Kea doesn't have that issue, and in 1.5 rolling release builds, static leases are already displayed in show dhcp server leases. But in ISC DHCPd, which is unmaintained, I'm not sure if we should switch from the tried and proved static leases to anything else.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed Search
Jan 10 2024
Jan 10 2024
dmbaturin added a comment to T4256: Display static DHCP server leases in the operational command output.
dmbaturin renamed T4256: Display static DHCP server leases in the operational command output from Add support of reserved lease to dhcpd to Display static DHCP server leases in the operational command output.
sarthurdev moved T5550: Source validation on interface does not work properly from Open to Finished on the VyOS 1.5 Circinus board.
sarthurdev added a project to T5550: Source validation on interface does not work properly: VyOS 1.5 Circinus.
dmbaturin edited projects for T4256: Display static DHCP server leases in the operational command output, added: VyOS 1.5 Circinus; removed VyOS 1.4 Sagitta.
dmbaturin triaged T4114: Allow software running as systemd service write coredumps as Normal priority.
Viacheslav moved T5918: Verification problem for `set vpn ipsec interface` from Open to Finished on the VyOS 1.4 Sagitta board.
Viacheslav changed the status of T5918: Verification problem for `set vpn ipsec interface` from Open to In progress.
No, installing the miniupnpd_functions.sh file does not correct the problem.
Another bug it that /config/upnp.leases is hardcoded, but there is no script who creates it https://github.com/vyos/vyos-1x/blob/aebb458262072457c6a3840d1b17031fbd780eca/data/templates/firewall/upnpd.conf.j2#L128
sarthurdev changed the status of T5814: VyOS 1.3 to 1.4 LTS Firewall ruleset migration script breaks configuration from In progress to Needs testing.
Viacheslav moved T5916: Added segment routing check for index size and SRGB size from Open to Finished on the VyOS 1.5 Circinus board.
Viacheslav added a project to T5916: Added segment routing check for index size and SRGB size : VyOS 1.5 Circinus.
Will it work if you manually download the functions? https://github.com/miniupnp/miniupnp/blob/miniupnpd_2_3_1/miniupnpd/netfilter_nft/scripts/miniupnpd_functions.sh
Can confirm this is exactly the same in 1.4 rolling (as of Jan 09). Same errors. The miniupnpd daemon receives the request (for either a UPnP, NAT-PMP, or PCP port mapping) and then reports the errors @simplysoft reports in the description.
c-po closed T5766: http: rewrite conf-mode script to get_config_dict() , a subtask of T5782: Use a single config mode script for https and http-api, as Resolved.
c-po closed T5766: http: rewrite conf-mode script to get_config_dict() , a subtask of T5768: Remove auxiliary http-api.conf for simplification of http-api config mode script, as Resolved.
c-po closed T5911: pki: service update ignored if certificate name contains a hyphen (-) as Resolved.
c-po moved T5911: pki: service update ignored if certificate name contains a hyphen (-) from Open to Finished on the VyOS 1.4 Sagitta board.
c-po closed T5902: http: remove virtual-host configuration in webserver, a subtask of T5766: http: rewrite conf-mode script to get_config_dict() , as Resolved.
c-po moved T5902: http: remove virtual-host configuration in webserver from In Progress to Finished on the VyOS 1.4 Sagitta board.
c-po closed T5886: Add support for ACME protocol (LetsEncrypt), a subtask of T5894: Extend get_config_dict() with additional parameter with_pki that defaults to False, as Resolved.
c-po moved T5913: Allow for Peer-Groups in ipv4-labeled-unicast SAFI from Open to Finished on the VyOS 1.5 Circinus board.
c-po changed the status of T5913: Allow for Peer-Groups in ipv4-labeled-unicast SAFI from Open to In progress.
sarthurdev changed the status of T5814: VyOS 1.3 to 1.4 LTS Firewall ruleset migration script breaks configuration from Open to In progress.
jestabro added a comment to T5917: Restore annotations of (running)/(default boot) in select image list.
jestabro triaged T5917: Restore annotations of (running)/(default boot) in select image list as Normal priority.
jestabro changed Issue type from unspecified to feature on T3441: More intelligent config loading scripts.
Viacheslav changed the status of T190: two factor authentication for OpenVPN remote VPN tunnels from Open to Needs testing.
It seems we already have mfa T3834 but it never was documented
https://github.com/vyos/vyos-1x/pull/1008
vyos@r4# set interfaces openvpn vtun0 server mfa totp
Possible completions:
challenge Expect password as result of a challenge response protocol
(default: enable)
digits Number of digits to use for totp hash (default: 6)
drift Time drift in seconds (default: 0)
slop Maximum allowed clock slop in seconds (default: 180)
step Step value for totp in seconds (default: 30)@xrobau Could you test it?
Dec 9 13:04:57 vyos charon: 07[IKE] no matching CHILD_SA config found
Do you have several connections from the hosts behind the same NAT external address to the same hub?
It worked in my previous tests, but it was just one host behind NAT to connect to the HUB.
Re-check please and close if it works fine now. Need to update.
@amcmillen Do you have any examples of how to deploy it on Linux / Debian, etc?
Without live examples, we'll mark it as wont fix and task will be closed.
@ordex Les us know if you have some ideas
Thanks
Viacheslav edited projects for T190: two factor authentication for OpenVPN remote VPN tunnels, added: VyOS 1.5 Circinus; removed VyOS 1.3 Equuleus (1.3.6).
sarthurdev moved T5912: DHCP Static mapping don't work on every first lease from Open to In Progress on the VyOS 1.5 Circinus board.
sarthurdev changed the status of T5912: DHCP Static mapping don't work on every first lease, a subtask of T3316: Use Kea DHCP(v6) instead of ISC DHCP(v6), from Confirmed to Needs testing.
sarthurdev changed the status of T5912: DHCP Static mapping don't work on every first lease from Confirmed to Needs testing.
sarthurdev changed the status of T5787: dhcp-server allows duplicate static-mapping for the same IP address from In progress to Needs testing.
PR for scoped options and bugfixes: https://github.com/vyos/vyos-1x/pull/2785
n.fort changed the status of T5915: Firewall zone - Re add op-mode commands from Confirmed to In progress.
I tried manually loading this config in a VM and I'm still not sure what's causing the issue, maybe something isn't waiting properly for bonded interfaces to be created?:
vyos@vyos# load config.boot-cr01a-vyos.20240109_232428 Loading configuration from 'config.boot-cr01a-vyos.20240109_232428' Load complete. Use 'commit' to make changes effective. [edit] vyos@vyos# commit
@himurae, Permission and ownership of config directory and files and fine. If you are still seeing the DHCP leases not being created, something else is probably going on.
Jan 9 2024
Jan 9 2024
sarthurdev changed the status of T5787: dhcp-server allows duplicate static-mapping for the same IP address from Open to In progress.
I stopped using conntrack-sync before I moved to 1.3 (which I am currently running) so I can't confirm either way.
I expect it's no longer an issue though and this task can be closed.
sarthurdev changed the status of T5912: DHCP Static mapping don't work on every first lease, a subtask of T3316: Use Kea DHCP(v6) instead of ISC DHCP(v6), from Open to Confirmed.
dmbaturin triaged T3204: Performance system option destroy defined sysctl custom params as High priority.
dmbaturin triaged T2971: Provide a CLI solution for Ingress Shaping when there is SNAT as Low priority.
I presume it's no longer an issue, but I'd like to confirm.
dmbaturin triaged T2770: Allow any character to be used in the SNMP community field as Low priority.
The PR was rejected.
dmbaturin triaged T2477: Make VyOS interactively ask whether user trust remote host SSH fingerprint as Low priority.
dmbaturin triaged T2447: Additional boot argument configuration to limit CPU C-States as Wishlist priority.
now this output is from a fresh install i made with latest rolling release do you see any difference in configurations/ permissions ?
dmbaturin closed T5840: Upgrade Kea to 2.4.x, a subtask of T3316: Use Kea DHCP(v6) instead of ISC DHCP(v6), as Resolved.