Hi all,
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Mar 16 2022
Mar 16 2022
egoistdream added a comment to T3976: Missing prefix-list and access-list option from ipv6 route-map.
FRRouting Release 8.2.2 was relased, when we will see this implemented?
Mar 15 2022
Mar 15 2022
c-po renamed T4302: FRRouting upgrade to release 8.2.2 from frr: Upgrade to version 8.2 to FRRouting upgrade to release 8.2.2.
zsdc added a comment to T4301: The "arp-monitor" option in bonding interface settings does not work.
The same issue with set interfaces bonding bond0 arp-monitor interval 'X' option. Also extra conversion between variable types.
Added the fix to the same PR.
zsdc changed Difficulty level from unknown to easy on T4301: The "arp-monitor" option in bonding interface settings does not work.
zsdc changed the status of T4301: The "arp-monitor" option in bonding interface settings does not work from Open to In progress.
zsdc changed the status of T4300: Extend list of supported interfaces for Cloud-init Network Configuration from Open to In progress.
The PR is merged with the wrong Task number. This can be closed.
Mar 14 2022
Mar 14 2022
IKEv2 has a different working behavior compared to the IKEv1. IKEv2 provides proper inline rekeying of IKE SAs by use of CREATE_CHILD_SA exchanges. This means that new keys may be established without any interruption of the existing IKE and IPsec SAs.
Mar 13 2022
Mar 13 2022
n.fort added a comment to T4298: vyos-vm-images: fix ansible group name and remove obsolete empty command.
Update download URL -> PR: https://github.com/vyos/vyos-vm-images/pull/26
Viacheslav changed the status of T4290: BGP source-interface fails to commit from Open to In progress.
Viacheslav moved T1856: Support configuring IPSec SA bytes from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Mar 12 2022
Mar 12 2022
PR for 1.4: https://github.com/vyos/vyos-1x/pull/1247
zsdc closed T4002: firewall group network-group long names restriction incorrect behavior as Resolved.
zsdc moved T4296: Interface config injected by Cloud-Init may interfere with VyOS native from Need Triage to Finished on the VyOS 1.4 Sagitta board.
zsdc closed T4296: Interface config injected by Cloud-Init may interfere with VyOS native as Resolved.
c-po renamed T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Update Linux Kernel to v5.4.183 / 5.10.104 to Update Linux Kernel to v5.4.184 / 5.10.105.
Mar 11 2022
Mar 11 2022
Viacheslav reopened T4122: interface ip address config missing after upgrade from 1.2.8 to 1.3.0 (when redirect is configured?) as "Backport candidate".
Viacheslav changed the status of T4265: Add op-mode for bgp flowspec state and routes from Open to In progress.
You are correct, my config is not correct.
emmm, I know it.
In T4288#119770, @chesskuo wrote:I found the swanctl.conf.
The config does not match the vyso config.I set the close_action as restart, but config does not show this line.
Your configuration should be like:
Mar 10 2022
Mar 10 2022
A simplified validator that rejects non-ipv6 address range (still lacks of 1st ipv6 minor than 2nd address validator):
jestabro moved T4295: Use config_tree instead of legacy loadFile in vyos-load-config.py from Finished to In Progress on the VyOS 1.4 Sagitta board.
Re-open to investigate failure in vyos-configtest.
jestabro moved T4292: Rewrite vyatta-save-config.pl to Python from Finished to In Progress on the VyOS 1.4 Sagitta board.
Re-open to investigate failure in vyos-configtest.
jestabro moved T4291: Consolidate component version read/write functions from Finished to In Progress on the VyOS 1.4 Sagitta board.
Re-open to investigate failure in vyos-configtest.
For 1.4, problem is in ipv6-range validator, which accepts lots of values that should be considered as invalid:
I'm going to be experimenting with Jinja 2 to see if we can incorporate it into our template processor.
Actually, let's leave it in 1.3 but backport the warning and generate public-key-command.
@zsdc Do you have any idea for CLI configuration mode?
Hello sir, thank you !!!
Unknown Object (User) added a comment to T4288: IPsec tunnel will break when ESP timeout.
Could you try to use "ikev2"? Will the same problem be if you use "ikev2"?
Mar 9 2022
Mar 9 2022
Unknown Object (User) added a comment to T4286: Fix for firewall ipv6 name address validator.
Similar situation in VyOS 1.3-stable-202202191602
jestabro changed the status of T4295: Use config_tree instead of legacy loadFile in vyos-load-config.py from Open to Backport candidate.
jestabro triaged T4295: Use config_tree instead of legacy loadFile in vyos-load-config.py as Normal priority.
c-po renamed T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Update Linux Kernel to v5.4.182 / 5.10.103 to Update Linux Kernel to v5.4.183 / 5.10.104.
Mar 8 2022
Mar 8 2022
fernando changed the status of T4293: Add "set ip-next-hop unchanged" in route-map from Open to Confirmed.
jestabro changed the status of T4292: Rewrite vyatta-save-config.pl to Python from Open to Backport candidate.
jestabro changed the status of T4292: Rewrite vyatta-save-config.pl to Python, a subtask of T4291: Consolidate component version read/write functions, from Open to Backport candidate.
jestabro changed the status of T4292: Rewrite vyatta-save-config.pl to Python, a subtask of T3355: Remove all remaining legacy Vyatta code, from Open to Backport candidate.
jestabro changed the status of T4291: Consolidate component version read/write functions from Open to Backport candidate.
system seems to be able to process flow data now and im seeing the flow data (netflow and sflow) reach my destination pathed via flow location, appears to work now!
jestabro added a parent task for T4292: Rewrite vyatta-save-config.pl to Python: T3355: Remove all remaining legacy Vyatta code.
jestabro added a parent task for T4292: Rewrite vyatta-save-config.pl to Python: T4291: Consolidate component version read/write functions.
I'm removing loadkey from 1.4. It will be removed from 1.3.1, as well. Eventually, the warning will be dropped from 1.4 but it will remain in 1.3.
Unknown Object (User) added a comment to T4231: Feature Request: ocserv: 2FA (password+OTP) support in Openconnect.
Next, we need to create an OTP key generator in the VyOS CLI
Unknown Object (User) added a comment to T4231: Feature Request: ocserv: 2FA (password+OTP) support in Openconnect.
PR with basic functionality:
https://github.com/vyos/vyos-1x/pull/1242
https://github.com/vyos/vyatta-cfg-system/pull/178
Unknown Object (User) updated the task description for T4231: Feature Request: ocserv: 2FA (password+OTP) support in Openconnect.
Mar 7 2022
Mar 7 2022
zsdc closed T2613: add logrotate options for syslog, a subtask of T3774: atop logs are not limited in size, as Resolved.
Resolved in https://phabricator.vyos.net/T3774, but it will not be backported to 1.2.
zsdc added a parent task for T2613: add logrotate options for syslog: T3774: atop logs are not limited in size.
zsdc added a subtask for T3774: atop logs are not limited in size: T2613: add logrotate options for syslog.
zsdc changed the status of T4250: Organize logrotate settings to avoid duplicates from Open to In progress.
Should be fixed in https://github.com/vyos/vyos-1x/pull/1241
I found the swanctl.conf.
The config does not match the vyso config.