The latest 1.4 works well after merging.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Aug 29 2022
Aug 29 2022
syncer edited projects for T3940: DHCP client does not remove IP address when stopped by the 02-vyos-stopdhclient hook, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.0).
syncer edited projects for T3933: The firewall does not filter incoming traffic on the interface with vrf., added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.0).
Aug 29 2022, 7:05 AM · Bugs, VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-GA), Restricted Project
syncer edited projects for T4078: A hybrid of "network-group" and "address-group"., added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.0).
syncer edited projects for T4079: Source/Destination NAT GROUP, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.0).
syncer edited projects for T4247: Access Control for SSH (and other?) services, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.0).
syncer edited projects for T4113: Incorrect GRUB configuration parsing, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.0).
syncer edited projects for T4262: install image doesn't respect chosen root partition size, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.0).
syncer edited projects for T4387: Create additional smoketests for multiwan PBR & load-balanced configurations , added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.0).
syncer edited projects for T4426: Add arpwatch to the image, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.0).
syncer edited projects for T4402: OpenVPN client-ip-pool option is broken, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.0).
syncer edited projects for T4427: Remove the vyos-utils package list from vyos-build, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.0).
syncer edited projects for T4621: OpenConnect group selection, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus.
syncer edited projects for T4625: Update ocserv to current revision (1.1.6), added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus.
syncer edited projects for T4628: ConfigTree() throws ValueError() if tagNode contains whitespaces, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus.
syncer edited projects for T4646: USB serial output console does not work, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus.
Viacheslav moved T4601: dhcp : relay agent IP address issue. from Backport Candidates to Need Triage on the VyOS 1.3 Equuleus (1.3.3) board.
Viacheslav moved T4601: dhcp : relay agent IP address issue. from Open to Backport Candidates on the VyOS 1.4 Sagitta board.
Viacheslav moved T4601: dhcp : relay agent IP address issue. from Need Triage to Backport Candidates on the VyOS 1.3 Equuleus (1.3.3) board.
Viacheslav edited projects for T4601: dhcp : relay agent IP address issue., added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.0).
Aug 28 2022
Aug 28 2022
Unknown Object (User) added a project to T4601: dhcp : relay agent IP address issue.: VyOS 1.3 Equuleus (1.3.0).
c-po moved T4652: Upgrade PowerDNS recursor to 4.7 series from Open to Finished on the VyOS 1.4 Sagitta board.
c-po renamed T4652: Upgrade PowerDNS recursor to 4.7 series from Upgrade PowerDNs recursor to 4.7 series to Upgrade PowerDNS recursor to 4.7 series.
c-po edited projects for T4652: Upgrade PowerDNS recursor to 4.7 series, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.0-epa2).
c-po changed the status of T4652: Upgrade PowerDNS recursor to 4.7 series, a subtask of T3882: Upgrade PowerDNs recursor to 4.5 series, from Open to In progress.
Unknown Object (User) added a comment to T4601: dhcp : relay agent IP address issue..
Unknown Object (User) added a comment to T4601: dhcp : relay agent IP address issue..
@Viacheslav I've checked it using "VyOS 1.3.1-S1" version a problem the same.
Aug 27 2022
Aug 27 2022
n.fort changed the status of T4651: Firewall - Add options to match packet size from Open to In progress.
Viacheslav changed the status of T4650: Rewire show nat translation to vyos.opmode format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from In progress to Needs testing.
Viacheslav changed the status of T4650: Rewire show nat translation to vyos.opmode format from In progress to Needs testing.
Aug 26 2022
Aug 26 2022
Viacheslav changed the status of T4631: Add port and protocol to nat66 from In progress to Needs testing.
Viacheslav changed the status of T4650: Rewire show nat translation to vyos.opmode format, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from Open to In progress.
Viacheslav changed the status of T4650: Rewire show nat translation to vyos.opmode format from Open to In progress.
Viacheslav added a comment to T4643: Smoketest exclude either sstp or openconnect from pki-misc default listen port.
Before fix:
06:04:21 DEBUG - FAIL: test_pki_misc (__main__.TestConfigPkiMisc) 06:04:21 DEBUG - ---------------------------------------------------------------------- 06:04:21 DEBUG - Traceback (most recent call last): 06:04:21 DEBUG - File "/usr/bin/vyos-configtest", line 50, in test_config_load 06:04:21 DEBUG - self.session.commit() 06:04:21 DEBUG - vyos.configsession.ConfigSessionError: [[service https]] failed 06:04:21 DEBUG - Commit failed 06:04:21 DEBUG - 06:04:21 DEBUG - 06:04:21 DEBUG - During handling of the above exception, another exception occurred: 06:04:21 DEBUG - 06:04:21 DEBUG - Traceback (most recent call last): 06:04:21 DEBUG - File "/usr/bin/vyos-configtest", line 53, in test_config_load 06:04:21 DEBUG - self.fail() 06:04:21 DEBUG - AssertionError: None
After fix:
vyos@r14:~$ /usr/bin/vyos-configtest Generating tests ... completed: 0.000608 test_pki_misc (__main__.TestConfigPkiMisc) ... time: 16.943 ok
Viacheslav reopened T4643: Smoketest exclude either sstp or openconnect from pki-misc default listen port as "Needs testing".
Aug 25 2022
Aug 25 2022
c-po moved T4647: Add Google Virtual NIC (gVNIC) support from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.2) board.
c-po edited projects for T4647: Add Google Virtual NIC (gVNIC) support, added: VyOS 1.3 Equuleus (1.3.2); removed VyOS 1.3 Equuleus.
c-po moved T4647: Add Google Virtual NIC (gVNIC) support from Open to Finished on the VyOS 1.4 Sagitta board.
PR for 1.3 https://github.com/vyos/vyos-build/pull/258
c-po edited a custom field on T4617: VRF specification is needed for telegraf prometheus-client listen-address <address> .
c-po changed the status of T4617: VRF specification is needed for telegraf prometheus-client listen-address <address> from Open to In progress.
Viacheslav added a comment to T4202: NFT: Zone policies fail to apply when "l2tp+" is in the interface list.
We have to replace it in migration scripts if it is already not done
The latest version of the demo can be found here:
PR https://github.com/vyos/vyos-1x/pull/1497
vyos@r14:~$ show nat source statistics Rule Packets Bytes Interface ------ --------- ------- ----------- 100 1279 107896 eth0 120 1 60 eth1 vyos@r14:~$
Viacheslav changed the status of T4645: show nat source statistics lack argument --family from Open to In progress.
The easiest way it add vyatta-nat-translations.pl scripts to the op-mode script directory or rewrite it to the python.
Also discussed this configuration:
set service dhcp-relay <tag> interface eth0 upstream set service dhcp-relay <tag> interface eth1 downstream set service dhcp-relay <tag> server <x.x.x.x> set service dhcp-relay <tag> relay-options hop-count 1 set service dhcp-relay <tag> relay-options upsteam-port 547
Viacheslav changed the status of T4644: Check bind port before assign vpn sstp from Open to In progress.
PR https://github.com/vyos/vyos-1x/pull/1496
vyos@r14# commit [ vpn sstp ] "tcp" port "443" is used by another service
Viacheslav edited projects for T1070: SWANCTL: DMVPN: ALL peers are deleted in swan when opennhrp tries to delete ONE peer, added: VyOS 1.3 Equuleus (1.3.3); removed VyOS 1.3 Equuleus (1.3.0).
Aug 25 2022, 8:00 AM · Bugs, VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-GA), Restricted Project
zsdc added a project to T1070: SWANCTL: DMVPN: ALL peers are deleted in swan when opennhrp tries to delete ONE peer: VyOS 1.4 Sagitta.
Aug 25 2022, 7:48 AM · Bugs, VyOS 1.3 Equuleus (1.3.9), VyOS 1.4 Sagitta (1.4.0-GA), Restricted Project
Viacheslav changed the status of T4643: Smoketest exclude either sstp or openconnect from pki-misc default listen port from Open to In progress.
Viacheslav changed the status of T4597: Check bind port before assign service HTTPS API and openconnect from In progress to Needs testing.
Viacheslav closed T4626: Error showing nat66 source and destination, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, as Resolved.
Aug 24 2022
Aug 24 2022
c-po moved T4641: prefix-list allows ipv6 prefix as input from Open to Finished on the VyOS 1.4 Sagitta board.
c-po moved T4642: proxy: hyphen not allowed in proxy URL from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
PR for equuleus https://github.com/vyos/vyos-1x/pull/1494
c-po moved T4642: proxy: hyphen not allowed in proxy URL from Open to Finished on the VyOS 1.4 Sagitta board.
n.fort changed the status of T4641: prefix-list allows ipv6 prefix as input from Open to In progress.
Viacheslav changed the status of T4626: Error showing nat66 source and destination, a subtask of T4564: Root task for rewriting [op-mode] to vyos.opmode format, from Open to In progress.
Viacheslav changed the status of T4626: Error showing nat66 source and destination from Open to In progress.
PR https://github.com/vyos/vyos-1x/pull/1491
set nat66 destination rule 100 destination address '2001:1111:1111:1111::10' set nat66 destination rule 100 inbound-interface 'eth0' set nat66 destination rule 100 translation address 'fd00:1111:1111:1111::10' set nat66 source rule 100 destination prefix '!fd00:2222:2222:2222::/64' set nat66 source rule 100 outbound-interface 'eth0' set nat66 source rule 100 source prefix 'fd00:1111:1111:1111::/64' set nat66 source rule 100 translation address '2001:1111:1111:1111::10' set nat66 source rule 120 destination prefix '2001:db8:2222::/64' set nat66 source rule 120 outbound-interface 'eth0' set nat66 source rule 120 source prefix '2001:db8:1111::/64' set nat66 source rule 120 translation address 'masquerade' set nat66 source rule 130 destination prefix '2001:db8:2222::/64' set nat66 source rule 130 outbound-interface 'eth0' set nat66 source rule 130 source prefix '2001:db8:2244::/64' set nat66 source rule 130 translation address 'masquerade'
show
vyos@r14:~$ show nat66 source rules
Rule Source Destination Proto Out-Int Translation
------ ------------------------ ------------------------- ------- --------- -----------------------
100 fd00:1111:1111:1111::/64 !fd00:2222:2222:2222::/64 IP6 eth0 2001:1111:1111:1111::10
sport any dport any
120 2001:db8:1111::/64 2001:db8:2222::/64 IP6 eth0 masquerade
sport any dport any
130 2001:db8:2244::/64 2001:db8:2222::/64 IP6 eth0 masquerade
sport any dport any
vyos@r14:~$
vyos@r14:~$
vyos@r14:~$ show nat66 destination rules
Rule Source Destination Proto In-Int Translation
------ --------- ----------------------- ------- -------- -----------------------
100 ::/0 2001:1111:1111:1111::10 any eth0 fd00:1111:1111:1111::10
sport any dport any
vyos@r14:~$I am more +1 on set system ip(v6) nht because what happens if out of random another protocol will support this? Also it's a zebra option as you described, not a bgpd option.