summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-06-01ipsec: T2816: XML in op-mode should not contain ' in the help stringChristian Poessinger
2021-05-31conntrack: T3579: add module disable optionsChristian Poessinger
Some application layer gateway (ALG) modules can be disabled during runtime if requireq.
2021-05-31ipsec: T2816: Continued refactor, added proper ipsec-interfaces handlingSimon
2021-05-30bgp: T3590: limiting maximum number of prefixes to be sent to a peerChristian Poessinger
2021-05-30ipsec: T2816: Refactor to remove global variable and tidy upSimon
2021-05-30op-mode: T3589: add "clear log" command to vacuume journaldChristian Poessinger
2021-05-30op-mode: T3589: replace short journalctl options with long namesChristian Poessinger
... this is done for easier readability of the commands
2021-05-29Debian: T1888: raise required strongSwan version to >= 5.8 for xfrm supportChristian Poessinger
2021-05-29vpn: ipsec: T3093: test for VTI interface availability the easy wayChristian Poessinger
We do not need to query the actual configuration if the VTI peer is configured or not. This can be done in a much more simples way by just checking if the desired interface exists on the running system. This is safe to do as the VTI priority is less then IPSec.
2021-05-29ipsec: vti: T2816: Update to use correct VTI mark, code cleanupSimon
2021-05-29vpn: ipsec: T3093: drop obsolete cleanup_vti_interfaces() functionChristian Poessinger
2021-05-29vti: T1579: only remove the interface when it existsChristian Poessinger
2021-05-29vti: ipsec: T2816: Fix vti-up-downsarthurdev
2021-05-29Revert "vti: T2173: add VRF support for virtual tunnel interfaces"Christian Poessinger
This reverts commit ab398d1a063c5f897df8d63098a272cb34bcf603.
2021-05-28ipsec: T2816: drop absolute path on calls to iproute2Christian Poessinger
2021-05-28vti: ipsec: T2816: interfaces must be created using the vyos.ifconfig libraryChristian Poessinger
2021-05-28vti: T2173: add VRF support for virtual tunnel interfacesChristian Poessinger
2021-05-28ipsec: T2816: fix executable permission on vti-up-down helperChristian Poessinger
2021-05-28vti: T1579: implement Virtual Tunnel Interfaces using XML and PythonChristian Poessinger
2021-05-28dummy: T2241: minor code cleanupChristian Poessinger
No need to call .keys() on a dict when searching for a key. Also drop the unused "import os" call.
2021-05-28ipsec: T2816: IPSec python rework, includes DMVPN and VTI supportSimon
2021-05-27dhcp-server: T2669: do not allow overlapping ranges to be createdChristian Poessinger
set service dhcp-server shared-network-name NET01 authoritative set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 default-router '10.0.0.1' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 lease '86400' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 range RNG01 start '10.0.0.60' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 range RNG01 stop '10.0.0.70' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 range RNG02 start '10.0.0.55' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 range RNG02 stop '10.0.0.65' Will result in a dhcpd.conf: shared-network NET01 { authoritative; subnet 10.0.0.0 netmask 255.255.255.0 { option routers 10.0.0.1; default-lease-time 86400; max-lease-time 86400; range 10.0.0.60 10.0.0.70; range 10.0.0.55 10.0.0.65; } on commit { set shared-networkname = "NET01"; } } This is not allowed by ISC DHCPd: dhcpd[3307]: /run/dhcp-server/dhcpd.conf line 25: lease 10.0.0.63 is declared twice! dhcpd[3307]: range 10.0.0.55 10.0.0.65;
2021-05-27Merge branch 't3579-conntrack' into currentChristian Poessinger
* t3579-conntrack: conntrack: T3535: add conntrack-sync supported vyos-configd services conntrack: T3579: initial implementation with XML and Python
2021-05-27conntrack: T3535: add conntrack-sync supported vyos-configd servicesChristian Poessinger
2021-05-27conntrack: T3579: initial implementation with XML and PythonChristian Poessinger
2021-05-25firewall: T3568: add XML definitions for firewallViacheslav Hletenko
Add XML for configuration mode firewall. Used for future rewriting it to Python style.
2021-05-25smoketest: conntrack: extend tests by parsing iptables rules for nfs/sqlnetChristian Poessinger
2021-05-25smoketest: add initial test for "system conntrack" subsystemChristian Poessinger
2021-05-24tunnel: T3555: add "ignore-df" support for GRE tunnelsChristian Poessinger
2021-05-24xml: T1579: update tunnel key help stringChristian Poessinger
2021-05-24isis: T3576: add IPv6 supportChristian Poessinger
2021-05-24isis: T3417: update help stringsChristian Poessinger
2021-05-24isis: T3417: add CLI node to enable "log-adjacency-changes"Christian Poessinger
2021-05-24isis: T3417: ease Jinja2 template code for is-typeChristian Poessinger
2021-05-24smoketest: isis: T3417: test domain and area-password settingsChristian Poessinger
2021-05-24smoketest: isis: test verify() - net and interface must be setChristian Poessinger
2021-05-24isis: T3417: implement domain-password md5Christian Poessinger
2021-05-24smoketest: isis: T3576: add testcase for default route originationChristian Poessinger
This is the smoketest for the implementation added in commit 9682337c ("isis: T3576: support metric and route-map when originating a default route").
2021-05-24smoketest: isis: abstract common protocol setupChristian Poessinger
2021-05-24isis: T3576: support metric and route-map when originating a default routeChristian Poessinger
2021-05-24smoketest: pseudo-ethernet: add missing "Section" importChristian Poessinger
2021-05-24op-mode: T3571: add missing "show protocol" help stringsChristian Poessinger
2021-05-24pseudo-ethernet: T3575: verify parent interface MTUChristian Poessinger
2021-05-24smoketest: pseudo-ethernet: support setting source-interface via ENVChristian Poessinger
TEST_ETH="eth2" /usr/libexec/vyos/tests/smoke/cli/test_interfaces_pseudo_ethernet.py Will only create pseudo ethernet interfaces from eth2.
2021-05-24smoketest: vif: T3570: fix vlan interface MTU test for pseudo-ethernet ↵Christian Poessinger
interfaces The MTU size of the source-interface must be greater or equal to the MTU of the pseudo ethernet interface.
2021-05-24router-advert: T3561: fix inconsistent use of tabs and spaces in indentationChristian Poessinger
Commit c17f259d ("router-advert: T3561: add support for specific routes") used tabs over spaces in the Migration script which triggered a TabError (inconsistent use of tabs and spaces in indentation").
2021-05-23xml: T3573: add missing route-map as-path-prepend, origin and community help ↵Christian Poessinger
strings
2021-05-23router-advert: T3561: add support for specific routesMark Royds
Co-authored-by: Mark Royds <mark.royds@vitaminit.co.uk>
2021-05-23smoketest: vif: T3570: vlan interface MTU must be less or equal to parentChristian Poessinger
2021-05-23smoketest: ethernet: bugfix RPS CPU validationChristian Poessinger
We always read back the RPS value from eth1 which worked on the CI smoketests, but not when running a smoketest with only one interface e.g. by: $ TEST_ETH="eth2" /usr/libexec/vyos/tests/smoke/cli/test_interfaces_ethernet.py
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-24 08:21:31 +0000