Questions tagged [vyatta]

Vyatta is an Open Source routing company

Filter by
Sorted by
Tagged with
2 votes
2 answers
3k views

What do transmit errors on Linux IPsec virtual tunnel interfaces indicate?

Our monitoring system is indicating transmit errors on the IPsec VTIs on our Vyatta Core routers when they are under high load. They only appear fairly occasionally, and don't appear to seriously ...
1 vote
1 answer
3k views

L2TP VPN connection not working - PAYLOAD_MALFORMED

I am trying to replace an old VMWare server (ESXI 5.1.0) with a new one (ESXI 6.7.0) and to do that we are trying to replicate the setup of the old one. We have another physical server that needs to ...
1 vote
1 answer
366 views

Vyatta OpenVPN fails with push-route

we have a router running VyattaOS 5600 5.2R5 and want to set up openvpn to access our private subnets behind that router. Basic VPN setup was successful and connecting works as expected, but when ...
1 vote
1 answer
2k views

Problems with TCP retransmission, duplicates etc. on CentOS Linux

I'm running Vyattagateway with a CentOS Linux behind, and IPSec tunnel in front. Trying to display my setup: PARTNER-NETWORK <--- IPSec (GRE, MTU 1420) ---> VYATTA (TUNNEL, MTU 1420 <> ...
0 votes
1 answer
337 views

Convert iptables to Brocade/Vyatta

I would like to switch from iptables to Brocade/Vyatta, but are having trouble with "converting" firewall rules. This is my iptables, which works: # Default policy to drop 'everything' but our ...
3 votes
0 answers
2k views

Use static IPv6 addresses on a router behind a Comcast Business IP Gateway

I recently got set up with Comcast Business Class internet. Previously, I was using DSL with another provider and had a single static IPv4 address (VyOS). Now I want to get Comcast set up. I ...
0 votes
1 answer
559 views

Dell M620 Xenserver network issue

I've got a really strange problem running Xenserver 7.0 (tried 7.1 as well) on a Dell M620 with BCM57810 network card. The whole setup is fine and running flawlessly with no traffic. I've got a ...
1 vote
0 answers
320 views

Domain-based instead of IP addresses load balancing in Vyatta

Currently my company has 6 Internet lines (1 Lease line and 5 fiber lines). Only the lease line (eth1) has the static IP address. So, if I want to give users access to secured site (That check IP ...
0 votes
1 answer
2k views

VyOS NAT does not work

We are migrating our Internet Gateway from Cisco to a VyOS router. Our ISP gives us a /29 network on VLAN 2715 from their router (A.B.C.114/29 where A.B.C.113 is their router and the gateway for our ...
0 votes
1 answer
708 views

IPSec Tunnel VyOS+AWS: Cannot communicate from router to other side

I have a site (192.168.1.0/24) with a VyOS based router connecting to an AWS VPC (10.7.0.0/16) through IPSec tunnel set up with dynamic routing (BGP). The tunnel itself works: The clients on site can ...
0 votes
1 answer
2k views

Vyatta Destination NAT not working

We are running into an issue adding new IPs to a vyatta device after exceeding the limit of IPs in our first VRRP group. All of the IPs listed in the vrrp-group 1 work fine but any I add to vrrp-...
2 votes
2 answers
8k views

Vyatta VPN IPsec tunnel random dropouts

I keep getting random dropouts for my VPN tunnel, it only happens rarely (~twice a week) if I do a "service ipsec restart" then it immediately starts working again. Really annoying as I'm try to ...
-1 votes
1 answer
1k views

How to disable unwanted services in vyos?

I am using VYOS server. I used nmap to scan all the open ports. PORT STATE SERVICE 22/tcp open ssh 111/tcp filtered rpcbind 1521/tcp filtered oracle 1525/tcp filtered orasrv 14520/...
0 votes
1 answer
793 views

Can't use a Box in Amazon VPC subnet to connect to the other side of the site-to-site VPN tunnel which is already up

This is what I have done created VPC 192.168.0.0/16 created subnet 192.168.5.0/24 created internet gateway attached internet gateway to VPC created routing table set destination route 0.0.0.0/0 to ...
2 votes
2 answers
3k views

how to access a unix machine from windows command prompt

I have created a Vyatta virtual machine on my Hyper-V server, but I didn't enable ssh on that virtual machine. I want to connect to that machine without enabling the ssh and execute some shell ...
0 votes
1 answer
829 views

Force secondary DNS server to resolve unresolved names

Is there a way to setup on Linux (Vyatta in particular) secondary DNS server, which is used only to resolve requests, that were not resolved by primary DNS? If I just set up secondary DNS, it is only ...
0 votes
0 answers
620 views

Vyatta (Brocade) receives BGP routes, but doesn't show in routing table

What would be the reason for Brocade vRouter to receive BGP routes, identify them as valid and best, but not use in the routing table? *show ip bgp neighbors 169.254.5.1 received-routes > 10.2.0.0/16 ...
2 votes
3 answers
8k views

Bandwidth usage per host on Vyatta/EdgeOS router

I have an EdgeRouter PoE router which runs EdgeOS (Vyatta based). I'd like to monitor bandwidth usage by host. My goal is to get a list of total downloads/uploads by host. It's not important to me ...
1 vote
0 answers
42 views

Vyatta Nat Rule Help Translating From Cisco ASA Rule

I'm fairly new to Vyatta and need advice on how to translate the following rule example from a Cisco ASA to the Vyatta. static (dmz2,outside) 192.168.254.0 192.168.254.0 netmask/24 How do I create ...
1 vote
1 answer
1k views

Vyatta and DNS Rewrite (aka hairpin or doctoring)

I'm trying to make my public IP reachable also from inside LAN. I know that it's better to spilt DNS in order to have an internal zone that solves hosts with internal IP, but for a lot of reasons ...
1 vote
0 answers
765 views

Issues Migrating from Vyatta 6.3 to VyOS

Finally getting around to migrating an old router from Vyatta 6.3 to VyOS and am having some issues. Due to the incompatibility of 6.3, the VyOS configuration was rewritten while referencing the old ...
0 votes
1 answer
805 views

vyatta virtual router interface aliasing does not work

I am trying to create an alias on vyatta virtual router. But I do not seem to get it to work. In vyatta we have to just add another address to the interface to add an alias. But the interface is not ...
0 votes
0 answers
2k views

VyOS / Vyatta multiple CIDR blocks on one side of IPSec tunnel

I am attempting to link an AWS VPC to a datacenter using the community VyOS AMI and IPSec tunneling, talking to a SonicWall device that I don't control. I've been given the proper settings to ...
0 votes
1 answer
1k views

Updating a Vyatta 6.6 box for Shellshock

A client has a few Vyatta installations that they're eventually wanting to replace with VyOS. In the interim, they're running Vyatta 6.6 (last version prior to the sale to Brocade). It's an internal ...
0 votes
1 answer
1k views

BGP into OSPF and vice-versa - adding a 'weight' to a route?

This is probably more of a design question. I have two transit providers where I am receiving the full Internet routing table (via BGP) and am also participating in an IX where I am receiving routes ...
1 vote
1 answer
3k views

Why won't vyatta allow SMTP through my firewall?

I am setting up a vyatta router on VMware ESXi, But I see to have hit a major snag, I could not get my firewall and NAT to work correctly. I am not sure what was wrong with NAT but it "seems" to be ...
5 votes
2 answers
4k views

Elastic IP address on EC2 instance interface without 1:1 NAT

I have a basic Amazon VPC set up with a public and private subnet. I have deployed a Vyatta router in the public subnet that does NAT for the private subnet. I have an elastic IP address assigned to ...
1 vote
0 answers
848 views

Massively large number of packets dropped by interface

I have a virtual machine on ESXi 5 acting as a firewall for a PBX, it is running vyatta. When I run tcpdump on any interface, I get some ridiculous numbers! e.g. 4 packets captured 402 packets ...
0 votes
1 answer
7k views

Simple Vyatta configuration / BGP routes not injecting into routing table

I have a exceptionally simple setup I'm playing with however I'm banging my head against the wall as to why it's not working. Right now I have two Vyatta routers (R1, R2) connected locally. Both are ...
0 votes
1 answer
1k views

Radius + Vyatta Firewall + Citrix Access Gateway

Im having a problem setting up Radius with Citrix Access Gateway. I had it all set up and working fine when I had the Citrix Access Gateway (CAG) on our main LAN but I want to move it into DMZ. I ...
1 vote
0 answers
580 views

Vyatta Remote Access VPN firewall (PPTP)

I am using Vyatta Remote Access VPN (PPTP) and NAT for proxy. When pc-A and pc-B are connected to VPN, pc-A ipaddress is 192.168.10.10 and pc-B is 192.168.10.11. [pc-A:192.168.10.10]--internet(VPN)--[...
2 votes
0 answers
670 views

Martian Source & Servers losing network

First off, I am pretty new at diagnosing network issues through linux. I have an intermittent problem with our LAN servers. They seem to lose all connection to the network and if I disable the adapter ...
1 vote
0 answers
589 views

Issue Routing along IPSEC VPN

I am struggling to get two different subnets routing along a IPSec tunnel. The tunnel is between a Vyatta (6.5) and a Juniper firewall. The tunnel was initially created to route between a subnet in ...
1 vote
1 answer
188 views

Isolating Internet-accessible internal hosts from each other

I'm a sysadmin in a small company, and have what I would describe as a moderate understanding of networking. I'm trying to create a situation in which a number of internal hosts are accessible over ...
0 votes
2 answers
962 views

Why is Vyatta not saving cluster settings?

I'm trying to configure an identical pair of devices to run Vyatta and work as a failover cluster. I can configure the clustering just fine through vyatta@firewall# [set clustering configs] vyatta@...
1 vote
1 answer
738 views

Disable Certificate Revocation in vyatta ipsec vpn

I have a problem where the VPN on a road warrior configuration. our windows hosts work fine. our mac's don't work so well. Errors from StrongSwan: ocsp status is stale or not in cache crl not ...
0 votes
1 answer
882 views

Vyatta change IP packet destination port on forward, based on source IP range

This might be really easy or really impossible - but any help would be great. I want to host a web server with multiple hosts on the same IP but different ports. This host will be routable to the ...
1 vote
1 answer
4k views

Vyatta: how do I view up fixed DHCP leases settings?

I'd like to know how could I get the MAC-IP DHCP associations. I know that there is show dhcp leases but it only shows information about the active leases.
0 votes
2 answers
3k views

Vyatta masquerade out bridge interface

We have set up a Vyatta Core 6.1 gateway on our network with three interfaces: eth0 - 1.1.1.1 - public gateway/router IP (to public upstream router) eth1 - 2.2.2.1/24 - public subnet (connected to a ...
1 vote
1 answer
2k views

Linux/Vyatta failover with GRE and OSPF/BGP

I have strange problem with routing failover in scenario: I'm trying do this failover via ospf or bgp, in both happens the same strange behavior with tunnels: For 192.7.0.0 TUN providing default route ...
0 votes
1 answer
276 views

Using Dell omconfig with Vyatta

We are running Vyatta Core 6.2, based on Debian Squeeze, on a Dell R710 server. I came across these instructions to install the command line Dell Management utilities: http://linux.dell.com/repo/...
2 votes
0 answers
324 views

Email Vyatta Log File

I have a vyatta set up as the top layer of security on a website. The vyatta is running IPS which then outputs to a log file. What I would like to do is to set the Vyatta to email me this log file ...
0 votes
1 answer
506 views

vyatta Server Reboots by itself

I have an issue regarding some hardware, maybe you can help me. First, I set up a Supermicro Superserver SYS-5016I-NTF with a Intel Xeon X3470 and 4 GB of Ram with a Hotlava Card Tambora 64G4 with ...
2 votes
1 answer
3k views

Address (url) forwarding with Vyatta

Got this kind of noob question i suppose. I got this very basic network setup and need help to set up some address forwarding. As seen in my illustration below all traffic enters via the eth0 ...
1 vote
1 answer
1k views

Vyatta Proxy Setup

So I am currently migrating our office away from the current proxy (Squid running in Windows on our Mail server...I did not set it up...) to a new one, Squid running on Vyatta. So far I have ...
0 votes
1 answer
2k views

Bridge Intrusion Prevention Vyatta

I am trying to create a bridge with ThreatStop, IPS and block a few ports. This bridge will sit in front of my servers. All is working apart from the IPS. I have read the documentation on configuring ...
0 votes
1 answer
564 views

Vyatta internet connection + hosted site on same IP

Having a small issue setting up a vyatta. The company internet and two different websites are both on the same IP. Server 1 - Has websites hosted on ports 1000 and 3000 and also has a proxy server ...
2 votes
3 answers
20k views

Broadcast storm - how to identify the source?

I had two situations this week where my uplink provider had to disable our link because their router identified a broadcast storm. Unfortunately, they can't provide more information about the source ...
1 vote
4 answers
1k views

Inexpensive and Open replacement for Cisco Tunnel-based EasyVPN with Cisco VPN 3000 Series

I have a scenario where i have to establish peer-to-peer preshared key based VPN to a vendor. This vendor uses Cisco EasyVPN with Cisco VPN 3000 as access concentrator. I check the compatibility of ...
0 votes
1 answer
727 views

How are NAT rules processed in Vyatta?

I am setting up a Vyatta router to replace my pfSense box that died. As I setting up the NAT rules I am not sure how they are processed. Are Vyatta's NAT rules processed in the order of the list ...