- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Nov 17 2023
Nov 17 2023
Viacheslav renamed T5750: Upgrade from 1.3.4 to 1.4 Rolling fails QoS from Upgrade from 1.3.4 to 1.4 Rolling fails. to Upgrade from 1.3.4 to 1.4 Rolling fails QoS.
Viacheslav added a project to T5750: Upgrade from 1.3.4 to 1.4 Rolling fails QoS: VyOS 1.5 Circinus.
Viacheslav changed the status of T5749: Show MAC address VRF and MTU by default for "show interfaces", a subtask of T5747: op-mode add MAC VRF and MTU for show interfaces summary, from Open to In progress.
Viacheslav changed the status of T5749: Show MAC address VRF and MTU by default for "show interfaces" from Open to In progress.
Nov 16 2023
Nov 16 2023
Viacheslav updated the task description for T5749: Show MAC address VRF and MTU by default for "show interfaces".
Viacheslav changed the status of T5747: op-mode add MAC VRF and MTU for show interfaces summary from Open to Needs testing.
As I undestand it is possible now to create multiple auth ID's
vyos@r4# set vpn ipsec authentication psk FOO id Possible completions: <text> ID used for authentication
Not sure about other options.
Viacheslav added a project to T5747: op-mode add MAC VRF and MTU for show interfaces summary: VyOS 1.4 Sagitta.
Viacheslav renamed T5747: op-mode add MAC VRF and MTU for show interfaces summary from op-mode add MAC and MTU for show interfaces to op-mode add MAC VRF and MTU for show interfaces summary.
Viacheslav closed T5689: FRR 9.0.1 in VyOS current segfaults on show rpki prefix $prefix as Resolved.
Viacheslav changed the status of T5689: FRR 9.0.1 in VyOS current segfaults on show rpki prefix $prefix from Open to Needs testing.
Nov 15 2023
Nov 15 2023
PR https://github.com/vyos/vyos-1x/pull/2491
vyos@r4# run show interfaces summary
Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down
Interface IP Address MAC VRF MTU S/L Description
----------- ----------------- ----------------- ------- ----- ----- -------------
dum0 203.0.113.1/32 96:44:ad:c5:a1:a5 default 1500 u/u
eth0 192.168.122.14/24 52:54:00:f1:fd:77 default 1500 u/u WAN
eth1 192.0.2.1/24 52:54:00:04:33:2b foo 1500 u/u LAN-eth1
eth1v10v4 10.10.10.10/24 00:00:5e:00:01:0a foo 1500 u/u
eth2 - 52:54:00:40:2e:af default 1504 u/u LAN-eth2
eth3 - 52:54:00:09:a4:b4 default 1500 A/D
eth4 - 52:54:00:2c:51:09 default 1500 A/D
eth5 - 52:54:00:f3:1d:e8 default 1500 A/D
lo 127.0.0.1/8 00:00:00:00:00:00 default 65536 u/u
::1/128Viacheslav added a project to T5745: conntrack-sync: Multiprimary setups for HA/VRRP: VyOS 1.5 Circinus.
Viacheslav moved T5732: generate firewall rule-resequence drops geoip country-code from output from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav added a project to T3983: show pki certificate Doesnt show x509 certificates: VyOS 1.5 Circinus.
Viacheslav changed the status of T5726: HTTPS API image cannot be updated from Open to Needs testing.
Viacheslav changed the status of T5732: generate firewall rule-resequence drops geoip country-code from output from Open to In progress.
Viacheslav moved T5726: HTTPS API image cannot be updated from Open to Finished on the VyOS 1.5 Circinus board.
PR for 1.5
https://github.com/vyos/vyos-1x/pull/2483
Viacheslav moved T5689: FRR 9.0.1 in VyOS current segfaults on show rpki prefix $prefix from Open to Finished on the VyOS 1.5 Circinus board.
Viacheslav moved T5695: Build FRR with LUA scripts --enable-scripting option from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav added a project to T5695: Build FRR with LUA scripts --enable-scripting option: VyOS 1.4 Sagitta.
Viacheslav moved T5728: Improve compatibility between OpenVPN on VyOS 1.5 and OpenVPN Connect Client from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav added a comment to T5732: generate firewall rule-resequence drops geoip country-code from output.
@JeffWDH looks good to me. It definitely should fix this.
Nov 14 2023
Nov 14 2023
Viacheslav edited projects for T5739: Password recovery does not work if public keys are configured, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus.
Viacheslav changed the status of T5728: Improve compatibility between OpenVPN on VyOS 1.5 and OpenVPN Connect Client from In progress to Needs testing.
I wonder if we should use permanent API call queries that don't depend on the path.
Viacheslav added a comment to T5728: Improve compatibility between OpenVPN on VyOS 1.5 and OpenVPN Connect Client.
@watson.ash Will be fixed in the next rolling release. Could you check it (after 2023-11-14)
And we can backport it to 1.4 if all works fine.
Thanks.
Changing this https://github.com/vyos/vyos-1x/blob/2e587c8329a1d32fc1ec601c7753211d0fedbf2c/python/vyos/remote.py#L356
to
download(local_path, urlstring, False, True, source_host, source_port)
Fixes the issue for API
Viacheslav moved T5563: container: Container environment variable cannot be set from Open to Finished on the VyOS 1.5 Circinus board.
Nov 13 2023
Nov 13 2023
Viacheslav moved T5706: Systemd-udevd high CPU utilization for multiple dynamic ppp/l2tp/ipoe interfaces from Open to Finished on the VyOS 1.4 Sagitta board.
In T5167#164447, @JeffWDH wrote:What about using nginx which seems to be already leveraged by the web API?
Nov 12 2023
Nov 12 2023
Viacheslav added a project to T5735: Add CLI and configuration scripts for stunnel: VyOS 1.5 Circinus.
Viacheslav changed the status of T5728: Improve compatibility between OpenVPN on VyOS 1.5 and OpenVPN Connect Client from Open to In progress.
Viacheslav updated the task description for T5734: Unhandled exception when trying to configure OpenVPN server without dh-params.
Nov 11 2023
Nov 11 2023
@twan it was backported https://github.com/vyos/vyos-1x/pull/2400
Nov 10 2023
Nov 10 2023
Viacheslav added a comment to T5708: Additional dynamic dns improvements to align with ddclient 3.11.1 release.
@indrajitr could you recheck smoketests?
DEBUG - ---------------------------------------------------------------------- DEBUG - Ran 3 tests in 7.616s DEBUG - DEBUG - OK DEBUG - Running Testcase: /usr/libexec/vyos/tests/smoke/cli/test_service_dns_dynamic.py DEBUG - test_01_dyndns_service_standard (__main__.TestServiceDDNS.test_01_dyndns_service_standard) ... ok DEBUG - test_02_dyndns_service_ipv6 (__main__.TestServiceDDNS.test_02_dyndns_service_ipv6) ... ok DEBUG - test_03_dyndns_service_dual_stack (__main__.TestServiceDDNS.test_03_dyndns_service_dual_stack) ... ok DEBUG - test_04_dyndns_rfc2136 (__main__.TestServiceDDNS.test_04_dyndns_rfc2136) ... ok DEBUG - test_05_dyndns_hostname (__main__.TestServiceDDNS.test_05_dyndns_hostname) ... ok DEBUG - test_06_dyndns_web_options (__main__.TestServiceDDNS.test_06_dyndns_web_options) ... ok DEBUG - test_07_dyndns_vrf (__main__.TestServiceDDNS.test_07_dyndns_vrf) ... ERROR DEBUG - test_07_dyndns_vrf (__main__.TestServiceDDNS.test_07_dyndns_vrf) ... FAIL DEBUG - DEBUG - ====================================================================== DEBUG - ERROR: test_07_dyndns_vrf (__main__.TestServiceDDNS.test_07_dyndns_vrf) DEBUG - ---------------------------------------------------------------------- DEBUG - Traceback (most recent call last): DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/test_service_dns_dynamic.py", line 304, in test_07_dyndns_vrf DEBUG - self.cli_set(['vrf', 'name', vrf_name, 'table', vrf_table]) DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/base_vyostest_shim.py", line 68, in cli_set DEBUG - self._session.set(config) DEBUG - File "/usr/lib/python3/dist-packages/vyos/configsession.py", line 150, in set DEBUG - self.__run_command([SET] + path + value) DEBUG - File "/usr/lib/python3/dist-packages/vyos/configsession.py", line 139, in __run_command DEBUG - raise ConfigSessionError(output) DEBUG - vyos.configsession.ConfigSessionError: Number is not in any of allowed ranges DEBUG - DEBUG - DEBUG - DEBUG - VRF routing table must be in range from 100 to 65535 DEBUG - Value validation failed DEBUG - Set failed DEBUG - DEBUG - DEBUG - ====================================================================== DEBUG - FAIL: test_07_dyndns_vrf (__main__.TestServiceDDNS.test_07_dyndns_vrf) DEBUG - ---------------------------------------------------------------------- DEBUG - Traceback (most recent call last): DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/test_service_dns_dynamic.py", line 50, in tearDown DEBUG - self.assertTrue(process_running(DDCLIENT_PID)) DEBUG - AssertionError: False is not true DEBUG - DEBUG - ----------------------------------------------------------------------
Viacheslav updated the task description for T4712: Collaborative Protection Profile cPP for Network Devices root task.
Yes I mean sudo ip vrf exec FOO /usr/sbin/conntrackd -C /run/conntrackd/conntrackd.conf
PR https://github.com/vyos/vyos-1x/pull/2469
set service file-server listen-address 0.0.0.0 set service file-server port 8000 set service file-server directory '/tmp'
Nov 9 2023
Nov 9 2023
Viacheslav added a comment to T5725: protocol IS-IS configuration is empty if a tunnel does not have remote address.
It seems to be a bug in the FRR that delete isisd configuration completely
router isis VyOS net 49.0001.1920.0200.0011.00 lsp-mtu 1460 redistribute ipv4 connected level-2 ! ! interface eth1 ip router isis VyOS ipv6 router isis VyOS ! interface tun0 ip router isis VyOS ipv6 router isis VyOS !
check
r1# conf t r1(config)# router isis VyOS r1(config-router)# net 49.0001.1920.0200.0011.00 r1(config-router)# lsp-mtu 1460 r1(config-router)# redistribute ipv4 connected level-2 r1(config-router)# ! r1(config-router)# ! r1(config-router)# interface eth1 r1(config-if)# ip router isis VyOS r1(config-if)# ipv6 router isis VyOS r1(config-if)# ! r1(config-if)# interface tun0 r1(config-if)# ip router isis VyOS vtysh: error reading from isisd: Success (0)Warning: closing connection to isisd because of an I/O error! r1(config-if)# ipv6 router isis VyOS Warning: connecting to isisd...failed! isisd is not running r1(config-if)# ! r1(config-if)# end Warning: connecting to isisd...failed! r1# r1#
Viacheslav renamed T5725: protocol IS-IS configuration is empty if a tunnel does not have remote address from protocol IS-IS configuration is empty to protocol IS-IS configuration is empty if a tunnel does not have remote address.
Viacheslav updated the task description for T5725: protocol IS-IS configuration is empty if a tunnel does not have remote address.
Viacheslav edited projects for T5725: protocol IS-IS configuration is empty if a tunnel does not have remote address, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus.
Did you try to start this service in VRF?
Viacheslav moved T5648: ldpd neighbour template errors from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav moved T5648: ldpd neighbour template errors from Open to Finished on the VyOS 1.5 Circinus board.
Create please a PR if it works for you.
Nov 8 2023
Nov 8 2023
Viacheslav changed the status of T5715: IPSec VPN: restart vpn is not working from Open to In progress.
Viacheslav moved T5716: PPPoE-server shaper template bug down-limiter option does not rely on fwmark from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav moved T5559: Selective proxy-arp/proxy-ndp when doing SNAT/DNAT from Open to Finished on the VyOS 1.4 Sagitta board.
set protocols static neighbor-proxy arp 192.0.2.1 interface eth1
check
vyos@r4# sudo ip nei show proxy 192.0.2.1 dev eth1 proxy [edit] vyos@r4#
Viacheslav moved T5702: Add ability to set include_ifmib_iface_prefix and ifmib_max_num_ifaces for SNMP from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav moved T5720: PPPoE-server adding new interface does not work from Open to Finished on the VyOS 1.4 Sagitta board.
Nov 7 2023
Nov 7 2023
Viacheslav changed the status of T5706: Systemd-udevd high CPU utilization for multiple dynamic ppp/l2tp/ipoe interfaces from In progress to Needs testing.