Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-04-01 | xml: T5738: extend VRF building blocks with common constraint definition | Christian Breunig | |
2024-03-31 | bgp: T6151: Fix description in PEER disable-connected-check | fett0 | |
2024-03-29 | bgp: T6151: Fix description in PEER disable-connected-check | fett0 | |
2024-03-29 | bgp: T6151: Allow configuration of disable-ebgp-connected-route-check | fett0 | |
2024-03-29 | bgp: T6010: Allow configuration of disable-ebgp-connected-route-check | fett0 | |
2024-03-28 | ipsec: T5606: T5871: Use multi node for CA certificates | sarthurdev | |
This changes behaviour from fetching CA chain in PKI, to the user manually setting CA certificates. Prevents unwanted parent CAs existing in PKI from being auto-included as may not be desired/intended. | |||
2024-03-25 | T6171: migrate <set service dhcp-server failover> to <set service ↵ | Nicolas Fort | |
dhcp-server high-availability>. | |||
2024-03-24 | xml: T5738: use common constraint include for container network | Christian Breunig | |
2024-03-20 | bridge: T6125: support 802.1ad (ethertype 0x88a8) VLAN filtering | Christian Breunig | |
Linux bridge uses EtherType 0x8100 by default. In some scenarios, an EtherType value of 0x88A8 is required. Reusing CLI command from VIF-S (QinQ) interfaces: set interfaces bridge br0 protocol 802.1ad | |||
2024-03-19 | Merge pull request #3131 from HollyGurza/T1871 | Christian Breunig | |
qos: T1871: add MTU option when configure limiter traffic-policy | |||
2024-03-18 | qos: T1871: add MTU option when configure limiter traffic-policy | khramshinr | |
add mtu to default and specified class update smoke test | |||
2024-03-12 | conntrack: T4022: add RTSP conntrack helper | Indrek Ardel | |
2024-03-10 | xml: T6098: relax description constraint to allow non-ascii characters | John Estabrook | |
A restriction to ascii in the constraint disallowed earlier support for unicode bytes. | |||
2024-03-10 | dhcp-client: T6093: extend regex for client class-id's with DOT | Lucas | |
The regex used is not working if the string contains dots. Originally authored by: Lucas <pinheirolucas@pm.me> | |||
2024-03-10 | xml: T5738: revert invalid change from lower character limit - 0 length must ↵ | Christian Breunig | |
be allowed This reverts a change from commit a72ededa0 ("xml: T5738: lower maximum description to 255 characters") which incresaed the lower limit from 0 to 1. We actually require 0 length value for description nodes as introduced in commit 6eea12512e ("xml: T1579: allow zero length for description"). | |||
2024-03-10 | xml: T5738: lower maximum description to 255 characters | Christian Breunig | |
e.g. Linux Kernel only supports 255 and not 256 characters for the ifalias field. | |||
2024-03-05 | xml: T5738: use generic-disable-node building block for "disable" CLI nodes | Christian Breunig | |
Make the code more uniform and maintainable. | |||
2024-03-03 | ospfv3: T6087: add support to redistribute IS-IS routes | Christian Breunig | |
2024-03-02 | ospfv3: T5717: allow metric and metric-type on redistributed routes | Christian Breunig | |
Example: vyos@vyos# set protocols ospfv3 redistribute bgp Possible completions: metric OSPF default metric metric-type OSPF metric type for default routes (default: 2) route-map Specify route-map name to use | |||
2024-02-28 | dhcp-server: T6079: Increment Kea migrator versions | sarthurdev | |
2024-02-23 | pki: T3642: Fix typo in PKI includes | sarthurdev | |
2024-02-20 | T6050: Fixed descriptions of 'extended-scripts' commands in accel-ppp | aapostoliuk | |
Removed word 'PPPoE' from descriptions in common template for all accel-ppp services. | |||
2024-02-16 | Merge pull request #3016 from c-po/nht | Christian Breunig | |
T6001: add option to disable next-hop-tracking resolve-via-default | |||
2024-02-16 | T6001: add option to disable next-hop-tracking resolve-via-default | Christian Breunig | |
* set system ip nht no-resolve-via-default * set system ipv6 nht no-resolve-via-default | |||
2024-02-15 | Merge pull request #3004 from aapostoliuk/T6029-circinus | Daniil Baturin | |
T6029: Rewritten Accel-PPP services to an identical feature set | |||
2024-02-15 | T6029: Rewritten Accel-PPP services to an identical feature set | aapostoliuk | |
Removed dhcp-interface option (l2tp) Added wins-server (sstp) Added description (ipoe, pppoe, sstp, pptp) Added exteded-script (l2tp, sstp, pptp) Added shaper (ipoe, pptp, sstp, l2tp) Added limits (ipoe, pptp, sstp, l2tp) Added snmp ( ipoe, pptp,sstp, l2tp) Refactoring and reformated code. | |||
2024-02-14 | eigrp: T2472: improve code for later tests | Christian Breunig | |
2024-02-13 | Merge pull request #2987 from c-po/evpn-macvrf-soo | Christian Breunig | |
bgp: T6032: add EVPN MAC-VRF Site-of-Origin support | |||
2024-02-13 | Merge pull request #2988 from c-po/pki-rpki-t6034 | Christian Breunig | |
rpki: T6034: move file based SSH keys for authentication to PKI subsystem | |||
2024-02-13 | dhcpv6-server: T5993: Add subnet `interface` node, link subnet to locally ↵ | sarthurdev | |
connected interfaces Prior dhcpd behaviour implicitly handled requests for locally connected subnets. Kea requires an explicit link between subnets and an interface. | |||
2024-02-11 | Merge pull request #2980 from c-po/srv6-T5849 | Daniil Baturin | |
srv6: T5849: add segment support to "protocols static route6" | |||
2024-02-11 | pki: T6034: add OpenSSH key support | Christian Breunig | |
set pki openssh rpki private key ... set pki openssh rpki public key ... set pki openssh rpki public type 'ssh-rsa' | |||
2024-02-11 | bgp: T6032: add EVPN MAC-VRF Site-of-Origin support | Christian Breunig | |
In some EVPN deployments it is useful to associate a logical VTEP's Layer 2 domain (MAC-VRF) with a Site-of-Origin "site" identifier. This provides a BGP topology-independent means of marking and import-filtering EVPN routes originated from a particular L2 domain. One situation where this is valuable is when deploying EVPN using anycast VTEPs set protocols bgp address-family l2vpn-evpn mac-vrf soo | |||
2024-02-11 | srv6: T5849: add segment support to "protocols static route6" | Christian Breunig | |
* set protocols static route6 <prefix> next-hop <address> segments 'x:x::x:x/y:y::y/z::z' * set protocols static route6 <prefix> interface <interface> segments 'x:x::x:x/y:y::y/z::z' | |||
2024-02-10 | bgp: T6010: support setting multiple values for neighbor path-attribute | Christian Breunig | |
2024-02-10 | xml: T5738: improve PKI building blocks for CLI | Christian Breunig | |
2024-02-08 | Merge pull request #2950 from aapostoliuk/T5960-circinus | Daniil Baturin | |
T5960: Rewritten authentication node in PPTP to a single view | |||
2024-02-07 | bgp: T6024: add additional missing FRR features | Christian Breunig | |
* set protocols bgp parameters labeled-unicast <explicit-null | ipv4-explicit-null | ipv6-explicit-null> * set protocols bgp parameters allow-martian-nexthop * set protocols bgp parameters no-hard-administrative-reset" | |||
2024-02-07 | T5960: Rewritten authentication node in PPTP to a single view | aapostoliuk | |
Rewritten authentication node in accel-ppp services to a single view. In particular - PPTP authentication. | |||
2024-02-06 | Merge pull request #2936 from c-po/rpki-T6011 | Daniil Baturin | |
rpki: T6011: known-hosts-file is no longer supported by FRR | |||
2024-02-03 | rpki: T6011: known-hosts-file is no longer supported by FRR | Christian Breunig | |
2024-02-03 | ipsec: T5998: add replay-windows setting | Christian Breunig | |
The replay_window for child SA will always be 32 (hence enabled). Add a CLI node to explicitly change this. * set vpn ipsec site-to-site peer <name> replay-window <0-2040> | |||
2024-02-02 | Merge pull request #2889 from sarthurdev/kea-hooks | Christian Breunig | |
dhcpv6: T3771: Installation of routes for delegated prefixes, add excluded-prefix to PD | |||
2024-02-02 | Merge pull request #2891 from aapostoliuk/T5971-circinus | Viacheslav Hletenko | |
T5971: Rewritten ppp options in accel-ppp services | |||
2024-02-01 | Merge pull request #2756 from nicolas-fort/T4839 | Christian Breunig | |
T4839: firewall: Add dynamic address group in firewall configuration | |||
2024-02-01 | Merge pull request #2860 from indrajitr/ddclient-update-20240119 | Christian Breunig | |
ddclient: T5966: Adjust dynamic dns config address subpath | |||
2024-02-01 | Merge pull request #2914 from aapostoliuk/T5930-circinus | Christian Breunig | |
bgp: T5930: Denied using rt vpn 'export/import' with 'both' together | |||
2024-02-01 | bgp: T5930: Denied using rt vpn 'export/import' with 'both' together | aapostoliuk | |
Denied using command 'route-target vpn export/import' with 'both' together in bgp configuration. | |||
2024-02-01 | Merge pull request #2887 from nicolas-fort/T5977 | Christian Breunig | |
T5977: firewall: remove ipsec options in output chain rule definition… | |||
2024-01-30 | reverse-proxy: T5999: Allow root for exact match in backend rule URL | cleopold73 | |