Page MenuHomeVyOS Platform
Feed Advanced Search

Jan 19 2024

carl.byington added a comment to T3522: policy based routing not working.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Jan 19 2024, 11:56 PM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project

May 17 2021

carl.byington added a comment to T3522: policy based routing not working.

I just tried that and it fails. We get

May 17 2021, 3:54 PM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project

May 7 2021

carl.byington added a comment to T3522: policy based routing not working.

PBR works if we change the static route to:

May 7 2021, 3:08 PM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project

May 6 2021

carl.byington added a comment to T3522: policy based routing not working.

I have not built vyos since 2018, so my last production version was 201803051831.

May 6 2021, 11:52 PM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project
carl.byington created T3522: policy based routing not working.
May 6 2021, 1:50 AM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project

Apr 15 2021

carl.byington created T3477: inconsistent documentation show ipv6 bgp.
Apr 15 2021, 4:15 PM · Restricted Project
carl.byington added a comment to T3376: Setting ipv6 address autoconf causes all interfaces besides the target to lose their IP.

ipv6 address autoconf works here. It does pick up a v6 address from the RA - I had an error in the config on the router issuing the RA announcements, and thought that autoconf was not working, but it does. Perhaps this issue should be closed?

Apr 15 2021, 4:05 PM · VyOS 1.4 Sagitta

Apr 9 2021

carl.byington added a comment to T3376: Setting ipv6 address autoconf causes all interfaces besides the target to lose their IP.

I cannot reproduce this on VyOS 1.4-rolling-202104062128. Instead, on that version, ipv6 address autoconf commits, but the interface never picks up a v6 address.

Apr 9 2021, 4:54 PM · VyOS 1.4 Sagitta

Apr 8 2021

carl.byington closed T3462: show ipv6 bgp -- missing as Resolved.

Oops, I did not see that. Thanks.

Apr 8 2021, 6:08 PM · VyOS 1.4 Sagitta
carl.byington added a comment to T3463: Prevent IPv4 Route exchange with IPv6 neighbors.

I modified bgp.frr.tmpl, but systemctl restart vyos-configd did not seem to do anything. Rebooting the router produces the correct config:

Apr 8 2021, 6:05 PM · VyOS 1.4 Sagitta

Apr 7 2021

carl.byington created T3463: Prevent IPv4 Route exchange with IPv6 neighbors.
Apr 7 2021, 10:04 PM · VyOS 1.4 Sagitta
carl.byington created T3462: show ipv6 bgp -- missing.
Apr 7 2021, 9:21 PM · VyOS 1.4 Sagitta
carl.byington created T3460: bgp, Configuration FRR failed while commiting code.
Apr 7 2021, 7:21 PM · VyOS 1.4 Sagitta

May 2 2018

carl.byington added a comment to T612: building all including kernel 4.14 from source.

From a 1.2 build last night:

May 2 2018, 3:16 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)

May 1 2018

carl.byington added a comment to T612: building all including kernel 4.14 from source.

There is a vyos-open-vm-tools git repo. The 'make iso' installs that package. In the process of building the iso (Setting up open-vm-tools-dkms) it tries to rebuild a kernel module. If we don't rebuild that there are two issues:

May 1 2018, 5:05 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
carl.byington added a project to T612: building all including kernel 4.14 from source: VyOS 1.2 Crux.
May 1 2018, 12:35 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
carl.byington created T612: building all including kernel 4.14 from source.
May 1 2018, 12:32 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)

Dec 5 2017

carl.byington created T490: policy route path-MTU clamping.
Dec 5 2017, 1:43 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc4)

Dec 4 2017

carl.byington added a comment to T455: Add haveged package.

trivial patch

attached. I am running 1.2.0 "current" with this.

Dec 4 2017, 11:04 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc4)

Dec 1 2017

carl.byington created T483: Add google-authenticator 2fa .
Dec 1 2017, 7:12 PM · VyOS 1.4 Sagitta

Nov 30 2017

carl.byington added a project to T481: traffic-policy limiter is broken: VyOS 1.2 Crux.
Nov 30 2017, 12:45 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)

Nov 29 2017

carl.byington created T481: traffic-policy limiter is broken.
Nov 29 2017, 9:22 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
carl.byington added a comment to T296: Enabling NetFlow fails, iptables chain VYATTA_CT_PREROUTING_HOOK unknown.

Ah, I missed the -t raw. I thought maybe the ULOG target needs uacctd running first on netlink group 2, so I started it:

Nov 29 2017, 7:49 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)

Nov 28 2017

carl.byington added a comment to T296: Enabling NetFlow fails, iptables chain VYATTA_CT_PREROUTING_HOOK unknown.

No, ULOG is there:

Nov 28 2017, 2:36 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
carl.byington added a comment to T454: flow-accounting broken.

duplicate of T296, this one can be deleted.

Nov 28 2017, 2:32 AM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
carl.byington added a comment to T473: missing source packages, git submodule init.

I was not able to create a patch for vyos-build since I am missing something in my understanding of submodules. There should be some way to generate a git patch that adds submodules. But this works:

Nov 28 2017, 12:06 AM

Nov 22 2017

carl.byington added a comment to T463: Nightly builds on jessie64 host hang at cloning the git repo.

The nightly builds started working again on the 16th, so this task should be moved to 'finished'.

Nov 22 2017, 6:18 PM · Infrastructure
carl.byington added a comment to T452: WiFi: Enable support for 5GHz AccesPoints with DFS.

I have a script that builds all (well, almost all) the vyos packages from source, including the kernel, and then builds an iso with those rebuilt packages.

Nov 22 2017, 6:07 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
carl.byington created T473: missing source packages, git submodule init.
Nov 22 2017, 5:36 PM

Nov 21 2017

carl.byington added a comment to T453: Qos/Match.pm shaper max-length.

patch attached{F27881}

Nov 21 2017, 11:57 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
carl.byington created T470: vyatta-op branch current, fails to build from source.
Nov 21 2017, 5:35 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)

Nov 14 2017

carl.byington updated the answer details for Q103: Is there a comprehensive list of all VyOS commands? (Answer 156).
Nov 14 2017, 1:25 AM
carl.byington added Q103: Is there a comprehensive list of all VyOS commands? (Answer 156).
Nov 14 2017, 12:37 AM

Nov 13 2017

carl.byington created T454: flow-accounting broken.
Nov 13 2017, 8:05 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)
carl.byington added a comment to T421: Add Pv6 prefix delegation support.

I don't have a setup to test this, but it seems that if it works at all for outgoing connections, it should also work for incoming connections. Suppose you have been assigned external::1111/64 as your ipv6 address, and you have an internal network running on internal::/64, with nptv6 converting from internal::/64 to external::/64. Now a machine on internal::1234 will appear to be external::1234, and your router will send the outgoing packets to the external gateway. But when the response packets come back, the ISP will need to do neighbor discovery to find your external::1234. If that works at all, it should also work for incoming connections.

Nov 13 2017, 7:50 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
carl.byington created T453: Qos/Match.pm shaper max-length.
Nov 13 2017, 7:06 PM · VyOS-1.2.0-GA, VyOS 1.2 Crux (VyOS 1.2.0-rc1)

Nov 9 2017

carl.byington added a comment to T421: Add Pv6 prefix delegation support.

Does "set nat nptv6" not work for you? You can configure your inside interface with a private /64 block, then prefix translate that to the /64 obtained set nat nptv6 rule 10 inside-prefix

Nov 9 2017, 8:22 PM · VyOS 1.3 Equuleus (1.3.0-epa1)

Dec 17 2016

carl.byington created T214: replicate jessie build from source.
Dec 17 2016, 1:15 AM · Invalid

Dec 10 2016

carl.byington created T206: no daily builds since Dec 1st.
Dec 10 2016, 4:02 AM · Rejected