summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-09-15dhcp-server: increase maximum lease time to 4294967295 secondsChristian Poessinger
This was the upper limit in VyOS 1.1.8 and must not be changed to keep configs compatible.
2018-09-14T845: add dependency on isc-dhcp-serverChristian Poessinger
2018-09-11syslog: xmllint indenting and added help text for 'syslog global'Christian Poessinger
2018-09-11Add support for retrieving error messages from inside libvyosconfig.Daniil Baturin
2018-09-10snmp.py: proper creation of non network bound SNMP communitiesChristian Poessinger
2018-09-10snmp.py: improve JINJA2 template robustnessChristian Poessinger
2018-09-10Improve error reporting in vyos.configtreeDaniil Baturin
2018-09-08Merge pull request #50 from hagbard-01/currenthagbard-01
T836: syslog messages split accross multiple files
2018-09-08T836: syslog messages split accross multiple fileshagbard
- logs now only to /var/log/messages per default - enforces the global template from /usr/share/vyos/rsyslog/rsyslog.conf
2018-09-08T836: template for global rsyslog.confhagbard
2018-09-05T831: ntp.py: fix restrict configuration keyword to allow clients to sync upChristian Poessinger
2018-09-04T823: extend the new DHCP op mode.Daniil Baturin
2018-09-04dhcp_server.py: bugfix pool assignmentChristian Poessinger
Commit 91c3b8bdd9 ("dhcp_server.py: cleanup") did not only cleanup parts of the code but in addition added support for DHCP failover. That support could lead to an empty pool {} statement if the subnet declaration only had static address assignments but no range at all. ---<snip>--- dhcpd: /etc/dhcp/dhcpd.conf line 70: Pool declaration with no address range. dhcpd: } dhcpd: ^ dhcpd: Pool declarations must always contain at least dhcpd: one range statement. ---</snip>---
2018-09-03Merge pull request #49 from hagbard-01/currenthagbard-01
T793: wireguard: implement fwmark, pre-shared key
2018-09-02Merge remote-tracking branch 'upstream/current' into T793hagbard
2018-09-02T793: wireguard preshared-key implementationhagbard
- the psk is only read from a file, due to sudo it's redirection doesn't work file is created in /tmp (it's tmpfs), wg comand executed and the psk file is deleted again, to avoid leakage of the psk. It's create umaks(077) and root:root
2018-09-02regex for endpoint removedhagbard
2018-09-02T825: add system 8-to-9 migration scriptChristian Poessinger
2018-09-02Merge branch 'current' of github.com:vyos/vyos-1x into currentDaniil Baturin
2018-09-02T824: add Python bindings for the rename_node function to vyos.configtreeDaniil Baturin
2018-09-02mdns_repeater: add 'disable' optionChristian Poessinger
2018-09-02mdns_repeater: cleanup python implementationChristian Poessinger
2018-09-02T823: add a new DHCP op mode script, only capable of showing leases now.Daniil Baturin
2018-09-02T823: add dependency on python3-sixDaniil Baturin
This is needed because this dependency is missing in the python3--isc-dhcp-leases package from stretch. When that issue is resolved, the dependency can be safely removed.
2018-09-02T822: add sudo to tcpdump commandsDaniil Baturin
to make them use correct PATH now, and to enable getting rid of capabilities later.
2018-09-01snmp.py: improve daemon startupChristian Poessinger
The previous implementation used a hardcoded 2 seconds sleep until the daemon configuration was rendered by snmpd (user/password stuff). Waiting 2 seconds is error prone and was replaced by reading the configuration file until it shows a marker indicating that the file was properly processed by snmpd.
2018-09-01T427,T793 wireguard supporthagbard
- regex added to check endpoint as pattern IP:port - T793: preparation for the use preshared key
2018-09-01T427: wireguard supporthagbard
* renamed opmode script wireguard_key.py to wireguard.py
2018-09-01Merge remote-tracking branch 'upstream/current' into T793hagbard
2018-09-01snmp.py: beautify generated snmp.conf #2Christian Poessinger
2018-09-01snmp.py: bugfix - CLI client community node was not processedChristian Poessinger
2018-09-01snmp.py: bugfix writing rocommunity string in configChristian Poessinger
2018-09-01snmp.py: beautify generated snmp.confChristian Poessinger
2018-09-01T771: snmp.px: reduce syslog noiseChristian Poessinger
2018-08-31Merge branch 'dhcpv6-server-rewrite' into currentChristian Poessinger
* dhcpv6-server-rewrite: T811: dhcpv6_server.py: add missing validators when comitting config changes dhcp_server.py: cleanup bcast_relay.py: remove obsolete import statement vyos: package: bugfix in validate.py for is_subnet_connected() T778: dhcpv6-server: XML and Python rewrite
2018-08-31T811: dhcpv6_server.py: add missing validators when comitting config changesChristian Poessinger
2018-08-31dhcp_server.py: cleanupChristian Poessinger
2018-08-31bcast_relay.py: remove obsolete import statementChristian Poessinger
2018-08-31vyos: package: bugfix in validate.py for is_subnet_connected()Christian Poessinger
2018-08-31Merge remote-tracking branch 'upstream/current' into T793hagbard
2018-08-31T793: preshared key op-mode partshagbard
2018-08-30T778: dhcpv6-server: XML and Python rewriteChristian Poessinger
2018-08-30dhcp_server.py: rework verify() error messages/error checkingChristian Poessinger
Commit 067a6b1524 ("vyos: package: extend validator by is_subnet_connected()") added a mechanism to probe if a given IPv4/IPv6 address is connected to any interface on the subnet - or is part of this subnet. We now use this call instead of producing more and more biler-plate code!
2018-08-30vyos: package: extend validator by is_subnet_connected()Christian Poessinger
Verify given IPv4/IPv6 subnet is connected to any interface on this system. Required by e.g. DHCP server that we have for IPv4 and IPv6.
2018-08-30T813: fix the check for duplicate VRIDs on the same interface (patch by ↵Daniil Baturin
Watcher7).
2018-08-29snmp.py: only write 'oldEngineID' to config if v3 is enabledChristian Poessinger
2018-08-29T733: snmp.py: switch to new IP address validatorsChristian Poessinger
Commit a30dac7c2 ("vyos package: add IP address validators") added system wide Python validators for IP addresses. Remove duplicated code and switch to single source.
2018-08-29tftp_server.py: switch to new IP address validatorsChristian Poessinger
Commit a30dac7c2 ("vyos package: add IP address validators") added system wide Python validators for IP addresses. Remove duplicated code and switch to a single source.
2018-08-29vyos package: add IP address validatorsChristian Poessinger
* is_addr_assigned(addr) - Test if address is assigned to ANY interface on the system * is_ipv4(addr) - Test if it is an IPv4 address, both network and host * is_ipv6(addr) - Test if it is an IPv6 address, both network and host
2018-08-29dhcp_server.py: beautify error messages generated in verify()Christian Poessinger