User Details
- User Since
- Jun 7 2020, 11:36 AM (201 w, 5 d)
Oct 26 2020
Oct 22 2020
Tested creation on both server and client.
OpenVPN conf file is contains the key-direction
Server and client can connect correctly.
Oct 21 2020
Also, while setting up test for T2906:
No problem
I can see why the smoketests pass. They only check if the interface has been removed from the config - not the system.
Oct 19 2020
No, I'm running this commit:
https://github.com/vyos/vyos-1x/commit/029f9839c21317ec5959b331eee25da472d08dc1
I spoke to soon.
The interfaces are very persistant now - when you delete the vtun interface it doesn't get taken down!
Tested in my lab and it works both during creation and reboot.
Oct 18 2020
Well spotted - i hadn't seen that option before.
I'll give it a go and see how it runs.
I know, that my specific problem is related to OpenVPN, but are you saying, that this is only relevant for OpenVPN and it's not going to impact other interfaces?
Oct 14 2020
interfaces {
ethernet eth2 {
address 10.201.1.2/30
description WAN
hw-id 0c:6b:af:b0:4f:02
}
openvpn vtun11 {
description "CPE MGMT"
device-type tun
encryption {
cipher aes256
}
hash sha1
mode client
persistent-tunnel
protocol udp
remote-host 10.200.200.11
remote-port 1194
tls {
auth-file /config/auth/shared.key
ca-cert-file /config/auth/ca.crt
cert-file /config/auth/cpe1-1.crt
key-file /config/auth/cpe1-1.key
}
vrf CPE-MGMT
}
}
protocols {
static {
route 0.0.0.0/0 {
next-hop 10.201.1.1 {
}
}
}
}
vrf {
name CPE-MGMT {
description "CPE MGMT"
table 112
}
}Oct 13 2020
This bug seems to be worse than I thought.
Here's an example:
On reboot an openvpn client inteface will come up outside the vrf. Any routes that get pushed by the server will not get added to the client because it's wants to add the routes inside the vrf of the vtun interface - but the vtun isn't a member.
Heres a log snippet:
You're right, if-up.d scripts only get run for the interfaces defined in /etc/network/interfaces.
Oct 7 2020
Oct 6 2020
Oct 5 2020
Oct 3 2020
Fix in PR: https://github.com/vyos/vyos-1x/pull/561
Sep 20 2020
First create a vrf and bridge interface and add eth1 to the bridge:
PR for vyos-1x: https://github.com/vyos/vyos-1x/pull/547
PR for vyos-1x: https://github.com/vyos/vyos-1x/pull/548