The root issue is wpa_supplicant shipped in Debian does not contain commit https://w1.fi/cgit/hostap/commit/?id=46c635910a724ed14ee9ace549fed9790ed5980b which adds a new configuration file option named:
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Aug 2 2022
Aug 2 2022
c-po moved T4537: MACsec not working with cipher gcm-aes-256 from Need Triage to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4584: hostap: create custom package build from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Aug 1 2022
Aug 1 2022
Viacheslav added a comment to T4572: Add an option to force interface MTU to the value received from DHCP.
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1453
@ajgnet If you have a way to limit the dynamic prefix to a known prefix, then using 1:1 NAT66 prefix translation should work (only the host segment is dynamic)
@c-po You haven't replied for a long time, please let me know if you have any other questions
Viacheslav edited projects for T4572: Add an option to force interface MTU to the value received from DHCP, added: VyOS 1.3 Equuleus (1.3.2); removed VyOS 1.3 Equuleus.
Viacheslav added a comment to T4572: Add an option to force interface MTU to the value received from DHCP.
To solve the issue with MTU over DHCP we can use some new options like mtu for example:
set interfaces ethernet eth0 dhcp-options mtu
Viacheslav closed T4581: 'show system cpu' not working, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
If vrf not configured:
vyos@r14:~$ /usr/libexec/vyos/op_mode/vrf.py show
Traceback (most recent call last):
File "/usr/libexec/vyos/op_mode/vrf.py", line 89, in <module>
res = vyos.opmode.run(sys.modules[__name__])
File "/usr/lib/python3/dist-packages/vyos/opmode.py", line 118, in run
res = func(**args)
File "/usr/libexec/vyos/op_mode/vrf.py", line 84, in show
return _get_formatted_output(vrf_data)
File "/usr/libexec/vyos/op_mode/vrf.py", line 68, in _get_formatted_output
state = vrf.get('operstate').lower()
AttributeError: 'NoneType' object has no attribute 'lower'
vyos@r14:~$Viacheslav changed the status of T4582: Router-advert: Preferred lifetime cannot equal valid lifetime in PIOs from Open to Needs testing.
Viacheslav closed T4578: Rewrite show dns forwarding statistics to new format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
c-po added a comment to T4579: bridge: can not delete member interface CLI option when VLAN is enabled.
VyOS 1.3 equuleus https://github.com/vyos/vyos-1x/pull/1450
c-po added a comment to T4565: vlan aware bridge not working with - Kernel: T3318: update Linux Kernel to v5.4.205 #249 .
VyOS 1.3 equuleus https://github.com/vyos/vyos-1x/pull/1450
Unknown Object (User) added a comment to T4581: 'show system cpu' not working.
Unknown Object (User) claimed T4581: 'show system cpu' not working.
Viacheslav added a parent task for T4581: 'show system cpu' not working: T4564: Root task for rewriting [op-mode] to vyos.opmode format.
Unknown Object (User) changed the status of T4581: 'show system cpu' not working from Open to Confirmed.
Confirmed
VyOS 1.4-rolling-202207240217
Jul 31 2022
Jul 31 2022
initramfs updated the task description for T4582: Router-advert: Preferred lifetime cannot equal valid lifetime in PIOs.
initramfs updated the task description for T4582: Router-advert: Preferred lifetime cannot equal valid lifetime in PIOs.
jestabro triaged T4580: Handle the case of op-mode file names with hyphens in GraphQL schema/resolver generation as Normal priority.
jestabro changed the subtype of T4554: Implement GraphQL resolvers for standardized op-mode scripts from "Task" to "Enhancement".
jestabro changed the subtype of T4544: Generate schema definitions from standardized op-mode scripts from "Task" to "Enhancement".
c-po moved T4579: bridge: can not delete member interface CLI option when VLAN is enabled from Need Triage to 1.3.2 on the VyOS 1.3 Equuleus board.
c-po moved T4579: bridge: can not delete member interface CLI option when VLAN is enabled from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Unknown Object (User) added a comment to T160: Support NAT64.
Just adding here that Jool.mx is no longer maintained.
Jul 30 2022
Jul 30 2022
c-po moved T4515: Reduce telegraf binary size from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
PR for VyOS 1.3 branch https://github.com/vyos/vyos-build/pull/251
c-po edited projects for T4511: IPv6 DNS lookup, added: VyOS 1.3 Equuleus (1.3.2); removed VyOS 1.3 Equuleus (1.3.0).
c-po moved T4511: IPv6 DNS lookup from Need Triage to Backlog on the VyOS 1.3 Equuleus (1.3.0) board.
@dongjunbo What do you mean?
Could you send a real example? I don't see any issues (VyOS 1.3-stable-202207280515).
Viacheslav changed the subtype of T4375: hairpin nat (nat reflector) "hijacks" all outgoing traffic on specified port to any destination from "Bug" to "Feature Request".
Viacheslav changed the status of T4578: Rewrite show dns forwarding statistics to new format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from Open to In progress.
Viacheslav changed the status of T4578: Rewrite show dns forwarding statistics to new format from Open to In progress.
PR https://github.com/vyos/vyos-1x/pull/1446
vyos@r14:~$ show dns forwarding statistics Cache entries Max cache entries Cache size --------------- ------------------- ------------ 71 10000 20.22 kbytes vyos@r14:~$
Raw:
vyos@r14:~$ /usr/libexec/vyos/op_mode/dns.py show_forwarding_statistics --raw
{
"aggressive-nsec-cache-entries": "0",
"aggressive-nsec-cache-nsec-hits": "0",
"aggressive-nsec-cache-nsec-wc-hits": "0",
"aggressive-nsec-cache-nsec3-hits": "0",
"aggressive-nsec-cache-nsec3-wc-hits": "0",
"all-outqueries": "48",
"answers-slow": "0",
"answers0-1": "0",
"answers1-10": "0",
"answers10-100": "0",
"answers100-1000": "0",
"auth-zone-queries": "0",
"auth4-answers-slow": "0",
"auth4-answers0-1": "0",
"auth4-answers1-10": "0",
"auth4-answers10-100": "20",
"auth4-answers100-1000": "9",
"auth6-answers-slow": "0",
"auth6-answers0-1": "19",
"auth6-answers1-10": "0",
"auth6-answers10-100": "0",
"auth6-answers100-1000": "0",
"cache-entries": "71",
"cache-hits": "0",
"cache-misses": "0",
"case-mismatches": "0",
"chain-resends": "0",
"client-parse-errors": "0",
"concurrent-queries": "0",
"cpu-iowait": "10857",
"cpu-msec-thread-0": "1242",
"cpu-steal": "672",
"dlg-only-drops": "0",
"dnssec-authentic-data-queries": "0",
"dnssec-check-disabled-queries": "0",
"dnssec-queries": "0",
"dnssec-result-bogus": "0",
"dnssec-result-bogus-invalid-denial": "0",
"dnssec-result-bogus-invalid-dnskey-protocol": "0",
"dnssec-result-bogus-missing-negative-indication": "0",
"dnssec-result-bogus-no-rrsig": "0",
"dnssec-result-bogus-no-valid-dnskey": "0",
"dnssec-result-bogus-no-valid-rrsig": "0",
"dnssec-result-bogus-no-zone-key-bit-set": "0",
"dnssec-result-bogus-revoked-dnskey": "0",
"dnssec-result-bogus-self-signed-ds": "0",
"dnssec-result-bogus-signature-expired": "0",
"dnssec-result-bogus-signature-not-yet-valid": "0",
"dnssec-result-bogus-unable-to-get-dnskeys": "0",
"dnssec-result-bogus-unable-to-get-dss": "0",
"dnssec-result-bogus-unsupported-dnskey-algo": "0",
"dnssec-result-bogus-unsupported-ds-digest-type": "0",
"dnssec-result-indeterminate": "0",
"dnssec-result-insecure": "0",
"dnssec-result-nta": "0",
"dnssec-result-secure": "5",
"dnssec-validations": "5",
"dont-outqueries": "0",
"ecs-queries": "0",
"ecs-responses": "0",
"edns-ping-matches": "0",
"edns-ping-mismatches": "0",
"empty-queries": "0",
"failed-host-entries": "0",
"fd-usage": "18",
"ignored-packets": "0",
"ipv6-outqueries": "19",
"ipv6-questions": "0",
"malloc-bytes": "0",
"max-cache-entries": "10000",
"max-mthread-stack": "0",
"max-packetcache-entries": "500000",
"negcache-entries": "4",
"no-packet-error": "0",
"nod-lookups-dropped-oversize": "0",
"noedns-outqueries": "0",
"noerror-answers": "0",
"noping-outqueries": "0",
"nsset-invalidations": "0",
"nsspeeds-entries": "0",
"nxdomain-answers": "0",
"outgoing-timeouts": "0",
"outgoing4-timeouts": "0",
"outgoing6-timeouts": "0",
"over-capacity-drops": "0",
"packetcache-entries": "0",
"packetcache-hits": "0",
"packetcache-misses": "0",
"policy-drops": "0",
"policy-result-custom": "0",
"policy-result-drop": "0",
"policy-result-noaction": "0",
"policy-result-nodata": "0",
"policy-result-nxdomain": "0",
"policy-result-truncate": "0",
"proxy-protocol-invalid": "0",
"qa-latency": "0",
"qname-min-fallback-success": "0",
"query-pipe-full-drops": "0",
"questions": "0",
"real-memory-usage": "21766144",
"rebalanced-queries": "0",
"record-cache-acquired": "1086473",
"record-cache-contended": "0",
"resource-limits": "19",
"security-status": "1",
"server-parse-errors": "0",
"servfail-answers": "0",
"spoof-prevents": "0",
"sys-msec": "1853",
"taskqueue-expired": "0",
"taskqueue-pushed": "0",
"taskqueue-size": "0",
"tcp-client-overflow": "0",
"tcp-clients": "0",
"tcp-outqueries": "0",
"tcp-questions": "0",
"throttle-entries": "0",
"throttled-out": "0",
"throttled-outqueries": "0",
"too-old-drops": "0",
"truncated-drops": "0",
"udp-in-errors": "0",
"udp-noport-errors": "0",
"udp-recvbuf-errors": "0",
"udp-sndbuf-errors": "0",
"unauthorized-tcp": "0",
"unauthorized-udp": "0",
"unexpected-packets": "0",
"unreachables": "0",
"uptime": "8820",
"user-msec": "621",
"variable-responses": "0",
"x-our-latency": "0",
"x-ourtime-slow": "0",
"x-ourtime0-1": "0",
"x-ourtime1-2": "0",
"x-ourtime16-32": "0",
"x-ourtime2-4": "0",
"x-ourtime4-8": "0",
"x-ourtime8-16": "0",
"cache-size": "20.22"
}I can't reproduce it (VyOS 1.4-rolling-202207280217):
Viacheslav changed the status of T4089: Show nat destination rules shows ip address instead of interface 'any', a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from In progress to Needs testing.
Viacheslav changed the status of T4089: Show nat destination rules shows ip address instead of interface 'any' from In progress to Needs testing.
Viacheslav changed the status of T4570: Exception when trying to set up VXLAN over Wireguard from In progress to Needs testing.
Viacheslav closed T4545: Rewrite show nat source rules, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
Viacheslav changed the status of T4569: Rewrite show bridge to new format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from In progress to Needs testing.
Viacheslav changed the status of T4569: Rewrite show bridge to new format from In progress to Needs testing.
Viacheslav closed T4562: Rewrite show vrf to new format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
Viacheslav closed T4543: Show source nat statistics shows incorrect interface, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
Viacheslav added a comment to T4089: Show nat destination rules shows ip address instead of interface 'any'.
PR https://github.com/vyos/vyos-1x/pull/1445
vyos@r14:~$ show nat destination rules
Rule Source Destination Proto In-Int Translation
------ --------- ------------- ------- -------- -------------
100 0.0.0.0/0 0.0.0.0/0 TCP eth0 192.0.2.40
sport any dport 3389 port 80
380 0.0.0.0/0 203.0.113.5 TCP any 192.0.2.5
sport any dport 443 port 8443
vyos@r14:~$Viacheslav changed the status of T4089: Show nat destination rules shows ip address instead of interface 'any', a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from Open to In progress.
Viacheslav changed the status of T4089: Show nat destination rules shows ip address instead of interface 'any' from Open to In progress.
c-po added a comment to T4565: vlan aware bridge not working with - Kernel: T3318: update Linux Kernel to v5.4.205 #249 .
Working as expected in VyOS 1.3.1-S1
Viacheslav added a comment to T4519: DHCPv6: "set show dhcpv6 server leases" should show DUID instead of IAID_DUID.
Change DUID to IAID_DUAID was in T1470
Not sure which format we should to use
c-po added a comment to T4565: vlan aware bridge not working with - Kernel: T3318: update Linux Kernel to v5.4.205 #249 .
It's applied but masked by another part, looking into it. A brief workaround is to just change the description on br0 and commit - then the bridge vlan is re-created.
Viacheslav added a comment to T4565: vlan aware bridge not working with - Kernel: T3318: update Linux Kernel to v5.4.205 #249 .
@c-po Bug exists after reboot (tested in 1.4)
c-po added a comment to T4565: vlan aware bridge not working with - Kernel: T3318: update Linux Kernel to v5.4.205 #249 .
@Viacheslav can you save your config and reboot?
We have ssmtp, I think we can use it for notifications
There is an example of configuration
Need to test it and come up with a CLI
I don't know if should it be a part of set service event-handler xxx or some new CLI service like set service monitoring notification mail xxx
Viacheslav renamed T4549: Email notification functionality from Email functionality to Email notification functionality.
Unknown Object (User) added a comment to T4074: Add NETCONF server with YANG data modeling .
+1
OpenConfig should be used as a basic YANG model.
If something is missing, add proprietary ones
https://www.openconfig.net/
Unknown Object (User) changed the status of T4542: route-map: "match prefix-len" incorrect behavior from Confirmed to Needs testing.
If "notice" in CLI and documentation is enough, the task can be closed.
Viacheslav changed the status of T4577: WWAN commit failed which simple config from Open to Needs testing.
Jul 29 2022
Jul 29 2022
jestabro closed T4554: Implement GraphQL resolvers for standardized op-mode scripts, a subtask of T4544: Generate schema definitions from standardized op-mode scripts, as Resolved.
jestabro closed T4544: Generate schema definitions from standardized op-mode scripts, a subtask of T2719: Standardized op mode script structure, as Resolved.
jestabro closed T4544: Generate schema definitions from standardized op-mode scripts, a subtask of T3993: Extend HTTP API GraphQL support, as Resolved.
Viacheslav closed T4518: Add XML for CLI conf mode load-balancing wan , a subtask of T4470: Rewrite load-balancing wan to XML/Python, as Resolved.
Viacheslav renamed T4089: Show nat destination rules shows ip address instead of interface 'any' from Show nat rules shows ip address instead of interface 'any' to Show nat destination rules shows ip address instead of interface 'any'.