Page MenuHomeVyOS Platform

fernando (maidana)
User

Projects

User Details

User Since
May 11 2021, 12:36 PM (36 w, 4 d)

Recent Activity

Wed, Jan 19

fernando added a comment to T4195: [OSPF-ECMP]enable set maximun-path.

PR : https://github.com/vyos/vyos-1x/pull/1179

Wed, Jan 19, 4:11 PM · VyOS 1.4 Sagitta
fernando created T4195: [OSPF-ECMP]enable set maximun-path.
Wed, Jan 19, 4:00 PM · VyOS 1.4 Sagitta

Fri, Jan 14

fernando renamed T4185: [VPN-IPSEC] not boot config after reboot from [VPN-IPSEC] no boot config after reboot to [VPN-IPSEC] not boot config after reboot.
Fri, Jan 14, 9:50 PM · VyOS 1.3 Equuleus
fernando created T4185: [VPN-IPSEC] not boot config after reboot.
Fri, Jan 14, 9:44 PM · VyOS 1.3 Equuleus

Thu, Jan 13

fernando added a comment to T4181: Firewall ipv6-network-group - incorrect description on helper .

PR: https://github.com/vyos/vyos-1x/pull/1165

Thu, Jan 13, 7:22 PM · VyOS 1.4 Sagitta
fernando created T4181: Firewall ipv6-network-group - incorrect description on helper .
Thu, Jan 13, 6:54 PM · VyOS 1.4 Sagitta

Wed, Jan 12

fernando added a comment to T4144: Firewall address-group - Improve error messages.

yes, you are right:

Wed, Jan 12, 1:38 PM · VyOS 1.4 Sagitta

Tue, Jan 11

fernando added a comment to T4144: Firewall address-group - Improve error messages.

yes , i'm using this version :

Tue, Jan 11, 8:38 PM · VyOS 1.4 Sagitta
fernando added a comment to T4144: Firewall address-group - Improve error messages.

I've checked with this new build , it works with validator ranges/port :

Tue, Jan 11, 8:06 PM · VyOS 1.4 Sagitta
fernando closed T4149: [Firewall-IPV6] Error delete Fw rules on VIF/INT as Resolved.
Tue, Jan 11, 6:34 PM · VyOS 1.4 Sagitta
fernando added a comment to T4149: [Firewall-IPV6] Error delete Fw rules on VIF/INT.

I've been testing and it works :

Tue, Jan 11, 6:33 PM · VyOS 1.4 Sagitta
fernando added a comment to T4163: [BMP-BGP] Routing monitoring feature.

well , I think it should be something like this :

Tue, Jan 11, 12:48 PM · VyOS 1.4 Sagitta

Mon, Jan 10

fernando added a comment to T4163: [BMP-BGP] Routing monitoring feature.

this PR https://github.com/vyos/vyos-1x/pull/1088 only include how to enable daemon , but it doesn't add VyOS-cli commands in BGP (the daemon only allows you to enable it).

Mon, Jan 10, 8:43 PM · VyOS 1.4 Sagitta
fernando created T4163: [BMP-BGP] Routing monitoring feature.
Mon, Jan 10, 8:05 PM · VyOS 1.4 Sagitta

Thu, Jan 6

fernando created T4149: [Firewall-IPV6] Error delete Fw rules on VIF/INT.
Thu, Jan 6, 9:39 PM · VyOS 1.4 Sagitta

Fri, Dec 31

fernando added a comment to T4125: Feature Request: bridge STP BPDU translation.

I want to leave a comment , it's also common that customers don't know that PVST is enabled by default (and send bpdu peer VLANS), So it's possible to mitigate it also using nf rules , below leave a example:

Fri, Dec 31, 2:59 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus ( 1.3.1)

Tue, Dec 28

fernando added a comment to T4110: [IPV6-SSH/DNS} enable IPv6 link local adresses as listen-address %eth0.

thanks you @Viacheslav

Tue, Dec 28, 5:21 PM · VyOS 1.3 Equuleus ( 1.3.1), VyOS 1.4 Sagitta

Mon, Dec 27

fernando created T4110: [IPV6-SSH/DNS} enable IPv6 link local adresses as listen-address %eth0.
Mon, Dec 27, 2:35 PM · VyOS 1.3 Equuleus ( 1.3.1), VyOS 1.4 Sagitta

Dec 10 2021

fernando renamed T4066: [IPsec] Tuning options from [IPsec} tunning options to [IPsec] Tuning options.
Dec 10 2021, 3:54 PM · VyOS 1.4 Sagitta
fernando created T4066: [IPsec] Tuning options.
Dec 10 2021, 3:20 PM · VyOS 1.4 Sagitta

Nov 2 2021

fernando added a comment to T3959: MPLS L3VPN IPv6 address-family over IPv4 MPLS backbone.

Yes, It seems that rfc doesn't work , also I found this issues :
https://github.com/FRRouting/frr/issues/5824

Nov 2 2021, 1:37 PM · VyOS 1.4 Sagitta

Oct 19 2021

fernando updated the task description for T3915: Create op-mode top-level wrapper for ssh/scp command -VyOS 1.4.
Oct 19 2021, 5:45 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
fernando created T3915: Create op-mode top-level wrapper for ssh/scp command -VyOS 1.4.
Oct 19 2021, 5:22 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Oct 15 2021

fernando added a comment to T3892: BGP Route Reflects to all neighbors when one neighbor has route-reflect-client.

In the real-world to avoid it they used cluster-id / a session BGP between them , it's the idea of RR :

Oct 15 2021, 3:48 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Oct 8 2021

fernando added a comment to T3655: NAT Problem with VRF.

not yet , we 've been trying with different CT but it's not solve the main problem . I understand that disabling conntrack is not possible because is used for nat.

Oct 8 2021, 5:22 PM · VyOS 1.3 Equuleus (1.3.0), Known issue, VyOS 1.4 Sagitta

Oct 7 2021

fernando added a comment to T3892: BGP Route Reflects to all neighbors when one neighbor has route-reflect-client.

and It's the way to set on Vyos:

set protocols bgp <asn> parameters cluster-id <id>
Oct 7 2021, 6:50 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
fernando added a comment to T3892: BGP Route Reflects to all neighbors when one neighbor has route-reflect-client.

there is a recommendation that if you use RR in the same hierarchy and avoid loop , we need to set 'cluster-id'

Oct 7 2021, 6:35 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Oct 6 2021

fernando added a comment to T3655: NAT Problem with VRF.

yes, It is an issues related with the conntrack+ nat/vrf leak , I share something where the problem is clearer :

Oct 6 2021, 5:59 PM · VyOS 1.3 Equuleus (1.3.0), Known issue, VyOS 1.4 Sagitta

Sep 12 2021

fernando created T3825: [DHCP]removes default route .
Sep 12 2021, 4:24 PM · VyOS 1.2 Crux (VyOS 1.2.9)

Aug 19 2021

fernando added a comment to T3759: [L3VPN] VPNv4/VPNv6 add commands .

I have a good news, we already able to setting vpnv4 on Vyos ! thanks for your support , I was testing it and didn't have problems .let me show:

Aug 19 2021, 3:44 PM · VyOS 1.4 Sagitta

Aug 17 2021

fernando added a comment to T3759: [L3VPN] VPNv4/VPNv6 add commands .

@c-po Thanks!!! :)

Aug 17 2021, 8:44 PM · VyOS 1.4 Sagitta
fernando changed Version from - to - VyOS 1.4-rolling-202108081830 on T3759: [L3VPN] VPNv4/VPNv6 add commands .
Aug 17 2021, 1:44 PM · VyOS 1.4 Sagitta
fernando added a project to T3759: [L3VPN] VPNv4/VPNv6 add commands : VyOS 1.4 Sagitta.
Aug 17 2021, 1:43 PM · VyOS 1.4 Sagitta
fernando created T3759: [L3VPN] VPNv4/VPNv6 add commands .
Aug 17 2021, 1:41 PM · VyOS 1.4 Sagitta

Aug 11 2021

fernando added a comment to T3741: [BGP] default no-ipv4-unicast - by default.

Thanks for you comment ! it's good consider that options

Aug 11 2021, 9:46 PM · VyOS 1.4 Sagitta
fernando created T3741: [BGP] default no-ipv4-unicast - by default.
Aug 11 2021, 7:02 PM · VyOS 1.4 Sagitta

Aug 10 2021

fernando added a comment to T3709: Snmp: Allow enable MIDs/OIDs ipCidrRouteTable.

i've been testing this new feature in our last release and it works well :

Aug 10 2021, 9:16 PM · VyOS 1.4 Sagitta
fernando added a comment to T3709: Snmp: Allow enable MIDs/OIDs ipCidrRouteTable.

Sure ! i'll test this feature and let you know !

Aug 10 2021, 12:31 PM · VyOS 1.4 Sagitta

Jul 28 2021

fernando created T3709: Snmp: Allow enable MIDs/OIDs ipCidrRouteTable.
Jul 28 2021, 7:44 PM · VyOS 1.4 Sagitta

Jul 19 2021

fernando updated subscribers of T3655: NAT Problem with VRF.

thanks for your comment , we are testing first with @rherold , I understand that your case is similar but it's not the same (you have an explicit route-leaking between default vrf and vrf X ). So we also need to test it and try to sure the version solved it .

Jul 19 2021, 3:30 PM · VyOS 1.3 Equuleus (1.3.0), Known issue, VyOS 1.4 Sagitta

Jul 15 2021

fernando triaged T3684: Bridge doesn't show stp states / macs as Low priority.
Jul 15 2021, 9:57 PM · VyOS 1.4 Sagitta

Jul 12 2021

fernando added a comment to T3661: [vrf} route-leaking missing command.

good lab, thanks for your time! I want to leave a comment , I used the syntax that you recommend and it worked well ( VyOS 1.3.0-rc5):

Jul 12 2021, 1:55 PM · VyOS 1.3 Equuleus
fernando added a comment to T3661: [vrf} route-leaking missing command.
Jul 12 2021, 1:34 PM · VyOS 1.3 Equuleus

Jul 7 2021

fernando created T3666: VRF bind-to-all - it doesn't apply the settings ..
Jul 7 2021, 4:24 PM · VyOS 1.3 Equuleus

Jul 5 2021

fernando added a comment to T3661: [vrf} route-leaking missing command.

yes , but when you use 'set protocols static route 10.0.0.0/8 next-hop 1.1.1.1 next-hop-vrf red' it doesn't install the prefix in the default table :

Jul 5 2021, 1:25 PM · VyOS 1.3 Equuleus

Jul 2 2021

fernando created T3661: [vrf} route-leaking missing command.
Jul 2 2021, 10:57 PM · VyOS 1.3 Equuleus

Jun 30 2021

fernando added a comment to T3655: NAT Problem with VRF.

Hi ruben

Jun 30 2021, 10:52 PM · VyOS 1.3 Equuleus (1.3.0), Known issue, VyOS 1.4 Sagitta
fernando added a comment to T3655: NAT Problem with VRF.

Hi ruben,

Jun 30 2021, 12:21 AM · VyOS 1.3 Equuleus (1.3.0), Known issue, VyOS 1.4 Sagitta

Jun 28 2021

fernando added a comment to T3657: BGP neighbors ipv6 not able to establish with IPv6 link-local addresses.
In T3657#97243, @c-po wrote:

I wonder why you use ebgp multihop wirh link local addresses?

I used it only for testing (but this command increment ttl in two).

Jun 28 2021, 7:39 PM · VyOS 1.4 Sagitta
fernando added a comment to T3657: BGP neighbors ipv6 not able to establish with IPv6 link-local addresses.

I add an extra commentary , it is config on FRR:

Jun 28 2021, 2:47 PM · VyOS 1.4 Sagitta
fernando created T3657: BGP neighbors ipv6 not able to establish with IPv6 link-local addresses.
Jun 28 2021, 1:45 PM · VyOS 1.4 Sagitta

Jun 22 2021

fernando added a comment to T3638: Passwords With Dollar Sign Set Incorrectly.

yes, I am using the following version :

Jun 22 2021, 7:28 PM · VyOS 1.4 Sagitta

Jun 21 2021

fernando added a comment to T3638: Passwords With Dollar Sign Set Incorrectly.

I 've been checking this behavior with a different password , also I used the same password as you . But I couldn't reproduce the issue , both cases i add $ in the word and change the hash, let me show :

Jun 21 2021, 11:20 PM · VyOS 1.4 Sagitta

Jun 8 2021

fernando added a comment to T3605: Allow to set prefer-global for ipv6-next-hop.

I create PR to add this new feature with the syntax to vyos-cli and frr commnads ,

Jun 8 2021, 12:03 AM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus

Jun 7 2021

fernando renamed T3607: [route-map] set ipv6 next-hop prefer-global from [route-mapset ipv6 next-hop prefer-global to [route-map] set ipv6 next-hop prefer-global.
Jun 7 2021, 11:59 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta
fernando created T3607: [route-map] set ipv6 next-hop prefer-global.
Jun 7 2021, 11:48 PM · VyOS 1.3 Equuleus, VyOS 1.4 Sagitta

Jun 6 2021

fernando added a comment to T3600: DHCP Interface static route breaks PBR.

I think it is also related https://phabricator.vyos.net/T3522

Jun 6 2021, 9:53 PM · VyOS 1.4 Sagitta
fernando added a comment to T3600: DHCP Interface static route breaks PBR.

I have checked that functionality , i can replicate the issues .although there is a workaround if you "set protocols static table 11 route 0.0.0.0/0 dhcp-interface " any interfaces , it doesn't see in your table ( table 10 /11 ) we can see theses routes in the default table , let me show :

Jun 6 2021, 9:50 PM · VyOS 1.4 Sagitta

Jun 3 2021

fernando added a comment to T3578: Prefix-List(6) update cause empty prefix-list(6).

Sorry for confusing with the status of the ticket , I wanted to put in pending . I was trying to replicate the issues in a lab environment but it wasn't possible , let me show :

Jun 3 2021, 10:52 PM · VyOS 1.4 Sagitta

May 31 2021

fernando closed T3578: Prefix-List(6) update cause empty prefix-list(6) as Resolved.
May 31 2021, 10:38 PM · VyOS 1.4 Sagitta
fernando added a comment to T3578: Prefix-List(6) update cause empty prefix-list(6).

Hi

I tried to replicate that issue with the same version but I couldn't , let me show

vyos@vipv6-lp# run show version

Version: VyOS 1.4-rolling-202104270417
Release Train: sagitta

Built by: autobuild@vyos.net
Built on: Wed 28 Apr 2021 01:17 UTC

May 31 2021, 12:04 AM · VyOS 1.4 Sagitta
fernando added a comment to T3578: Prefix-List(6) update cause empty prefix-list(6).
May 31 2021, 12:00 AM · VyOS 1.4 Sagitta

May 24 2021

fernando added a comment to T2807: IPv6 Link-Local Address - Automatically generation/configuration on GRE Interfaces.

I`m Sorry! it maybe was an error that version , actually I try with Vyos 1.3-rc4 and It works well :

May 24 2021, 9:41 PM · VyOS 1.3 Equuleus

May 23 2021

fernando added a comment to T2807: IPv6 Link-Local Address - Automatically generation/configuration on GRE Interfaces.

I can reproduce that behavior, although I use another VyOS version " VyOS 1.3-rolling-202104210642" with a virtual machine :

May 23 2021, 11:36 PM · VyOS 1.3 Equuleus

May 21 2021

fernando added a comment to T3564: Multiple BGP Confederation Peers Not Allowed.

I can confirm that beheivor , settings on FRR :

May 21 2021, 7:41 PM · VyOS 1.4 Sagitta
fernando added a comment to T3566: Add L2vpn instance for mpls .

Before that configuration , we should add the mpls settings in our cli-vyos , it is an example:

May 21 2021, 1:04 PM · VyOS 1.4 Sagitta

May 20 2021

fernando created T3566: Add L2vpn instance for mpls .
May 20 2021, 11:05 PM · VyOS 1.4 Sagitta