vtysh FRR:
Viacheslav closed T2606: ikev2 mobike commit failed , a subtask of T2816: Rewrite IPsec scripts with the new XML/Python approach, as Invalid.
I closed it. Can't reproduce it.
Re-open it if necessary. Just attach your vpn configuration.
Viacheslav updated the task description for T3727: VPN IPsec ESP proposal and ESP presented in config missmatch.
The same task T1375
Aug 7 2021
Aug 7 2021
Aug 6 2021
Aug 6 2021
@maznu
Add these lines:
Aug 5 2021
Aug 5 2021
Already rewritten in 1.4 and 1.3 T3535
https://phabricator.vyos.net/rVYOSONEX21527ef4551613fe9b7eed9e4b2ce33ad46fe540
Viacheslav reopened T3634: Add op command option for ping for do not fragment bit to be set as "Open".
Reopen
It doesn't work properly
Viacheslav added a project to T681: Shaper QoS policy does not recognize 'lowdelay' DSCP value: VyOS 1.4 Sagitta.
As I understand there are 2 bugs:
- It expected --iroute-ipv6, i.e
iroute-ipv6 2001:470:1f14:af1:: ffff:ffff:ffff:ffff::
- Something wrong with such format (ipv6 address/ ipv4 mask)
ifconfig-push 2001:470:1f14:af1::2 255.255.240.0
Aug 4 2021
Aug 4 2021
Viacheslav closed T320: OSPF does not redistribute connected routes associated with virtual tunnel interfaces as Resolved.
I don't see this bug in 1.3.0-rc5,
Aug 3 2021
Aug 3 2021
Viacheslav added a comment to T2851: Invalid passthrough routes installing by strongSwan into table 220.
In T2851#99364, @lawrencepan wrote:
Viacheslav added a comment to T2851: Invalid passthrough routes installing by strongSwan into table 220.
As a workaround it can help in such cases:
Viacheslav updated the task description for T3720: IPSec set vti secondary address cause interface disable.