@LBegnaud if I read the source correct the command set vpn ipsec options disable-route-autoinstall is what you are looking for, it was implemented in T71.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed Advanced Search
Advanced Search
Advanced Search
Sep 17 2019
Sep 17 2019
Sep 16 2019
Sep 16 2019
c-po added a comment to T628: StrongSwan requires configuration change for proper routing over VTI..
Sep 15 2019
Sep 15 2019
This could be used as base for testing:
c-po added a comment to T1630: OpenVPN after changing it from root to nobody (unprivileged user) cant add routes.
No feedback received, considering this as resolved. please reopen if issue reappears.
Sep 13 2019
Sep 13 2019
Please test again with the rolling release from 2019-09-14. Thanks for reporting the issue.
Sep 12 2019
Sep 12 2019
c-po added a parent task for T1466: Add EAPOL login support: T1637: Rewrite ethernet interface in new style XML syntax.
c-po added a subtask for T1637: Rewrite ethernet interface in new style XML syntax: T1466: Add EAPOL login support.
Sep 10 2019
Sep 10 2019
Why can I not delete the default key? If I wan‘t to drop WireGuard on a device I also wan’t to remove that key.
Sep 7 2019
Sep 7 2019
Sep 6 2019
Sep 6 2019
c-po changed the status of T1637: Rewrite ethernet interface in new style XML syntax from Open to In progress.
c-po changed the status of T1637: Rewrite ethernet interface in new style XML syntax, a subtask of T1579: Rewrite all interface types in new XML/Python style, from Open to In progress.
c-po changed the status of T1630: OpenVPN after changing it from root to nobody (unprivileged user) cant add routes from Open to Needs testing.
c-po changed the status of T1630: OpenVPN after changing it from root to nobody (unprivileged user) cant add routes, a subtask of T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python, from Open to Needs testing.
c-po added a comment to T1630: OpenVPN after changing it from root to nobody (unprivileged user) cant add routes.
OpenVPN now runs as user openvpn with the above helper script. Please also test this new implementation, it will be in the rolling ISO which is building right now.
c-po added a comment to T1630: OpenVPN after changing it from root to nobody (unprivileged user) cant add routes.
Persistent tunnel is a configuration option set interfaces openvpn vtun10 persistent-tunnel
c-po closed T1636: Rewrite VXLAN in new style XML/Python, a subtask of T1579: Rewrite all interface types in new XML/Python style, as Resolved.
Sep 5 2019
Sep 5 2019
Huh? Which perl script?
As the bonding interface has been completely rewritten this should not be an issue as I do not touch underlaying interface MAC addresses
Why not specify the keys or the key file location via CLI like other VPN implementations do it?
c-po changed the status of T1636: Rewrite VXLAN in new style XML/Python, a subtask of T1579: Rewrite all interface types in new XML/Python style, from Open to In progress.
Sep 4 2019
Sep 4 2019
c-po moved T1439: DHCPv6 static-mappings not working due to excess quotes around dhcp6.client-id from VyOS 1.2.4 to VyOS 1.2.3 on the VyOS 1.2 Crux board.
c-po moved T1439: DHCPv6 static-mappings not working due to excess quotes around dhcp6.client-id from Need Triage to Finished on the VyOS 1.3 Equuleus board.
You could use quoting like mentioned in T1129.
Rewrite was tested using:
c-po closed T1557: Create generic abstraction for configuring interfaces e.g. IP address as Resolved.
c-po closed T1557: Create generic abstraction for configuring interfaces e.g. IP address, a subtask of T1579: Rewrite all interface types in new XML/Python style, as Resolved.
c-po closed T1631: Multiple push-route options cause error generating openvpn configuration as Resolved.
c-po closed T1614: Rewrite bonding interface in new style XML syntax, a subtask of T1579: Rewrite all interface types in new XML/Python style, as Resolved.
c-po added a comment to T1630: OpenVPN after changing it from root to nobody (unprivileged user) cant add routes.
I like the openvpn:openvpn ownership idea
The documentation is also correct. Please not that there are two git branches for the documentation, current and equuleus. You send me the VyOS 1.2.2 crux link. I gave you the upcoming VyOS 1.2 equuleus link.
c-po added a comment to T1631: Multiple push-route options cause error generating openvpn configuration.
This is actually a duplicate of T1617.
The bahavior has changed, see https://vyos.readthedocs.io/en/equuleus/interfaces/bridging.html and T1556
c-po added a comment to T1631: Multiple push-route options cause error generating openvpn configuration.
1.3 rolling is not recommended for users - its pre-alpha.
c-po added a comment to T1631: Multiple push-route options cause error generating openvpn configuration.
@jdevincentis is this a custom build? Using VyOS 1.2-rolling-201909040337 I can not reproduce the issue with:
c-po changed the status of T1631: Multiple push-route options cause error generating openvpn configuration from Open to In progress.
Sep 3 2019
Sep 3 2019
c-po added a comment to T1630: OpenVPN after changing it from root to nobody (unprivileged user) cant add routes.
The config generator would need to be adopted https://github.com/vyos/vyos-1x/blob/current/src/conf_mode/interface-openvpn.py and the wrapper script added. I have no time before tomorrow, sorry
Please test with latest rolling and not a custom build.
c-po added a comment to T1630: OpenVPN after changing it from root to nobody (unprivileged user) cant add routes.
When the site looses connection and thus a SIGUSR21 is sent to OpenVPN to restart internally the priviledges have dropped and yes, /sbin/ip can't be called again.
c-po moved T1629: IP addresses configured on vif-s interfaces are not added to the system from Need Triage to VyOS 1.2.4 on the VyOS 1.2 Crux board.
c-po updated the task description for T1626: BGP exchanges prefixes without specified address-family.
Sep 2 2019
Sep 2 2019
Should be fixed in next rolling release by: https://github.com/vyos/vyatta-cfg/commit/710728ee8eb6def82f9a142468960f6985dcf4e8
Sep 1 2019
Sep 1 2019
c-po added a comment to T1557: Create generic abstraction for configuring interfaces e.g. IP address.
@hagbard not a problem. Looks like we now go the "our own lib" way as pyroute2 has some flaws. DHCP is already fix and I continue improve the script and remove redundant code before it will be extended to support VLAN/bonding.
Aug 31 2019
Aug 31 2019
c-po added a comment to T1557: Create generic abstraction for configuring interfaces e.g. IP address.
DHCP + DHCPv6 working now in bridge interface.
Aug 29 2019
Aug 29 2019
This is "as intended" b/c ping is an op-mode command.
Aug 28 2019
Aug 28 2019
c-po added a comment to T1557: Create generic abstraction for configuring interfaces e.g. IP address.
@hagbard during some tests with the bridge interface (https://github.com/vyos/vyos-1x/commit/71f7a947539963112c61fef2a5f278d524d71198) I noticed the following:
c-po closed T1615: After migration to pyroute2 the address DHCP statement is no longer covered, a subtask of T1556: Rewrite Bridge in new style XML syntax, as Resolved.
c-po added a comment to T1557: Create generic abstraction for configuring interfaces e.g. IP address.
Pyroute2 states:
One of the major issues with IPDB is its memory footprint. It proved not to be suitable for environments with thousands of routes or neighbours. Being a design issue, it could not be fixed, so a new module was started, NDB, that aims to replace IPDB. IPDB is still more feature rich, but NDB is already more fast and stable.
Aug 27 2019
Aug 27 2019
c-po moved T1613: IPv6 traffic is not captured by NetFlow sensor (pmacct/NFLOG) from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T1613: IPv6 traffic is not captured by NetFlow sensor (pmacct/NFLOG) from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.3) board.
c-po edited projects for T1613: IPv6 traffic is not captured by NetFlow sensor (pmacct/NFLOG), added: VyOS 1.2 Crux (VyOS 1.2.3); removed VyOS 1.2 Crux.
c-po added a project to T1613: IPv6 traffic is not captured by NetFlow sensor (pmacct/NFLOG): VyOS 1.3 Equuleus.
backported to crux
c-po closed T1617: OpenVPN push route failure, a subtask of T1548: Rewrite OpenVPN interface/op-commands in new style XML/Python, as Resolved.