Implemented in VyOS 1.4
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Mar 14 2021
Mar 14 2021
c-po closed T2271: OSPF: add per VRF instance support, a subtask of T3344: Per VRF dynamic routing support, as Resolved.
Example configurations:
c-po closed T3345: BGP: add per VRF instance support, a subtask of T3344: Per VRF dynamic routing support, as Resolved.
I'm curious, I did a little research on Tacacs +, and I'm not sure what you want the certification service to do for you? SSH certification or?
c-po added a project to T3383: BGP IPv6 neighbor statements configuration not normalized.: VyOS 1.4 Sagitta.
Also CUMULUS has a nice looking package
c-po added a subtask for T3345: BGP: add per VRF instance support: T2257: BGP does not work with VRF.
dmbaturin edited projects for T3396: syslog can't be configured with an ipv6 literal destination in 1.2.x, added: VyOS 1.2 Crux (VyOS 1.2.8); removed VyOS 1.2 Crux (VyOS 1.2.7).
dmbaturin changed the status of T3395: WAN load-balancing fails with nexthop dhcp from Unknown Status to Resolved.
dmbaturin edited projects for T3381: Change GRE tunnel failed, added: VyOS 1.2 Crux (VyOS 1.2.8); removed VyOS 1.2 Crux (VyOS 1.2.7).
Mar 13 2021
Mar 13 2021
xtremxyz added a comment to T3406: tunnel: interface no longer supports specifying encaplimit none - or migrator is missing.
thank you very much ! Very responsive 😄
c-po added a comment to T3406: tunnel: interface no longer supports specifying encaplimit none - or migrator is missing.
Tomorrows 1.3 beta image and 1.4 rolling will have the fix included.
c-po moved T3406: tunnel: interface no longer supports specifying encaplimit none - or migrator is missing from Open to Finished on the VyOS 1.4 Sagitta board.
c-po added a comment to T3406: tunnel: interface no longer supports specifying encaplimit none - or migrator is missing.
Yeah, that would work. We still try to keep the number of custom validators to a minimum.
The XML file is changed now for 1.4 (and soon 1.3).
xtremxyz added a comment to T3406: tunnel: interface no longer supports specifying encaplimit none - or migrator is missing.
When I create dedicated validator and modify manually file /opt/vyatta/share/vyatta-cfg/templates/interfaces/tunnel/node.tag/parameters/ipv6/encaplimit/node.def it work :)
c-po added a comment to T3407: console-server: do not allow to spawn a console-server session on serial port used by "system console".
commit now produces an error:
c-po updated the task description for T3407: console-server: do not allow to spawn a console-server session on serial port used by "system console".
c-po updated the task description for T3407: console-server: do not allow to spawn a console-server session on serial port used by "system console".
c-po changed the status of T3407: console-server: do not allow to spawn a console-server session on serial port used by "system console" from Open to In progress.
c-po moved T3373: Upgrade to SaltStack version 3002.5 from Open to In Progress on the VyOS 1.4 Sagitta board.
c-po moved T3373: Upgrade to SaltStack version 3002.5 from Need Triage to In Progress on the VyOS 1.3 Equuleus board.
c-po renamed T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Update Linux Kernel to v5.4.104 / 5.10.22 to Update Linux Kernel to v5.4.105 / 5.10.23.
c-po changed the status of T3345: BGP: add per VRF instance support, a subtask of T3344: Per VRF dynamic routing support, from Blocked to In progress.
Unknown Object (User) added a comment to T3405: PPPoE server unit-cache.
Yes, some time ago, it could produce kernel issues https://www.mail-archive.com/[email protected]/msg218964.html
And I think it will be good to add the possibility to control unit-cache to have the opportunity to influence this.
Mar 12 2021
Mar 12 2021
Any reason to not default enable it?
Unknown Object (User) updated the task description for T3405: PPPoE server unit-cache.
Unknown Object (User) claimed T3405: PPPoE server unit-cache.
Unknown Object (User) created T3405: PPPoE server unit-cache.
Assuming T3356 can be backported to equuleus, this fix will not be needed.
Unknown Object (User) created T3403: Error on interrupting list of pppoe sessions.
Mar 11 2021
Mar 11 2021
zsdc edited a custom field on T905: The command show remote-config does not work for remote-platform openvpn.
zsdc changed the status of T905: The command show remote-config does not work for remote-platform openvpn from Open to Confirmed.
Still does not work in 1.4-rolling-202102060218
stepler changed the status of T3395: WAN load-balancing fails with nexthop dhcp from Resolved to Unknown Status.
Viacheslav changed the status of T3395: WAN load-balancing fails with nexthop dhcp from Unknown Status to Resolved.
c-po changed the status of T2271: OSPF: add per VRF instance support, a subtask of T3344: Per VRF dynamic routing support, from Blocked to In progress.
c-po moved T2927: isc-dhcpd release and expiry events never execute from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.7) board.
c-po moved T2927: isc-dhcpd release and expiry events never execute from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T2927: isc-dhcpd release and expiry events never execute from Open to Finished on the VyOS 1.4 Sagitta board.
c-po added a project to T2927: isc-dhcpd release and expiry events never execute: VyOS 1.2 Crux (VyOS 1.2.7).
As a workaround, we can replace https://github.com/vyos/vyos-1x/blob/f892294239101aecc21a45629eb1d10bd89fba0b/python/vyos/ifconfig/vrrp.py#L95 to
from vyos.util import cmd
cmd(f'sudo kill -s {cls._signal[what]} {pid}')And get JSON values
vyos@r-roll01:~$ sudo cat /tmp/keepalived.json
[ { "data": { "iname": "test", "dont_track_primary": 0, "skip_check_adv_addr": 0, "strict_mode": 0, "vmac_ifname": "eth1v1", "track_ifp": [ ], "track_script": [ ], "ifp_ifname": "eth1v1", "master_priority": 100, "last_transition": 1615454936.7267461, "garp_delay": 5, "garp_refresh": 0, "garp_rep": 5, "garp_refresh_rep": 1, "garp_lower_prio_delay": 5, "garp_lower_prio_rep": 5, "lower_prio_no_advert": 0, "higher_prio_send_advert": 0, "vrid": 1, "base_priority": 100, "effective_priority": 100, "vipset": true, "vips": [ "172.20.110.111", "172.20.110.15" ], "evips": [ ], "promote_secondaries": false, "vroutes": [ ], "vrules": [ ], "adver_int": 1, "master_adver_int": 1, "accept": 1, "nopreempt": false, "preempt_delay": 0, "state": 2, "wantstate": 2, "version": 2, "smtp_alert": false, "auth_type": 0 }, "stats": { "advert_rcvd": 983, "advert_sent": 10535, "become_master": 1, "release_master": 0, "packet_len_err": 0, "advert_interval_err": 0, "ip_ttl_err": 0, "invalid_type_rcvd": 0, "addr_list_err": 0, "invalid_authtype": 0, "authtype_mismatch": 0, "auth_failure": 0, "pri_zero_rcvd": 2, "pri_zero_sent": 0 } } ]Or more readable:
{
"data":{
"iname":"test",
"dont_track_primary":0,
"skip_check_adv_addr":0,
"strict_mode":0,
"vmac_ifname":"eth1v1",
"track_ifp":[jack9603301 triaged T3305: Ingress qdisc does not work anymore in 1.3-rolling-202101 snapshot as High priority.
I don't seem to see the obvious problem (maybe I don't understand what you're referring to), assuming there is a problem and this is also an issue introduced by third party system components, maybe you should go upstream with feedback
VRRP return always [] <= nodata
https://github.com/vyos/vyos-1x/blob/f892294239101aecc21a45629eb1d10bd89fba0b/src/op_mode/show_interfaces.py#L68
Maybe don't have permissions to kill PID https://github.com/vyos/vyos-1x/blob/f892294239101aecc21a45629eb1d10bd89fba0b/python/vyos/ifconfig/vrrp.py#L95
Viacheslav added a project to T3395: WAN load-balancing fails with nexthop dhcp: VyOS 1.2 Crux (VyOS 1.2.7).
The same bug with 1.2.7-epa1
set interfaces dummy dum0 set interfaces ethernet eth1 address dhcp set load-balancing wan interface-health eth1 nexthop dhcp set load-balancing wan rule 1 inbound-interface dum0 set load-balancing wan rule 1 interface eth1 commit
Status
[email protected]:~$ show wan-load-balance Interface: eth1 Status: active Last Status Change: Thu Mar 11 09:31:54 2021 +Test: ping Target: Last Interface Success: 0s Last Interface Failure: 2m35s # Interface Failure(s): 0
jack9603301 moved T3305: Ingress qdisc does not work anymore in 1.3-rolling-202101 snapshot from Open to Finished on the VyOS 1.4 Sagitta board.
jack9603301 closed T3305: Ingress qdisc does not work anymore in 1.3-rolling-202101 snapshot as Resolved.
jack9603301 added a comment to T3305: Ingress qdisc does not work anymore in 1.3-rolling-202101 snapshot.
Now the problem should be solved
Viacheslav added a comment to T3396: syslog can't be configured with an ipv6 literal destination in 1.2.x.
Fixed in VyOS 1.4-rolling-202103110218
set system syslog global facility all level 'info' set system syslog global facility protocols level 'debug' set system syslog host 192.168.122.1 facility all level 'all' set system syslog host 192.168.122.1 port '514' set system syslog host 2001:db8::2 facility all level 'all' set system syslog host 2001:db8::3 facility all level 'all' set system syslog host 2001:db8::3 port '514' set system syslog host 2001:db8::4 facility all level 'all' set system syslog host 2001:db8::4 port '514'
Viacheslav moved T3396: syslog can't be configured with an ipv6 literal destination in 1.2.x from Open to Backport Candidates on the VyOS 1.4 Sagitta board.
MD5 checksums are generated by Packer at build time (configured in vyos-build). We can switch to SHA256 or SHA512 (which Packer supports) although it seems redundant when the install script also fetches SHA256 sum file (guessed by the ISO URL) and compares against that. I'd say configuring Packer to use SHA256 and omitting SHA256 files from download directories altogether would be the cleanest solution.
jack9603301 added a comment to T3305: Ingress qdisc does not work anymore in 1.3-rolling-202101 snapshot.
Now, let's move the patch to 1.3
Mar 10 2021
Mar 10 2021
One solution that I see, uses vif/svlan/cvlan.
Looks good on 1.4-rolling-202103100218:
Here is my current configuration. If I add any configuration to this and commit, it would not commit. It seems like there is something holding the commit from committing the new configuration.
We can't reproduce/fix it without any provided information/configuration.
Mar 9 2021
Mar 9 2021
c-po added a comment to T3376: Setting ipv6 address autoconf causes all interfaces besides the target to lose their IP.
Did they also loose their IPv4 assignment?
c-po renamed T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Update Linux Kernel to v5.4.102 / 5.10.20 to Update Linux Kernel to v5.4.104 / 5.10.22.
Fixed in next rolling release.
c-po moved T3382: Error creating Console Server from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3382: Error creating Console Server from Need Triage to Finished on the VyOS 1.3 Equuleus board.