Feed Advanced Search

Advanced Search
Use Results
Edit Query
Hide Query

	Include stories about projects I am a member of.

Jun 5 2022

Unknown Object (User) added a comment to T4457: L2TP/IPSec Remote Access VPN does not work as expected in 1.3.1-S1.

@NikolayP , Looks like MTU and MPPE issue. Stoping daemon does not related to this I think.

Jun 5 2022, 6:56 PM · VyOS 1.3 Equuleus ( 1.3.1)

Feb 16 2022

Unknown Object (User) closed T3408: vyos 1.4 not delivering ipv6 to devices via PPPOE as Invalid.

Tested on 1.4-rolling-202202150317 and 1.3.0, all works

Feb 16 2022, 11:18 AM · VyOS 1.4 Sagitta

Feb 15 2022

Unknown Object (User) closed T3494: DHCPv6 leases traceback when PD using as Resolved.

Feb 15 2022, 6:58 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Unknown Object (User) closed T3006: Accel-PPP & vlan-mon config get invalid VLAN as Resolved.

Feb 15 2022, 3:35 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Unknown Object (User) added a comment to T3494: DHCPv6 leases traceback when PD using.

PR for equuleus https://github.com/vyos/vyos-1x/pull/1222

Feb 15 2022, 12:28 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Unknown Object (User) reopened T3494: DHCPv6 leases traceback when PD using as "Backport candidate".

Sorry, it works properly only for not PD. Looks like is not backported to equuleus
Client-side configuration to reproduce

set interfaces ethernet eth0 address 'dhcpv6'
set interfaces ethernet eth0 dhcpv6-options pd 0 interface eth1 address '1'
set interfaces ethernet eth0 dhcpv6-options pd 0 interface eth1 sla-id '0'
set interfaces ethernet eth0 dhcpv6-options pd 0 length '64'

On server-side we get the same backtrace

vyos@vyos# run show dhcpv6 server leases 
Traceback (most recent call last):
  File "/usr/libexec/vyos/op_mode/show_dhcpv6.py", line 209, in <module>
    leases = get_leases(conf, lease_file, args.state, args.pool, args.sort)
  File "/usr/libexec/vyos/op_mode/show_dhcpv6.py", line 142, in get_leases
    leases = sorted(leases, key = lambda k: int(ip_address(k['ip'])))
  File "/usr/libexec/vyos/op_mode/show_dhcpv6.py", line 142, in <lambda>
    leases = sorted(leases, key = lambda k: int(ip_address(k['ip'])))
  File "/usr/lib/python3.7/ipaddress.py", line 54, in ip_address
    address)
ValueError: '2001:db8:290::/64' does not appear to be an IPv4 or IPv6 address

Feb 15 2022, 9:40 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Unknown Object (User) closed T3494: DHCPv6 leases traceback when PD using as Resolved.

Tested on VyOS version 1.3.0, works properly

vyos@vyos# run show version | match Version
Version:          VyOS 1.3.0
[edit]
vyos@vyos# run show dhcpv6 server leases 
IPv6 address        State    Last communication    Lease expiration     Remaining    Type           Pool         IAID_DUID
------------------  -------  --------------------  -------------------  -----------  -------------  -----------  -----------------------------------------------------------------
2001:db8:3456::187  active   2022/02/15 09:28:10   2022/02/15 21:28:10  11:58:28     non-temporary  VyOS-DHCPv6  00:00:00:00:00:04:79:76:62:99:23:ad:43:fb:9c:5b:1c:1e:59:4b:58:01

Feb 15 2022, 9:30 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Unknown Object (User) added a comment to T725: Cake and FQ-PIE.

Hi @hensur , I'm sure that this code should be moved to python implementation, patches for the legacy vyatta-cfg-qos will be rejected.
First of all, need to create CLI XML definition
https://docs.vyos.io/en/equuleus/contributing/development.html?xml-used-for-cli-definitions#xml-used-for-cli-definitions
and then create backend in python to process CLI commands
https://docs.vyos.io/en/equuleus/contributing/development.html?xml-used-for-cli-definitions#configuration-script-structure-and-behaviour

Feb 15 2022, 9:18 AM · VyOS 1.4 Sagitta

Feb 14 2022

Unknown Object (User) added a comment to T4243: Nat log - Add translated data to nat logs.

@n.fort it is possible with conntrackd logging option syslog

sudo rm /etc/systemd/system/conntrackd.service.d/override.conf

edit nano /etc/conntrackd/conntrackd.conf and add Syslog on in General section, then restart conntrackd service.
After that you will get messages

conntrack-tools[5097]: udp      17 src=100.64.0.3 dst=1.1.1.1 sport=41900 dport=53 src=1.1.1.1 dst=198.51.100.1 sport=53 dport=41900

Feb 14 2022, 8:17 PM · VyOS 1.5 Circinus

Feb 4 2022

Unknown Object (User) updated subscribers of T4226: VRRP transition-script does not work for groups name which contains -(minus) sign.

@jestabro you are right. Adding no_tag_node_value_mangle=True will fix this issue.
https://github.com/vyos/vyos-1x/blob/ec13cac66ba612ecc36053158c7517c8fe993547/src/system/keepalived-fifo.py#L73-L74

self.vrrp_config_dict = conf.get_config_dict(base,
                                     key_mangling=('-', '_'), get_first_key=True,
                                     no_tag_node_value_mangle=True)

Feb 4 2022, 6:27 AM · VyOS 1.3 Equuleus ( 1.3.1), VyOS 1.4 Sagitta

Feb 2 2022

Unknown Object (User) created T4226: VRRP transition-script does not work for groups name which contains -(minus) sign.

Feb 2 2022, 8:24 PM · VyOS 1.3 Equuleus ( 1.3.1), VyOS 1.4 Sagitta

Jan 24 2022

Unknown Object (User) closed T4204: Update Accel-PPP to a newer revision as Resolved.

Jan 24 2022, 10:01 PM · VyOS 1.3 Equuleus ( 1.3.1), VyOS 1.4 Sagitta

Unknown Object (User) changed the status of T4204: Update Accel-PPP to a newer revision from In progress to Needs testing.

Jan 24 2022, 8:30 AM · VyOS 1.3 Equuleus ( 1.3.1), VyOS 1.4 Sagitta

Unknown Object (User) added a comment to T4204: Update Accel-PPP to a newer revision.

PR current - https://github.com/vyos/vyos-build/pull/214
PR equuleus - https://github.com/vyos/vyos-build/pull/215

Jan 24 2022, 8:29 AM · VyOS 1.3 Equuleus ( 1.3.1), VyOS 1.4 Sagitta

Unknown Object (User) changed the status of T4204: Update Accel-PPP to a newer revision from Open to In progress.

Jan 24 2022, 8:21 AM · VyOS 1.3 Equuleus ( 1.3.1), VyOS 1.4 Sagitta

Unknown Object (User) created T4204: Update Accel-PPP to a newer revision.

Jan 24 2022, 8:20 AM · VyOS 1.3 Equuleus ( 1.3.1), VyOS 1.4 Sagitta

Jan 18 2022

Unknown Object (User) added a comment to T3522: policy based routing not working.

Looks like I see the same issue for 1.3.0. Reproducing steps:

set interfaces ethernet eth1 address 'dhcp'
set protocols static table 1 route 0.0.0.0/0 dhcp-interface eth1

Jan 18 2022, 4:06 PM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project

Jan 12 2022

Unknown Object (User) closed T4167: DMVPN apply wrong param on the first configuration as Resolved.

Jan 12 2022, 4:38 PM · VyOS 1.3 Equuleus (1.3.0)

Unknown Object (User) changed the status of T4167: DMVPN apply wrong param on the first configuration from In progress to Needs testing.

Jan 12 2022, 6:38 AM · VyOS 1.3 Equuleus (1.3.0)

Jan 11 2022

Unknown Object (User) added a comment to T4167: DMVPN apply wrong param on the first configuration.

PR https://github.com/vyos/vyos-opennhrp/pull/3

Jan 11 2022, 8:27 PM · VyOS 1.3 Equuleus (1.3.0)

Unknown Object (User) changed the status of T4167: DMVPN apply wrong param on the first configuration from Open to In progress.

Jan 11 2022, 8:08 PM · VyOS 1.3 Equuleus (1.3.0)

Unknown Object (User) assigned T4168: IPsec VPN is impossible to restart when DMVPN is configured to Viacheslav.

Jan 11 2022, 8:28 AM · VyOS 1.3 Equuleus ( 1.3.1)

Unknown Object (User) created T4168: IPsec VPN is impossible to restart when DMVPN is configured.

Jan 11 2022, 8:27 AM · VyOS 1.3 Equuleus ( 1.3.1)

Unknown Object (User) created T4167: DMVPN apply wrong param on the first configuration.

Jan 11 2022, 8:08 AM · VyOS 1.3 Equuleus (1.3.0)

Jan 6 2022

Unknown Object (User) created T4143: Wrong section for Cloud-init User-Data for OVA images.

Jan 6 2022, 11:15 AM · VyOS 1.3 Equuleus (1.3.7)

Jan 4 2022

Unknown Object (User) renamed T4085: Rewrite L2TP/PPTP/SSTP/PPPoE services to get_config_dict from Rewrite l2tp/pptp remote access to get_config_dict to Rewrite L2TP/PPTP/SSTP/PPPoE services to get_config_dict.

Jan 4 2022, 1:23 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Dec 30 2021

Unknown Object (User) changed the status of T4117: Does not possible to configure PoD/CoA for L2TP vpn from In progress to Needs testing.

Dec 30 2021, 5:27 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3)

Dec 29 2021

Unknown Object (User) added a comment to T4085: Rewrite L2TP/PPTP/SSTP/PPPoE services to get_config_dict.

Dec 29 2021, 2:33 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Unknown Object (User) edited projects for T4119: Issue with l2tp remote-access ipv6 configuration, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.

Dec 29 2021, 2:32 PM · VyOS 1.4 Sagitta

Unknown Object (User) created T4119: Issue with l2tp remote-access ipv6 configuration.

Dec 29 2021, 2:30 PM · VyOS 1.4 Sagitta

Unknown Object (User) added a comment to T4117: Does not possible to configure PoD/CoA for L2TP vpn.

PR https://github.com/vyos/vyos-1x/pull/1125

Dec 29 2021, 2:09 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3)

Unknown Object (User) changed the status of T4117: Does not possible to configure PoD/CoA for L2TP vpn from Open to In progress.

Dec 29 2021, 1:32 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3)

Unknown Object (User) created T4117: Does not possible to configure PoD/CoA for L2TP vpn.

Dec 29 2021, 1:32 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3)

Unknown Object (User) created T4114: Allow software running as systemd service write coredumps.

Dec 29 2021, 10:58 AM · VyOS 1.5 Circinus

Dec 21 2021

Unknown Object (User) added a comment to T3006: Accel-PPP & vlan-mon config get invalid VLAN.

I think this is the limitation with the Linux interface name, it should not be higher than 16 characters. In you config I see, as an example (bond0.995.130 = 13 chars and additional part .100 = 4) = 17
I know how we can fix it manually, but I'm not sure that it is a good idea.
Accel-PPP supports name changing for created interface by vlan_mon module

[pppoe]
vlan-name=e0.%P.%N
interface=re:^e0\.\d+\.\d+

you can try to change this manually (edit /run/accel-ppp/pppoe.conf) and restart pppoe-server

Dec 21 2021, 8:47 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Dec 19 2021

Unknown Object (User) changed the status of T4085: Rewrite L2TP/PPTP/SSTP/PPPoE services to get_config_dict from Open to In progress.

Dec 19 2021, 3:25 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Unknown Object (User) created T4085: Rewrite L2TP/PPTP/SSTP/PPPoE services to get_config_dict.

Dec 19 2021, 3:25 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Dec 17 2021

Unknown Object (User) added a comment to T4081: VRRP health-check script stops working when setting up a sync group.

Yes, but sync-groups dont have health-check scripts.
The best solution, in this case, is to implement health-check features for sync-group and do migration script.
We should not use health-check configured for a group if this group belongs to a sync-group

Dec 17 2021, 12:19 PM · VyOS 1.3 Equuleus ( 1.3.1), VyOS 1.4 Sagitta

Dec 16 2021

Unknown Object (User) changed the status of T4081: VRRP health-check script stops working when setting up a sync group from Open to Confirmed.

When sync group configure the keepalived report to log, looks like we need to use this script on sync_group

Dec 16 15:22:53 vyos Keepalived_vrrp[4766]: Warning - script healthcheck_XXX is not used

Dec 16 2021, 5:27 PM · VyOS 1.3 Equuleus ( 1.3.1), VyOS 1.4 Sagitta

Dec 15 2021

Unknown Object (User) added a comment to T3006: Accel-PPP & vlan-mon config get invalid VLAN.

@GallySoft could you please share your configuration commands?
Is S-VLAN 995 and C-VLAN 2092 as an example configured on the bond0 interface?

Dec 15 2021, 6:18 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Unknown Object (User) added a comment to T3006: Accel-PPP & vlan-mon config get invalid VLAN.

Hi @GallySoft, this fix is still not in 1.3. Try to test it on 1.4 fresh rollings.

Dec 15 2021, 4:32 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Dec 9 2021

Unknown Object (User) changed the status of T4002: firewall group network-group long names restriction incorrect behavior from Open to Confirmed.

Dec 9 2021, 2:17 PM · VyOS 1.3 Equuleus ( 1.3.1)

Unknown Object (User) changed the status of T3546: Add support for running scripts on PPPoE server session events from Needs testing to Backport candidate.

Dec 9 2021, 10:31 AM · VyOS 1.3 Equuleus (1.3.4)

Dec 7 2021

Unknown Object (User) changed the status of T3006: Accel-PPP & vlan-mon config get invalid VLAN from In progress to Needs testing.

Dec 7 2021, 6:57 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Dec 6 2021

Unknown Object (User) changed the status of T3006: Accel-PPP & vlan-mon config get invalid VLAN from Open to In progress.

PR https://github.com/vyos/vyos-1x/pull/1100

Dec 6 2021, 7:48 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Unknown Object (User) added a comment to T4053: VRRP impossible to set scripts out of the /config directory.

I believe that CLI should protect a user and deny him to shoot in his leg. In any case, we cannot guarantee a successful update if the script will not be migrated

Dec 6 2021, 10:15 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Unknown Object (User) added a comment to T4033: VRRP - Error security when setting scripts.

We definitely have to delete enable_script_security from https://github.com/vyos/vyos-1x/blob/current/data/templates/vrrp/keepalived.conf.tmpl#L10

Dec 6 2021, 8:06 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Unknown Object (User) added a project to T4052: Validator return traceback on VRRP configuration with the script path not in config dir: VyOS 1.4 Sagitta.

Dec 6 2021, 7:56 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Unknown Object (User) created T4052: Validator return traceback on VRRP configuration with the script path not in config dir.

Dec 6 2021, 7:39 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Unknown Object (User) closed T4012: Add VRF support for TFTP as Resolved.

Dec 6 2021, 6:38 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Dec 4 2021

Unknown Object (User) added a comment to T3403: Error on interrupting list of pppoe sessions.

PR https://github.com/vyos/vyos-1x/pull/1096

Dec 4 2021, 6:43 PM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.4 Sagitta

Unknown Object (User) added a comment to T3403: Error on interrupting list of pppoe sessions.

Also, I propose to add missing 'space' to header

vyos@VyOS-BNG:~$ show pppoe-server sessions 
ifname  | username |      ip       | ip6 | ip6-dp |    calling-sid    | rate-limit | state  |  uptime  | rx-bytes  | tx-bytes 
---------+----------+---------------+-----+--------+-------------------+------------+--------+----------+-----------+----------

Easy to fix here https://github.com/vyos/vyos-1x/blob/current/src/op_mode/ppp-server-ctrl.py#L63
replace to print(f' {output}')

Dec 4 2021, 6:38 PM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.4 Sagitta

Unknown Object (User) created T4047: Wrong regex validation in XML definitions.

Dec 4 2021, 1:34 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Dec 3 2021

Unknown Object (User) edited projects for T3006: Accel-PPP & vlan-mon config get invalid VLAN, added: VyOS 1.4 Sagitta, VyOS 1.3 Equuleus; removed vyos-pppoe-server, vyatta-cfg-op-pppoe.

Dec 3 2021, 5:47 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Unknown Object (User) claimed T3006: Accel-PPP & vlan-mon config get invalid VLAN.

Dec 3 2021, 5:46 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Unknown Object (User) added a comment to T2584: pppoe-server NAS-Filter-Rule attribute.

Dec 3 2021, 5:39 PM · VyOS 1.4 Sagitta (1.4.0-GA), VyOS 1.5 Circinus

Unknown Object (User) added a comment to T4012: Add VRF support for TFTP.

PR for 1.3 https://github.com/vyos/vyos-1x/pull/1094

Dec 3 2021, 3:07 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Dec 2 2021

Unknown Object (User) changed the status of T3546: Add support for running scripts on PPPoE server session events from In progress to Needs testing.

Dec 2 2021, 6:07 PM · VyOS 1.3 Equuleus (1.3.4)

Dec 1 2021

Unknown Object (User) closed T3695: OpenConnect reports commit success when ocserv fails to start due to SSL cert/key file issues as Resolved.

Dec 1 2021, 3:29 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Unknown Object (User) changed the status of T4012: Add VRF support for TFTP from Needs testing to Backport candidate.

Dec 1 2021, 7:03 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Nov 29 2021

Unknown Object (User) created T4027: Does not possible to update the system with 512MB of RAM.

Nov 29 2021, 1:48 PM · VyOS 1.3 Equuleus (1.3.6)

Unknown Object (User) closed T2661: SSTP wrong certificates check as Resolved.

Nov 29 2021, 12:29 PM · VyOS 1.3 Equuleus (1.3.0)

Nov 26 2021

Unknown Object (User) closed T4019: Smoketests for SSTP and openconnect fails as Resolved.

23:05:52  DEBUG - Running Testcase: /usr/libexec/vyos/tests/smoke/cli/test_vpn_openconnect.py
23:06:04  DEBUG - test_vpn (__main__.TestVpnOpenconnect) ... ok
23:06:07  DEBUG - 
23:06:07  DEBUG - ----------------------------------------------------------------------
23:06:07  DEBUG - Ran 1 test in 11.396s
23:06:07  DEBUG - 
23:06:07  DEBUG - OK
23:06:07  DEBUG - Running Testcase: /usr/libexec/vyos/tests/smoke/cli/test_vpn_sstp.py
23:06:22  DEBUG - test_accel_local_authentication (__main__.TestVPNSSTPServer) ... ok
23:06:28  DEBUG - test_accel_name_servers (__main__.TestVPNSSTPServer) ... ok
23:06:38  DEBUG - test_accel_radius_authentication (__main__.TestVPNSSTPServer) ... ok
23:06:40  DEBUG - 
23:06:41  DEBUG - ----------------------------------------------------------------------
23:06:41  DEBUG - Ran 3 tests in 32.454s
23:06:41  DEBUG - 
23:06:41  DEBUG - OK

Nov 26 2021, 8:54 PM · VyOS 1.3 Equuleus (1.3.0)

Unknown Object (User) changed the status of T4019: Smoketests for SSTP and openconnect fails from Open to In progress.

Nov 26 2021, 7:24 AM · VyOS 1.3 Equuleus (1.3.0)

Unknown Object (User) created T4019: Smoketests for SSTP and openconnect fails .

Nov 26 2021, 7:24 AM · VyOS 1.3 Equuleus (1.3.0)

Nov 24 2021

Unknown Object (User) changed the status of T2661: SSTP wrong certificates check from In progress to Needs testing.

Now certificate files existing should be checked via validator name="file-exists" which was fixed T3695
PR https://github.com/vyos/vyos-1x/pull/1082

Nov 24 2021, 6:33 PM · VyOS 1.3 Equuleus (1.3.0)

Unknown Object (User) changed the status of T2661: SSTP wrong certificates check from Needs testing to In progress.

Nov 24 2021, 6:17 PM · VyOS 1.3 Equuleus (1.3.0)

Unknown Object (User) added a comment to T3695: OpenConnect reports commit success when ocserv fails to start due to SSL cert/key file issues.

Also, fixed certificate files check. PR https://github.com/vyos/vyos-1x/pull/1081

Nov 24 2021, 5:24 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta