vyos-1x.git/python/vyos/ifconfig, branch 1.4.0-rc2VyOS command definitions, scripts, and utilities (mirror of https://github.com/marekm72/vyos-1x.git)
https://git.amelek.net/marekm72/vyos-1x.git/atom?h=1.4.0-rc22024-01-11T05:41:17+00:00Merge pull request #2793 from sarthurdev/T5550_sagitta2024-01-11T05:41:17+00:00Christian Breunigchristian@breunig.cc2024-01-11T05:41:17+00:00urn:sha1:68bacdc20c10566671ce809e9668ca27666bca22
interface: T5550: Interface source-validation priority over global value (backport)T5474: establish common file name pattern for XML conf mode commands2024-01-01T08:25:32+00:00Christian Breunigchristian@breunig.cc2023-12-30T22:25:20+00:00urn:sha1:c9eaafd9f808aba8d29be73054e11d37577e539a
We will use _ as CLI level divider. The XML definition filename and also
the Python helper should match the CLI node.
Example:
set interfaces ethernet -> interfaces_ethernet.xml.in
set interfaces bond -> interfaces_bond.xml.in
set service dhcp-server -> service_dhcp-server-xml.in
(cherry picked from commit 4ef110fd2c501b718344c72d495ad7e16d2bd465)
ethernet: T5566: disable energy efficient ethernet (EEE) for interfaces2023-12-25T16:53:49+00:00Christian Breunigchristian@breunig.cc2023-12-25T10:00:20+00:00urn:sha1:1d1b303c7f42aa65fa4d1d639f38987f0766eb13
VyOS is a routing (packet pushing) platform, thus supporting EEE which
potentially causes issues is not a good idea. Some recent Intel drivers enable
EEE by default, thus we will disable this for every NIC supporting EEE.
(cherry picked from commit ab30509b25d54dac99294b76ba03fd49c3d2c946)
T5749: Add a more scrict search for get_vrf method2023-12-14T17:55:10+00:00Viacheslav Hletenkov.gletenko@vyos.io2023-12-14T17:29:39+00:00urn:sha1:a6d1af3c943600e971662b5b8992a576804ec060
The current implementation is wrong as it searches `master` in the
iproute2 JSON output. It is a worng as it could include bridges
or bonding interfaces
Add the more strict search `info_slave_kind == vrf`
(cherry picked from commit 2ebac5af10a36668ed3b8cfa6e5a9f61cf5d1068)
vxlan: T5753: add support for VNI filtering2023-11-22T09:37:48+00:00Christian Breunigchristian@breunig.cc2023-11-16T21:16:58+00:00urn:sha1:449ab85212983078e21c839ff63c2fe2ba6e76ff
In a service provider network a service provider typically supports multiple
bridge domains with overlapping vlans. One bridge domain per customer. Vlans in
each bridge domain are mapped to globally unique VXLAN VNI ranges assigned to
each customer.
Without the ability of VNI filtering, we can not provide VXLAN tunnels
with multiple tenants all requiring e.g. VLAN 10.
To Test:
set interfaces vxlan vxlan987 parameters external
set interfaces vxlan vxlan987 source-interface eth0
set interfaces vxlan vxlan987 parameters vni-filter
set interfaces vxlan vxlan987 vlan-to-vni 50 vni 10050
set interfaces vxlan vxlan987 vlan-to-vni 51 vni 10051
set interfaces vxlan vxlan987 vlan-to-vni 52 vni 10052
set interfaces vxlan vxlan987 vlan-to-vni 53 vni 10053
set interfaces vxlan vxlan987 vlan-to-vni 54 vni 10054
set interfaces vxlan vxlan987 vlan-to-vni 60 vni 10060
set interfaces vxlan vxlan987 vlan-to-vni 69 vni 10069
set interfaces bridge br0 member interface vxlan987
Add new op-mode command: show bridge vni
Interface VNI
----------- -----------
vxlan987 10050-10054
vxlan987 10060
vxlan987 10069
(cherry picked from commit 35f6033d21053fa420e837f157cd9377a4ccd26a)
Merge pull request #2520 from vyos/mergify/bp/sagitta/pr-25182023-11-22T00:09:55+00:00Daniil Baturindaniil@vyos.io2023-11-22T00:09:55+00:00urn:sha1:93ded25d19000b117de80a064a150925e7b9ff96
T5770 Enable MACsec encryption stanza (backport #2518)macsec: T5770: enable iproute2 "encrypt on" stanza2023-11-21T20:17:27+00:00Giga Murphygiga1699@gmail.com2023-11-21T18:59:20+00:00urn:sha1:945dacc0d136bf4e2dfe593d8d9809262d0cfeaa
(cherry picked from commit a7a90e81ad03ec33acb32beeab71dbd5f27a2044)
T5419: firewall: backport firewall flowtable to Sagitta.2023-11-21T17:36:20+00:00Nicolas Fortnicolasfort1988@gmail.com2023-11-21T17:36:20+00:00urn:sha1:4e8839b6d78c7629cd2c1daee0438472c96365a4tunnel: T3894: improve get_mac_synthetic() code2023-11-16T19:07:44+00:00Christian Breunigchristian@breunig.cc2023-11-16T19:05:08+00:00urn:sha1:a017d2337d8ea6957ca23f63e418ac14b7921fd3
Remove stray whitespace in sed script and call Section.interfaces with
vlan=False instead of a custom filter.
This extends commit f19c92f25 ("tunnel: T3894: fix design when building
synthetic MAC addresses")
(cherry picked from commit c8ba5dccfa9b02533c6536903ecacd3ddb04351e)
T5747: op-mode add MAC and MTU for show interfaces summary2023-11-16T13:26:40+00:00Viacheslav Hletenkov.gletenko@vyos.io2023-11-15T23:48:58+00:00urn:sha1:bd873274d462f43d4e7ed100726930326139ee74
Add op-mode "show interfaces summary"
Add MAC, VRF and MTU options:
vyos@r4# run show interfaces summary
Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down
Interface IP Address MAC VRF MTU S/L Description
----------- ----------------- ----------------- ------- ----- ----- -------------
dum0 203.0.113.1/32 96:44:ad:c5:a1:a5 default 1500 u/u
eth0 192.168.122.14/24 52:54:00:f1:fd:77 default 1500 u/u WAN
eth1 192.0.2.1/24 52:54:00:04:33:2b foo 1500 u/u LAN-eth1
eth2 - 52:54:00:40:2e:af default 1504 u/u LAN-eth2
eth3 - 52:54:00:09:a4:b4 default 1500 A/D
(cherry picked from commit dc3906f04fbfe8014531e092a77c1c8c2d10dfe0)