@mersl thanks for confirm.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
May 29 2024
May 29 2024
fernando added a comment to T6332: IPv6-only ISIS (or, in general, dual topology) is not working with other devices running frr.
mersl added a comment to T6332: IPv6-only ISIS (or, in general, dual topology) is not working with other devices running frr.
just some show commands with test results on my lab
mersl added a comment to T6332: IPv6-only ISIS (or, in general, dual topology) is not working with other devices running frr.
very cool! I just rebuild a 1.5-rolling and upgraded my lab router and voila - works as expected ;-)
fernando added a comment to T6332: IPv6-only ISIS (or, in general, dual topology) is not working with other devices running frr.
we've added this ability to configure the topology on isis :
fernando changed the subtype of T6332: IPv6-only ISIS (or, in general, dual topology) is not working with other devices running frr from "Bug" to "Feature Request".
fernando changed the status of T6332: IPv6-only ISIS (or, in general, dual topology) is not working with other devices running frr from Open to Needs testing.
Are you sure your DHCP server honors the no-default-route option?
I may be wrong, but I think the no-default-route just sets an option in the DHCP request, asking the DHCP server to not send back the default route.
I have the same issue with my ISP, and they told me they will always send a default route via DHCP.
I have solved the issue using DHCP hooks.
Unknown Object (User) added a comment to T6181: A feature for checking popular ports..
We will bind the code to a new command in operating mode (for example show ports). This will allow you to use the nmap command from operating mode. Just a convenient feature.
May 28 2024
May 28 2024
jestabro moved T6404: Include constraintGroup element in reference tree from Open to Finished on the VyOS 1.5 Circinus board.
Just dont, please see my comment fro april 2024.
Unknown Object (User) added a comment to T6181: A feature for checking popular ports..
@sever what about it?
May 27 2024
May 27 2024
tested new cli structure, it combine the new mach-group and old syntax :
dmbaturin edited projects for T6402: Invalid variables referenced in reverse proxy validation, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta (1.4.0).
May 26 2024
May 26 2024
alainlamar changed the status of T6320: WiFi: Enable support for 6GHz AccesPoints from Open to Needs testing.
c-po closed T6377: PermissionError on /config/auth/letsencrypt/live/ when running show pki as Resolved.
c-po moved T6377: PermissionError on /config/auth/letsencrypt/live/ when running show pki from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
c-po moved T6400: pki: unable to generate fingerprint for ACME issued certificates from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
This is actually a "wrong" error, or a real error with a wrong fix.
May 25 2024
May 25 2024
c-po moved T6377: PermissionError on /config/auth/letsencrypt/live/ when running show pki from Open to Finished on the VyOS 1.5 Circinus board.
c-po moved T6400: pki: unable to generate fingerprint for ACME issued certificates from Open to Finished on the VyOS 1.5 Circinus board.
c-po changed the status of T6400: pki: unable to generate fingerprint for ACME issued certificates from Open to In progress.
c-po changed the status of T6377: PermissionError on /config/auth/letsencrypt/live/ when running show pki from Open to In progress.
c-po added a comment to T6377: PermissionError on /config/auth/letsencrypt/live/ when running show pki.
cpo@LR5.wue4:~$ show configuration commands | match pki set pki ca STAGING-PEM certificate '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' set pki certificate vyos acme domain-name 'lr5.wue4.mybll.net' set pki certificate vyos acme email 'vyos@vyos.net' set pki certificate vyos acme url 'https://acme-staging-v02.api.letsencrypt.org/directory'
talmakion added a comment to T6157: Can not create two GRE tunnels to the same DST but from different SRC addresses.
As far as I can tell the test will always error if the remote matches and neither source-interface and source-address are configured differently, including the case where they're both blank (source-interface == None on both tunnels triggers this particular case).
c-po moved T6345: Source NAT Port Mapping setting of Fully-Random is superfluous in Kernels 5.0 onwards from Open to 1.4.0-GA on the VyOS 1.4 Sagitta board.
May 24 2024
May 24 2024
talmakion added a comment to T5049: Configure GRE over IPsec tunnel when source port is in VRF, OSPF causes GRE tunnel broken..
I've just been picking at this one tonight because it's close to some areas of interest (DMVPNs in VRFs), so hopefully this input is useful and appropriate:
Viacheslav moved T6391: load-balancing reverse-proxy: typo in timeout help from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
May 23 2024
May 23 2024
c-po moved T6293: add Mediatek MT7921 to defconfig from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
c-po moved T6293: add Mediatek MT7921 to defconfig from In Progress to Finished on the VyOS 1.5 Circinus board.
HollyGurza moved T4576: vpn l2tp logging level configuration from Open to In Progress on the VyOS 1.5 Circinus board.
HollyGurza changed the status of T4576: vpn l2tp logging level configuration from Open to In progress.
May 22 2024
May 22 2024
c-po added a comment to T6365: Negating interface names in NAT configuration causes invalid warnings.
Same issue applies to NAT66, too
c-po added a comment to T6365: Negating interface names in NAT configuration causes invalid warnings.
c-po changed the status of T6365: Negating interface names in NAT configuration causes invalid warnings from Open to In progress.
jestabro closed T5940: [1.3.5 -> 1.4.0-RC1 Migration] commit-archive Fails to Migrate, a subtask of T5938: Migration fail root task for 1.4-rc, as Resolved.
Viacheslav moved T6384: rollback-soft should tell the user to compare and commit from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
In T3493#189273, @Viacheslav wrote:Does 1.5 has the same bug?
Viacheslav edited projects for T6373: QoS Policy Limiter - classes for marked traffic do not work, added: VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta.
Viacheslav moved T3493: DHCPv6 does not have prefix range validation from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
Does 1.5 has the same bug?
Viacheslav triaged T6379: "generate openvpn" uses "comp-lzo no", which leads to problems on Android-Clients as Normal priority.
PR merged: https://github.com/vyos/vyos-1x/pull/3499/
May 21 2024
May 21 2024
PR merged into vyos-utils:
https://github.com/vyos/vyos-utils/pull/20
and backported. The fix has been tested with migration from 1.3.x with settings as suggested by @trae32566
jestabro updated subscribers of T5940: [1.3.5 -> 1.4.0-RC1 Migration] commit-archive Fails to Migrate.
The argument would be to relax the url validator regex for compatibility with 1.3: since the plan is to replace this mechanism in 1.5 with something similar to @trae32566 suggestion above (brought up for discussion by @Viacheslav recently), and since it is deprecated/not advised anyway (RFC 3986). The simple change will be made to the validator.
HollyGurza moved T5307: QoS - traffic-class-map services from Open to In Progress on the VyOS 1.5 Circinus board.
HollyGurza moved T5307: QoS - traffic-class-map services from Need Triage to In Progress on the VyOS 1.4 Sagitta (1.4.0-GA) board.
HollyGurza moved T6225: Unhandled exception when configuring random-detect QoS policy from Need Triage to Finished on the VyOS 1.4 Sagitta (1.4.0-GA) board.
May 20 2024
May 20 2024
c-po moved T6367: op-mode: commit-archive: TypeError: attribute name must be string, not 'NoneType' from Open to Finished on the VyOS 1.5 Circinus board.
jestabro changed the status of T6076: [1.3.3->1.4.0-epa1 Migration] Most of config missing from Needs testing to Needs reporter action.
@jestabro could it be that the validator needs an update to allow special characters in the user/password field?
https://github.com/vyos/vyos-utils/blob/0d57cc9a266fe8d6fc87df5a769f42b4a45c7221/src/url.ml
It seems to work basically
Can you manually edit the node and re-check if it will work for acme
sudo nano -c /opt/vyatta/share/vyatta-cfg/templates/pki/certificate/node.tag/acme/listen-address/node.def
replace:
type: txt
help: Local IPv4 addresses to listen on
val_help: ipv4; IPv4 address to listen for incoming connections
allowed: sh -c "${vyos_completion_dir}/list_local_ips.sh --ipv4"
syntax:expression: exec "${vyos_libexec_dir}/validate-value --exec \"${vyos_validators_dir}/ipv4-address \" --value \'$VAR(@)\'"; "Invalid value"to
type: txt help: Local IPv4 addresses to listen on val_help: ipv4; IPv4 address to listen for incoming connections
May 19 2024
May 19 2024
@Giggum sure, much appreciated