Questions tagged [vyatta]
Vyatta is an Open Source routing company
59
questions
1
vote
1
answer
3k
views
L2TP VPN connection not working - PAYLOAD_MALFORMED
I am trying to replace an old VMWare server (ESXI 5.1.0) with a new one (ESXI 6.7.0) and to do that we are trying to replicate the setup of the old one.
We have another physical server that needs to ...
1
vote
1
answer
366
views
Vyatta OpenVPN fails with push-route
we have a router running VyattaOS 5600 5.2R5 and want to set up openvpn to access our private subnets behind that router.
Basic VPN setup was successful and connecting works as expected, but when ...
1
vote
1
answer
2k
views
Problems with TCP retransmission, duplicates etc. on CentOS Linux
I'm running Vyattagateway with a CentOS Linux behind, and IPSec tunnel in front.
Trying to display my setup:
PARTNER-NETWORK <--- IPSec (GRE, MTU 1420) ---> VYATTA (TUNNEL, MTU 1420 <> ...
0
votes
1
answer
336
views
Convert iptables to Brocade/Vyatta
I would like to switch from iptables to Brocade/Vyatta, but are having trouble with "converting" firewall rules.
This is my iptables, which works:
# Default policy to drop 'everything' but our ...
3
votes
0
answers
2k
views
Use static IPv6 addresses on a router behind a Comcast Business IP Gateway
I recently got set up with Comcast Business Class internet. Previously, I was using DSL with another provider and had a single static IPv4 address (VyOS). Now I want to get Comcast set up.
I ...
1
vote
0
answers
320
views
Domain-based instead of IP addresses load balancing in Vyatta
Currently my company has 6 Internet lines (1 Lease line and 5 fiber lines). Only the lease line (eth1) has the static IP address. So, if I want to give users access to secured site (That check IP ...
0
votes
1
answer
558
views
Dell M620 Xenserver network issue
I've got a really strange problem running Xenserver 7.0 (tried 7.1 as well) on a Dell M620 with BCM57810 network card.
The whole setup is fine and running flawlessly with no traffic. I've got a ...
0
votes
1
answer
2k
views
VyOS NAT does not work
We are migrating our Internet Gateway from Cisco to a VyOS router.
Our ISP gives us a /29 network on VLAN 2715 from their router (A.B.C.114/29 where A.B.C.113 is their router and the gateway for our ...
0
votes
1
answer
708
views
IPSec Tunnel VyOS+AWS: Cannot communicate from router to other side
I have a site (192.168.1.0/24) with a VyOS based router connecting to an AWS VPC (10.7.0.0/16) through IPSec tunnel set up with dynamic routing (BGP). The tunnel itself works: The clients on site can ...
0
votes
1
answer
2k
views
Vyatta Destination NAT not working
We are running into an issue adding new IPs to a vyatta device after exceeding the limit of IPs in our first VRRP group. All of the IPs listed in the vrrp-group 1 work fine but any I add to vrrp-...
-1
votes
1
answer
1k
views
How to disable unwanted services in vyos?
I am using VYOS server. I used nmap to scan all the open ports.
PORT STATE SERVICE
22/tcp open ssh
111/tcp filtered rpcbind
1521/tcp filtered oracle
1525/tcp filtered orasrv
14520/...
2
votes
2
answers
3k
views
how to access a unix machine from windows command prompt
I have created a Vyatta virtual machine on my Hyper-V server, but I didn't enable ssh on that virtual machine. I want to connect to that machine without enabling the ssh and execute some shell ...
0
votes
1
answer
828
views
Force secondary DNS server to resolve unresolved names
Is there a way to setup on Linux (Vyatta in particular) secondary DNS server, which is used only to resolve requests, that were not resolved by primary DNS?
If I just set up secondary DNS, it is only ...
0
votes
0
answers
619
views
Vyatta (Brocade) receives BGP routes, but doesn't show in routing table
What would be the reason for Brocade vRouter to receive BGP routes, identify them as valid and best, but not use in the routing table?
*show ip bgp neighbors 169.254.5.1 received-routes
> 10.2.0.0/16 ...
1
vote
0
answers
42
views
Vyatta Nat Rule Help Translating From Cisco ASA Rule
I'm fairly new to Vyatta and need advice on how to translate the following rule example from a Cisco ASA to the Vyatta.
static (dmz2,outside) 192.168.254.0 192.168.254.0 netmask/24
How do I create ...
1
vote
1
answer
1k
views
Vyatta and DNS Rewrite (aka hairpin or doctoring)
I'm trying to make my public IP reachable also from inside LAN.
I know that it's better to spilt DNS in order to have an internal zone that solves hosts with internal IP, but for a lot of reasons ...
1
vote
0
answers
765
views
Issues Migrating from Vyatta 6.3 to VyOS
Finally getting around to migrating an old router from Vyatta 6.3 to VyOS and am having some issues.
Due to the incompatibility of 6.3, the VyOS configuration was rewritten while referencing the old ...
0
votes
1
answer
805
views
vyatta virtual router interface aliasing does not work
I am trying to create an alias on vyatta virtual router. But I do not seem to get it to work. In vyatta we have to just add another address to the interface to add an alias. But the interface is not ...
0
votes
0
answers
2k
views
VyOS / Vyatta multiple CIDR blocks on one side of IPSec tunnel
I am attempting to link an AWS VPC to a datacenter using the community VyOS AMI and IPSec tunneling, talking to a SonicWall device that I don't control. I've been given the proper settings to ...
0
votes
1
answer
1k
views
Updating a Vyatta 6.6 box for Shellshock
A client has a few Vyatta installations that they're eventually wanting to replace with VyOS. In the interim, they're running Vyatta 6.6 (last version prior to the sale to Brocade). It's an internal ...
2
votes
3
answers
8k
views
Bandwidth usage per host on Vyatta/EdgeOS router
I have an EdgeRouter PoE router which runs EdgeOS (Vyatta based). I'd like to monitor bandwidth usage by host. My goal is to get a list of total downloads/uploads by host.
It's not important to me ...
0
votes
1
answer
793
views
Can't use a Box in Amazon VPC subnet to connect to the other side of the site-to-site VPN tunnel which is already up
This is what I have done
created VPC 192.168.0.0/16
created subnet 192.168.5.0/24
created internet gateway
attached internet gateway to VPC
created routing table
set destination route 0.0.0.0/0 to ...
0
votes
1
answer
1k
views
BGP into OSPF and vice-versa - adding a 'weight' to a route?
This is probably more of a design question. I have two transit providers where I am receiving the full Internet routing table (via BGP) and am also participating in an IX where I am receiving routes ...
5
votes
2
answers
4k
views
Elastic IP address on EC2 instance interface without 1:1 NAT
I have a basic Amazon VPC set up with a public and private subnet. I have deployed a Vyatta router in the public subnet that does NAT for the private subnet. I have an elastic IP address assigned to ...
1
vote
0
answers
848
views
Massively large number of packets dropped by interface
I have a virtual machine on ESXi 5 acting as a firewall for a PBX, it is running vyatta. When I run tcpdump on any interface, I get some ridiculous numbers! e.g.
4 packets captured
402 packets ...
2
votes
2
answers
8k
views
Vyatta VPN IPsec tunnel random dropouts
I keep getting random dropouts for my VPN tunnel, it only happens rarely (~twice a week) if I do a "service ipsec restart" then it immediately starts working again. Really annoying as I'm try to ...
0
votes
1
answer
7k
views
Simple Vyatta configuration / BGP routes not injecting into routing table
I have a exceptionally simple setup I'm playing with however I'm banging my head against the wall as to why it's not working.
Right now I have two Vyatta routers (R1, R2) connected locally. Both are ...
1
vote
0
answers
580
views
Vyatta Remote Access VPN firewall (PPTP)
I am using Vyatta Remote Access VPN (PPTP) and NAT for proxy.
When pc-A and pc-B are connected to VPN, pc-A ipaddress is 192.168.10.10 and pc-B is 192.168.10.11.
[pc-A:192.168.10.10]--internet(VPN)--[...
2
votes
2
answers
3k
views
What do transmit errors on Linux IPsec virtual tunnel interfaces indicate?
Our monitoring system is indicating transmit errors on the IPsec VTIs on our Vyatta Core routers when they are under high load. They only appear fairly occasionally, and don't appear to seriously ...
2
votes
0
answers
669
views
Martian Source & Servers losing network
First off, I am pretty new at diagnosing network issues through linux. I have an intermittent problem with our LAN servers. They seem to lose all connection to the network and if I disable the adapter ...
1
vote
0
answers
588
views
Issue Routing along IPSEC VPN
I am struggling to get two different subnets routing along a IPSec tunnel.
The tunnel is between a Vyatta (6.5) and a Juniper firewall.
The tunnel was initially created to route between a subnet in ...
1
vote
1
answer
188
views
Isolating Internet-accessible internal hosts from each other
I'm a sysadmin in a small company, and have what I would describe as a moderate understanding of networking. I'm trying to create a situation in which a number of internal hosts are accessible over ...
0
votes
1
answer
882
views
Vyatta change IP packet destination port on forward, based on source IP range
This might be really easy or really impossible - but any help would be great.
I want to host a web server with multiple hosts on the same IP but different ports. This host will be routable to the ...
1
vote
1
answer
4k
views
Vyatta: how do I view up fixed DHCP leases settings?
I'd like to know how could I get the MAC-IP DHCP associations.
I know that there is show dhcp leases but it only shows information about the active leases.
1
vote
1
answer
2k
views
Linux/Vyatta failover with GRE and OSPF/BGP
I have strange problem with routing failover in scenario:
I'm trying do this failover via ospf or bgp, in both happens the same strange behavior with tunnels:
For 192.7.0.0 TUN providing default route ...
0
votes
1
answer
276
views
Using Dell omconfig with Vyatta
We are running Vyatta Core 6.2, based on Debian Squeeze, on a Dell R710 server.
I came across these instructions to install the command line Dell Management utilities:
http://linux.dell.com/repo/...
0
votes
2
answers
962
views
Why is Vyatta not saving cluster settings?
I'm trying to configure an identical pair of devices to run Vyatta and work as a failover cluster. I can configure the clustering just fine through
vyatta@firewall# [set clustering configs]
vyatta@...
2
votes
0
answers
324
views
Email Vyatta Log File
I have a vyatta set up as the top layer of security on a website.
The vyatta is running IPS which then outputs to a log file.
What I would like to do is to set the Vyatta to email me this log file ...
0
votes
1
answer
505
views
vyatta Server Reboots by itself
I have an issue regarding some hardware, maybe you can help me.
First, I set up a Supermicro Superserver SYS-5016I-NTF with a Intel Xeon X3470 and 4
GB of Ram with a Hotlava Card Tambora 64G4 with ...
1
vote
1
answer
738
views
Disable Certificate Revocation in vyatta ipsec vpn
I have a problem where the VPN on a road warrior configuration.
our windows hosts work fine.
our mac's don't work so well.
Errors from StrongSwan:
ocsp status is stale or not in cache
crl not ...
1
vote
1
answer
1k
views
Vyatta Proxy Setup
So I am currently migrating our office away from the current proxy (Squid running in Windows on our Mail server...I did not set it up...) to a new one, Squid running on Vyatta.
So far I have ...
0
votes
1
answer
2k
views
Bridge Intrusion Prevention Vyatta
I am trying to create a bridge with ThreatStop, IPS and block a few ports. This bridge will sit in front of my servers. All is working apart from the IPS.
I have read the documentation on configuring ...
0
votes
1
answer
564
views
Vyatta internet connection + hosted site on same IP
Having a small issue setting up a vyatta.
The company internet and two different websites are both on the same IP.
Server 1 - Has websites hosted on ports 1000 and 3000 and also has a proxy server ...
0
votes
1
answer
1k
views
Radius + Vyatta Firewall + Citrix Access Gateway
Im having a problem setting up Radius with Citrix Access Gateway.
I had it all set up and working fine when I had the Citrix Access Gateway (CAG) on our main LAN but I want to move it into DMZ.
I ...
2
votes
3
answers
20k
views
Broadcast storm - how to identify the source?
I had two situations this week where my uplink provider had to disable our link because their router identified a broadcast storm. Unfortunately, they can't provide more information about the source ...
1
vote
1
answer
3k
views
Why won't vyatta allow SMTP through my firewall?
I am setting up a vyatta router on VMware ESXi,
But I see to have hit a major snag, I could not get my firewall and NAT to work correctly.
I am not sure what was wrong with NAT but it "seems" to be ...
0
votes
1
answer
727
views
How are NAT rules processed in Vyatta?
I am setting up a Vyatta router to replace my pfSense box that died. As I setting up the NAT rules I am not sure how they are processed.
Are Vyatta's NAT rules processed in the order of the list ...
0
votes
1
answer
879
views
Vyatta 6.2 IPv6 DNS handout
I have a Vyatta server which I have connected to Hurricane Electric. I have setup the RADVD on the box and my LAN clients get a public global IPv6 address and route through the Vyatta box.
Where do I ...
1
vote
3
answers
437
views
Can a virtual machine do networking for multiple ESXi servers?
I am currently using Vyatta for routing eth1 on all servers on esx01. Back-ups are done via the internal 192.168.1.0/x network.
I am wondering if I can have the guests on other virtual machines also ...
0
votes
1
answer
481
views
Small Business Server and external Linux DHCP/DNS Server
I have SBS2003 in my network as a domain controller. I want to setup Linux Vyatta router with DHCP server and DNS forwarding (relay) enabled. How to do that? When I enable DHCP/DNS server clients will ...