ahh.. looking at it now it looks like the new upstream DTB uses lanX for all "lan" switchports..
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Nov 18 2023
Nov 18 2023
Enumaration order and names are specified here:
DSA switch ports: https://github.com/torvalds/linux/blob/master/arch/arm64/boot/dts/mediatek/mt7986a-bananapi-bpi-r3.dts#L408-L459
CPU Ethernet ports: https://github.com/torvalds/linux/blob/master/arch/arm64/boot/dts/mediatek/mt7986a-bananapi-bpi-r3.dts#L171-L198
@Apachez no, they are not mapped by hw-id, all mapping of DSA ports are done by the DTB file (Hardware Device Tree) loaded into the kernel. also the enumeration order of cpu ethX interfaces are specified by the DTB file
Does all the interfaces at bananapi represent a hw-id which can be used to map to the ethX syntax of VyOS?
jestabro raised the priority of T5758: Restore scanning configs when live installing from Low to Normal.
Nov 17 2023
Nov 17 2023
Viacheslav renamed T5750: Upgrade from 1.3.4 to 1.4 Rolling fails QoS from Upgrade from 1.3.4 to 1.4 Rolling fails. to Upgrade from 1.3.4 to 1.4 Rolling fails QoS.
Viacheslav added a project to T5750: Upgrade from 1.3.4 to 1.4 Rolling fails QoS: VyOS 1.5 Circinus.
Viacheslav changed the status of T5749: Show MAC address VRF and MTU by default for "show interfaces", a subtask of T5747: op-mode add MAC VRF and MTU for show interfaces summary, from Open to In progress.
Viacheslav changed the status of T5749: Show MAC address VRF and MTU by default for "show interfaces" from Open to In progress.
Nov 16 2023
Nov 16 2023
jestabro added a project to T4516: Rewrite system image manipulation tools in Python: VyOS 1.5 Circinus.
Re-Opening. this need to be extended to bridge firewall
Viacheslav updated the task description for T5749: Show MAC address VRF and MTU by default for "show interfaces".
Viacheslav changed the status of T5747: op-mode add MAC VRF and MTU for show interfaces summary from Open to Needs testing.
c-po renamed T5748: Tunnel class Interface method get_mac() returns IP address for the tunnel interface from Class Interface method get_mac() retruns IP address for the tunnel interface to Tunnel class Interface method get_mac() returns IP address for the tunnel interface.
c-po added a comment to T5748: Tunnel class Interface method get_mac() returns IP address for the tunnel interface.
>>> from vyos.ifconfig import Interface
>>> Interface('tun0').get_mac()
'192.0.2.1'c-po moved T5736: igmp: migrate "protocols igmp" to "protocols pim" from Open to Finished on the VyOS 1.5 Circinus board.
c-po moved T5736: igmp: migrate "protocols igmp" to "protocols pim" from Open to Finished on the VyOS 1.4 Sagitta board.
c-po closed T5595: Multicast - PIM bfd feature enable , a subtask of T5733: pim(6): rewrite FRR PIM daemon configuration to get_config_dict() and add missing IGMP features, as Resolved.
c-po moved T5595: Multicast - PIM bfd feature enable from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T5595: Multicast - PIM bfd feature enable from Open to Finished on the VyOS 1.5 Circinus board.
giuavo added a comment to T5722: Commit failure when trying to add a route in failover if the gateway is not in the same interface network.
I would like to contribute with a PR about this. At the same, time I would need some guidance on identifying the conditions requiring the onlink option to be added.
Viacheslav added a project to T5747: op-mode add MAC VRF and MTU for show interfaces summary: VyOS 1.4 Sagitta.
Viacheslav renamed T5747: op-mode add MAC VRF and MTU for show interfaces summary from op-mode add MAC and MTU for show interfaces to op-mode add MAC VRF and MTU for show interfaces summary.
Viacheslav closed T5689: FRR 9.0.1 in VyOS current segfaults on show rpki prefix $prefix as Resolved.
Viacheslav changed the status of T5689: FRR 9.0.1 in VyOS current segfaults on show rpki prefix $prefix from Open to Needs testing.
I have a similar setup where I have two VyOS VMs used as VPN routers with some firewalling enabled. Since I use OSPF for dynamic routing I am not able to synchronize the sessions between both routers so in case one VPN router fails the other one can't take over flawlessly. Having conntrack-sync configuration separated from VRRP would be a great benefit.
This can be done in other areas such as firewall rules already:
Nov 15 2023
Nov 15 2023
PR https://github.com/vyos/vyos-1x/pull/2491
vyos@r4# run show interfaces summary
Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down
Interface IP Address MAC VRF MTU S/L Description
----------- ----------------- ----------------- ------- ----- ----- -------------
dum0 203.0.113.1/32 96:44:ad:c5:a1:a5 default 1500 u/u
eth0 192.168.122.14/24 52:54:00:f1:fd:77 default 1500 u/u WAN
eth1 192.0.2.1/24 52:54:00:04:33:2b foo 1500 u/u LAN-eth1
eth1v10v4 10.10.10.10/24 00:00:5e:00:01:0a foo 1500 u/u
eth2 - 52:54:00:40:2e:af default 1504 u/u LAN-eth2
eth3 - 52:54:00:09:a4:b4 default 1500 A/D
eth4 - 52:54:00:2c:51:09 default 1500 A/D
eth5 - 52:54:00:f3:1d:e8 default 1500 A/D
lo 127.0.0.1/8 00:00:00:00:00:00 default 65536 u/u
::1/128watson.ash added a comment to T5728: Improve compatibility between OpenVPN on VyOS 1.5 and OpenVPN Connect Client.
looks great from my perspective (I've just updated our nodes. Tested on Community Edition client on windows and Connect V3 client on windows and Tunnelblick on Mac all working as expected. (I tested with; 1.5-rolling-202311150738).
nice work!
Viacheslav added a project to T5745: conntrack-sync: Multiprimary setups for HA/VRRP: VyOS 1.5 Circinus.
Created a related feature request but for VRRP here
https://vyos.dev/T5745
Viacheslav moved T5732: generate firewall rule-resequence drops geoip country-code from output from Open to Finished on the VyOS 1.4 Sagitta board.
JeffWDH closed T5732: generate firewall rule-resequence drops geoip country-code from output as Resolved.
JeffWDH added a comment to T5732: generate firewall rule-resequence drops geoip country-code from output.
Fix was merged into 1.4 and 1.5.
Viacheslav added a project to T3983: show pki certificate Doesnt show x509 certificates: VyOS 1.5 Circinus.
I had entered the command as you have suggested and I think it's working somehow.
Viacheslav changed the status of T5726: HTTPS API image cannot be updated from Open to Needs testing.
Viacheslav changed the status of T5732: generate firewall rule-resequence drops geoip country-code from output from Open to In progress.
JeffWDH added a comment to T5732: generate firewall rule-resequence drops geoip country-code from output.
Viacheslav moved T5726: HTTPS API image cannot be updated from Open to Finished on the VyOS 1.5 Circinus board.
PR for 1.5
https://github.com/vyos/vyos-1x/pull/2483
Viacheslav moved T5689: FRR 9.0.1 in VyOS current segfaults on show rpki prefix $prefix from Open to Finished on the VyOS 1.5 Circinus board.
Viacheslav moved T5695: Build FRR with LUA scripts --enable-scripting option from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav added a project to T5695: Build FRR with LUA scripts --enable-scripting option: VyOS 1.4 Sagitta.
Viacheslav moved T5728: Improve compatibility between OpenVPN on VyOS 1.5 and OpenVPN Connect Client from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav added a comment to T5732: generate firewall rule-resequence drops geoip country-code from output.
@JeffWDH looks good to me. It definitely should fix this.
syncer moved T5739: Password recovery does not work if public keys are configured from Open to Backport Candidates on the VyOS 1.5 Circinus board.
syncer changed the status of T5739: Password recovery does not work if public keys are configured from Needs testing to In progress.
Nov 14 2023
Nov 14 2023
JeffWDH updated subscribers of T5732: generate firewall rule-resequence drops geoip country-code from output.
JeffWDH added a comment to T5732: generate firewall rule-resequence drops geoip country-code from output.
The country-code item in the config_dict is type list and gets skipped by the convert_to_set_commands function.
Viacheslav edited projects for T5739: Password recovery does not work if public keys are configured, added: VyOS 1.3 Equuleus (1.3.5); removed VyOS 1.3 Equuleus.
Viacheslav changed the status of T5728: Improve compatibility between OpenVPN on VyOS 1.5 and OpenVPN Connect Client from In progress to Needs testing.
I wonder if we should use permanent API call queries that don't depend on the path.
Viacheslav added a comment to T5728: Improve compatibility between OpenVPN on VyOS 1.5 and OpenVPN Connect Client.
@watson.ash Will be fixed in the next rolling release. Could you check it (after 2023-11-14)
And we can backport it to 1.4 if all works fine.
Thanks.
zsdc changed the status of T5739: Password recovery does not work if public keys are configured from In progress to Needs testing.