Page MenuHomeVyOS Platform
Feed Search

Apr 19 2020

jack9603301 added a comment to T2335: Unable to assign IPv6 from ISP.
set firewall all-ping 'enable'
set firewall broadcast-ping 'enable'
set firewall config-trap 'disable'
set firewall ipv6-receive-redirects 'enable'
set firewall ipv6-src-route 'enable'
set firewall ip-src-route 'enable'
set firewall log-martians 'enable'
set firewall name wan default-action 'drop'
set firewall name wan rule 1 action 'accept'
set firewall name wan rule 1 state established 'enable'
set firewall name wan rule 1 state related 'enable'
set firewall name wan-local default-action 'drop'
set firewall name wan-local rule 1 action 'accept'
set firewall name wan-local rule 1 state established 'enable'
set firewall name wan-local rule 1 state related 'enable'
set firewall name wan-local rule 2 action 'accept'
set firewall name wan-local rule 2 icmp type-name 'echo-request'
set firewall name wan-local rule 2 protocol 'icmp'
set firewall name wan-local rule 2 state new 'enable'
set firewall name wan-local rule 3 action 'drop'
set firewall name wan-local rule 3 destination port '22'
set firewall name wan-local rule 3 protocol 'tcp'
set firewall name wan-local rule 3 recent count '4'
set firewall name wan-local rule 3 recent time '60'
set firewall name wan-local rule 3 state new 'enable'
set firewall name wan-local rule 4 action 'accept'
set firewall name wan-local rule 4 protocol 'tcp'
set firewall name wan-local rule 4 state new 'enable'
set firewall options interface pppoe0 adjust-mss '1452'
set firewall options interface pppoe0 adjust-mss6 '1280'
set firewall receive-redirects 'disable'
set firewall send-redirects 'enable'
set firewall source-validation 'disable'
set firewall state-policy established action 'accept'
set firewall state-policy established log enable
set firewall state-policy invalid action 'accept'
set firewall state-policy invalid log enable
set firewall state-policy related action 'accept'
set firewall state-policy related log enable
set firewall syn-cookies 'enable'
set firewall twa-hazards-protection 'disable'
set interfaces bridge br1 address '192.168.0.1/24'
set interfaces bridge br1 address 'fc00:470:f1cd::1/64'
set interfaces bridge br1 description 'lan 0'
set interfaces bridge br1 dhcpv6-options temporary
set interfaces bridge br1 ipv6 address autoconf
set interfaces bridge br1 ipv6 address eui64 'fc00:470:f1cd::/64'
set interfaces bridge br1 ipv6 dup-addr-detect-transmits '1'
set interfaces bridge br1 member interface eth1.1
set interfaces bridge br1 member interface eth2
set interfaces bridge br1 stp
set interfaces bridge br2 address '192.168.101.1/24'
set interfaces bridge br2 address 'fc00:470:f1cd:101::1/64'
set interfaces bridge br2 description 'lan 101'
set interfaces bridge br2 dhcpv6-options temporary
set interfaces bridge br2 ipv6 address autoconf
set interfaces bridge br2 ipv6 address eui64 'fc00:470:f1cd:101::/64'
set interfaces bridge br2 ipv6 dup-addr-detect-transmits '1'
set interfaces bridge br2 member interface eth0
set interfaces bridge br2 member interface eth1.2
set interfaces bridge br2 member interface eth3
set interfaces bridge br2 member interface eth4
set interfaces bridge br2 stp
set interfaces ethernet eth0 description 'LAN'
set interfaces ethernet eth0 ipv6 address
set interfaces ethernet eth0 ipv6 dup-addr-detect-transmits '1'
set interfaces ethernet eth1 description 'Trunk'
set interfaces ethernet eth1 vif 1 description 'vlan 1 of eth1'
set interfaces ethernet eth1 vif 2 description 'vlan 2 of eth1'
set interfaces ethernet eth2 description 'LAN'
set interfaces ethernet eth3 description 'LAN'
set interfaces ethernet eth4 description 'LAN'
set interfaces ethernet eth5 description 'WAN'
set interfaces ethernet eth5 disable-flow-control
set interfaces ethernet eth5 firewall in name 'wan'
set interfaces ethernet eth5 firewall local name 'wan-local'
set interfaces pppoe pppoe0 authentication password 'password'
set interfaces pppoe pppoe0 authentication user 'username'
set interfaces pppoe pppoe0 default-route 'auto'
set interfaces pppoe pppoe0 description 'ISP'
set interfaces pppoe pppoe0 ipv6 enable
set interfaces pppoe pppoe0 mtu '1492'
set interfaces pppoe pppoe0 source-interface 'eth5'
set nat nptv6 rule 2 description 'IPv6 NPT'
set nat nptv6 rule 2 outbound-interface 'pppoe0'
set nat nptv6 rule 2 source prefix 'fc00:470:f1cd::/48'
set nat nptv6 rule 2 translation prefix '240e:fc:7d:dc27::/64'
set nat source rule 1 description 'PUBLIC'
set nat source rule 1 log 'enable'
set nat source rule 1 outbound-interface 'pppoe0'
set nat source rule 1 protocol 'all'
set nat source rule 1 source address '0.0.0.0/0'
set nat source rule 1 translation address 'masquerade'
set protocols static interface-route 0.0.0.0/0 next-hop-interface pppoe0
set protocols static interface-route6 ::/0 next-hop-interface pppoe0
set protocols static table 150 interface-route 0.0.0.0/0 next-hop-interface pppoe0
set protocols static table 150 interface-route6 ::/0 next-hop-interface pppoe0
set service dhcp-server shared-network-name pri101 description 'DHCP 101'
set service dhcp-server shared-network-name pri101 subnet 192.168.101.0/24 default-router '192.168.101.1'
set service dhcp-server shared-network-name pri101 subnet 192.168.101.0/24 dns-server '192.168.0.254'
set service dhcp-server shared-network-name pri101 subnet 192.168.101.0/24 dns-server '192.168.101.1'
set service dhcp-server shared-network-name pri101 subnet 192.168.101.0/24 dns-server '192.168.0.1'
set service dhcp-server shared-network-name pri101 subnet 192.168.101.0/24 lease '86400'
set service dhcp-server shared-network-name pri101 subnet 192.168.101.0/24 ntp-server '192.168.101.1'
set service dhcp-server shared-network-name pri101 subnet 192.168.101.0/24 range 0 start '192.168.101.8'
set service dhcp-server shared-network-name pri101 subnet 192.168.101.0/24 range 0 stop '192.168.101.254'
set service dhcpv6-server preference '0'
set service dhcpv6-server shared-network-name pri101 subnet fc00:470:f1cd:101::/64 address-range start fc00:470:f1cd:101::8 stop 'fc00:470:f1cd:101:ffff:ffff:ffff:ffff'
set service dhcpv6-server shared-network-name pri101 subnet fc00:470:f1cd:101::/64 name-server 'fc00:470:f1cd::ff00'
set service dhcpv6-server shared-network-name pri101 subnet fc00:470:f1cd:101::/64 name-server 'fc00:470:f1cd::1'
set service dhcpv6-server shared-network-name pri101 subnet fc00:470:f1cd:101::/64 name-server 'fc00:470:f1cd:101::1'
set service dns forwarding allow-from '192.168.0.0/16'
set service dns forwarding allow-from '2001:470:f1cd::/48'
set service dns forwarding cache-size '1024'
set service dns forwarding domain pve. server '192.168.0.47'
set service dns forwarding domain pve. server '2001:470:f1cd::47'
set service dns forwarding listen-address '0.0.0.0'
set service dns forwarding listen-address '::'
set service dns forwarding name-server '114.114.114.114'
set service dns forwarding name-server '1.1.1.1'
set service dns forwarding name-server '1.0.0.1'
set service dns forwarding name-server '2001:470:f1cd::ff00'
set service dns forwarding name-server '192.168.0.254'
set service dns forwarding system
set service https virtual-host vhost0 listen-address '*'
set service https virtual-host vhost0 server-name '192.168.0.1'
set service mdns repeater interface 'br1'
set service mdns repeater interface 'br2'
set service router-advert interface br1
set service router-advert interface br2
set service ssh listen-address '0.0.0.0'
set system acceleration
set system config-management commit-revisions '100'
set system console device ttyS0 speed '115200'
...skipping...
set service dhcpv6-server shared-network-name pri101 subnet fc00:470:f1cd:101::/64 name-server 'fc00:470:f1cd::ff00'
set service dhcpv6-server shared-network-name pri101 subnet fc00:470:f1cd:101::/64 name-server 'fc00:470:f1cd::1'
set service dhcpv6-server shared-network-name pri101 subnet fc00:470:f1cd:101::/64 name-server 'fc00:470:f1cd:101::1'
set service dns forwarding allow-from '192.168.0.0/16'
set service dns forwarding allow-from '2001:470:f1cd::/48'
set service dns forwarding cache-size '1024'
set service dns forwarding domain pve. server '192.168.0.47'
set service dns forwarding domain pve. server '2001:470:f1cd::47'
set service dns forwarding listen-address '0.0.0.0'
set service dns forwarding listen-address '::'
set service dns forwarding name-server '114.114.114.114'
set service dns forwarding name-server '1.1.1.1'
set service dns forwarding name-server '1.0.0.1'
set service dns forwarding name-server '2001:470:f1cd::ff00'
set service dns forwarding name-server '192.168.0.254'
set service dns forwarding system
set service https virtual-host vhost0 listen-address '*'
set service https virtual-host vhost0 server-name '192.168.0.1'
set service mdns repeater interface 'br1'
set service mdns repeater interface 'br2'
set service router-advert interface br1
set service router-advert interface br2
set service ssh listen-address '0.0.0.0'
set system acceleration
set system config-management commit-revisions '100'
set system console device ttyS0 speed '115200'
set system domain-name 'router'
set system host-name 'vyos'
set system ip arp table-size '2048'
set system ip multipath layer4-hashing
set system ipv6 multipath layer4-hashing
set system ipv6 neighbor table-size '2048'
set system ipv6 strict-dad
set system login user vyos authentication encrypted-password '$6$UaXQViDvJ.Hr$85U/9Q5d/tc9hdtrnntMVgrztOCext..OJCHaJYZUo82GAdD95lchvSjI3vCZJTNte7cIAs87YctYlXODGXAz1'
set system login user vyos authentication plaintext-password ''
set system name-server '192.168.0.1'
set system ntp allow-clients address '192.168.0.0/16'
set system ntp allow-clients address 'fc00:470:f1cd::/48'
set system ntp listen-address '::'
set system ntp listen-address '0.0.0.0'
set system ntp server 0.centos.pool.ntp.org
set system ntp server 1.centos.pool.ntp.org
set system ntp server 2.centos.pool.ntp.org
set system ntp server 3.centos.pool.ntp.org
set system ntp server ntp.qhjack.cn
set system sysctl custom net.ipv4.conf.all.rp_filter value '0'
set system sysctl custom net.ipv4.conf.default.rp_filter value '0'
set system sysctl custom net.ipv4.conf.eth0.rp_filter value '0'
set system sysctl custom net.ipv6.conf.all.accept_ra value '2'
set system sysctl custom net.ipv6.conf.all.forwarding value '1'
set system syslog global facility all level 'info'
set system syslog global facility protocols level 'debug'
set system time-zone 'Asia/Shanghai'
Apr 19 2020, 11:29 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2335: Unable to assign IPv6 from ISP.

Can you please post the configuration as show configuration commands from op-mode level? Then it will become easier to reproduce it. Thanks

Apr 19 2020, 11:05 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2335: Unable to assign IPv6 from ISP.

The configuration is as follows:

Apr 19 2020, 10:06 AM · VyOS 1.3 Equuleus (1.3.0)
c-po reassigned T2232: Prevent deletion of bridge member interfaces from c-po to thomas-mangin.
Apr 19 2020, 10:03 AM · Restricted Project, VyOS 1.5 Circinus
c-po added a comment to T2335: Unable to assign IPv6 from ISP.

Please share your configuration and where you expect an IPv6 address to pop up

Apr 19 2020, 9:59 AM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2185: Start daemons with systemd units instead of with start-stop-daemon as Resolved.
Apr 19 2020, 8:50 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 edited a custom field on T2335: Unable to assign IPv6 from ISP.
Apr 19 2020, 8:36 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 updated the task description for T2335: Unable to assign IPv6 from ISP.
Apr 19 2020, 8:34 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 created T2335: Unable to assign IPv6 from ISP.
Apr 19 2020, 8:32 AM · VyOS 1.3 Equuleus (1.3.0)

Apr 18 2020

alainlamar closed T2210: vyos-1x: WiFi interfaces as bridge slaves, hostapd config items missing as Invalid.

The hostapd.conf says that this might not be needed anymore.

Apr 18 2020, 9:49 PM · VyOS 1.3 Equuleus (1.3.0)
alainlamar closed T2312: Use LED modules to enable more visible feedback on VyOS hardware chassis as Resolved.
Apr 18 2020, 8:55 PM · VyOS 1.3 Equuleus (1.3.0)
alainlamar added a comment to T2312: Use LED modules to enable more visible feedback on VyOS hardware chassis.

Thought about some quirks. Did not touch the reset button yet but had in mind to use it as some ACPI power button to enable cold boot by pressing a button, not unplugging and replugging odd wires. Resetting the config by that button would be a waste of that button. You would have to hook up to the APU board by serial again in order to revive it. If you did so, you might as well just have moved away the bad config and reboot :-) Once I get a hang of how that reset button works (gotta look into the GPIO stuff), I'll open a new ticket. Maybe we can add some generic config wizzardry to set up LEDs and GPIOs once we get a good grasp on it.

Apr 18 2020, 8:55 PM · VyOS 1.3 Equuleus (1.3.0)
alainlamar closed T2306: Add new cipher suites to the WiFi configuration as Resolved.
Apr 18 2020, 8:45 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2324: Cleanup IPoE server implementation and CLI commands as Resolved.
Apr 18 2020, 7:46 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2110: RADIUS: supply include file for radius config to have a uniform CLI as Resolved.
Apr 18 2020, 7:36 PM · VyOS 1.3 Equuleus (1.3.0)
c-po updated the task description for T2324: Cleanup IPoE server implementation and CLI commands.
Apr 18 2020, 7:36 PM · VyOS 1.3 Equuleus (1.3.0)
primoz added a comment to T2321: VRF support for SSH, NTP, SNMP service.

All that's really needed is to somehow edit /usr/lib/systemd/system/ssh.service to change

Apr 18 2020, 7:36 PM · VyOS 1.3 Equuleus (1.3.0)
thomas-mangin created T2334: remove Interface.options and use Interface.default instead.
Apr 18 2020, 4:40 PM · VyOS 1.3 Equuleus (1.3.6)
thomas-mangin added a comment to T2320: Wireguard creates non-existing interfaces in [op-mode]..

The code has the concept of options which can be infered from the default dict and thefore should probably be removed for simplication.

Apr 18 2020, 4:36 PM · VyOS 1.3 Equuleus (1.3.0)
Unknown Object (User) created T2333: Increase default sysctl values.
Apr 18 2020, 4:13 PM · VyOS 1.3 Equuleus (1.3.6)
c-po updated the task description for T2324: Cleanup IPoE server implementation and CLI commands.
Apr 18 2020, 3:56 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T2331: VRRP op-mode errors.
Apr 18 2020, 3:13 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T2330: Vpn op-mode syntax.
Apr 18 2020, 3:04 PM · VyOS 1.3 Equuleus (1.3.0)
jjakob added a comment to T2316: DHCP-server op-mode errors.
vyos@rt-home:~$ show dhcp server leases sort ab
Invalid sort key, choose from: ['ip', 'hardware_address', 'state', 'start', 'end', 'remaining', 'pool', 'hostname']
vyos@rt-home:~$ show dhcp server leases state ab
Invalid lease state, choose from: ['all', 'active', 'free', 'expired', 'released', 'abandoned', 'reset', 'backup']
vyos@rt-home:~$ show dhc
dhcp    dhcpv6  
vyos@rt-home:~$ show dhcpv6 server leases
Apr 18 2020, 2:42 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T2329: Show remote config openvpn .
Apr 18 2020, 2:28 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux
jjakob created T2328: dhcpv6 server not starting (disable check reversed?).
Apr 18 2020, 2:20 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
Unknown Object (User) created T2326: Migrate NHRP(DMVPN) to FRR.
Apr 18 2020, 2:14 PM · VyOS 1.5 Circinus
Viacheslav updated the task description for T2325: NHRP op-mode errors with missing daemon socket.
Apr 18 2020, 1:53 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T2325: NHRP op-mode errors with missing daemon socket.
Apr 18 2020, 1:51 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a parent task for T2184: OpenVPN op_mode tools broken: T2322: CLI [op-mode] bugs. Root task.
Apr 18 2020, 1:27 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a subtask for T2322: CLI [op-mode] bugs. Root task: T2184: OpenVPN op_mode tools broken.
Apr 18 2020, 1:27 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a parent task for T2255: DNS forwarding op-mode error: T2322: CLI [op-mode] bugs. Root task.
Apr 18 2020, 1:25 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a subtask for T2322: CLI [op-mode] bugs. Root task: T2255: DNS forwarding op-mode error.
Apr 18 2020, 1:25 PM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T2324: Cleanup IPoE server implementation and CLI commands from Open to In progress.
Apr 18 2020, 1:23 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2324: Cleanup IPoE server implementation and CLI commands.
Apr 18 2020, 1:22 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T2323: LLDP: "show lldp neighbors detail" returns warnings when service is not configured.
Apr 18 2020, 1:21 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a parent task for T2316: DHCP-server op-mode errors: T2322: CLI [op-mode] bugs. Root task.
Apr 18 2020, 1:19 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a subtask for T2322: CLI [op-mode] bugs. Root task: T2316: DHCP-server op-mode errors.
Apr 18 2020, 1:19 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a parent task for T2320: Wireguard creates non-existing interfaces in [op-mode].: T2322: CLI [op-mode] bugs. Root task.
Apr 18 2020, 1:18 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a subtask for T2322: CLI [op-mode] bugs. Root task: T2320: Wireguard creates non-existing interfaces in [op-mode]..
Apr 18 2020, 1:18 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T2322: CLI [op-mode] bugs. Root task.
Apr 18 2020, 1:18 PM · VyOS 1.3 Equuleus (1.3.0)
c-po updated the task description for T2110: RADIUS: supply include file for radius config to have a uniform CLI.
Apr 18 2020, 1:14 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2313: Accel-PPP / PPPoEserver raises "Floating point exception" when not all limits are defined, a subtask of T2314: Cleanup PPPoE server implementation and CLI commands, as Resolved.
Apr 18 2020, 1:14 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2313: Accel-PPP / PPPoEserver raises "Floating point exception" when not all limits are defined as Resolved.
Apr 18 2020, 1:14 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2314: Cleanup PPPoE server implementation and CLI commands as Resolved.
Apr 18 2020, 1:14 PM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T2224: Update Linux Kernel to v4.19.114 from Unknown Status to Resolved.
Apr 18 2020, 1:14 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po moved T2224: Update Linux Kernel to v4.19.114 from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.6) board.
Apr 18 2020, 1:13 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po moved T2286: IPoE server vulnerability from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.6) board.
Apr 18 2020, 1:13 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po changed the status of T2286: IPoE server vulnerability from Unknown Status to Resolved.
Apr 18 2020, 1:13 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po edited projects for T2286: IPoE server vulnerability, added: VyOS 1.2 Crux (VyOS 1.2.6); removed Ready for Crux (1.2.x).
Apr 18 2020, 1:13 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
primoz created T2321: VRF support for SSH, NTP, SNMP service.
Apr 18 2020, 12:52 PM · VyOS 1.3 Equuleus (1.3.0)
runar added a comment to T2206: Split WireGuard endpoint into proper host and port nodes.

Actually, specifying wireguard peer as a hostname only worked on initial setup. The reason for this is that the hostname is resolved only on initial startup of the wireguard tunnel. On boot the ip stack is not fully operational resulting in wireguard beeing unable to resolve hostnames. (But this avtually could depend of the execution time of the initialization scripts) .. a better alternative to this is to make a initialization script that is delay'd and then resolves the hostname and inserts the correct ip in wireguard when the router is fully booted. This could be created using a custom script called from the post-bootup script or something like that.

Apr 18 2020, 12:48 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav updated subscribers of T2320: Wireguard creates non-existing interfaces in [op-mode]..
Apr 18 2020, 12:44 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav updated the task description for T2320: Wireguard creates non-existing interfaces in [op-mode]..
Apr 18 2020, 12:39 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T2320: Wireguard creates non-existing interfaces in [op-mode]..
Apr 18 2020, 12:34 PM · VyOS 1.3 Equuleus (1.3.0)
c-po moved T2224: Update Linux Kernel to v4.19.114 from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Apr 18 2020, 12:20 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po changed the status of T2224: Update Linux Kernel to v4.19.114 from Resolved to Unknown Status.
Apr 18 2020, 12:20 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po closed T2319: Update Linux Kernel to v4.19.116 as Resolved.
Apr 18 2020, 12:19 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2319: Update Linux Kernel to v4.19.116.
Apr 18 2020, 12:16 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2224: Update Linux Kernel to v4.19.114 as Resolved.
Apr 18 2020, 12:16 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
jjakob changed the status of T2316: DHCP-server op-mode errors from Open to Confirmed.
Apr 18 2020, 12:12 PM · VyOS 1.3 Equuleus (1.3.0)
primoz added a comment to T2044: RPKI doesn't boot properly.

I tried this today with 1.3-rolling-202004180117 ...

Apr 18 2020, 11:39 AM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
jmcg added a comment to T2206: Split WireGuard endpoint into proper host and port nodes.

This change has removed the ability to specify a wireguard endpoint by hostname, rather than IP address. Is there an alternative resolution which maintains this ability?

Apr 18 2020, 11:30 AM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2318: dns-forwarding migration script breaks with invalid interface name as Resolved.
Apr 18 2020, 11:26 AM · VyOS 1.3 Equuleus (1.3.0)
Unknown Object (User) added a comment to T2317: l2tp overwriting ipsec config files.

PR for this task https://github.com/vyos/vyos-1x/pull/354

Apr 18 2020, 11:23 AM · VyOS 1.3 Equuleus (1.3.0)
c-po claimed T2318: dns-forwarding migration script breaks with invalid interface name.
Apr 18 2020, 11:18 AM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2318: dns-forwarding migration script breaks with invalid interface name.
Apr 18 2020, 11:18 AM · VyOS 1.3 Equuleus (1.3.0)
Unknown Object (User) changed the status of T2317: l2tp overwriting ipsec config files from Open to In progress.
Apr 18 2020, 11:18 AM · VyOS 1.3 Equuleus (1.3.0)
Unknown Object (User) created T2317: l2tp overwriting ipsec config files.
Apr 18 2020, 11:18 AM · VyOS 1.3 Equuleus (1.3.0)
c-po updated the task description for T2314: Cleanup PPPoE server implementation and CLI commands.
Apr 18 2020, 10:35 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav updated the task description for T2316: DHCP-server op-mode errors.
Apr 18 2020, 10:26 AM · VyOS 1.3 Equuleus (1.3.0)
c-po updated the task description for T2314: Cleanup PPPoE server implementation and CLI commands.
Apr 18 2020, 10:21 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T2316: DHCP-server op-mode errors.
Apr 18 2020, 10:20 AM · VyOS 1.3 Equuleus (1.3.0)
c-po updated the task description for T2314: Cleanup PPPoE server implementation and CLI commands.
Apr 18 2020, 9:59 AM · VyOS 1.3 Equuleus (1.3.0)
c-po updated the task description for T2314: Cleanup PPPoE server implementation and CLI commands.
Apr 18 2020, 9:44 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T2315: Ability to have right address-family for BGP peers..
Apr 18 2020, 8:18 AM · VyOS 1.4 Sagitta
maznu added a comment to T2044: RPKI doesn't boot properly.

While testing T1874 the procedure we followed was:

Apr 18 2020, 7:48 AM · VyOS 1.3 Equuleus (1.3.7), VyOS 1.5 Circinus, VyOS 1.4 Sagitta
c-po closed T1874: FRR crashing triggered by RPKI, a subtask of T1998: Update FRR to 7.3, as Resolved.
Apr 18 2020, 7:36 AM · VyOS 1.2 Crux (VyOS 1.2.5)
c-po closed T1874: FRR crashing triggered by RPKI as Resolved.
Apr 18 2020, 7:36 AM · VyOS 1.2 Crux (VyOS 1.2.5)
c-po moved T1874: FRR crashing triggered by RPKI from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.5) board.
Apr 18 2020, 7:36 AM · VyOS 1.2 Crux (VyOS 1.2.5)
c-po moved T1874: FRR crashing triggered by RPKI from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Apr 18 2020, 7:36 AM · VyOS 1.2 Crux (VyOS 1.2.5)
c-po added a subtask for T1998: Update FRR to 7.3: T1874: FRR crashing triggered by RPKI.
Apr 18 2020, 7:35 AM · VyOS 1.2 Crux (VyOS 1.2.5)
c-po added a parent task for T1874: FRR crashing triggered by RPKI: T1998: Update FRR to 7.3.
Apr 18 2020, 7:35 AM · VyOS 1.2 Crux (VyOS 1.2.5)
c-po claimed T1874: FRR crashing triggered by RPKI.
Apr 18 2020, 7:35 AM · VyOS 1.2 Crux (VyOS 1.2.5)
c-po added a comment to T1874: FRR crashing triggered by RPKI.

From Slack;

Marek Isalski 09:25
If anybody is using 1.2.4 or earlier for BGP, and wants to do RPKI, I can highly recommend updating to 1.2.5 which fixes this nasty segfault in FRR's bgpd: https://phabricator.vyos.net/T1874 (and devs can probably consider closing T1874 now that we know it's fixed in 1.2.5)

Apr 18 2020, 7:35 AM · VyOS 1.2 Crux (VyOS 1.2.5)
maznu added a comment to T1874: FRR crashing triggered by RPKI.

This is looking like it might be fixed in FRR version 7.2.1 onwards:

Apr 18 2020, 7:13 AM · VyOS 1.2 Crux (VyOS 1.2.5)
maznu added a comment to T1874: FRR crashing triggered by RPKI.

We managed to reproduce this on a test instance running VyOS 1.2.4 talking RTRR to Routinator3000 0.6.4:

Apr 18 2020, 7:10 AM · VyOS 1.2 Crux (VyOS 1.2.5)
c-po changed the status of T2313: Accel-PPP / PPPoEserver raises "Floating point exception" when not all limits are defined, a subtask of T2314: Cleanup PPPoE server implementation and CLI commands, from Open to In progress.
Apr 18 2020, 6:50 AM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T2313: Accel-PPP / PPPoEserver raises "Floating point exception" when not all limits are defined from Open to In progress.
Apr 18 2020, 6:50 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a subtask for T2314: Cleanup PPPoE server implementation and CLI commands: T2313: Accel-PPP / PPPoEserver raises "Floating point exception" when not all limits are defined.
Apr 18 2020, 6:50 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a parent task for T2313: Accel-PPP / PPPoEserver raises "Floating point exception" when not all limits are defined: T2314: Cleanup PPPoE server implementation and CLI commands.
Apr 18 2020, 6:50 AM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T2314: Cleanup PPPoE server implementation and CLI commands from Open to In progress.
Apr 18 2020, 6:50 AM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2314: Cleanup PPPoE server implementation and CLI commands.
Apr 18 2020, 6:50 AM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2313: Accel-PPP / PPPoEserver raises "Floating point exception" when not all limits are defined.
Apr 18 2020, 6:48 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2312: Use LED modules to enable more visible feedback on VyOS hardware chassis.

@alainlamar any chance to implement the reset button to clear the config?

Apr 18 2020, 6:22 AM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T2312: Use LED modules to enable more visible feedback on VyOS hardware chassis.

The LED assignment could be handled in a generic startup script where the hardware platforms and LEDs will be assigned

Apr 18 2020, 6:21 AM · VyOS 1.3 Equuleus (1.3.0)

Apr 17 2020

alainlamar added a comment to T2312: Use LED modules to enable more visible feedback on VyOS hardware chassis.

Pull request: https://github.com/vyos/vyos-build-kernel/pull/6

Apr 17 2020, 10:30 PM · VyOS 1.3 Equuleus (1.3.0)
alainlamar claimed T2312: Use LED modules to enable more visible feedback on VyOS hardware chassis.
Apr 17 2020, 9:54 PM · VyOS 1.3 Equuleus (1.3.0)
alainlamar created T2312: Use LED modules to enable more visible feedback on VyOS hardware chassis.
Apr 17 2020, 9:53 PM · VyOS 1.3 Equuleus (1.3.0)
alainlamar added a comment to T2306: Add new cipher suites to the WiFi configuration.

Pull request: https://github.com/vyos/vyos-1x/pull/353

Apr 17 2020, 8:59 PM · VyOS 1.3 Equuleus (1.3.0)