This should now work aswell with the latest vyos 1.3 versions!
Feed All Stories
Feb 26 2021
Feb 26 2021
pasik added a comment to T2516: vyos-container: cannot configure ethernet interface.
Viacheslav changed the status of T3323: Bgp ttl-security and ebgp-multihop fail, a subtask of T2174: Rewrite protocol BGP to new XML/Python style, from Open to Needs testing.
Viacheslav changed the status of T3323: Bgp ttl-security and ebgp-multihop fail from Open to Needs testing.
Viacheslav added a comment to T3324: Bgp space in the password.
c-po changed the status of T3359: static route table not working properly from Open to Needs testing.
Viacheslav added a comment to T3323: Bgp ttl-security and ebgp-multihop fail.
Unknown Object (User) added a comment to T1297: Add GARP settings to VRRP/keepalived.
Tested in the lab the following simple topology on 1.2.6-S1 and 1.3-beta, behavior the same and GARP works by default.
VyOS1 config
set high-availability vrrp group eth1 hello-source-address '100.64.0.1' set high-availability vrrp group eth1 interface 'eth1' set high-availability vrrp group eth1 peer-address '100.64.0.2' set high-availability vrrp group eth1 rfc3768-compatibility set high-availability vrrp group eth1 virtual-address '100.64.0.50/24' set high-availability vrrp group eth1 vrid '1' set interfaces ethernet eth0 address 'dhcp' set interfaces ethernet eth0 duplex 'auto' set interfaces ethernet eth0 hw-id '50:00:00:01:00:00' set interfaces ethernet eth0 speed 'auto' set interfaces ethernet eth1 address '100.64.0.1/24' set interfaces ethernet eth1 duplex 'auto' set interfaces ethernet eth1 hw-id '50:00:00:01:00:01' set interfaces ethernet eth1 speed 'auto'
VyOS2 config
set high-availability vrrp group eth1 hello-source-address '100.64.0.2' set high-availability vrrp group eth1 interface 'eth1' set high-availability vrrp group eth1 peer-address '100.64.0.1' set high-availability vrrp group eth1 virtual-address '100.64.0.50/24' set high-availability vrrp group eth1 vrid '1' set interfaces ethernet eth0 address 'dhcp' set interfaces ethernet eth0 duplex 'auto' set interfaces ethernet eth0 hw-id '50:00:00:02:00:00' set interfaces ethernet eth0 speed 'auto' set interfaces ethernet eth1 address '100.64.0.2/24' set interfaces ethernet eth1 duplex 'auto' set interfaces ethernet eth1 hw-id '50:00:00:02:00:01' set interfaces ethernet eth1 speed 'auto'
In traffic dump on VyOS3 we can see traffic when BACKUP node switched to MASTER state
14:02:34.152959 50:00:00:02:00:01 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 100.64.0.50 (ff:ff:ff:ff:ff:ff) tell 100.64.0.50, length 28 14:02:34.153042 50:00:00:02:00:01 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 100.64.0.50 (ff:ff:ff:ff:ff:ff) tell 100.64.0.50, length 28 14:02:34.153086 50:00:00:02:00:01 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 100.64.0.50 (ff:ff:ff:ff:ff:ff) tell 100.64.0.50, length 28 14:02:34.153090 50:00:00:02:00:01 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 100.64.0.50 (ff:ff:ff:ff:ff:ff) tell 100.64.0.50, length 28 14:02:34.153092 50:00:00:02:00:01 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Request who-has 100.64.0.50 (ff:ff:ff:ff:ff:ff) tell 100.64.0.50, length 28 14:02:34.153467 50:00:00:02:00:01 > 50:00:00:01:00:01, ethertype IPv4 (0x0800), length 54: 100.64.0.2 > 100.64.0.1: VRRPv2, Advertisement, vrid 1, prio 100, authtype none, intvl 1s, length 20 14:02:35.153544 50:00:00:02:00:01 > 50:00:00:01:00:01, ethertype IPv4 (0x0800), length 54: 100.64.0.2 > 100.64.0.1: VRRPv2, Advertisement, vrid 1, prio 100, authtype none, intvl 1s, length 20 14:02:36.154117 50:00:00:02:00:01 > 50:00:00:01:00:01, ethertype IPv4 (0x0800), length 54: 100.64.0.2 > 100.64.0.1: VRRPv2, Advertisement, vrid 1, prio 100, authtype none, intvl 1s, length 20 14:02:37.154233 50:00:00:02:00:01 > 50:00:00:01:00:01, ethertype IPv4 (0x0800), length 54: 100.64.0.2 > 100.64.0.1: VRRPv2, Advertisement, vrid 1, prio 100, authtype none, intvl 1s, length 20 14:02:38.154470 50:00:00:02:00:01 > 50:00:00:01:00:01, ethertype IPv4 (0x0800), length 54: 100.64.0.2 > 100.64.0.1: VRRPv2, Advertisement, vrid 1, prio 100, authtype none, intvl 1s, length 20
The same behavior with rfc3768-compatibility option.
I think we don't need to change behavior because it should be suitable for all cases.
dongjunbo renamed T3361: please delete this one from Error after upgraded vyos 1.2.6s to vyos1.2.7 epa1 to please delete this one.
Viacheslav added a comment to T3359: static route table not working properly .
Your rolling release so old. As I remember it was a bug with FRR, which was fixed.
Try more latest versions or vyos-1.3.0-rc1 https://community.vyos.net/get/snapshots/
Unknown Object (User) created T3360: Op command 'show interfaces' does not display VRRP VIP.
pasik added a comment to T3347: vyos 1.3 beta fails to configure Xen HVM guest ethernet interfaces due to ethtool -g error.
@c-po confirmed, works OK in vyos-1.3-beta-202102250443-amd64.iso. Thanks a lot!
Cheeze_It added a comment to T2100: BGP route adverisement wih checks rib.
Put in a PR for this, https://github.com/vyos/vyos-1x/pull/744
Feb 25 2021
Feb 25 2021
c-po added a comment to T3347: vyos 1.3 beta fails to configure Xen HVM guest ethernet interfaces due to ethtool -g error.
This should have been fixed in the latest 1.3 beta - please try again
pasik added a comment to T3347: vyos 1.3 beta fails to configure Xen HVM guest ethernet interfaces due to ethtool -g error.
It seems the same problem (lack of "ethtool -g" support) happens also with "veth" interfaces.. ref T2516
pasik added a comment to T2516: vyos-container: cannot configure ethernet interface.
I'm seeing the same problem with Xen HVM guests, where the paravirtualized nic-driver "xen_netfront" doesn't seem to support "ethtool -g".. ref T3347
erkin renamed T936: Reimplementation of tech-support diagnostic file generation from re-implementaion for 'show tech-support' to Reimplementaion of tech-support diagnostic file generation.
erkin changed the status of T936: Reimplementation of tech-support diagnostic file generation from Open to In progress.
erkin changed the status of T3354: Convert strip-private script from Perl to Python, a subtask of T3355: Remove all remaining legacy Vyatta code, from Open to In progress.
erkin changed the status of T3354: Convert strip-private script from Perl to Python from Open to In progress.
erkin changed the status of T3356: Script for remote file transfers, a subtask of T3355: Remove all remaining legacy Vyatta code, from Open to In progress.
erkin removed a subtask for T3355: Remove all remaining legacy Vyatta code: T2511: Migrate vyatta-op-quagga to new XML format.
erkin edited parent tasks for T2511: Migrate vyatta-op-quagga to new XML format, added: T2546: The root task for rewriting [op-mode] to XML; removed: T3355: Remove all remaining legacy Vyatta code.
erkin added a parent task for T2546: The root task for rewriting [op-mode] to XML: T3355: Remove all remaining legacy Vyatta code.
erkin added a parent task for T2459: Migrate vyatta-show-nat-rules.pl to Python: T3355: Remove all remaining legacy Vyatta code.
erkin added a parent task for T2511: Migrate vyatta-op-quagga to new XML format: T3355: Remove all remaining legacy Vyatta code.
erkin added a parent task for T3354: Convert strip-private script from Perl to Python: T3355: Remove all remaining legacy Vyatta code.
c-po added a parent task for T1579: Rewrite all interface types in new XML/Python style: T3355: Remove all remaining legacy Vyatta code.
Viacheslav added a project to T2061: protocol logs not sent to remote syslog: VyOS 1.2 Crux (VyOS 1.2.7).
Unknown Object (User) changed the status of T3353: PPPoE server wrong vlan-range generating config from Open to Confirmed.
Unknown Object (User) created T3353: PPPoE server wrong vlan-range generating config.
arvin closed T3352: Keepalived_vrrp: Unsafe permissions found for script ‘xxx.sh’ - disabling as Resolved.
Please ignore this task, it works fine!
arvin triaged T3352: Keepalived_vrrp: Unsafe permissions found for script ‘xxx.sh’ - disabling as High priority.
Feb 24 2021
Feb 24 2021
masterit added a comment to T2747: "enable-local-traffic" has no effect in load-balancing to redirect local traffic.
I can confirm this bug is still present in the latest 1.3-rolling-202101 snapshot as well as the latest stable release. (1.2.6-S1)
c-po added a comment to T3303: Change welcome message on boot.
Better not touch crux ;)
dmbaturin created 1.2.7-epa1.
craterman added a comment to T3211: ability to redistribute ISIS into other routing protocols.
ok, I'll do it
remfalc updated the task description for T3350: OpenVPN config file generation broken.
Viacheslav changed the status of T3211: ability to redistribute ISIS into other routing protocols from Open to Needs testing.
@craterman can you check this feature in the latest rolling or beta?
Viacheslav added a comment to T3211: ability to redistribute ISIS into other routing protocols.
PR for equuleus | extended smoketest
https://github.com/vyos/vyos-1x/pull/743
jack9603301 added a comment to T3116: Support back-end L4 level load balancing.
jack9603301 added a comment to T3116: Support back-end L4 level load balancing.
@dmbaturin @c-po Hi, I have basically completed the T3116 draft implementation, test, I only inspect the ipvsadm rules, seems to work properly, the draft only for ipvsadm, to set up some rules, now, you and @c-po can achieve the preliminary examination of the draft (about smoke tests, I currently only normal execution of the command line configuration program testing, has not yet been configured efficacy)
erkin edited projects for T3179: Add the ability to generate a support file, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus, VyOS 1.2 Crux.
erkin added a comment to T3179: Add the ability to generate a support file.
VyOS is still on the ancient shell-based diagnostic file generator spaghetti inherited from Vyatta. First of all, I'm going to dike out {show,generate} tech-support from vyatta-op and write a rudimentary stub as a replacement in Python/XML. Then we'll need to discuss what exactly needs to go in there.
Unknown Object (User) added a comment to T3303: Change welcome message on boot.
@c-po , it works properly
Welcome to VyOS 1.4-rolling-202102240218 (sagitta)!
Feb 23 2021
Feb 23 2021
basalblas renamed T3340: Add dhcp-helper package to replace ISC DHCP Relay from Add dhcp-helper package to support DHCP Relay over GRE tunnel to Add dhcp-helper package to replace ISC DHCP Relay.
Viacheslav added a comment to T3306: Extend set route-map aggregator as to 4 Bytes .
PR https://github.com/vyos/vyatta-cfg-quagga/pull/71
Can be "cherry-picked" to equuleus
Viacheslav added a comment to T3211: ability to redistribute ISIS into other routing protocols.
PR for equuleus for bgp and ospf https://github.com/vyos/vyatta-cfg-quagga/pull/70
PR for equuleus for rip https://github.com/vyos/vyos-1x/pull/741
jestabro changed the status of T3302: Make vyos-configd relay stdout from scripts to the user's console, a subtask of T2347: During commit, any script output directed to stdout will contain path, from Open to Backport candidate.
jestabro changed the status of T3302: Make vyos-configd relay stdout from scripts to the user's console from Open to Backport candidate.
jestabro changed the status of T3302: Make vyos-configd relay stdout from scripts to the user's console, a subtask of T2347: During commit, any script output directed to stdout will contain path, from Backport candidate to Open.
jestabro changed the status of T3302: Make vyos-configd relay stdout from scripts to the user's console from Backport candidate to Open.
If commit is not initiated from a 'live' session (for example, on boot), then redirected stdout/err should go to a file.
tuxnet added a comment to T3348: dhcpd: Can't create new lease file: Permission denied.
Yes, radius is used for login.
c-po added a comment to T3303: Change welcome message on boot.
If that works out wihtout an issue I would like to have it backported into 1.3 just to be more "fancy".
Unknown Object (User) added a comment to T3303: Change welcome message on boot.
PR https://github.com/vyos/vyos-build/pull/147
Output on the local stand
Welcome to VyOS 1.4 (sagitta)!
c-po renamed T3349: Ethernet: "disable" flag is not honored after a reboot for VIF interfaces from Ethernet: "disable" flag is not honored after a reboot to Ethernet: "disable" flag is not honored after a reboot for VIF interfaces.
Viacheslav added a comment to T3348: dhcpd: Can't create new lease file: Permission denied.
I can't reproduce it
Unknown Object (User) added a comment to T2927: isc-dhcpd release and expiry events never execute.
tuxnet added a comment to T3348: dhcpd: Can't create new lease file: Permission denied.
@Viacheslav
I guess the logs are from the dhcp-server and not from the client...
Viacheslav added a comment to T3348: dhcpd: Can't create new lease file: Permission denied.
@tuxnet Can you describe the steps to reproduce?
Unknown Object (User) triaged T2927: isc-dhcpd release and expiry events never execute as Normal priority.
Unknown Object (User) changed the status of T2927: isc-dhcpd release and expiry events never execute from Open to In progress.
pasik added a comment to T1230: Improving Boot Time for Large Firewall Configurations.
also having lots of NAT rules makes the vyos config handling and boot time very slow..