Age | Commit message (Collapse) | Author |
|
(cherry picked from commit bc01277bdfdf49be8950fe2cbf3749d42da2850d)
|
|
(cherry picked from commit 96dce0f47805bb321881183da9a47b621fd54ec8)
|
|
conntrack-sync: T3535: Rewrite conf and op modes to XML python style
|
|
|
|
(cherry picked from commit 2318c874c4ec43076c2664e473f7273928d9f2a6)
|
|
(cherry picked from commit 4b646c1fb31a1a9f9c9d1658734d478fed5f19f1)
|
|
(cherry picked from commit 065c6b620cb52a3235c7b6e210d34dc8cb943b95)
|
|
WARNING: Using --genkey --secret filename is DEPRECATED.
Use --genkey secret filename instead.
(cherry picked from commit 3ffe114e8e8916d142b82657bd982122e57d17ed)
|
|
(cherry picked from commit c8ef5e8bdce01bbf05297df39e6c6223d0b2a2ea)
|
|
Executing iproute2 commands as unprivileged member of the openvpn group is now
handled via a sudoers file.
(cherry picked from commit 9c8facc69c09163b74bc428f1dbf8be030766758)
|
|
(cherry picked from commit 6b7b19c93f90839549dd668116c4da2f38cfdc66)
VyOS 1.3 will ship OpenVPN 2.5.1 and thus it is the perfect timing to still
remove this option before introducing it in a new LTS release.
|
|
(cherry picked from commit 9431383abc926ca4513928c56924e942ea250cc8)
|
|
Ethtool version used on Debian Bullseye changed the output format from 0 -> n/a.
As we are only interested in the tx/rx keys we do not care about RX Mini/Jumbo.
(cherry picked from commit d48dddab0509e562209adfb115b0e691b8e47f54)
|
|
|
|
(cherry picked from commit 3ae265b300544b855b1b32862c901045ee146934)
|
|
|
|
(cherry picked from commit 4b2fef88644bb75dadbe33b9638a4150def7e14f)
|
|
In this commit we add the do not fragment capability
for ping commands.
Co-authored-by: Cheeze_It <none@none.com>
(cherry picked from commit c9dbc42bab13d70d22ca55794e4b89cac53adc86)
|
|
(cherry picked from commit 6cfcf7a761adb3e51f9279611435a39a1424e9c9)
|
|
|
|
|
|
|
|
Some APNs require a username/password. Add CLI nodes (matching the PPPoE
syntax) for client authentication.
One APN would be the IPv4/IPv6 APN from Deutsche Telekom (Germany)
APN Name: Telekom Internet IPv6
APN: internet.v6.telekom
Benutzername: telekom
Passwort: tm
|
|
A validator is missing checking that if authentication is used on a PPPoE
interface, both username and password are set.
|
|
(cherry picked from commit beac82b2d0d4bad182718cc8159f79150c5a71ae)
|
|
(cherry picked from commit 011f8ede55311e08d42f5afed9a2e8c44fd6d301)
|
|
(cherry picked from commit e24e35e1ac11a0771b15417af191694fd0b88022)
|
|
(cherry picked from commit d20dd7a0e6af08a80c7c911e7b151f28e4666173)
|
|
(cherry picked from commit c2a1c071e7d0a9ca754d7f5016eed7db188b3d1a)
|
|
(cherry picked from commit 550cea8e88f11564abb4691354ecbac22d146a29)
|
|
(cherry picked from commit 556e03922f78f8e258c6d6630ad47569be376e11)
|
|
(cherry picked from commit 80fe3ef4d49f6ee277d52ef5847f011e5775e7fb)
|
|
(cherry picked from commit c12320f2f2bf511de82658b81e9d2ddbcfb1331a)
|
|
(cherry picked from commit 5d068442cf7b1863724c83168176ce2940a023fe)
|
|
|
|
|
|
|
|
(cherry picked from commit b4fdcebebecd8d8952211b78bce26d53fd29edb3)
|
|
(cherry picked from commit fd9032fb7bfc86d4e8901e348bc0afdc83e07413)
|
|
Set default TTL value for tunnels from 0 to 64
There are a lot of situation when default value 0 (inherit)
not work properly when you have routing configuration for OSPF
or BGP over the tunnels. To fix it you need explicit set TTL
value other then 0. Or hardcode another value as default.
(cherry picked from commit b4db37507635bf95161bea32b18736fc0732a9e6)
|
|
flow-accounting: T3132: fix egress iptables chain
|
|
|
|
(cherry picked from commit 3e6e4a1738dc2bcf173c6e450ad4d43dda54f283)
|
|
... this is done for easier readability of the commands
(cherry picked from commit f357cf58f7bd1892f85bb26003c62b1d44753e0a)
|
|
Added by commit 8ff36fa268f ("smoketest: vif: T3570: fix vlan interface MTU test
for pseudo-ethernet interfaces"), but it used the new API available through
VyOSUnitTestSHIM.
This has ben fixed to use the old API.
|
|
set service dhcp-server shared-network-name NET01 authoritative
set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 default-router '10.0.0.1'
set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 lease '86400'
set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 range RNG01 start '10.0.0.60'
set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 range RNG01 stop '10.0.0.70'
set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 range RNG02 start '10.0.0.55'
set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 range RNG02 stop '10.0.0.65'
Will result in a dhcpd.conf:
shared-network NET01 {
authoritative;
subnet 10.0.0.0 netmask 255.255.255.0 {
option routers 10.0.0.1;
default-lease-time 86400;
max-lease-time 86400;
range 10.0.0.60 10.0.0.70;
range 10.0.0.55 10.0.0.65;
}
on commit {
set shared-networkname = "NET01";
}
}
This is not allowed by ISC DHCPd:
dhcpd[3307]: /run/dhcp-server/dhcpd.conf line 25: lease 10.0.0.63 is declared twice!
dhcpd[3307]: range 10.0.0.55 10.0.0.65;
(cherry picked from commit b0e1c8a9c9ef470297bf3c9f5059ad7c720c46ff)
|
|
|
|
|
|
|
|
|