summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-09-04[wireguard] - T1628: fixing comment indenthagbard
2019-09-04Python/configdict: add function vlan_to_dictChristian Poessinger
A generic function which can parse the VLAN (vif, vif-s, cif-c) nodes in a config session. A dictionary describing the VLAN is returned. A good example will be the interface-bonding.py script used to generate bond interfaces in the system. It is used as follows: if conf.exists('vif'): for vif in conf.list_nodes('vif'): # set config level to vif interface conf.set_level(cfg_base + ' vif ' + vif) bond['vif'].append(vlan_to_dict(conf))
2019-09-04Python/configdict: add list_diff function to compare two listsChristian Poessinger
A list containing only unique elements not part of the other list is returned. This is usefull to check e.g. which IP addresses need to be removed from the OS.
2019-09-04[wireguard] - T1628: Adopt WireGuard configuration script to new ↵hagbard
vyos.ifconfig class
2019-09-04openvpn: T1617: T1632: support quotes in openvpn-optionChristian Poessinger
The following CLI command can be used to add a raw option to OpenVPN which requires quotes: > set interfaces openvpn vtun10 openvpn-option 'push "keepalive 1 10"' The resulting config file will then have the following set: > push "keepalive 1 10"
2019-09-04[service https] T1443: rename "server-names" option to "server-name".Daniil Baturin
2019-09-04[service https] T1443: correct the listen-address option in the script.Daniil Baturin
2019-09-04[service https] T1443: use "listen-address" option instead of "listen-addresses"Daniil Baturin
to follow the established convention.
2019-09-04Merge pull request #124 from c-po/t1614-bondingChristian Poessinger
T1614 bonding
2019-09-04bridge: T1615: can not add member interface to bridge if it is also part of ↵Christian Poessinger
a bond
2019-09-04bonding: T1614: T532: new commit validatorsChristian Poessinger
As in the past during the priority race of the bash script invalid configuration could appear in the CLI and are de-synced from the kernle state, e.g. some bonding modes do not support arp_interval. This is no longer allowed and added to the migration script so that the config again represents the truth.
2019-09-04Merge branch 'current' of https://github.com/vyos/vyos-1x into currentDaniil Baturin
2019-09-04[service https] T1443: create /etc/vyos if it doesn't exist.Daniil Baturin
2019-09-04T1443: add dependencies on nginx-light and ssl-cert.Daniil Baturin
2019-09-04openvpn: T1617: bugfix for server push-routeChristian Poessinger
(cherry picked from commit e4f1bbb270f0afea295646764516675bbcfe0be5)
2019-09-04openvpn: T1548: remove authy 2fa providerChristian Poessinger
According to https://github.com/twilio/authy-openvpn commit 3e5dc73: > This plugin is no longer actively maintained. If you're interested in becoming a maintainer, we welcome forks of this project. In addition this plugin was always missing in the current branch ov VyOS and did not make it into VyOS 1.2 (crux) If 2FA for OpenVPN is required we should probably opt for Google Authenticator or if possible a U2F device. (cherry picked from commit 5d858f0e6ad05b032c88c88a08c15d0876c44e8b)
2019-09-04bonding: T1614: add vif-c VLAN interface supportChristian Poessinger
Tested using: ============= set interfaces bonding bond0 address 192.0.2.1/24 set interfaces bonding bond0 description "VyOS bonding" set interfaces bonding bond0 disable-link-detect set interfaces bonding bond0 hash-policy layer2+3 set interfaces bonding bond0 ip arp-cache-timeout 86400 set interfaces bonding bond0 mac 00:91:00:00:00:01 set interfaces bonding bond0 mode active-backup set interfaces bonding bond0 mtu 9000 set interfaces bonding bond0 member interface eth1 set interfaces bonding bond0 member interface eth2 set interfaces bonding bond0 vif-s 100 address 192.168.10.1/24 set interfaces bonding bond0 vif-s 100 description "802.1ad service VLAN 100" set interfaces bonding bond0 vif-s 100 mtu 1500 set interfaces bonding bond0 vif-s 100 mac 00:91:00:00:00:02 set interfaces bonding bond0 vif-s 100 vif-c 110 address "192.168.110.1/24" set interfaces bonding bond0 vif-s 100 vif-c 110 description "client VLAN 110" set interfaces bonding bond0 vif-s 100 vif-c 120 address "192.168.120.1/24" set interfaces bonding bond0 vif-s 100 vif-c 120 description "client VLAN 120" set interfaces bonding bond0 vif-s 100 vif-c 130 address "192.168.130.1/24" set interfaces bonding bond0 vif-s 100 vif-c 130 description "client VLAN 130" set interfaces bonding bond0 vif 400 address 192.168.40.1/24 set interfaces bonding bond0 vif 400 description "802.1q VLAN 400" set interfaces bonding bond0 vif 400 mtu 1500 set interfaces bonding bond0 vif 400 mac 00:91:00:00:00:03
2019-09-04bonding: T1614: identical ID on vif and vif-s is not allowedChristian Poessinger
2019-09-04Python/ifconfig: T1557: remove double quotes on iproute2 commandsChristian Poessinger
2019-09-04bonding: T1614: T1557: add vif/vif-s VLAN interface supportChristian Poessinger
Support for vif-c interfaces is still missing
2019-09-04bonding: T1614: remove obsolete 'member_remove' dict-keyChristian Poessinger
2019-09-04bonding: T1614: can not set primary interface when it's not part of the bondChristian Poessinger
2019-09-04bonding: T1614: Initial version in new style XML/Python interfaceChristian Poessinger
The node 'interfaces ethernet eth0 bond-group' has been changed and de-nested. Bond members are now configured in the bond interface itself. set interfaces bonding bond0 member interface eth0
2019-09-03Python/ifconfig: T1557: cleanup __init__/debugChristian Poessinger
2019-09-03Python/ifconfig: T1557: derive BondIf from EthernetIf as we need VLANsChristian Poessinger
2019-09-03Python/ifconfig: T1557: add description for Interface classesChristian Poessinger
2019-09-03Python/ifconfig: T1557: bonding: add primary and mode propertyChristian Poessinger
2019-09-03Python/ifconfig: T1557: bonding: add get_slaves() callChristian Poessinger
2019-09-03Python/ifconfig: T1557: bonding: disable interface prior enslaving themChristian Poessinger
An interface can only be added to a bond if it is in 'down' state. If interface is in 'up' state, the following Kernel error will be thrown: > bond0: eth1 is up - this may be due to an out of date ifenslave.
2019-09-03Python/ifconfig: T1557: adjust debug message format #2Christian Poessinger
2019-09-03Python/ifconfig: T1557: bonding: add {add,del}_port for slave interfaceChristian Poessinger
2019-09-03Python/ifconfig: T1557: add message to raised ExceptionsChristian Poessinger
2019-09-03Python/ifconfig: T1556: bridge: no need to manually generate an exceptionChristian Poessinger
2019-09-03Python/ifconfig: T1557: adjust debug message formatChristian Poessinger
* remove missleading " as first character with no closing quote * use single quotes in output messages (unclutter) * when writing changes, make output string copy/pasteable my changing '->' to '>'
2019-09-03Python/ifconfig: T1557: bonding: bugfix read_sysfs when debug is enabledChristian Poessinger
2019-09-03Python/ifconfig: T1557: bonding: bugfix setting ARP IP targetChristian Poessinger
2019-09-01Merge pull request #119 from alkersan/T1621_misc_rewritesChristian Poessinger
[op-mode] T1621 rewrite misc commands to python/xml syntax
2019-09-01Python/ifconfig: T1557: bonding: add arp_ip_targetChristian Poessinger
2019-09-01Python/ifconfig: T1557: bonding: add arp_intervalChristian Poessinger
2019-09-01Python/ifconfig: T1557: bonding: add xmit_hash_policyChristian Poessinger
2019-09-01Python/ifconfig: T1557: add proxy_arp{_pvlan} functionsChristian Poessinger
2019-09-01bridge: T1615: remove is_ip import from vyos.validateChristian Poessinger
2019-09-01bridge: T1615: support deleting interface descriptionChristian Poessinger
2019-09-01Revert "bridge: T1556: increase max-age range to 1200 (30 minutes)"Christian Poessinger
This reverts commit 3b119c91ca70c51aab24d4ef8b3913f47281321a.
2019-09-01Python/ifconfig: T1557: migrate all sysfs calls to {read,write}_sysfs helperChristian Poessinger
Introduced in commit f524254 ("Python/ifconfig: T1557: use read/write helpers to interface with sysfs") migrate all remaining calls to this new helper. This enables us to have a single debug call and a single place for error checking.
2019-09-01bridge: T1556: change 'aging' help textChristian Poessinger
2019-09-01Merge pull request #123 from jestabro/currentDaniil Baturin
[boot-config-loader] T1622: Add failsafe and back trace
2019-08-31[boot-config-loader] T1622: Add failsafe and back traceJohn Estabrook
2019-08-31Python/ifconfig: T1557: enable debugging with DEBUG=1 environment variableChristian Poessinger
2019-08-31Python/ifconfig: T1557: use read/write helpers to interface with sysfsChristian Poessinger