vyos-1x.git/interface-definitions, branch 1.3.5

pppoe: T5630: make MRU default to MTU if unspecified

2023-11-23T11:06:31+00:00

This fixes the implementation in e062a8c11 ("pppoe: T5630: allow to specify MRU in addition to already configurable MTU") and restores the bahavior that MRU defaults to MTU if MRU is not explicitly set. This was the behavior in VyOS 1.3.3 and below before we added ability to define the MRU value. (cherry picked from commit ffd7339e2ea3eafdd97ac0763ca4a3913fe71bf3)

PAM: T5577: Optimized RADIUS PAM config

2023-11-20T17:07:11+00:00

- Added system `radius` group - Added `mandatory` and `optional` modes for RADIUS - Improved PAM config for RADIUS New modes: - `mandatory` - if RADIUS answered with `Access-Reject`, authentication must be stopped and access denied immediately. - `optional` (default) - if RADIUS answers with `Access-Reject`, authentication continues using the next module. In `mandatory` mode authentication will be stopped only if RADIUS clearly answered that access should be denied (no user in RADIUS database, wrong password, etc.). If RADIUS is not available or other errors happen, it will be skipped and authentication will continue with the next module, like in `optional` mode.

Merge pull request #2348 from c-po/t4269-cli-defaults-backport

2023-11-06T20:23:20+00:00

scripts: T4269: node.def generator should automatically add default values (backport)

bridge: T5670: add missing constraint on "member interface" node

2023-10-31T19:40:36+00:00

correct include filename extension

Merge pull request #2310 from sever-sever/T5586-eq

2023-10-31T17:24:19+00:00

T5586: Disable by default SNMP for Keeplived VRRP service

bridge: T5670: add missing constraint on "member interface" node

2023-10-25T04:34:34+00:00

One could specify a bridge member of VXLAN1 interface, but it is not possible to create a VXLAN interface with the name of VXLAN1 - prohibited by VXLAN interface name validator. Add missing interface-name validator code (cherry picked from commit 45dc149e4e3c0c294deac6fd541bb027d2280ea1) (cherry picked from commit e619b23b8889543465b61eb00d5b0d3c8063ae95)

Merge pull request #2333 from sever-sever/T5213-eq

2023-10-08T16:16:04+00:00

T5213: Add accounting-interim-interval option for PPPoE-server

scripts: T4269: node.def generator should automatically add default values

2023-10-08T08:27:27+00:00

Since introducing the XML node it was common, but redundant, practice to also add a help string indicating which value would be used as default if the node is unset. This makes no sense b/c it's duplicated code/value/characters and prone to error. The node.def scripts should be extended to automatically render the appropriate default value into the CLI help string. For e.g. SSH the current PoC renders: $ cat templates-cfg/service/ssh/port/node.def multi: type: txt help: Port for SSH service (default: 22) val_help: u32:1-65535; Numeric IP port ... Not all subsystems are already migrated to get_config_dict() and make use of the defaults() call - those subsystems need to be migrated, first before the new default is added to the CLI help. (cherry picked from commit a68c9238111c6caee78bb28f8054b8f0cfa0e374)

pppoe: T5630: allow to specify MRU in addition to already configurable MTU

2023-10-08T07:45:00+00:00

Set the MRU (Maximum Receive Unit) value to n. PPPd will ask the peer to send packets of no more than n bytes. The value of n must be between 128 and 16384, the default was always 1492 to match PPPoE MTU. A value of 296 works well on very slow links (40 bytes for TCP/IP header + 256 bytes of data). Note that for the IPv6 protocol, the MRU must be at least 1280. CLI: set interfaces pppoe pppoe0 mru 1280 (cherry picked from commit e062a8c11856f213983f5b41f50d4f9dbc0dde0f)

T5213: Add accounting-interim-interval option for PPPoE-server

2023-10-03T13:47:30+00:00

Add accounting-interim-interval option for PPPoE-server set service pppoe-server authentication radius accounting-interim-interval '60'