Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [vyatta]

Vyatta is an Open Source routing company

1
vote
1answer
41 views

L2TP VPN connection not working - PAYLOAD_MALFORMED

I am trying to replace an old VMWare server (ESXI 5.1.0) with a new one (ESXI 6.7.0) and to do that we are trying to replicate the setup of the old one. We have another physical server that needs to ...
0
votes
0answers
54 views

Vyatta and VPN/IPSec with tunnel

I'm running Vyatta and are normally setting up VPN / IPSec connections with site-to-site configuration. Normally I would announce certain subnets from my side, and receive foreign subnets from my ...
1
vote
1answer
70 views

Vyatta OpenVPN fails with push-route

we have a router running VyattaOS 5600 5.2R5 and want to set up openvpn to access our private subnets behind that router. Basic VPN setup was successful and connecting works as expected, but when ...
0
votes
0answers
56 views

task-scheduler in vyatta 5600

I have a server that needs to connect to an external server through a VPN. For that I did that the traffic goes through a Vyatta 5600 where I have setup the VPN with the external server. The issue is ...
1
vote
1answer
417 views

Problems with TCP retransmission, duplicates etc. on CentOS Linux

I'm running Vyattagateway with a CentOS Linux behind, and IPSec tunnel in front. Trying to display my setup: PARTNER-NETWORK <--- IPSec (GRE, MTU 1420) ---> VYATTA (TUNNEL, MTU 1420 <> ...
0
votes
1answer
113 views

Convert iptables to Brocade/Vyatta

I would like to switch from iptables to Brocade/Vyatta, but are having trouble with "converting" firewall rules. This is my iptables, which works: # Default policy to drop 'everything' but our ...
3
votes
0answers
750 views

Use static IPv6 addresses on a router behind a Comcast Business IP Gateway

I recently got set up with Comcast Business Class internet. Previously, I was using DSL with another provider and had a single static IPv4 address (VyOS). Now I want to get Comcast set up. I ...
1
vote
0answers
184 views

Domain-based instead of IP addresses load balancing in Vyatta

Currently my company has 6 Internet lines (1 Lease line and 5 fiber lines). Only the lease line (eth1) has the static IP address. So, if I want to give users access to secured site (That check IP ...
0
votes
1answer
289 views

Dell M620 Xenserver network issue

I've got a really strange problem running Xenserver 7.0 (tried 7.1 as well) on a Dell M620 with BCM57810 network card. The whole setup is fine and running flawlessly with no traffic. I've got a ...
0
votes
1answer
1k views

VyOS NAT does not work

We are migrating our Internet Gateway from Cisco to a VyOS router. Our ISP gives us a /29 network on VLAN 2715 from their router (A.B.C.114/29 where A.B.C.113 is their router and the gateway for our ...
0
votes
1answer
487 views

IPSec Tunnel VyOS+AWS: Cannot communicate from router to other side

I have a site (192.168.1.0/24) with a VyOS based router connecting to an AWS VPC (10.7.0.0/16) through IPSec tunnel set up with dynamic routing (BGP). The tunnel itself works: The clients on site can ...
0
votes
1answer
1k views

Vyatta Destination NAT not working

We are running into an issue adding new IPs to a vyatta device after exceeding the limit of IPs in our first VRRP group. All of the IPs listed in the vrrp-group 1 work fine but any I add to vrrp-...
-1
votes
1answer
521 views

How to disable unwanted services in vyos?

I am using VYOS server. I used nmap to scan all the open ports. PORT STATE SERVICE 22/tcp open ssh 111/tcp filtered rpcbind 1521/tcp filtered oracle 1525/tcp filtered orasrv 14520/...
1
vote
2answers
2k views

how to access a unix machine from windows command prompt

I have created a Vyatta virtual machine on my Hyper-V server, but I didn't enable ssh on that virtual machine. I want to connect to that machine without enabling the ssh and execute some shell ...
0
votes
1answer
492 views

Force secondary DNS server to resolve unresolved names

Is there a way to setup on Linux (Vyatta in particular) secondary DNS server, which is used only to resolve requests, that were not resolved by primary DNS? If I just set up secondary DNS, it is only ...
0
votes
0answers
418 views

Vyatta (Brocade) receives BGP routes, but doesn't show in routing table

What would be the reason for Brocade vRouter to receive BGP routes, identify them as valid and best, but not use in the routing table? *show ip bgp neighbors 169.254.5.1 received-routes > 10.2.0.0/16 ...
1
vote
0answers
33 views

Vyatta Nat Rule Help Translating From Cisco ASA Rule

I'm fairly new to Vyatta and need advice on how to translate the following rule example from a Cisco ASA to the Vyatta. static (dmz2,outside) 192.168.254.0 192.168.254.0 netmask/24 How do I create ...
1
vote
1answer
614 views

Vyatta and DNS Rewrite (aka hairpin or doctoring)

I'm trying to make my public IP reachable also from inside LAN. I know that it's better to spilt DNS in order to have an internal zone that solves hosts with internal IP, but for a lot of reasons ...
1
vote
0answers
604 views

Issues Migrating from Vyatta 6.3 to VyOS

Finally getting around to migrating an old router from Vyatta 6.3 to VyOS and am having some issues. Due to the incompatibility of 6.3, the VyOS configuration was rewritten while referencing the old ...
0
votes
1answer
622 views

vyatta virtual router interface aliasing does not work

I am trying to create an alias on vyatta virtual router. But I do not seem to get it to work. In vyatta we have to just add another address to the interface to add an alias. But the interface is not ...
0
votes
0answers
2k views

VyOS / Vyatta multiple CIDR blocks on one side of IPSec tunnel

I am attempting to link an AWS VPC to a datacenter using the community VyOS AMI and IPSec tunneling, talking to a SonicWall device that I don't control. I've been given the proper settings to ...
0
votes
1answer
971 views

Updating a Vyatta 6.6 box for Shellshock

A client has a few Vyatta installations that they're eventually wanting to replace with VyOS. In the interim, they're running Vyatta 6.6 (last version prior to the sale to Brocade). It's an internal ...
2
votes
3answers
7k views

Bandwidth usage per host on Vyatta/EdgeOS router

I have an EdgeRouter PoE router which runs EdgeOS (Vyatta based). I'd like to monitor bandwidth usage by host. My goal is to get a list of total downloads/uploads by host. It's not important to me ...
0
votes
1answer
771 views

Can't use a Box in Amazon VPC subnet to connect to the other side of the site-to-site VPN tunnel which is already up

This is what I have done created VPC 192.168.0.0/16 created subnet 192.168.5.0/24 created internet gateway attached internet gateway to VPC created routing table set destination route 0.0.0.0/0 to ...
0
votes
1answer
807 views

BGP into OSPF and vice-versa - adding a 'weight' to a route?

This is probably more of a design question. I have two transit providers where I am receiving the full Internet routing table (via BGP) and am also participating in an IX where I am receiving routes ...
5
votes
2answers
3k views

Elastic IP address on EC2 instance interface without 1:1 NAT

I have a basic Amazon VPC set up with a public and private subnet. I have deployed a Vyatta router in the public subnet that does NAT for the private subnet. I have an elastic IP address assigned to ...
1
vote
0answers
631 views

Massively large number of packets dropped by interface

I have a virtual machine on ESXi 5 acting as a firewall for a PBX, it is running vyatta. When I run tcpdump on any interface, I get some ridiculous numbers! e.g. 4 packets captured 402 packets ...
2
votes
2answers
7k views

Vyatta VPN IPsec tunnel random dropouts

I keep getting random dropouts for my VPN tunnel, it only happens rarely (~twice a week) if I do a "service ipsec restart" then it immediately starts working again. Really annoying as I'm try to ...
0
votes
1answer
6k views

Simple Vyatta configuration / BGP routes not injecting into routing table

I have a exceptionally simple setup I'm playing with however I'm banging my head against the wall as to why it's not working. Right now I have two Vyatta routers (R1, R2) connected locally. Both are ...
1
vote
0answers
520 views

Vyatta Remote Access VPN firewall (PPTP)

I am using Vyatta Remote Access VPN (PPTP) and NAT for proxy. When pc-A and pc-B are connected to VPN, pc-A ipaddress is 192.168.10.10 and pc-B is 192.168.10.11. [pc-A:192.168.10.10]--internet(VPN)--[...
1
vote
1answer
891 views

What do transmit errors on Linux IPsec virtual tunnel interfaces indicate?

Our monitoring system is indicating transmit errors on the IPsec VTIs on our Vyatta Core routers when they are under high load. They only appear fairly occasionally, and don't appear to seriously ...
2
votes
0answers
419 views

Martian Source & Servers losing network

First off, I am pretty new at diagnosing network issues through linux. I have an intermittent problem with our LAN servers. They seem to lose all connection to the network and if I disable the adapter ...
1
vote
0answers
575 views

Issue Routing along IPSEC VPN

I am struggling to get two different subnets routing along a IPSec tunnel. The tunnel is between a Vyatta (6.5) and a Juniper firewall. The tunnel was initially created to route between a subnet in ...
1
vote
1answer
179 views

Isolating Internet-accessible internal hosts from each other

I'm a sysadmin in a small company, and have what I would describe as a moderate understanding of networking. I'm trying to create a situation in which a number of internal hosts are accessible over ...
0
votes
1answer
722 views

Vyatta change IP packet destination port on forward, based on source IP range

This might be really easy or really impossible - but any help would be great. I want to host a web server with multiple hosts on the same IP but different ports. This host will be routable to the ...
1
vote
1answer
3k views

Vyatta: how do I view up fixed DHCP leases settings?

I'd like to know how could I get the MAC-IP DHCP associations. I know that there is show dhcp leases but it only shows information about the active leases.
1
vote
1answer
2k views

Linux/Vyatta failover with GRE and OSPF/BGP

I have strange problem with routing failover in scenario: I'm trying do this failover via ospf or bgp, in both happens the same strange behavior with tunnels: For 192.7.0.0 TUN providing default route ...
0
votes
1answer
242 views

Using Dell omconfig with Vyatta

We are running Vyatta Core 6.2, based on Debian Squeeze, on a Dell R710 server. I came across these instructions to install the command line Dell Management utilities: http://linux.dell.com/repo/...
0
votes
2answers
881 views

Why is Vyatta not saving cluster settings?

I'm trying to configure an identical pair of devices to run Vyatta and work as a failover cluster. I can configure the clustering just fine through vyatta@firewall# [set clustering configs] vyatta@...
2
votes
0answers
316 views

Email Vyatta Log File

I have a vyatta set up as the top layer of security on a website. The vyatta is running IPS which then outputs to a log file. What I would like to do is to set the Vyatta to email me this log file ...
0
votes
1answer
410 views

vyatta Server Reboots by itself

I have an issue regarding some hardware, maybe you can help me. First, I set up a Supermicro Superserver SYS-5016I-NTF with a Intel Xeon X3470 and 4 GB of Ram with a Hotlava Card Tambora 64G4 with ...
1
vote
1answer
596 views

Disable Certificate Revocation in vyatta ipsec vpn

I have a problem where the VPN on a road warrior configuration. our windows hosts work fine. our mac's don't work so well. Errors from StrongSwan: ocsp status is stale or not in cache crl not ...
1
vote
1answer
1k views

Vyatta Proxy Setup

So I am currently migrating our office away from the current proxy (Squid running in Windows on our Mail server...I did not set it up...) to a new one, Squid running on Vyatta. So far I have ...
0
votes
1answer
2k views

Bridge Intrusion Prevention Vyatta

I am trying to create a bridge with ThreatStop, IPS and block a few ports. This bridge will sit in front of my servers. All is working apart from the IPS. I have read the documentation on configuring ...
0
votes
1answer
553 views

Vyatta internet connection + hosted site on same IP

Having a small issue setting up a vyatta. The company internet and two different websites are both on the same IP. Server 1 - Has websites hosted on ports 1000 and 3000 and also has a proxy server ...
0
votes
1answer
975 views

Radius + Vyatta Firewall + Citrix Access Gateway

Im having a problem setting up Radius with Citrix Access Gateway. I had it all set up and working fine when I had the Citrix Access Gateway (CAG) on our main LAN but I want to move it into DMZ. I ...
1
vote
3answers
19k views

Broadcast storm - how to identify the source?

I had two situations this week where my uplink provider had to disable our link because their router identified a broadcast storm. Unfortunately, they can't provide more information about the source ...
1
vote
1answer
2k views

Why won't vyatta allow SMTP through my firewall?

I am setting up a vyatta router on VMware ESXi, But I see to have hit a major snag, I could not get my firewall and NAT to work correctly. I am not sure what was wrong with NAT but it "seems" to be ...
0
votes
1answer
707 views

How are NAT rules processed in Vyatta?

I am setting up a Vyatta router to replace my pfSense box that died. As I setting up the NAT rules I am not sure how they are processed. Are Vyatta's NAT rules processed in the order of the list ...
0
votes
1answer
856 views

Vyatta 6.2 IPv6 DNS handout

I have a Vyatta server which I have connected to Hurricane Electric. I have setup the RADVD on the box and my LAN clients get a public global IPv6 address and route through the Vyatta box. Where do I ...