Extra checks are needed not only when attaching a policy route to an interface, but also when attaching firewall.
For example:
vyos@vyos# set firewall name FOO rule 10 action accept [edit] vyos@vyos# set firewall name FOO rule 10 destination group address-group NOAG [edit] vyos@vyos# commit
Fix Regex for addresses and python ckecks https://github.com/vyos/vyos-1x/pull/1354
Indeed, I figured that out. I also found that my openvpn config was not migrated properly (T3642?); all of the tls configuration stuff (previously kept under /config/auth somewhere) was gone. After doing run import pki for all of the necessary bits it was able at least to commit openvpn properly.
Same as Viacheslav. No issues on my tests in Ubuntu.
vyos@r12# set firewall group domain-group DOMAINS address dns.google
Fix smoketest https://github.com/vyos/vyos-1x/pull/1352
Yes. New 1.4 has more restricted checks on addresses and networks.
Actually, if you are using /22, the correct network for this case is 192.168.44.0/22.
You can use this online tool for checking ipv4 networks and subnets.
Sorry its taken me so long to follow up on this
This configuration commits without errors. Can the report be closed?
In T4460#124345, @Viacheslav wrote:From provided log syntax error in config string 6
‘holding-time 300’But yes “ cisco-authentication” shouldn’t be without values
From provided log syntax error in config string 6
‘holding-time 300’