Does the problem only appear after your 5am reboot every day?
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
All Stories
Mar 21 2024
The Root Cause is this 'Static routes not working with PPPoE and VyOS 1.4'
https://forum.vyos.io/t/static-routes-not-working-with-pppoe-and-vyos-1-4/14102
Mar 20 2024
This likely because the global state policy being reintroduced was not accounted for in the firewall check in conf script. I'll check this week.
We have something like this already for !in! interfaces:
At least tech-support-archive.tgz MUST not copied between updates
PR https://github.com/vyos/vyos-1x/pull/3155
set service config-sync secondary address 192.0.2.1 set service config-sync secondary timeout 3600
Mar 19 2024
yeah I had this problem too, also @Viacheslav I think you are right:
The fix for values containing single backslashes has been merged for 1.5 in
https://github.com/vyos/vyos1x-config/pull/23
https://github.com/vyos/vyos-1x/pull/3035
As discussed, this will wait before being backported to 1.4.
Show this commands output if that happens:
show interfaces pppoe pppoe0 show ip route show log pppoe
PR https://github.com/vyos/vyos-1x/pull/3150
vyos@r4:~$ show conntrack table ipv4 Id Original src Original dst Reply src Reply dst Protocol State Timeout Mark Zone ---------- ----------------- ------------------- ------------------- -------------------- ---------- ----------- --------- ------ ------ 2589405901 192.0.2.14:37122 34.206.168.146:123 34.206.168.146:123 192.168.122.14:37122 udp 99 0 931438034 192.168.122.14:22 192.168.122.1:56010 192.168.122.1:56010 192.168.122.14:22 tcp ESTABLISHED 431999 0 4269448361 192.0.2.14:43882 34.117.118.44:80 34.117.118.44:80 192.168.122.14:43882 tcp TIME_WAIT 116 0 821718377 192.0.2.14:36208 1.1.1.1:53 1.1.1.1:53 192.168.122.14:36208 udp n/a 0 vyos@r4:~$ vyos@r4:~$
In T6136#180149, @n.fort wrote:And a simple note for your usage @wenzk
Change
set firewall ipv4 name WAN_IN rule 30 icmp
to this:
set firewall ipv4 name WAN_IN rule 30 protocol icmp