we've added this ability to configure the topology on isis :
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
May 29 2024
agree ,it's more a feature than a bug : PR https://github.com/vyos/vyos-1x/pull/3537
More a feature request than a bug
the problem here is that MT options is enable by default when the RIB has ipv4, if not not-MT is enable by default on IPv4 .So, you need to add additional topologies (ipv6-unicast , ipv6-multicast,etc)
May 28 2024
@Viacheslav here you go:
Can you provide set of commands instead? Bug-report-guidelines
@ssasso - thanks for this good catch! Coming from a Junos world, I was a bit surprised at the first place when I enabled ISIS and found no ipv6 isis routes and no multi-topology config option (and yes - we have multi-topology in place)
The charon identifier also shows IKE name of the SA; this way, we can identify peers in the logs https://github.com/vyos/vyos-build/blob/b809886538eaad66b8756be8f5e758584f88e6a6/data/live-build-config/hooks/live/30-strongswan-configs.chroot#L41-L54
The current show log vpn does https://github.com/vyos/vyos-1x/blob/48e5266e2bca8d1d7a2ee4bacbe0e6628de3fa66/op-mode-definitions/show-log.xml.in#L710
May 27 2024
tested new cli structure, it combine the new mach-group and old syntax :
PR opened: https://github.com/vyos/vyos-1x/pull/3532
The dependency allowed for 386/amd64 only https://github.com/vyos/vyos-build/blob/b809886538eaad66b8756be8f5e758584f88e6a6/docker/Dockerfile#L281
Though the package is available for ARM
As several CA were allowed some time ago it is a bug with op-mode generator.
There is a list of CA's https://github.com/vyos/vyos-1x/blob/48e5266e2bca8d1d7a2ee4bacbe0e6628de3fa66/src/op_mode/ikev2_profile_generator.py#L147
The template https://github.com/vyos/vyos-1x/blob/current/data/templates/ipsec/windows_profile.j2
I made a PR that uses an implementation with a separate function: https://github.com/vyos/vyatta-cfg/pull/79
May 26 2024
Tested as working in: 1.5-rolling-202405240020
May 25 2024
Is this meant to be possible this way?
As far as I can tell the test will always error if the remote matches and neither source-interface and source-address are configured differently, including the case where they're both blank (source-interface == None on both tunnels triggers this particular case).
Only recently moved from 1.3 to 1.5 and noticed rollback-soft immediately (great stuff), the completion message was annoying me too.
May 24 2024
PR for 1.5: https://github.com/vyos/vyos-build/pull/638