Fixed in T4660
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Nov 24 2022
Nov 24 2022
Viacheslav changed the status of T4612: Support arbitrary netmasks in firewall rules from Open to Needs testing.
Viacheslav changed the status of T4825: interfaces veth/veth-pairs -standalone used, a subtask of T4686: Provides support for veth, from Open to Needs testing.
Viacheslav changed the status of T4825: interfaces veth/veth-pairs -standalone used from Open to Needs testing.
Nov 23 2022
Nov 23 2022
Viacheslav closed T4807: Need to fix traceroute help completion, a subtask of T4496: ping vrf help does not list VRFs, as Resolved.
Viacheslav changed the subtype of T4793: Create warning message about disable-route-autoinstall when ipsec vti is used from "Task" to "Feature Request".
Viacheslav moved T4823: swanctl.conf is broken when ipsec site-to-site peer set. from Open to Finished on the VyOS 1.4 Sagitta board.
Nov 22 2022
Nov 22 2022
Viacheslav changed the status of T4793: Create warning message about disable-route-autoinstall when ipsec vti is used, a subtask of T3953: IPSec with vti interfaces by default add default route to table 220, from In progress to Needs testing.
Viacheslav changed the status of T4793: Create warning message about disable-route-autoinstall when ipsec vti is used from In progress to Needs testing.
Viacheslav added a project to T4833: Include wireguard peer name in interface summary report: VyOS 1.4 Sagitta.
In T4823#138040, @chesskuo wrote:Hello sir,
In vyos-1.4-rolling-202211220318-amd64.iso, the broken syntax was fixed, but I notice a wired behavior on connection.<conn>.remote.id.
The default value on swanctl.conf will be <name> when I don't set site-to-site -> peer <name> -> authentication -> remote-id.
Viacheslav changed the status of T4823: swanctl.conf is broken when ipsec site-to-site peer set. from In progress to Needs testing.
Nov 21 2022
Nov 21 2022
Viacheslav moved T4812: IPsec ability to show all configured connections from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
Viacheslav closed T4812: IPsec ability to show all configured connections, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
Could you provide config from several items?
How many nodes do we need to reproduce it?
Nov 20 2022
Nov 20 2022
Viacheslav added a project to T4812: IPsec ability to show all configured connections: VyOS 1.3 Equuleus (1.3.3).
Viacheslav changed the status of T4823: swanctl.conf is broken when ipsec site-to-site peer set. from Open to In progress.
Viacheslav changed the status of T4812: IPsec ability to show all configured connections, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from In progress to Needs testing.
Viacheslav changed the status of T4812: IPsec ability to show all configured connections from In progress to Needs testing.
ipsec site-to-site peer <name> - it is just a connection name and is not related to the IP address
I'll take a look at TS
Viacheslav changed the status of T4830: nat66 - Error in port translation rules from Confirmed to Needs testing.
vyos@r14# set policy route-map FOO rule 100 action permit [edit] vyos@r14# set policy route-map FOO rule 50 action 'deny' [edit] vyos@r14# set policy route-map FOO rule 50 continue '100' [edit] vyos@r14# [edit] vyos@r14# commit [ policy ] rule 50 "continue" cannot be used with action deny!
Viacheslav changed the status of T4831: implement Telegraf build on arm64 / fix hardcoded x86-64 reference from Open to Needs testing.
Nov 19 2022
Nov 19 2022
Viacheslav closed T4720: Ability to configure SSH HostKeyAlgorithms, a subtask of T4712: Collaborative Protection Profile cPP for Network Devices root task, as Resolved.
Thanks
Don’t think that there should be a migration
As new keys were added several days ago.
Nov 18 2022
Nov 18 2022
In T973#137840, @elico wrote:@Viacheslav I want to test this, what should be done?
@Arc771 Thanks, Could you check it in the next rolling release after 20221118?
Viacheslav changed the status of T4826: Wrong key type is used for SSH SK public keys from Open to Needs testing.
@DerEnderKeks Could you check it in the next rolling release after 20221118?
Viacheslav changed the status of T4819: Allow printing Warning messages in multiple lines with \n from In progress to Needs testing.
set policy route-map MAP-ISP1-AS1001-EXPORT rule 50 action 'deny' set policy route-map MAP-ISP1-AS1001-EXPORT rule 50 continue '100'
Nov 17 2022
Nov 17 2022
I guess it was implemented in the T4750
Should be easy to fix
Viacheslav edited projects for T4824: PBR/FW rulesets are ignored in rfc3768-compatibility VRRP setups, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus.
Nov 14 2022
Nov 14 2022
PR https://github.com/vyos/vyos-1x/pull/1657
vyos@r14:~$ show vpn ipsec connections Connection State Type Remote address Local TS Remote TS Proposal ----------------- ----------- ------ ---------------- -------------- ----------- --------------------------------------- OFFICE-B established IKEv1 192.0.2.2 - - AES_CBC/256/HMAC_SHA2_256_128/MODP_1024 OFFICE-B-tunnel-0 up IPsec 192.0.2.2 192.168.0.0/24 10.0.0.0/21 AES_CBC/256/HMAC_SHA2_256_128/MODP_1024 OFFICE-B-tunnel-1 down IPsec 192.0.2.2 192.168.1.0/24 10.0.0.0/21 - OFFICE-B-tunnel-2 down IPsec 192.0.2.2 192.168.2.0/24 10.0.0.0/21 - OFFICE-C down IKEv1 192.0.2.2 - - - OFFICE-C-tunnel-0 down IPsec 192.0.2.2 192.168.5.0/24 10.0.0.0/21 - vyos@r14:~$
Viacheslav changed the status of T4789: Ability to get L2TP/PPTP/SSTP sessions info in a machine readable format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from In progress to Needs testing.
Viacheslav changed the status of T4789: Ability to get L2TP/PPTP/SSTP sessions info in a machine readable format from In progress to Needs testing.
Viacheslav edited projects for T4816: IPv4-mapped and IPv4-compatible IPv6 addresses not valid anymore, added: VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
Nov 13 2022
Nov 13 2022
Nov 12 2022
Nov 12 2022
Viacheslav changed the status of T4812: IPsec ability to show all configured connections, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from Open to In progress.
Viacheslav changed the status of T4812: IPsec ability to show all configured connections from Open to In progress.
Nov 11 2022
Nov 11 2022
Viacheslav changed the status of T4807: Need to fix traceroute help completion, a subtask of T4496: ping vrf help does not list VRFs, from In progress to Needs testing.
Viacheslav changed the status of T4807: Need to fix traceroute help completion from In progress to Needs testing.
Viacheslav changed the status of T4810: Op-mode show/monitor log pppoe interface does not show any logs from Open to Needs testing.
Nov 10 2022
Nov 10 2022
Nov 8 2022
Nov 8 2022
Viacheslav closed T4771: Rewrite protocol BGP op-mode to vyos.opmode format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
Nov 7 2022
Nov 7 2022
Viacheslav changed the status of T4799: PowerDNS >= 4.7 does not get reloaded by vyos-hostsd from Open to Needs testing.
Viacheslav changed the status of T4789: Ability to get L2TP/PPTP/SSTP sessions info in a machine readable format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from Open to In progress.
Viacheslav changed the status of T4789: Ability to get L2TP/PPTP/SSTP sessions info in a machine readable format from Open to In progress.
Viacheslav changed the status of T4801: Support for building AWS-ready ISO from Open to In progress.
Nov 3 2022
Nov 3 2022
Viacheslav changed the status of T4758: Rewrite show dhcp server to vyos.opmode format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from In progress to Needs testing.
Viacheslav changed the status of T4758: Rewrite show dhcp server to vyos.opmode format from In progress to Needs testing.
Viacheslav placed T3953: IPSec with vti interfaces by default add default route to table 220 up for grabs.
Viacheslav renamed T4789: Ability to get L2TP/PPTP/SSTP sessions info in a machine readable format from Ability to get L2TP/PPTP sessions info in a machine readable format to Ability to get L2TP/PPTP/SSTP sessions info in a machine readable format.
Nov 2 2022
Nov 2 2022
Viacheslav changed the status of T4771: Rewrite protocol BGP op-mode to vyos.opmode format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from In progress to Needs testing.
Viacheslav changed the status of T4771: Rewrite protocol BGP op-mode to vyos.opmode format from In progress to Needs testing.
Viacheslav changed the status of T4777: Ability to get logs in machine readable format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from In progress to Needs testing.
Viacheslav changed the status of T4777: Ability to get logs in machine readable format from In progress to Needs testing.
Requires rewriting function show to python-systemd
Nov 1 2022
Nov 1 2022
Viacheslav edited projects for T4737: FRRouting/zebra 7.5.1 does not redistribute routes to other protocols, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus.
Viacheslav awarded T4791: Consistent normalization of 'raw' output of op-mode scripts for CLI and API a Like token.
Viacheslav edited projects for T4790: RADIUS login does not work if sum of timeouts more than 50s , added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus.
Viacheslav changed the status of T4777: Ability to get logs in machine readable format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from Open to In progress.
Viacheslav changed the status of T4777: Ability to get logs in machine readable format from Open to In progress.
Viacheslav updated the task description for T4789: Ability to get L2TP/PPTP/SSTP sessions info in a machine readable format.
Viacheslav changed the subtype of T4788: Factory-reset/default command from "Task" to "Feature Request".
In addition to the configuration, you also need to reset all logs/custom scripts and boot from the base image.
What will be if you have several images? Should we delete all other images?
What will be if you have container images? Should we delete them?
And there are many other nuances.
@Arc771
Could you provide an example of how to generate the required keys? We will test it.
But It should be a separate task
So the original task means that we don't have new CLI options in login keys
Missing sk-ssh-ed25519
vyos@r14# set system login user foo authentication public-keys foo type Possible completions: ssh-dss None ssh-rsa None ecdsa-sha2-nistp256 None ecdsa-sha2-nistp384 None ssh-ed25519 None ecdsa-sha2-nistp521
Oct 31 2022
Oct 31 2022