summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-06-20smoketest: T3637: add testcase for vrf bind-to-all optionChristian Poessinger
2021-06-20gitignore: add debian/*.postrm.debhelper patternChristian Poessinger
2021-06-20Debian: Bullseye has no package named python3-crypt use python3-pycryptodome ↵Christian Poessinger
instead Package got renamed from Buster -> Bullseye.
2021-06-20Debian: raise compat level to 10Christian Poessinger
2021-06-18import cron.hourly script from vyatta-cfg-systemChristian Poessinger
2021-06-18Merge pull request #883 from sever-sever/T3633Christian Poessinger
ethernet: T3633: Add LRO offload
2021-06-18Merge pull request #882 from erkin/currentChristian Poessinger
T3356: remote: Use the local filename if the destination is a directory in SFTP transfers
2021-06-18Merge pull request #884 from sarthurdev/opmode_ike_saChristian Poessinger
ipsec: T2816: Fix 'show vpn ike sa' when key-size is not set
2021-06-18ping: T3634: Adding do not fragment to Ping (#885)Cheeze-It
In this commit we add the do not fragment capability for ping commands. Co-authored-by: Cheeze_It <none@none.com>
2021-06-17ethernet: T3633: Add LRO offloadViacheslav
2021-06-17ipsec: T2816: Fix 'show vpn ike sa' when key-size is not setsarthurdev
2021-06-17Merge branch 'route-map-extcommunity' into currentChristian Poessinger
* route-map-extcommunity: policy: T3631: migrate "set extcommunity-rt|soo" to "set extcommunity rt|soo" route-map: T3632: fix invalid validation regex for extcommunity-rt|soo bgp: T3624: add "bandwidth" bestpath option policy: T3624: remove duplicate CLI node for "bgp-extcommunity-rt" policy: T3624: add extended community bandwith support to route-map policy: T3631: migrate "set extcommunity-rt/soo" to "set extcommunity rt|soo"
2021-06-17policy: T3631: migrate "set extcommunity-rt|soo" to "set extcommunity rt|soo"Christian Poessinger
migrate "set extcommunity-rt" and "set extcommunity-soo" to "set extcommunity rt|soo" to match FRR syntax. This also makes it easier to implement the "bandwidth" extended community.
2021-06-17route-map: T3632: fix invalid validation regex for extcommunity-rt|sooChristian Poessinger
Use the validation string/system available within vyos-1x. This also works on VyOS 1.2 series systems.
2021-06-17T3356: remote: Use the local filename if the destination is a directory in ↵erkin
SFTP transfers.
2021-06-16bgp: T3624: add "bandwidth" bestpath optionChristian Poessinger
2021-06-16policy: T3624: remove duplicate CLI node for "bgp-extcommunity-rt"Christian Poessinger
Key was already present as "extcommunity-rt".
2021-06-16policy: T3624: add extended community bandwith support to route-mapChristian Poessinger
2021-06-16policy: T3631: migrate "set extcommunity-rt/soo" to "set extcommunity rt|soo"Christian Poessinger
Thi adds a new configuration level "set extcommunity" which then holds rt and soo als leaf-nodes below. This is the foundational work required to properly implement T3624 ("BGP: add support for extended community bandwidth definition")
2021-06-16op-mode: T3630: add "show version kernel" commandChristian Poessinger
2021-06-16tunnel: T3555: fix configuration error message grammarChristian Poessinger
2021-06-15Merge pull request #881 from sarthurdev/ipsec_swanctlChristian Poessinger
ipsec: T2816: T645: T3613: Migrated IPsec to swanctl format
2021-06-15ipsec: T2816: T645: T3613: Migrated IPsec to swanctl, includes multiple ↵sarthurdev
selectors, and selectors with VTI.
2021-06-13wwan: T3620: auto detect IP protocol based on requested addressesChristian Poessinger
(cherry picked from commit 1eb6aee88f411127175fdab031d896af1e1adbc3)
2021-06-13wwan: T3622: add support for APN authenticationChristian Poessinger
Some APNs require a username/password. Add CLI nodes (matching the PPPoE syntax) for client authentication. One APN would be the IPv4/IPv6 APN from Deutsche Telekom (Germany) APN Name: Telekom Internet IPv6 APN: internet.v6.telekom Benutzername: telekom Passwort: tm (cherry picked from commit c667a45a8fb06cb76c907348c4f1e3ec708b6e03)
2021-06-13pppoe: T3621: validate that both username and password are setChristian Poessinger
A validator is missing checking that if authentication is used on a PPPoE interface, both username and password are set. (cherry picked from commit 0361c3ac449f183476f7aee31439417d9f7f8012)
2021-06-13Merge pull request #879 from erkin/currentChristian Poessinger
T3563: Call `socket.shutdown()` with appropriate argument
2021-06-13T3563: Call `socket.shutdown()` with appropriate argumenterkin
2021-06-13snmp: T3606: fix unknown notification OIDChristian Poessinger
Commit 945300c6f5 ("snmp: mibs: import from vyatta-cfg-system") imported the MIBs from vyatta-cfg-system and provided them with a symlink to /usr/share/vyos/mibs. The symlink was never installed as the directory already existed. Adjust the MIBDIRS environment variable to load the MIBs from the proper VyOS folder and use no symlink at all.
2021-06-13Merge pull request #878 from sarthurdev/ipsec_dhcp_smoketestChristian Poessinger
smoketest: ipsec: T1501: Use VLAN in smoketest to avoid lease from QEMU built-in DHCP server
2021-06-13smoketest: ipsec: T1501: Use VLAN in smoketest to avoid lease from QEMU ↵sarthurdev
built-in DHCP server
2021-06-13wwan: T3620: reorder mirgation scripts for 1.3 backportChristian Poessinger
As the new WWAN interface style is backported to VyOS 1.3 we also need to shift the order of the interface migration scripts. so the same order from VyOS 1.4 also applies to VyOS 1.3. In short, 21-to-22 is renamed to 18-to-19 and all other migrators are shifted up one version.
2021-06-13vti: T2173: add VRF support for virtual tunnel interfacesChristian Poessinger
2021-06-13wwan: T3620: adjust NAT inbound/outbound interfaces on config migrationChristian Poessinger
2021-06-13wwan: T3620: fix backup route metric in migration scriptChristian Poessinger
2021-06-13wwan: T3620: rename "wirelessmodem wlm" interfaces to new wwan interface treeChristian Poessinger
2021-06-13Merge pull request #877 from sarthurdev/disable_peer_tunnelChristian Poessinger
ipsec: T57: Support disable on peer, peer tunnel and dmvpn profile
2021-06-13GitHub: fix yaml typo in PR conflict workflowChristian Poessinger
2021-06-12Merge pull request #876 from sarthurdev/link_localChristian Poessinger
ipsec: T1501: Use vyos.validate.is_ipv6_link_local
2021-06-12ipsec: T1501: Use vyos.validate.is_ipv6_link_localsarthurdev
2021-06-12ipsec: T57: Support disable on peer, tunnel, dmvpn profilesarthurdev
2021-06-12Merge pull request #875 from sarthurdev/dhcp_address_waitChristian Poessinger
ipsec: T1501: T3617: Add handling for missing addresses on boot when using dhcp-interface
2021-06-12smoketest: ipsec: T1501: Add smoketest for failed dhcp-interface scenariosarthurdev
2021-06-12ipsec: T1501: T3617: Add handling for missing addresses on boot when using ↵sarthurdev
dhcp-interface
2021-06-12http-api: T3616: update for strict content-type check in FastAPI 0.65.2John Estabrook
FastAPI 0.65.2 checks content-type request header before assuming JSON, closing a well-known loophole. This requires a modification of the code providing backwards compatibility of multipart forms.
2021-06-12GitHub: add workflow to check for PR conflictsChristian Poessinger
2021-06-12xml: op-mode: add "show log kernel"Christian Poessinger
2021-06-11Merge pull request #873 from sever-sever/T3614Christian Poessinger
containers: T3614: Fix for network names with hyphen
2021-06-11containers: T3614: Fix for network names with hyphensever-sever
Fix for containers and newtorks names with hyphen in names. We shouldn't mangle tagNode values.
2021-06-10xml: ssh: move user/group definition to includable filesChristian Poessinger