Page MenuHomeVyOS Platform
Feed All Stories

Jan 14 2021

trae32566 created T3216: Removal of restricted-shell broke configure mode for RADIUS users.
Jan 14 2021, 7:35 AM · VyOS 1.4 Sagitta
trae32566 created T3215: Operational command "show ipv6 route" is broken.
Jan 14 2021, 6:41 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
shaferstockton created T3214: OpenVPN IPv6 fixes.
Jan 14 2021, 2:48 AM · VyOS 1.5 Circinus
arfbarky created T3213: show interface command python error.
Jan 14 2021, 12:50 AM · VyOS 1.4 Sagitta

Jan 13 2021

c-po updated the task description for T3212: SSH: configuration directory is not always created on boot.
Jan 13 2021, 8:25 PM · VyOS 1.3 Equuleus (1.3.0)
c-po updated the task description for T3212: SSH: configuration directory is not always created on boot.
Jan 13 2021, 8:24 PM · VyOS 1.3 Equuleus (1.3.0)
c-po updated the task description for T3212: SSH: configuration directory is not always created on boot.
Jan 13 2021, 7:14 PM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T3212: SSH: configuration directory is not always created on boot from Open to In progress.
Jan 13 2021, 6:19 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T3212: SSH: configuration directory is not always created on boot.
Jan 13 2021, 6:18 PM · VyOS 1.3 Equuleus (1.3.0)
androme closed T3186: NAT: Commit failed when applying negated(!) addresses as Resolved.

Hi, it's ok with : 1.4-rolling-202101130217
Thank you and have a nice day.

Jan 13 2021, 3:55 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a project to T3137: Let VLAN aware bridge approach the behavior of professional equipment: VyOS 1.4 Sagitta.
Jan 13 2021, 7:05 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
craterman created T3211: ability to redistribute ISIS into other routing protocols.
Jan 13 2021, 6:37 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
craterman added a comment to T3207: OSPF does not convert the area to NSSA .
Jan 13 2021, 6:19 AM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.4 Sagitta

Jan 12 2021

c-po changed the status of T3186: NAT: Commit failed when applying negated(!) addresses from Open to Needs testing.
Jan 12 2021, 10:21 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T3186: NAT: Commit failed when applying negated(!) addresses .

Please verify with a 1.4 rolling image from 20210113 so we can consider this to be backported.

Jan 12 2021, 10:21 PM · VyOS 1.3 Equuleus (1.3.0)
c-po updated the task description for T3186: NAT: Commit failed when applying negated(!) addresses .
Jan 12 2021, 9:55 PM · VyOS 1.3 Equuleus (1.3.0)
c-po renamed T3186: NAT: Commit failed when applying negated(!) addresses from Bug with "!" invert character to NAT: bug with "!" invert character.
Jan 12 2021, 9:54 PM · VyOS 1.3 Equuleus (1.3.0)
absolutesantaja added a comment to T1153: VyOS 1.2.0RC10, RAID-1, fresh install, unable to save config.

Just wanted to add I’m seeing this issue on 1.2.6 LTS as well running on a dell r220 ii with dual Samsung 840s. I was not seeing it in rolling nor if I switch to mbr boot.

Jan 12 2021, 8:03 PM · VyOS 1.3 Equuleus (1.3.0-epa1), test
Viacheslav added a comment to T3207: OSPF does not convert the area to NSSA .

@craterman It the same? https://github.com/FRRouting/frr/issues/739

Jan 12 2021, 7:47 PM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.4 Sagitta
shallpion added a comment to T3134: DHCPv6 DUID configuration node missing.

@stepler, it looks like WIDE does not support type 2 DUID.

Jan 12 2021, 7:43 PM · VyOS 1.3 Equuleus (1.3.0)
aficustree added a comment to T3134: DHCPv6 DUID configuration node missing.

@stepler for what it's worth, it does seem to persist across reboots if you just overwrite the file but obvs doesn't survive upgrades

Jan 12 2021, 7:23 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T3210: ISIS three-way-handshake.

@craterman It makes sense, thanks.
PR https://github.com/vyos/vyos-1x/pull/679

Jan 12 2021, 7:19 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
stepler added a comment to T3134: DHCPv6 DUID configuration node missing.

Can we reopen this bug? I need to set a type 2 DUID to get a DHCPv6 PD from my ISP. This is the only thing keeping me from switching from an EdgeRouter to VyOS.

Jan 12 2021, 6:46 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T2387: Create XML scheme for [conf_mode] BGP .

PR https://github.com/vyos/vyos-1x/pull/678

Jan 12 2021, 6:37 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T3205: Does not possible to configure tunnel mode gre-bridge as Resolved.
Jan 12 2021, 5:20 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po moved T3205: Does not possible to configure tunnel mode gre-bridge from Need Triage to Backlog on the VyOS 1.3 Equuleus board.
Jan 12 2021, 5:15 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po changed the status of T3205: Does not possible to configure tunnel mode gre-bridge from Open to In progress.
Jan 12 2021, 4:16 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
ropeguru added a comment to T1229: Add support for unencrypted L2TPv2 client connections.

Have you had any time to look into this more? I am at a point of wanting to migrate off a Mikrotik RouterOS virtualized instance to a piece of hardware and would love to move to VyOS at the same time.

Jan 12 2021, 2:25 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
craterman created T3210: ISIS three-way-handshake.
Jan 12 2021, 11:01 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav added a comment to T2387: Create XML scheme for [conf_mode] BGP .

Unable to set update source "lo" interface
For afi6 should be "redistribute ospfv3" instead "ospf"

Jan 12 2021, 9:27 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a project to T3194: OSPF redistribution metric issue: VyOS 1.2 Crux.
Jan 12 2021, 8:52 AM · VyOS 1.2 Crux (VyOS 1.2.7)
drac added a comment to T3159: L2TP MTU mismatch between client and server.

p.s. 478 and 479 referred to qmimux0.pcap

Jan 12 2021, 12:05 AM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
drac added a comment to T3159: L2TP MTU mismatch between client and server.

Line 478 and 479 seem to be the important ones here.
The MRU of 1450 appears to be correctly negotiated. i.e. Vyos is setting the remote side to a maximum of 1450 bytes, because that is what the remote side requested!

Jan 12 2021, 12:04 AM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.5 Circinus, VyOS 1.4 Sagitta

Jan 11 2021

stepler closed T3193: DHCPv6 PD verification issues as Resolved.

Looks good on 1.3-beta-202101111823:

vyos@vyos:~$ configure
WARNING: You are currently configuring a live-ISO environment, changes will not persist until installed
[edit]
vyos@vyos# set interfaces ethernet eth0 vif 10
[edit]
vyos@vyos# set interfaces ethernet eth0 vif 11
[edit]
vyos@vyos# set interfaces ethernet eth0 dhcpv6-options pd 0 interface eth0.10 sla-id 0
[edit]
vyos@vyos# set interfaces ethernet eth0 dhcpv6-options pd 0 interface eth0.11 sla-id 1
[edit]
vyos@vyos# commit
[edit]
vyos@vyos# delete interfaces ethernet eth0 dhcpv6-options
[edit]
vyos@vyos# commit
[edit]
vyos@vyos# set interfaces ethernet eth0 dhcpv6-options pd 0 interface eth1
[edit]
vyos@vyos# set interfaces ethernet eth0 dhcpv6-options pd 0 interface eth2
[edit]
vyos@vyos# commit
[edit]
vyos@vyos# delete interfaces ethernet eth0 dhcpv6-options
[edit]
vyos@vyos# commit
[edit]
vyos@vyos# set interfaces ethernet eth0 dhcpv6-options pd 0 interface eth1
[edit]
vyos@vyos# set interfaces ethernet eth0 dhcpv6-options pd 0 interface eth2 sla-id 0
[edit]
vyos@vyos# commit
Site-Level Aggregation Identifier (SLA-ID) must be unique per prefix-delegation!
[[interfaces ethernet eth0]] failed
Commit failed
[edit]
vyos@vyos# exit discard
exit
vyos@vyos:~$ show version
Jan 11 2021, 8:28 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T3201: Operational command "show log all" is not working for RADIUS users as Resolved.
Jan 11 2021, 7:07 PM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T3201: Operational command "show log all" is not working for RADIUS users from Open to In progress.
Jan 11 2021, 7:03 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T3206: Unable to delete destination NAT rule.

Will be fixed in rolling releases starting 20210112. Thanks for reporting.

Jan 11 2021, 6:44 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T3206: Unable to delete destination NAT rule as Resolved.
Jan 11 2021, 6:44 PM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T3206: Unable to delete destination NAT rule from Open to In progress.
Jan 11 2021, 6:26 PM · VyOS 1.3 Equuleus (1.3.0)
nadeu added a comment to T3159: L2TP MTU mismatch between client and server.

Hello.
Do you need something else?

Jan 11 2021, 6:22 PM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po renamed T3197: Update Linux Kernel to v4.19.166 from Update Linux Kernel to v4.19.165 to Update Linux Kernel to v4.19.166.
Jan 11 2021, 6:21 PM · VyOS 1.2 Crux (VyOS 1.2.7)
c-po closed T3208: Does not possible to change user password as Resolved.
Jan 11 2021, 6:04 PM · VyOS 1.3 Equuleus (1.3.0)
sempervictus added a comment to T3151: Decide on the final list of packages for 1.3.

systemd-container - easiest way to get containers rapidly into VyOS because all of the infrastructure (systemd) is already there.
We build our images with it, works fine.

Jan 11 2021, 4:01 PM · VyOS 1.3 Equuleus (1.3.0)
sempervictus added a comment to T3167: Recurring bugs in Intel NIC drivers.

You might want to take a look at the patches in T228 - its a 5.4 build with a bunch of C fixup, but using the Intel proprietary drivers for an in-tree build (permits signing of all modules at kernel build time).
We have this running on a host with a dual-port 740 (not doing all that much, some routing, NAT, ACL, and a couple of OpenVPN and IPSEC tunnels), and it seems to be fairly happy in that low intensity environment.
I can try to beat up on it and see how it fares, but probably worth a try.

Jan 11 2021, 3:53 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a project to T2518: Support NAT for ipv6(NPT): VyOS 1.4 Sagitta.
Jan 11 2021, 3:11 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T3203: BGP unnumbered - commit fails when route-reflector-client is set.

Needs to add that expression with the right logic.

$VAR(../../../../@) != $VAR(../../../interface/remote-as/@)
Jan 11 2021, 2:30 PM · VyOS 1.4 Sagitta
jack9603301 updated the task description for T3137: Let VLAN aware bridge approach the behavior of professional equipment.
Jan 11 2021, 2:22 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
jack9603301 updated the task description for T3137: Let VLAN aware bridge approach the behavior of professional equipment.
Jan 11 2021, 2:06 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
nikty created T3209: Load balancing rules in firewall.
Jan 11 2021, 2:05 PM · VyOS 1.4 Sagitta
jack9603301 updated the task description for T3137: Let VLAN aware bridge approach the behavior of professional equipment.
Jan 11 2021, 2:05 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Unknown Object (User) assigned T3208: Does not possible to change user password to c-po.
Jan 11 2021, 2:00 PM · VyOS 1.3 Equuleus (1.3.0)
Unknown Object (User) created T3208: Does not possible to change user password.
Jan 11 2021, 2:00 PM · VyOS 1.3 Equuleus (1.3.0)
craterman created T3207: OSPF does not convert the area to NSSA .
Jan 11 2021, 11:46 AM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.4 Sagitta
Viacheslav closed T3198: OSPF database filtering issue as Resolved.
Jan 11 2021, 11:39 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T3203: BGP unnumbered - commit fails when route-reflector-client is set.

1.2 crux the same behavior

Jan 11 2021, 11:34 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T3198: OSPF database filtering issue.
Jan 11 2021, 11:34 AM · VyOS 1.3 Equuleus (1.3.0)
joolli created T3206: Unable to delete destination NAT rule.
Jan 11 2021, 11:23 AM · VyOS 1.3 Equuleus (1.3.0)
craterman added a comment to T3198: OSPF database filtering issue.

I have just re-checked. It works fine for everyone LSAs type.
summary and asbr-summary also works fine

Jan 11 2021, 10:17 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 updated the task description for T3137: Let VLAN aware bridge approach the behavior of professional equipment.
Jan 11 2021, 9:04 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
jack9603301 updated subscribers of T3137: Let VLAN aware bridge approach the behavior of professional equipment.

@runar @c-po A new PR has been created and can be reviewed

Jan 11 2021, 9:04 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
jack9603301 added a comment to T3137: Let VLAN aware bridge approach the behavior of professional equipment.

PR:
https://github.com/vyos/vyos-1x/pull/677
https://github.com/vyos/vyatta-cfg-system/pull/134
https://github.com/vyos/vyos-documentation/pull/424

Jan 11 2021, 9:03 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav added a comment to T3198: OSPF database filtering issue.

external works for me, can you re-check?

vyos@r5-roll:~$ show ip ospf database external 10.20.40.0
Jan 11 2021, 8:55 AM · VyOS 1.3 Equuleus (1.3.0)
craterman added a comment to T3198: OSPF database filtering issue.

It works fine for show ip ospf database router x.x.x.x and show ip ospf database network x.x.x.x
It does not work for show ip ospf database <summary|asbr-summary|external> x.x.x.x
The output of these commands is empty.

Jan 11 2021, 8:32 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T3194: OSPF redistribution metric issue.

Can be cherry-picked for equuleus and crux

Jan 11 2021, 8:30 AM · VyOS 1.2 Crux (VyOS 1.2.7)
Viacheslav added a comment to T3194: OSPF redistribution metric issue.

PR https://github.com/vyos/vyatta-cfg-quagga/pull/62

Jan 11 2021, 8:26 AM · VyOS 1.2 Crux (VyOS 1.2.7)
Unknown Object (User) added a project to T3205: Does not possible to configure tunnel mode gre-bridge: VyOS 1.4 Sagitta.
Jan 11 2021, 7:11 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Unknown Object (User) created T3205: Does not possible to configure tunnel mode gre-bridge.
Jan 11 2021, 6:29 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Jan 10 2021

Viacheslav claimed T3194: OSPF redistribution metric issue.
Jan 10 2021, 8:46 PM · VyOS 1.2 Crux (VyOS 1.2.7)
aficustree added a comment to T3134: DHCPv6 DUID configuration node missing.

I'm on 1.4-rolling-202101100217 and it looks like the DUID command is gone at the interface level or system level. Besides overwriting the DUID file (which seems to not persist between upgrades), is there a good strategy here if the use-case doesn't require a custom DUID per interface?

Jan 10 2021, 8:40 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T3204: Performance system option destroy defined sysctl custom params.

tuned is known for altering values inside sysctl, its written on the projects web page - I simply did not thought about that issue when installing tuned.

Jan 10 2021, 6:40 PM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Unknown Object (User) created T3204: Performance system option destroy defined sysctl custom params.
Jan 10 2021, 6:21 PM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
hagbard renamed T3202: Enable wireguard debug messages by default from dynamic debug for wireguard to enable wireguard debug messages per default.
Jan 10 2021, 5:46 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
hagbard triaged T3202: Enable wireguard debug messages by default as Normal priority.
Jan 10 2021, 5:46 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
hagbard added a comment to T3202: Enable wireguard debug messages by default.

Sounds good, syslog needs to be set to level debug for kernel facility, so it's per default only visible in the journal logs. Tested with a few tunnels, it's not very noisy, even with 20 tunnels.

Jan 10 2021, 5:45 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Viacheslav added a comment to T3173: Need 'nopmtudisc' option for tunnel interface.

PR https://github.com/vyos/vyos-1x/pull/676

Jan 10 2021, 4:52 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po closed T3178: Migrate vyatta-op-quagga to vyos-1x as Resolved.
Jan 10 2021, 3:54 PM · VyOS 1.3 Equuleus (1.3.0)
tom.siewert updated the task description for T3203: BGP unnumbered - commit fails when route-reflector-client is set.
Jan 10 2021, 3:04 PM · VyOS 1.4 Sagitta
tom.siewert created T3203: BGP unnumbered - commit fails when route-reflector-client is set.
Jan 10 2021, 12:46 PM · VyOS 1.4 Sagitta
craterman added a comment to T3198: OSPF database filtering issue.

Ok. I'll do it

Jan 10 2021, 11:13 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav changed the status of T3198: OSPF database filtering issue from Confirmed to Needs testing.
Jan 10 2021, 10:43 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T3198: OSPF database filtering issue.

@craterman Will be fixed in the next rolling release, can you check it tomorrow?

Jan 10 2021, 10:43 AM · VyOS 1.3 Equuleus (1.3.0)
craterman added a comment to T3194: OSPF redistribution metric issue.

FRR value for the same command

frr.PNG (260×600 px, 17 KB)

Jan 10 2021, 9:31 AM · VyOS 1.2 Crux (VyOS 1.2.7)
c-po added a comment to T1466: Add EAPOL login support.

Thank you for the response. There is also a smoketest wmbedded which runs during ISO ge erstion ensuring this always works:

Jan 10 2021, 8:14 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T3202: Enable wireguard debug messages by default.

+1 for default, IPsec is also very chatty

Jan 10 2021, 8:12 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
Unknown Object (User) added a comment to T3202: Enable wireguard debug messages by default.

Why not add this by default?

Jan 10 2021, 7:41 AM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
aficustree added a comment to T1466: Add EAPOL login support.

just confirming 1.4-rolling-202101100217 works as well

Jan 10 2021, 3:43 AM · VyOS 1.3 Equuleus (1.3.0)

Jan 9 2021

trae32566 closed T2467: Restarting flow accounting fails with systemd error as Resolved.

This is fixed:

trae@cr01b-vyos:~$ restart flow-accounting
trae@cr01b-vyos:~$ show ver
Jan 9 2021, 7:50 PM · VyOS 1.3 Equuleus (1.3.0)
hagbard added a comment to T3202: Enable wireguard debug messages by default.

output looks then like below and is being logged to ringbuffer as well as systemd-journald:

Jan 9 2021, 7:37 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
hagbard changed Difficulty level from unknown to normal on T3202: Enable wireguard debug messages by default.
Jan 9 2021, 7:35 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
hagbard edited projects for T3202: Enable wireguard debug messages by default, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
Jan 9 2021, 7:35 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
hagbard claimed T3202: Enable wireguard debug messages by default.
Jan 9 2021, 7:35 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
hagbard created T3202: Enable wireguard debug messages by default.
Jan 9 2021, 7:35 PM · VyOS 1.5 Circinus, VyOS 1.4 Sagitta
trae32566 created T3201: Operational command "show log all" is not working for RADIUS users.
Jan 9 2021, 7:26 PM · VyOS 1.3 Equuleus (1.3.0)
hagbard created T3200: LRO can't be tuned off on KVM.
Jan 9 2021, 7:08 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T3198: OSPF database filtering issue.

PR https://github.com/vyos/vyos-1x/pull/675

Jan 9 2021, 6:56 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav claimed T3198: OSPF database filtering issue.
Jan 9 2021, 6:29 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav changed the status of T3198: OSPF database filtering issue from Open to Confirmed.
Jan 9 2021, 6:29 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T3199: Update Linux Kernel to v5.4.88 / 5.10.6.

When the vyos kernel is higher than 5.8+, you can start the formal test before merging nat66

Jan 9 2021, 5:09 PM · VyOS 1.3 Equuleus (1.3.0)
c-po changed Difficulty level from unknown to easy on T3199: Update Linux Kernel to v5.4.88 / 5.10.6.
Jan 9 2021, 5:05 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T3199: Update Linux Kernel to v5.4.88 / 5.10.6 as Resolved.
Jan 9 2021, 5:05 PM · VyOS 1.3 Equuleus (1.3.0)