Definitely miss behavior is generated by the new interface MGT that was created when assigning MGT vrf to eth0.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Oct 31 2021
Oct 31 2021
n.fort added a comment to T3933: The firewall does not filter incoming traffic on the interface with vrf..
c-po renamed T3943: "netflow source-ip" prevents image upgrades if IP address does not exist locally from VyOS 1.2.7 upgrade to 1.3.0-epa2 config error if flow-accounting is set to "netflow source-ip" prevents image upgrades if IP address does not exist locally.
c-po moved T3943: "netflow source-ip" prevents image upgrades if IP address does not exist locally from Need Triage to Finished on the VyOS 1.4 Sagitta board.
Viacheslav closed T3341: Wrong behavior of the "reset vpn ipsec-peer XXX tunnel XXX" command as Resolved.
Viacheslav added a comment to T3341: Wrong behavior of the "reset vpn ipsec-peer XXX tunnel XXX" command.
PR for crux https://github.com/vyos/vyatta-op-vpn/pull/29
Viacheslav changed the subtype of T3955: Allow commit-confirm through http API from "Task" to "Feature Request".
Bug still present in 1.3.0-epa2 version.
c-po moved T3761: Bump salt-minion to 3000 from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.9) board.
Oct 30 2021
Oct 30 2021
c-po added a comment to T3954: FTDI cable makes VyOS sagitta latest hang, /dev/serial unpopulated, config system error.
Awesome report, thanks
c-po changed the status of T3954: FTDI cable makes VyOS sagitta latest hang, /dev/serial unpopulated, config system error from Open to In progress.
klipz added a comment to T3654: 1.2.7 - OpenVPN tunnel interface disappears on virtualized VyOS router/ESXi host.
@Viacheslav Yes, I have updated the system to 1.2.8-LTS. I will let you know if the disappearing openvpn tun interface reoccurs.
marc_s renamed T3954: FTDI cable makes VyOS sagitta latest hang, /dev/serial unpopulated, config system error from [Includes proposed fix] FTDI cable makes VyOS sagitta latest hang, /dev/serial unpopulated, config system error to FTDI cable makes VyOS sagitta latest hang, /dev/serial unpopulated, config system error.
Viacheslav added a comment to T3467: cannot set vrrp virtual-address with /31 mask when router uses networkaddress..
PR for crux https://github.com/vyos/vyos-1x/pull/1057
vyos@r12-lts:~$ show conf com | match vrrp set high-availability vrrp group GRP02 hello-source-address '203.0.113.1' set high-availability vrrp group GRP02 interface 'eth1.50' set high-availability vrrp group GRP02 no-preempt set high-availability vrrp group GRP02 priority '150' set high-availability vrrp group GRP02 rfc3768-compatibility set high-availability vrrp group GRP02 virtual-address '192.168.99.2/31' set high-availability vrrp group GRP02 vrid '10' vyos@r12-lts:~$ show interfaces vrrp Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down Interface IP Address S/L Description --------- ---------- --- ----------- eth1.50v10 192.168.99.2/31 u/u vyos@r12-lts:~$
Viacheslav changed the status of T3467: cannot set vrrp virtual-address with /31 mask when router uses networkaddress. from Confirmed to In progress.
Unknown Object (User) changed the status of T3952: Add sh bgp ipv4/ipv6 vpn command from In progress to Needs testing.
PR for crux https://github.com/vyos/vyos-1x/pull/1056
Viacheslav added a comment to T3654: 1.2.7 - OpenVPN tunnel interface disappears on virtualized VyOS router/ESXi host.
@klipz Could you re-check it with 1.2.8?
Oct 29 2021
Oct 29 2021
To fix some of this issue I modified line 102-103 in show_nat_rules.py:
n.fort added a comment to T1293: Zone-policy implementation does not allow secondary IP on an interface to communicate.
I have done a lab using 1.3.0-epa2 version, and got no troubles.
Have configured 2 IP addresses on interface, and configured zone based firewall. I'm able to ping everywhere, using both IP addresses of that interface.
Also I checked that counters on firewall rules got increased while pinging from any of both IP addresses.
Viacheslav changed the status of T3394: Error on removing dhcpv6 address from interface from Open to In progress.
c-po changed the status of T3943: "netflow source-ip" prevents image upgrades if IP address does not exist locally from Open to In progress.
c-po added a comment to T3943: "netflow source-ip" prevents image upgrades if IP address does not exist locally.
[email protected]# commit [ system flow-accounting ] Your "netflow source-ip" does not exist in the system
Viacheslav renamed T3796: Wireguard interfaces are not shown in op-mode from Crux Wireguard Documentation Seems Incorrect to Wireguard interfaces are not shown in op-mode.
Viacheslav changed the status of T3862: "reboot at" command together with date does not work / weird error message on wrong input from Open to In progress.
Viacheslav added a comment to T3953: IPSec with vti interfaces by default add default route to table 220.
Require migration scripts to check option set vpn ipsec options disable-route-autoinstall in the configuration
Viacheslav added a comment to T3953: IPSec with vti interfaces by default add default route to table 220.
Viacheslav changed the subtype of T3953: IPSec with vti interfaces by default add default route to table 220 from "Bug" to "Feature Request".
Viacheslav added a comment to T3862: "reboot at" command together with date does not work / weird error message on wrong input.
The issue even with 00:00 format
After some investigation, we figured out several ways how to solve or at least mitigate the problem. From my point of view, the optimal for both developers and customers is the next one.
Viacheslav moved T3745: op-mode IPSec show vpn ipse sa sorting from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.9) board.
PR for crux https://github.com/vyos/vyos-1x/pull/1054
Viacheslav moved T3745: op-mode IPSec show vpn ipse sa sorting from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Viacheslav added a project to T3745: op-mode IPSec show vpn ipse sa sorting: VyOS 1.2 Crux (VyOS 1.2.9).
Viacheslav moved T3942: Generate IPSec debug archive from op-mode from Backport Candidates to Finished on the VyOS 1.3 Equuleus (1.3.0-epa3) board.
PR for crux https://github.com/vyos/vyos-1x/pull/1053
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1052
Unknown Object (User) changed the status of T3952: Add sh bgp ipv4/ipv6 vpn command from Open to In progress.
@ajgnet Can you re-test it?
@liam can you re-test it?
@zsdc Provide please options to solve it.
Unknown Object (User) added a comment to T3952: Add sh bgp ipv4/ipv6 vpn command.
Unknown Object (User) created T3952: Add sh bgp ipv4/ipv6 vpn command.
Oct 28 2021
Oct 28 2021
Viacheslav closed T3916: Add additional Linux capabilities to container configuration, a subtask of T3676: Container option to add Linux capabilities, as Resolved.
Send it by email - [email protected]
Yep, that's fine - what's the best way the details over to you?
That is great news, any chance I can get SSH access to this machine for testing myself?
Viacheslav added a comment to T3941: "show vpn ipsec sa" shows established time of parent SA not child SA's.
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1050
Viacheslav changed the status of T3941: "show vpn ipsec sa" shows established time of parent SA not child SA's from Open to In progress.
Viacheslav updated the task description for T3951: After resetting vti ipsec tunnel old child SA still active.
Viacheslav changed the status of T3951: After resetting vti ipsec tunnel old child SA still active from Open to In progress.
Viacheslav updated the task description for T3951: After resetting vti ipsec tunnel old child SA still active.
The similar FRR tasks
https://github.com/FRRouting/frr/issues/9020
https://github.com/FRRouting/frr/issues/2350
Unknown Object (User) created T3950: CLI backtrace on update if DNS not defined .
Oct 27 2021
Oct 27 2021
c-po moved T3944: VRRP fails over when adding new group to master from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.0-epa3) board.
c-po moved T3944: VRRP fails over when adding new group to master from Need Triage to 1.3.0-epa3 on the VyOS 1.3 Equuleus board.
c-po moved T3944: VRRP fails over when adding new group to master from Need Triage to Finished on the VyOS 1.4 Sagitta board.
dmbaturin edited projects for T3946: Automatically resize the root partition if the drive has extra space, added: VyOS 1.3 Equuleus (1.3.0-epa3); removed VyOS 1.3 Equuleus.
We've now built a test x710 box for this, so we can test this more easily.
Viacheslav added a project to T3942: Generate IPSec debug archive from op-mode: VyOS 1.2 Crux (VyOS 1.2.9).
Viacheslav moved T3942: Generate IPSec debug archive from op-mode from Need Triage to Backport Candidates on the VyOS 1.3 Equuleus (1.3.0-epa3) board.
Viacheslav moved T3945: Add route-map for bgp aggregate-address from Need Triage to Backport Candidates on the VyOS 1.3 Equuleus board.
Viacheslav moved T3945: Add route-map for bgp aggregate-address from Need Triage to Finished on the VyOS 1.4 Sagitta board.
PR for address-family ipv6-unicast, 1.3 https://github.com/vyos/vyatta-cfg-quagga/pull/91