- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Feb 20 2022
Feb 20 2022
sarthurdev closed Restricted Maniphest Task, a subtask of T2816: Rewrite IPsec scripts with the new XML/Python approach, as Resolved.
c-po moved T4261: MACsec: add DHCP client support from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4261: MACsec: add DHCP client support from Need Triage to Finished on the VyOS 1.3 Equuleus ( 1.3.1) board.
c-po changed the status of T4203: Reconfigure DHCP client interface causes brief outages from Confirmed to Needs testing.
c-po moved T4203: Reconfigure DHCP client interface causes brief outages from Need Triage to Finished on the VyOS 1.3 Equuleus ( 1.3.1) board.
c-po moved T4203: Reconfigure DHCP client interface causes brief outages from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4260: Extend vyos.configdict.node_changed() to support recursiveness from Open to Backlog on the VyOS 1.4 Sagitta board.
c-po edited projects for T4203: Reconfigure DHCP client interface causes brief outages, added: VyOS 1.3 Equuleus ( 1.3.1); removed VyOS 1.3 Equuleus.
Viacheslav changed the status of T1856: Support configuring IPSec SA bytes, a subtask of T2816: Rewrite IPsec scripts with the new XML/Python approach, from Open to In progress.
Viacheslav changed the status of T1856: Support configuring IPSec SA bytes from Open to In progress.
+1
+1; versioning the API is also a best practice.
+1
+1
+1
eronlloyd added a comment to T4256: Display static DHCP server leases in the operational command output.
Being able to quickly see reservations in an operational mode command would be convenient, avoiding the need to pull up the config.
Feb 19 2022
Feb 19 2022
It is used in keepalived Template
Viacheslav changed the status of T4249: Add support for device mapping in containers from Open to In progress.
c-po moved T4258: [DHCP-SERVER] error parameter on Failover from Need Triage to Finished on the VyOS 1.3 Equuleus ( 1.3.1) board.
c-po moved T4258: [DHCP-SERVER] error parameter on Failover from Need Triage to 1.3.1 on the VyOS 1.3 Equuleus board.
c-po moved T4258: [DHCP-SERVER] error parameter on Failover from Open to Finished on the VyOS 1.4 Sagitta board.
Feb 18 2022
Feb 18 2022
Viacheslav updated the task description for T4254: VPN IPSec charon add options cisco_flexvpn and install_virtual_ip_on.
Feb 17 2022
Feb 17 2022
Viacheslav updated the task description for T4254: VPN IPSec charon add options cisco_flexvpn and install_virtual_ip_on.
c-po moved T4255: Unexpected print of dict bridge on delete from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4255: Unexpected print of dict bridge on delete from Need Triage to Finished on the VyOS 1.3 Equuleus ( 1.3.1) board.
c-po changed the status of T4255: Unexpected print of dict bridge on delete from Open to In progress.
Viacheslav changed the status of T3600: DHCP Interface static route breaks PBR, a subtask of T3505: Commits do not respect changes in FRR that are not stored in a config, from In progress to Needs testing.
Viacheslav changed the status of T3600: DHCP Interface static route breaks PBR from In progress to Needs testing.
vplehto updated the task description for T4256: Display static DHCP server leases in the operational command output.
Viacheslav changed the status of T4254: VPN IPSec charon add options cisco_flexvpn and install_virtual_ip_on from Open to In progress.
Viacheslav changed the status of T1972: Allow setting interface name for virtual_ipaddress in VRRP VRID from In progress to Needs testing.
jestabro moved T3474: Revisit storing syntax version of interface definitions in XML file from Open to Finished on the VyOS 1.4 Sagitta board.
jestabro closed T3474: Revisit storing syntax version of interface definitions in XML file, a subtask of T3475: XML dictionary cache unable to process syntaxVersion elements, as Unknown Status.
jestabro closed T3474: Revisit storing syntax version of interface definitions in XML file as Unknown Status.
c-po moved T4240: Cannot add wlan0 to bridge via configure from Need Triage to Finished on the VyOS 1.3 Equuleus ( 1.3.1) board.
jestabro added a comment to T3474: Revisit storing syntax version of interface definitions in XML file.
@c-po Thank you for the work on this.
Feb 16 2022
Feb 16 2022
Viacheslav changed the status of T4197: Vyos arm64-latest build issue with telegraf pkg from Open to Needs testing.
c-po moved T4240: Cannot add wlan0 to bridge via configure from Open to Finished on the VyOS 1.4 Sagitta board.
c-po changed the status of T4240: Cannot add wlan0 to bridge via configure from Open to Needs testing.
Thanks
Is it required point of binding in a container?
For example:
podman run --rm -it --device=/dev/vdb:/dev/xvdc:rwm --net host ubuntu bash
In T4249#118633, @Viacheslav wrote:You can get access to host netwoks with set container name foo allow-host-networks
You can get access to host netwoks with set container name foo allow-host-networks
Viacheslav added a comment to T1972: Allow setting interface name for virtual_ipaddress in VRRP VRID.
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1224
Viacheslav reopened T1972: Allow setting interface name for virtual_ipaddress in VRRP VRID as "In progress".
Tested on 1.4-rolling-202202150317 and 1.3.0, all works
Viacheslav changed the subtype of T4248: There isn't a way to remove the only rule from the (traffic-policy) class. from "Task" to "Bug".
Unknown Object (User) triaged T4248: There isn't a way to remove the only rule from the (traffic-policy) class. as Low priority.
Feb 15 2022
Feb 15 2022
Viacheslav moved T1292: Issues while deleting all rules from a firewall from Open to Finished on the VyOS 1.4 Sagitta board.
Comman "show conntrack ..." not available any more in latest?
Unknown Object (User) changed the status of T3494: DHCPv6 leases traceback when PD using from Unknown Status to Resolved.
n.fort closed T1292: Issues while deleting all rules from a firewall, a subtask of T2199: Rewrite firewall in new XML/Python style, as Resolved.
Tested on VyOS 1.4-rolling-202202150317 and working as expected.
n.fort closed T4160: Firewall - Error in rules that matches everything except something as Resolved.
vyos@vyos# run show config comm | grep fire
set firewall name FOO rule 10 action 'accept'
set firewall name FOO rule 10 protocol 'tcp'
set firewall name FOO rule 10 tcp flags not ack
set firewall name FOO rule 10 tcp flags syn
set firewall name FOO rule 40 action 'accept'
set firewall name FOO rule 40 protocol '!gre'
[edit]
vyos@vyos# sudo nft list chain ip filter NAME_FOO
table ip filter {
chain NAME_FOO {
tcp flags & (syn | ack) == syn counter packets 0 bytes 0 return comment "FOO-10"
meta l4proto != gre counter packets 0 bytes 0 return comment "FOO-40"
counter packets 0 bytes 0 return comment "FOO default-action accept"
}
}Viacheslav moved T4237: Conntrack-sync error - error adding listen-address command from Need Triage to Finished on the VyOS 1.3 Equuleus ( 1.3.1) board.
PR for current https://github.com/vyos/vyos-1x/pull/1223
Unknown Object (User) added a comment to T3494: DHCPv6 leases traceback when PD using.
PR for equuleus https://github.com/vyos/vyos-1x/pull/1222
Viacheslav moved T3686: Bridging OpenVPN tap with no local-address breaks from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav edited projects for T3686: Bridging OpenVPN tap with no local-address breaks, added: VyOS 1.3 Equuleus ( 1.3.1); removed VyOS 1.3 Equuleus (1.3.0).
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1221
Unknown Object (User) changed the status of T3494: DHCPv6 leases traceback when PD using from Resolved to Unknown Status.
Sorry, it works properly only for not PD. Looks like is not backported to equuleus
Client-side configuration to reproduce
set interfaces ethernet eth0 address 'dhcpv6' set interfaces ethernet eth0 dhcpv6-options pd 0 interface eth1 address '1' set interfaces ethernet eth0 dhcpv6-options pd 0 interface eth1 sla-id '0' set interfaces ethernet eth0 dhcpv6-options pd 0 length '64'
On server-side we get the same backtrace
vyos@vyos# run show dhcpv6 server leases
Traceback (most recent call last):
File "/usr/libexec/vyos/op_mode/show_dhcpv6.py", line 209, in <module>
leases = get_leases(conf, lease_file, args.state, args.pool, args.sort)
File "/usr/libexec/vyos/op_mode/show_dhcpv6.py", line 142, in get_leases
leases = sorted(leases, key = lambda k: int(ip_address(k['ip'])))
File "/usr/libexec/vyos/op_mode/show_dhcpv6.py", line 142, in <lambda>
leases = sorted(leases, key = lambda k: int(ip_address(k['ip'])))
File "/usr/lib/python3.7/ipaddress.py", line 54, in ip_address
address)
ValueError: '2001:db8:290::/64' does not appear to be an IPv4 or IPv6 addressUnknown Object (User) changed the status of T3494: DHCPv6 leases traceback when PD using from Unknown Status to Resolved.
Tested on VyOS version 1.3.0, works properly
vyos@vyos# run show version | match Version Version: VyOS 1.3.0 [edit] vyos@vyos# run show dhcpv6 server leases IPv6 address State Last communication Lease expiration Remaining Type Pool IAID_DUID ------------------ ------- -------------------- ------------------- ----------- ------------- ----------- ----------------------------------------------------------------- 2001:db8:3456::187 active 2022/02/15 09:28:10 2022/02/15 21:28:10 11:58:28 non-temporary VyOS-DHCPv6 00:00:00:00:00:04:79:76:62:99:23:ad:43:fb:9c:5b:1c:1e:59:4b:58:01
I can confirm that the latest 202202140317 build fixes this issue, thanks.
Feb 14 2022
Feb 14 2022
Unknown Object (User) added a comment to T4243: Nat log - Add translated data to nat logs.
@n.fort it is possible with conntrackd logging option syslog
sudo rm /etc/systemd/system/conntrackd.service.d/override.conf
edit nano /etc/conntrackd/conntrackd.conf and add Syslog on in General section, then restart conntrackd service.
After that you will get messages
conntrack-tools[5097]: udp 17 src=100.64.0.3 dst=1.1.1.1 sport=41900 dport=53 src=1.1.1.1 dst=198.51.100.1 sport=53 dport=41900