Page MenuHomeVyOS Platform
Feed Search

May 8 2021

Viacheslav closed T3517: FRR 7.5 bfd behavior for 1.3 as Resolved.
May 8 2021, 9:44 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a subtask for T3528: Frr 7.5.1 uses 'seq' for community-lists: T3517: FRR 7.5 bfd behavior for 1.3.
May 8 2021, 9:43 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a parent task for T3517: FRR 7.5 bfd behavior for 1.3: T3528: Frr 7.5.1 uses 'seq' for community-lists.
May 8 2021, 9:43 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T3528: Frr 7.5.1 uses 'seq' for community-lists.

PR https://github.com/vyos/vyatta-cfg-quagga/pull/77

May 8 2021, 9:42 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a subtask for T3182: Main blocker Task for FRR 7.4/7.5 series update: T3528: Frr 7.5.1 uses 'seq' for community-lists.
May 8 2021, 9:28 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav added a parent task for T3528: Frr 7.5.1 uses 'seq' for community-lists: T3182: Main blocker Task for FRR 7.4/7.5 series update.
May 8 2021, 9:28 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav claimed T3528: Frr 7.5.1 uses 'seq' for community-lists.
May 8 2021, 9:27 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T3528: Frr 7.5.1 uses 'seq' for community-lists.
May 8 2021, 9:26 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T3526: Smoketest policy fail in CI.
May 8 2021, 9:15 AM · VyOS 1.3 Equuleus (1.3.0)

May 7 2021

Viacheslav closed T1171: 1.2.0 epa2 - IPsec VPN initiation as Resolved.
set vpn ipsec site-to-site peer 100.64.0.2 dhcp-interface eth1
May 7 2021, 4:38 PM · VyOS 1.3 Equuleus (1.3.0-epa1)
Viacheslav closed T3333: "show vpn ipsec sa" reports ESP tunnels to be up when they are not., a subtask of T2641: Rewrite vpn ipsec OP commands in new style XML syntax, as Resolved.
May 7 2021, 2:16 PM · VyOS 1.4 Sagitta
Viacheslav closed T3333: "show vpn ipsec sa" reports ESP tunnels to be up when they are not. as Resolved.
May 7 2021, 2:16 PM · VyOS 1.2 Crux (VyOS 1.2.8)
Viacheslav added a comment to T3526: Smoketest policy fail in CI.

PR https://github.com/vyos/vyos-1x/pull/834

May 7 2021, 10:32 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav claimed T3526: Smoketest policy fail in CI.
May 7 2021, 10:07 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T3526: Smoketest policy fail in CI.
May 7 2021, 10:07 AM · VyOS 1.3 Equuleus (1.3.0)
dirkjanm added a comment to T3525: VMWare resume script syntax errors.

Note that adding autosudo=False to the call to cmd does not fix this issue because this parameter is never passed to popen: https://github.com/vyos/vyos-1x/blob/current/python/vyos/util.py#L143

May 7 2021, 9:59 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
dirkjanm created T3525: VMWare resume script syntax errors.
May 7 2021, 9:52 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

May 6 2021

c-po added a project to T3519: Cannot add / assign L2TPv3 to vrf: VyOS 1.3 Equuleus.
May 6 2021, 7:11 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav claimed T3517: FRR 7.5 bfd behavior for 1.3.
May 6 2021, 6:35 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T3517: FRR 7.5 bfd behavior for 1.3.

PR https://github.com/vyos/vyos-1x/pull/832

May 6 2021, 6:31 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T3516: FRR 7.5 adds a second route when you attempt to change a static route distance instead of overwriting the old route.

PR https://github.com/vyos/vyatta-cfg-quagga/pull/76

May 6 2021, 2:03 PM · VyOS 1.3 Equuleus (1.3.0)
erkin changed the status of T3508: Check if there's enough drive space for an upgrade before downloading an image from Open to In progress.
May 6 2021, 7:54 AM · VyOS 1.3 Equuleus (1.3.0)

May 5 2021

Viacheslav removed a project from T3517: FRR 7.5 bfd behavior for 1.3: VyOS 1.4 Sagitta.
May 5 2021, 7:00 AM · VyOS 1.3 Equuleus (1.3.0)
shyrwall added a comment to T3514: NIC flap at any interface change.

Don't think this is related to the i40e driver. I think it's because vyos sees

May 5 2021, 5:08 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
shyrwall added a comment to T3514: NIC flap at any interface change.

vyos@vyos# set interfaces ethernet eth3 description Test
[edit]
vyos@vyos# commit
DEBUG/IFCONFIG cmd 'ip -json -detail link list dev eth3'
DEBUG/IFCONFIG returned (out):
[{"ifindex":5,"ifname":"eth3","flags":["BROADCAST","MULTICAST","UP","LOWER_UP"],"mtu":1500,"qdisc":"mq","operstate":"UP","linkmode":"DEFAULT ","group":"default","txqlen":1000,"link_type":"ether","address":"3c:fd:fe:dd:bd:89","broadcast":"ff:ff:ff:ff:ff:ff","promiscuity":0,"min_mtu ":68,"max_mtu":9702,"inet6_addr_gen_mode":"none","num_tx_queues":16,"num_rx_queues":16,"gso_max_size":65536,"gso_max_segs":65535,"phys_port_ id":"3cfdfeddbd89","vfinfo_list":[]}]
DEBUG/IFCONFIG cmd 'ip -json -detail link list dev eth3'
DEBUG/IFCONFIG returned (out):
[{"ifindex":5,"ifname":"eth3","flags":["BROADCAST","MULTICAST","UP","LOWER_UP"],"mtu":1500,"qdisc":"mq","operstate":"UP","linkmode":"DEFAULT ","group":"default","txqlen":1000,"link_type":"ether","address":"3c:fd:fe:dd:bd:89","broadcast":"ff:ff:ff:ff:ff:ff","promiscuity":0,"min_mtu ":68,"max_mtu":9702,"inet6_addr_gen_mode":"none","num_tx_queues":16,"num_rx_queues":16,"gso_max_size":65536,"gso_max_segs":65535,"phys_port_ id":"3cfdfeddbd89","vfinfo_list":[]}]
DEBUG/IFCONFIG cmd 'ethtool --show-pause eth3'
DEBUG/IFCONFIG returned (out):
Pause parameters for eth3:
Autonegotiate: off
RX: off
TX: off
DEBUG/IFCONFIG cmd 'ethtool --pause eth3 autoneg on tx on rx on'
could not set flowcontrol for eth3
DEBUG/IFCONFIG cmd 'ethtool -K eth3 gro off'
DEBUG/IFCONFIG cmd 'ethtool -K eth3 gso off'
DEBUG/IFCONFIG write '0' > '/sys/class/net/eth3/queues/rx-0/rps_cpus'
DEBUG/IFCONFIG cmd 'ethtool -K eth3 sg off'
DEBUG/IFCONFIG cmd 'ethtool -K eth3 tso off'
DEBUG/IFCONFIG cmd 'ethtool -K eth3 ufo off'
DEBUG/IFCONFIG cmd 'ethtool eth3'
DEBUG/IFCONFIG returned (out):
Settings for eth3:

Supported ports: [ FIBRE ]
Supported link modes:   1000baseX/Full
                        10000baseSR/Full
Supported pause frame use: Symmetric Receive-only
Supports auto-negotiation: Yes
Supported FEC modes: Not reported
Advertised link modes:  1000baseX/Full
                        10000baseSR/Full
Advertised pause frame use: No
Advertised auto-negotiation: Yes
Advertised FEC modes: Not reported
Speed: 10000Mb/s
Duplex: Full
Port: FIBRE
PHYAD: 0
Transceiver: internal
Auto-negotiation: off
Supports Wake-on: d
Wake-on: d
Current message level: 0x00000007 (7)
                       drv probe link
Link detected: yes

DEBUG/IFCONFIG cmd 'ethtool -s eth3 autoneg on'
{'description': 'Test',
'duplex': 'auto',
'ifname': 'eth3',
'ip': {'arp_cache_timeout': '30'},
'mtu': '1500',
'speed': 'auto',
'vif': {'80': {'address': ['1.3.3.7/29'],

'ip': {'arp_cache_timeout': '30'},
'mtu': '1500'}}}

DEBUG/IFCONFIG cmd 'ip link set dev eth3 alias "Test"'
DEBUG/IFCONFIG write '1' > '/proc/sys/net/ipv4/conf/eth3/link_filter'
DEBUG/IFCONFIG cmd 'sudo systemctl stop [email protected]'
DEBUG/IFCONFIG cmd 'sudo systemctl stop [email protected]'
DEBUG/IFCONFIG cmd 'ip -json -detail link list dev eth3'
DEBUG/IFCONFIG returned (out):
[{"ifindex":5,"ifname":"eth3","flags":["NO-CARRIER","BROADCAST","MULTICAST","UP"],"mtu":1500,"qdisc":"mq","operstate":"DOWN","linkmode":"DEF AULT","group":"default","txqlen":1000,"link_type":"ether","address":"3c:fd:fe:dd:bd:89","broadcast":"ff:ff:ff:ff:ff:ff","promiscuity":0,"min _mtu":68,"max_mtu":9702,"inet6_addr_gen_mode":"none","num_tx_queues":16,"num_rx_queues":16,"gso_max_size":65536,"gso_max_segs":65535,"phys_p ort_id":"3cfdfeddbd89","ifalias":"Test","vfinfo_list":[]}]
DEBUG/IFCONFIG cmd 'ip link set dev eth3 nomaster'
DEBUG/IFCONFIG write '30000' > '/proc/sys/net/ipv4/neigh/eth3/base_reachable_time_ms'
DEBUG/IFCONFIG write '1' > '/proc/sys/net/ipv4/conf/eth3/arp_filter'
DEBUG/IFCONFIG write '0' > '/proc/sys/net/ipv4/conf/eth3/arp_accept'
DEBUG/IFCONFIG write '0' > '/proc/sys/net/ipv4/conf/eth3/arp_announce'
DEBUG/IFCONFIG write '0' > '/proc/sys/net/ipv4/conf/eth3/arp_ignore'
DEBUG/IFCONFIG write '0' > '/proc/sys/net/ipv4/conf/eth3/proxy_arp'
DEBUG/IFCONFIG write '0' > '/proc/sys/net/ipv4/conf/eth3/proxy_arp_pvlan'
DEBUG/IFCONFIG write '1' > '/proc/sys/net/ipv4/conf/eth3/forwarding'
DEBUG/IFCONFIG write '0' > '/proc/sys/net/ipv4/conf/eth3/rp_filter'
DEBUG/IFCONFIG write '1' > '/proc/sys/net/ipv6/conf/eth3/forwarding'
DEBUG/IFCONFIG write '1' > '/proc/sys/net/ipv6/conf/eth3/accept_ra'
DEBUG/IFCONFIG write '0' > '/proc/sys/net/ipv6/conf/eth3/autoconf'
DEBUG/IFCONFIG write '1' > '/proc/sys/net/ipv6/conf/eth3/dad_transmits'
DEBUG/IFCONFIG cmd 'ip link set dev eth3 mtu 1500'
DEBUG/IFCONFIG cmd 'ip -json -detail link list dev eth3'
DEBUG/IFCONFIG returned (out):
[{"ifindex":5,"ifname":"eth3","flags":["NO-CARRIER","BROADCAST","MULTICAST","UP"],"mtu":1500,"qdisc":"mq","operstate":"DOWN","linkmode":"DEF AULT","group":"default","txqlen":1000,"link_type":"ether","address":"3c:fd:fe:dd:bd:89","broadcast":"ff:ff:ff:ff:ff:ff","promiscuity":0,"min _mtu":68,"max_mtu":9702,"inet6_addr_gen_mode":"none","num_tx_queues":16,"num_rx_queues":16,"gso_max_size":65536,"gso_max_segs":65535,"phys_p ort_id":"3cfdfeddbd89","ifalias":"Test","vfinfo_list":[]}]
DEBUG/IFCONFIG cmd 'xdp_loader -d eth3 -U --auto-mode'
DEBUG/IFCONFIG returned (out):
INFO: xdp_link_detach() no curr XDP prog on ifindex:5
DEBUG/IFCONFIG cmd 'tc qdisc del dev eth3 handle ffff: ingress 2> /dev/null;tc qdisc del dev eth3 handle 1: root prio 2> /dev/null;set $?=0'
DEBUG/IFCONFIG cmd 'ip link set dev eth3 up'
{'address': ['1.3.3.7/29'],
'ifname': 'eth3.80',
'ip': {'arp_cache_timeout': '30'},
'mtu': '1500'}
DEBUG/IFCONFIG cmd 'ip link set dev eth3.80 alias ""'
DEBUG/IFCONFIG write '1' > '/proc/sys/net/ipv4/conf/eth3.80/link_filter'
DEBUG/IFCONFIG cmd 'sudo systemctl stop [email protected]'
DEBUG/IFCONFIG cmd 'sudo systemctl stop [email protected]'
DEBUG/IFCONFIG cmd 'ip -json -detail link list dev eth3.80'
DEBUG/IFCONFIG returned (out):
[{"ifindex":8,"link":"eth3","ifname":"eth3.80","flags":["NO-CARRIER","BROADCAST","MULTICAST","UP"],"mtu":1500,"qdisc":"noqueue","operstate": "LOWERLAYERDOWN","linkmode":"DEFAULT","group":"default","txqlen":1000,"link_type":"ether","address":"3c:fd:fe:dd:bd:89","broadcast":"ff:ff:f f:ff:ff:ff","promiscuity":0,"min_mtu":0,"max_mtu":65535,"linkinfo":{"info_kind":"vlan","info_data":{"protocol":"802.1Q","id":80,"flags":["RE ORDER_HDR"]}},"inet6_addr_gen_mode":"none","num_tx_queues":1,"num_rx_queues":1,"gso_max_size":65536,"gso_max_segs":65535}]
DEBUG/IFCONFIG cmd 'ip link set dev eth3.80 nomaster'
DEBUG/IFCONFIG write '30000' > '/proc/sys/net/ipv4/neigh/eth3.80/base_reachable_time_ms'
DEBUG/IFCONFIG write '1' > '/proc/sys/net/ipv4/conf/eth3.80/arp_filter'
DEBUG/IFCONFIG write '0' > '/proc/sys/net/ipv4/conf/eth3.80/arp_accept'
DEBUG/IFCONFIG write '0' > '/proc/sys/net/ipv4/conf/eth3.80/arp_announce'
DEBUG/IFCONFIG write '0' > '/proc/sys/net/ipv4/conf/eth3.80/arp_ignore'
DEBUG/IFCONFIG write '0' > '/proc/sys/net/ipv4/conf/eth3.80/proxy_arp'
DEBUG/IFCONFIG write '0' > '/proc/sys/net/ipv4/conf/eth3.80/proxy_arp_pvlan'
DEBUG/IFCONFIG write '1' > '/proc/sys/net/ipv4/conf/eth3.80/forwarding'
DEBUG/IFCONFIG write '0' > '/proc/sys/net/ipv4/conf/eth3.80/rp_filter'
DEBUG/IFCONFIG write '1' > '/proc/sys/net/ipv6/conf/eth3.80/forwarding'
DEBUG/IFCONFIG write '1' > '/proc/sys/net/ipv6/conf/eth3.80/accept_ra'
DEBUG/IFCONFIG write '0' > '/proc/sys/net/ipv6/conf/eth3.80/autoconf'
DEBUG/IFCONFIG write '1' > '/proc/sys/net/ipv6/conf/eth3.80/dad_transmits'
DEBUG/IFCONFIG cmd 'ip link set dev eth3.80 mtu 1500'
DEBUG/IFCONFIG cmd 'ip -json -detail link list dev eth3.80'
DEBUG/IFCONFIG returned (out):
[{"ifindex":8,"link":"eth3","ifname":"eth3.80","flags":["NO-CARRIER","BROADCAST","MULTICAST","UP"],"mtu":1500,"qdisc":"noqueue","operstate": "LOWERLAYERDOWN","linkmode":"DEFAULT","group":"default","txqlen":1000,"link_type":"ether","address":"3c:fd:fe:dd:bd:89","broadcast":"ff:ff:f f:ff:ff:ff","promiscuity":0,"min_mtu":0,"max_mtu":65535,"linkinfo":{"info_kind":"vlan","info_data":{"protocol":"802.1Q","id":80,"flags":["RE ORDER_HDR"]}},"inet6_addr_gen_mode":"none","num_tx_queues":1,"num_rx_queues":1,"gso_max_size":65536,"gso_max_segs":65535}]
DEBUG/IFCONFIG cmd 'xdp_loader -d eth3.80 -U --auto-mode'
DEBUG/IFCONFIG returned (out):
INFO: xdp_link_detach() no curr XDP prog on ifindex:8
DEBUG/IFCONFIG cmd 'ip link set dev eth3.80 up'

May 5 2021, 5:03 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

May 4 2021

Viacheslav updated the task description for T3517: FRR 7.5 bfd behavior for 1.3.
May 4 2021, 7:51 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav created T3517: FRR 7.5 bfd behavior for 1.3.
May 4 2021, 7:51 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T3516: FRR 7.5 adds a second route when you attempt to change a static route distance instead of overwriting the old route.

One solution for it:

vyos_bld@3c88687662fe:/vyos/work/T3516/vyatta-cfg-quagga$ git diff
diff --git a/templates/protocols/static/interface-route/node.tag/next-hop-interface/node.def b/templates/protocols/static/interface-route/node.tag/next-hop-interface/node.def
index f8bc9270..991a30ee 100644
--- a/templates/protocols/static/interface-route/node.tag/next-hop-interface/node.def
+++ b/templates/protocols/static/interface-route/node.tag/next-hop-interface/node.def
@@ -14,7 +14,10 @@ end:
       if ! ${vyatta_sbindir}/vyatta-next-hop-check $VAR(../@) ipv4 interface; then
         exit 1;
       fi
+      DIST=`cli-shell-api returnEffectiveValue protocols static interface-route $VAR(../@) next-hop-interface $VAR(@) distance`
+
       vtysh -c "configure terminal" \
+                   -c "no ip route $VAR(../@) $VAR(@) $DIST" \
                    -c "no ip route $VAR(../@) $VAR(@)"
     else
       if [[ -n "$VAR(./distance/@)" ]]; then
diff --git a/templates/protocols/static/route/node.tag/next-hop/node.def b/templates/protocols/static/route/node.tag/next-hop/node.def
index 0574781d..44a39bfb 100644
--- a/templates/protocols/static/route/node.tag/next-hop/node.def
+++ b/templates/protocols/static/route/node.tag/next-hop/node.def
@@ -16,10 +16,12 @@ end:
       if ! ${vyatta_sbindir}/vyatta-next-hop-check $VAR(../@) ipv4 address; then
         exit 1;
       fi
+      DIST=`cli-shell-api returnEffectiveValue protocols static route $VAR(../@) next-hop $VAR(@) distance`
       if ${vyatta_sbindir}/vyatta-gateway-static_route-check.pl \
           "$VAR(../@)" "$VAR(@)"
       then
         vtysh -c "configure terminal" \
+                     -c "no ip route $VAR(../@) $VAR(@) $DIST" \
                      -c "no ip route $VAR(../@) $VAR(@)"
       fi
     else
May 4 2021, 7:28 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav updated the task description for T3516: FRR 7.5 adds a second route when you attempt to change a static route distance instead of overwriting the old route.
May 4 2021, 7:07 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav updated the task description for T3516: FRR 7.5 adds a second route when you attempt to change a static route distance instead of overwriting the old route.
May 4 2021, 7:06 PM · VyOS 1.3 Equuleus (1.3.0)
c-po changed the status of T3514: NIC flap at any interface change from In progress to On hold.
May 4 2021, 7:06 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav created T3516: FRR 7.5 adds a second route when you attempt to change a static route distance instead of overwriting the old route.
May 4 2021, 7:05 PM · VyOS 1.3 Equuleus (1.3.0)
c-po added a comment to T3514: NIC flap at any interface change.

I have boiled down your commands to the following:

May 4 2021, 6:41 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po changed the status of T3514: NIC flap at any interface change from Open to In progress.
May 4 2021, 5:56 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
shyrwall added a comment to T3514: NIC flap at any interface change.

set interfaces ethernet eth0 hw-id 'ac:1f:6b:76:95:98'
set interfaces ethernet eth1 hw-id 'ac:1f:6b:76:95:99'
set interfaces ethernet eth2 hw-id 'ac:1f:6b:76:98:7a'
set interfaces ethernet eth3 hw-id 'ac:1f:6b:76:98:7b'
set interfaces ethernet eth4 hw-id '3c:fd:fe:dd:bd:88'
set interfaces ethernet eth5 hw-id '3c:fd:fe:dd:bd:89'
set interfaces ethernet eth5 vif 58 address 'x.x.x.x'
set interfaces ethernet eth5 vif 80 address 'x.x.x.x'
set interfaces ethernet eth5 vif 80 ip ospf cost '500'
set interfaces ethernet eth5 vif 80 ip ospf dead-interval '30'
set interfaces ethernet eth5 vif 81 address 'x.x.x.x'
set interfaces ethernet eth5 vif 81 ip ospf cost '1'
set interfaces ethernet eth5 vif 81 ip ospf dead-interval '30'
set interfaces ethernet eth5 vif 81 ip ospf network 'point-to-point'

May 4 2021, 2:49 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav added a subtask for T2199: Rewrite firewall in new XML/Python style: T1643: Deleting all firewall zones failed and locked out box.
May 4 2021, 2:21 PM · VyOS 1.4 Sagitta (1.4.0-epa2)
Viacheslav added a parent task for T1643: Deleting all firewall zones failed and locked out box: T2199: Rewrite firewall in new XML/Python style.
May 4 2021, 2:20 PM · VyOS 1.3 Equuleus (1.3.0), test
Viacheslav added a subtask for T2199: Rewrite firewall in new XML/Python style: T3513: Attempting to remove firewall rule results in error.
May 4 2021, 2:04 PM · VyOS 1.4 Sagitta (1.4.0-epa2)
Viacheslav added a parent task for T3513: Attempting to remove firewall rule results in error: T2199: Rewrite firewall in new XML/Python style.
May 4 2021, 2:04 PM · VyOS 1.3 Equuleus (1.3.6)
shyrwall created T3514: NIC flap at any interface change.
May 4 2021, 9:33 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po added a comment to T3512: set protocols static table creates wrong frr config.

Can't reproduce on VyOS 1.3.0-rc4, even after a reboot I get a single ipv6 route ::/0 2a01:9820:5::10 table 100 line

May 4 2021, 5:39 AM · VyOS 1.3 Equuleus (1.3.0)

May 3 2021

ngoehring added a comment to T3513: Attempting to remove firewall rule results in error.

Forgot to include the version info

May 3 2021, 7:07 PM · VyOS 1.3 Equuleus (1.3.6)
ngoehring created T3513: Attempting to remove firewall rule results in error.
May 3 2021, 7:05 PM · VyOS 1.3 Equuleus (1.3.6)

May 2 2021

rherold created T3512: set protocols static table creates wrong frr config.
May 2 2021, 11:55 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T3453: IPv6 routes from BGP are not inserted into FIB as Invalid.
May 2 2021, 10:59 AM · VyOS 1.3 Equuleus (1.3.0)
dtoux added a comment to T3453: IPv6 routes from BGP are not inserted into FIB.

The 2001:19f0:ffff::1 is the neighbour, it is accessible via the Kernel route and I'm able to pull routes from it. The setup is multihop. But I think you are on something. I think the peer should return the gateway as the next hop and not itself. I'm experimenting with Vultr and their setup is questionable, so this is just one more thing that they messed up. Anyhow, thanks for your help. Feel free to close the ticket.

May 2 2021, 12:02 AM · VyOS 1.3 Equuleus (1.3.0)

May 1 2021

rherold added a comment to T3507: Bond with mode LACP show u/u in show interfaces even if peer is not configured.

mii-mon was fine. Link was enabled on the switch and the link for the interface was up. But on the LACP was not enabled on the switch.
So I would exepect to see the sub interfaces from the bond as up but the bond has to be down.

May 1 2021, 2:45 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
erkin claimed T3508: Check if there's enough drive space for an upgrade before downloading an image.
May 1 2021, 12:50 PM · VyOS 1.3 Equuleus (1.3.0)
dmbaturin created T3508: Check if there's enough drive space for an upgrade before downloading an image.
May 1 2021, 12:49 PM · VyOS 1.3 Equuleus (1.3.0)
c-po closed T3379: Add global-parameters name-server for dhcpv6-server as Resolved.
May 1 2021, 7:28 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po moved T3379: Add global-parameters name-server for dhcpv6-server from Need Triage to Finished on the VyOS 1.3 Equuleus board.
May 1 2021, 7:28 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po closed T3491: Change Kernel HZ to 1000 as Resolved.
May 1 2021, 7:26 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po claimed T3491: Change Kernel HZ to 1000.
May 1 2021, 7:25 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po moved T3479: route-maps containing "aggregator as" can not be deleted from Finished to Backlog on the VyOS 1.3 Equuleus board.
May 1 2021, 7:11 AM · VyOS 1.4 Sagitta
c-po moved T3479: route-maps containing "aggregator as" can not be deleted from Need Triage to Finished on the VyOS 1.3 Equuleus board.
May 1 2021, 7:11 AM · VyOS 1.4 Sagitta
c-po added a comment to T3453: IPv6 routes from BGP are not inserted into FIB.

I see no connected network in your FIB for 2001:19f0:ffff::1 I guess that's the reason.

May 1 2021, 7:10 AM · VyOS 1.3 Equuleus (1.3.0)
dtoux added a comment to T3453: IPv6 routes from BGP are not inserted into FIB.

Hmm, all other routes have longer prefixes, so they should take precedence. As far as I understand the priority is prefix length (longest first) -> admin distance -> metric. So, your explanation contradicts this unless I miss something.

May 1 2021, 5:26 AM · VyOS 1.3 Equuleus (1.3.0)

Apr 30 2021

c-po closed T3170: Add a sanity check for empty node.def files as Resolved.
Apr 30 2021, 8:48 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T3507: Bond with mode LACP show u/u in show interfaces even if peer is not configured.

https://www.kernel.org/doc/html/latest/networking/bonding.html#mii-monitor-operation

Apr 30 2021, 4:18 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
Viacheslav added a comment to T3461: OpenConnect Server redundancy check.

PR https://github.com/vyos/vyos-1x/pull/827

Apr 30 2021, 3:35 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
jack9603301 added a comment to T2459: Migrate vyatta-show-nat-rules.pl to Python.

@c-po I have implemented a simple script in 1.4. It works normally, but I can't count the port and protocol information

Apr 30 2021, 3:12 PM
rherold created T3507: Bond with mode LACP show u/u in show interfaces even if peer is not configured.
Apr 30 2021, 1:55 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
Viacheslav added a project to T1083: Implement persistent/random address and port mapping options for NAT rules: VyOS 1.4 Sagitta.
Apr 30 2021, 12:10 PM · VyOS 1.2 Crux (VyOS 1.2.9), VyOS 1.3 Equuleus (1.3.0), test, VyOS 1.4 Sagitta
Cheeze_It added a comment to T1253: Feature Request: FRR Flowspec.

Will be adding the BGP op commands for it as well eventually...

Apr 30 2021, 7:39 AM · VyOS 1.5 Circinus
c-po renamed T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Update Linux Kernel to v5.4.114 / 5.10.32 to Update Linux Kernel to v5.4.115 / 5.10.33.
Apr 30 2021, 4:12 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta

Apr 29 2021

Viacheslav added a comment to T1253: Feature Request: FRR Flowspec.

Already in 1.4

set protocols bgp address-family ipv4-flowspec
Apr 29 2021, 5:34 PM · VyOS 1.5 Circinus
Viacheslav closed T1314: Allow BGP on unnumbered interfaces as Resolved.

Already in 1.3 and 1.4

Apr 29 2021, 5:28 PM · VyOS 1.3 Equuleus (1.3.0)
stepler closed T3502: "system ip multipath layer4-hashing" doesn't work as Resolved.

Looks good on 1.4-rolling-202104280417 and 1.3-rolling-202104280642:

Apr 29 2021, 2:28 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav closed T2012: Global PBR as Resolved.

Already in 1.3.

Apr 29 2021, 1:28 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav reopened T2512: vyatta-op-quagga [show ip] to XML format, a subtask of T2511: Migrate vyatta-op-quagga to new XML format, as Open.
Apr 29 2021, 12:06 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav reopened T2512: vyatta-op-quagga [show ip] to XML format as "Open".

ipv6 still in old format

Apr 29 2021, 12:06 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav closed T2512: vyatta-op-quagga [show ip] to XML format, a subtask of T2511: Migrate vyatta-op-quagga to new XML format, as Resolved.
Apr 29 2021, 12:00 PM · VyOS 1.4 Sagitta, VyOS 1.5 Circinus
Viacheslav closed T2512: vyatta-op-quagga [show ip] to XML format as Resolved.
Apr 29 2021, 12:00 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T2845: BGP conf_mode unable to delete configuration with peer-group.

A possible reason it tried to remove " neighbor 10.0.0.2 remote-as 65002" after " neighbor 10.0.0.2 interface peer-group foo"
But if we delete " neighbor 10.0.0.2 interface peer-group foo" it also delete and "" neighbor 10.0.0.2 remote-as 65002"
So it can't delete this string

Apr 29 2021, 10:06 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T2983: Add support to DHCP server include an extended config.

@Dmitry Is it works if you include config as "global parameter" without patching?

Apr 29 2021, 9:06 AM · VyOS 1.3 Equuleus (1.3.4)
Viacheslav closed T3029: Generated NGINX configuration is wrong for the redirection (http -> https) as Resolved.
Apr 29 2021, 8:50 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav closed T3156: Add op and additional conf commands for ISIS as Resolved.
Apr 29 2021, 8:39 AM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a parent task for T3209: Load balancing rules in firewall: T3116: Support back-end L4 level load balancing.
Apr 29 2021, 8:37 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T3250: PPPoE server: wrong local usernames.

PR https://github.com/vyos/vyos-1x/pull/825

Apr 29 2021, 8:31 AM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta

Apr 28 2021

Viacheslav closed T3447: Default IPv6 route is not created in VRF as Resolved.
[email protected]:~$ show ipv6 route vrf all
Codes: K - kernel route, C - connected, S - static, R - RIPng,
       O - OSPFv3, I - IS-IS, B - BGP, N - NHRP, T - Table,
       v - VNC, V - VNC-Direct, A - Babel, D - SHARP, F - PBR,
       f - OpenFabric,
       > - selected route, * - FIB route, q - queued route, r - rejected route
Apr 28 2021, 10:10 PM · VyOS 1.3 Equuleus (1.3.0)
Viacheslav added a comment to T3217: Save FRR configuration on each commit.

PR's for Equuleus, save frr configurations.
https://github.com/vyos/vyatta-cfg/pull/39
https://github.com/vyos/vyatta-cfg-quagga/pull/75

Apr 28 2021, 9:24 PM · VyOS 1.3 Equuleus (1.3.0-epa1), VyOS 1.4 Sagitta
Viacheslav added a comment to T3333: "show vpn ipsec sa" reports ESP tunnels to be up when they are not..

For crux we use parser of " ipsec statusall {peer}"
Output if IKE established and esp SA not installed

vyos@r2-lts:~$ sudo ipsec statusall peer-192.0.2.1-tunnel-vti | grep Connections -A 50
Connections:
peer-192.0.2.1-tunnel-vti:  192.0.2.2...192.0.2.1  IKEv1
peer-192.0.2.1-tunnel-vti:   local:  [192.0.2.2] uses pre-shared key authentication
peer-192.0.2.1-tunnel-vti:   remote: [192.0.2.1] uses pre-shared key authentication
peer-192.0.2.1-tunnel-vti:   child:  0.0.0.0/0 === 0.0.0.0/0 TUNNEL
Security Associations (2 up, 0 connecting):
peer-192.0.2.1-tunnel-vti[3]: ESTABLISHED 12 minutes ago, 192.0.2.2[192.0.2.2]...192.0.2.1[192.0.2.1]
peer-192.0.2.1-tunnel-vti[3]: IKEv1 SPIs: 0ab8c2ee5815350e_i 271fba46aab245da_r*, pre-shared key reauthentication in 29 minutes
peer-192.0.2.1-tunnel-vti[3]: IKE proposal: AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024
Apr 28 2021, 3:04 PM · VyOS 1.2 Crux (VyOS 1.2.8)
Viacheslav edited projects for T3333: "show vpn ipsec sa" reports ESP tunnels to be up when they are not., added: VyOS 1.2 Crux (VyOS 1.2.8); removed VyOS 1.2 Crux.
Apr 28 2021, 2:34 PM · VyOS 1.2 Crux (VyOS 1.2.8)
Viacheslav claimed T3333: "show vpn ipsec sa" reports ESP tunnels to be up when they are not..
Apr 28 2021, 1:42 PM · VyOS 1.2 Crux (VyOS 1.2.8)
Viacheslav added a comment to T3333: "show vpn ipsec sa" reports ESP tunnels to be up when they are not..

PR for Equuleus https://github.com/vyos/vyos-1x/pull/823

Apr 28 2021, 1:42 PM · VyOS 1.2 Crux (VyOS 1.2.8)
Viacheslav added a project to T3333: "show vpn ipsec sa" reports ESP tunnels to be up when they are not.: VyOS 1.3 Equuleus.
Apr 28 2021, 1:18 PM · VyOS 1.2 Crux (VyOS 1.2.8)

Apr 27 2021

c-po moved T3502: "system ip multipath layer4-hashing" doesn't work from Open to Finished on the VyOS 1.4 Sagitta board.
Apr 27 2021, 7:48 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po moved T3502: "system ip multipath layer4-hashing" doesn't work from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Apr 27 2021, 7:48 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
stepler changed the status of T3502: "system ip multipath layer4-hashing" doesn't work from Open to In progress.

PR https://github.com/vyos/vyos-1x/pull/821

Apr 27 2021, 7:02 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
jestabro moved T2946: Calling 'stty_size' causes show interfaces API to fail from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Apr 27 2021, 6:49 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
jestabro closed T2946: Calling 'stty_size' causes show interfaces API to fail as Resolved.
Apr 27 2021, 6:49 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
jestabro added a project to T2946: Calling 'stty_size' causes show interfaces API to fail: VyOS 1.4 Sagitta.
Apr 27 2021, 6:45 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
stepler claimed T3502: "system ip multipath layer4-hashing" doesn't work.
Apr 27 2021, 6:42 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
stepler created T3502: "system ip multipath layer4-hashing" doesn't work.
Apr 27 2021, 6:42 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav changed the status of T3425: Scripts from the /config/scripts/ folder do not run on live system from In progress to Needs testing.
Apr 27 2021, 4:52 PM · VyOS 1.3 Equuleus (1.3.0-epa2)
Viacheslav moved T3455: system users can not be added in "edit" from Open to Backport Candidates on the VyOS 1.4 Sagitta board.
Apr 27 2021, 4:13 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav added a comment to T3455: system users can not be added in "edit".

Works perfect in VyOS 1.4-rolling-202104260417

Apr 27 2021, 4:13 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav assigned T3471: DHCP hook is not able to detect all running DHCP instances to zsdc.
Apr 27 2021, 4:10 PM · VyOS 1.4 Sagitta (1.4.0-epa1), Restricted Project
jestabro claimed T2946: Calling 'stty_size' causes show interfaces API to fail.
Apr 27 2021, 2:17 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
tlcarpenter added a comment to T2946: Calling 'stty_size' causes show interfaces API to fail.

This bug is still present in VyOS 1.4-rolling-202104061143.

Apr 27 2021, 1:34 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta