Questions tagged [vyatta]

Vyatta is an Open Source routing company

Filter by
Sorted by
Tagged with
1
vote
1answer
734 views

L2TP VPN connection not working - PAYLOAD_MALFORMED

I am trying to replace an old VMWare server (ESXI 5.1.0) with a new one (ESXI 6.7.0) and to do that we are trying to replicate the setup of the old one. We have another physical server that needs to ...
1
vote
1answer
213 views

Vyatta OpenVPN fails with push-route

we have a router running VyattaOS 5600 5.2R5 and want to set up openvpn to access our private subnets behind that router. Basic VPN setup was successful and connecting works as expected, but when ...
1
vote
1answer
777 views

Problems with TCP retransmission, duplicates etc. on CentOS Linux

I'm running Vyattagateway with a CentOS Linux behind, and IPSec tunnel in front. Trying to display my setup: PARTNER-NETWORK <--- IPSec (GRE, MTU 1420) ---> VYATTA (TUNNEL, MTU 1420 <> ...
0
votes
1answer
194 views

Convert iptables to Brocade/Vyatta

I would like to switch from iptables to Brocade/Vyatta, but are having trouble with "converting" firewall rules. This is my iptables, which works: # Default policy to drop 'everything' but our ...
3
votes
0answers
1k views

Use static IPv6 addresses on a router behind a Comcast Business IP Gateway

I recently got set up with Comcast Business Class internet. Previously, I was using DSL with another provider and had a single static IPv4 address (VyOS). Now I want to get Comcast set up. I ...
1
vote
0answers
237 views

Domain-based instead of IP addresses load balancing in Vyatta

Currently my company has 6 Internet lines (1 Lease line and 5 fiber lines). Only the lease line (eth1) has the static IP address. So, if I want to give users access to secured site (That check IP ...
0
votes
1answer
381 views

Dell M620 Xenserver network issue

I've got a really strange problem running Xenserver 7.0 (tried 7.1 as well) on a Dell M620 with BCM57810 network card. The whole setup is fine and running flawlessly with no traffic. I've got a ...
0
votes
1answer
1k views

VyOS NAT does not work

We are migrating our Internet Gateway from Cisco to a VyOS router. Our ISP gives us a /29 network on VLAN 2715 from their router (A.B.C.114/29 where A.B.C.113 is their router and the gateway for our ...
0
votes
1answer
520 views

IPSec Tunnel VyOS+AWS: Cannot communicate from router to other side

I have a site (192.168.1.0/24) with a VyOS based router connecting to an AWS VPC (10.7.0.0/16) through IPSec tunnel set up with dynamic routing (BGP). The tunnel itself works: The clients on site can ...
0
votes
1answer
1k views

Vyatta Destination NAT not working

We are running into an issue adding new IPs to a vyatta device after exceeding the limit of IPs in our first VRRP group. All of the IPs listed in the vrrp-group 1 work fine but any I add to vrrp-...
-1
votes
1answer
650 views

How to disable unwanted services in vyos?

I am using VYOS server. I used nmap to scan all the open ports. PORT STATE SERVICE 22/tcp open ssh 111/tcp filtered rpcbind 1521/tcp filtered oracle 1525/tcp filtered orasrv 14520/...
2
votes
2answers
2k views

how to access a unix machine from windows command prompt

I have created a Vyatta virtual machine on my Hyper-V server, but I didn't enable ssh on that virtual machine. I want to connect to that machine without enabling the ssh and execute some shell ...
0
votes
1answer
593 views

Force secondary DNS server to resolve unresolved names

Is there a way to setup on Linux (Vyatta in particular) secondary DNS server, which is used only to resolve requests, that were not resolved by primary DNS? If I just set up secondary DNS, it is only ...
0
votes
0answers
501 views

Vyatta (Brocade) receives BGP routes, but doesn't show in routing table

What would be the reason for Brocade vRouter to receive BGP routes, identify them as valid and best, but not use in the routing table? *show ip bgp neighbors 169.254.5.1 received-routes > 10.2.0.0/16 ...
1
vote
0answers
34 views

Vyatta Nat Rule Help Translating From Cisco ASA Rule

I'm fairly new to Vyatta and need advice on how to translate the following rule example from a Cisco ASA to the Vyatta. static (dmz2,outside) 192.168.254.0 192.168.254.0 netmask/24 How do I create ...
1
vote
1answer
785 views

Vyatta and DNS Rewrite (aka hairpin or doctoring)

I'm trying to make my public IP reachable also from inside LAN. I know that it's better to spilt DNS in order to have an internal zone that solves hosts with internal IP, but for a lot of reasons ...
1
vote
0answers
664 views

Issues Migrating from Vyatta 6.3 to VyOS

Finally getting around to migrating an old router from Vyatta 6.3 to VyOS and am having some issues. Due to the incompatibility of 6.3, the VyOS configuration was rewritten while referencing the old ...
0
votes
1answer
708 views

vyatta virtual router interface aliasing does not work

I am trying to create an alias on vyatta virtual router. But I do not seem to get it to work. In vyatta we have to just add another address to the interface to add an alias. But the interface is not ...
0
votes
0answers
2k views

VyOS / Vyatta multiple CIDR blocks on one side of IPSec tunnel

I am attempting to link an AWS VPC to a datacenter using the community VyOS AMI and IPSec tunneling, talking to a SonicWall device that I don't control. I've been given the proper settings to ...
0
votes
1answer
991 views

Updating a Vyatta 6.6 box for Shellshock

A client has a few Vyatta installations that they're eventually wanting to replace with VyOS. In the interim, they're running Vyatta 6.6 (last version prior to the sale to Brocade). It's an internal ...
2
votes
3answers
7k views

Bandwidth usage per host on Vyatta/EdgeOS router

I have an EdgeRouter PoE router which runs EdgeOS (Vyatta based). I'd like to monitor bandwidth usage by host. My goal is to get a list of total downloads/uploads by host. It's not important to me ...
0
votes
1answer
780 views

Can't use a Box in Amazon VPC subnet to connect to the other side of the site-to-site VPN tunnel which is already up

This is what I have done created VPC 192.168.0.0/16 created subnet 192.168.5.0/24 created internet gateway attached internet gateway to VPC created routing table set destination route 0.0.0.0/0 to ...
0
votes
1answer
878 views

BGP into OSPF and vice-versa - adding a 'weight' to a route?

This is probably more of a design question. I have two transit providers where I am receiving the full Internet routing table (via BGP) and am also participating in an IX where I am receiving routes ...
5
votes
2answers
3k views

Elastic IP address on EC2 instance interface without 1:1 NAT

I have a basic Amazon VPC set up with a public and private subnet. I have deployed a Vyatta router in the public subnet that does NAT for the private subnet. I have an elastic IP address assigned to ...
1
vote
0answers
714 views

Massively large number of packets dropped by interface

I have a virtual machine on ESXi 5 acting as a firewall for a PBX, it is running vyatta. When I run tcpdump on any interface, I get some ridiculous numbers! e.g. 4 packets captured 402 packets ...
2
votes
2answers
7k views

Vyatta VPN IPsec tunnel random dropouts

I keep getting random dropouts for my VPN tunnel, it only happens rarely (~twice a week) if I do a "service ipsec restart" then it immediately starts working again. Really annoying as I'm try to ...
0
votes
1answer
6k views

Simple Vyatta configuration / BGP routes not injecting into routing table

I have a exceptionally simple setup I'm playing with however I'm banging my head against the wall as to why it's not working. Right now I have two Vyatta routers (R1, R2) connected locally. Both are ...
1
vote
0answers
554 views

Vyatta Remote Access VPN firewall (PPTP)

I am using Vyatta Remote Access VPN (PPTP) and NAT for proxy. When pc-A and pc-B are connected to VPN, pc-A ipaddress is 192.168.10.10 and pc-B is 192.168.10.11. [pc-A:192.168.10.10]--internet(VPN)--[...
1
vote
2answers
1k views

What do transmit errors on Linux IPsec virtual tunnel interfaces indicate?

Our monitoring system is indicating transmit errors on the IPsec VTIs on our Vyatta Core routers when they are under high load. They only appear fairly occasionally, and don't appear to seriously ...
2
votes
0answers
473 views

Martian Source & Servers losing network

First off, I am pretty new at diagnosing network issues through linux. I have an intermittent problem with our LAN servers. They seem to lose all connection to the network and if I disable the adapter ...
1
vote
0answers
580 views

Issue Routing along IPSEC VPN

I am struggling to get two different subnets routing along a IPSec tunnel. The tunnel is between a Vyatta (6.5) and a Juniper firewall. The tunnel was initially created to route between a subnet in ...
1
vote
1answer
181 views

Isolating Internet-accessible internal hosts from each other

I'm a sysadmin in a small company, and have what I would describe as a moderate understanding of networking. I'm trying to create a situation in which a number of internal hosts are accessible over ...
0
votes
1answer
783 views

Vyatta change IP packet destination port on forward, based on source IP range

This might be really easy or really impossible - but any help would be great. I want to host a web server with multiple hosts on the same IP but different ports. This host will be routable to the ...
1
vote
1answer
4k views

Vyatta: how do I view up fixed DHCP leases settings?

I'd like to know how could I get the MAC-IP DHCP associations. I know that there is show dhcp leases but it only shows information about the active leases.
1
vote
1answer
2k views

Linux/Vyatta failover with GRE and OSPF/BGP

I have strange problem with routing failover in scenario: I'm trying do this failover via ospf or bgp, in both happens the same strange behavior with tunnels: For 192.7.0.0 TUN providing default route ...
0
votes
1answer
249 views

Using Dell omconfig with Vyatta

We are running Vyatta Core 6.2, based on Debian Squeeze, on a Dell R710 server. I came across these instructions to install the command line Dell Management utilities: http://linux.dell.com/repo/...
0
votes
2answers
919 views

Why is Vyatta not saving cluster settings?

I'm trying to configure an identical pair of devices to run Vyatta and work as a failover cluster. I can configure the clustering just fine through vyatta@firewall# [set clustering configs] vyatta@...
2
votes
0answers
320 views

Email Vyatta Log File

I have a vyatta set up as the top layer of security on a website. The vyatta is running IPS which then outputs to a log file. What I would like to do is to set the Vyatta to email me this log file ...
0
votes
1answer
449 views

vyatta Server Reboots by itself

I have an issue regarding some hardware, maybe you can help me. First, I set up a Supermicro Superserver SYS-5016I-NTF with a Intel Xeon X3470 and 4 GB of Ram with a Hotlava Card Tambora 64G4 with ...
1
vote
1answer
642 views

Disable Certificate Revocation in vyatta ipsec vpn

I have a problem where the VPN on a road warrior configuration. our windows hosts work fine. our mac's don't work so well. Errors from StrongSwan: ocsp status is stale or not in cache crl not ...
1
vote
1answer
1k views

Vyatta Proxy Setup

So I am currently migrating our office away from the current proxy (Squid running in Windows on our Mail server...I did not set it up...) to a new one, Squid running on Vyatta. So far I have ...
0
votes
1answer
2k views

Bridge Intrusion Prevention Vyatta

I am trying to create a bridge with ThreatStop, IPS and block a few ports. This bridge will sit in front of my servers. All is working apart from the IPS. I have read the documentation on configuring ...
0
votes
1answer
558 views

Vyatta internet connection + hosted site on same IP

Having a small issue setting up a vyatta. The company internet and two different websites are both on the same IP. Server 1 - Has websites hosted on ports 1000 and 3000 and also has a proxy server ...
0
votes
1answer
1k views

Radius + Vyatta Firewall + Citrix Access Gateway

Im having a problem setting up Radius with Citrix Access Gateway. I had it all set up and working fine when I had the Citrix Access Gateway (CAG) on our main LAN but I want to move it into DMZ. I ...
1
vote
3answers
19k views

Broadcast storm - how to identify the source?

I had two situations this week where my uplink provider had to disable our link because their router identified a broadcast storm. Unfortunately, they can't provide more information about the source ...
1
vote
1answer
3k views

Why won't vyatta allow SMTP through my firewall?

I am setting up a vyatta router on VMware ESXi, But I see to have hit a major snag, I could not get my firewall and NAT to work correctly. I am not sure what was wrong with NAT but it "seems" to be ...
0
votes
1answer
719 views

How are NAT rules processed in Vyatta?

I am setting up a Vyatta router to replace my pfSense box that died. As I setting up the NAT rules I am not sure how they are processed. Are Vyatta's NAT rules processed in the order of the list ...
0
votes
1answer
862 views

Vyatta 6.2 IPv6 DNS handout

I have a Vyatta server which I have connected to Hurricane Electric. I have setup the RADVD on the box and my LAN clients get a public global IPv6 address and route through the Vyatta box. Where do I ...
1
vote
3answers
358 views

Can a virtual machine do networking for multiple ESXi servers?

I am currently using Vyatta for routing eth1 on all servers on esx01. Back-ups are done via the internal 192.168.1.0/x network. I am wondering if I can have the guests on other virtual machines also ...
0
votes
1answer
404 views

Small Business Server and external Linux DHCP/DNS Server

I have SBS2003 in my network as a domain controller. I want to setup Linux Vyatta router with DHCP server and DNS forwarding (relay) enabled. How to do that? When I enable DHCP/DNS server clients will ...