Page MenuHomeVyOS Platform
Feed All Stories

Jun 8 2022

GitHub <[email protected]> committed rVYOSONEXcfd958c08d2b: Merge pull request #1340 from sever-sever/T3083 (authored by c-po).
Jun 8 2022, 10:39 AM
c-po closed T4350: DMVPN opennhrp spokes dont work behind NAT as Resolved.
Jun 8 2022, 6:50 AM · VyOS 1.3 Equuleus (1.3.2)
c-po closed T4447: DHCPv6 prefix delegation `sla-id` limited to 128 as Resolved.
Jun 8 2022, 6:50 AM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.2)
c-po moved T4350: DMVPN opennhrp spokes dont work behind NAT from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
Jun 8 2022, 6:50 AM · VyOS 1.3 Equuleus (1.3.2)
c-po moved T4447: DHCPv6 prefix delegation `sla-id` limited to 128 from In Progress to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
Jun 8 2022, 6:50 AM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.2)
c-po committed rVYOSONEX9c37885c89a8: dhcp6: pd: T4447: bugfix sla-id limits (must be greater then 128.
Jun 8 2022, 6:36 AM
GitHub <[email protected]> committed rVYOSONEX3586dad839e3: Merge pull request #1336 from c-po/t4447-dhcpv6-pd-equuleus (authored by dmbaturin).
Jun 8 2022, 6:36 AM
c-po moved T4350: DMVPN opennhrp spokes dont work behind NAT from Need Triage to In Progress on the VyOS 1.3 Equuleus (1.3.2) board.
Jun 8 2022, 5:55 AM · VyOS 1.3 Equuleus (1.3.2)

Jun 7 2022

e.khudiyev created T4460: nhrp not starting due to missing cisco-authentication value.
Jun 7 2022, 12:32 PM · Bugs, VyOS 1.4 Sagitta (1.4.0-GA), Restricted Project

Jun 6 2022

dmbaturin committed rVYOSONEX67b342a2c590: T4446: use a unified neighbor display script.
Jun 6 2022, 10:51 AM
dmbaturin committed rVYOSONEXe75ce8b7fc02: T4446: use format strings instead of old-fasionhed format method.
Jun 6 2022, 10:51 AM
GitHub <[email protected]> committed rVYOSONEXc40b9064d97d: Merge pull request #1347 from dmbaturin/T4446 (authored by Viacheslav).
Jun 6 2022, 10:51 AM
Viacheslav added a comment to T4457: L2TP/IPSec Remote Access VPN does not work as expected in 1.3.1-S1.

Don't have any issues with Ubuntu

set interfaces dummy dum0 address '192.0.2.1/32'
set interfaces dummy dum4 address '203.0.113.1/24'
set interfaces ethernet eth0 address '192.168.122.11/24'
set interfaces ethernet eth0 description 'WAN'
set vpn ipsec ipsec-interfaces interface 'eth0'
set vpn l2tp remote-access authentication local-users username test password 'test'
set vpn l2tp remote-access authentication mode 'local'
set vpn l2tp remote-access client-ip-pool start '192.168.255.2'
set vpn l2tp remote-access client-ip-pool stop '192.168.255.254'
set vpn l2tp remote-access ipsec-settings authentication mode 'pre-shared-secret'
set vpn l2tp remote-access ipsec-settings authentication pre-shared-secret 'secret'
set vpn l2tp remote-access outside-address '192.0.2.1'
Jun 6 2022, 10:03 AM · VyOS 1.3 Equuleus ( 1.3.1)

Jun 5 2022

n.fort added a comment to T4387: Create additional smoketests for multiwan PBR & load-balanced configurations .

Added more options. PR https://github.com/vyos/vyos-1x/pull/1350

Jun 5 2022, 8:12 PM · VyOS 1.4 Sagitta
n.fort committed rVYOSONEX13f8cf1bc70c: T4387: add more firewall checks for WLB smoketests..
Jun 5 2022, 7:04 PM
GitHub <[email protected]> committed rVYOSONEXa28833922ff0: Merge pull request #1350 from nicolas-fort/T4387-WLB-smoketest (authored by c-po).
Jun 5 2022, 7:04 PM
Unknown Object (User) added a comment to T4457: L2TP/IPSec Remote Access VPN does not work as expected in 1.3.1-S1.

@NikolayP , Looks like MTU and MPPE issue. Stoping daemon does not related to this I think.

Jun 5 2022, 6:56 PM · VyOS 1.3 Equuleus ( 1.3.1)
c-po added a comment to T2472: Ability to configure EIGRP protocol.

I already merged your XML definition ;)

Jun 5 2022, 2:02 PM · VyOS Rolling
Viacheslav renamed T1237: Static Route Path Monitoring, failover from Static Route Path Monitoring to Static Route Path Monitoring, failover.
Jun 5 2022, 12:04 PM · VyOS 1.4 Sagitta
Viacheslav added a project to T1237: Static Route Path Monitoring, failover: VyOS 1.4 Sagitta.
Jun 5 2022, 12:04 PM · VyOS 1.4 Sagitta
Viacheslav committed rVYOSONEXbdbe235f1d77: smoketest: T4387: Add test for load-balancing wan.
Jun 5 2022, 10:48 AM
GitHub <[email protected]> committed rVYOSONEX256ad3fc329a: Merge pull request #1346 from sever-sever/T4387-curr (authored by Viacheslav).
Jun 5 2022, 10:48 AM
Viacheslav added a comment to T2472: Ability to configure EIGRP protocol.

I once made XML, it might come in handy

Jun 5 2022, 10:36 AM · VyOS Rolling
kajiuray created T4459: API service with VRF doesn't work in 1.3.1.
Jun 5 2022, 9:39 AM · VyOS 1.3 Equuleus (1.3.4)

Jun 4 2022

n.fort committed rVYOSONEX8ab854a6f6d4: Policy: T3976-T4449-nexthop: add - match ipv6 nexthop type - as available for….
Jun 4 2022, 6:59 PM
GitHub <[email protected]> committed rVYOSONEXb6da1332a14c: Merge pull request #1348 from nicolas-fort/T3976-T4449-nexthop (authored by c-po).
Jun 4 2022, 6:59 PM
n.fort added a comment to T3976: Missing prefix-list and access-list option from ipv6 route-map.

PR: https://github.com/vyos/vyos-1x/pull/1348

Jun 4 2022, 4:19 PM
n.fort claimed T4458: Firewall - add support for matching ip ttl in firewall rules.
Jun 4 2022, 3:03 PM · VyOS 1.4 Sagitta
n.fort changed Version from - to 1.4 on T4458: Firewall - add support for matching ip ttl in firewall rules.
Jun 4 2022, 3:03 PM · VyOS 1.4 Sagitta
n.fort created T4458: Firewall - add support for matching ip ttl in firewall rules.
Jun 4 2022, 3:02 PM · VyOS 1.4 Sagitta
showipintbri renamed T4445: [EDIT] Service Restored: Outage: Interface stops forwarding, IPv4 martian seen in the logs from Outage: Interface stops forwarding, IPv4 martian seen in the logs to [EDIT] Service Restored: Outage: Interface stops forwarding, IPv4 martian seen in the logs.
Jun 4 2022, 3:39 AM
showipintbri added a comment to T4445: [EDIT] Service Restored: Outage: Interface stops forwarding, IPv4 martian seen in the logs.

Ultimately I moved my physical connection from port eth0 to eth4, and configured eth4 with the same config as was on eth0. Once I did that everything was stable and has been stable for days (nearly a week now). I'm not sure what could be causing an interface to work for an amount of time, then as if on-cue stop forwarding packets.

Jun 4 2022, 3:38 AM

Jun 3 2022

Viacheslav added a project to T4445: [EDIT] Service Restored: Outage: Interface stops forwarding, IPv4 martian seen in the logs: VyOS 1.4 Sagitta.
Jun 3 2022, 8:59 PM
n.fort changed the status of T4450: Route-map - Extend options for ip|ipv6 address match from Open to Needs testing.
Jun 3 2022, 3:49 PM · VyOS 1.4 Sagitta
Unknown Object (User) added a comment to T4457: L2TP/IPSec Remote Access VPN does not work as expected in 1.3.1-S1.

Not sure if this is relevant to the task.
But once when shutting down a VM with VyOS 1.3.1-S1, it took a long time to shut down:

image.png (117×1 px, 10 KB)

Jun 3 2022, 2:42 PM · VyOS 1.3 Equuleus ( 1.3.1)
Unknown Object (User) triaged T4457: L2TP/IPSec Remote Access VPN does not work as expected in 1.3.1-S1 as High priority.
Jun 3 2022, 2:31 PM · VyOS 1.3 Equuleus ( 1.3.1)
jack9603301 added a comment to T3420: Support UPNP protocol.

Should I make improvements to the remaining revisions in the PR?

Jun 3 2022, 1:06 PM
jack9603301 updated subscribers of T3420: Support UPNP protocol.

Sorry I just saw it now, I'll test it. But because of limited conditions, I may test in the future, please forgive me

Jun 3 2022, 12:21 PM
jack9603301 added a comment to T3435: NAT rules show corruption.

Error still present on VyOS 1.4-rolling-202201020317

vyos@vyos:~$ show nat source rules 
Traceback (most recent call last):
  File "/usr/libexec/vyos/op_mode/show_nat_rules.py", line 114, in <module>
    print(format_nat_rule.format(rule, srcdests[0], tran_addr, interface))
IndexError: list index out of range
Rule       Source                                             Translation                                        Outbound Interface
----       ------                                             -----------                                        ------------------
vyos@vyos:~$ show ver

Version:          VyOS 1.4-rolling-202201020317
Release train:    sagitta

Nat config in this example:

vyos@vyos:~$ show config comm | grep nat
set nat source rule 10 description 'Masquerade to NAT'
set nat source rule 10 outbound-interface 'eth0'
set nat source rule 10 translation address 'masquerade'
Jun 3 2022, 12:19 PM · VyOS 1.4 Sagitta

Jun 2 2022

zsdc added a comment to T4288: IPsec tunnel will break when ESP timeout.

@m.korobeinikov I believe that I already posted this some time ago, but just in case...
Not all combinations of DPD and close-action are safe. Actually, most of them sooner or later will lead to issues with IPSec. So, I created the next scheme. It is from 2020, so I will not say that nothing was changed from that time, however, it shows well how careful you should be while configuring IPSec. On the scheme, you can see the only safe configuration of the close-action option, depending on how the peer is configured, but the same logic can be applied to DPD.

IPSec site-to-site IKE configuration.png (780×1 px, 27 KB)

Jun 2 2022, 6:42 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4222: Support for TWAMP as round-trip metric.

PR https://github.com/vyos/vyos-build/pull/240
disable owamp|twamp.service by default

Jun 2 2022, 5:01 PM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.4 Sagitta
marekm created T4456: NTP client in VRF tries to bind to interfaces outside VRF, logs many messages.
Jun 2 2022, 3:30 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
Viacheslav created T4455: smp-affinity required by some platforms but doesn't exists in the CLI.
Jun 2 2022, 3:21 PM · VyOS Rolling
erkin triaged T4454: `install-image` should check free storage as Low priority.
Jun 2 2022, 2:14 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4222: Support for TWAMP as round-trip metric from Open to Needs testing.

@SrividyaA will be present in the next rolling release

Jun 2 2022, 10:39 AM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.4 Sagitta
Viacheslav committed rVYOSONEXb8671b56c153: sla: T4222: Add OWAMP and TWAMP for service sla.
Jun 2 2022, 10:21 AM
GitHub <[email protected]> committed rVYOSONEXb9a26085b493: Merge pull request #1345 from sever-sever/T4222 (authored by c-po).
Jun 2 2022, 10:21 AM
Viacheslav added a comment to T4387: Create additional smoketests for multiwan PBR & load-balanced configurations .

PR for the current https://github.com/vyos/vyos-1x/pull/1346

Jun 2 2022, 10:09 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T973: Create Prometheus Exporter for VyOS .
In T973#124168, @superq wrote:

I wouldn't call telegraf a very good option. It does a very bad job of producing Prometheus metrics.

Jun 2 2022, 10:04 AM · VyOS Rolling, VyOS 1.5 Circinus
Viacheslav added a comment to T141: TACACS+ Support.

For Debian11 requires pkg "libpam-tacplus" that is not available https://github.com/kravietz/pam_tacplus/issues/180

Jun 2 2022, 9:58 AM · VyOS 1.4 Sagitta
superq added a comment to T973: Create Prometheus Exporter for VyOS .

I wouldn't call telegraf a very good option. It does a very bad job of producing Prometheus metrics.

Jun 2 2022, 9:07 AM · VyOS Rolling, VyOS 1.5 Circinus
Viacheslav added a comment to T973: Create Prometheus Exporter for VyOS .

Prometheus-client already in 1.4
https://docs.vyos.io/en/latest/configuration/service/monitoring.html#prometheus-client

Jun 2 2022, 8:59 AM · VyOS Rolling, VyOS 1.5 Circinus

Jun 1 2022

Viacheslav added a comment to T4222: Support for TWAMP as round-trip metric.

PR https://github.com/vyos/vyos-1x/pull/1345

Jun 1 2022, 4:57 PM · VyOS 1.3 Equuleus (1.3.6), VyOS 1.4 Sagitta
marekm updated the task description for T4453: dhclient fails to renew DHCP lease with VRF.
Jun 1 2022, 3:39 PM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
marekm created T4453: dhclient fails to renew DHCP lease with VRF.
Jun 1 2022, 8:38 AM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.5 Circinus, VyOS 1.4 Sagitta

May 31 2022

egoistdream added a comment to T3976: Missing prefix-list and access-list option from ipv6 route-map.

Yes on this version it is available the requested options for ipv6:

May 31 2022, 11:27 PM
fernando added a comment to T3976: Missing prefix-list and access-list option from ipv6 route-map.

yes, it was added on this version vyos-1.4-rolling-202205311706, please check again

May 31 2022, 11:13 PM
sarthurdev closed T3659: Configuration won't accept IPv6 addresses for site-to-site VPN tunnel prefixes/traffic selectors as Resolved.
May 31 2022, 6:13 PM · VyOS 1.4 Sagitta
sarthurdev closed T4148: Firewall - Error messages not that clear as it were in old firewall as Resolved.
May 31 2022, 6:11 PM · VyOS 1.4 Sagitta
sarthurdev closed T4199: Commit failed when setting icmpv6 type any as Resolved.
May 31 2022, 6:09 PM · VyOS 1.4 Sagitta
sarthurdev closed T4212: PermissionError when generating/installing server Certificate (generate pki certificate sign ...) as Resolved.
May 31 2022, 6:05 PM · VyOS 1.4 Sagitta
sarthurdev committed rVYOSONEXdf039e9c797a: pki: T3642: Update conf scripts using changed PKI objects.
May 31 2022, 4:52 PM
GitHub <[email protected]> committed rVYOSONEXc4d824d57d69: Merge pull request #1344 from sarthurdev/pki_update (authored by c-po).
May 31 2022, 4:52 PM
c-po committed rVYOSONEX6a303c25207f: smoketest: policy: T3976: add migratable config snippet.
May 31 2022, 2:51 PM
c-po committed rVYOSONEXb2dd9d670fd0: policy: T3976: fix SyntaxError: invalid non-printable character.
May 31 2022, 2:51 PM
egoistdream added a comment to T3976: Missing prefix-list and access-list option from ipv6 route-map.

I just check and on version: vyos-1.4-rolling-202205310217 is still missing :(

May 31 2022, 2:17 PM
fernando added a comment to T3976: Missing prefix-list and access-list option from ipv6 route-map.

We've added this feature in our latest nightly building release, could you check it ?

May 31 2022, 1:50 PM
fernando changed the status of T3976: Missing prefix-list and access-list option from ipv6 route-map from Open to Needs testing.
May 31 2022, 1:40 PM
zsdc created T4452: WAN load-balancing exclude rules break PBR.
May 31 2022, 11:01 AM · VyOS 1.5 Circinus (1.5-stream-2025-Q2), VyOS Rolling
c-po committed rVYOSONEX51f9de97678a: policy: T3976: bump version 2 -> 3.
May 31 2022, 4:49 AM
GitHub <[email protected]> committed rVYOSONEX0e32faf6db96: IPv6: T3976: add prefix-list and access-list option from ipv6 route-map (authored by fett0 <[email protected]>).
May 31 2022, 4:46 AM
sarthurdev committed rVYOSONEXd9434e4b6e64: pki: T3642: Add ability to import files into PKi configuration.
May 31 2022, 4:40 AM
sarthurdev committed rVYOSONEX43cd34688687: pki: T3642: Enable `generate pki openvpn ...` to install into config.
May 31 2022, 4:40 AM
GitHub <[email protected]> committed rVYOSONEXe771eab37de6: Merge pull request #1343 from sarthurdev/pki_import (authored by c-po).
May 31 2022, 4:40 AM
gabrieltackitt added a comment to T2044: RPKI doesn't boot properly.

Has any progress on this been made? I am still having this issue on 1.4-rolling-202205250217.

May 31 2022, 1:45 AM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.5 Circinus, VyOS 1.4 Sagitta

May 30 2022

sarthurdev added a comment to T3642: PKI configuration.

PR for op-mode importing existing PKI files into config: https://github.com/vyos/vyos-1x/pull/1343

May 30 2022, 10:59 PM · VyOS 1.4 Sagitta (1.4.0-epa1)
RyVolodya created T4451: The DHCPv6 server leases function the display of the hostname.
May 30 2022, 8:13 PM · VyOS Rolling
Viacheslav closed T4315: Telegraf - Output to prometheus as Resolved.
May 30 2022, 1:30 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po committed rVYOSONEX5642a1e01fff: eigrp: T2773: bugfix Makefile - temporary code removal.
May 30 2022, 1:05 PM
n.fort committed rVYOSONEXfda276bd0bb6: Policy: T4450: Expand options for ip|ipv6 address match. Now support prefix-len….
May 30 2022, 1:01 PM
GitHub <[email protected]> committed rVYOSONEX4c9317354815: Merge pull request #1342 from nicolas-fort/T4450 (authored by c-po).
May 30 2022, 1:01 PM
Viacheslav committed rVYOSONEX6b75cbb0575c: smoketest: T4387: Add test for load-balancing wan.
May 30 2022, 12:15 PM
GitHub <[email protected]> committed rVYOSONEX0988d0a0aff0: Merge pull request #1338 from sever-sever/T4387 (authored by dmbaturin).
May 30 2022, 12:14 PM

May 29 2022

n.fort added a comment to T4450: Route-map - Extend options for ip|ipv6 address match.

PR: https://github.com/vyos/vyos-1x/pull/1342

May 29 2022, 4:51 PM · VyOS 1.4 Sagitta
n.fort claimed T4450: Route-map - Extend options for ip|ipv6 address match.
May 29 2022, 3:05 PM · VyOS 1.4 Sagitta
n.fort created T4450: Route-map - Extend options for ip|ipv6 address match.
May 29 2022, 3:05 PM · VyOS 1.4 Sagitta
panachoi added a comment to T1230: Improving Boot Time for Large Firewall Configurations.

This vm started out with 4G of memory and 2CPUs; I doubled quickly everything when I hit the out of memory error the first time, but that didn't help. I can quickly install the latest rolling and test

May 29 2022, 12:18 PM · VyOS 1.3 Equuleus (1.3.6)
n.fort changed the status of T4449: Route-map - Extend options for ip next-hop match from Open to Needs testing.

PR: https://github.com/vyos/vyos-1x/pull/1339

May 29 2022, 11:04 AM · VyOS 1.4 Sagitta
n.fort added a comment to T1230: Improving Boot Time for Large Firewall Configurations.

Yes, you error with "root" user is a known issue: T4281.

May 29 2022, 10:52 AM · VyOS 1.3 Equuleus (1.3.6)
Viacheslav added a comment to T2597: Add more options to API.

Reset added in T4442

May 29 2022, 10:00 AM
c-po committed rVYOSONEX96a88c1990a9: xml: reword static routing completion help.
May 29 2022, 9:52 AM
c-po added a comment to T2472: Ability to configure EIGRP protocol.

Currently dealing with some minor FRR issues:

May 29 2022, 9:45 AM · VyOS Rolling
c-po updated the task description for T2472: Ability to configure EIGRP protocol.
May 29 2022, 9:45 AM · VyOS Rolling
c-po changed the status of T2773: EIGRP support for VRF from Open to In progress.
May 29 2022, 9:45 AM · VyOS 1.4 Sagitta
c-po edited projects for T2472: Ability to configure EIGRP protocol, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.0).
May 29 2022, 9:44 AM · VyOS Rolling
c-po committed rVYOSONEXa32b4fa34bfb: eigrp: T2472: add missing <multi/> specifier when redistributing protocols.
May 29 2022, 9:44 AM
c-po committed rVYOSONEX41bda37a89d3: vyos.frr: T2472: add wigrpd support.
May 29 2022, 9:44 AM
c-po committed rVYOSONEXf44bc18ad90a: eigrp: T2472: add "local-as" CLI node to specify ASN like under BGP.
May 29 2022, 9:44 AM
c-po committed rVYOSONEX58ec87d35d24: eigrp: T2472: add basic template rendering and FRR communication.
May 29 2022, 9:44 AM
c-po committed rVYOSONEX687462972361: rip: T4448: remove default version for RIP.
May 29 2022, 8:37 AM