Page MenuHomeVyOS Platform

Multiple push-route options cause error generating openvpn configuration
Closed, ResolvedPublicBUG


Using the follwowing:

[edit interfaces openvpn vtun0]
vyos@vyos# show server push-route 

Results in:

vyos@vyos# commit
[ interfaces openvpn vtun0 ]
Traceback (most recent call last):
  File "/usr/libexec/vyos/conf_mode/", line 905, in <module>
    c = get_config()
  File "/usr/libexec/vyos/conf_mode/", line 556, in get_config
    network = conf.return_value('server push-route')
  File "/usr/lib/python3/dist-packages/vyos/", line 269, in return_value
    raise VyOSError("Cannot use return_value on multi node: {0}".format(full_path))
vyos.config.VyOSError: Cannot use return_value on multi node: interfaces openvpn vtun0 server push-route

[[interfaces openvpn vtun0]] failed


Difficulty level
Unknown (require assessment)
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)

Event Timeline

c-po changed the task status from Open to In progress.Sep 4 2019, 7:20 AM
c-po claimed this task.
c-po triaged this task as High priority.
c-po added a comment.EditedSep 4 2019, 12:10 PM

@jdevincentis is this a custom build? Using VyOS 1.2-rolling-201909040337 I can not reproduce the issue with:

openvpn vtun10 {
    encryption aes256
    hash sha512
    local-port 1194
    mode server
    protocol udp
    server {
        client client1 {
        max-connections 250
        topology subnet
    tls {
        ca-cert-file /config/auth/ca.crt
        cert-file /config/auth/server.crt
        dh-file /config/auth/dh.pem
        key-file /config/auth/server.key
This comment was removed by jdevincentis.

Just noticed you used VyOS 1.2-rolling-201909040337, this is for 1.3 rolling.

c-po added a comment.Sep 4 2019, 12:35 PM

1.3 rolling is not recommended for users - its pre-alpha.

I'm aware, I'm testing it since 1.2 has an unresolvable bug (due to the age of the distribution it's built on) in the isc-dhcp-relay package.

I found this bug as part of testing 1.3

c-po added a comment.EditedSep 4 2019, 12:58 PM

This is actually a duplicate of T1617.

I cherry-picked the fixe to the equuleus branch. good luck

c-po closed this task as Resolved.Sep 4 2019, 2:39 PM
c-po moved this task from Need Triage to Finished on the VyOS 1.3 Equuleus board.Oct 13 2019, 3:05 PM