Page MenuHomeVyOS Platform

Disabling openvpn interface(s) causes OSPF to fail to load on reboot
Closed, ResolvedPublicBUG

Description

This was identified in T6076, and is show here in a lab to make things easier to see. This is however not a migration issue, being reproducible using only 1.4.0-epa2. It may be that the issue affects other interface types and other routing protocols.

Starting with an openvpn interface with ospf:-

set interfaces ethernet eth0 hw-id 'xx:xx:xx:xx:xx:48'
set interfaces ethernet eth0 vif 20 address 'xxx.xxx.42.173/28'
set interfaces loopback lo
set interfaces openvpn vtun1 encryption cipher 'aes256'
set interfaces openvpn vtun1 hash 'sha256'
set interfaces openvpn vtun1 local-address xxx.xxx.67.146 subnet-mask 'xxx.xxx.255.252'
set interfaces openvpn vtun1 mode 'site-to-site'
set interfaces openvpn vtun1 remote-address 'xxx.xxx.67.145'
set interfaces openvpn vtun1 remote-host 'xxx.xxx.99.55'
set interfaces openvpn vtun1 shared-secret-key 'openvpn_vtun1_shared'
set pki openvpn shared-secret xxxxxx key xxxxxx
set pki openvpn shared-secret xxxxxx version '1'
set protocols ospf area 0 area-type normal
set protocols ospf area 0 network 'xxx.xxx.67.144/30'
set protocols ospf interface vtun1 cost '20'
set protocols ospf interface vtun1 dead-interval '4'
set protocols ospf interface vtun1 hello-interval '1'
set protocols ospf interface vtun1 network 'point-to-point'
set protocols ospf interface vtun1 priority '1'
set protocols ospf interface vtun1 retransmit-interval '5'
set protocols ospf interface vtun1 transmit-delay '1'
set protocols static route xxx.xxx.0.0/0 next-hop xxx.xxx.42.170 distance '130'
set service ssh
set system config-management commit-revisions '100'
set system console device ttyS0 speed '115200'
set system host-name xxxxxx
set system login banner post-login ''
set system login banner pre-login ''
set system login user xxxxxx authentication encrypted-password xxxxxx
set system login user xxxxxx authentication plaintext-password xxxxxx
set system syslog global facility all level 'info'
set system syslog global facility local7 level 'debug'

Rebooting the router works properly.

If one then does:-

set interfaces openvpn vtun1 disable

and saves and reboots, the router reports that the config has not loaded properly and the whole "protocols ospf" section is missing. On a larger config, all of the ospf section is missing, not just the bits relating to vtun1.

A full session showing this:-
{F4238518}

Details

Difficulty level
Unknown (require assessment)
Version
1.4.0-epa2
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Unspecified (please specify)