I think it is necessary to show this kind information . it should use tools/service as netflow/ipfix . for example:
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Feb 14 2022
Feb 14 2022
c-po moved T4154: Error add second gre tunnel with the same source interface from Open to Finished on the VyOS 1.4 Sagitta board.
Alexey.Kirillov added a comment to T1972: Allow setting interface name for virtual_ipaddress in VRRP VRID.
works as expected:
Alexey.Kirillov added a comment to T1972: Allow setting interface name for virtual_ipaddress in VRRP VRID.
sure, I'll test 1.4 rolling
but if this feature simply adds "dev XXX" to virtual_address in vrrp config that shouldn't break much
Viacheslav added a comment to T1972: Allow setting interface name for virtual_ipaddress in VRRP VRID.
@Alexey.Kirillov it required more tests and responses from 1.4
Could you test it?
I can't get your configuration, how does should work without the declaration source or remote address?
I think I'm experiencing this same issue. I just tried upgrading a VPN server running 1.3-rolling-202001260217 to 1.3.0 LTS. As this is a production server (albeit a secondary/backup server) I've reverted to the old version of VyOS, and it looks like a fix is already on its way, so I just wanted to add my info to the ticket.
Feb 13 2022
Feb 13 2022
Alexey.Kirillov added a comment to T1972: Allow setting interface name for virtual_ipaddress in VRRP VRID.
Is there any chance to backport this to 1.3x ?
It makes migration from cluster way easier.
c-po moved T4191: Lost access to host after VRF re-creating from In Progress to Finished on the VyOS 1.3 Equuleus ( 1.3.1) board.
c-po moved T4191: Lost access to host after VRF re-creating from Need Triage to In Progress on the VyOS 1.3 Equuleus ( 1.3.1) board.
c-po added a project to T4191: Lost access to host after VRF re-creating: VyOS 1.3 Equuleus ( 1.3.1).
c-po moved T4191: Lost access to host after VRF re-creating from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4218: firewall: rule name is not allowed to start with a number from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4225: Performance degration with latest rolling release from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4220: Commit broke dhclient 78b247b724f74bdabab0706aaa7f5b00e5809bc1 from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4226: VRRP transition-script does not work for groups name which contains -(minus) sign from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4223: policy route cannot have several entries with the same table from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4242: ethernet speed/duplex can never be switched back to auto/auto from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4204: Update Accel-PPP to a newer revision from Need Triage to Finished on the VyOS 1.3 Equuleus ( 1.3.1) board.
c-po moved T4242: ethernet speed/duplex can never be switched back to auto/auto from Need Triage to Finished on the VyOS 1.3 Equuleus ( 1.3.1) board.
@Viacheslav As I said: every rolling version of VyOS 1.3 branch starting from mid-January. I built ISO several times during this month. Last one I tried today (built today). All of them behave like this in my two different routers. Last time ocserv worked was middle of December build.
Viacheslav added a comment to T4241: ocserv openconnect looks broken in recent bulds of 1.3 Equuleus.
Which version?
dutty updated the task description for T4241: ocserv openconnect looks broken in recent bulds of 1.3 Equuleus.
dutty updated the task description for T4241: ocserv openconnect looks broken in recent bulds of 1.3 Equuleus.
Feb 12 2022
Feb 12 2022
build.log37 KBDownload
Feb 11 2022
Feb 11 2022
GitHub <[email protected]> committed rVYOSONEXd8b60d58ac8f: Merge pull request #1218 from sever-sever/T4237 (authored by c-po).
Viacheslav changed the status of T3686: Bridging OpenVPN tap with no local-address breaks from In progress to Needs testing.
@Scoopta Can you check your configuration with the next rolling release?
Viacheslav changed the status of T4236: Generate ovpn openvpn client configuration files from Open to Needs testing.
Viacheslav moved T3872: Add configurable telegraf monitoring service from Need Triage to Finished on the VyOS 1.3 Equuleus ( 1.3.1) board.
@hensur Could you create a PR for 1.3?
Viacheslav added a project to T4237: Conntrack-sync error - error adding listen-address command: VyOS 1.4 Sagitta.
Viacheslav edited projects for T4237: Conntrack-sync error - error adding listen-address command, added: VyOS 1.3 Equuleus ( 1.3.1); removed VyOS 1.3 Equuleus.
erkin triaged T4238: Support for overriding XML properties in the template preprocessor as Low priority.
Viacheslav changed the status of T4237: Conntrack-sync error - error adding listen-address command from Open to In progress.
c-po committed rVYOSONEXe19252a7968c: smoketest: T3872: Fix token check for monitoring test (authored by Viacheslav).
GitHub <[email protected]> committed rVYOSONEX403faebaba8f: Merge pull request #1214 from sever-sever/T3686 (authored by c-po).
GitHub <[email protected]> committed rVYOSONEX01c8330ca446: Merge pull request #1217 from sever-sever/T4236 (authored by c-po).
GitHub <[email protected]> committed rVYOSONEX1f4e5c6daf4a: Merge pull request #1216 from sever-sever/T3872 (authored by c-po).
Unknown Object (User) added a comment to T4234: Show firewall partly broken in 1.3.x.
Checked in VyOS 1.3-stable-202202101926
Feb 10 2022
Feb 10 2022
Issue can be triggered also with a reduced CLI config, just run this multiple times:
I'm able to reproduce this with 1.4, using the new config structure:
Viacheslav updated the task description for T4236: Generate ovpn openvpn client configuration files.
nikeshhajari added a comment to T4192: OpenVPN custom option for "--client-to-client" causes configuration error.
I will close this. It turns out the root cause is related to this other bug I filed:
There is an example of a working configuration:
set interfaces openvpn vtun10 authentication password xxxxxx set interfaces openvpn vtun10 authentication username xxxxxx set interfaces openvpn vtun10 device-type 'tun' set interfaces openvpn vtun10 encryption cipher 'aes256' set interfaces openvpn vtun10 hash 'sha512' set interfaces openvpn vtun10 mode 'client' set interfaces openvpn vtun10 openvpn-option '--config /config/auth/nord/included_config.conf' set interfaces openvpn vtun10 persistent-tunnel set interfaces openvpn vtun10 protocol 'udp' set interfaces openvpn vtun10 remote-host 'xxx.xxx.218.155' set interfaces openvpn vtun10 remote-port '1194' set interfaces openvpn vtun10 tls ca-cert-file xxxxxx
Viacheslav changed the status of T4234: Show firewall partly broken in 1.3.x from Confirmed to Needs testing.
GitHub <[email protected]> committed rVYOSONEXdaf27dde3f3a: Merge pull request #1133 from zdc/T1925-sagitta (authored by dmbaturin).
GitHub <[email protected]> committed rVYOSONEXeacee4a5eac4: Merge pull request #1213 from jestabro/config-diff (authored by c-po).
Feb 9 2022
Feb 9 2022
we found an error when we tried to upload the configuration using the frr.reload.py . I did an issues request to FRR with this problem ,here is the case:
RyVolodya added a comment to T4192: OpenVPN custom option for "--client-to-client" causes configuration error.
I checked in the OpenVPN network lab.
Version:
Version: VyOS 1.3.0 Release train: equuleus
Configuration:
vyos@vyos# show interfaces openvpn vtun0 set interfaces openvpn vtun0 encryption cipher 'aes256gcm' set interfaces openvpn vtun0 hash 'sha512' set interfaces openvpn vtun0 local-host '192.168.122.100' set interfaces openvpn vtun0 local-port '1194' set interfaces openvpn vtun0 mode 'server' set interfaces openvpn vtun0 openvpn-option '--client-to-client' set interfaces openvpn vtun0 openvpn-option '--verb 9' set interfaces openvpn vtun0 openvpn-option '--mute 10' set interfaces openvpn vtun0 openvpn-option '--dev vtun0' set interfaces openvpn vtun0 openvpn-option '--ifconfig-pool-persist ipp.txt' set interfaces openvpn vtun0 openvpn-option '--status openvpn2.log' set interfaces openvpn vtun0 openvpn-option '--user nobody --group nogroup' set interfaces openvpn vtun0 openvpn-option '--persist-key --persist-tun' set interfaces openvpn vtun0 openvpn-option '--keepalive 10 120' set interfaces openvpn vtun0 persistent-tunnel set interfaces openvpn vtun0 protocol 'udp' set interfaces openvpn vtun0 server max-connections '5' set interfaces openvpn vtun0 server name-server '1.1.1.1' set interfaces openvpn vtun0 server push-route 10.10.10.0/24 set interfaces openvpn vtun0 server subnet '10.10.20.0/24' set interfaces openvpn vtun0 server topology 'subnet' set interfaces openvpn vtun0 tls ca-cert-file '/config/auth/openvpn/ca.crt' set interfaces openvpn vtun0 tls cert-file '/config/auth/openvpn/central.crt' set interfaces openvpn vtun0 tls dh-file '/config/auth/openvpn/dh.pem' set interfaces openvpn vtun0 tls key-file '/config/auth/openvpn/central.key' set interfaces openvpn vtun0 use-lzo-compression
After rebooting, the OpenVPN configuration is saved:
@Scoopta I can't get your configuration, how does should work without the declaration source or remote address?
There is a template that generates OpenVPN site-to-site configuration https://github.com/vyos/vyos-1x/blob/9910020ae6ef37964c97bb28b6b1d84f8227650b/data/templates/openvpn/server.conf.tmpl#L143-L147
To reproduce in 1.4
set interfaces bridge br3 member interface vtun2 set interfaces openvpn vtun2 device-type 'tap' set interfaces openvpn vtun2 mode 'site-to-site' set interfaces openvpn vtun2 persistent-tunnel set interfaces openvpn vtun2 shared-secret-key 'foo' set pki openvpn shared-secret foo key '190696ff2244ca9ce8d5bef8718c58881fe8df8e3519c8bf6ede49108c97a5d9456db648d8c5ca953bb19d21978527a742497426313e614640d037ffffa4980be315e193727ebfb28f3725b779e2d3309ad6f8c939363f7fc14a0080c81e3faf4b053661c81c3003ddabeb87ac8611b81718956b7325f03978c74f502b39965f0d788b21b4370f6a625e3098f8d71ff3e653f50c54b424c511cba78871b38337237830a34266aa9558cd69c68ded89f7f0a82f94b5b87200c7ea05edb14a806e9e4998b00dc2895d976c0e506a6a06056745bca6ce1d2a5c95a51a1460e3080c7743eecbcee9d2c4f89d9e1b59f44484e43591f43bf713255b5de13ae8500620' set pki openvpn shared-secret foo version '1'
Commit:
Traceback (most recent call last):
File "/usr/libexec/vyos/conf_mode/interfaces-openvpn.py", line 663, in <module>
verify(c)
File "/usr/libexec/vyos/conf_mode/interfaces-openvpn.py", line 228, in verify
if len([addr for addr in openvpn['local_address'] if is_ipv4(addr)]) > 1:
KeyError: 'local_address'Viacheslav added a project to T3686: Bridging OpenVPN tap with no local-address breaks: VyOS 1.4 Sagitta.
Viacheslav changed the status of T3686: Bridging OpenVPN tap with no local-address breaks from Open to In progress.
Viacheslav added a comment to T1317: OpenVPN configuration fails if it depends on another interface..
It can be fixed in thoses PR's:
https://github.com/vyos/vyos-1x/pull/1210
https://github.com/vyos/vyos-1x/pull/1211
T4230