Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-05-16 | nat: T2198: split nat-address-port include into individual files | Christian Poessinger | |
2020-05-16 | nat: T2198: add ipv4-{address,prefix,rage}-exclude validators | Christian Poessinger | |
Exclude validators are required to support the ! (not) operator on the CLI to exclude addresses from NAT. | |||
2020-05-16 | nat: T2198: add new ipv4-range validator | Christian Poessinger | |
2020-05-16 | nat: T2198: initial XML and Python representation | Christian Poessinger | |
2020-05-07 | wireless: T2427: add common interface includes to template | Jernej Jakob | |
2020-05-06 | sstp: T2392: add IPv6 DNS support | Christian Poessinger | |
New command added: * set vpn sstp network-settings name-server 2001:db8::1111 | |||
2020-05-06 | sstp: T2392: add initial IPv6 support | Christian Poessinger | |
New commands added: * set vpn sstp network-settings client-ipv6-pool prefix 2001:db8::/64 mask 112 * set vpn sstp network-settings client-ipv6-pool delegate 2001:db8:100::/48 delegation-prefix 64 | |||
2020-04-30 | dhcpv6-server: T2406: add lease-time validator to XML | Christian Poessinger | |
2020-04-30 | dhcpv6-server: T2406: merge sip-server-{address,name} to sip-server node | Christian Poessinger | |
The subnet specific nodes sip-server-address & sip-server-name do the same for the user - specify a SIP server. Only the backend is rendered in a different way, as ISC DHCPv6 expects different options. There is absolutely no need for the user to distinguish between both two nodes. | |||
2020-04-26 | salt: T2385: xml: improve help of id and master-key | Christian Poessinger | |
2020-04-26 | salt: T2385: xml: improve completion helpers in interval | Christian Poessinger | |
2020-04-26 | salt: T2384: migrate config options | Christian Poessinger | |
- delete log_file, log_level and user nodes - rename hash_type to hash - rename mine_interval to interval | |||
2020-04-26 | salt: T2385: XML: improve completion helpers on hash_type | Christian Poessinger | |
2020-04-26 | salt: T2384: always log to syslog | Christian Poessinger | |
2020-04-26 | salt: T2382: XML: add proper valueHelp and validators for master | Christian Poessinger | |
2020-04-25 | login: radius: T2304: add VRF support | Christian Poessinger | |
This allows the radius client to work when a management VRF is in use. | |||
2020-04-23 | Merge pull request #374 from DmitriyEshenko/pppoe-impl-auth-proto | Christian Poessinger | |
pppoe-server: T2373: Implement CLI commands for auth protocols | |||
2020-04-23 | pppoe-server: T2373: Implement CLI commands for auth protocols | DmitriyEshenko | |
2020-04-23 | interfaces: T2362: add node to delete the default IPv6 link-local address | Jernej Jakob | |
2020-04-23 | interfaces: T2362: allow setting multiple 'ipv6 address eui64' | Jernej Jakob | |
2020-04-22 | Merge branch 'pptp-rewrite' of github.com:c-po/vyos-1x into current | Christian Poessinger | |
* 'pptp-rewrite' of github.com:c-po/vyos-1x: accel-ppp: fix wrong reference in verify() on missing attributes accel-ppp: T2314: bugfix wrong placement of endif in Jinja2 template vpn: pptp: T2351: add support for common radius-additions XML vpn: pptp: T2351: migrate to common radius CLI vpn: pptp: T2351: migrate to common name-server, wins-server nodes accel-ppp: provide common wins-server include definition vpn: pptp: T2351: use first IP from client pool as gateway address vpn: pptp: T2351: align configuration to other accel implementations vpn: pptp: T2351: migrate from SysVinit to systemd vyos.util: migrate all cpu_count() occurances to common get_half_cpus() | |||
2020-04-22 | vpn: pptp: T2351: add support for common radius-additions XML | Christian Poessinger | |
2020-04-22 | vpn: pptp: T2351: migrate to common radius CLI | Christian Poessinger | |
2020-04-22 | vpn: pptp: T2351: migrate to common name-server, wins-server nodes | Christian Poessinger | |
2020-04-22 | accel-ppp: provide common wins-server include definition | Christian Poessinger | |
2020-04-22 | Merge pull request #368 from DmitriyEshenko/mroute-pim | Christian Poessinger | |
mroute: T2364: Implement CLI commands for mroute | |||
2020-04-21 | mroute: T2364: Implement CLI commands for mroute | DmitriyEshenko | |
2020-04-21 | accel-ppp: unify "authentication mode" XML definition to common include file | Christian Poessinger | |
2020-04-21 | tunnel: T2204: add source-interface | Thomas Mangin | |
2020-04-21 | macvlan: T1635: fix source-interface description | Christian Poessinger | |
2020-04-21 | dhcpv6: T2341: remove obsolete priority causing priority inversion | Christian Poessinger | |
2020-04-20 | macvlan: pseudo-ethernet: T2341: adjust priority to support bond ↵ | Christian Poessinger | |
source-interfaces | |||
2020-04-19 | xml: T2337: bugfix on missing hw-id node | Christian Poessinger | |
Commit 021a2470bd67 ("XML: T2282: clarify on ethernet and wireless hw-id nodes") created a common XML include file out of the MAC address include file which totally blew everything as we now have two "mac" nodes as it was not renamed to "hw-id". | |||
2020-04-19 | {pppoe,ipoe}-server: T2324: T2314: migrate to common accel-name-server XML | Christian Poessinger | |
2020-04-19 | ipoe-server: T2324: use common accel-radius-additions XML file | Christian Poessinger | |
2020-04-19 | pppoe-server: T2314: add common accel-radius-additions XML file | Christian Poessinger | |
2020-04-18 | ipoe-server: T2324: migrate IPv6 client IP pool to common CLI nodes | Christian Poessinger | |
2020-04-18 | ipoe-server: T2324: migrate RADIUS configuration to common CLI syntax | Christian Poessinger | |
2020-04-18 | ipoe-server: T2324: migrate IPv4/IPv6 name-servers to common node | Christian Poessinger | |
2020-04-18 | ipoe-server: T2324: remove boilerplate code and adjust to other accel ↵ | Christian Poessinger | |
implementations | |||
2020-04-18 | router-advert: rename XML/Python files for a common pattern | Christian Poessinger | |
2020-04-18 | ipoe-server: rename XML/Python files for a common pattern | Christian Poessinger | |
2020-04-18 | pppoe-server: T2314: migrate IPv6 to common CLI nodes with embeeded validation | Christian Poessinger | |
2020-04-18 | pppoe-server: T2314: migrate RADIUS configuration to common CLI syntax | Christian Poessinger | |
2020-04-18 | vpn: l2tp: pptp: sstp: rename files to common pattern | Christian Poessinger | |
2020-04-18 | pppoe-server: T2314: migrate IPv4/IPv6 name-servers to common node | Christian Poessinger | |
Instead of having "dns-server server-1|server-2" nodes and the same for IPv6 all DNS nameservers are migrated to a common name-servers node. | |||
2020-04-18 | pppoe-server: T2314: remove boilerplate code and adjust | Christian Poessinger | |
2020-04-17 | wireless: T2306: bugfix: insert missing </leafNode> | Alain Lamar | |
2020-04-17 | wireless: T2306: Add new cipher suites to the WiFi configuration | Alain Lamar | |
Yet, VyOS knows these two encryption schemes for WiFi: 1. CCMP = AES in Counter mode with CBC-MAC (CCMP-128) 2. TKIP = Temporal Key Integrity Protocol These encryption schemes are new and especially the Galois counter mode cipher suites are very desirable! 1. CCMP-256 = AES in Counter mode with CBC-MAC with 256-bit key 2. GCMP = Galois/counter mode protocol (GCMP-128) 3. GCMP-256 = Galois/counter mode protocol with 256-bit key CCMP is supported by all WPA2 compatible NICs, so this remains the default cipher for bidirectional and group packets while using WPA2. Use 'iw list' to figure out which cipher suites your cards support prior to configuring other cipher suites than CCMP. AP NICs and STA NICs must both support at least one common cipher in a given list in order to associate successfully. | |||
2020-04-16 | openvpn: T149: IPv6 support | Jernej Jakob | |
- allow configuring IPv6 server addresses and push options - add IPv6 server client IP pool - add IPv6 push dhcp-option DNS6 - allow configuring IPv6 server client addresses - allow configuring IPv6 site-to-site addresses - validate all IPv6 options and addresses - use protos that explicitely open an IPv6 listening socket (tcp6-server, tcp6-client, udp6) as the default on Linux listens on IPv4 only (https://community.openvpn.net/openvpn/ticket/360) - add validator for any IPv6 address, host or network (used by pool) |