VyOS 1.4:
https://github.com/vyos/vyatta-cfg-firewall/pull/23
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
May 25 2021
May 25 2021
Viacheslav changed the subtype of T3580: Refactoring firewall ipv6 rule icmpv6 from "Task" to "Feature Request".
Viacheslav changed the status of T3568: Add XML for firewall conf-mode, a subtask of T2199: Rewrite firewall in new XML/Python style, from Open to Needs testing.
c-po closed T3569: Firewall wrong completion help values, a subtask of T2199: Rewrite firewall in new XML/Python style, as Resolved.
c-po moved T3569: Firewall wrong completion help values from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3569: Firewall wrong completion help values from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T3569: Firewall wrong completion help values from Needs Triage to Finished on the VyOS 1.2 Crux (VyOS 1.2.8) board.
SrividyaA changed the status of T3569: Firewall wrong completion help values, a subtask of T2199: Rewrite firewall in new XML/Python style, from Open to Confirmed.
SrividyaA changed the status of T3569: Firewall wrong completion help values from Open to Confirmed.
Providing an entire path of the file i.e. /opt/vyatta/etc/key-pair.template instead of "@sysconfdir@/key-pair.template", makes the command executable.
IPSec VPN in X509 mode needs ca cert file, also server/client cert has to be signed by the CA for identification.
So, maybe rewriting this script will be helpful.
Any suggestions are welcome.
May 24 2021
May 24 2021
fernando added a comment to T2807: IPv6 Link-Local Address - Automatically generation/configuration on GRE Interfaces.
I`m Sorry! it maybe was an error that version , actually I try with Vyos 1.3-rc4 and It works well :
c-po moved T3241: Allow configuration of XAuth on IPsec Tunnels from Open to Backlog on the VyOS 1.4 Sagitta board.
c-po moved T3184: Add correct desctiptions for BGP neighbors from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3304: No way to use ipv4 address as next-hop in route-map from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3157: salt-minion fails to start due to permission error accessing /root/.salt/minion.log from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3514: NIC flap at any interface change from Open to Backlog on the VyOS 1.4 Sagitta board.
c-po moved T3137: Let VLAN aware bridge approach the behavior of professional equipment from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3222: Typo in BGP dampening description from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3205: Does not possible to configure tunnel mode gre-bridge from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3226: Repair bridge smoke test damage from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3211: ability to redistribute ISIS into other routing protocols from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3215: Operational command "show ipv6 route" is broken from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3276: Update Linux Kernel to v5.4.94 / 5.10.12 from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3257: tcpdump supporting complete protocol from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3251: PPPoE client trying to authorize with the wrong username from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3240: Support per-interface DHCPv6 DUIDs from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3248: Deal with VRRP mode-force command that exists in 1.2 but not in 1.3 from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3249: Support operation mode forwarding table output from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3261: Does not possible to disable pppoe client interface. from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3303: Change welcome message on boot from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3300: Add DHCP default route distance from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3295: Update Linux Kernel to v5.4.96 / 5.10.14 from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3290: Disabling GRE conntrack module fails from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3301: Wrong format and valueHelp for policy as-path-list regex from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3307: address prefix destination NAT fails to render nftables rules / commit from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3306: Extend set route-map aggregator as to 4 Bytes from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3318: Update Linux Kernel to v5.4.208 / 5.10.142 from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3163: ethernet ring-buffer can be set with an invalid value from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3326: OSPFv3: Cannot add L2TPv3 interface from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3329: "system conntrack ignore" rules can no longer be created due to an iptables syntax change from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3333: "show vpn ipsec sa" reports ESP tunnels to be up when they are not. from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3055: op-mode incorrect naming for ipsec policy-based tunnels from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3369: VXLAN: add IPv6 underlay support from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3368: macsec: add support for gcm-aes-256 cipher from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3395: WAN load-balancing fails with nexthop dhcp from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3389: gretap tunnel type missing from vyos documentation after renamed from gre-bridge from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3387: Command "Monitor vpn ipsec" is not working from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3416: NTP: when running inside a VRF op-mode commands do not work from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3418: BGP: system wide known interface can not be used as neighbor from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3468: Tunnel interfaces aren't suggested as being available for bridging (regression) from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3487: Specifying an invalid "interface address" like dhcph leads to commit error from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3457: Output the "monitor log" command in a colorful way from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3458: vyos docs missing gretap from tunnel section from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3519: Cannot add / assign L2TPv3 to vrf from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3550: Router-advert completion typo from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3559: Add restart op-command for OpenConnect Server from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3373: Upgrade to SaltStack version 3002.5 from In Progress to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3379: Add global-parameters name-server for dhcpv6-server from Backport Candidates to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3370: dhcp: Invalid domain name "private" from In Progress to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3392: vrrp over dhcp default route bug (unexpected vrf) from Backport Candidates to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3554: Add area-type stub for ospfv3 from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3547: conntrackd: remove deprecated config options from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T1080: L2tpv3 config delete on reboot/startup from In Progress to Finished on the VyOS 1.4 Sagitta board.
The main issue seems to be a lack of execute permissions on the script vyatta-gen-x509-keypair
c-po added a comment to T2807: IPv6 Link-Local Address - Automatically generation/configuration on GRE Interfaces.
Did you try VyOS 1.3-rc4?
c-po moved T3571: Broken Show Tab Complete from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po changed the status of T3575: pseudo-ethernet: must check source-interface MTU from In progress to On hold.
c-po moved T3575: pseudo-ethernet: must check source-interface MTU from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T3575: pseudo-ethernet: must check source-interface MTU from Open to Finished on the VyOS 1.4 Sagitta board.
c-po changed the status of T3575: pseudo-ethernet: must check source-interface MTU from Open to In progress.
May 23 2021
May 23 2021
fernando added a comment to T2807: IPv6 Link-Local Address - Automatically generation/configuration on GRE Interfaces.
I can reproduce that behavior, although I use another VyOS version " VyOS 1.3-rolling-202104210642" with a virtual machine :
jestabro added a comment to T2759: validate-value prints error messages from validators that fail even if overall validation succeeds.
Opening a new task for the issue described in the last comment, above. The original problem re. error messages was resolved in vyos-utils 68d1b283 .
c-po moved T3570: Prevent setting of a larger MTU on child interfaces from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T3554: Add area-type stub for ospfv3 from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T3533: BGP IPv4 does not initiateate a session from Need Triage to Finished on the VyOS 1.3 Equuleus board.
c-po moved T3570: Prevent setting of a larger MTU on child interfaces from Need Triage to Finished on the VyOS 1.3 Equuleus board.