It seems that, even though this is technically true, the strongswan seems require hash for negotiation. So, it is probably better not to rock the boat.
- Feed Queries
- All Stories
- Search
- Feed Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Fri, Dec 5
Fri, Dec 5
Thu, Dec 4
Thu, Dec 4
dmbaturin renamed T8016: Incorrect validation of ports in VPP ACLs from Commit error using service name to specify port in vpp acl to Incorrect validation of ports in VPP ACLs.
dmbaturin renamed T8036: Commit errors on removing VPP NAT44 rules from VPP: Commit fails removing nat44 static rule to Commit errors on removing VPP NAT44 rules.
dmbaturin renamed T7913: DHCP server ping check option does not work from 1.5 Stream Q3 DHCP server issue (ping-check) to DHCP server ping check option does not work.
dmbaturin renamed T8017: Virtual ethernet interfaces do not correctly check for the missing peer option from Virtual-Ethernet wrong setup error to Virtual ethernet interfaces do not correctly check for the missing peer option.
dmbaturin renamed T6775: Bridge option "isolated" disappears after reboot from Brifge option "isolated" disappears after reboot to Bridge option "isolated" disappears after reboot.
dmbaturin renamed T6775: Bridge option "isolated" disappears after reboot from Bridge: the isolation option disappears after reboot to Brifge option "isolated" disappears after reboot.
dmbaturin renamed T7872: VPP gets stuck when rx-queue-size is used with XDP from VPP XDP with rx-queue-size stuck to VPP gets stuck when rx-queue-size is used with XDP.
dmbaturin renamed T7485: DHCPv6 does not work on PPPoE interfaces from pppoe interfaces do not get assigned an ipv6 address with pppoe ipv6 enabled. ipv6 prefix delegation works. to DHCPv6 does not work on PPPoE interfaces.
dmbaturin renamed T7112: Setting the default action of a firewall zone to drop causes a commit error from Firewall default action drop fails to Setting the default action of a firewall zone to drop causes a commit error.
dmbaturin renamed T7977: Load balancing fails when more than two interfaces are in the same rule from wlb: Load balancing fails when more than 2 interfaces are in a single rule: to Load balancing fails when more than two interfaces are in the same rule.
dmbaturin moved T6527: Deprecate vyatta-cfg-system and vyatta-op package from Open to Finished on the VyOS 1.5 Circinus (1.5-stream-2025-Q2) board.
dmbaturin edited projects for T6527: Deprecate vyatta-cfg-system and vyatta-op package, added: VyOS 1.5 Circinus (1.5-stream-2025-Q2); removed VyOS 1.5 Circinus.
dmbaturin renamed T7305: Container network loses VRF on container restart from Container network looses VRF on container restart to Container network loses VRF on container restart.
dmbaturin renamed T7949: Support children of bond interfaces in VPP NAT from VPP add the ability to configure bond subinterfaces for NAT to Support children of bond interfaces in VPP NAT.
I like the idea. Maybe we can extend this logic to other things, like WireGuard or VPNs. @a.apostoliuk @dmbaturin
GitHub <[email protected]> committed rVYOSONEX3c521b49572d: Merge pull request #4878 from alexandr-san4ez/T8001-current (authored by dmbaturin).
GitHub <[email protected]> committed rVYOSONEX02034e4fd77e: Merge pull request #4881 from alexandr-san4ez/T7594-current (authored by dmbaturin).
GitHub <[email protected]> committed rVYOSONEX0544895af02c: Merge pull request #4886 from dmbaturin/T8059-migrate-syslog-ports (authored by dmbaturin).
dmbaturin renamed T7973: VyOS does not accept IPv6 interface addresses with an all-zero host part from VyOS does not accept IPv6 all-zero interface addresses with prefix length of /64 to VyOS does not accept IPv6 interface addresses with an all-zero host part.
dmbaturin renamed T7901: Operational mode commands cannot be executed when the effective UID is already zero from Operational mode commands cannot be executed by the root user to Operational mode commands cannot be executed when the effective UID is already zero.
This is a different maniphestation of the same mistake I made in is_admin — not checking if the effective UID is already zero. User vyos is a red herring because it's the actual user name but what actually matters is the effective UID instead.
dmbaturin changed Is it a breaking change? from none to compatible on T7901: Operational mode commands cannot be executed when the effective UID is already zero.
dmbaturin renamed T7901: Operational mode commands cannot be executed when the effective UID is already zero from "User vyos is not assigned to any operator group" when execute command after sudo su. to Operational mode commands cannot be executed by the root user.
dmbaturin renamed T7810: Operational mode command 'reset connection' is broken from op command 'reset connection' error: --disconnect: not allowed with argument --connect to Operational mode command 'reset connection' is broken.
dmbaturin removed a project from T7810: Operational mode command 'reset connection' is broken: VyOS Rolling.
natali-rs1985 closed T8030: VPP: Verify driver is not executed if vpp already enabled for this nic, a subtask of T7070: VPP related bugs the root task, as Resolved.
natali-rs1985 moved T8030: VPP: Verify driver is not executed if vpp already enabled for this nic from Need Triage to Completed on the VyOS Rolling board.
Viacheslav closed T8067: Python3-pexpect is not inlcuded to the Dockerfile for arm arch as Resolved.
GitHub <[email protected]> committed rVYOSONEXa6ab36aab78a: Merge pull request #4884 from c-po/openvpn-t7738-migration (authored by dmbaturin).
Yes after reboot the command works. So to male it work it seems to be necessary to reboot the system after adding the interface.
Wed, Dec 3
Wed, Dec 3
a.kudientsov added a comment to T8063: BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system".
Warning is not displayed in sagitta and circinus because a warning class import from vyos.base is missing in system_login.py
I'm closing this task as invalid because the user's report combines unrelated problem that need to be tracked as separate tasks.
I split this task into three independent parts:
natali-rs1985 added a comment to T7972: VPP: Improve `nat44 no-forwarding` feature name and description in CLI.
It was decided to configure forwarding automatically to simplify CLI for the user
Viacheslav added a subtask for T7070: VPP related bugs the root task: T8064: show vpp interfaces hardware not working.
Viacheslav added a parent task for T8064: show vpp interfaces hardware not working: T7070: VPP related bugs the root task.
Do interfaces exist in the config, or did you add them to the already loaded system but there is no interface ethernet ethX config?
Viacheslav updated the task description for T8065: Add the ability to start smoketests on arm64 platform.
Viacheslav updated the task description for T8065: Add the ability to start smoketests on arm64 platform.
a.pidnebesny renamed T8063: BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system" from BP 1.4.4 not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system" to BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system".
a.pidnebesny updated the task description for T8063: BP not work "Login: issue warning if TACACS or RADIUS source-address is not configured on the system".
GitHub <[email protected]> committed rVYOSONEX3dbbf5e97d98: Merge pull request #4867 from jestabro/vyconf-session-unsaved (authored by jestabro).
Tue, Dec 2
Tue, Dec 2
zsdc updated the task description for T8053: DHCP Server configuration script performance degradation with multiple entries.
dmbaturin added a comment to T7973: VyOS does not accept IPv6 interface addresses with an all-zero host part.
Cisco and Arista support such addresses as interface addresses, and the anycast bit doesn't preclude unicast usage, so we should allow that.
dmbaturin added a comment to T8058: Support for sending different log messages to different ports of the same host.
Cisco and Arista also don't support multiple ports on the same IP address/host.
dmbaturin updated subscribers of T8058: Support for sending different log messages to different ports of the same host.
One way to get around the problem is to point multiple hostnames at the same IP/IPv6 address and use them in the VyOS config with different ports (suggestion from @c-po).
Viacheslav triaged T8057: API call for `show ip/ipv6 route vrf <NAME>` fails with tagNode / virtualTagNode error as Normal priority.
GitHub <[email protected]> committed rVYOSONEX07dfa80bdcbf: Merge pull request #4866 from natali-rs1985/T8030 (authored by Nataliia S. <[email protected]>).