vyos-1x.git/src/conf_mode/interfaces-macsec.py, branch 1.4.0-epa1VyOS command definitions, scripts, and utilities (mirror of https://github.com/marekm72/vyos-1x.git)
https://git.amelek.net/marekm72/vyos-1x.git/atom?h=1.4.0-epa12024-01-01T08:25:32+00:00T5474: establish common file name pattern for XML conf mode commands2024-01-01T08:25:32+00:00Christian Breunigchristian@breunig.cc2023-12-30T22:25:20+00:00urn:sha1:c9eaafd9f808aba8d29be73054e11d37577e539a
We will use _ as CLI level divider. The XML definition filename and also
the Python helper should match the CLI node.
Example:
set interfaces ethernet -> interfaces_ethernet.xml.in
set interfaces bond -> interfaces_bond.xml.in
set service dhcp-server -> service_dhcp-server-xml.in
(cherry picked from commit 4ef110fd2c501b718344c72d495ad7e16d2bd465)
T5447: Adjust to positive logic in generare()2023-08-20T19:13:04+00:00Giga Murphygiga1699@gmail.com2023-08-20T19:13:04+00:00urn:sha1:007942130b3e9b86391fd08c3e372002afc6025eT5447: Update copyright years2023-08-20T15:53:58+00:00Giga Murphygiga1699@gmail.com2023-08-20T15:53:58+00:00urn:sha1:ae6b46b3eef3e51ac14a1b9d2e82dffd555fec66T5447: Implement maintainer feedback2023-08-20T15:46:50+00:00Giga Murphygiga1699@gmail.com2023-08-20T15:46:50+00:00urn:sha1:525beb3202bb3ccb15c28d2c41e24e68762af253T5447: Add verification of peer rx-key length2023-08-18T08:42:08+00:00Giga Murphygiga1699@gmail.com2023-08-18T08:42:08+00:00urn:sha1:d110af71cb1c8b62758feae724e13877a278c578T5447: MACsec static tx-key validation2023-08-18T01:19:58+00:00Giga Murphygiga1699@gmail.com2023-08-18T01:19:58+00:00urn:sha1:cb68cc29733ee1dc9df5201e4f85ab5de776cb20T5447: Initial support for MACsec static keys2023-08-18T00:26:51+00:00Giga Murphygiga1699@gmail.com2023-08-18T00:26:51+00:00urn:sha1:33b9bc55f9e3d7ce6a5ff447a6b545a96915daf3T5195: vyos.util -> vyos.utils package refactoring (#2093)2023-07-14T20:18:36+00:00Christian Breunigchristian@breunig.cc2023-07-14T20:18:36+00:00urn:sha1:d1ca536da448749dff557f13ecae97b124026e96
* T5195: move run, cmd, call, rc_cmd helper to vyos.utils.process
* T5195: use read_file and write_file implementation from vyos.utils.file
Changed code automatically using:
find . -type f -not -path '*/\.*' -exec sed -i 's/^from vyos.util import read_file$/from vyos.utils.file import read_file/g' {} +
find . -type f -not -path '*/\.*' -exec sed -i 's/^from vyos.util import write_file$/from vyos.utils.file import write_file/g' {} +
* T5195: move chmod* helpers to vyos.utils.permission
* T5195: use colon_separated_to_dict from vyos.utils.dict
* T5195: move is_systemd_service_* to vyos.utils.process
* T5195: fix boot issues with missing imports
* T5195: move dict_search_* helpers to vyos.utils.dict
* T5195: move network helpers to vyos.utils.network
* T5195: move commit_* helpers to vyos.utils.commit
* T5195: move user I/O helpers to vyos.utils.ioT4630: can not use same source-interface for macsec and pseudo-ethernet2022-08-24T19:44:59+00:00Christian Poessingerchristian@poessinger.com2022-08-24T19:43:10+00:00urn:sha1:eb4a7ee3afc0765671ce0fa379ab5e3518e9e49e
A macsec interface requires a dedicated source interface, it can not be
shared with another macsec or a pseudo-ethernet interface.
set interfaces macsec macsec10 address '192.168.2.1/30'
set interfaces macsec macsec10 security cipher 'gcm-aes-256'
set interfaces macsec macsec10 security encrypt
set interfaces macsec macsec10 security mka cak '232e44b7fda6f8e2d88a07bf78a7aff4232e44b7fda6f8e2d88a07bf78a7aff4'
set interfaces macsec macsec10 security mka ckn '09924585a6f3010208cf5222ef24c821405b0e34f4b4f63b1f0ced474b9bb6e6'
set interfaces macsec macsec10 source-interface 'eth1'
commit
set interfaces pseudo-ethernet peth0 source-interface eth1
commit
Reuslts in
FileNotFoundError: [Errno 2] failed to run command: ip link add peth0 link eth1 type macvlan mode private
returned:
exit code: 2
noteworthy:
cmd 'ip link add peth0 link eth1 type macvlan mode private'
returned (out):
returned (err):
RTNETLINK answers: Device or resource busy
[[interfaces pseudo-ethernet peth0]] failed
Commit failed
macsec: T4592: can not create two interfaces using the same source-interface2022-08-04T06:29:14+00:00Christian Poessingerchristian@poessinger.com2022-08-04T06:29:14+00:00urn:sha1:993961f60ead2a18912eb577b1152463d4eb8b4e