Page MenuHomeVyOS Platform
Feed Search

Apr 25 2022

Viacheslav added a comment to T4210: NAT source/destination negated ports throws an error.

PR https://github.com/vyos/vyos-1x/pull/1300

Apr 25 2022, 11:53 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4210: NAT source/destination negated ports throws an error from Open to In progress.
Apr 25 2022, 11:22 AM · VyOS 1.4 Sagitta
Viacheslav claimed T4210: NAT source/destination negated ports throws an error.
Apr 25 2022, 11:22 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4392: Multiline login banner text reports error on commit.

Working fine in VyOS 1.4-rolling-202204250217

Apr 25 2022, 10:19 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4395: Extend show vpn debug .

PR https://github.com/vyos/vyos-1x/pull/1299

Apr 25 2022, 9:31 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
Viacheslav changed the status of T4395: Extend show vpn debug from Open to In progress.
Apr 25 2022, 9:00 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
Viacheslav created T4395: Extend show vpn debug .
Apr 25 2022, 8:41 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta

Apr 24 2022

c-po updated the task description for T4393: sstp: add support for configuring host-name (SNI).
Apr 24 2022, 5:28 PM · VyOS 1.4 Sagitta (1.4.0-GA)
c-po triaged T4393: sstp: add support for configuring host-name (SNI) as Normal priority.
Apr 24 2022, 5:27 PM · VyOS 1.4 Sagitta (1.4.0-GA)
c-po created T4393: sstp: add support for configuring host-name (SNI).
Apr 24 2022, 5:27 PM · VyOS 1.4 Sagitta (1.4.0-GA)
ajgnet triaged T4392: Multiline login banner text reports error on commit as Low priority.
Apr 24 2022, 11:11 AM · VyOS 1.4 Sagitta
c-po updated the task description for T4390: op-mode: extend "show log" and "monitor log" with additional daemons/subsystems to read journalctl logs.
Apr 24 2022, 9:19 AM · VyOS 1.4 Sagitta
c-po changed the status of T4391: PPPoE: IPv6 not working after system boot from Open to In progress.
Apr 24 2022, 9:18 AM · VyOS 1.4 Sagitta
c-po created T4391: PPPoE: IPv6 not working after system boot.
Apr 24 2022, 9:18 AM · VyOS 1.4 Sagitta
c-po renamed T4390: op-mode: extend "show log" and "monitor log" with additional daemons/subsystems to read journalctl logs from op-mode: add "show log" and "monitor log" for pppoe interfaces to op-mode: extend "show log" and "monitor log" with additional daemons/subsystems to read journalctl logs.
Apr 24 2022, 9:00 AM · VyOS 1.4 Sagitta
c-po claimed T4390: op-mode: extend "show log" and "monitor log" with additional daemons/subsystems to read journalctl logs.
Apr 24 2022, 8:38 AM · VyOS 1.4 Sagitta
c-po created T4390: op-mode: extend "show log" and "monitor log" with additional daemons/subsystems to read journalctl logs.
Apr 24 2022, 8:38 AM · VyOS 1.4 Sagitta
Viacheslav closed T4342: "show ip ospf neighbor address x.x.x.x" gives "unknown command" error as Resolved.
Apr 24 2022, 2:01 AM · VyOS 1.4 Sagitta

Apr 23 2022

Viacheslav closed T4386: Applying limiter on traffic-policy "in" fails, incorrectly reports mirror or redirect policy in use as Resolved.
Apr 23 2022, 5:39 PM · VyOS 1.4 Sagitta
ajgnet added a comment to T4386: Applying limiter on traffic-policy "in" fails, incorrectly reports mirror or redirect policy in use.

Confirmed working. Awesome

Apr 23 2022, 5:03 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4380: Feature Request: ocserv: 2FA OTP key generator in VyOS CLI from Open to In progress.
Apr 23 2022, 1:02 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4383: Flow Accounting returns permission error and fails to start.

I can't reproduce it VyOS 1.4-rolling-202204230217

Apr 23 2022, 12:59 PM · VyOS 1.4 Sagitta
Viacheslav added a project to T4386: Applying limiter on traffic-policy "in" fails, incorrectly reports mirror or redirect policy in use: VyOS 1.4 Sagitta.
Apr 23 2022, 12:34 PM · VyOS 1.4 Sagitta

Apr 22 2022

c-po closed T4389: dhcp: add vendor option support for Ubiquity Unifi controller as Resolved.
Apr 22 2022, 8:39 PM · VyOS 1.4 Sagitta
c-po updated the task description for T4389: dhcp: add vendor option support for Ubiquity Unifi controller.
Apr 22 2022, 8:39 PM · VyOS 1.4 Sagitta
c-po updated the task description for T4389: dhcp: add vendor option support for Ubiquity Unifi controller.
Apr 22 2022, 8:29 PM · VyOS 1.4 Sagitta
c-po changed the status of T4389: dhcp: add vendor option support for Ubiquity Unifi controller from Open to In progress.
Apr 22 2022, 8:11 PM · VyOS 1.4 Sagitta
c-po created T4389: dhcp: add vendor option support for Ubiquity Unifi controller.
Apr 22 2022, 8:10 PM · VyOS 1.4 Sagitta
c-po moved T4388: dhcp-server: missing constraint on tftp-server-name option from Need Triage to In Progress on the VyOS 1.3 Equuleus (1.3.2) board.
Apr 22 2022, 8:08 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po moved T4388: dhcp-server: missing constraint on tftp-server-name option from Need Triage to 1.3.2 on the VyOS 1.3 Equuleus board.
Apr 22 2022, 8:08 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po added a comment to T4388: dhcp-server: missing constraint on tftp-server-name option.

PR for 1.3 https://github.com/vyos/vyos-1x/pull/1297

Apr 22 2022, 8:08 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po moved T4388: dhcp-server: missing constraint on tftp-server-name option from Open to Finished on the VyOS 1.4 Sagitta board.
Apr 22 2022, 8:06 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
c-po changed the status of T4357: Allow free-form setting of DHCPv6 server options from Open to Needs testing.
Apr 22 2022, 8:06 PM · VyOS 1.4 Sagitta
c-po added a comment to T4357: Allow free-form setting of DHCPv6 server options.

Confirmed working using the following CLI options with IPv6 only Cisco 7961G Phone:

Apr 22 2022, 8:05 PM · VyOS 1.4 Sagitta
c-po changed the status of T4388: dhcp-server: missing constraint on tftp-server-name option from Open to In progress.
Apr 22 2022, 7:45 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
n.fort changed the status of T4365: NAT - Error on setting up tables from Open to Needs testing.
Apr 22 2022, 5:31 PM · VyOS 1.4 Sagitta
jestabro reopened T4361: `vyos.config.exists()` does not work for nodes with multiple values as "Open".

Re-open for revision/simplification in:
https://github.com/vyos/vyos-1x/pull/1295

Apr 22 2022, 4:13 PM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
ajgnet changed Issue type from internal to feature on T4387: Create additional smoketests for multiwan PBR & load-balanced configurations .
Apr 22 2022, 12:19 AM · VyOS 1.4 Sagitta
ajgnet triaged T4387: Create additional smoketests for multiwan PBR & load-balanced configurations as Normal priority.
Apr 22 2022, 12:19 AM · VyOS 1.4 Sagitta

Apr 21 2022

fernando changed the status of T4360: Issues on MPLS L3VPN Service Label from Open to Confirmed.
Apr 21 2022, 11:57 PM · Bugs, VyOS 1.4 Sagitta (1.4.0-GA)
fernando added a comment to T4360: Issues on MPLS L3VPN Service Label.

sorry for my late reply , I've been testing this case and I could replicate the same behavior

Apr 21 2022, 11:56 PM · Bugs, VyOS 1.4 Sagitta (1.4.0-GA)
c-po closed T4384: pppoe: replace default-route CLI option with common CLI nodes already present for DHCP as Resolved.
Apr 21 2022, 8:15 PM · VyOS 1.4 Sagitta
billsimon added a comment to T4357: Allow free-form setting of DHCPv6 server options.

I am also not expert; I used the options as described by documentation, but do not understand DHCPD in depth.

Apr 21 2022, 6:18 PM · VyOS 1.4 Sagitta
c-po closed T4385: bgp: peer-group member cannot override remote-as of peer-group as Resolved.
Apr 21 2022, 6:17 PM · VyOS 1.4 Sagitta
c-po created T4385: bgp: peer-group member cannot override remote-as of peer-group.
Apr 21 2022, 6:16 PM · VyOS 1.4 Sagitta
c-po changed the status of T4384: pppoe: replace default-route CLI option with common CLI nodes already present for DHCP from Open to In progress.
Apr 21 2022, 5:35 PM · VyOS 1.4 Sagitta
c-po created T4384: pppoe: replace default-route CLI option with common CLI nodes already present for DHCP.
Apr 21 2022, 5:35 PM · VyOS 1.4 Sagitta
jestabro added a comment to T3785: Add unicode support to configtree backend.

Backported to equuleus branch of vyos1x-config:
https://github.com/vyos/vyos1x-config/commit/8ad21f6c7e6f37edeca137b2a7dc7c3f7ffc6a20

Apr 21 2022, 4:40 PM · VyOS 1.3 Equuleus (1.3.2)
Unknown Object (User) added a comment to T4380: Feature Request: ocserv: 2FA OTP key generator in VyOS CLI.

PR:
https://github.com/vyos/vyos-1x/pull/1294

Apr 21 2022, 12:30 PM · VyOS 1.4 Sagitta
n.fort added a comment to T4365: NAT - Error on setting up tables.

PR: https://github.com/vyos/vyos-1x/pull/1289

Apr 21 2022, 12:10 PM · VyOS 1.4 Sagitta
ajgnet updated the task description for T4383: Flow Accounting returns permission error and fails to start.
Apr 21 2022, 12:46 AM · VyOS 1.4 Sagitta
ajgnet created T4383: Flow Accounting returns permission error and fails to start.
Apr 21 2022, 12:32 AM · VyOS 1.4 Sagitta

Apr 20 2022

jestabro updated the task description for T4382: Replacing legacy loadFile exposes missing steps in migration scripts and other errors.
Apr 20 2022, 9:26 PM · VyOS 1.4 Sagitta
jestabro updated the task description for T4382: Replacing legacy loadFile exposes missing steps in migration scripts and other errors.
Apr 20 2022, 9:24 PM · VyOS 1.4 Sagitta
jestabro added a subtask for T4295: Use config_tree instead of legacy loadFile in vyos-load-config.py: T4382: Replacing legacy loadFile exposes missing steps in migration scripts and other errors.
Apr 20 2022, 8:28 PM · VyOS 1.4 Sagitta
jestabro added a parent task for T4382: Replacing legacy loadFile exposes missing steps in migration scripts and other errors: T4295: Use config_tree instead of legacy loadFile in vyos-load-config.py.
Apr 20 2022, 8:28 PM · VyOS 1.4 Sagitta
jestabro changed the status of T4382: Replacing legacy loadFile exposes missing steps in migration scripts and other errors from Open to Confirmed.
Apr 20 2022, 8:25 PM · VyOS 1.4 Sagitta
ajgnet added a comment to T4362: Wan Load Balancing - Can't create routing tables.

Confirming the same.

Apr 20 2022, 12:54 PM · VyOS 1.4 Sagitta
sarthurdev closed T4345: New firewall code does not accept "rate/time interval" syntax used in old config as Resolved.
Apr 20 2022, 11:58 AM · VyOS 1.4 Sagitta
v.huti added a comment to T4028: FRR 8.1 routes not being applied to routing table after reboot if an interface has 2 ip addresses.

Pull https://github.com/FRRouting/frr/pull/11004 was merged. This needs retesting on the latest FRR

Apr 20 2022, 10:48 AM · VyOS 1.4 Sagitta
c-po added a comment to T4357: Allow free-form setting of DHCPv6 server options.

Not a super expert in ISC DHCPd but it feels like the vendor specific options are hardcoded

Apr 20 2022, 6:53 AM · VyOS 1.4 Sagitta
KenCrandall added a watcher for VyOS 1.4 Sagitta: KenCrandall.
Apr 20 2022, 4:23 AM
Unknown Object (User) created T4380: Feature Request: ocserv: 2FA OTP key generator in VyOS CLI.
Apr 20 2022, 2:20 AM · VyOS 1.4 Sagitta
Unknown Object (User) closed T4231: Feature Request: ocserv: 2FA (password+OTP) support in Openconnect as Resolved.

Tested in VyOS 1.4-rolling-202204130521
Works

Apr 20 2022, 1:58 AM · VyOS 1.4 Sagitta

Apr 19 2022

Viacheslav added a comment to T4357: Allow free-form setting of DHCPv6 server options.

PR https://github.com/vyos/vyos-1x/pull/1293

Apr 19 2022, 11:29 PM · VyOS 1.4 Sagitta
c-po closed T4379: PPPoE: default-route lost after applying additional static routes as Resolved.
Apr 19 2022, 7:51 PM · VyOS 1.4 Sagitta
Viacheslav moved T4268: Elevated LA while using VyOS monitoring feature from Need Triage to Finished on the VyOS 1.3 Equuleus board.
Apr 19 2022, 6:42 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav closed T4268: Elevated LA while using VyOS monitoring feature as Resolved.
Apr 19 2022, 6:42 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
c-po renamed T4379: PPPoE: default-route lost after applying additional static routes from PPPoE: default-route lost after applying additional startic routes to PPPoE: default-route lost after applying additional static routes.
Apr 19 2022, 5:58 PM · VyOS 1.4 Sagitta
c-po claimed T4379: PPPoE: default-route lost after applying additional static routes.
Apr 19 2022, 5:49 PM · VyOS 1.4 Sagitta
c-po created T4379: PPPoE: default-route lost after applying additional static routes.
Apr 19 2022, 5:49 PM · VyOS 1.4 Sagitta
ajgnet updated the task description for T4378: Unable to submit wildcard ("*.example.com") A or AAAA records in dns forwarder.
Apr 19 2022, 5:01 PM · VyOS 1.4 Sagitta
ajgnet created T4378: Unable to submit wildcard ("*.example.com") A or AAAA records in dns forwarder.
Apr 19 2022, 4:59 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4357: Allow free-form setting of DHCPv6 server options.

Proposed CLI:

set service dhcpv6-server global-parameters cisco-voip width 2 
set service dhcpv6-server global-parameters cisco-voip length-width 2 
set service dhcpv6-server global-parameters cisco-voip tftp-servers 
set service dhcpv6-server shared-network-name Lan-v6-02 subnet 2001:db8:23::/64 cisco-voip tftp-server xx:xx:xx
Apr 19 2022, 4:40 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4375: hairpin nat (nat reflector) "hijacks" all outgoing traffic on specified port to any destination.

Related to task T2196
Also there can be an issue if you get by DHCP non external addresses which behind nat.
So you need some external scripts which will give you your external address, like

curl ifconfig.me
Apr 19 2022, 3:40 PM · VyOS Rolling
Viacheslav assigned T4268: Elevated LA while using VyOS monitoring feature to Unknown Object (User).
Apr 19 2022, 2:45 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Unknown Object (User) changed the status of T4268: Elevated LA while using VyOS monitoring feature from Open to In progress.

https://github.com/vyos/vyos-1x/pull/1291
https://github.com/vyos/vyos-1x/pull/1292

Apr 19 2022, 2:31 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
ajgnet added a comment to T4376: DNAT with multiwan and policy routing, incoming connections only work on primary interface.

Tested, does not work. Even with all firewall rules removed.

Apr 19 2022, 2:14 PM · VyOS 1.4 Sagitta
ajgnet added a comment to T4375: hairpin nat (nat reflector) "hijacks" all outgoing traffic on specified port to any destination.

Is there a way to get this to work with a dhcp assigned WAN address?

Apr 19 2022, 2:05 PM · VyOS Rolling
Unknown Object (User) updated subscribers of T4268: Elevated LA while using VyOS monitoring feature.

The answer was found https://github.com/influxdata/telegraf/issues/3465
Thanks @jestabro

Apr 19 2022, 1:53 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
Viacheslav added a comment to T4375: hairpin nat (nat reflector) "hijacks" all outgoing traffic on specified port to any destination.

Set destination external address, it is required. In other case you set all traffic to local server.

Apr 19 2022, 12:59 PM · VyOS Rolling
Viacheslav added a comment to T4376: DNAT with multiwan and policy routing, incoming connections only work on primary interface.

I didn't test it, but you need something like this or combinations..

set policy route MARK-80-eth0 rule 10 destination port '80'
set policy route MARK-80-eth0 rule 10 protocol 'tcp'
set policy route MARK-80-eth0 rule 10 set mark '100'
set policy route MARK-80-eth0 rule 10 set table '100'
Apr 19 2022, 12:53 PM · VyOS 1.4 Sagitta
Viacheslav closed T4344: DHCP statistics not matching, conf-mode generates incorrect pool name with dash as Resolved.

Fixed

vyos@vyos:~$ show conf com | match dhcp
set service dhcp-server shared-network-name NET_01 authoritative
set service dhcp-server shared-network-name NET_01 name-server '1.1.1.1'
set service dhcp-server shared-network-name NET_01 subnet 192.0.2.0/24 range R1 start '192.0.2.21'
set service dhcp-server shared-network-name NET_01 subnet 192.0.2.0/24 range R1 stop '192.0.2.254'
vyos@vyos:~$ 
vyos@vyos:~$ show dhcp server leases 
IP address    Hardware address    State    Lease start          Lease expiration     Remaining    Pool    Hostname
------------  ------------------  -------  -------------------  -------------------  -----------  ------  ----------
192.0.2.27    50:08:00:06:00:02   active   2022/04/19 12:04:19  2022/04/20 12:04:19  23:59:27     NET_01  vyos
vyos@vyos:~$ 
vyos@vyos:~$ show dhcp server statistics 
Pool      Size    Leases    Available  Usage
------  ------  --------  -----------  -------
NET_01     234         1          233  0%
vyos@vyos:~$
Apr 19 2022, 12:05 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.4 Sagitta
ajgnet created T4376: DNAT with multiwan and policy routing, incoming connections only work on primary interface.
Apr 19 2022, 11:27 AM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4373: PPPoE-server add multiplier option for shaper.

PR https://github.com/vyos/vyos-1x/pull/1290

Apr 19 2022, 11:09 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
ajgnet created T4375: hairpin nat (nat reflector) "hijacks" all outgoing traffic on specified port to any destination.
Apr 19 2022, 9:53 AM · VyOS Rolling
ajgnet updated the task description for T4374: ipv6 address drops from interface, but network still active.
Apr 19 2022, 9:45 AM · VyOS 1.4 Sagitta
ajgnet created T4374: ipv6 address drops from interface, but network still active.
Apr 19 2022, 9:21 AM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4373: PPPoE-server add multiplier option for shaper from Open to In progress.
Apr 19 2022, 5:31 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta
Viacheslav created T4373: PPPoE-server add multiplier option for shaper.
Apr 19 2022, 5:28 AM · VyOS 1.3 Equuleus (1.3.2), VyOS 1.4 Sagitta

Apr 18 2022

higebu closed T4278: vyos-vm-images: fix vagrant libvirt box as Resolved.
Apr 18 2022, 11:39 PM · Restricted Project, VyOS 1.4 Sagitta
svd135 added a comment to T4327: Ethernet interface configuration fails on Hyper-V due to speed/duplex/autoneg ethtool command error.

1.4-rolling-20220418
Issue is still not fixed

Apr 18 2022, 9:23 PM · VyOS 1.4 Sagitta
c-po closed T4370: vxlan: geneve: support configuration of df bit option as Resolved.
Apr 18 2022, 5:55 PM · VyOS 1.4 Sagitta
c-po changed the status of T4370: vxlan: geneve: support configuration of df bit option from Open to In progress.
Apr 18 2022, 5:52 PM · VyOS 1.4 Sagitta
c-po created T4370: vxlan: geneve: support configuration of df bit option.
Apr 18 2022, 5:51 PM · VyOS 1.4 Sagitta
billsimon added a comment to T4356: DHCP v6 client only supports single interface configuration.

Adding logs. dhcpv6 configured for interfaces eth0 and eth3. Depending which starts first, the other one fails and gives "unexpected interface":

Apr 18 2022, 3:26 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4356: DHCP v6 client only supports single interface configuration.

At least dhcpv6 address assign correctly, VyOS 1.4-rolling-202204162001

set interfaces ethernet eth2 address 'dhcp'
set interfaces ethernet eth2 address 'dhcpv6'
set interfaces ethernet eth3 address 'dhcp'
set interfaces ethernet eth3 address 'dhcpv6'

Show interfaces:

vyos@vyos:~$ show int
Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down
Interface        IP Address                        S/L  Description
---------        ----------                        ---  -----------
eth0             -                                 u/u  
eth1             -                                 u/u  
eth2             100.64.20.21/24                   u/u  WAN01
                 2001:db8:23::934f/128                  
eth3             100.64.30.21/24                   u/u  WAN02
                 2001:db8::934f/128
Apr 18 2022, 3:03 PM · VyOS 1.4 Sagitta
billsimon added a comment to T4357: Allow free-form setting of DHCPv6 server options.

In dhcpdv6.conf I have added the following to support Cisco VoIP phone provisioning over IPv6:

Apr 18 2022, 2:38 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4357: Allow free-form setting of DHCPv6 server options.

It was a lot of issues with it in openvpn.
So we decide to avoid to use raw options
Let us know which options do you need?

Apr 18 2022, 2:33 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4362: Wan Load Balancing - Can't create routing tables.
Apr 18 2022, 12:57 PM · VyOS 1.4 Sagitta