Age | Commit message (Collapse) | Author |
|
(cherry picked from commit 2318c874c4ec43076c2664e473f7273928d9f2a6)
|
|
(cherry picked from commit 4b646c1fb31a1a9f9c9d1658734d478fed5f19f1)
|
|
(cherry picked from commit 065c6b620cb52a3235c7b6e210d34dc8cb943b95)
|
|
(cherry picked from commit c8ef5e8bdce01bbf05297df39e6c6223d0b2a2ea)
|
|
Executing iproute2 commands as unprivileged member of the openvpn group is now
handled via a sudoers file.
(cherry picked from commit 9c8facc69c09163b74bc428f1dbf8be030766758)
|
|
(cherry picked from commit 6b7b19c93f90839549dd668116c4da2f38cfdc66)
VyOS 1.3 will ship OpenVPN 2.5.1 and thus it is the perfect timing to still
remove this option before introducing it in a new LTS release.
|
|
(cherry picked from commit c2a1c071e7d0a9ca754d7f5016eed7db188b3d1a)
|
|
(cherry picked from commit c12320f2f2bf511de82658b81e9d2ddbcfb1331a)
|
|
Co-authored-by: Mark Royds <mark.royds@vitaminit.co.uk>
(cherry picked from commit c17f259d09abd2bf632d09400fe8deb4c2781d32)
|
|
dhcp6.name-servers is a comma-delimited, multi-value list of name-servers that
should only appear once in the dhcpdv6.conf file.
|
|
(cherry picked from commit 117533482d29ce0bd1bc7f3a3f2536921c16565c)
|
|
equuleus
|
|
Sometimes a modem might give a local IP before it retrieves a WAN IP.
This can be an issue with failover routes,
since the default route will get overridden.
(cherry picked from commit e8535616aae2bf0c20aacee6a4d0761183bae6d9)
|
|
(cherry picked from commit dd2eb5e5686655c996ae95285b8ad7eb73d63d0b)
|
|
|
|
(cherry picked from commit 52ee92b8edf851939c5ea3dc90fac3f5f90096c2)
|
|
(cherry picked from commit 2c798f7b9064bc9833935eae534a885b97d34738)
|
|
|
|
|
|
Fix destination NAT template trying to map source->translation
instead of destination->translation.
Fixes https://phabricator.vyos.net/T3307
(cherry picked from commit 4a0504a96cf0f3078e964ed201f196fb55172e00)
|
|
|
|
(cherry picked from commit 2dc11253e46b945adb392c5946fd9ad43f391d86)
|
|
(cherry picked from commit e41857b6e179a7df20d15486847663be9676e376)
|
|
(cherry picked from commit b23323922939a9ac3b43e0761b0af84dc9e3b47e)
|
|
(cherry picked from commit b64b45c6a5b66b8d6b07ab5a03fccaeabb3677a9)
|
|
When configuring SSH to only run inside a given VRF the system can not start
SSHd on bootup as the Kernel will report EPERM (Operation not permitted) when
loading the VRF BPF program. This returns the exit code 255 which is marked
in the systemd unit file to stop restarting the service forever.
Removing this limitation will restart the SSHd on startup and it will live
inside the VRF till the end of days.
(cherry picked from commit cdbac8f10b470a06aff54832da7f006aa3ed194e)
|
|
The CLI statement "set interfaces openvpn vtun10 openvpn-option '--tun-mtu 1500
--fragment 1300 --mssfix'" will render in vtun10.conf to:
--tun-mtu 1500 --fragment 1300 --mssfix
On startup OpenVPN complains about:
openvpn-vtun10: Options error: Unrecognized option or missing or extra
parameter(s) in vtun10.conf:76: tun-mtu (2.4.7)
The options must be split on -- to a new configuration line.
(cherry picked from commit f8a8ee02d0ede240f555ffa558665df686df24a8)
|
|
(cherry picked from commit 3c33359d0c9700a1c80f1a222fe5f43642cd4fde)
|
|
(cherry picked from commit e1b2f1012ca18ef4ecf2b53e9bb01a50880cbd3c)
|
|
- Remove all old ifTable entries with the same ifName as newly appeared
interface (with different ifIndex) - this is the case on e.g. ppp interfaces
- Add new op-mode command "restart snmp" to restart the daemon
(cherry picked from commit 79a02470c4f9f2184913a959545b54a2dfd76d1e)
|
|
(cherry picked from commit fe2efbfb1a5b53225225b3c03c77a4a96a22a9c4)
|
|
(cherry picked from commit b6fe268876feeb151bd1f4c6b60356198f9408bc)
|
|
(cherry picked from commit 2cace1bdf16fe3e2644e897dcd65ca3899883461)
|
|
(cherry picked from commit 57fca79636b783dc4be2df1bc1ff12a0ce79d988)
|
|
(cherry picked from commit 806b1cb6eebce4a11a5d2496b062a93d5899746e)
|
|
This reverts commit ca61add5e7dea828c67ea074368196025f4cb4eb.
(cherry picked from commit a051c928aeb2a14250d57c8495c07474c92a8b61)
|
|
|
|
|
|
|
|
|
|
In this commit we add the segment routing portion for ISIS.
There's also an additional check that is added so that the
global block label ranges are properly configured. Also
added traffic engineering configurations as well.
|
|
A reference to a dictionary key obtained by a for loop can not be used to update
values inside that dictionaries key. You must use the original path to the
nested dictionaries key.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Basic proxy functionality is working but the squidguard smoketest still fails
as this is yet not implemented.
|