Page MenuHomeVyOS Platform
Feed All Stories

Mar 5 2021

guertinf added a comment to T3390: Expansion of a range in an address-group doesn't include the new addresses after commit.

Same thing on

vyos@vyos:~$ show vers
Version:          VyOS 1.2.7-epa1
Release Train:    crux
Mar 5 2021, 3:52 PM · VyOS 1.3 Equuleus (1.3.5)
guertinf added a comment to T3390: Expansion of a range in an address-group doesn't include the new addresses after commit.

The same behavior happens with VyOS-1.3.0-rc1

vyos@vyos:~$ show vers
Mar 5 2021, 3:22 PM · VyOS 1.3 Equuleus (1.3.5)
guertinf created T3390: Expansion of a range in an address-group doesn't include the new addresses after commit.
Mar 5 2021, 2:30 PM · VyOS 1.3 Equuleus (1.3.5)
SrividyaA added a comment to T3387: Command "Monitor vpn ipsec" is not working.

Submitted this PR to fix the issue:

Mar 5 2021, 1:42 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta, VyOS 1.2 Crux
Cheeze_It added a comment to T3319: VXLAN uses ttl 1 (auto) by default.

I know my opinion is....really not that important but I would *highly* recommend going to maximum TTL of 255 or at minimum 127. TTL is a very hard thing to troubleshoot most of the time and therefore it's almost never worth going lower than maximum for IP TTL.

Mar 5 2021, 6:45 AM · VyOS 1.3 Equuleus (1.3.0)
Unknown Object (User) added a comment to T3319: VXLAN uses ttl 1 (auto) by default.

@c-po , yes now it works. Maybe we need to define ttl=16 as the default value?

Mar 5 2021, 6:40 AM · VyOS 1.3 Equuleus (1.3.0)

Mar 4 2021

Viacheslav changed the status of T3388: show interfaces doesn't display pppoeX from Open to Confirmed.
Mar 4 2021, 10:53 PM · VyOS 1.4 Sagitta
pasik created T3389: gretap tunnel type missing from vyos documentation after renamed from gre-bridge.
Mar 4 2021, 10:33 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav placed T366: SNMP Query for BGP Tunnels Returns IPv4 Tunnels Only up for grabs.
Mar 4 2021, 10:23 PM · VyOS 1.4 Sagitta
Viacheslav placed T2748: "show vpn ike sa" shows state "down" when tunnel is up up for grabs.
Mar 4 2021, 10:22 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav closed T2803: OSPFv3 - Default-Information Originate [always] as Wontfix.

FRR doesn't have such a function.

Mar 4 2021, 10:19 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T3388: show interfaces doesn't display pppoeX.

Expected output, in VyOS 1.3.0-rc1 works fine

showvyos@vyos:~$ show int
Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down
Interface        IP Address                        S/L  Description
---------        ----------                        ---  -----------
eth0             -                                 u/u  WAN01-pppoe
eth1             10.0.0.1/24                       u/u  LAN
eth2             192.0.2.12/24                     u/u  WAN02-dhcp
eth3             -                                 u/u  
lo               127.0.0.1/8                       u/u  
                 ::1/128                                
pppoe0           10.1.1.101/32                     u/u
Mar 4 2021, 9:49 PM · VyOS 1.4 Sagitta
Viacheslav updated the task description for T3388: show interfaces doesn't display pppoeX.
Mar 4 2021, 9:47 PM · VyOS 1.4 Sagitta
Viacheslav updated the task description for T3388: show interfaces doesn't display pppoeX.
Mar 4 2021, 9:43 PM · VyOS 1.4 Sagitta
Viacheslav renamed T3388: show interfaces doesn't display pppoeX from show interfaces don't show pppoeX to show interfaces doesn't display pppoeX.
Mar 4 2021, 9:43 PM · VyOS 1.4 Sagitta
Viacheslav created T3388: show interfaces doesn't display pppoeX.
Mar 4 2021, 9:42 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T3386: PPPoE-server don't start with local authentication from Open to Needs testing.
Mar 4 2021, 9:02 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav changed the status of T3211: ability to redistribute ISIS into other routing protocols from Open to Needs testing.
Mar 4 2021, 8:52 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po added a comment to T3386: PPPoE-server don't start with local authentication.

Backport to 1.3 done

Mar 4 2021, 8:49 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po moved T3386: PPPoE-server don't start with local authentication from Backport Candidates to Finished on the VyOS 1.4 Sagitta board.
Mar 4 2021, 8:49 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po moved T3386: PPPoE-server don't start with local authentication from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Mar 4 2021, 8:49 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav moved T3386: PPPoE-server don't start with local authentication from Need Triage to Backport Candidates on the VyOS 1.4 Sagitta board.
Mar 4 2021, 8:48 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav added a comment to T3211: ability to redistribute ISIS into other routing protocols.

PR https://github.com/vyos/vyos-1x/pull/761

Mar 4 2021, 8:45 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po changed the status of T3319: VXLAN uses ttl 1 (auto) by default from Open to In progress.
Mar 4 2021, 8:40 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T3319: VXLAN uses ttl 1 (auto) by default.

VyOS 1.2 has this hardcoded: /opt/vyatta/share/vyatta-cfg/templates/interfaces/vxlan/node.def: VXLAN_TTL="ttl 16"

Mar 4 2021, 8:39 PM · VyOS 1.3 Equuleus (1.3.0)
c-po moved T3381: Change GRE tunnel failed from Need Triage to Backport Candidates on the VyOS 1.4 Sagitta board.
Mar 4 2021, 8:33 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta
c-po changed the status of T3381: Change GRE tunnel failed from In progress to Needs testing.
Mar 4 2021, 8:33 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta
c-po added a project to T3381: Change GRE tunnel failed: VyOS 1.2 Crux (VyOS 1.2.7).
Mar 4 2021, 8:17 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta
c-po added a comment to T3381: Change GRE tunnel failed.

Issue also exists in VyOS 1.2.7-rc1

Mar 4 2021, 8:17 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta
Viacheslav reopened T3211: ability to redistribute ISIS into other routing protocols as "Open".

Unexpected redistribution for isis VyOS 1.4-rolling-202103040218

Mar 4 2021, 7:43 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav triaged T3383: BGP IPv6 neighbor statements configuration not normalized. as Normal priority.
Mar 4 2021, 7:27 PM · VyOS 1.3 Equuleus (1.3.8), VyOS 1.4 Sagitta (1.4.0-GA)
Viacheslav triaged T3387: Command "Monitor vpn ipsec" is not working as Normal priority.
Mar 4 2021, 7:23 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta, VyOS 1.2 Crux
Viacheslav added a comment to T3386: PPPoE-server don't start with local authentication.

PR https://github.com/vyos/vyos-1x/pull/760

Mar 4 2021, 7:11 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav claimed T3386: PPPoE-server don't start with local authentication.
Mar 4 2021, 7:04 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Unknown Object (User) added a comment to T3319: VXLAN uses ttl 1 (auto) by default.

@c-po does not work on 1.4-rolling-202103040218

vyos@vyos# sudo ip -d link show dev vxlan241
7: vxlan241: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue master br241 state UNKNOWN mode DEFAULT group default qlen 1000
    link/ether fe:08:e3:3c:d4:ab brd ff:ff:ff:ff:ff:ff promiscuity 1 minmtu 68 maxmtu 65535 
    vxlan id 241 group 239.0.0.241 dev eth0 srcport 0 0 dstport 8472 tos inherit ttl auto ageing 300 udpcsum noudp6zerocsumtx noudp6zerocsumrx

On the middle router in traffic dump I see TTL=1

18:59:29.029090 IP (tos 0x0, ttl 1, id 24806, offset 0, flags [none], proto UDP (17), length 100)
    10.1.2.2.52948 > 239.0.0.241.8472: OTV, flags [I] (0x08), overlay 0, instance 241
Mar 4 2021, 7:00 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav closed T3377: show interfaces throws error as Resolved.
Mar 4 2021, 5:54 PM · VyOS 1.4 Sagitta
Unknown Object (User) added a comment to T3386: PPPoE-server don't start with local authentication.

There is a bug exactly with client-ip-pool range, config generated with the mistake

[ip-pool]
gw-ip-address=10.1.1.1
10.1.1.100-10.1.1.111

but expected

10.1.1.100-111
Mar 4 2021, 5:51 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
SrividyaA claimed T3387: Command "Monitor vpn ipsec" is not working.
Mar 4 2021, 5:37 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta, VyOS 1.2 Crux
SrividyaA created T3387: Command "Monitor vpn ipsec" is not working.
Mar 4 2021, 5:37 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta, VyOS 1.2 Crux
Viacheslav added a project to T3386: PPPoE-server don't start with local authentication: VyOS 1.4 Sagitta.
Mar 4 2021, 5:37 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav created T3386: PPPoE-server don't start with local authentication.
Mar 4 2021, 5:34 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
sergip added a comment to T2044: RPKI doesn't boot properly.

@primoz, I have exactly the same issue with "1.4-rolling-202103011828 (sagitta)"

Mar 4 2021, 5:23 PM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
stepler added a comment to T3271: qemu-kvm grub issue.

PR https://github.com/vyos/vyos-1x/pull/759

Mar 4 2021, 4:30 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
stepler added a comment to T3271: qemu-kvm grub issue.

I also attempted to fix this bug by writing to grub.cfg.new, calling fsync() on it, renaming it to grub.cfg, and calling fsync() on the directory. Unfortunately, I still encountered an unbootable system.

Mar 4 2021, 3:36 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav closed T2861: route-map "set community additive" not working correctly as Resolved.
Mar 4 2021, 3:14 PM · VyOS 1.3 Equuleus (1.3.0)
linuxludo added a comment to T3374: IPv6 GRE Tunnel issues.

You can review the patch here

Mar 4 2021, 9:21 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T3382: Error creating Console Server.

Also, It can't check that cmd on hypervisor

Mar 4 2021, 8:34 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Mar 3 2021

stepler added a comment to T3271: qemu-kvm grub issue.

I attempted to fix this bug by journaling all filesystem data (ext3/4 mount option data=journal). Unfortunately, I still encountered an unbootable system.

Mar 3 2021, 9:45 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po changed the status of T3381: Change GRE tunnel failed from Open to In progress.
Mar 3 2021, 8:59 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta
c-po changed the status of T3371: Replace netplugd by udev rules from Open to On hold.
Mar 3 2021, 8:41 PM
c-po closed T2966: tunnel: add new encapsulation types ip6tnl and ip6gretap, a subtask of T3072: Migrate tunnel interfaces to new get_config_dict() approach, as Resolved.
Mar 3 2021, 8:37 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2966: tunnel: add new encapsulation types ip6tnl and ip6gretap as Resolved.
Mar 3 2021, 8:37 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2966: tunnel: add new encapsulation types ip6tnl and ip6gretap.

@Viacheslav we already have ip6tnl support.

Mar 3 2021, 7:39 PM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 moved T3385: Support for disabling ARP responses from In Progress to Need Triage on the VyOS 1.4 Sagitta board.
Mar 3 2021, 7:23 PM · VyOS 1.4 Sagitta
jack9603301 closed T3385: Support for disabling ARP responses as Invalid.
Mar 3 2021, 7:23 PM · VyOS 1.4 Sagitta
jack9603301 claimed T3385: Support for disabling ARP responses.
Mar 3 2021, 7:13 PM · VyOS 1.4 Sagitta
jack9603301 moved T3385: Support for disabling ARP responses from Need Triage to In Progress on the VyOS 1.4 Sagitta board.
Mar 3 2021, 7:13 PM · VyOS 1.4 Sagitta
jack9603301 created T3385: Support for disabling ARP responses.
Mar 3 2021, 7:13 PM · VyOS 1.4 Sagitta
jack9603301 moved T3384: Support UDP bandwidth testing from Need Triage to In Progress on the VyOS 1.4 Sagitta board.
Mar 3 2021, 5:11 PM · VyOS 1.4 Sagitta
jack9603301 added a comment to T3384: Support UDP bandwidth testing.

PR: https://github.com/vyos/vyos-1x/pull/758

Mar 3 2021, 4:38 PM · VyOS 1.4 Sagitta
jack9603301 claimed T3384: Support UDP bandwidth testing.
Mar 3 2021, 4:28 PM · VyOS 1.4 Sagitta
jack9603301 created T3384: Support UDP bandwidth testing.
Mar 3 2021, 4:27 PM · VyOS 1.4 Sagitta
janegil created T3383: BGP IPv6 neighbor statements configuration not normalized..
Mar 3 2021, 1:13 PM · VyOS 1.3 Equuleus (1.3.8), VyOS 1.4 Sagitta (1.4.0-GA)
linuxludo added a comment to T3374: IPv6 GRE Tunnel issues.

Due to the limited ability to open a pull request on the linux kernel's github repository, I had to submit the patch to netfilter maintainers team by email.

Mar 3 2021, 12:59 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T3374: IPv6 GRE Tunnel issues.

@linuxludo Can you share a link?

Mar 3 2021, 12:37 PM · VyOS 1.4 Sagitta
linuxludo added a comment to T3374: IPv6 GRE Tunnel issues.

It seems to be a BUG in netfilter conntrack module with GRE protocol over IPv6.
I patched the conntrack module and it now works as expected.
I just submit this patch to the netfilter maintainers.
Wait & See...

Mar 3 2021, 10:53 AM · VyOS 1.4 Sagitta
trae32566 added a comment to T3271: qemu-kvm grub issue.

I've had this bite me a few times now as well, but I wasn't able to pin it down before to being a bug.

Mar 3 2021, 5:12 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
trae32566 awarded T3271: qemu-kvm grub issue a Like token.
Mar 3 2021, 5:11 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
jnliujie created T3382: Error creating Console Server.
Mar 3 2021, 4:45 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Mar 2 2021

c-po added a comment to T3319: VXLAN uses ttl 1 (auto) by default.

Please retest with the latest 1.4 rolling version. TTL can now be set.

Mar 2 2021, 11:11 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T3381: Change GRE tunnel failed.

It seems it some upstream issue

vyos@r-roll01# sudo ip tunnel add tun22 mode gre local 203.0.113.1 remote any 
[edit]
vyos@r-roll01# sudo ip tunnel change tun22 mode gre local 203.0.113.1 remote 203.0.113.254
add tunnel "tun22" failed: Invalid argument
[edit]
vyos@r-roll01#
Mar 2 2021, 9:49 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta
Viacheslav added a project to T3381: Change GRE tunnel failed: VyOS 1.4 Sagitta.

For 1.4 the same fail
Config

set interfaces tunnel tun1 address '10.20.30.1/30'
set interfaces tunnel tun1 encapsulation 'gre'
set interfaces tunnel tun1 source-address '192.168.122.11'
set interfaces tunnel tun1 multicast 'disable'
commit
set interfaces tunnel tun1 remote 192.168.122.12
commit
Mar 2 2021, 9:21 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta
Viacheslav added a comment to T3379: Add global-parameters name-server for dhcpv6-server.

Updated PR
I replace raw dhcpv6 global-parameters with leafNode.

Mar 2 2021, 8:58 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav renamed T3379: Add global-parameters name-server for dhcpv6-server from Add global-parameters for dhcpv6-server to Add global-parameters name-server for dhcpv6-server.
Mar 2 2021, 8:56 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po added a comment to T3371: Replace netplugd by udev rules.

Looks like it is not possible using udev: https://stackoverflow.com/questions/40676914/how-to-set-up-a-udev-rule-for-eth-link-down-link-up

Mar 2 2021, 7:58 PM
Viacheslav created T3381: Change GRE tunnel failed.
Mar 2 2021, 5:44 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta
Viacheslav added a comment to T3377: show interfaces throws error.

@FileGo will be fixed in the next rolling release.

Mar 2 2021, 4:05 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T3377: show interfaces throws error from Confirmed to Needs testing.
Mar 2 2021, 4:04 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T3377: show interfaces throws error.

PR https://github.com/vyos/vyos-1x/pull/757

Mar 2 2021, 3:19 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T3377: show interfaces throws error.

To reproduce, add one tunnel

Mar 2 2021, 12:21 PM · VyOS 1.4 Sagitta
Viacheslav triaged T3377: show interfaces throws error as High priority.
Mar 2 2021, 12:00 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T3377: show interfaces throws error from Open to Confirmed.
Mar 2 2021, 11:59 AM · VyOS 1.4 Sagitta
Viacheslav added a subtask for T2651: Generate CLI abstraction for options passed to CURL and SSH client: T3378: commit-archive source-address broken for IPv6 addresses.
Mar 2 2021, 11:53 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a parent task for T3378: commit-archive source-address broken for IPv6 addresses: T2651: Generate CLI abstraction for options passed to CURL and SSH client.
Mar 2 2021, 11:53 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T3378: commit-archive source-address broken for IPv6 addresses.

I think it related T2651

Mar 2 2021, 11:52 AM · VyOS 1.3 Equuleus (1.3.0)
olofl added a comment to T1097: Make firewall groups work everywhere that's appropropriate.

ipsec policys, policy prefix-lists,

Mar 2 2021, 10:46 AM · VyOS 1.4 Sagitta
FileGo added a comment to T3377: show interfaces throws error.

Additional info: it seems not to show any tunnel interfaces.

Mar 2 2021, 10:41 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T3379: Add global-parameters name-server for dhcpv6-server.

PR https://github.com/vyos/vyos-1x/pull/756

Mar 2 2021, 8:46 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
linuxludo created T3380: "show vpn ike sa" does not display IPv6 peers.
Mar 2 2021, 8:21 AM · VyOS 1.3 Equuleus ( 1.3.1), VyOS 1.4 Sagitta
Viacheslav created T3379: Add global-parameters name-server for dhcpv6-server.
Mar 2 2021, 7:37 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
trae32566 created T3378: commit-archive source-address broken for IPv6 addresses.
Mar 2 2021, 6:51 AM · VyOS 1.3 Equuleus (1.3.0)
yakatz awarded T1097: Make firewall groups work everywhere that's appropropriate a Like token.
Mar 2 2021, 6:21 AM · VyOS 1.4 Sagitta
FileGo created T3377: show interfaces throws error.
Mar 2 2021, 12:31 AM · VyOS 1.4 Sagitta
FileGo closed T3375: Interface becomes up at boot even when disabled as Resolved.

Works great, interface remains disabled on boot, as configured.

Mar 2 2021, 12:20 AM · VyOS 1.4 Sagitta

Mar 1 2021

Viacheslav closed T3220: Load balancing fails on wireguard interfaces as Invalid.

It seems a bug with your configuration. It is incorrect.

Mar 1 2021, 10:42 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav changed the status of T3317: OpenVPN config issue from Open to Needs testing.
Mar 1 2021, 10:33 PM · VyOS 1.3 Equuleus (1.3.0)
scj643 added a comment to T3376: Setting ipv6 address autoconf causes all interfaces besides the target to lose their IP.

This seems to also happen with setting dhcpv6 as well.

Mar 1 2021, 9:47 PM · VyOS 1.4 Sagitta
olofl added a comment to T3344: Per VRF dynamic routing support.

I vote for option 1.

Mar 1 2021, 9:38 PM · VyOS 1.4 Sagitta
scj643 added a comment to T3376: Setting ipv6 address autoconf causes all interfaces besides the target to lose their IP.

This also happens if you delete ipv6 address autoconf and commit. Where it will drop all IP addresses besides the target interface's.

Mar 1 2021, 9:12 PM · VyOS 1.4 Sagitta
scj643 created T3376: Setting ipv6 address autoconf causes all interfaces besides the target to lose their IP.
Mar 1 2021, 8:54 PM · VyOS 1.4 Sagitta