PR for 1.4: https://github.com/vyos/vyos-1x/pull/1367
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Jun 22 2022
Jun 22 2022
Jun 21 2022
Jun 21 2022
yas-nyan renamed T4477: router-advert: support RDNSS lifetime option from router-advert: support RDNSS lifettime option to router-advert: support RDNSS lifetime option.
yas-nyan renamed T4477: router-advert: support RDNSS lifetime option from router-advert: support advertising specific routes to router-advert: support RDNSS lifettime option.
Jun 20 2022
Jun 20 2022
c-po closed T1856: Support configuring IPSec SA bytes, a subtask of T2816: Rewrite IPsec scripts with the new XML/Python approach, as Resolved.
c-po moved T1748: vbash: beautify tab completion output/line breaks from Open to In Progress on the VyOS 1.4 Sagitta board.
Jun 19 2022
Jun 19 2022
We don't have such option client-hostname in dhcpdv6.leases
Jun 18 2022
Jun 18 2022
Viacheslav changed the subtype of T4470: Rewrite load-balancing wan to XML/Python from "Bug" to "Feature Request".
c-po renamed T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Update Linux Kernel to v5.4.197 / 5.10.121 to Update Linux Kernel to v5.4.197 / 5.10.123.
Tested and works correct. Thanks @jestabro
PR: https://github.com/vyos/vyos-utils/pull/4
Adding the additional validator to policy.xml.in allows the smoketest (above) to pass.
Jun 17 2022
Jun 17 2022
One approach is linked below; to be discussed before PR.
https://github.com/vyos/vyos-utils/compare/master...jestabro:increment-decrement?expand=1
I hope it can be found. I have been banging my head against the wall with this issue :( and it's hurting.
load-balancing wan completely broken with nexthop dhcp for 1.4 (it happens after first reboot or renew)
The script gets empty values there https://github.com/vyos/vyatta-wanloadbalance/blob/a831f22d4c34bf947b0335e55573280b75c2bde0/src/lbdecision.cc#L180
So ip route replace table is never executed
Why does it get an empty value?
It parse lease file https://github.com/vyos/vyatta-wanloadbalance/blob/a831f22d4c34bf947b0335e55573280b75c2bde0/src/lbdata.cc#L335-L341
option new_routers and in 1.4 the file looks as
Jun 16 2022
Jun 16 2022
i've checked this issues, it seems to be solved . I think that it was solved for another task. I used the following vyos version :
Viacheslav moved T4468: web-proxy source group cannot start with a number bug from Open to Finished on the VyOS 1.4 Sagitta board.
PR for 1.3 https://github.com/vyos/vyos-1x/pull/1364
I think it should check this parameter per commit and it is a bug with validation as we don't have a tunnel interface yet
But after commit it will be valid value
PR https://github.com/vyos/vyos-1x/pull/1363
vyos@r14# set service webproxy url-filtering squidguard source-group fdsf-dg [edit] vyos@r14#
Viacheslav changed the status of T4468: web-proxy source group cannot start with a number bug from Open to In progress.
It seems issue with this validator https://github.com/vyos/vyos-1x/blob/1978946312a36f4913e1e5ea7754668b1c653d09/interface-definitions/service_webproxy.xml.in#L487
route-maps support a relative adjustment of the metric (https://github.com/vyos/vyos-1x/blob/current/interface-definitions/policy.xml.in#L1402-L1417)
Jun 15 2022
Jun 15 2022
sarthurdev changed the status of T4435: Policy route and firewall - error when using undefined group from Open to Needs testing.
Viacheslav closed T1890: Metatask: rewrite flow-accounting to XML and Python, a subtask of T3355: Remove all remaining legacy Vyatta code, as Resolved.
sarthurdev changed the status of T4147: New Firewall Implementation - proposed changes on group implementation from In progress to Needs testing.
Jun 14 2022
Jun 14 2022
Since in previous version set protocols nhrp tunnel tun0 cisco-authentication "" was allowed, a migration script is required. Otherwise, when upgrading, configuration fails.
Viacheslav moved T4380: Feature Request: ocserv: 2FA OTP key generator in VyOS CLI from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav moved T4420: Feature Request: ocserv: show configured 2FA OTP key from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav added a project to T4420: Feature Request: ocserv: show configured 2FA OTP key: VyOS 1.4 Sagitta.
Jun 13 2022
Jun 13 2022
PR https://github.com/vyos/vyos-1x/pull/1358
set protocols failover route 203.0.113.1/32 next-hop 192.168.100.1 check target '192.168.100.1' set protocols failover route 203.0.113.1/32 next-hop 192.168.100.1 check timeout '10' set protocols failover route 203.0.113.1/32 next-hop 192.168.100.1 check type 'icmp' set protocols failover route 203.0.113.1/32 next-hop 192.168.100.1 interface 'eth1' set protocols failover route 203.0.113.1/32 next-hop 192.168.100.1 metric '2'
sarthurdev changed the status of T4147: New Firewall Implementation - proposed changes on group implementation from Open to In progress.
Working on moving groups to named set as part of a refactor in some firewall code.
Jun 12 2022
Jun 12 2022
Unknown Object (User) closed T4380: Feature Request: ocserv: 2FA OTP key generator in VyOS CLI as Resolved.
Tested with VyOS 1.4-rolling-202206100921
Works as expected
Described in the documentation
Jun 11 2022
Jun 11 2022
n.fort renamed T4435: Policy route and firewall - error when using undefined group from Policy route without defined port-group error to Policy route and firewall - error when using undefined group.
Extra checks are needed not only when attaching a policy route to an interface, but also when attaching firewall.
For example:
vyos@vyos# set firewall name FOO rule 10 action accept [edit] vyos@vyos# set firewall name FOO rule 10 destination group address-group NOAG [edit] vyos@vyos# commit
dmbaturin renamed T3380: "show vpn ike sa" does not display IPv6 peers from Show vpn ike sa with IPv6 remote peer to "show vpn ike sa" does not display IPv6 peers.
Jun 10 2022
Jun 10 2022
sarthurdev changed the status of T478: Firewall address group (multi and nesting), a subtask of T2199: Rewrite firewall in new XML/Python style, from Open to Needs testing.
sarthurdev changed the status of T478: Firewall address group (multi and nesting) from Open to Needs testing.
c-po moved T4434: DMVPN: cisco-authentication password length is 8 characters from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4436: BGP/VRF - not enable peer on address-family from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4437: flow-accounting: support IPv6 flow collectors from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4155: PBR: `set table main` fails in `firewall.py` with newer rolling releases from In Progress to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4345: New firewall code does not accept "rate/time interval" syntax used in old config from In Progress to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4144: Firewall address-group - Improve error messages from In Progress to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4301: The "arp-monitor" option in bonding interface settings does not work from In Progress to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4444: sstp: Feature request. Port number changing support from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4448: rip: add support for explicit version selection from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4465: node.def generation misses whitespace on multiple use of <path> from Open to Finished on the VyOS 1.4 Sagitta board.
c-po closed T4465: node.def generation misses whitespace on multiple use of <path>, a subtask of T4284: QoS: rewrite to XML and Python, as Resolved.
c-po changed the status of T4465: node.def generation misses whitespace on multiple use of <path> from Open to In progress.
c-po changed the status of T4465: node.def generation misses whitespace on multiple use of <path>, a subtask of T4284: QoS: rewrite to XML and Python, from Open to In progress.
n.fort changed the status of T4460: nhrp not starting due to missing cisco-authentication value from Open to Needs testing.
Fix Regex for addresses and python ckecks https://github.com/vyos/vyos-1x/pull/1354
- Some domains can't be added, for example dns.google
vyos@r12# set firewall group domain-group DOMAINS address dns.google
Fix smoketest https://github.com/vyos/vyos-1x/pull/1352
Jun 9 2022
Jun 9 2022
c-po moved T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
c-po renamed T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Update Linux Kernel to v5.4.191 / 5.10.113 to Update Linux Kernel to v5.4.197 / 5.10.121.
Viacheslav closed T2580: Support for ip pools for ippoe, a subtask of T4085: Rewrite L2TP/PPTP/SSTP/PPPoE services to get_config_dict, as Resolved.
Viacheslav lowered the priority of T970: Support matching domain name in firewall rules from High to Normal.
Viacheslav changed the status of T970: Support matching domain name in firewall rules from In progress to Needs testing.