summaryrefslogtreecommitdiff
path: root/data
AgeCommit message (Collapse)Author
2021-06-28ipsec: T1441: switch from vti to xfrm interfacesChristian Poessinger
XFRM interfaces are similar to VTI devices in their basic functionality but offer several advantages: * No tunnel endpoint addresses have to be configured on the interfaces. Compared to VTIs, which are layer 3 tunnel devices with mandatory endpoints, this resolves issues with wildcard addresses (only one VTI with wildcard endpoints is supported), avoids a 1:1 mapping between SAs and interfaces, and easily allows SAs with multiple peers to share the same interface. * Because there are no endpoint addresses, IPv4 and IPv6 SAs are supported on the same interface (VTI devices only support one address family). * IPsec modes other than tunnel are supported (VTI devices only support tunnel mode). * No awkward configuration via GRE keys and XFRM marks. Instead, a new identifier (XFRM interface ID) links policies and SAs with XFRM interfaces.
2021-06-26nat: T1083: fix Jinja2 templating errorChristian Poessinger
Commit 166d44b3 ("nat: T1083: add translation options for persistent/random mapping of address and port") added support for persistent IP address and port mappings for NAT. Unfortunately one if clause got lost in translation.
2021-06-26nat: T1083: add translation options for persistent/random mapping of address ↵Igor Melnyk
and port Tested using: set destination rule 100 inbound-interface 'eth0' set destination rule 100 translation address '19.13.23.42' set destination rule 100 translation options address-mapping 'random' set destination rule 100 translation options port-mapping 'none' set source rule 1000 outbound-interface 'eth0' set source rule 1000 translation address '122.233.231.12' set source rule 1000 translation options address-mapping 'persistent' set source rule 1000 translation options port-mapping 'fully-random'
2021-06-25openvpn: T1704: drop deprecated disable-ncp optionChristian Poessinger
2021-06-24openvpn: T1512: T3641: drop deprecated "compat-names" optionChristian Poessinger
2021-06-24openvpn: T3641: remove deprecated iproute optionChristian Poessinger
Executing iproute2 commands as unprivileged member of the openvpn group is now handled via a sudoers file.
2021-06-22snmp: T3606: Install MIBs into well known locationChristian Poessinger
FRR also expects the MIBs in /usr/share/snmp/mibs
2021-06-16bgp: T3624: add "bandwidth" bestpath optionChristian Poessinger
2021-06-16policy: T3624: add extended community bandwith support to route-mapChristian Poessinger
2021-06-16policy: T3631: migrate "set extcommunity-rt/soo" to "set extcommunity rt|soo"Christian Poessinger
Thi adds a new configuration level "set extcommunity" which then holds rt and soo als leaf-nodes below. This is the foundational work required to properly implement T3624 ("BGP: add support for extended community bandwidth definition")
2021-06-15ipsec: T2816: T645: T3613: Migrated IPsec to swanctl, includes multiple ↵sarthurdev
selectors, and selectors with VTI.
2021-06-13snmp: T3606: fix unknown notification OIDChristian Poessinger
Commit 945300c6f5 ("snmp: mibs: import from vyatta-cfg-system") imported the MIBs from vyatta-cfg-system and provided them with a symlink to /usr/share/vyos/mibs. The symlink was never installed as the directory already existed. Adjust the MIBDIRS environment variable to load the MIBs from the proper VyOS folder and use no symlink at all.
2021-06-13wwan: T3620: rename "wirelessmodem wlm" interfaces to new wwan interface treeChristian Poessinger
2021-06-12ipsec: T57: Support disable on peer, tunnel, dmvpn profilesarthurdev
2021-06-12ipsec: T1501: T3617: Add handling for missing addresses on boot when using ↵sarthurdev
dhcp-interface
2021-06-08policy: T3605: add support to prefer IPv6 global next-hop address in route-mapChristian Poessinger
2021-06-07nhrp: T3599: adjust Jinja2 template to common style patternChristian Poessinger
2021-06-07ipsec: T2816: adjust Jinja2 template to common style patternChristian Poessinger
2021-06-06nhrp: T3599: Remove vpn_ipsec.py from configd until bug is resolvedsarthurdev
2021-06-06nhrp: T3599: Migrate NHRP to XML/Pythonsarthurdev
2021-06-03pppoe-server: T3593: Change called-sid position in templateEshenko Dmitriy
2021-06-01pppoe-server: T3593: Add extended-scripts featureEshenko Dmitriy
2021-05-31ipsec: T2816: Continued refactor, added proper ipsec-interfaces handlingSimon
2021-05-30bgp: T3590: limiting maximum number of prefixes to be sent to a peerChristian Poessinger
2021-05-29vti: ipsec: T2816: Fix vti-up-downsarthurdev
2021-05-28ipsec: T2816: IPSec python rework, includes DMVPN and VTI supportSimon
2021-05-27conntrack: T3535: add conntrack-sync supported vyos-configd servicesChristian Poessinger
2021-05-27conntrack: T3579: initial implementation with XML and PythonChristian Poessinger
2021-05-24isis: T3576: add IPv6 supportChristian Poessinger
2021-05-24isis: T3417: add CLI node to enable "log-adjacency-changes"Christian Poessinger
2021-05-24isis: T3417: ease Jinja2 template code for is-typeChristian Poessinger
2021-05-24isis: T3417: implement domain-password md5Christian Poessinger
2021-05-24isis: T3576: support metric and route-map when originating a default routeChristian Poessinger
2021-05-23router-advert: T3561: add support for specific routesMark Royds
Co-authored-by: Mark Royds <mark.royds@vitaminit.co.uk>
2021-05-22bgp: T3565: support multiple AS numbers for confederation peersChristian Poessinger
The BGP confederation peers node was not a multi node as supported by VyOS 1.2 and 1.3.
2021-05-21ndppd: T2518: Fix variable name errorJACK
2021-05-20snmp: mibs: import from vyatta-cfg-systemChristian Poessinger
2021-05-20sysctl: T3565: initial implementation in XML and PythonChristian Poessinger
migrate from old vyatta-cfg-system / Perl implementation.
2021-05-19ospfv3: T3554: add area-type "stub"Viacheslav Hletenko
2021-05-15dhcpv6-server: T3549: fix incorrect syntax for global name-server definitionChristian Poessinger
dhcp6.name-servers is a comma-delimited, multi-value list of name-servers that should only appear once in the dhcpdv6.conf file. (cherry picked from commit b05201724022d1a50a51d150abb4f444b2e1555e)
2021-05-15conntrack: T3535: add op-mode commands for tracked connections"Christian Poessinger
2021-05-15conntrack: T3535: bugfix on "expect-sync all"Christian Poessinger
Closing bracked "}" was placed on the wrong line inside the template leading to an invalid configuration syntax.
2021-05-15conntrack: T3535: add keepalived notifications for node transitionsChristian Poessinger
2021-05-15conntrack: T3535: add support for icmp6 and dccpChristian Poessinger
2021-05-14conntrack: T3535: remove deprecated options from templateChristian Poessinger
2021-05-14conntrack: T3535: migrate codebase from vyatta-conntrack-syncChristian Poessinger
2021-05-09bgp: T3530: add hyphen support for peer-group namesChristian Poessinger
2021-05-08vrf: bgp: T3523: bugfix Kernel route-map deploymentChristian Poessinger
Commit 4f9aa30f ("vrf: bgp: T3523: add route-map support for kernel routes") added the possibility to also filter BGP routes towards the OS kernel, but the smoketests failed. Reason was a non working CLI command applied to bgpd. Thus the VRF route-map and the BGP configuration is now split into two templates, one to be used for each daemon (zebra and bgpd). Nevertheless one more bug was found in vyos.frr which currently does not suppoort calling modify_section() inside a configuration "block". See [1] for more info. [1]: https://phabricator.vyos.net/T3529
2021-05-06vrf: isis: T3523: add route-map support for kernel routesChristian Poessinger
2021-05-06vrf: ospf: T3523: add route-map support for kernel routesChristian Poessinger
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-24 01:41:24 +0000