PR https://github.com/vyos/vyos-build/pull/133

Another bug that the following configuration doesn't configure vtysh level debug

The main reason is frr code for placing log files in a separate file.
https://github.com/FRRouting/frr/blob/master/tools/etc/rsyslog.d/45-frr.conf

Device-type tap option works incorrectly

set interfaces openvpn vtun20 device-type 'tap'
set interfaces openvpn vtun20 local-address 10.0.0.0
set interfaces openvpn vtun20 local-host '100.64.0.1'
set interfaces openvpn vtun20 local-port '22222'
set interfaces openvpn vtun20 mode 'site-to-site'
set interfaces openvpn vtun20 remote-address '10.0.0.1'
set interfaces openvpn vtun20 remote-host '100.64.0.2'
set interfaces openvpn vtun20 remote-port '22222'
set interfaces openvpn vtun20 shared-secret-key-file '/config/auth/foo.key'

@Dataforce @fetzerms
ip rule "from" already in CLI T439

@pasik Can you check if it solves your expectation?

PR https://github.com/vyos/vyos-1x/pull/614
Add the ability to use policy local-route

Propose to use that format

Jool can handle 2 times as many packets.
https://link.springer.com/article/10.1007/s11235-020-00681-x

Duplicate T2859

PR https://github.com/vyos/vyos-1x/pull/612
Add IS-IS routing.

Possible reason - ipset should be converted to nft list set

T2802

@cjeanneret Can you re-check it? And close it if all works fine.

T3060

Fix for "remote-host" on client side
PR https://github.com/vyos/vyos-1x/pull/606

Server conf

set interfaces openvpn vtun0 encryption cipher 'aes256gcm'
set interfaces openvpn vtun0 encryption disable-ncp
set interfaces openvpn vtun0 hash 'sha512'
set interfaces openvpn vtun0 local-host '100.64.0.1'
set interfaces openvpn vtun0 local-port '1194'
set interfaces openvpn vtun0 mode 'server'
set interfaces openvpn vtun0 openvpn-option 'tls-version-min 1.3'
set interfaces openvpn vtun0 openvpn-option 'comp-lzo no'
set interfaces openvpn vtun0 persistent-tunnel
set interfaces openvpn vtun0 protocol 'tcp-passive'
set interfaces openvpn vtun0 server client client1 ip '10.10.3.2'
set interfaces openvpn vtun0 server client client1 subnet '10.10.3.0/29'
set interfaces openvpn vtun0 server client client1 subnet '10.20.0.0/16'
set interfaces openvpn vtun0 server subnet '10.10.3.0/29'
set interfaces openvpn vtun0 server topology 'subnet'
set interfaces openvpn vtun0 tls ca-cert-file '/config/auth/ovpn/ca.crt'
set interfaces openvpn vtun0 tls cert-file '/config/auth/ovpn/central.crt'
set interfaces openvpn vtun0 tls dh-file '/config/auth/ovpn/dh.pem'
set interfaces openvpn vtun0 tls key-file '/config/auth/ovpn/central.key'

In the new version client configuration

@Zer0t3ch Can you share your configuration?

Imagine if you use for example BGP and don't have a default route or set it to blackhole.
Then you originate the default route for a neighbor.
Why it should not announce the default route to the neighbor?

This is expected behavior, so routes not installed in the routing table.

PR https://github.com/vyos/vyos-1x/pull/600

Neet to retest, the related task T2100

@trae32566 Are there any updates for this task?

PR https://github.com/vyos/vyos-1x/pull/593
Fix validators for "neighbor update-source"

It can be work with XFRM interfaces https://wiki.strongswan.org/projects/strongswan/wiki/RouteBasedVPN#XFRM-interfaces-in-VRFs

PR https://github.com/vyos/vyos-1x/pull/591

@phillipmcmahon Try to check if vlan works correctly without DHCP?
I met several nuances associated with vlans on ESXi.

PR https://github.com/vyos/vyos-1x/pull/589

We need some expressions like

I see correct state "disabled"

Like this?

This logic does not allow for the complete removal of the protocol.
https://github.com/vyos/vyatta-cfg-quagga/blob/32cbb1e5059c6c27449b7013f790aff1c50a9831/templates/protocols/ospf/passive-interface/node.def#L29-L35

@Azayaka do you mean import routes to a specific table? T3032
Can you check it with the next rolling release?

@rizkidtn Update, please your request. Is the community works for you for blackholing?

PR https://github.com/vyos/vyos-1x/pull/588

PR https://github.com/vyos/vyatta-cfg-quagga/pull/56

Do you mean that?

set interfaces ethernet eth1 mirror

1. Not all interfaces can be used as "update-source"

Missed "vti | dum | lo" etc.
https://github.com/vyos/vyos-1x/blob/current/interface-definitions/protocols-bgp.xml.in#L639

PR https://github.com/vyos/vyos-1x/pull/587
Fix the FRR template for new bgp implementation.

How to do it?

Fixed

vyos@r4-roll# run show version

@klase Check these options in the next rolling release (after 20201027)

FRR doesn't delete isis configuration related "interfaces" with

delete protocols isis foo interface eth1

protocol "isisd" in the test was added here https://github.com/vyos/vyos-1x/pull/483/files#diff-060cdf269ea89160caa0deaebe8e323f0559aa6dfd19e5634a33634f3e38e461R72

@kroy What PR?

PR https://github.com/vyos/vyos-1x/pull/584

@SrividyaA Thanks.

@craterman it seems bug with your resolution.

PR for crux https://github.com/vyos/vyos-1x/pull/582

Update from VyOS 1.3-rolling-202010210152 to latest rolling vyos-1.3-rolling-202010260327-amd64.iso Failed.

Proposed CLI

set system options disable-spectre

Updated PR with section "parameters"
https://github.com/vyos/vyos-1x/pull/580

PR https://github.com/vyos/vyos-1x/pull/581

@Dmitry Your suggestions? Is it possible?
What parameter do we need to change?

We need to check what's going on here https://github.com/vyos/vyatta-cfg/blob/current/etc/bash_completion.d/vyatta-cfg#L930-L962

Will be fixed in the new LTS release.

PR for crux https://github.com/vyos/vyatta-conntrack-sync/pull/4

Possible bug with "admin_state"

@tjh can you edit one file?

@c-po What do you propose?

@banditos13 can you send a link to the file, which you suggest to fix, or create PR?

Do we need it for "crux"?
This does not affect the work of VPN service.

@Magnum Can you test it?

@Cheeze_It thank you for testing.

Can you provide a simple config of R1 R3 and R4?
I want to reproduce it in the test lab.

Which files in /config/tinc0/hosts ?