From my testing, all traffic that originates from an interface attached to a VRF, will show the source interface as the VRF master interface, regardless of the zone attached to that interface. This will make it difficult to segment traffic between interfaces attached to the same VRF. For example:
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed Advanced Search
Advanced Search
Advanced Search
Jun 14 2023
Jun 14 2023
Coopercentral added a comment to T2251: VRF communication breaks when utilizing zone-based firewalling.
Jun 14 2023, 12:14 PM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project, VyOS 1.3 Equuleus (1.3.7)
Feb 25 2023
Feb 25 2023
Coopercentral added a comment to T4943: Radius SSH login displays "permission denied" on 1.4 rolling release.
Hello - I upgraded to the latest rolling release (1.4-rolling-202302250317), and it appears to be working. I am able to login with a radius account successfully. Thank you for your efforts! I see in you PR's above, the second link is to change the shell from "bash" to "vbash". It appears once I login with a radius privileged account, the shell continues to default to "bash":
Jan 19 2023
Jan 19 2023
Apr 8 2020
Apr 8 2020