- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Aug 16 2022
Aug 16 2022
jestabro moved T3993: Extend HTTP API GraphQL support from Need Triage to In Progress on the VyOS 1.4 Sagitta board.
jestabro edited projects for T3993: Extend HTTP API GraphQL support, added: VyOS 1.4 Sagitta, VyOS 1.3 Equuleus; removed VyOS 1.3 Equuleus (1.3.2).
Viacheslav added a comment to T4617: VRF specification is needed for telegraf prometheus-client listen-address <address> .
Viacheslav changed the status of T4596: "show openconnect-server sessions" command does not work in the openconnect module, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from In progress to Needs testing.
Viacheslav changed the status of T4596: "show openconnect-server sessions" command does not work in the openconnect module from In progress to Needs testing.
Viacheslav changed the status of T4618: Traffic policy not set on virtual interfaces from Open to In progress.
Viacheslav changed the status of T4601: dhcp : relay agent IP address issue. from Confirmed to Needs testing.
c-po moved T4584: hostap: create custom package build from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
c-po closed T4584: hostap: create custom package build, a subtask of T4537: MACsec not working with cipher gcm-aes-256, as Resolved.
m.korobeinikov changed the status of T4601: dhcp : relay agent IP address issue. from Open to Confirmed.
Aug 15 2022
Aug 15 2022
c-po edited projects for T4616: openconnect: KeyError: 'local_users', added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus.
PR for VyOS 1.3 https://github.com/vyos/vyos-1x/pull/1470
c-po moved T4614: OpenConnect split-dns directive from Need Triage to Finished on the VyOS 1.4 Sagitta board.
c-po edited projects for T4565: vlan aware bridge not working with - Kernel: T3318: update Linux Kernel to v5.4.205 #249 , added: VyOS 1.3 Equuleus (1.3.2); removed VyOS 1.3 Equuleus (1.3.3).
aserkin renamed T4615: vpn sessions-columns configuration needed from vpn session-columns configuration needed to vpn sessions-columns configuration needed.
Viacheslav edited projects for T4082: Add op mode command to restart ldpd, added: VyOS 1.3 Equuleus; removed VyOS 1.3 Equuleus (1.3.2).
Viacheslav closed T3988: Feature Request: IPsec Multiple local/remote prefix for the tunnel as Resolved.
Nice. Is this syntax supported in vyos or it needs some development?
It is possible but with specific syntax
I found some examples:
nft insert rule ip filter VYOS_FW_FORWARD ip 'saddr & 0.255.0.255 != 0.11.0.13' counter
OK. I was trying to migrate from an EdgeRouter and this is a rule I used to have.
set service upnp rule 10 action allow set service upnp rule 10 external-port-range 1024-65536 set service upnp rule 10 internal-port-range 1024-65536 set service upnp rule 10 ip 10.0.0.1/24
@patrickli nftables is not engine for iptables. It is programs to work with netfilter
That's why I ask for the real example
root@r1:/home/vyos# nft insert rule ip6 filter INPUT ip6 saddr ::dead:beef/::ffff:ffff counter
Error: syntax error, unexpected string, expecting number
insert rule ip6 filter INPUT ip6 saddr ::dead:beef/::ffff:ffff counter
^^^^^^^^^^^
root@r1:/home/vyos#Yeah nftables is just the engine for iptables. EdgeOS supports this syntax.
@patrickli In 1.4 we don't use iptables, we use nftables
LInk to nftables example will be helpful.
@patrickli Could you attach an example of VyOS configuration with set service upnp xxx
If you manually change upnpd.conf does it work correctly?
Viacheslav changed the status of T4609: Unable to Restart Container VyOS 1.4 from Open to In progress.
Viacheslav changed the status of T4595: DPD interval and timeout do not work in DMVPN from Open to Needs testing.
Aug 14 2022
Aug 14 2022
@dmbaturin, here are the changes I made: https://github.com/vyos/vyos-build/compare/equuleus...fvlaicu:equuleus
I'm using the 1.4 kernel in 1.3.
dmbaturin edited projects for T4393: sstp: add support for configuring host-name (SNI), added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4412: commit archive: reboot not working with sftp, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin closed T4421: Add support for floating point numbers in the numeric validator as Resolved.
dmbaturin edited projects for T4455: smp-affinity required by some platforms but doesn't exists in the CLI, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T2763: New SNMP resource request - SNMP over TCP, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4511: IPv6 DNS lookup, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4533: Radius clients don’t have simple permissions, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4565: vlan aware bridge not working with - Kernel: T3318: update Linux Kernel to v5.4.205 #249 , added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T3474: Revisit storing syntax version of interface definitions in XML file, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T3977: dhcp-relay-agent uses "physical" IP instead of vrrp IP, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T3980: vrrp transition-script validator makes warning fatal and also causes a python NameError exception, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T3987: An error occurs after stopping snmpd in frr, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T3988: Feature Request: IPsec Multiple local/remote prefix for the tunnel, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4040: RADIUS: NAS-ID configuration, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4062: VRRP IPSEC-AH : sequence number xxxxxxx already processed. Packet dropped. Local(xxxxxxx), added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4072: Feature Request: Firewall on bridge interfaces, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4091: Progress bar support for HTTP uploads, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4094: Missed conntrack-sync failover-mechanism cluster, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4117: Does not possible to configure PoD/CoA for L2TP vpn, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4139: Wireless interface member of a bridge, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4143: Wrong section for Cloud-init User-Data for OVA images, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4185: [VPN-IPSEC] not boot config after reboot, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4190: Add commit comment to the configuration API., added: VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4206: Policy Based Routing with DHCP Interface Issue, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4207: Policy Based Route Issue with Rules for Multiple Tables, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4208: Issues With More than Two Default Route Paths, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4214: [DHCP] static route dhcp-interface issues, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4222: Support for TWAMP as round-trip metric, added: VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4238: Support for overriding XML properties in the template preprocessor, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin closed T4260: Extend vyos.configdict.node_changed() to support recursiveness, a subtask of T4203: Reconfigure DHCP client interface causes brief outages, as Resolved.
dmbaturin closed T4260: Extend vyos.configdict.node_changed() to support recursiveness, a subtask of T4235: Add config tree diff algorithm, as Resolved.