PR for crux https://github.com/vyos/vyatta-op-vpn/pull/29
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Oct 31 2021
Oct 31 2021
c-po renamed T3943: "netflow source-ip" prevents image upgrades if IP address does not exist locally from VyOS 1.2.7 upgrade to 1.3.0-epa2 config error if flow-accounting is set to "netflow source-ip" prevents image upgrades if IP address does not exist locally.
c-po moved T3943: "netflow source-ip" prevents image upgrades if IP address does not exist locally from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav closed T3341: Wrong behavior of the "reset vpn ipsec-peer XXX tunnel XXX" command as Resolved.
Viacheslav added a comment to T3341: Wrong behavior of the "reset vpn ipsec-peer XXX tunnel XXX" command.
Kim Hagen <kim@sentrium.io> committed rVYOSONEX02b6370c3cd1: more 2fa changes.
Kim Hagen <kim@sentrium.io> committed rVYOSONEX6748dbe0100c: add part 2fa.
Kim Hagen <kim@sentrium.io> committed rVYOSONEX415e572dfba7: openvpn: T3736: openvpn-option keeps and adds double dashes (--).
Kim Hagen <kim@sentrium.io> committed rVYOSONEX04e87d5a5974: update 2fa qr generation and user creation procedure.
Kim Hagen <kim@sentrium.io> committed rVYOSONEXfa101ed0e160: remove default values from xml.
Kim Hagen <kim@sentrium.io> committed rVYOSONEX87ee779a977e: add 2fa op files and update template.
Kim Hagen <kim@sentrium.io> committed rVYOSONEX65b55f35f836: fix file location and use correct variable.
Kim Hagen <kim@sentrium.io> committed rVYOSONEXe3c71af1466d: remove secrets file if the tunnel is deleted and fix opmode commands.
Kim Hagen <kim@sentrium.io> committed rVYOSONEXcfebb0b01c37: fix configure error if 2fa is defined but no option is defined.
Kim Hagen <kim@sentrium.io> committed rVYOSONEX2a27f35ea595: change secret file location in template.
Kim Hagen <kim@sentrium.io> committed rVYOSONEX024839cb1588: update the location of the openvpn-otp.so plugin.
Kim Hagen <kim@sentrium.io> committed rVYOSONEX5366f9c9ce98: do not use capitals in opmode.
Restricted Repository Identity added a reverting change for rVYOSONEX415e572dfba7: openvpn: T3736: openvpn-option keeps and adds double dashes (--): rVYOSONEXeb7f8904076e: Revert "openvpn: T3736: openvpn-option keeps and adds double dashes (--)".
Kim Hagen <kim@sentrium.io> committed rVYOSONEXeb7f8904076e: Revert "openvpn: T3736: openvpn-option keeps and adds double dashes (--)".
Kim Hagen <kim@sentrium.io> committed rVYOSONEXba8630da9639: pull request fixes.
Kim Hagen <kim@sentrium.io> committed rVYOSONEX2349f2d91213: openvpn: T3805: use vyos.util.makedir() to create system directories (authored by c-po).
Kim Hagen <kim@sentrium.io> committed rVYOSONEX9cd3c3bfe04b: openvpn: T3805: use vyos.util.write_file() to store certificates (authored by c-po).
Kim Hagen <kim@sentrium.io> committed rVYOSONEXc567b43807fa: openvpn: T3805: fix bool logic in verify_pki() for client mode (authored by c-po).
Kim Hagen <kim@sentrium.io> committed rVYOSONEX699d4533c543: openvpn: T3805: drop privileges using systemd - required for rtnetlink (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX2274dbf90474: Merge branch 'current' into 2fa (authored by UnicronNL).
Kim Hagen <kim@sentrium.io> committed rVYOSONEX2acfffab8b98: openvpn: T3642: Fix password_protected check (authored by nagua).
Kim Hagen <kim@sentrium.io> committed rVYOSONEX0a4ba4cb7017: add openvpn-otp dependency.
Kim Hagen <kim@sentrium.io> committed rVYOSONEXf8dca381b482: update writer to nicer read write.
Kim Hagen <kim@sentrium.io> committed rVYOSONEX28db7b15426f: use vyos read_file and write_file functions.
Kim Hagen <kim@sentrium.io> committed rVYOSONEXd2c17f9864d2: do not use Path.
GitHub <noreply@github.com> committed rVYOSONEX629c169a43ff: openvpn: T3834: Support for Two Factor Authentication totp (authored by UnicronNL).
c-po moved T3954: FTDI cable makes VyOS sagitta latest hang, /dev/serial unpopulated, config system error from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav changed the subtype of T3955: Allow commit-confirm through http API from "Task" to "Feature Request".
Bug still present in 1.3.0-epa2 version.
c-po moved T3761: Bump salt-minion to 3000 from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.9) board.
Oct 30 2021
Oct 30 2021
c-po added a comment to T3954: FTDI cable makes VyOS sagitta latest hang, /dev/serial unpopulated, config system error.
Awesome report, thanks
c-po changed the status of T3954: FTDI cable makes VyOS sagitta latest hang, /dev/serial unpopulated, config system error from Open to In progress.
klipz added a comment to T3654: 1.2.7 - OpenVPN tunnel interface disappears on virtualized VyOS router/ESXi host.
@Viacheslav Yes, I have updated the system to 1.2.8-LTS. I will let you know if the disappearing openvpn tun interface reoccurs.
marc_s renamed T3954: FTDI cable makes VyOS sagitta latest hang, /dev/serial unpopulated, config system error from [Includes proposed fix] FTDI cable makes VyOS sagitta latest hang, /dev/serial unpopulated, config system error to FTDI cable makes VyOS sagitta latest hang, /dev/serial unpopulated, config system error.
Viacheslav added a comment to T3467: cannot set vrrp virtual-address with /31 mask when router uses networkaddress..
PR for crux https://github.com/vyos/vyos-1x/pull/1057
vyos@r12-lts:~$ show conf com | match vrrp set high-availability vrrp group GRP02 hello-source-address '203.0.113.1' set high-availability vrrp group GRP02 interface 'eth1.50' set high-availability vrrp group GRP02 no-preempt set high-availability vrrp group GRP02 priority '150' set high-availability vrrp group GRP02 rfc3768-compatibility set high-availability vrrp group GRP02 virtual-address '192.168.99.2/31' set high-availability vrrp group GRP02 vrid '10' vyos@r12-lts:~$ show interfaces vrrp Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down Interface IP Address S/L Description --------- ---------- --- ----------- eth1.50v10 192.168.99.2/31 u/u vyos@r12-lts:~$
Viacheslav changed the status of T3467: cannot set vrrp virtual-address with /31 mask when router uses networkaddress. from Confirmed to In progress.
Unknown Object (User) changed the status of T3952: Add sh bgp ipv4/ipv6 vpn command from In progress to Needs testing.
PR for crux https://github.com/vyos/vyos-1x/pull/1056
Viacheslav added a comment to T3654: 1.2.7 - OpenVPN tunnel interface disappears on virtualized VyOS router/ESXi host.
@klipz Could you re-check it with 1.2.8?
Viacheslav closed T1293: Zone-policy implementation does not allow secondary IP on an interface to communicate as Not Applicable.
Oct 29 2021
Oct 29 2021
To fix some of this issue I modified line 102-103 in show_nat_rules.py:
n.fort added a comment to T1293: Zone-policy implementation does not allow secondary IP on an interface to communicate.
I have done a lab using 1.3.0-epa2 version, and got no troubles.
Have configured 2 IP addresses on interface, and configured zone based firewall. I'm able to ping everywhere, using both IP addresses of that interface.
Also I checked that counters on firewall rules got increased while pinging from any of both IP addresses.
Viacheslav changed the status of T3394: Error on removing dhcpv6 address from interface from Open to In progress.
c-po changed the status of T3943: "netflow source-ip" prevents image upgrades if IP address does not exist locally from Open to In progress.
c-po added a comment to T3943: "netflow source-ip" prevents image upgrades if IP address does not exist locally.
cpo@LR2.wue3# commit [ system flow-accounting ] Your "netflow source-ip" does not exist in the system
Viacheslav renamed T3796: Wireguard interfaces are not shown in op-mode from Crux Wireguard Documentation Seems Incorrect to Wireguard interfaces are not shown in op-mode.
c-po committed rVYOSONEXbe6319479055: L3VPN: T3952: add sh bgp ipv4/ipv6 vpn command (authored by goodNETnick <pknet@ya.ru>).
GitHub <noreply@github.com> committed rVYOSONEX25fea6d05b37: Merge pull request #1053 from sever-sever/T3942-crux (authored by c-po).
GitHub <noreply@github.com> committed rVYOSONEX9d0d4b9d6dd2: Merge pull request #1055 from sever-sever/T3862 (authored by dmbaturin).
Viacheslav changed the status of T3862: "reboot at" command together with date does not work / weird error message on wrong input from Open to In progress.
Viacheslav added a comment to T3953: IPSec with vti interfaces by default add default route to table 220.
Require migration scripts to check option set vpn ipsec options disable-route-autoinstall in the configuration
Viacheslav added a comment to T3953: IPSec with vti interfaces by default add default route to table 220.
Viacheslav changed the subtype of T3953: IPSec with vti interfaces by default add default route to table 220 from "Bug" to "Feature Request".
Viacheslav added a comment to T3862: "reboot at" command together with date does not work / weird error message on wrong input.
The issue even with 00:00 format
After some investigation, we figured out several ways how to solve or at least mitigate the problem. From my point of view, the optimal for both developers and customers is the next one.
Viacheslav moved T3745: op-mode IPSec show vpn ipse sa sorting from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.9) board.
GitHub <noreply@github.com> committed rVYOSONEX4f4200f542c3: Merge pull request #1054 from sever-sever/T3745-crux (authored by dmbaturin).
PR for crux https://github.com/vyos/vyos-1x/pull/1054
Viacheslav moved T3745: op-mode IPSec show vpn ipse sa sorting from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Viacheslav added a project to T3745: op-mode IPSec show vpn ipse sa sorting: VyOS 1.2 Crux (VyOS 1.2.9).
Viacheslav moved T3942: Generate IPSec debug archive from op-mode from Backport Candidates to Finished on the VyOS 1.3 Equuleus (1.3.0-epa3) board.
PR for crux https://github.com/vyos/vyos-1x/pull/1053
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1052
Unknown Object (User) changed the status of T3952: Add sh bgp ipv4/ipv6 vpn command from Open to In progress.
@ajgnet Can you re-test it?
@liam can you re-test it?
@zsdc Provide please options to solve it.