Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-06-29 | pki: ipsec: T3642: Migrate IPSec to use PKI configuration | sarthurdev | |
2021-06-29 | pki: T3642: New PKI config and management | sarthurdev | |
2021-06-26 | nat: T1083: fix Jinja2 templating error | Christian Poessinger | |
Commit 166d44b3 ("nat: T1083: add translation options for persistent/random mapping of address and port") added support for persistent IP address and port mappings for NAT. Unfortunately one if clause got lost in translation. | |||
2021-06-26 | nat: T1083: add translation options for persistent/random mapping of address ↵ | Igor Melnyk | |
and port Tested using: set destination rule 100 inbound-interface 'eth0' set destination rule 100 translation address '19.13.23.42' set destination rule 100 translation options address-mapping 'random' set destination rule 100 translation options port-mapping 'none' set source rule 1000 outbound-interface 'eth0' set source rule 1000 translation address '122.233.231.12' set source rule 1000 translation options address-mapping 'persistent' set source rule 1000 translation options port-mapping 'fully-random' | |||
2021-06-25 | openvpn: T1704: drop deprecated disable-ncp option | Christian Poessinger | |
2021-06-24 | openvpn: T1512: T3641: drop deprecated "compat-names" option | Christian Poessinger | |
2021-06-24 | openvpn: T3641: remove deprecated iproute option | Christian Poessinger | |
Executing iproute2 commands as unprivileged member of the openvpn group is now handled via a sudoers file. | |||
2021-06-22 | snmp: T3606: Install MIBs into well known location | Christian Poessinger | |
FRR also expects the MIBs in /usr/share/snmp/mibs | |||
2021-06-16 | bgp: T3624: add "bandwidth" bestpath option | Christian Poessinger | |
2021-06-16 | policy: T3624: add extended community bandwith support to route-map | Christian Poessinger | |
2021-06-16 | policy: T3631: migrate "set extcommunity-rt/soo" to "set extcommunity rt|soo" | Christian Poessinger | |
Thi adds a new configuration level "set extcommunity" which then holds rt and soo als leaf-nodes below. This is the foundational work required to properly implement T3624 ("BGP: add support for extended community bandwidth definition") | |||
2021-06-15 | ipsec: T2816: T645: T3613: Migrated IPsec to swanctl, includes multiple ↵ | sarthurdev | |
selectors, and selectors with VTI. | |||
2021-06-13 | snmp: T3606: fix unknown notification OID | Christian Poessinger | |
Commit 945300c6f5 ("snmp: mibs: import from vyatta-cfg-system") imported the MIBs from vyatta-cfg-system and provided them with a symlink to /usr/share/vyos/mibs. The symlink was never installed as the directory already existed. Adjust the MIBDIRS environment variable to load the MIBs from the proper VyOS folder and use no symlink at all. | |||
2021-06-13 | wwan: T3620: rename "wirelessmodem wlm" interfaces to new wwan interface tree | Christian Poessinger | |
2021-06-12 | ipsec: T57: Support disable on peer, tunnel, dmvpn profile | sarthurdev | |
2021-06-12 | ipsec: T1501: T3617: Add handling for missing addresses on boot when using ↵ | sarthurdev | |
dhcp-interface | |||
2021-06-08 | policy: T3605: add support to prefer IPv6 global next-hop address in route-map | Christian Poessinger | |
2021-06-07 | nhrp: T3599: adjust Jinja2 template to common style pattern | Christian Poessinger | |
2021-06-07 | ipsec: T2816: adjust Jinja2 template to common style pattern | Christian Poessinger | |
2021-06-06 | nhrp: T3599: Remove vpn_ipsec.py from configd until bug is resolved | sarthurdev | |
2021-06-06 | nhrp: T3599: Migrate NHRP to XML/Python | sarthurdev | |
2021-06-03 | pppoe-server: T3593: Change called-sid position in template | Eshenko Dmitriy | |
2021-06-01 | pppoe-server: T3593: Add extended-scripts feature | Eshenko Dmitriy | |
2021-05-31 | ipsec: T2816: Continued refactor, added proper ipsec-interfaces handling | Simon | |
2021-05-30 | bgp: T3590: limiting maximum number of prefixes to be sent to a peer | Christian Poessinger | |
2021-05-29 | vti: ipsec: T2816: Fix vti-up-down | sarthurdev | |
2021-05-28 | ipsec: T2816: IPSec python rework, includes DMVPN and VTI support | Simon | |
2021-05-27 | conntrack: T3535: add conntrack-sync supported vyos-configd services | Christian Poessinger | |
2021-05-27 | conntrack: T3579: initial implementation with XML and Python | Christian Poessinger | |
2021-05-24 | isis: T3576: add IPv6 support | Christian Poessinger | |
2021-05-24 | isis: T3417: add CLI node to enable "log-adjacency-changes" | Christian Poessinger | |
2021-05-24 | isis: T3417: ease Jinja2 template code for is-type | Christian Poessinger | |
2021-05-24 | isis: T3417: implement domain-password md5 | Christian Poessinger | |
2021-05-24 | isis: T3576: support metric and route-map when originating a default route | Christian Poessinger | |
2021-05-23 | router-advert: T3561: add support for specific routes | Mark Royds | |
Co-authored-by: Mark Royds <mark.royds@vitaminit.co.uk> | |||
2021-05-22 | bgp: T3565: support multiple AS numbers for confederation peers | Christian Poessinger | |
The BGP confederation peers node was not a multi node as supported by VyOS 1.2 and 1.3. | |||
2021-05-21 | ndppd: T2518: Fix variable name error | JACK | |
2021-05-20 | snmp: mibs: import from vyatta-cfg-system | Christian Poessinger | |
2021-05-20 | sysctl: T3565: initial implementation in XML and Python | Christian Poessinger | |
migrate from old vyatta-cfg-system / Perl implementation. | |||
2021-05-19 | ospfv3: T3554: add area-type "stub" | Viacheslav Hletenko | |
2021-05-15 | dhcpv6-server: T3549: fix incorrect syntax for global name-server definition | Christian Poessinger | |
dhcp6.name-servers is a comma-delimited, multi-value list of name-servers that should only appear once in the dhcpdv6.conf file. (cherry picked from commit b05201724022d1a50a51d150abb4f444b2e1555e) | |||
2021-05-15 | conntrack: T3535: add op-mode commands for tracked connections" | Christian Poessinger | |
2021-05-15 | conntrack: T3535: bugfix on "expect-sync all" | Christian Poessinger | |
Closing bracked "}" was placed on the wrong line inside the template leading to an invalid configuration syntax. | |||
2021-05-15 | conntrack: T3535: add keepalived notifications for node transitions | Christian Poessinger | |
2021-05-15 | conntrack: T3535: add support for icmp6 and dccp | Christian Poessinger | |
2021-05-14 | conntrack: T3535: remove deprecated options from template | Christian Poessinger | |
2021-05-14 | conntrack: T3535: migrate codebase from vyatta-conntrack-sync | Christian Poessinger | |
2021-05-09 | bgp: T3530: add hyphen support for peer-group names | Christian Poessinger | |
2021-05-08 | vrf: bgp: T3523: bugfix Kernel route-map deployment | Christian Poessinger | |
Commit 4f9aa30f ("vrf: bgp: T3523: add route-map support for kernel routes") added the possibility to also filter BGP routes towards the OS kernel, but the smoketests failed. Reason was a non working CLI command applied to bgpd. Thus the VRF route-map and the BGP configuration is now split into two templates, one to be used for each daemon (zebra and bgpd). Nevertheless one more bug was found in vyos.frr which currently does not suppoort calling modify_section() inside a configuration "block". See [1] for more info. [1]: https://phabricator.vyos.net/T3529 | |||
2021-05-06 | vrf: isis: T3523: add route-map support for kernel routes | Christian Poessinger | |