emmm, I know it.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Mar 11 2022
Mar 11 2022
In T4288#119770, @chesskuo wrote:I found the swanctl.conf.
The config does not match the vyso config.I set the close_action as restart, but config does not show this line.
Your configuration should be like:
Mar 10 2022
Mar 10 2022
A simplified validator that rejects non-ipv6 address range (still lacks of 1st ipv6 minor than 2nd address validator):
jestabro moved T4295: Use config_tree instead of legacy loadFile in vyos-load-config.py from Finished to In Progress on the VyOS 1.4 Sagitta board.
Re-open to investigate failure in vyos-configtest.
jestabro moved T4292: Rewrite vyatta-save-config.pl to Python from Finished to In Progress on the VyOS 1.4 Sagitta board.
Re-open to investigate failure in vyos-configtest.
jestabro moved T4291: Consolidate component version read/write functions from Finished to In Progress on the VyOS 1.4 Sagitta board.
Re-open to investigate failure in vyos-configtest.
For 1.4, problem is in ipv6-range validator, which accepts lots of values that should be considered as invalid:
Actually, let's leave it in 1.3 but backport the warning and generate public-key-command.
@zsdc Do you have any idea for CLI configuration mode?
Hello sir, thank you !!!
Unknown Object (User) added a comment to T4288: IPsec tunnel will break when ESP timeout.
Could you try to use "ikev2"? Will the same problem be if you use "ikev2"?
Mar 9 2022
Mar 9 2022
Unknown Object (User) added a comment to T4286: Fix for firewall ipv6 name address validator.
Similar situation in VyOS 1.3-stable-202202191602
jestabro closed T4295: Use config_tree instead of legacy loadFile in vyos-load-config.py as Unknown Status.
jestabro triaged T4295: Use config_tree instead of legacy loadFile in vyos-load-config.py as Normal priority.
c-po renamed T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Update Linux Kernel to v5.4.182 / 5.10.103 to Update Linux Kernel to v5.4.183 / 5.10.104.
Mar 8 2022
Mar 8 2022
fernando changed the status of T4293: Add "set ip-next-hop unchanged" in route-map from Open to Confirmed.
jestabro closed T4292: Rewrite vyatta-save-config.pl to Python, a subtask of T4291: Consolidate component version read/write functions, as Unknown Status.
jestabro closed T4292: Rewrite vyatta-save-config.pl to Python, a subtask of T3355: Remove all remaining legacy Vyatta code, as Unknown Status.
system seems to be able to process flow data now and im seeing the flow data (netflow and sflow) reach my destination pathed via flow location, appears to work now!
jestabro added a parent task for T4292: Rewrite vyatta-save-config.pl to Python: T3355: Remove all remaining legacy Vyatta code.
jestabro added a parent task for T4292: Rewrite vyatta-save-config.pl to Python: T4291: Consolidate component version read/write functions.
I'm removing loadkey from 1.4. It will be removed from 1.3.1, as well. Eventually, the warning will be dropped from 1.4 but it will remain in 1.3.
Unknown Object (User) added a comment to T4231: Feature Request: ocserv: 2FA (password+OTP) support in Openconnect.
Next, we need to create an OTP key generator in the VyOS CLI
Unknown Object (User) added a comment to T4231: Feature Request: ocserv: 2FA (password+OTP) support in Openconnect.
PR with basic functionality:
https://github.com/vyos/vyos-1x/pull/1242
https://github.com/vyos/vyatta-cfg-system/pull/178
Unknown Object (User) updated the task description for T4231: Feature Request: ocserv: 2FA (password+OTP) support in Openconnect.
Mar 7 2022
Mar 7 2022
zsdc closed T2613: add logrotate options for syslog, a subtask of T3774: atop logs are not limited in size, as Resolved.
zsdc added a subtask for T3774: atop logs are not limited in size: T2613: add logrotate options for syslog.
zsdc changed the status of T4250: Organize logrotate settings to avoid duplicates from Open to In progress.
Should be fixed in https://github.com/vyos/vyos-1x/pull/1241
I found the swanctl.conf.
The config does not match the vyso config.
In multiple options, the prefix help values are not defined correctly.
Unknown Object (User) added a comment to T4285: Add integration with Teleport.
The Teleport can be run in a container:
https://goteleport.com/docs/setup/guides/docker/
Mar 6 2022
Mar 6 2022
Mar 5 2022
Mar 5 2022
c-po moved T4259: The conntrackd daemon can be started wrongly from Need Triage to Finished on the VyOS 1.3 Equuleus ( 1.3.1) board.
c-po moved T4259: The conntrackd daemon can be started wrongly from Need Triage to 1.3.1 on the VyOS 1.3 Equuleus board.
c-po moved T4259: The conntrackd daemon can be started wrongly from Open to Finished on the VyOS 1.4 Sagitta board.
c-po changed the status of T4259: The conntrackd daemon can be started wrongly from Open to Needs testing.
Mar 4 2022
Mar 4 2022
If the solution is so simple, whats the issue? from what I understand it's just a matter of working on:
vyos-vrrp-conntracksync.sh
Mar 3 2022
Mar 3 2022
c-po closed T4283: Add support to "reject" routes - emit an ICMP unreachable when matched as Resolved.
c-po changed the status of T4283: Add support to "reject" routes - emit an ICMP unreachable when matched from Open to In progress.
jestabro closed T4260: Extend vyos.configdict.node_changed() to support recursiveness, a subtask of T4203: Reconfigure DHCP client interface causes brief outages, as Unknown Status.
jestabro closed T4260: Extend vyos.configdict.node_changed() to support recursiveness, a subtask of T4235: Add config tree diff algorithm, as Unknown Status.
jestabro closed T4260: Extend vyos.configdict.node_changed() to support recursiveness as Unknown Status.
SrividyaA renamed T4275: Incorrect val_help for local/remote prefix in ipsec vpn from Incorrect val_help for local/remote prefix in site-to-site ipsec vpn to Incorrect val_help for local/remote prefix in ipsec vpn.
SrividyaA added a comment to T4282: show log command does not match documentation - showing firewall logs, or tailing <x> lines.
Syntax for the executed commands are incorrect, please try with the following commands:
Mar 2 2022
Mar 2 2022
c-po renamed T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Update Linux Kernel to v5.4.181 / 5.10.102 to Update Linux Kernel to v5.4.182 / 5.10.103.
jestabro changed the status of T4260: Extend vyos.configdict.node_changed() to support recursiveness, a subtask of T4203: Reconfigure DHCP client interface causes brief outages, from Open to Needs testing.
jestabro changed the status of T4260: Extend vyos.configdict.node_changed() to support recursiveness, a subtask of T4235: Add config tree diff algorithm, from Open to Needs testing.
jestabro changed the status of T4260: Extend vyos.configdict.node_changed() to support recursiveness from Open to Needs testing.
Unknown Object (User) added a comment to T2683: no dual stack in system static-host-mapping host-name .
(VyOS 1.4)
Mar 1 2022
Mar 1 2022
Local flow statistics at least seem to work:
c-po renamed T4277: flow-accounting: support sending flow-data via VRF interface from netflow: support sending flow-data via VRF interface to flow-accounting: support sending flow-data via VRF interface.
c-po updated the task description for T4277: flow-accounting: support sending flow-data via VRF interface.
c-po changed the status of T4277: flow-accounting: support sending flow-data via VRF interface from Open to In progress.