Page MenuHomeVyOS Platform

VyOS 1.3 Equuleus ( 1.3.1)Milestone
ArchivedPublic

Members

  • This project does not have any members.
  • View All

Watchers

  • This project does not have any watchers.
  • View All

Recent Activity

Aug 30 2022

syncer moved T4100: Firewall increase maximum number of rules from Need Triage to Finished on the VyOS 1.3 Equuleus ( 1.3.1) board.
Aug 30 2022, 2:31 PM · VyOS 1.3 Equuleus ( 1.3.1), VyOS 1.4 Sagitta
syncer moved T4169: INVALID from Need Triage to Finished on the VyOS 1.3 Equuleus ( 1.3.1) board.
Aug 30 2022, 2:31 PM · VyOS 1.3 Equuleus ( 1.3.1)
syncer moved T4310: CVE-2022-0778: infinite loop in OpenSSL certificate parsing from Need Triage to Finished on the VyOS 1.3 Equuleus ( 1.3.1) board.
Aug 30 2022, 2:31 PM · VyOS 1.3 Equuleus ( 1.3.1)
syncer archived VyOS 1.3 Equuleus ( 1.3.1).
Aug 30 2022, 2:30 PM
syncer moved T4311: CVE-2021-4034: local privilege escalation in PolKit from Need Triage to Finished on the VyOS 1.3 Equuleus ( 1.3.1) board.
Aug 30 2022, 2:30 PM · VyOS 1.3 Equuleus ( 1.3.1)
syncer moved T4377: generate tech-support archive includes previous archives from Need Triage to Finished on the VyOS 1.3 Equuleus ( 1.3.1) board.
Aug 30 2022, 2:30 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus ( 1.3.1)
syncer moved T4457: L2TP/IPSec Remote Access VPN does not work as expected in 1.3.1-S1 from Need Triage to Finished on the VyOS 1.3 Equuleus ( 1.3.1) board.
Aug 30 2022, 2:30 PM · VyOS 1.3 Equuleus ( 1.3.1)
syncer moved T4476: Next steps after installation is not communicated properly to new users from Need Triage to Finished on the VyOS 1.3 Equuleus ( 1.3.1) board.
Aug 30 2022, 2:30 PM · VyOS 1.3 Equuleus ( 1.3.1)

Aug 26 2022

initramfs updated the task description for T4648: PPPoE: Ignore default router from RA when PPPoE default-route is set to none.
Aug 26 2022, 1:55 AM · VyOS 1.3 Equuleus (1.3.3)
initramfs created T4648: PPPoE: Ignore default router from RA when PPPoE default-route is set to none.
Aug 26 2022, 1:37 AM · VyOS 1.3 Equuleus (1.3.3)

Aug 14 2022

dmbaturin closed T4260: Extend vyos.configdict.node_changed() to support recursiveness, a subtask of T4203: Reconfigure DHCP client interface causes brief outages, as Resolved.
Aug 14 2022, 6:16 PM · VyOS 1.3 Equuleus ( 1.3.1), VyOS 1.4 Sagitta

Aug 11 2022

danhusan closed T4476: Next steps after installation is not communicated properly to new users as Resolved.
Aug 11 2022, 7:04 PM · VyOS 1.3 Equuleus ( 1.3.1)

Aug 1 2022

Viacheslav changed the status of T4582: Router-advert: Preferred lifetime cannot equal valid lifetime in PIOs from Open to Needs testing.
Aug 1 2022, 7:54 AM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta

Jul 31 2022

initramfs updated the task description for T4582: Router-advert: Preferred lifetime cannot equal valid lifetime in PIOs.
Jul 31 2022, 10:28 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
initramfs updated the task description for T4582: Router-advert: Preferred lifetime cannot equal valid lifetime in PIOs.
Jul 31 2022, 10:16 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
initramfs created T4582: Router-advert: Preferred lifetime cannot equal valid lifetime in PIOs.
Jul 31 2022, 10:12 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta

Jul 30 2022

Viacheslav added a comment to T4423: `reset dns forwarding all` can't clear all dns cache.

@dongjunbo What do you mean?
Could you send a real example? I don't see any issues (VyOS 1.3-stable-202207280515).

Jul 30 2022, 1:53 PM · VyOS 1.3 Equuleus (1.3.3)

Jul 25 2022

Viacheslav added a comment to T4271: bgp: show ipv6 bgp summary doesn't display neighbor information.

@NikolayP Try the next command:

Jul 25 2022, 9:32 AM · VyOS 1.3 Equuleus (1.3.3)

Jul 18 2022

c-po closed T4228: bond: OS error thrown when two bonds use the same member as Resolved.
Jul 18 2022, 11:21 AM · VyOS 1.3 Equuleus ( 1.3.1), VyOS 1.4 Sagitta

Jul 10 2022

c-po reopened T4228: bond: OS error thrown when two bonds use the same member as "In progress".
Jul 10 2022, 7:55 PM · VyOS 1.3 Equuleus ( 1.3.1), VyOS 1.4 Sagitta

Jul 6 2022

Viacheslav changed the status of T4381: OpenVPN: Add "Tunnel IP" column in "show openvpn server" operational command from In progress to Needs testing.
Jul 6 2022, 4:09 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
a.apostoliuk claimed T4513: Webproxy monitor commands do not work.
Jul 6 2022, 8:21 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
a.apostoliuk created T4513: Webproxy monitor commands do not work.
Jul 6 2022, 8:21 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta

Jun 30 2022

NikolayP added a comment to T4457: L2TP/IPSec Remote Access VPN does not work as expected in 1.3.1-S1.

Maybe it depends on the version of accel-ppp.
In 1.2.8:

Jun 30 2022, 7:56 AM · VyOS 1.3 Equuleus ( 1.3.1)

Jun 28 2022

Viacheslav closed T4457: L2TP/IPSec Remote Access VPN does not work as expected in 1.3.1-S1 as Invalid.
Jun 28 2022, 8:38 AM · VyOS 1.3 Equuleus ( 1.3.1)
e.khudiyev added a comment to T4457: L2TP/IPSec Remote Access VPN does not work as expected in 1.3.1-S1.

The problem seems to be in these lines:

set vpn l2tp remote-access authentication local-users username test static-ip '172.25.255.1'
set vpn l2tp remote-access client-ip-pool start '172.25.255.1'
set vpn l2tp remote-access client-ip-pool stop '172.25.255.14'

Replacing "static IP" with 172.25.255.2 makes it work in VyOS 1.3.1

set vpn l2tp remote-access authentication local-users username test static-ip '172.25.255.2'

Full corrected config for 1.3.1 from the first post:

set interfaces dummy dum4 address '4.4.4.4/32'
set interfaces ethernet eth0 address 'dhcp'
set interfaces ethernet eth1 address '192.168.6.31/24'
set service ssh
set vpn ipsec ipsec-interfaces interface 'eth1'
set vpn ipsec nat-networks allowed-network 0.0.0.0/0
set vpn ipsec nat-traversal 'enable'
set vpn l2tp remote-access authentication local-users username test password 'test'
set vpn l2tp remote-access authentication local-users username test static-ip '172.25.255.2'
set vpn l2tp remote-access authentication mode 'local'
set vpn l2tp remote-access authentication require 'mschap-v2'
set vpn l2tp remote-access client-ip-pool start '172.25.255.1'
set vpn l2tp remote-access client-ip-pool stop '172.25.255.14'
set vpn l2tp remote-access idle '1800'
set vpn l2tp remote-access ipsec-settings authentication mode 'pre-shared-secret'
set vpn l2tp remote-access ipsec-settings authentication pre-shared-secret 'test'
set vpn l2tp remote-access ipsec-settings ike-lifetime '3600'
set vpn l2tp remote-access ipsec-settings lifetime '3600'
set vpn l2tp remote-access outside-address '192.168.6.31'
Jun 28 2022, 8:29 AM · VyOS 1.3 Equuleus ( 1.3.1)

Jun 22 2022

dongjunbo updated the task description for T4479: generate wireguard client command prompt has some error.
Jun 22 2022, 10:51 AM · VyOS 1.3 Equuleus (1.3.3)
dongjunbo created T4479: generate wireguard client command prompt has some error.
Jun 22 2022, 10:50 AM · VyOS 1.3 Equuleus (1.3.3)

Jun 21 2022

danhusan created T4476: Next steps after installation is not communicated properly to new users.
Jun 21 2022, 12:31 PM · VyOS 1.3 Equuleus ( 1.3.1)

Jun 12 2022

NikolayP added a comment to T4457: L2TP/IPSec Remote Access VPN does not work as expected in 1.3.1-S1.

The problem seems to be in these lines:

Jun 12 2022, 3:56 AM · VyOS 1.3 Equuleus ( 1.3.1)

Jun 11 2022

dmbaturin changed Why the issue appeared? from none to implementation-mistake on T3686: Bridging OpenVPN tap with no local-address breaks.
Jun 11 2022, 8:38 AM · VyOS 1.3 Equuleus ( 1.3.1), VyOS 1.4 Sagitta
dmbaturin renamed T3380: "show vpn ike sa" does not display IPv6 peers from Show vpn ike sa with IPv6 remote peer to "show vpn ike sa" does not display IPv6 peers.
Jun 11 2022, 8:37 AM · VyOS 1.3 Equuleus ( 1.3.1), VyOS 1.4 Sagitta

Jun 10 2022

n.fort added a comment to T4457: L2TP/IPSec Remote Access VPN does not work as expected in 1.3.1-S1.

Same as Viacheslav. No issues on my tests in Ubuntu.

Jun 10 2022, 12:56 PM · VyOS 1.3 Equuleus ( 1.3.1)

Jun 6 2022

Viacheslav added a comment to T4457: L2TP/IPSec Remote Access VPN does not work as expected in 1.3.1-S1.

Don't have any issues with Ubuntu

set interfaces dummy dum0 address '192.0.2.1/32'
set interfaces dummy dum4 address '203.0.113.1/24'
set interfaces ethernet eth0 address '192.168.122.11/24'
set interfaces ethernet eth0 description 'WAN'
set vpn ipsec ipsec-interfaces interface 'eth0'
set vpn l2tp remote-access authentication local-users username test password 'test'
set vpn l2tp remote-access authentication mode 'local'
set vpn l2tp remote-access client-ip-pool start '192.168.255.2'
set vpn l2tp remote-access client-ip-pool stop '192.168.255.254'
set vpn l2tp remote-access ipsec-settings authentication mode 'pre-shared-secret'
set vpn l2tp remote-access ipsec-settings authentication pre-shared-secret 'secret'
set vpn l2tp remote-access outside-address '192.0.2.1'
Jun 6 2022, 10:03 AM · VyOS 1.3 Equuleus ( 1.3.1)

Jun 5 2022

Dmitry added a comment to T4457: L2TP/IPSec Remote Access VPN does not work as expected in 1.3.1-S1.

@NikolayP , Looks like MTU and MPPE issue. Stoping daemon does not related to this I think.

Jun 5 2022, 6:56 PM · VyOS 1.3 Equuleus ( 1.3.1)
kajiuray created T4459: API service with VRF doesn't work in 1.3.1.
Jun 5 2022, 9:39 AM · VyOS 1.3 Equuleus (1.3.3)

Jun 3 2022

NikolayP added a comment to T4457: L2TP/IPSec Remote Access VPN does not work as expected in 1.3.1-S1.

Not sure if this is relevant to the task.
But once when shutting down a VM with VyOS 1.3.1-S1, it took a long time to shut down:

image.png (117×1 px, 10 KB)

Jun 3 2022, 2:42 PM · VyOS 1.3 Equuleus ( 1.3.1)
NikolayP triaged T4457: L2TP/IPSec Remote Access VPN does not work as expected in 1.3.1-S1 as High priority.
Jun 3 2022, 2:31 PM · VyOS 1.3 Equuleus ( 1.3.1)

Jun 1 2022

marekm updated the task description for T4453: dhclient fails to renew DHCP lease with VRF.
Jun 1 2022, 3:39 PM · VyOS 1.3 Equuleus (1.3.3)
marekm created T4453: dhclient fails to renew DHCP lease with VRF.
Jun 1 2022, 8:38 AM · VyOS 1.3 Equuleus (1.3.3)

May 16 2022

jestabro added a comment to T4396: HTTP API no response after several days restarted.

The current discussion has taken place in the vyos-api-discussion channel; results will be summarized here.

May 16 2022, 5:36 PM · VyOS 1.3 Equuleus (1.3.3)
jestabro added a comment to T4396: HTTP API no response after several days restarted.

Firstly, is there any info in the logs ?

May 16 2022, 12:40 PM · VyOS 1.3 Equuleus (1.3.3)
jestabro added a comment to T4396: HTTP API no response after several days restarted.

As discussed in the slack channel today, let us follow up here, as I'd like to run through some analysis, and set up a reproducer if possible.

May 16 2022, 12:32 PM · VyOS 1.3 Equuleus (1.3.3)
m.korobeinikov closed T4377: generate tech-support archive includes previous archives as Resolved.

The command works well.

May 16 2022, 1:29 AM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus ( 1.3.1)
m.korobeinikov added a comment to T4377: generate tech-support archive includes previous archives.
[email protected]:~$ show version
May 16 2022, 1:28 AM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus ( 1.3.1)

May 13 2022

Viacheslav added a project to T4377: generate tech-support archive includes previous archives: VyOS 1.4 Sagitta.
May 13 2022, 9:06 AM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus ( 1.3.1)
Viacheslav changed the status of T4377: generate tech-support archive includes previous archives from Open to Needs testing.
May 13 2022, 9:06 AM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus ( 1.3.1)

May 12 2022

n.fort closed T4100: Firewall increase maximum number of rules as Resolved.
May 12 2022, 5:14 PM · VyOS 1.3 Equuleus ( 1.3.1), VyOS 1.4 Sagitta
dongjunbo created T4423: `reset dns forwarding all` can't clear all dns cache.
May 12 2022, 10:04 AM · VyOS 1.3 Equuleus (1.3.3)

May 10 2022

Viacheslav closed T1972: Allow setting interface name for virtual_ipaddress in VRRP VRID as Resolved.
May 10 2022, 10:37 AM · VyOS 1.3 Equuleus ( 1.3.1), VyOS 1.4 Sagitta