Fix pushed to current:
rVYOSONEXf8522f323ec2
and updated on test server.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Mar 27 2023
Mar 27 2023
c-po changed the status of T5114: bgp: implement new CLI commands introduced in FRR 8.5, a subtask of T5100: Update FRR to 8.5, from Open to In progress.
c-po changed the status of T5114: bgp: implement new CLI commands introduced in FRR 8.5 from Open to In progress.
Looks good on 1.4-rolling-202303271007:
The site-to-site mode shows that tunnel not configured
Config:
set interfaces openvpn vtun52 description 'Site-to-Site' set interfaces openvpn vtun52 local-address xxx.xxx.0.1 set interfaces openvpn vtun52 local-port '1152' set interfaces openvpn vtun52 mode 'site-to-site' set interfaces openvpn vtun52 persistent-tunnel set interfaces openvpn vtun52 protocol 'udp' set interfaces openvpn vtun52 remote-address 'xxx.xxx.0.2' set interfaces openvpn vtun52 remote-host 'xxx.xxx.41.117' set interfaces openvpn vtun52 remote-port '1152' set interfaces openvpn vtun52 shared-secret-key 's2s'
interface:
vyos@vyos:~$ show int openvpn Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down Interface IP Address S/L Description --------- ---------- --- ----------- vtun52 10.52.0.1/32 u/u Site-to-Site
Output show openvpn
vyos@vyos:~$ show openvpn site-to-site No OpenVPN interfaces configured vyos@vyos:~$
c-po closed T5079: xml: schema extension to support defaultValues on tagNodes, a subtask of T4959: Add container registry authentication config for containers, as Resolved.
Most of the match rules results in:
Viacheslav changed the status of T5113: PDNS: Support custom port for DNS forwarders from Open to Needs testing.
Mar 26 2023
Mar 26 2023
Viacheslav changed the status of T5112: Enable support for Network Time Security (NTS) for chrony, a subtask of T3008: Migrate from ntpd to chronyd, from Open to Needs testing.
Viacheslav changed the status of T5112: Enable support for Network Time Security (NTS) for chrony from Open to Needs testing.
Mar 25 2023
Mar 25 2023
Viacheslav added a project to T5112: Enable support for Network Time Security (NTS) for chrony: VyOS 1.4 Sagitta.
Mar 24 2023
Mar 24 2023
This sort of config should absolutely persist across both reboots and upgrades!.
it will be option b) it will be persistent accross reboots but not accross upgrades as only files in /config will be migrated to the new image version.
We could also alter the path to /config/user-data/ or make /etc/keepalived/conf.d/ a symlink to /config/user-data/ so that those files will be migrated during an upgrade.
jestabro renamed T5097: the operational command "show interfaces ethernet ethx" doesn't reflect a call to 'clear counters' from the operational command "show interfaces ethernet ethx" doesn't show when clears counts to the operational command "show interfaces ethernet ethx" doesn't reflect a call to 'clear counters'.
jestabro changed the status of T5097: the operational command "show interfaces ethernet ethx" doesn't reflect a call to 'clear counters' from Open to In progress.
jestabro added a comment to T5097: the operational command "show interfaces ethernet ethx" doesn't reflect a call to 'clear counters'.
PR for 1.4:
https://github.com/vyos/vyos-1x/pull/1911
PR for 1.3:
https://github.com/vyos/vyos-1x/pull/1912
Mar 23 2023
Mar 23 2023
Viacheslav added a parent task for T5110: Show frr op-mode vtysh_pam: Failed in account validation: T5100: Update FRR to 8.5.
Viacheslav updated the task description for T5110: Show frr op-mode vtysh_pam: Failed in account validation.
Viacheslav renamed T5110: Show frr op-mode vtysh_pam: Failed in account validation from Show version frr vtysh_pam: Failed in account validation to Show frr op-mode vtysh_pam: Failed in account validation.
Viacheslav changed the status of T5108: Get rate limit for L2TP/PPTP/SSTP/IPoE in raw format from Open to In progress.
jestabro renamed T5107: Raise error in op-mode dns.py instead of calling exit from Raise error in op-mode dns.py instead of exit to Raise error in op-mode dns.py instead of calling exit.
Mar 22 2023
Mar 22 2023
jestabro edited projects for T5106: Extend generation of API client requests to configsession native functions and composite requests, added: VyOS 1.4 Sagitta; removed VyOS 1.2 Crux.
sarthurdev changed the status of T5018: Redirect to IFB removed after change in qos policy from In progress to Needs testing.
jestabro closed T5068: Generate op-mode API client requests along with schema generation as Resolved.
jestabro renamed T5068: Generate op-mode API client requests along with schema generation from Generate API client requests along with schema generation to Generate op-mode API client requests along with schema generation.
n.fort changed the status of T5105: DHCP Server - Wrong error message from Confirmed to Needs testing.
a.apostoliuk changed the status of T5093: Command 'reset vpn ipsec-profile' doesn't work from Open to In progress.
a.apostoliuk changed the status of T5043: Need to create reset command for IKEv2 remote-access vpn connections from Open to Needs testing.
Added initial implementation here:
Mar 21 2023
Mar 21 2023
c-po changed the status of T5104: DHCP default route issues with static routes in VRFs from In progress to Needs testing.
c-po closed T5102: ospf: "redistribute babel" is always set, a subtask of T4977: Babel routing protocol support, as Resolved.
stepler changed the status of T5104: DHCP default route issues with static routes in VRFs from Open to In progress.
All 3 original issues are still present on 1.4-rolling-202303170317.
Looks good on 1.4-rolling-202303170317:
c-po changed the status of T5102: ospf: "redistribute babel" is always set, a subtask of T4977: Babel routing protocol support, from Open to In progress.
c-po changed the status of T5102: ospf: "redistribute babel" is always set from Open to In progress.
Viacheslav changed the status of T5099: IPoE server add option 'next-pool' for named ip pools from Open to In progress.
PR https://github.com/vyos/vyos-1x/pull/1901
set service ipoe-server authentication mode 'noauth' set service ipoe-server client-ip-pool name first-pool gateway-address '192.0.2.1' set service ipoe-server client-ip-pool name first-pool next-pool 'second-pool' set service ipoe-server client-ip-pool name first-pool subnet '192.0.2.0/25' set service ipoe-server client-ip-pool name second-pool gateway-address '203.0.113.1' set service ipoe-server client-ip-pool name second-pool next-pool 'third-pool' set service ipoe-server client-ip-pool name second-pool subnet '203.0.113.0/25' set service ipoe-server client-ip-pool name third-pool gateway-address '198.51.100.1' set service ipoe-server client-ip-pool name third-pool subnet '198.51.100.0/24' set service ipoe-server interface eth1
Viacheslav changed the status of T5050: Firewall - Add options for logging packets from In progress to Needs testing.
Viacheslav edited projects for T5098: PPPoE client holdoff configuration, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.4).
Viacheslav moved T5098: PPPoE client holdoff configuration from Open to Backport Candidates on the VyOS 1.4 Sagitta board.
Mar 20 2023
Mar 20 2023
Viacheslav updated the task description for T5099: IPoE server add option 'next-pool' for named ip pools.
Viacheslav updated the task description for T5099: IPoE server add option 'next-pool' for named ip pools.
Viacheslav updated the task description for T5099: IPoE server add option 'next-pool' for named ip pools.
I have certain doubts about it.
Netfilter documentation is not always perfect, and many times you may find out some different options.
Viacheslav renamed T5099: IPoE server add option 'next-pool' for named ip pools from IPoE server add option 'next-pool' to IPoE server add option 'next-pool' for named ip pools.
diodep added a comment to T5049: Configure GRE over IPsec tunnel when source port is in VRF, OSPF causes GRE tunnel broken..
Workaround: put these lines to /config/scripts/vyos-postconfig-bootup.script
Mar 19 2023
Mar 19 2023
@n.fort
My judgement may have been too hasty. The commands are accepted by VyOS configure, but it looks like the meta pkttype host is being ignored by my new nftables rules. That is, all IP addresses are matching, not just actual VyOS host router IP addresses.
a.apostoliuk changed the status of T4925: Need to add the possibility to configure Pseudo-Random Functions (PRF) in IKEv2 from In progress to Needs testing.
Mar 17 2023
Mar 17 2023