summaryrefslogtreecommitdiff
path: root/data
AgeCommit message (Collapse)Author
2021-01-30dhcpv6: T3240: support per-interface client DUIDsBrandon Stepler
(cherry picked from commit b23323922939a9ac3b43e0761b0af84dc9e3b47e)
2021-01-25pppoe: T3251: Add double-quotes to protect special charactersDmitriyEshenko
(cherry picked from commit b64b45c6a5b66b8d6b07ab5a03fccaeabb3677a9)
2021-01-18ssh: T3212: remove RestartPreventExitStatus from systemd unitChristian Poessinger
When configuring SSH to only run inside a given VRF the system can not start SSHd on bootup as the Kernel will report EPERM (Operation not permitted) when loading the VRF BPF program. This returns the exit code 255 which is marked in the systemd unit file to stop restarting the service forever. Removing this limitation will restart the SSHd on startup and it will live inside the VRF till the end of days. (cherry picked from commit cdbac8f10b470a06aff54832da7f006aa3ed194e)
2021-01-17openvpn: T2381: bugfix rendering multiple openvpn-options from CLIChristian Poessinger
The CLI statement "set interfaces openvpn vtun10 openvpn-option '--tun-mtu 1500 --fragment 1300 --mssfix'" will render in vtun10.conf to: --tun-mtu 1500 --fragment 1300 --mssfix On startup OpenVPN complains about: openvpn-vtun10: Options error: Unrecognized option or missing or extra parameter(s) in vtun10.conf:76: tun-mtu (2.4.7) The options must be split on -- to a new configuration line. (cherry picked from commit f8a8ee02d0ede240f555ffa558665df686df24a8)
2021-01-17ntp: T2185: store configuration in volatile /run areaChristian Poessinger
(cherry picked from commit 3c33359d0c9700a1c80f1a222fe5f43642cd4fde)
2021-01-16vrf: T31: migrate to get_config_dict()Christian Poessinger
(cherry picked from commit e1b2f1012ca18ef4ecf2b53e9bb01a50880cbd3c)
2021-01-15snmp: T652: enable interface_replace_old option and restart commandChristian Poessinger
- Remove all old ifTable entries with the same ifName as newly appeared interface (with different ifIndex) - this is the case on e.g. ppp interfaces - Add new op-mode command "restart snmp" to restart the daemon (cherry picked from commit 79a02470c4f9f2184913a959545b54a2dfd76d1e)
2021-01-15openvpn: T3219: fix for server client subnet IPv6 irouteJernej Jakob
(cherry picked from commit fe2efbfb1a5b53225225b3c03c77a4a96a22a9c4)
2021-01-15salt: T3157: Fix location for log filesever-sever
(cherry picked from commit b6fe268876feeb151bd1f4c6b60356198f9408bc)
2021-01-14is-is: T3210: Fix three-way-handshakesever-sever
(cherry picked from commit 2cace1bdf16fe3e2644e897dcd65ca3899883461)
2021-01-13ssh: T3212: do not make /run/sshd directory disappear on failureChristian Poessinger
(cherry picked from commit 57fca79636b783dc4be2df1bc1ff12a0ce79d988)
2021-01-13nat: T3186: fix negated addresses not applied from CLIChristian Poessinger
(cherry picked from commit 806b1cb6eebce4a11a5d2496b062a93d5899746e)
2021-01-12Revert "ntp: T2944: By default do not listen port 123 on any address"sever-sever
This reverts commit ca61add5e7dea828c67ea074368196025f4cb4eb. (cherry picked from commit a051c928aeb2a14250d57c8495c07474c92a8b61)
2021-01-07login: radius: T3192: migrate to get_config_dict()Christian Poessinger
2021-01-07ssh: T2635: harden Jinja2 template and daemon startupChristian Poessinger
2021-01-07ssh: T2635: change sshd_config path to /run/sshdChristian Poessinger
2021-01-07login: radius: T3192: support IPv6 server(s) and source-addressChristian Poessinger
2021-01-05ISIS: T3156: Adding segment routing for ISISCheeze_It
In this commit we add the segment routing portion for ISIS. There's also an additional check that is added so that the global block label ranges are properly configured. Also added traffic engineering configurations as well.
2021-01-03dhcp: T3180: bugfix assignment of sliced ranges to config dictChristian Poessinger
A reference to a dictionary key obtained by a for loop can not be used to update values inside that dictionaries key. You must use the original path to the nested dictionaries key.
2020-12-31openvpn: T2994: fix ipv6 server modeChristian Poessinger
2020-12-30pppoe-server: T3162: Add generation pado-delay to jinja2 templateDmitriyEshenko
2020-12-29pppoe-server: T3160: Move called-sid param to required sectionDmitriyEshenko
2020-12-29ethernet: T1466: add EAPoL supportChristian Poessinger
2020-12-28webproxy: T563: squidguard: support default rulesetChristian Poessinger
2020-12-28webproxy: T563: add squidguard bodyChristian Poessinger
2020-12-28webproxy: T563: improve handling of cache-peersChristian Poessinger
2020-12-28webproxy: T563: migrate from old Perl code to XML and get_config_dict()Christian Poessinger
Basic proxy functionality is working but the squidguard smoketest still fails as this is yet not implemented.
2020-12-22Merge pull request #657 from Cheeze-It/currentChristian Poessinger
mpls: T915: Add ordered control for LDP
2020-12-22mpls: T915: Add ordered control for LDPCheeze_It
In here we are adding the latest FRR update to allow for LDP label distribution to operate in ordered control mode.
2020-12-21openvpn: T3143: Push routes in correct format <IP> <NETMASK>DmitriyEshenko
2020-12-21flow-accounting: T3141: remove legacy jinja2 templateJan-Philipp Benecke
2020-12-20flow-accounting: T3141: Fixing wrongly formated configJan-Philipp Benecke
2020-12-20wifi: T3043: country-code should be lower caseChristian Poessinger
2020-12-20Merge pull request #647 from jpbede/feature/flowacc-enable-egressChristian Poessinger
flow-accounting: T3132: enable egress traffic accounting
2020-12-17T3135: bfd template missing newlinesbedmisten
trim blocks removes newlines after {% endif %} blocks. Added the required newlines.
2020-12-17flow-accounting: T3132: enable egress traffic accountingJan-Philipp Benecke
2020-12-12dhcpv6-pd: pppoe: T2677: always restart daemonChristian Poessinger
2020-12-09dns: T3121: recursion zone bugfixNEOMorphey
2020-12-09Merge pull request #639 from Cheeze-It/currentChristian Poessinger
mpls-conf: T915: Add LDP import and export control
2020-12-08mpls-conf: T915: Add LDP import and export controlCheeze_It
In this commit we added the ability to control import and export of LDP FECs. This allows for an operator to specify which to filter on ingress, and which to not announce on egress.
2020-12-08openvpn: T3117: fix generated ncp-ciphers in server configChristian Poessinger
2020-12-08bgp: T2174: Fix Template. Update to use FRRConfig frameworksever-sever
2020-12-07Merge pull request #636 from c-po/t2562-dhcpChristian Poessinger
dhcp: T2562: add "listen-address" CLI node for better DHCP relay support
2020-12-06Merge pull request #635 from Cheeze-It/currentChristian Poessinger
mpls-conf: T915: Add LDP local label allocation control
2020-12-06dhcpv6: T3100: migrate server configuration to get_config_dict()Christian Poessinger
2020-12-06dhcp: T2562: add "listen-address" CLI node for better DHCP relay supportChristian Poessinger
Running ISC DHCP server as backend server for multiple pools served to relay agents requires DHCPd to explicitly listen on give interfaces or a "transit" subnet declaration facing the network where we receive the DHCPREQ messages on. This implements a new "listen-address" CLI node, the given address is validated if it is assigned to the system and upon success, a proper "subnet { }" statement is added into dhcpd.conf
2020-12-06dhcp: T3113: bugfix for multiple domain-search entriesChristian Poessinger
While rewriting the code to get_config_dict() in commit 84b7ade286 ("dhcp: T3100: migrate server configuration to get_config_dict()") a regression was added not properly joining strings when multiple search-somains had been given. Wrong: domain-search "domain1, domain2"; Correct: domain-search "domain1", "domain2";
2020-12-06mpls-conf: T915: Add LDP local label allocation control.Cheeze_It
In this commit we added the ability to control the local label allocation control for FECs. It allows for the router to not allocate a label for every interface, just the interfaces that are desired by the operator.
2020-12-04dhcp: T3100: migrate server configuration to get_config_dict()Christian Poessinger
2020-12-04pppoe: T3112: drop "ipv6 enable" optionChristian Poessinger
IPv6 enable can be considered once the ipv6 node is present!
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-30 11:11:41 +0000