Age | Commit message (Collapse) | Author |
|
It makes no sense to enslave an interface to a bond or a bridge device if it is
bound to a given VRF. If VRFs should be used - the encapuslating/master
interface should be part of the VRF.
Error out if the member interface is part of a VRF.
(cherry picked from commit 87d2dff241d9ab4de9f3a2c7fbf9852934557aef)
|
|
VRF names: "add, all, broadcast, default, delete, dev, get, inet,
mtu, link, type, vrf" are reserved and cannot be used for vrf name
(cherry picked from commit 52342f389af2da2995b858d026e6fbcad5c8bfaa)
|
|
(cherry picked from commit 74d6a7e4fc9e2e929c5f899070e6fc3e3e3b5ceb)
|
|
Commit 39157912 ("vyos.configdict(): T4228: is_member() must use the "real"
hardware interface") added a bugfix on calling is_member() to retrieve the real
physical information about an interface. It did not include a code path to also
split up VLAN interfaces.
This has been fixed.
(cherry picked from commit fdeae251431cb747e8f60d96269b4365b7401807)
|
|
Linux Kernel supports to specify the MII link monitoring frequency in
milliseconds. This determines how often the link state of each slave is
inspected for link failures. A value of zero disables MII link monitoring.
A value of 100 is a good starting point.
The default value is 100.
set interfaces bonding bond0 mii-mon-interval <n>
(cherry picked from commit 4315c8fa5bb090e2b7edd6bda205041623e2511d)
|
|
(cherry picked from commit 8d1bb953b784d03e02ba26e78da5488a79aaf20d)
|
|
When is_member() is inspecting the bridge/Bond member interfaces it must work
with the real interface (e.g. eth1) under the "ethernet" node and not work on
the "member interface eth1" CLI tree, that makes no sense at all.
(cherry picked from commit 3915791216998a18bf6831450df68ee199e2e4f8)
|
|
(cherry picked from commit cabfd006bed9cd2d1512cb313616a8e97fe29b9e)
|
|
The code path for changing the interval is never executed.
(cherry picked from commit daddb0ad7812843f64a7ae0bf4b5e15db7b1758e)
|
|
A bond member can not also be used as a member of a bridge interface.
(cherry picked from commit 19bfed0abd75adacb61f170606fff8b4d2e7713f)
|
|
A bond member is not allowed to also be used as a source interface for
e.g. PPPoE or MACsec.
(cherry picked from commit 6fca4854aa2e950795ff0411abe4601f86bdeac0)
|
|
op-mode: T1375: Allow to clear dhcp-server lease
|
|
mpls: T4489: Set priority 400 for MPLS after tunnel
|
|
Fix wrong behavior with priority by using tunnel interfaces
MPLS configuration must be applied after tunnel interfaces
as we use an addition sysctl option 'net.mpls.conf.tun0.input = 1'
which doesn't exist without a tunnel interface
Change priority:
299 protocols/mpls
380 interfaces/tunnel
To:
380 interfaces/tunnel
400 protocols/mpls
|
|
Allow to reset dhcp-leases per ip
Parse file '/config/dhcpd.leases' find match section 'lease x.x.x.x {}'
And remove this section
clear dhcp-server lease 192.0.2.21
(cherry picked from commit a83eecfeee1f925c914a46623dd35f96b48389f8)
|
|
http-api: T4459: Fix to set VRF in http(s) service
|
|
ipoe: T2580: Add pools and gateway options
|
|
dhcp6: pd: T4447: bugfix sla-id limits (must be greater then 128 (equuleus)
|
|
The http service doesn't use VRF info in conf mode.
Even if users set any VRF, the info isn't propagated to the process.
This commit set VRF parameter in http service.
|
|
smoketest: T4387: Add test for load-balancing wan
|
|
Create 2 network namespaces which allow us to emulate 2 ISP
with different static addresses
Check routing table 201 for the first ISP and table 202 for the
second ISP. Each table must contain default route
|
|
The sla-id parameter of DHCPv6 prefix delegations is limited to 128. While this
is enough to use all /64 subnets of a /57 prefix, with a /56 prefix that is no
longer sufficient.
Increased sla-id length tp 65535 so one could delegate an entire /48.
(cherry picked from commit 283276d457a09c100416c0d4ffccd4f94ccd2540)
|
|
http-api: T4442: Add action reset
|
|
Add action 'reset' (op-mode) for HTTP-API
http://localhost/reset
curl --unix-socket /run/api.sock -X POST -Fkey=mykey \
-Fdata='{"op": "reset", "path": ["ip", "bgp", "192.0.2.14"]}' \
http://localhost/reset
|
|
T4441: wwan: connection not possible after a change added after 1.3.1-S1 release - equuleus
|
|
|
|
Add new feature to allow to use named pools
Can be used also with Radius attribute 'Framed-Pool'
set service ipoe-server client-ip-pool name POOL1 gateway-address '192.0.2.1'
set service ipoe-server client-ip-pool name POOL1 subnet '192.0.2.0/24'
|
|
monitoring: T4315: Add telegraf output plugin prometheus-client
|
|
ldp: T4082: Add restart ldp command for op-mode
|
|
(cherry picked from commit 0ef775ab6563af8c20d72d3e30751d50946ab704)
|
|
Add output Plugin "prometheus-client" for telegraf
set service monitoring telegraf prometheus-client xxx
|
|
Add QoS smoketest config for equuleus
|
|
T4402: fix ifconfig-pool generation logic
|
|
T4405: Fix administrative distance of DHCP routes
|
|
T4361: equuleus backport vyos.config fix
|
|
Extend bonding smoketest
Add descriptions to bonding members
We encountered a situation where adding any configuration for
member of bonding interface excludes the interface from bonding
(cherry picked from commit ae815d1b11a4c17df6aea45e3fc87772a0e40e6a)
|
|
(cherry-picked from commit 63fee7ab0c082f3c614bb140de1e7482399dff2b)
|
|
- Default dhclient script only uses value of `$IF_MERIC` envvar for default route recived via `router` option.
- This variable has no effect on rotes received via `rfc3442-classless-static-routes` option
- Considering that Vyos overrrides `ip` command originating from `dhclient` this can be easily fixed in `iptovtysh()` function by using the `$IF_METRIC` envvar directly in the dhclient hook.
|
|
T4363: salt-minion: default mine_interval option is not set
|
|
|
|
openvpn: T4369: enforce daemon-restart on openvpn-option CLI change (equuleus)
|
|
(cherry picked from commit e36efa6b5df764982678a470b7aa82a33c1c369c)
|
|
(cherry picked from commit 714346e2ee0c61a08a9d17fdb962f2fbea9f73c9)
|
|
(cherry picked from commit 3081705175da8eb4ee7c1264e64d06f30b175fdb)
|
|
(cherry picked from commit 52155b9086fa18083efb601bcc9ba8807f147686)
|
|
geneve: T4366: prevent interface re-creation when not required
|
|
dhcp: T4388: missing constraint on tftp-server-name option
|
|
op-mode: T4395: Extend show vpn debug for IPSec add vpn_ipsec.py
|
|
Add python script for op-mode 'show vpn debug'
|
|
T4235: Add support for config tree diff algorithm
|