Command to restart when ssh running on default vrf:

Tentative first-shot code change here:

Works fine:

set load-balancing reverse-proxy backend bk01 server srv01 address '192.168.122.16'
set load-balancing reverse-proxy backend bk01 server srv01 port '22'
set load-balancing reverse-proxy service ssh backend 'bk01'
set load-balancing reverse-proxy service ssh mode 'tcp'
set load-balancing reverse-proxy service ssh port '22'
set service ssh disable-host-validation
set service ssh port '2222'

https://github.com/vyos/vyos-1x/pull/3682

The WPA-EAP for wireless station mode is feature is implemented in T6496.

After deep testing, we saw that if we reset the peer on the initiator side, strongswan does not reinitiate the connection by itself.
Need to add a connection initiation in the reset function on the initiator side.

PR: https://github.com/vyos/vyos-1x/pull/3681

PR https://github.com/vyos/vyos-1x/pull/3680

@zsdc @fernando @a.apostoliuk we need retest this

Suspend/Resume is not supported operation

Note for myself:

Logs from VM:

I've modified the protocol ospf settings to check if it will affect static routing or not.
The static routing are not affected (still no route to 0.0.0.0/0):

Hi!
Recently I've note that this bug is not affects only protocol failover, but also protocol static routers.

Thanks to [email protected], who has finished my PR, the Nhrp Cisco auth was merged today.
https://github.com/FRRouting/frr/pull/16172

Looking at it, T5816 already attempted to fix this and is probably better for users - doesn't give the full flexibility of regex and doesn't handle '_' at all, but does have a strict format expectation.

Looking at the code in FRR, it just expands '_' to the full match '(^|[,{}()]|$)' and sends that whole match off to regexec().

All working nicely in current rolling.

@Thunderstorm looks like this one made it to the current rolling, if you're able to try it out?

https://github.com/vyos/vyos-1x/pull/3677

https://github.com/part1cleth1ef/vyos-1x