@sdev greats !!!

PR created: https://github.com/vyos/vyos-1x/pull/2255

Turns out that the values who override the vyos-config values are set in /etc/sysctl.d/30-vyos-router.conf:

PR: https://github.com/vyos/vyos-1x/pull/2253

I can confirm that setting these values AFTER boot (and doing commit) they will be properly set.

PR for 1.3.x https://github.com/vyos/vyatta-cfg-quagga/pull/102
PR for the current https://github.com/vyos/vyos-1x/pull/2252

@fernando See here: https://github.com/vyos/vyos-build/pull/297

Turns out to exist an RFC for this regarding IPv6 along with a naming:

I was thinking about N/D and personally I would prefer "None" to be listed for the various "show firewall" commands instead of N/D.

This can be put to resolved when the backports are confirmed aswell.

N/D == not defined

In T5564#159459, @Apachez wrote:

Confirmed working with VyOS 1.5-rolling-202309110651

A question before setting this to resolved:

What does N/D mean?

Shouldnt it be N/A instead?

Confirmed working with VyOS 1.5-rolling-202309110651

Builds passing: https://github.com/vyos/vyos-rolling-nightly-builds/actions/runs/6142937552

current PR: https://github.com/vyos/vyatta-cfg-system/pull/205

PR https://github.com/vyos/vyos-1x/pull/2240

set protocols static proxy-arp 192.0.2.1 interface eth0
set protocols static proxy-arp 192.0.2.1 interface eth1
set protocols static proxy-ndp 2001:db8::1 interface eth1

Latest run https://github.com/vyos/vyos-rolling-nightly-builds/actions/runs/6138721359/job/16655876943

Fix by @sever regarding those failing conntrack smoketest: https://github.com/vyos/vyos-1x/pull/2234

I guess we should use the current ip neighbor xxx instead of old arp. I hope it does the same.

sudo ip neighbor add proxy 192.0.2.1 dev eth0
sudo ip -6 neigh add proxy aa::1 dev eth0

Show

vyos@r1# sudo ip neighbor show proxy
192.168.122.11 dev eth0  proxy
192.0.2.1 dev eth0  proxy
aa::1 dev eth0  proxy
[edit]
vyos@r1#

PR https://github.com/vyos/vyos-1x/pull/2235

The failed smoketest test_interfaces_ethernet.py can be seen at:

The failed smoketest test_protocols_pim6.py seems to have been taken care of by:

Regarding the failing smoketest test_system_conntrack.py (test_conntrack_ignore):

Still errors in:

Related: https://vyos.dev/T5513

Related: https://vyos.dev/T5311

PR created (fixes https://github.com/vyos/vyos-build/commit/a863fe0): https://github.com/vyos/vyos-build/pull/395

PR https://github.com/vyos/vyos-1x/pull/2230

PR for 1.3.x https://github.com/vyos/vyos-1x/pull/2225

For the tests above, which configs are actually being used?

Some observations:

Cherry-pick to 1.4 https://github.com/vyos/vyos-1x/pull/2226

PR for 1.4 https://github.com/vyos/vyos-1x/pull/2224

The PR is merged

PR is created https://github.com/vyos/vyos-build/pull/394

Sagitta PR updated with fix for regression in T5556.

The logic error is fixed in commit above: updates work as expected, and all smoketests (but for unrelated test) pass.

PR: https://github.com/vyos/vyos-1x/pull/2221

Not as such: this is a logic error in T5353, which will be fixed momentarily. Nonetheless, T5514 is worthwhile to consider.

Related to https://vyos.dev/T5514 ?

For 1.4 add session [default=ignore success=2] pam_succeed_if.so service = sudo to /etc/pam.d/common-session-noninteractive fixes the issue

# here are the per-package modules (the "Primary" block)
session [default=1]                     pam_permit.so
# here's the fallback if no module succeeds
session requisite                       pam_deny.so
# prime the stack with a positive return value if there isn't one already;
# this avoids us returning an error just because nothing sets a success code
# since the modules above will each just jump around
session required                        pam_permit.so
# and here are more per-package modules (the "Additional" block)
session required        pam_mkhomedir.so umask=0022 skel=/etc/skel
session [default=ignore success=2] pam_succeed_if.so service = sudo
session [default=ignore success=ignore] pam_succeed_if.so user ingroup aaa quiet
session [authinfo_unavail=ignore success=ok default=ignore] pam_radius_auth.so
session required        pam_unix.so
# end of pam-auth-update config

Logic error in recent bug fix; correction is being checked ...