Age | Commit message (Collapse) | Author |
|
(cherry picked from commit b64b45c6a5b66b8d6b07ab5a03fccaeabb3677a9)
|
|
When configuring SSH to only run inside a given VRF the system can not start
SSHd on bootup as the Kernel will report EPERM (Operation not permitted) when
loading the VRF BPF program. This returns the exit code 255 which is marked
in the systemd unit file to stop restarting the service forever.
Removing this limitation will restart the SSHd on startup and it will live
inside the VRF till the end of days.
(cherry picked from commit cdbac8f10b470a06aff54832da7f006aa3ed194e)
|
|
The CLI statement "set interfaces openvpn vtun10 openvpn-option '--tun-mtu 1500
--fragment 1300 --mssfix'" will render in vtun10.conf to:
--tun-mtu 1500 --fragment 1300 --mssfix
On startup OpenVPN complains about:
openvpn-vtun10: Options error: Unrecognized option or missing or extra
parameter(s) in vtun10.conf:76: tun-mtu (2.4.7)
The options must be split on -- to a new configuration line.
(cherry picked from commit f8a8ee02d0ede240f555ffa558665df686df24a8)
|
|
(cherry picked from commit 3c33359d0c9700a1c80f1a222fe5f43642cd4fde)
|
|
(cherry picked from commit e1b2f1012ca18ef4ecf2b53e9bb01a50880cbd3c)
|
|
- Remove all old ifTable entries with the same ifName as newly appeared
interface (with different ifIndex) - this is the case on e.g. ppp interfaces
- Add new op-mode command "restart snmp" to restart the daemon
(cherry picked from commit 79a02470c4f9f2184913a959545b54a2dfd76d1e)
|
|
(cherry picked from commit fe2efbfb1a5b53225225b3c03c77a4a96a22a9c4)
|
|
(cherry picked from commit b6fe268876feeb151bd1f4c6b60356198f9408bc)
|
|
(cherry picked from commit 2cace1bdf16fe3e2644e897dcd65ca3899883461)
|
|
(cherry picked from commit 57fca79636b783dc4be2df1bc1ff12a0ce79d988)
|
|
(cherry picked from commit 806b1cb6eebce4a11a5d2496b062a93d5899746e)
|
|
This reverts commit ca61add5e7dea828c67ea074368196025f4cb4eb.
(cherry picked from commit a051c928aeb2a14250d57c8495c07474c92a8b61)
|
|
|
|
|
|
|
|
|
|
In this commit we add the segment routing portion for ISIS.
There's also an additional check that is added so that the
global block label ranges are properly configured. Also
added traffic engineering configurations as well.
|
|
A reference to a dictionary key obtained by a for loop can not be used to update
values inside that dictionaries key. You must use the original path to the
nested dictionaries key.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Basic proxy functionality is working but the squidguard smoketest still fails
as this is yet not implemented.
|
|
mpls: T915: Add ordered control for LDP
|
|
In here we are adding the latest FRR update to
allow for LDP label distribution to operate in
ordered control mode.
|
|
|
|
|
|
|
|
|
|
flow-accounting: T3132: enable egress traffic accounting
|
|
trim blocks removes newlines after {% endif %} blocks. Added the required newlines.
|
|
|
|
|
|
|
|
mpls-conf: T915: Add LDP import and export control
|
|
In this commit we added the ability to control import and export
of LDP FECs. This allows for an operator to specify which to
filter on ingress, and which to not announce on egress.
|
|
|
|
|
|
dhcp: T2562: add "listen-address" CLI node for better DHCP relay support
|
|
mpls-conf: T915: Add LDP local label allocation control
|
|
|
|
Running ISC DHCP server as backend server for multiple pools served to relay
agents requires DHCPd to explicitly listen on give interfaces or a "transit"
subnet declaration facing the network where we receive the DHCPREQ messages on.
This implements a new "listen-address" CLI node, the given address is validated
if it is assigned to the system and upon success, a proper "subnet { }" statement
is added into dhcpd.conf
|
|
While rewriting the code to get_config_dict() in commit 84b7ade286 ("dhcp: T3100:
migrate server configuration to get_config_dict()") a regression was added not
properly joining strings when multiple search-somains had been given.
Wrong: domain-search "domain1, domain2";
Correct: domain-search "domain1", "domain2";
|
|
In this commit we added the ability to control the local label allocation
control for FECs. It allows for the router to not allocate a label for every
interface, just the interfaces that are desired by the operator.
|
|
|
|
IPv6 enable can be considered once the ipv6 node is present!
|
|
isis: T1316: Fix isis delete section. Use an updated frr framework
|