With 1.4-rolling-202107202017 at the latest l2tp over ipsec works with swanctl.

This seems to work now.

This bug got fixed with https://phabricator.vyos.net/T3227

This bug got fixed with: https://phabricator.vyos.net/T3227

This works for me now (in 1.4-rolling-202101240218)

Tried this patch with @jack9603301 , it solves the problem for me.

it's an edit + delete/delete/delete ... no creation (at least in my edge case).

As it looks to me (but i'm not sure yet), the configuration system is fixing devices one by one and was trying to add port into new bridge before the old bridges were removed (and so ports were still in them). If this is the case ... not sure that there even exist an easy fix.

first delete original, commit, then new and final commit.

For some reason ... nothing in logs:

It works nicely with VXLANs ... no problems there. You can use it like this to get local port into vxlan (without this, vxlans become useless). I have problems with bond interface (everything else works). Debugging now.

Works for me nicely. Thanks.

All that's really needed is to somehow edit /usr/lib/systemd/system/ssh.service to change

I tried this today with 1.3-rolling-202004180117 ...

if you're using new enough version to use accel-ppp, then current config doesn't work as outside-next hop puts address in l2tp.config:

After some more playing with it ... it solves the problem reproducibly to have staticd=yes included and NOT have the null route anywhere.

It solved it for me yesterday. After some more playing today this now seems to be a frr bug.

to /etc/frr/daemons (+ restarting frr) seems to fix this.