I propose to add resource group, this way we can use not only groups for firewall but and logins
set resource group set resource local-users username user1 password user1 set resource radius server 192.0.2.1 key vyos-secret
As an idea, the CLI needs to be discussed.
Smoketest fails
DEBUG - Running Testcase: /usr/libexec/vyos/tests/smoke/cli/test_interfaces_pppoe.py DEBUG - test_pppoe_authentication (__main__.PPPoEInterfaceTest.test_pppoe_authentication) ... ok DEBUG - test_pppoe_client (__main__.PPPoEInterfaceTest.test_pppoe_client) ... FAIL DEBUG - test_pppoe_client_disabled_interface (__main__.PPPoEInterfaceTest.test_pppoe_client_disabled_interface) ... ok DEBUG - test_pppoe_dhcpv6pd (__main__.PPPoEInterfaceTest.test_pppoe_dhcpv6pd) ... ok DEBUG - test_pppoe_mtu_mru (__main__.PPPoEInterfaceTest.test_pppoe_mtu_mru) ... ok DEBUG - test_pppoe_options (__main__.PPPoEInterfaceTest.test_pppoe_options) ... ok DEBUG - DEBUG - ====================================================================== DEBUG - FAIL: test_pppoe_client (__main__.PPPoEInterfaceTest.test_pppoe_client) DEBUG - ---------------------------------------------------------------------- DEBUG - Traceback (most recent call last): DEBUG - File "/usr/libexec/vyos/tests/smoke/cli/test_interfaces_pppoe.py", line 179, in test_pppoe_client DEBUG - self.assertTrue(any(iface == interface for (iface, _) in tmp)) DEBUG - AssertionError: False is not true DEBUG - DEBUG - ---------------------------------------------------------------------- DEBUG - Ran 6 tests in 77.628s
log
Oct 07 12:36:52 r14 staticd[2000]: [PNYPZ-BCP8Y] Static Route using pppoe20 interface not installed because the interface does not exist in specified vrf
@immtelecom, thanks for confirming and bug report.
Reverts due to the bug T7904
PR https://github.com/vyos/vyos-1x/pull/4776
For the circinus works as expected
vyos@r14:~$ show version Version: VyOS 1.5-stream-202510060458 Release train: circinus Release flavor: generic
Working on the latest rolling (checked VyOS 2025.10.05-0020-rolling)
VyOS config:
set container name radius allow-host-networks set container name radius image 'dchidell/radius-web' set container name radius volume accel destination '/usr/share/freeradius/dictionary.accel' set container name radius volume accel source '/usr/share/accel-ppp/radius/dictionary.accel' set container name radius volume clients destination '/etc/raddb/clients.conf' set container name radius volume clients source '/config/containers/radius/clients' set container name radius volume dictionary destination '/usr/share/freeradius/dictionary' set container name radius volume dictionary source '/config/containers/radius/dictionary' set container name radius volume users destination '/etc/raddb/users' set container name radius volume users source '/config/containers/radius/users' set service pppoe-server access-concentrator 'ACN' set service pppoe-server authentication mode 'radius' set service pppoe-server authentication radius server 192.168.122.14 key 'vyos-secret' set service pppoe-server client-ip-pool FIRST range '100.64.0.0/18' set service pppoe-server client-ipv6-pool IPv6-POOL delegate 2001:db8:8003::/48 delegation-prefix '56' set service pppoe-server client-ipv6-pool IPv6-POOL prefix 2001:db8:8002::/48 mask '64' set service pppoe-server default-ipv6-pool 'IPv6-POOL' set service pppoe-server default-pool 'FIRST' set service pppoe-server gateway-address '100.64.0.1' set service pppoe-server interface eth1 combined set service pppoe-server interface eth1.23 set service pppoe-server log level '5' set service pppoe-server name-server '1.1.1.1' set service pppoe-server name-server '1.0.0.1' set service pppoe-server ppp-options disable-ccp set service pppoe-server ppp-options ipv6 'allow' set service pppoe-server session-control 'disable'
RADIUS users
client-1 Cleartext-Password := "client-1"
Service-Type = Framed-User,
Accel-VRF-Name = "red",
Framed-IP-Address = 10.0.0.11,
Stateful-IPv6-Address-Pool = "IPv6-POOL",
Delegated-IPv6-Prefix-Pool = "IPv6-POOL",
Framed-Route = "100.64.0.11/32 10.0.0.11 1",
Framed-Protocol = PPPOther nodes the config is similar, but without NAT Show neighbors:
vyos@n1:~$ show ip ospf neighbor
Does it show something after the upgrade?
sudo cat /sys/class/dmi/id/product_uuid
Do timers not allow you to configure what you want without profiles?
@Giggum Thanks, missed this.
At least there should be a proper Error message.
Note, replacing
# def enable(log=True): def enable(log=False):
https://github.com/vyos/vyos-1x/blob/5248f1cebd4ac9cd8bebb62aa08ecc042a082f30/python/vyos/airbag.py#L26
Seems fixes the issue
In most cases, it could be reproduced by setting num-rx-queues :
vyos@r14# set vpp settings interface eth1 driver xdp [edit] vyos@r14# commit [edit] vyos@r14# set vpp settings interface eth1 xdp-options num-rx-queues Possible completions: <1-65535> Number of receive queues to connect to all All (default)