| Age | Commit message (Collapse) | Author |
|---|
|
bridge: T6043: do not call vxlan dependency if interface does not exist (yet) (backport #3026)
|
|
In order to keep the proper priority list during system startup and on initial
setup/commit for this feature the dependent VXLAN code should not be called,
if the interface in question does not exist (yet).
(cherry picked from commit dbe8c613bb80bc8b714398825054ade5942ea75b)
|
|
login: T5972: add possibility to disable individual local user accounts (backport #3019)
|
|
op-mode: T5581: add "show ipv6 nht" command (backport #3027)
|
|
image-tools: T6041: fix logic of is_live_boot to allow for PXE boot (backport #3024)
|
|
This improves the implementation to support both IPv4 and IPv6
(cherry picked from commit e144e55d6360a92279167198928cbe24efd97f08)
|
|
(cherry picked from commit 5949ff72a9f953da9d06d1ad75add0e6023d0dc4)
|
|
T3722: Fixed L-Time in 'show vpn ike sa' command (backport #3021)
|
|
* set system login user <name> disable
(cherry picked from commit 6e0b146ed3b90da577c3ecba38836883fd435e7a)
|
|
Fixed L-Time in 'show vpn ike sa' command
(cherry picked from commit bb6e6fc2119584df6ec571e7e9335dc509d5faeb)
|
|
T6001: add option to disable next-hop-tracking resolve-via-default (backport #3016)
|
|
context
* set vrf name <name> ip nht no-resolve-via-default
* set vrf name <name> ipv6 nht no-resolve-via-default
(cherry picked from commit 0fafc4bcdb9efc03796ddab0832471b11ba1bbe0)
|
|
* set system ip nht no-resolve-via-default
* set system ipv6 nht no-resolve-via-default
(cherry picked from commit ece0e768f36e52f8964823d891264d7c187204ec)
|
|
EDB should be EGP for exterior gateway protocol
(cherry picked from commit 56654191613113764415d7eddadcbd8c97e126de)
|
|
rpki: T6034: extend config migration testcase (backport #3011)
|
|
(cherry picked from commit 354603398b693af06695d5d1a7602f17079f8350)
|
|
T6029: Rewritten Accel-PPP services to an identical feature set (backport #3004)
|
|
Removed dhcp-interface option (l2tp)
Added wins-server (sstp)
Added description (ipoe, pppoe, sstp, pptp)
Added exteded-script (l2tp, sstp, pptp)
Added shaper (ipoe, pptp, sstp, l2tp)
Added limits (ipoe, pptp, sstp, l2tp)
Added snmp ( ipoe, pptp,sstp, l2tp)
Refactoring and reformated code.
(cherry picked from commit ac6a16f6c5ad7700789759e1ec093236c2e182a2)
|
|
rpki: T6034: move file based SSH keys for authentication to PKI subsystem (backport #2988)
|
|
T6019: Fix smoketest test_system_conntrack custom timeout (backport #3005)
|
|
(cherry picked from commit 3bfbbef22954488541abd3cad262b1e196d4c240)
|
|
(cherry picked from commit 4d76e9ef3e7773ed96c037108021c292675b101c)
|
|
(cherry picked from commit 78820752b936e77d30f995498ff36487c5c6af87)
|
|
(cherry picked from commit 0f8bf6bd0fb29cfd638e9920674e7ad1d1d25350)
|
|
(cherry picked from commit ac2d7dfac6073d0f232191ec494f78a8d12889e4)
|
|
set pki openssh rpki private key ...
set pki openssh rpki public key ...
set pki openssh rpki public type 'ssh-rsa'
(cherry picked from commit 8c78ef0879f22ffd4a5f7fdb175e9109b46e9d7b)
|
|
After updateing netfilter in the commit https://github.com/vyos/vyos-build/commit/b31f5fe934bcb37534d49acdb5f7756bf05422e8
The nftables format for conntrack timeouts is different.
Fix this.
(cherry picked from commit 24860e092426bf0bb09c2d164d66330be13bcd77)
|
|
T5064: Firewall fix RegEx for for domain-group (backport #3000)
|
|
T5928: Change firewall priority to 319 (backport #2999)
|
|
Improve RegEx for firewall domain-groups.
This domain group looks good, but the current RegEx validation
fils:
```
set firewall group domain-group a_aa
```
(cherry picked from commit b67049edab41e8714aec087b81d589fdb03a350b)
|
|
(cherry picked from commit ef87bd7320da2750de4d93c14314965704f3dfbd)
|
|
Change the firewall priority to 319, after interface ethernet
configuration
For example if we use VLANs and the vlan interface must be
created before we can use it in the firewall/flowtable
The current priority
```
199 firewall
300 interfaces/dummy
300 interfaces/loopback
300 interfaces/virtual-ethernet
310 interfaces/bridge
310 interfaces/input
318 interfaces/ethernet
...
```
(cherry picked from commit f1dcd2d23f89251b0a96c61f8186002cb0d50d18)
|
|
bgp: T6032: add EVPN MAC-VRF Site-of-Origin support (backport #2987)
|
|
In some EVPN deployments it is useful to associate a logical VTEP's Layer 2
domain (MAC-VRF) with a Site-of-Origin "site" identifier. This provides a BGP
topology-independent means of marking and import-filtering EVPN routes
originated from a particular L2 domain. One situation where this is valuable
is when deploying EVPN using anycast VTEPs
set protocols bgp address-family l2vpn-evpn mac-vrf soo
(cherry picked from commit f308df322bd62024e29dd458642cb6bcac8a5ad6)
|
|
ipsec: T5981: Strip '@' from migrated peer PKI name (backport #2993)
|
|
(cherry picked from commit 8238f8cdae3ae14bd8bd95158c218c45285df478)
|
|
init: T2044: fix "binary operator expected" when two or more RPKI caches are defined (backport #2994)
|
|
defined
Fix commit 9b8e11e07 ("init: T2044: only start rpki if cache is configured")
which showed a disturbing error on tty0 after boot that a "binary operator
expected" when checking for RPKI caches when multiple results got returned.
(cherry picked from commit a5ac522f8c675ee2b2c2f4f08be7c41943632e94)
|
|
T6019: fix smoketest after upgrading nftables and libnftnl packages. (backport #2991)
|
|
(cherry picked from commit f3205d6dd1ea04adecbd8c857c80015ed53f2140)
|
|
srv6: T5849: add segment support to "protocols static route6" (backport #2980)
|
|
bgp: T6010: support setting multiple values for neighbor path-attribute (backport #2986)
|
|
* set protocols static route6 <prefix> next-hop <address> segments 'x:x::x:x/y:y::y/z::z'
* set protocols static route6 <prefix> interface <interface> segments 'x:x::x:x/y:y::y/z::z'
(cherry picked from commit b84f7de453f3951945298d95a8a27345ba7d28c3)
|
|
(cherry picked from commit a22e0ee09ff4750de004090f1f55ee75a12dc821)
|
|
rpki: T6004: add missing startup priority (backport #2983)
|
|
xml: T5738: improve PKI building blocks for CLI (backport #2982)
|
|
(cherry picked from commit 4c2acb970c62478cf1139fcf66b0de341d46f7fc)
|
|
(cherry picked from commit d4278cde2b153e163fe41e1bc461891397336bc3)
|
|
T6028: Fix QoS policy shaper wrong class_id_max and default_minor_id (backport #2978)
|
|
The `class_id_max` is wrong due to `tmp.sort` of Strings
If we have class 5 and class 10 we get sorted max value 5, expected 10
```
>>> tmp = ['5', '10']
>>> tmp.sort()
>>> tmp
['10', '5']
>>>
>>> hex(5+1)
'0x6'
>>>
>>> hex(10+1)
'0xb'
>>>
```
This way we get wrong default maximum class value:
```
tc qdisc replace dev eth1 root handle 1: htb r2q 444 default 6
```
Expect:
```
tc qdisc replace dev eth1 root handle 1: htb r2q 444 default b
```
Fix this converting Strings to Integers and get max value.
(cherry picked from commit 2e8fa45c7f0663549edd118622b3381e7c428b2e)
|
