Any idea how you would like the CLI to look like for option 82 support?
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Nov 3 2021
Nov 3 2021
erkin changed the status of T3950: CLI backtrace on update if DNS not defined from Open to In progress.
I use Microsoft NPS and it feels correct for me:
Viacheslav changed the status of T2281: DHCP and Static IPs on Same Interface from In progress to Needs testing.
I also have some of those APU4 devices and they work actually pretty good. The reasons for those "low" defaults are actually not from VyOS but from the Linux Kernel itself.
c-po moved T3960: FRR Misconfig when using multiple VRF VNI from Open to Backlog on the VyOS 1.4 Sagitta board.
zsdc assigned T3902: Firewall does not load on boot, address-group not found, even though it exists to Unknown Object (User).
Nov 2 2021
Nov 2 2021
zsdc added a comment to T3771: DHCPv6 server prefix delegation - dynamically add route to delegated prefix via requesting router.
After the investigation, we figured out that it is possible to get the prefix and link-local address during the DHCP commit procedure.
The statement
log(info, binary-to-ascii(16, 8, ":", substring(option dhcp6.ia-pd, 24, 17)));
will give us the next info:
dhcpd[1568]: 40:20:1:ca:fe:11:11:ff:ff:0:0:0:0:0:0:0:0
So, a prefix can be extracted. Also, a link-local address may be generated from the MAC address extracted from the DHCP packet structure.
Viacheslav added a subtask for T3642: PKI configuration: T3931: SSTP doesn't work after rewriting to PKI.
Viacheslav added a parent task for T3931: SSTP doesn't work after rewriting to PKI: T3642: PKI configuration.
Possibly unrelated, but I'll leave it here
frr-reload output: 0 /usr/lib/frr/frr-reload.py:851: SyntaxWarning: "is not" with a literal. Did you mean "!="? frr-reload output: 1 if line is not "exit-vrf": frr-reload output: 2 2021-11-02 18:33:34,225 INF
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1060
set vpn sstp authentication local-users username foo password 'bar' set vpn sstp authentication local-users username foo2 password 'bar2' set vpn sstp authentication mode 'local' set vpn sstp client-ipv6-pool prefix 2001:db8::/48 set vpn sstp gateway-address '192.168.122.14' set vpn sstp ppp-options ipv4 'deny' set vpn sstp ppp-options ipv6 'allow' set vpn sstp ssl ca-cert-file '/config/user-data/sstp/ca.crt' set vpn sstp ssl cert-file '/config/user-data/sstp/server.crt' set vpn sstp ssl key-file '/config/user-data/sstp/server.key'
Check sessions:
vyos@r4-epa2:~$ show sstp-server s sessions statistics vyos@r4-epa2:~$ show sstp-server sessions ifname | username | ip | ip6 | ip6-dp | calling-sid | rate-limit | state | uptime | rx-bytes | tx-bytes --------+----------+-----------------------+-----------------------+--------+-----------------+------------+--------+----------+----------+---------- sstp0 | foo2 | 2001:db8:0:0:200::/64 | 2001:db8:0:0:200::/64 | | 192.168.122.222 | | active | 00:00:09 | 735 B | 506 B vyos@r4-epa2:~$
Additional note: this, of course, breaks the 'red' vrf connectivity.
If I manually add, using vtysh, the
vrf red vni 3000
everything on the 'red' vrf works fine.
Yes, It seems that rfc doesn't work , also I found this issues :
https://github.com/FRRouting/frr/issues/5824
@zoenan7 Sorry for the late reply! Yes, I got your email and could reproduce the crash using your PoC.
Unknown Object (User) added a comment to T3959: MPLS L3VPN IPv6 address-family over IPv4 MPLS backbone.
Mentioned here (FRRouting):
BGP vpnv6 next hop address maybe error?
Unknown Object (User) created T3959: MPLS L3VPN IPv6 address-family over IPv4 MPLS backbone.
Nov 1 2021
Nov 1 2021
syncer edited projects for T3410: Unsafe processing of special characters in CLI autocomplete, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa3).
syncer edited projects for T3770: BGP neighbor not generating the correct frr configuration when moved to peer-group, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa3).
syncer edited projects for T3774: atop logs are not limited in size, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa3).
syncer edited projects for T3706: Add proper priorities for systemd daemons, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa3).
syncer edited projects for T3854: Missing op-mode commands for conntrack-sync, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa3).
syncer edited projects for T3824: Ethernet offload options are not populated in new installs, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa3).
syncer edited projects for T3827: interfaces migration script fails on AWS hosts, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa3).
syncer edited projects for T3536: Unable to list all available routes, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa3).
syncer edited projects for T3892: BGP Route Reflects to all neighbors when one neighbor has route-reflect-client, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa3).
syncer edited projects for T3651: Move certbot request to op-mode, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa3).
syncer edited projects for T3577: Generating vpn x509 key pair fails with command not found, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa3).
syncer edited projects for T3655: NAT doesn't work correctly with VRF, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa3).
syncer edited projects for T3937: Rewrite "show system memory" in Python to make it usable as a library function, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa3).
syncer edited projects for T3403: Error on interrupting list of pppoe sessions, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa3).
syncer edited projects for T3938: Rewrite the uptime script in Python to allow using it as a library, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa3).
syncer edited projects for T2566: sstp not able to run tunnels ipv6 only, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa3).
syncer edited projects for T3946: Automatically resize the root partition if the drive has extra space, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa3).
syncer edited projects for T3912: Use a more informative default post-login banner, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa3).
syncer edited projects for T3940: DHCP client does not remove IP address when stopped by the 02-vyos-stopdhclient hook, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa3).
syncer edited projects for T3914: VRRP rfc3768-compatibility doesn't work with unicast peers, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa3).
syncer edited projects for T3933: The firewall does not filter incoming traffic on the interface with vrf., added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa3).
Nov 1 2021, 10:12 PM · Bugs, VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-GA), Restricted Project
syncer edited projects for T1810: Commit to add new l2tp local user shouldn't disconnect all current l2tp sessions, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa1).
syncer edited projects for T3098: Cannot talk to rtnetlink: Message too long Command failed -:1, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa1).
syncer edited projects for T3207: OSPF does not convert the area to NSSA , added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa1).
syncer edited projects for T3479: route-maps containing "aggregator as" can not be deleted, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa1).
syncer edited projects for T3713: Create a meta-package for user utilities, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa1).
syncer edited projects for T3695: OpenConnect reports commit success when ocserv fails to start due to SSL cert/key file issues, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa1).
syncer edited projects for T3737: openvpn-option needs to be able to support quotes as since openvpn 2.4., added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa1).
syncer edited projects for T3763: wireguard checks if port already binding, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa1).
syncer edited projects for T3810: webproxy squidguard rules don't work properly after rewriting to python. , added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa1).
syncer edited projects for T3813: Some custom sysctl parameters can't be applied bug, added: VyOS 1.3 Equuleus (1.3.0); removed VyOS 1.3 Equuleus (1.3.0-epa1).
syncer moved T3912: Use a more informative default post-login banner from 1.3.0-epa2 to 1.3.0-epa3 on the VyOS 1.3 Equuleus board.
syncer moved T3914: VRRP rfc3768-compatibility doesn't work with unicast peers from 1.3.0-epa2 to 1.3.0-epa3 on the VyOS 1.3 Equuleus board.
syncer moved T3933: The firewall does not filter incoming traffic on the interface with vrf. from 1.3.0-epa2 to 1.3.0-epa3 on the VyOS 1.3 Equuleus board.
Nov 1 2021, 10:09 PM · Bugs, VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-GA), Restricted Project
To enable IPv6 only it is required some new options in CLI, which are not presented in 1.3 yet
c-po removed a project from T2683: no dual stack in system static-host-mapping host-name : Ready for Crux (1.2.x).
c-po moved T2683: no dual stack in system static-host-mapping host-name from Backport Candidates to Backlog on the VyOS 1.3 Equuleus board.
c-po moved T2683: no dual stack in system static-host-mapping host-name from Need Triage to Backport Candidates on the VyOS 1.3 Equuleus board.
c-po added a comment to T2892: Remove command: "set firewall options interface <interface> disable".
We keep this in 1.3 as the CLI is fixed - it was removed in the 1.4 development cycle with T3090
c-po moved T3724: Allow setting host-name in l2tp section of accel-ppp from Need Triage to In Progress on the VyOS 1.3 Equuleus board.
c-po moved T2281: DHCP and Static IPs on Same Interface from Open to Backlog on the VyOS 1.4 Sagitta board.
c-po moved T3956: GRE tunnel - unable to move from source-interface to source-address, commit error from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav changed the status of T3940: DHCP client does not remove IP address when stopped by the 02-vyos-stopdhclient hook from Open to Needs testing.
Viacheslav added a parent task for T3933: The firewall does not filter incoming traffic on the interface with vrf.: T2199: Rewrite firewall in new XML/Python style.
Nov 1 2021, 5:16 PM · Bugs, VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-GA), Restricted Project
Viacheslav moved T2683: no dual stack in system static-host-mapping host-name from Open to Finished on the VyOS 1.4 Sagitta board.
PR for 1.4 https://github.com/vyos/vyos-1x/pull/1058
Viacheslav changed the status of T2281: DHCP and Static IPs on Same Interface from Open to In progress.
For 1.4 it is impossible to set both dhcp + static in one commit.
set interfaces ethernet eth2 address dhcp set interfaces ethernet eth2 address 192.0.2.4/24
Oct 31 2021
Oct 31 2021
Included this feature in the firewall/zone-policy rewrite: https://github.com/vyos/vyos-1x/pull/1033
johannrichard added a comment to T3916: Add additional Linux capabilities to container configuration.
In T3916#109326, @Viacheslav wrote:WIll be added in the next rolling release, @johannrichard could you test it?
This entries:
Same request: T292
syncer edited projects for T2297: NTP add support for pool configuration, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus.
Viacheslav moved T3945: Add route-map for bgp aggregate-address from Backport Candidates to Finished on the VyOS 1.3 Equuleus board.
c-po changed the status of T3956: GRE tunnel - unable to move from source-interface to source-address, commit error from Open to In progress.
n.fort added a comment to T3933: The firewall does not filter incoming traffic on the interface with vrf..
Definitely miss behavior is generated by the new interface MGT that was created when assigning MGT vrf to eth0.
Oct 31 2021, 1:45 PM · Bugs, VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-GA), Restricted Project
c-po renamed T3943: "netflow source-ip" prevents image upgrades if IP address does not exist locally from VyOS 1.2.7 upgrade to 1.3.0-epa2 config error if flow-accounting is set to "netflow source-ip" prevents image upgrades if IP address does not exist locally.
c-po moved T3943: "netflow source-ip" prevents image upgrades if IP address does not exist locally from Open to Finished on the VyOS 1.4 Sagitta board.