Page MenuHomeVyOS Platform
Feed Search

Aug 26 2020

c-po created T2831: Update Linux Kernel to v4.19.142.
Aug 26 2020, 6:24 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
jestabro closed T2830: Migrate "service https" to use get_config_dict() as Resolved.
Aug 26 2020, 6:12 PM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T2829: PPPoE server: mppe setting is implemented as node instead of leafNode from Unknown Status to Resolved.
Aug 26 2020, 6:11 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po moved T2829: PPPoE server: mppe setting is implemented as node instead of leafNode from In Progress to Finished on the VyOS 1.2 Crux (VyOS 1.2.6) board.
Aug 26 2020, 6:10 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
jestabro changed the status of T2830: Migrate "service https" to use get_config_dict() from Open to In progress.
Aug 26 2020, 6:09 PM · VyOS 1.3 Equuleus (1.3.0)
jestabro created T2830: Migrate "service https" to use get_config_dict().
Aug 26 2020, 6:09 PM · VyOS 1.3 Equuleus (1.3.0)
c-po moved T2829: PPPoE server: mppe setting is implemented as node instead of leafNode from Needs Triage to In Progress on the VyOS 1.2 Crux (VyOS 1.2.6) board.
Aug 26 2020, 6:09 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po edited projects for T2800: Pseudo-Ethernet: source-interface must not be member of a bridge, added: VyOS 1.2 Crux (VyOS 1.2.6); removed VyOS 1.2 Crux (VyOS 1.2.5).
Aug 26 2020, 6:09 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po moved T2800: Pseudo-Ethernet: source-interface must not be member of a bridge from Needs Triage to Backlog on the VyOS 1.2 Crux (VyOS 1.2.5) board.
Aug 26 2020, 6:09 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
c-po moved T2829: PPPoE server: mppe setting is implemented as node instead of leafNode from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Aug 26 2020, 6:08 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po added a comment to T2829: PPPoE server: mppe setting is implemented as node instead of leafNode.

There can not be a config migrator, thus the setting will be changed to "prefer" (default) which will not break any client implementations

Aug 26 2020, 6:04 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po changed the status of T2829: PPPoE server: mppe setting is implemented as node instead of leafNode from Resolved to Unknown Status.
Aug 26 2020, 6:02 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po closed T2829: PPPoE server: mppe setting is implemented as node instead of leafNode as Resolved.
Aug 26 2020, 6:02 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po added a comment to T2829: PPPoE server: mppe setting is implemented as node instead of leafNode.

https://github.com/vyos/vyos-1x/commit/12f566f4566c8ef115b15f0c11280cb3ea9a7673

Aug 26 2020, 6:01 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po updated the task description for T2829: PPPoE server: mppe setting is implemented as node instead of leafNode.
Aug 26 2020, 5:59 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po changed the status of T2829: PPPoE server: mppe setting is implemented as node instead of leafNode from Open to In progress.
Aug 26 2020, 5:54 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po created T2829: PPPoE server: mppe setting is implemented as node instead of leafNode.
Aug 26 2020, 5:54 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
Viacheslav claimed T2828: BGP conf_mode error enforce-first-as.

PR https://github.com/vyos/vyatta-cfg-quagga/pull/55

Aug 26 2020, 4:34 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T2828: BGP conf_mode error enforce-first-as.

It seems this is parameter was moved from global to peer configuration.
https://github.com/FRRouting/frr/pull/2259

Aug 26 2020, 4:07 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T2828: BGP conf_mode error enforce-first-as.
Aug 26 2020, 2:50 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T2387: Create XML scheme for [conf_mode] BGP .
  1. Unable to set value for "unsuppress-map", afi ipv4 + ipv6

Expect:

set protocols nbgp 65001 neighbor 10.0.0.1 address-family ipv4-unicast unsuppress-map RMAP

Get:

vyos@r4-roll# set protocols nbgp 65001 neighbor 10.0.0.1 address-family ipv4-unicast unsuppress-map RMAP
Aug 26 2020, 11:53 AM · VyOS 1.3 Equuleus (1.3.0)
Unknown Object (User) removed a project from T2333: Increase default sysctl values: VyOS 1.2 Crux (VyOS 1.2.6).
Aug 26 2020, 11:09 AM · VyOS 1.3 Equuleus (1.3.6)

Aug 25 2020

runar closed T2826: frr: frr python lib error in replace_section as Resolved.
Aug 25 2020, 6:27 PM · VyOS 1.3 Equuleus (1.3.0)
runar created T2826: frr: frr python lib error in replace_section.
Aug 25 2020, 6:03 PM · VyOS 1.3 Equuleus (1.3.0)
francis added a comment to T1817: BGP next-hop-self not working..

I ran into this issue as well and verified it's resolved on current rolling release. Will this also be fixed in 1.2.6?

Aug 25 2020, 2:20 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.9)
c-po claimed T2813: NAT: possible to commit illegal source nat without translation .
Aug 25 2020, 6:16 AM · VyOS 1.3 Equuleus (1.3.0)

Aug 24 2020

Unknown Object (User) added a comment to T2772: BGP Route Distinguisher & Route Target Extended Community.

@ronie can you build an example with frr?

Aug 24 2020, 5:47 PM · VyOS 1.3 Equuleus (1.3.5)
Cheeze_It added a comment to T2081: Support Ethernet over IP (EoIP) .

@Viacheslav, when I try that I get the following:

Aug 24 2020, 4:13 PM · VyOS 1.5 Circinus
Viacheslav closed T2423: Loadkey scp ssh key errors as Resolved.
Aug 24 2020, 9:59 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T2081: Support Ethernet over IP (EoIP) .
Aug 24 2020, 8:00 AM · VyOS 1.5 Circinus
jack9603301 added a comment to T2518: Add support for IPv6 NAT (NPTv6).

The updated code was successfully tested on the virtual machine, and 5.1 has not been tested yet, waiting for the release of kernel 5.1

Aug 24 2020, 3:53 AM · VyOS 1.4 Sagitta (1.4.0-epa3)

Aug 23 2020

Unknown Object (User) closed T2812: Add basic smoketest for anyconnect, a subtask of T2036: Open Connect VPN Server () support, as Resolved.
Aug 23 2020, 7:11 PM · VyOS 1.3 Equuleus (1.3.0)
Unknown Object (User) closed T2812: Add basic smoketest for anyconnect as Resolved.

Jenkins output build ID 1015

16:14:06  DEBUG - Running Testcase: /usr/libexec/vyos/tests/smoke/cli/test_vpn_anyconnect.py
16:14:18  DEBUG - .
16:14:18  DEBUG - ----------------------------------------------------------------------
16:14:18  DEBUG - Ran 1 test in 11.085s
16:14:18  DEBUG - 
16:14:18  DEBUG - OK
Aug 23 2020, 7:11 PM · VyOS 1.3 Equuleus (1.3.0)
Unknown Object (User) closed T2811: Cannot delete vpn anyconnect as Resolved.

Works properly, tested on 1.3-rolling-202008231246

Aug 23 2020, 7:06 PM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T2790: Add ability to set ipv6 protocol route-map for OSPFv3 from Open to Needs testing.
Aug 23 2020, 11:42 AM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2564: Extend VyOS to support appliance LCDs as Unknown Status.
Aug 23 2020, 10:19 AM · VyOS 1.2 Crux (VyOS 1.2.7)
c-po closed T2823: VXLAN has state A/D after configuration as Resolved.
Aug 23 2020, 10:14 AM · VyOS 1.3 Equuleus (1.3.0)
jack9603301 added a comment to T2518: Add support for IPv6 NAT (NPTv6).

As described in T2814, under 5.1, nft_chain_nat_ipv6 will be merged into nft_chain_nat, I have updated pr to support this change, but like T2814, it has not been tested

Aug 23 2020, 10:10 AM · VyOS 1.4 Sagitta (1.4.0-epa3)
c-po moved T2822: Update Linux Kernel to v4.19.141 from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.6) board.
Aug 23 2020, 9:08 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po added a project to T2822: Update Linux Kernel to v4.19.141: VyOS 1.2 Crux (VyOS 1.2.6).
Aug 23 2020, 9:08 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po edited a custom field on T2823: VXLAN has state A/D after configuration.
Aug 23 2020, 7:38 AM · VyOS 1.3 Equuleus (1.3.0)
c-po edited a custom field on T2823: VXLAN has state A/D after configuration.
Aug 23 2020, 7:38 AM · VyOS 1.3 Equuleus (1.3.0)
c-po claimed T2823: VXLAN has state A/D after configuration.
Aug 23 2020, 7:38 AM · VyOS 1.3 Equuleus (1.3.0)
Unknown Object (User) created T2823: VXLAN has state A/D after configuration.
Aug 23 2020, 6:30 AM · VyOS 1.3 Equuleus (1.3.0)
Unknown Object (User) reassigned T2810: Docs for vpn anyconnect-server from Unknown Object (User) to Unknown Object (User).
Aug 23 2020, 6:21 AM · VyOS 1.3 Equuleus (1.3.0), Restricted Project

Aug 22 2020

c-po closed T2822: Update Linux Kernel to v4.19.141 as Resolved.
Aug 22 2020, 11:36 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po created T2822: Update Linux Kernel to v4.19.141.
Aug 22 2020, 11:35 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6)
c-po closed T2677: Proposal for clearer DHCPv6-PD configuration options as Resolved.
Aug 22 2020, 11:19 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2821: Support DHCPv6-PD without "address dhcpv6", a subtask of T2677: Proposal for clearer DHCPv6-PD configuration options, as Resolved.
Aug 22 2020, 11:19 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T2821: Support DHCPv6-PD without "address dhcpv6" as Resolved.
Aug 22 2020, 11:19 PM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T2821: Support DHCPv6-PD without "address dhcpv6", a subtask of T2677: Proposal for clearer DHCPv6-PD configuration options, from Open to In progress.
Aug 22 2020, 10:06 PM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T2821: Support DHCPv6-PD without "address dhcpv6" from Open to In progress.
Aug 22 2020, 10:06 PM · VyOS 1.3 Equuleus (1.3.0)
c-po created T2821: Support DHCPv6-PD without "address dhcpv6".
Aug 22 2020, 10:06 PM · VyOS 1.3 Equuleus (1.3.0)
erkin closed T2647: ipsec disableuniqreqids generate a wrong ipsec.conf as Resolved.
Aug 22 2020, 3:02 PM · VyOS 1.2 Crux (VyOS 1.2.7)
jack9603301 added a comment to T2518: Add support for IPv6 NAT (NPTv6).

The SNPT and DNPT functions are basically implemented, but because they have not been reviewed and approved for the time being, they enter the hold state, waiting for processing and discussion

Aug 22 2020, 2:12 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
jack9603301 changed the status of T2518: Add support for IPv6 NAT (NPTv6) from In progress to On hold.
Aug 22 2020, 2:09 PM · VyOS 1.4 Sagitta (1.4.0-epa3)
c-po renamed T2819: Evaluate DDNS (Dynamic DNS client) as successor to ddclient from Evaluate DDNS (Dynamic DNS client for IPFire) as successor to ddclient to Evaluate DDNS (Dynamic DNS client) as successor to ddclient.
Aug 22 2020, 1:51 PM
c-po renamed T2819: Evaluate DDNS (Dynamic DNS client) as successor to ddclient from Evaluate DDNS (Dynamic DNS client for IPFire.) as successor to ddclient to Evaluate DDNS (Dynamic DNS client for IPFire) as successor to ddclient.
Aug 22 2020, 1:51 PM
c-po created T2819: Evaluate DDNS (Dynamic DNS client) as successor to ddclient.
Aug 22 2020, 1:51 PM
c-po placed T2769: Add VRF support for syslog up for grabs.
Aug 22 2020, 1:21 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
c-po added a comment to T2769: Add VRF support for syslog.

Enabling this requires a full rewrite of syslog as also the configuration must be altered, see example at https://manpages.debian.org/testing/rsyslog/rsyslog.conf.5.en.html

Aug 22 2020, 1:21 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
Cheeze_It added a comment to T2081: Support Ethernet over IP (EoIP) .

Version of Vyos I have is:

Aug 22 2020, 5:34 AM · VyOS 1.5 Circinus

Aug 21 2020

craterman added a comment to T915: MPLS Support.

@craterman Can you share an example of a configuration or how it looks in the frr? So that I can reproduce this in a test lab.
And share additional show the output and what you expect to see.

Aug 21 2020, 4:38 AM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta

Aug 20 2020

c-po added a comment to T2818: Add the possibility to passthrough LLDP, LACP, etc..

bitmap is too nerdy, just use a multinode withe the mentioned capabilities in human readable form.

Aug 20 2020, 9:31 PM
Unknown Object (User) created T2818: Add the possibility to passthrough LLDP, LACP, etc..
Aug 20 2020, 8:36 PM
shaferstockton created T2817: Bring back the event-handler.
Aug 20 2020, 6:36 PM · VyOS 1.3 Equuleus (1.3.0)
dmbaturin changed the status of T2081: Support Ethernet over IP (EoIP) from Open to Needs testing.

According to https://help.mikrotik.com/docs/pages/viewpage.action?pageId=24805521 , "EoIP" is simply Ethernet over GRE. We already support that, with the "gre-bridge" encapsulation.

Aug 20 2020, 4:13 PM · VyOS 1.5 Circinus
dmbaturin added a comment to T2126: show vpn ipsec sa IPSec - Process NOT Running.

@erkin Could you verify if this is reproducible?

Aug 20 2020, 4:02 PM · VyOS 1.3 Equuleus (1.3.0)
dmbaturin assigned T2126: show vpn ipsec sa IPSec - Process NOT Running to erkin.
Aug 20 2020, 4:02 PM · VyOS 1.3 Equuleus (1.3.0)
dmbaturin merged T2540: Support XFRM interfaces for route based IPSEC into T1441: Add support for IPSec XFRM interfaces.
Aug 20 2020, 4:01 PM · VyOS 1.4 Sagitta
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T2806: ipsec generates false warning on commit when local prefix is sourced from loopback.
Aug 20 2020, 4:00 PM · VyOS 1.4 Sagitta
dmbaturin assigned T2647: ipsec disableuniqreqids generate a wrong ipsec.conf to erkin.
Aug 20 2020, 3:59 PM · VyOS 1.2 Crux (VyOS 1.2.7)
dmbaturin removed a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T2647: ipsec disableuniqreqids generate a wrong ipsec.conf.
Aug 20 2020, 3:58 PM · VyOS 1.4 Sagitta
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T2647: ipsec disableuniqreqids generate a wrong ipsec.conf.
Aug 20 2020, 3:57 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T2641: Rewrite vpn ipsec OP commands in new style XML syntax: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:57 PM · VyOS 1.4 Sagitta
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T2641: Rewrite vpn ipsec OP commands in new style XML syntax.
Aug 20 2020, 3:57 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T2639: sort output of show vpn ipsec sa : T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:57 PM · VyOS 1.3 Equuleus (1.3.0)
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T2639: sort output of show vpn ipsec sa .
Aug 20 2020, 3:57 PM · VyOS 1.4 Sagitta
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T2620: Add ipsec peer-name to log to simplifies grepping and troubleshooting.
Aug 20 2020, 3:56 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T2620: Add ipsec peer-name to log to simplifies grepping and troubleshooting: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:56 PM · VyOS 1.2 Crux (VyOS 1.2.8)
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T2049: Update strongSwan cipher suites list for IPSec settings.
Aug 20 2020, 3:55 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T2049: Update strongSwan cipher suites list for IPSec settings: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:55 PM · VyOS 1.3 Equuleus (1.3.0)
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T1501: VPN Commit Errors.
Aug 20 2020, 3:55 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T1501: VPN Commit Errors: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:55 PM · VyOS 1.3 Equuleus (1.3.0), test
Cheeze_It added a comment to T915: MPLS Support.

Ok, I got the new version of code and here is what I found. As a baseline here's the Vyos config, and it's more or less the same as before but I moved lab environments:

Aug 20 2020, 3:52 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T1233: ipsec vpn sa showing down.
Aug 20 2020, 3:50 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T1233: ipsec vpn sa showing down: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:50 PM · VyOS 1.4 Sagitta
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T1210: About IKEv2 IPSec VPN remote access.
Aug 20 2020, 3:49 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T1210: About IKEv2 IPSec VPN remote access: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:49 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T1101: Spoke site dynamic IP over NAT connect to Hub site: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:47 PM
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T1101: Spoke site dynamic IP over NAT connect to Hub site.
Aug 20 2020, 3:47 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T1070: SWANCTL: DMVPN: ALL peers are deleted in swan when opennhrp tries to delete ONE peer: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:47 PM · Bugs, VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-GA), Restricted Project
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T1070: SWANCTL: DMVPN: ALL peers are deleted in swan when opennhrp tries to delete ONE peer.
Aug 20 2020, 3:47 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T842: Adopt VyOS CLI to latest StrongSwan options and deprecated Keywords: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:47 PM · VyOS 1.4 Sagitta
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T842: Adopt VyOS CLI to latest StrongSwan options and deprecated Keywords.
Aug 20 2020, 3:47 PM · VyOS 1.4 Sagitta
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T645: Allow multiple prefixes in ipsec tunnel.
Aug 20 2020, 3:46 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T645: Allow multiple prefixes in ipsec tunnel: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:46 PM · VyOS 1.4 Sagitta
dmbaturin added a subtask for T2816: Rewrite IPsec scripts with the new XML/Python approach: T627: IPSec configuration directive deletion fails, causes bad IPSec state on reboot. .
Aug 20 2020, 3:46 PM · VyOS 1.4 Sagitta
dmbaturin added a parent task for T627: IPSec configuration directive deletion fails, causes bad IPSec state on reboot. : T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:46 PM · VyOS 1.2 Crux (VyOS 1.2.7)
dmbaturin added a parent task for T406: VPN configuration error: IPv6 over IPv4 IPsec is not supported when using IPv6 ONLY tunnel.: T2816: Rewrite IPsec scripts with the new XML/Python approach.
Aug 20 2020, 3:45 PM · VyOS 1.3 Equuleus (1.3.0-epa1)