Fixed in https://github.com/vyos/vyatta-cfg-quagga/commit/d4097690c40f619bc0e78a0d674985f7880a19a3 according to @Viacheslav
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Aug 15 2022
Aug 15 2022
Viacheslav edited projects for T4082: Add op mode command to restart ldpd, added: VyOS 1.3 Equuleus; removed VyOS 1.3 Equuleus (1.3.2).
Viacheslav closed T3988: Feature Request: IPsec Multiple local/remote prefix for the tunnel as Resolved.
Nice. Is this syntax supported in vyos or it needs some development?
It is possible but with specific syntax
I found some examples:
nft insert rule ip filter VYOS_FW_FORWARD ip 'saddr & 0.255.0.255 != 0.11.0.13' counter
GitHub <[email protected]> committed rVYOSONEXbe96aa03a1e4: Merge pull request #1468 from sever-sever/T4609 (authored by c-po).
OK. I was trying to migrate from an EdgeRouter and this is a rule I used to have.
set service upnp rule 10 action allow set service upnp rule 10 external-port-range 1024-65536 set service upnp rule 10 internal-port-range 1024-65536 set service upnp rule 10 ip 10.0.0.1/24
@patrickli nftables is not engine for iptables. It is programs to work with netfilter
That's why I ask for the real example
root@r1:/home/vyos# nft insert rule ip6 filter INPUT ip6 saddr ::dead:beef/::ffff:ffff counter
Error: syntax error, unexpected string, expecting number
insert rule ip6 filter INPUT ip6 saddr ::dead:beef/::ffff:ffff counter
^^^^^^^^^^^
root@r1:/home/vyos#Yeah nftables is just the engine for iptables. EdgeOS supports this syntax.
@patrickli In 1.4 we don't use iptables, we use nftables
LInk to nftables example will be helpful.
@patrickli Could you attach an example of VyOS configuration with set service upnp xxx
If you manually change upnpd.conf does it work correctly?
Viacheslav changed the status of T4609: Unable to Restart Container VyOS 1.4 from Open to In progress.
Viacheslav changed the status of T4595: DPD interval and timeout do not work in DMVPN from Open to Needs testing.
GitHub <[email protected]> committed rVYOSONEX63d572ffa332: Merge pull request #1467 from dmbaturin/macsec-fix (authored by c-po).
GitHub <[email protected]> committed rVYOSONEX3c4e778d713b: Merge pull request #1465 from sever-sever/T4595 (authored by c-po).
Aug 14 2022
Aug 14 2022
@dmbaturin, here are the changes I made: https://github.com/vyos/vyos-build/compare/equuleus...fvlaicu:equuleus
I'm using the 1.4 kernel in 1.3.
dmbaturin edited projects for T4393: sstp: add support for configuring host-name (SNI), added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4412: commit archive: reboot not working with sftp, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin closed T4421: Add support for floating point numbers in the numeric validator as Resolved.
dmbaturin edited projects for T4455: smp-affinity required by some platforms but doesn't exists in the CLI, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T2763: New SNMP resource request - SNMP over TCP, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4511: IPv6 DNS lookup, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4533: Radius clients don’t have simple permissions, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4565: vlan aware bridge not working , added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T3474: Revisit storing syntax version of interface definitions in XML file, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin changed the status of T3785: Add unicode support to configtree backend, a subtask of T2941: Using a non-ASCII character in the description field causes UnicodeDecodeError in configsource.py, from Unknown Status to Resolved.
dmbaturin changed the status of T3785: Add unicode support to configtree backend from Unknown Status to Resolved.
dmbaturin edited projects for T3977: dhcp-relay-agent uses "physical" IP instead of vrrp IP, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T3980: vrrp transition-script validator makes warning fatal and also causes a python NameError exception, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T3987: An error occurs after stopping snmpd in frr, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T3988: Feature Request: IPsec Multiple local/remote prefix for the tunnel, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4001: Cannot use local-subnet or remote-subnet when using transport mode, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4040: RADIUS: NAS-ID configuration, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4062: VRRP IPSEC-AH : sequence number xxxxxxx already processed. Packet dropped. Local(xxxxxxx), added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4072: Feature Request: Firewall on bridge interfaces, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4091: Progress bar support for HTTP uploads, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4094: Missed conntrack-sync failover-mechanism cluster, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4117: Does not possible to configure PoD/CoA for L2TP vpn, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4139: Wireless interface member of a bridge, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4143: Wrong section for Cloud-init User-Data for OVA images, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4185: [VPN-IPSEC] not boot config after reboot, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4190: Add commit comment to the configuration API., added: VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4206: Policy Based Routing with DHCP Interface Issue, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4207: Policy Based Route Issue with Rules for Multiple Tables, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4208: Issues With More than Two Default Route Paths, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4214: [DHCP] static route dhcp-interface issues, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4222: Support for TWAMP as round-trip metric, added: VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4238: Support for overriding XML properties in the template preprocessor, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin changed the status of T4260: Extend vyos.configdict.node_changed() to support recursiveness, a subtask of T4203: Reconfigure DHCP client interface causes brief outages, from Unknown Status to Resolved.
dmbaturin changed the status of T4260: Extend vyos.configdict.node_changed() to support recursiveness, a subtask of T4235: Add config tree diff algorithm, from Unknown Status to Resolved.
dmbaturin changed the status of T4260: Extend vyos.configdict.node_changed() to support recursiveness from Unknown Status to Resolved.
dmbaturin edited projects for T4280: dhcp-relay: does not work with wireguard uplink, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4281: System users migration can lead to inaccessible shell, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4291: Consolidate component version read/write functions, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4292: Rewrite vyatta-save-config.pl to Python, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4295: Use config_tree instead of legacy loadFile in vyos-load-config.py, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4312: Telegraf configuration doesn't accept IPs for URL, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4316: Update save-config/load-config, added: VyOS 1.4 Sagitta; removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4318: Add ability to mark nodes as non-tag nodes, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4328: Large MTU on 1.3.1-S1, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin renamed T4415: Include license/copyright files in the image but remove user documentation from /usr/share/doc to reduce its size from Back documentation into the build to Include license/copyright files in the image but remove user documentation from /usr/share/doc to reduce its size.
dmbaturin edited projects for T4422: WAN load-balance status failed on all interfaces if one of them failed, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4443: Wan Load Balancing Multiple Regressions, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4452: WAN load-balancing exclude rules break PBR, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4463: Missing check in edit command, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4466: intel i225-v nic does not detect link after boot, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
@florin Do you plan to make a pull request?
dmbaturin edited projects for T4475: route-map does not support ipv6 peer, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4478: Firewall ipv6 p2p option failed , added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4519: DHCPv6: "set show dhcpv6 server leases" should show DUID instead of IAID_DUID, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4529: Backtrace for config-archive when netwofrk is not configured, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4530: Need MTU warning when CCP is on, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4537: MACsec not working with cipher gcm-aes-256, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4588: BGP Peer Group Scaling issues, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).
dmbaturin edited projects for T4584: hostap: create custom package build, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.2).