VyOS 1.3 based on Debian 9 Stretch
The same build procedure is tested fine on x86_64 and armhf without this issue
I'm very interested in this as well. Especially when you do lots of filtering based on ipsets that contain adresses from multiple zones, inclusion can save you a lot of redundancy.
Fri, Sep 13
pushed to current too and rebuilt kernel in CI successfully.
I just cross compiled it successfully. CI uses a sed right now to correct it, all paths are now generic.
What I currently can't do is actually testing the binaries on a real device, I would appreciate it if you can do that.
Thu, Sep 12
@drac , before implementation cli command for restarting l2tp I need explanation how to reproduce issue when daemon is died. Can you detailed explain this?
Implementation advanced ppp-options
vyos@vyos# set vpn l2tp remote-access ppp-options Possible completions: lcp-echo-failure Maximum number of Echo-Requests may be sent without valid reply lcp-echo-interval LCP echo-requests/sec
I'm thinking about trying to run either tayga or jool as a docker container inside of VyOS. Has anyone tried something like this? If I wrote a guide on how to do this I wonder if it would be an OK temporary solution until it's integrated into VyOS.
We have openned a ticket on VyOS support, and they have find the solution.
We had to add this configuration :
Wed, Sep 11
@rcit Is that still a relevant issue?
nothing added we would need.
I have been trying this new feature out.
- I had configured an MTU value and I had some sessions connected, I realised I had set it incorrect so I modified it to the correct value. On commit I received an error (sorry I don't have it at present) but to the extent that accel-pppd was not running on localhost:2004.
I had to reboot the router to get it working again.
Helo, @MarcSim. I want reproduced your issue in lab, can you provide your ipsec configuration from Central VyOS and one of site
show configuration commands | match ipsec | strip-private
@alkersan I think you need to create the link via Makefile in vyos-1x. At least I don't know of any possibility doing that within the xml.