Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-09-04 | bgp: T3798: "replace-as" option can only be used when "no-prepend" is defined | Christian Poessinger | |
Commit 5f1c1ae4 ("bgp: T3798: add support for neighbor local-as <n> replace-as") added support for a new CLI option when the local-as is changed for a specified neighbor or peer-group. There was an error in the CLI / design as the "replace-as" option can only be used when "no-prepend" is defined. Thus "no-prepend" became a <node> and the new "replace-as" leafNode is now a child of "no-prepend". | |||
2021-09-03 | bgp: T3798: add support for neighbor local-as <n> replace-as | Christian Poessinger | |
2021-08-29 | xml: add missing "u32:" value declarator on integer ranges | Christian Poessinger | |
2021-08-29 | ospf: T3236: add possibility to redistribute "table" | Christian Poessinger | |
Add new CLI command: * "set protocols ospf redistribute table <n>" | |||
2021-08-29 | ospf: xml: T3236: update help strings | Christian Poessinger | |
2021-08-24 | bgp: T3759: "l2vpn evpn" and ipv4/ipv6 safi route-targets differ | Christian Poessinger | |
The "l2vpn evpn" address-family route-target command only accepts a single route-target value consisting of (A.B.C.D:MN|EF:OPQR|GHJK:MN). The "ipv4-unicast or ipv6-unicast" address-family route-target command for VPNs support multiple, whitespace separated route-target values. This commit adds a new custom validator named "bgp-route-target" with a --single and a --multi option to pass one or more route-target values. | |||
2021-08-21 | pppoe: T1318: implement missing access-concentrator CLI option | Christian Poessinger | |
2021-08-21 | xml: interfaces: use one common building block for "disable-forwarding" | Christian Poessinger | |
Both building blocks only differed in the help text, so use IP for both IPv4 and IPv6. | |||
2021-08-21 | interfaces: T3090: migrate adjust-mss from "firewall options" to "interface" ↵ | Christian Poessinger | |
level Getting rid of "set firewall options" and move it from: set firewall options interface ethX adjust-mss 1400 set firewall options interface ethX adjust-mss6 1400 to: set interfaces ethernet ethX ip adjust-mss 1400 set interfaces ethernet ethX ipv6 adjust-mss 1400 In addition add an extra option called clamp-mss-to-pmtu instead of a value. | |||
2021-08-20 | bgp: T3759: add IPv4/IPv6 unicast AFI route-map for VPN import/export | Christian Poessinger | |
This adds the following new commands: set protocols bgp address-family ipv4-unicast route-map vpn export foo-map-out set protocols bgp address-family ipv4-unicast route-map vpn import foo-map-in set protocols bgp address-family ipv6-unicast route-map vpn export foo-map-out set protocols bgp address-family ipv6-unicast route-map vpn import foo-map-in | |||
2021-08-20 | bgp: T3759: fix DOS -> UNIX line endings on route-target building blocks | Christian Poessinger | |
2021-08-20 | bgp: T3759: create common export/import building block for re-usable route-maps | Christian Poessinger | |
2021-08-20 | xml: remove superfluous "interface" prefix from interface includes | Christian Poessinger | |
2021-08-18 | bgp: T3759: add l3vpn "route-target vpn" commands | Christian Poessinger | |
Add the following new commands: * set protocols bgp address-family ipv4-unicast route-target vpn both 1.1.1.1:100 * set protocols bgp address-family ipv4-unicast route-target vpn export 1.1.1.1:100 * set protocols bgp address-family ipv4-unicast route-target vpn import 1.1.1.1:100 | |||
2021-08-18 | bgp: evpn: T1513: re-structure route-target XML blocks | Christian Poessinger | |
Make the both, export and import XML block re-usable by the IPv4 AFI. | |||
2021-08-18 | bgp: T3759: fix "label vpn" help string | Christian Poessinger | |
2021-08-18 | bgp: T3759: add l3vpn "rd" route-distinguisher commands | Christian Poessinger | |
Add the following new commands: * set protocols bgp address-family ipv4-unicast rd vpn export * set protocols bgp address-family ipv6-unicast rd vpn export | |||
2021-08-18 | bgp: T3759: add l3vpn "label vpn export" commands | Christian Poessinger | |
Add the following new commands: * set protocols bgp address-family ipv4-unicast label vpn export (auto | 0-1048575) * set protocols bgp address-family ipv6-unicast label vpn export (auto | 0-1048575) | |||
2021-08-18 | bgp: T3759: import/export is for AFI "ipv4 unicast" not "ipv4 multicast" | Christian Poessinger | |
2021-08-17 | bgp: T3759: add l3vpn "import vrf" commands | Christian Poessinger | |
2021-08-17 | bgp: T3759: add l3vpn import/export vpn command for IPv4/IPv6 AFI | Christian Poessinger | |
2021-08-17 | bgp: T2174: create building block for path-limit which is used in IPv4/IPv6 AFI | Christian Poessinger | |
2021-08-17 | xml: include: add error message to port-number | Christian Poessinger | |
2021-08-17 | isis: T1316: use common redistribute XML building block for IPv4 and IPv6 | Christian Poessinger | |
2021-08-15 | ospf: T3757: support to configure area at an interface level | Christian Poessinger | |
FRR supports configuring either network prefixes per area, or assign an interface to an area to participate in the routing process. This is already well known from other venders and supported by FRR. A valid VyOS OSPF configuration would then look like: vyos@vyos# show protocols ospf { interface dum0 { area 0 } interface eth0.201 { area 0 authentication { md5 { key-id 10 { md5-key vyos } } } dead-interval 40 hello-interval 10 priority 1 retransmit-interval 5 transmit-delay 1 } log-adjacency-changes { detail } parameters { abr-type cisco router-id 172.18.254.201 } passive-interface default passive-interface-exclude eth0.201 } | |||
2021-08-15 | conntrack: T3275: migrate 'disable' syntax to 'enable' syntax for the new ↵ | Lulu Cathrinus Grimalkin | |
default behavior | |||
2021-08-11 | bgp: T3739: add common route-distinguisher XML building block | Christian Poessinger | |
2021-08-01 | Merge pull request #943 from Cheeze-It/current | Christian Poessinger | |
isis: T3693: Adding IPv6 redistribution to ISIS | |||
2021-07-31 | isis: T3693: Adding IPv6 redistribution to ISIS | Cheeze_It | |
In this commit we add the ability to redistribute into ISIS for IPv6 address family. | |||
2021-07-30 | bgp: T1176: Add solo option for neighbor | Viacheslav | |
2021-07-25 | xml: add building block for RADIUS nas-identifier | Christian Poessinger | |
2021-07-22 | xml: add building block for "local-users" | Christian Poessinger | |
2021-07-20 | pki: eapol: T3642: Migrate EAPoL to use PKI configuration | sarthurdev | |
2021-07-17 | xml: provide common "pre-shared-secret" include block | Christian Poessinger | |
2021-07-17 | xml: provide common "dhcp-interface" include block | Christian Poessinger | |
2021-07-07 | pki: T3642: Migrate rsa-keys to PKI configuration | sarthurdev | |
2021-07-04 | ipsec: T1210: T1251: add "local" traffic-selector include definition | Christian Poessinger | |
Used by both site2site and remote-access/road-warrior VPN connections. | |||
2021-07-04 | ipsec: T2816: add include definition for ipsec local-address | Christian Poessinger | |
2021-07-03 | ipsec: T2816: provide x509 certificate base auth building blocks | Christian Poessinger | |
2021-07-03 | ipsec: T2816: provide esp and ike-group XML building block | Christian Poessinger | |
2021-07-02 | xml: provide building block for a generic description node | Christian Poessinger | |
2021-07-01 | Merge branch 'pki_ipsec' of https://github.com/sarthurdev/vyos-1x into pki-cli | Christian Poessinger | |
* 'pki_ipsec' of https://github.com/sarthurdev/vyos-1x: pki: ipsec: T3642: Update migration script to account for file permission issues pki: ipsec: T3642: Migrate IPSec to use PKI configuration pki: T3642: New PKI config and management | |||
2021-06-29 | pki: ipsec: T3642: Migrate IPSec to use PKI configuration | sarthurdev | |
2021-06-29 | pppoe-server: T3405: Add interface cache feature | DmitriyEshenko | |
2021-06-29 | pki: T3642: New PKI config and management | sarthurdev | |
2021-06-26 | nat: T1083: add translation options for persistent/random mapping of address ↵ | Igor Melnyk | |
and port Tested using: set destination rule 100 inbound-interface 'eth0' set destination rule 100 translation address '19.13.23.42' set destination rule 100 translation options address-mapping 'random' set destination rule 100 translation options port-mapping 'none' set source rule 1000 outbound-interface 'eth0' set source rule 1000 translation address '122.233.231.12' set source rule 1000 translation options address-mapping 'persistent' set source rule 1000 translation options port-mapping 'fully-random' | |||
2021-06-22 | sstp-l2tp: T3636: Add ipv6 options | Viacheslav | |
2021-06-16 | bgp: T3624: add "bandwidth" bestpath option | Christian Poessinger | |
2021-06-13 | wwan: T3622: add support for APN authentication | Christian Poessinger | |
Some APNs require a username/password. Add CLI nodes (matching the PPPoE syntax) for client authentication. One APN would be the IPv4/IPv6 APN from Deutsche Telekom (Germany) APN Name: Telekom Internet IPv6 APN: internet.v6.telekom Benutzername: telekom Passwort: tm (cherry picked from commit c667a45a8fb06cb76c907348c4f1e3ec708b6e03) | |||
2021-06-10 | xml: ssh: move user/group definition to includable files | Christian Poessinger | |