@florin Do you plan to make a pull request?
Feed All Stories
Aug 14 2022
Aug 14 2022
dmbaturin edited projects for T4280: dhcp-relay: does not work with wireguard uplink, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4281: System users migration can lead to inaccessible shell, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4291: Consolidate component version read/write functions, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4292: Rewrite vyatta-save-config.pl to Python, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4295: Use config_tree instead of legacy loadFile in vyos-load-config.py, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4312: Telegraf configuration doesn't accept IPs for URL, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4316: Update save-config/load-config, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4318: Add delete_tag to configtree.py, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4328: Large MTU on 1.3.1-S1, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin renamed T4415: Include license/copyright files in the image but remove user documentation from /usr/share/doc to reduce its size from Back documentation into the build to Include license/copyright files in the image but remove user documentation from /usr/share/doc to reduce its size.
dmbaturin edited projects for T4422: WAN load-balance status failed on all interfaces if one of them failed, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4443: Wan Load Balancing Multiple Regressions, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4452: WAN load-balancing exclude rules break PBR, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4463: Missing check in edit command, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4466: intel i225-v nic does not detect link after boot, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin added a comment to T4466: intel i225-v nic does not detect link after boot.
dmbaturin edited projects for T4475: route-map does not support ipv6 peer, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4478: Firewall ipv6 p2p option failed , added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4519: DHCPv6: "set show dhcpv6 server leases" should show DUID instead of IAID_DUID, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4529: Backtrace for config-archive when netwofrk is not configured, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4530: Need MTU warning when CCP is on, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4537: MACsec not working with cipher gcm-aes-256, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4588: BGP Peer Group Scaling issues, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4584: hostap: create custom package build, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4566: Cannot log in on serial console on Equuleus v1.3.1, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
syncer edited Description on VyOS 1.3 Equuleus.
dmbaturin renamed T4572: Add an option to force interface MTU to the value received from DHCP from Add an option to force interface MTU to the value received by DHCP to Add an option to force interface MTU to the value received from DHCP.
dmbaturin renamed T4572: Add an option to force interface MTU to the value received from DHCP from Remove default values in MTU nodes to Add an option to force interface MTU to the value received by DHCP.
jagekurt added a comment to T4609: Unable to Restart Container VyOS 1.4.
Great, thanks
Viacheslav added a comment to T4609: Unable to Restart Container VyOS 1.4.
It seems after this commit https://github.com/vyos/vyos-1x/commit/08cb762347208b21a8cbf81f7b35707d7e6dd4ac
I’ll take a look later
syncer edited projects for T3976: Missing prefix-list and access-list option from ipv6 route-map, added: VyOS 1.3 Equuleus (1.3.2); removed VyOS 1.3 Equuleus (1.3.0-epa3).
syncer edited projects for T3988: Feature Request: IPsec Multiple local/remote prefix for the tunnel, added: VyOS 1.3 Equuleus (1.3.2); removed VyOS 1.3 Equuleus (1.3.0-epa3).
Aug 13 2022
Aug 13 2022
sempervictus added a comment to T4607: Configuration commit fails on kernel 5.15 (and likely others) in libboost's filesystem::copy_file from EXEDEV on the FUSE UnionFS mounts.
Got the PR working:
sempervictus added a comment to T4607: Configuration commit fails on kernel 5.15 (and likely others) in libboost's filesystem::copy_file from EXEDEV on the FUSE UnionFS mounts.
Using the pull requests filesystem copy, same place, new error:
vyos@vyos-515:~$ cat /var/log/vyatta/*log cp[/opt/vyatta/config/tmp/new_config_1615]->[/opt/vyatta/config/tmp/tmp_1615/work] cp w->tw failed[unknown exception] cp[/opt/vyatta/config/tmp/new_config_2665]->[/opt/vyatta/config/tmp/tmp_2665/work] cp w->tw failed[unknown exception] vyos@vyos-515:~$ dpkg -l|grep vyatta-cfg ii libvyatta-cfg-dev 0.102.0+vyos2+current5 amd64 libvyatta-cfg development package ii libvyatta-cfg1 0.102.0+vyos2+current5 amd64 vyatta-cfg back-end library ii libvyatta-cfg1-dbgsym 0.102.0+vyos2+current5 amd64 debug symbols for libvyatta-cfg1 ii vyatta-cfg 0.102.0+vyos2+current5 amd64 VyOS configuration system ii vyatta-cfg-dbgsym 0.102.0+vyos2+current5 amd64 debug symbols for vyatta-cfg ii vyatta-cfg-qos 0.15.42+vyos2+current1 all VyOS Qos configuration templates/scripts ii vyatta-cfg-system 0.20.44+vyos2+current22 amd64 VyOS system-level configuration vyos@vyos-515:~$ uname -r 5.15.59-amd64-vyos-sv vyos@vyos-515:~$
If Linux maintainers backport the delta causing this to 5.10, it could become a rather pressing concern, but for now merely a show-stopper in terms of moving past 5.10LTS.
sempervictus added a comment to T4607: Configuration commit fails on kernel 5.15 (and likely others) in libboost's filesystem::copy_file from EXEDEV on the FUSE UnionFS mounts.
Created a pull request implementing a rudimentary fall-through-on-exception to standard API from the Boost version @ https://github.com/vyos/vyatta-cfg/pull/49
Have not built it yet, nor am i a formal C++ developer (hackers are informal everything developers and rarely formal anything developers), so would appreciate eyes on and sanity checks.
Exception can probably be scoped better to only trip on EXEDEV but i dont see a logical problem with falling-through like this on other errors (is this a bad assumption?).
Viacheslav added a comment to T538: Support for network mapping in NAT.
PR https://github.com/vyos/vyos-1x/pull/1466
Let me know if there is what you are expecting,
requires more tests
set nat static rule 10 destination address '10.0.1.1' set nat static rule 10 inbound-interface 'eth0' set nat static rule 10 translation address '192.168.1.1'
Aug 12 2022
Aug 12 2022
Viacheslav added a comment to T3670: Option to disable HTTP port 80 redirect.
@artooro Did you try listen-port option for this case?
set service https api gql set service https api keys id KID key 'foo' set service https api socket set service https virtual-host foo listen-port '2580'
Check:
vyos@r14# sudo netstat -tulpn | grep nginx tcp 0 0 0.0.0.0:2580 0.0.0.0:* LISTEN 3570/nginx: master tcp6 0 0 :::2580 :::* LISTEN 3570/nginx: master [edit] vyos@r14#
Viacheslav added a comment to T4122: interface ip address config missing after upgrade from 1.2.8 to 1.3.0 (when redirect is configured?).
@n.fort Create please PR for 1.3
Aug 11 2022
Aug 11 2022
Viacheslav changed the status of T4603: Need a config option to specify NAS-IP-Address for vpn l2tp from In progress to Needs testing.
@aserkin Will be present in the next rolling release.
Viacheslav updated subscribers of T4605: Firewall change default table names.
Viacheslav updated the task description for T4605: Firewall change default table names.
Viacheslav added a comment to T4374: ipv6 address drops from interface, but network still active.
@ajgnet Could you show routes after this bug?
sudo ip -6 route show sudo ip -6 route get 2607:f8b0:4006:80d::200e
Aug 10 2022
Aug 10 2022
Viacheslav changed the status of T4485: OpenVPN: Allow multiple CAs certificates from In progress to Needs testing.
Viacheslav added a comment to T4595: DPD interval and timeout do not work in DMVPN.
Viacheslav added a comment to T4603: Need a config option to specify NAS-IP-Address for vpn l2tp.
hard awarded T4502: Consider implementing (NAT/other) flow table offload a Like token.
Viacheslav changed the status of T4603: Need a config option to specify NAS-IP-Address for vpn l2tp from Open to In progress.
m4rcu5 added a comment to T4602: DHCP `ping-check` enabled by default.
I've verified this behavior with 1.4-rolling-202207290217 and 1.4-rolling-202204250217.
Viacheslav added a comment to T4118: IPsec syntax overhaul.
aserkin added a comment to T4603: Need a config option to specify NAS-IP-Address for vpn l2tp.
Hi Viacheslav
Sorry, i probably misspelled the config option. Actually it's availabe at [radius] section of accel-ppp.conf.
Below is the [radius] section from my /run/accel-pppd/l2tp.conf after i changed
/usr/libexec/vyos/conf_mode/vpn_l2tp.py:
n.fort added a comment to T4602: DHCP `ping-check` enabled by default.
What version you are using?
Viacheslav added a project to T4603: Need a config option to specify NAS-IP-Address for vpn l2tp: VyOS 1.4 Sagitta.
Viacheslav added a comment to T4603: Need a config option to specify NAS-IP-Address for vpn l2tp.
@aserkin Could you send an example of the required accel-ppp section? And how do you see this command in VyOS CLI?
aserkin changed Version from - to 1.4 on T4603: Need a config option to specify NAS-IP-Address for vpn l2tp.
Aug 9 2022
Aug 9 2022
m4rcu5 added a comment to T4602: DHCP `ping-check` enabled by default.
Allow me to proof the opposite.
n.fort added a comment to T4602: DHCP `ping-check` enabled by default.
As remarked and as expected, this option is not enable by default.
Proofs:
- Fist scenario: no ping-check option introduced in configuration:
ajgnet added a comment to T2518: Support NAT for ipv6(NPT).
Yes, would be great to fully support dynamic prefix when the prefix is not known
Viacheslav added a comment to T4547: Show vpn ipsec sa show unexpected prefix 'B' in packets.
Will be fixed in https://github.com/vyos/vyos-1x/pull/1458
n.fort changed the status of T4598: nat66 - Add exclude options, a subtask of T2518: Support NAT for ipv6(NPT), from In progress to Needs testing.
Aug 8 2022
Aug 8 2022
Viacheslav added a comment to T4602: DHCP `ping-check` enabled by default.
ping-check shouldn't be allowed by default
To enable it you have to set set service dhcp-server shared-network-name Lan01 ping-check
There is no configuration in generated .conf:
vyos@r14# cat /run/dhcp-server/dhcpd.conf | grep ping [edit] vyos@r14#
n.fort added a parent task for T4598: nat66 - Add exclude options: T2518: Support NAT for ipv6(NPT).
marekm added a comment to T4600: Closing IPV6CP by client closes PPPoE link completely, even if IPv6 is optional.
See also https://github.com/accel-ppp/accel-ppp/issues/57
Testing this patch, PPPoE session with the Phicomm router now stays up, the missing part after "else" is to remove IPv6 configuration from ppp interface (not sure how to do it properly).
diff diff --git a/accel-pppd/ppp/ppp_ipv6cp.c b/accel-pppd/ppp/ppp_ipv6cp.c index 1194b31..2bac31b 100644 --- a/accel-pppd/ppp/ppp_ipv6cp.c +++ b/accel-pppd/ppp/ppp_ipv6cp.c @@ -738,7 +738,10 @@ static void ipv6cp_recv(struct ppp_handler_t*h) if (conf_ppp_verbose) log_ppp_info2("recv [IPV6CP TermReq id=%x]\n", hdr->id); ppp_fsm_recv_term_req(&ipv6cp->fsm); - ap_session_terminate(&ipv6cp->ppp->ses, TERM_USER_REQUEST, 0); + if (conf_ipv6 == IPV6_REQUIRE) + ap_session_terminate(&ipv6cp->ppp->ses, TERM_USER_REQUEST, 0); + else + ppp_layer_passive(ipv6cp->ppp, &ipv6cp->ld); break; case TERMACK: if (conf_ppp_verbose)
a.apostoliuk added a comment to T4537: MACsec not working with cipher gcm-aes-256.
I have tested macsec with gcm-aes-256. It works. (1.4-rolling-202208080217)
a.apostoliuk added a comment to T4538: Macsec does not work correctly when the interface status changes..
I have tested on 1.4-rolling-202208080217.
The first problem was fixed.
The second problem is not fixed
Viacheslav closed T4586: Add to NAT66: SNAT destination address and DNAT source address. as Resolved.
Aug 7 2022
Aug 7 2022
marekm added a comment to T4600: Closing IPV6CP by client closes PPPoE link completely, even if IPv6 is optional.
Log messages - http://91.224.224.43/phicomm/phicomm6.log
PPPoE server config:
RyVolodya added a comment to T4598: nat66 - Add exclude options.
Hello, This functionality for nat66 is described here:
https://phabricator.vyos.net/T4586
Aug 6 2022
Aug 6 2022
jack9603301 added a comment to T4598: nat66 - Add exclude options.
hi, you can set this to a subtask of my task
Viacheslav changed the status of T4596: "show openconnect-server sessions" command does not work in the openconnect module, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from Open to In progress.
Viacheslav changed the status of T4596: "show openconnect-server sessions" command does not work in the openconnect module from Open to In progress.