summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2023-11-18vxlan: T5753: add support for VNI filteringChristian Breunig
In a service provider network a service provider typically supports multiple bridge domains with overlapping vlans. One bridge domain per customer. Vlans in each bridge domain are mapped to globally unique VXLAN VNI ranges assigned to each customer. Without the ability of VNI filtering, we can not provide VXLAN tunnels with multiple tenants all requiring e.g. VLAN 10. To Test: set interfaces vxlan vxlan987 parameters external set interfaces vxlan vxlan987 source-interface eth0 set interfaces vxlan vxlan987 parameters vni-filter set interfaces vxlan vxlan987 vlan-to-vni 50 vni 10050 set interfaces vxlan vxlan987 vlan-to-vni 51 vni 10051 set interfaces vxlan vxlan987 vlan-to-vni 52 vni 10052 set interfaces vxlan vxlan987 vlan-to-vni 53 vni 10053 set interfaces vxlan vxlan987 vlan-to-vni 54 vni 10054 set interfaces vxlan vxlan987 vlan-to-vni 60 vni 10060 set interfaces vxlan vxlan987 vlan-to-vni 69 vni 10069 set interfaces bridge br0 member interface vxlan987 Add new op-mode command: show bridge vni Interface VNI ----------- ----------- vxlan987 10050-10054 vxlan987 10060 vxlan987 10069
2023-11-16tunnel: T3894: improve get_mac_synthetic() codeChristian Breunig
Remove stray whitespace in sed script and call Section.interfaces with vlan=False instead of a custom filter. This extends commit f19c92f25 ("tunnel: T3894: fix design when building synthetic MAC addresses")
2023-11-16xml: T5738: re-use "disable" building blockChristian Breunig
2023-11-16Merge pull request #2495 from JeffWDH/currentChristian Breunig
T3983: show pki certificate Doesnt show x509 certificates
2023-11-16Merge pull request #2481 from sever-sever/smoketest-apiChristian Breunig
smoketest: Extend HTTP-API tests
2023-11-16T3983: show pki certificate Doesnt show x509 certificatesJeffWDH
2023-11-16Merge pull request #2491 from sever-sever/T5747Christian Breunig
T5747: op-mode add show interfaces summary
2023-11-16T5747: op-mode add MAC and MTU for show interfaces summaryViacheslav Hletenko
Add op-mode "show interfaces summary" Add MAC, VRF and MTU options: vyos@r4# run show interfaces summary Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down Interface IP Address MAC VRF MTU S/L Description ----------- ----------------- ----------------- ------- ----- ----- ------------- dum0 203.0.113.1/32 96:44:ad:c5:a1:a5 default 1500 u/u eth0 192.168.122.14/24 52:54:00:f1:fd:77 default 1500 u/u WAN eth1 192.0.2.1/24 52:54:00:04:33:2b foo 1500 u/u LAN-eth1 eth2 - 52:54:00:40:2e:af default 1504 u/u LAN-eth2 eth3 - 52:54:00:09:a4:b4 default 1500 A/D
2023-11-16Merge pull request #2490 from c-po/op-mode-vni-t5150Christian Breunig
op-mode: vrf: T5150: add "show vrf vni" and "show vrf <name> vni" commands
2023-11-15op-mode: vrf: T5150: add "show vrf vni" and "show vrf <name> vni" commandsChristian Breunig
vyos@vyos:~$ show vrf vni VRF VNI VxLAN IF L3-SVI State Rmac blue 2000 None None Down None green 3000 None None Down None red 1000 None None Down None vyos@vyos:~$ show vrf blue vni VRF VNI VxLAN IF L3-SVI State Rmac blue 2000 None None Down None
2023-11-15Merge pull request #2476 from c-po/frr-pim-T5733Christian Breunig
pim(6): T5733: add missing FRR related features
2023-11-15pim: T5733: incorporate feedback from peer reviewChristian Breunig
2023-11-15Merge pull request #2486 from JeffWDH/currentViacheslav Hletenko
T5732: generate firewall rule-resequence drops geoip country-code fro…
2023-11-15T5732: generate firewall rule-resequence drops geoip country-code from outputJeffWDH
2023-11-15Merge pull request #2483 from erkin/noninteractiveChristian Breunig
remote: T5726: Disable the progressbar if the shell is noninteractive or the terminal is missing capabilities
2023-11-14Merge pull request #2479 from c-po/t5738-xmlChristian Breunig
xml: T5738: add source-address-ipv4-ipv6-multi building block
2023-11-14remote: T5726: Disable the progressbar if the shell is noninteractive or the ↵erkin
terminal is missing capabilities
2023-11-14Merge pull request #2475 from sever-sever/T5728Viacheslav Hletenko
T5728: OpenVPN server replace first_host_address to vpn_gateway
2023-11-14smoketest: Extend HTTP-API testsViacheslav Hletenko
2023-11-14Merge pull request #2480 from nicolas-fort/T5729-Fix-MigrationChristian Breunig
T5729: firewall and policy: fix latest migration script
2023-11-14T5729: firewall and policy: fix latest migration scriptNicolas Fort
2023-11-14xml: T5738: add source-address-ipv4-ipv6-multi building blockChristian Breunig
2023-11-13pim6: T5733: add missing FRR PIM6 related featuresChristian Breunig
2023-11-13igmp: T5736: support per interface "disable" CLI nodeChristian Breunig
2023-11-13pim: T5733: fix CLI level of global PIM commandsChristian Breunig
2023-11-13igmp: T5736: migrate "protocols igmp" to "protocols pim"Christian Breunig
IGMP and PIM are two different but related things. FRR has both combined in pimd. As we use get_config_dict() and FRR reload it is better to have both centrally stored under the same CLI node (as FRR does, too) to just "fire and forget" the commit to the daemon. "set protocols igmp interface eth1" -> "set protocols pim interface eth1 igmp"
2023-11-13pim: T5733: rename watermark-warn -> watermark-warningChristian Breunig
2023-11-13pim: T5733: split out XML definitions to be re-used by pim6Christian Breunig
2023-11-13pim: T5733: add missing FRR PIM related featuresChristian Breunig
Migrate CLI configuration retrival to common get_config_dict(). In addition add new functionality to VyOS that is PIM related and already available in FRR.
2023-11-12T5728: OpenVPN server replace first_host_address to vpn_gatewayViacheslav Hletenko
Some OpenVPN clients (OpenVPN3) do not understand address of gateway for the pushed networks. It leads that pushed routes are not installed at all. Replace `subnet | first_host_address` to the `vpn_gateway` to fix it
2023-11-12ospf: T5467: remove superfluous "import os"Christian Breunig
2023-11-12Merge pull request #2435 from bbabich/currentChristian Breunig
mtr: T5658: Add VRF support for mtr (+ op_mode wrapper)
2023-11-12op-mode: T5658: fix "monitor traceroute" completion helperChristian Breunig
2023-11-12op-mode: T5658: reduce amount of exposed optionsChristian Breunig
Example: we should focus on JSON output and not expose XML and CSV.
2023-11-12T5658: add common methods interface_list() and vrf_list() to vyos.utils.networkChristian Breunig
Reduce amount of duplicated (3 times) code in op-mode scripts for ping, traceroute and mtr.
2023-11-11Merge pull request #2471 from nicolas-fort/T5729Christian Breunig
T5729: firewall: switch to valueless in
2023-11-11Merge pull request #2472 from gavol/currentChristian Breunig
dhclient: T5724: run user hooks using run_hookdir
2023-11-11dhclient: T5724: run user hooks using run_hookdirgavol
User hooks are executed using run_hookdir (defined in the /sbin/dhclient-script script) instead of run-parts. That allows user hooks to modify variables set by the dhcp client (e.g., the new_routers variable to avoid the installation of the default routes).
2023-11-11Merge pull request #2470 from indrajitr/ddclient-smoketest-20231109Christian Breunig
ddclient: T5708: Fix VRF table generation in smoketest
2023-11-10T5729: firewall: switch to valueless in order to remove unnecessary ↵Nicolas Fort
<enable|disable> commands; log and state moved to new syntax.
2023-11-10ddclient: T5708: Fix VRF table generation in smoketestIndrajit Raychaudhuri
Ensure that the random VRF table name is 4 digits long, not 5 and stays within the the range of 100 - 65535.
2023-11-10Merge pull request #2467 from indrajitr/validation-fixChristian Breunig
T5727: Use native URL validator instead of regex-based validator
2023-11-10Merge pull request #2468 from indrajitr/ddclient-smoketest-20231108Christian Breunig
ddclient: T5708: Additional smoketests for web-options
2023-11-10ddclient: T5708: Additional smoketests for web-optionsIndrajit Raychaudhuri
Add additional smoketests for web-options validation. Also, format error messages to optionally include protocol name.
2023-11-09T5727: Use native URL validator instead of regex-based validatorIndrajit Raychaudhuri
Replace regex-based URL validator with native validator from vyos-utils. Also, move `include/url.xml.i` to `include/url-http-https.xml.i` to reflect the fact that it is used only for HTTP(S) URLs.
2023-11-09op-mode: T5658: adjust "monitor traceroute" CLI argument indexChristian Breunig
2023-11-09op-mode: T5658: add VRF support for "monitor traceroute"bbabich
2023-11-09Merge pull request #2464 from sever-sever/T1797Viacheslav Hletenko
T1797: Remove vpp packages and mentions
2023-11-09T1797: Remove vpp packages and mentionsViacheslav Hletenko
2023-11-09Merge pull request #2462 from sever-sever/T5412Christian Breunig
T5412: Beautify config dependencies JSON
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-18 13:23:30 +0000