Command to restart when ssh running on default vrf:
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Jun 20 2024
Jun 20 2024
dmbaturin edited projects for T5627: Multicast - PIM prune state timers expire with time longer to remove a mroute, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
Jun 20 2024, 10:18 AM · Restricted Project, VyOS 1.4 Sagitta (1.4.0), VyOS 1.5 Circinus, VyOS Rolling
dmbaturin edited projects for T5790: ISIS invalid format of hello packet when interface mtu is between 1501 and 1535, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T5725: protocol IS-IS configuration is empty if a tunnel does not have remote address, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T5881: IPv6 addresses jumbled in flow accounting, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T5926: IPSEC does not apply after l2tp configuration was changed, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T5908: Unable to reach WAN-IP from LAN with dhcp-interface, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
Jun 20 2024, 10:18 AM · Restricted Project, VyOS 1.5 Circinus, VyOS Rolling, VyOS 1.3 Equuleus (1.3.9)
dmbaturin edited projects for T5990: Intel 25G E810 kernel ice driver does not work with LLDP, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
Jun 20 2024, 10:18 AM · Restricted Project, VyOS Rolling, VyOS 1.5 Circinus, VyOS 1.3 Equuleus (1.3.9)
dmbaturin edited projects for T6025: smoketest: bonding: test fails every once in a while, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T6117: Bug in cloud-init when MTU in network_data.json is set to 'null', added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T6108: VTYSH - Slowdown, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T6027: Bug deleting route-map rule with community list, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T1185: Firewall rulesets are ignored in RFC-compliant VRRP setups, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T1790: OSPF Exchanged Routes marked as invalid when run through a GRE PTMP/PTP OSPF between peers , added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T6157: Can not create two GRE tunnels to the same DST but from different SRC addresses, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T2145: openvpn: server default topology net30 is incompatible with static client IPs for Windows clients, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T1869: Install and Boot from RAID Doesn't Work, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T2003: BGP FQDN capability has improper hostname after new image install, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T2505: XCP-ng packet drops for small packets (e.g. icmp) under Xen and AWS, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T2207: IPv6 route install failed, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T2287: LLDP not working on X710 adapter, i40e driver, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T2616: BFD Configuration causes flapping, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T2567: accel-ppp eats all memory with a small sstp config, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T3204: Performance system option destroy defined sysctl custom params, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T2881: Bug in weight calculation for failover mode, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T2762: VRF: when SSHd is VRF bound all commands are executed in VRF context, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T4280: dhcp-relay: does not work with wireguard uplink, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T3393: IPoE does not assign IPv6 PD or WAN address, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T4452: WAN load-balancing exclude rules break PBR, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T4281: System users migration can lead to inaccessible shell, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T4600: Closing IPV6CP by client closes PPPoE link completely, even if IPv6 is optional, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T4520: Incorrect addresses returned with interaction of static /etc/hosts with DNS64, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T4816: IPv4-mapped and IPv4-compatible IPv6 addresses not valid anymore, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
dmbaturin edited projects for T4853: OpenVPN: unable to commit changes when the interface is down/unknown state, added: VyOS 1.3 Equuleus (1.3.9); removed VyOS 1.3 Equuleus (1.3.8).
GitHub <[email protected]> committed rVYOSONEX1fc32e342dc0: openconnect: T6500: add support for multiple ca-certificates (#3691) (authored by mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>).
GitHub <[email protected]> committed rVYOSONEX306147cba5f8: Merge pull request #3690 from vyos/mergify/bp/sagitta-stream/pr-3682 (authored by dmbaturin).
GitHub <[email protected]> committed rVYOSONEX1ee62b2c951a: Merge pull request #3687 from vyos/mergify/bp/sagitta-stream/pr-3685 (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEXd47ccbb2e0fe: openconnect: T6500: add support for multiple ca-certificates (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX94f30fece75a: openconnect: T6500: add support for multiple ca-certificates (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX27c4b2d4a35e: openconnect: T6500: add support for multiple ca-certificates (authored by c-po).
GitHub <[email protected]> committed rVYOSONEX9eb1e9bb2b18: Merge pull request #3682 from c-po/T6500-openconnect-multi-ca (authored by c-po).
Jun 19 2024
Jun 19 2024
GitHub <[email protected]> committed rVYOSONEX59db78630176: Merge pull request #3688 from vyos/mergify/bp/circinus-stream/pr-3685 (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX53e628e9b2c9: macsec: T5447: fix error message syntax - there is no tx and rx key, only key (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX8d913f29f52b: macsec: T5447: fix error message syntax - there is no tx and rx key, only key (authored by c-po).
Mergify <37929162+mergify[bot]@users.noreply.github.com> committed rVYOSONEX0ef709dc082c: macsec: T5447: fix error message syntax - there is no tx and rx key, only key (authored by c-po).
GitHub <[email protected]> committed rVYOSONEX608ee44be6c6: Merge pull request #3685 from c-po/macsec-error-message (authored by c-po).
Tentative first-shot code change here:
Works fine:
set load-balancing reverse-proxy backend bk01 server srv01 address '192.168.122.16' set load-balancing reverse-proxy backend bk01 server srv01 port '22' set load-balancing reverse-proxy service ssh backend 'bk01' set load-balancing reverse-proxy service ssh mode 'tcp' set load-balancing reverse-proxy service ssh port '22' set service ssh disable-host-validation set service ssh port '2222'
c-po moved T6500: openconnect: add support for new multi ca-certificate CLI node from Open to Finished on the VyOS 1.5 Circinus board.
c-po changed the status of T6500: openconnect: add support for new multi ca-certificate CLI node from Open to In progress.
The WPA-EAP for wireless station mode is feature is implemented in T6496.
a.apostoliuk added a comment to T6148: Reset vpn ipsec command breaks tunnel and does not reset SAs that are down.
After deep testing, we saw that if we reset the peer on the initiator side, strongswan does not reinitiate the connection by itself.
Need to add a connection initiation in the reset function on the initiator side.
a.apostoliuk changed the status of T6148: Reset vpn ipsec command breaks tunnel and does not reset SAs that are down from Open to In progress.
a.apostoliuk edited projects for T6148: Reset vpn ipsec command breaks tunnel and does not reset SAs that are down, added: VyOS 1.4 Sagitta (1.4.1); removed VyOS 1.4 Sagitta.
a.apostoliuk moved T6148: Reset vpn ipsec command breaks tunnel and does not reset SAs that are down from In Progress to Open on the VyOS 1.4 Sagitta board.
a.apostoliuk moved T6148: Reset vpn ipsec command breaks tunnel and does not reset SAs that are down from Finished to In Progress on the VyOS 1.4 Sagitta board.
n.fort changed the status of T6488: Firewall op mode output incomplete from Confirmed to In progress.
Viacheslav triaged T6502: Load balancer reverse proxy does not allow forwarding SSH port as Normal priority.
GitHub <[email protected]> committed rVYOSONEX47634378a00c: Merge pull request #3680 from sever-sever/T6497 (authored by c-po).
natali-rs1985 changed the status of T5710: PPPoE-server add option permit any-login from Open to In progress.
Viacheslav changed the status of T6497: CGNAT conntrack connections should be deleted if address or port range is changed, a subtask of T5169: Add CGNAT Carrier-Grade NAT based on nftables, from Open to In progress.
Viacheslav changed the status of T6497: CGNAT conntrack connections should be deleted if address or port range is changed from Open to In progress.
c-po changed the status of T6489: Add/Improve support for CLI config scripts that change the underlayin actual configuration and make them work with vyos-configd from In progress to Needs testing.
Viacheslav triaged T6500: openconnect: add support for new multi ca-certificate CLI node as Normal priority.
Jun 18 2024
Jun 18 2024
@zsdc @fernando @a.apostoliuk we need retest this
Suspend/Resume is not supported operation
Note for myself:
Logs from VM:
I've modified the protocol ospf settings to check if it will affect static routing or not.
The static routing are not affected (still no route to 0.0.0.0/0):
Hi!
Recently I've note that this bug is not affects only protocol failover, but also protocol static routers.
GitHub <[email protected]> committed rVYOSONEXda5d29aa8366: Merge pull request #3678 from natali-rs1985/T6492-current (authored by c-po).
c-po moved T6425: WiFi: Beamformer support for 802.11ac (VHT at 5GHz) is broken from Open to Finished on the VyOS 1.5 Circinus board.
c-po edited projects for T6425: WiFi: Beamformer support for 802.11ac (VHT at 5GHz) is broken, added: VyOS 1.4 Sagitta (1.4.1); removed VyOS 1.4 Sagitta (1.4.0-GA).
c-po committed rVYOSONEX578fbe0eb436: wireless: T6425: Add smoketests for VHT beamforming (authored by alainlamar).
c-po committed rVYOSONEXf75f0f9c9447: wireless: T6425: Fix broken VHT beamforming (authored by alainlamar).