Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-07-01 | Merge branch 'pki_ipsec' of https://github.com/sarthurdev/vyos-1x into pki-cli | Christian Poessinger | |
* 'pki_ipsec' of https://github.com/sarthurdev/vyos-1x: pki: ipsec: T3642: Update migration script to account for file permission issues pki: ipsec: T3642: Migrate IPSec to use PKI configuration pki: T3642: New PKI config and management | |||
2021-06-30 | dhcpdv6: T3658: add support for dhcpdv6 fixed-prefix6 | Brandon Stepler | |
2021-06-29 | pki: ipsec: T3642: Migrate IPSec to use PKI configuration | sarthurdev | |
2021-06-29 | pppoe-server: T3405: Add interface cache feature | DmitriyEshenko | |
2021-06-29 | pki: T3642: New PKI config and management | sarthurdev | |
2021-06-26 | nat: T1083: add translation options for persistent/random mapping of address ↵ | Igor Melnyk | |
and port Tested using: set destination rule 100 inbound-interface 'eth0' set destination rule 100 translation address '19.13.23.42' set destination rule 100 translation options address-mapping 'random' set destination rule 100 translation options port-mapping 'none' set source rule 1000 outbound-interface 'eth0' set source rule 1000 translation address '122.233.231.12' set source rule 1000 translation options address-mapping 'persistent' set source rule 1000 translation options port-mapping 'fully-random' | |||
2021-06-25 | openvpn: T1704: drop deprecated disable-ncp option | Christian Poessinger | |
2021-06-25 | T3649: bonding: Add additional hash policies | DmitriyEshenko | |
2021-06-22 | sstp-l2tp: T3636: Add ipv6 options | Viacheslav | |
2021-06-19 | mdns: vrrp: T3635: Add ability to use mDNS repeater with VRRP | sarthurdev | |
2021-06-17 | ethernet: T3633: Add LRO offload | Viacheslav | |
2021-06-17 | route-map: T3632: fix invalid validation regex for extcommunity-rt|soo | Christian Poessinger | |
Use the validation string/system available within vyos-1x. This also works on VyOS 1.2 series systems. | |||
2021-06-16 | bgp: T3624: add "bandwidth" bestpath option | Christian Poessinger | |
2021-06-16 | policy: T3624: remove duplicate CLI node for "bgp-extcommunity-rt" | Christian Poessinger | |
Key was already present as "extcommunity-rt". | |||
2021-06-16 | policy: T3624: add extended community bandwith support to route-map | Christian Poessinger | |
2021-06-16 | policy: T3631: migrate "set extcommunity-rt/soo" to "set extcommunity rt|soo" | Christian Poessinger | |
Thi adds a new configuration level "set extcommunity" which then holds rt and soo als leaf-nodes below. This is the foundational work required to properly implement T3624 ("BGP: add support for extended community bandwidth definition") | |||
2021-06-15 | ipsec: T2816: T645: T3613: Migrated IPsec to swanctl, includes multiple ↵ | sarthurdev | |
selectors, and selectors with VTI. | |||
2021-06-13 | wwan: T3622: add support for APN authentication | Christian Poessinger | |
Some APNs require a username/password. Add CLI nodes (matching the PPPoE syntax) for client authentication. One APN would be the IPv4/IPv6 APN from Deutsche Telekom (Germany) APN Name: Telekom Internet IPv6 APN: internet.v6.telekom Benutzername: telekom Passwort: tm (cherry picked from commit c667a45a8fb06cb76c907348c4f1e3ec708b6e03) | |||
2021-06-13 | vti: T2173: add VRF support for virtual tunnel interfaces | Christian Poessinger | |
2021-06-13 | wwan: T3620: rename "wirelessmodem wlm" interfaces to new wwan interface tree | Christian Poessinger | |
2021-06-12 | ipsec: T57: Support disable on peer, tunnel, dmvpn profile | sarthurdev | |
2021-06-10 | xml: ssh: move user/group definition to includable files | Christian Poessinger | |
2021-06-10 | vpn: ipsec: T3093: remove leading whitespaces from XML includes | Christian Poessinger | |
2021-06-09 | xml: cron: remove whitespaces | Christian Poessinger | |
2021-06-08 | policy: T3605: add support to prefer IPv6 global next-hop address in route-map | Christian Poessinger | |
2021-06-06 | ipsec: T3588: remove CLI options deprecated by strongSwan | Christian Poessinger | |
- set vpn ipsec nat-traversal - set vpn ipsec nat-networks allowed-network | |||
2021-06-06 | Merge pull request #865 from sarthurdev/current | Christian Poessinger | |
nhrp: T3599: Migrate NHRP to XML/Python | |||
2021-06-06 | nhrp: T3599: Migrate NHRP to XML/Python | sarthurdev | |
2021-06-05 | ipsec: T3093: drop superfluous top level priority | Christian Poessinger | |
2021-06-04 | Merge pull request #861 from sever-sever/T3592 | Christian Poessinger | |
tunnels: T3592: Set default TTL to 64 | |||
2021-06-02 | tunnels: T3592: Set default TTL to 64 | sever-sever | |
Set default TTL value for tunnels from 0 to 64 There are a lot of situation when default value 0 (inherit) not work properly when you have routing configuration for OSPF or BGP over the tunnels. To fix it you need explicit set TTL value other then 0. Or hardcode another value as default. | |||
2021-06-01 | pppoe-server: T3593: Add extended-scripts feature | Eshenko Dmitriy | |
2021-05-31 | conntrack: T3579: add module disable options | Christian Poessinger | |
Some application layer gateway (ALG) modules can be disabled during runtime if requireq. | |||
2021-05-30 | bgp: T3590: limiting maximum number of prefixes to be sent to a peer | Christian Poessinger | |
2021-05-29 | Revert "vti: T2173: add VRF support for virtual tunnel interfaces" | Christian Poessinger | |
This reverts commit ab398d1a063c5f897df8d63098a272cb34bcf603. | |||
2021-05-28 | vti: T2173: add VRF support for virtual tunnel interfaces | Christian Poessinger | |
2021-05-28 | vti: T1579: implement Virtual Tunnel Interfaces using XML and Python | Christian Poessinger | |
2021-05-28 | ipsec: T2816: IPSec python rework, includes DMVPN and VTI support | Simon | |
2021-05-27 | Merge branch 't3579-conntrack' into current | Christian Poessinger | |
* t3579-conntrack: conntrack: T3535: add conntrack-sync supported vyos-configd services conntrack: T3579: initial implementation with XML and Python | |||
2021-05-27 | conntrack: T3579: initial implementation with XML and Python | Christian Poessinger | |
2021-05-25 | firewall: T3568: add XML definitions for firewall | Viacheslav Hletenko | |
Add XML for configuration mode firewall. Used for future rewriting it to Python style. | |||
2021-05-24 | tunnel: T3555: add "ignore-df" support for GRE tunnels | Christian Poessinger | |
2021-05-24 | xml: T1579: update tunnel key help string | Christian Poessinger | |
2021-05-24 | isis: T3417: update help strings | Christian Poessinger | |
2021-05-24 | isis: T3417: add CLI node to enable "log-adjacency-changes" | Christian Poessinger | |
2021-05-24 | isis: T3417: implement domain-password md5 | Christian Poessinger | |
2021-05-24 | isis: T3576: support metric and route-map when originating a default route | Christian Poessinger | |
2021-05-23 | xml: T3573: add missing route-map as-path-prepend, origin and community help ↵ | Christian Poessinger | |
strings | |||
2021-05-23 | router-advert: T3561: add support for specific routes | Mark Royds | |
Co-authored-by: Mark Royds <mark.royds@vitaminit.co.uk> | |||
2021-05-22 | bgp: T3565: support multiple AS numbers for confederation peers | Christian Poessinger | |
The BGP confederation peers node was not a multi node as supported by VyOS 1.2 and 1.3. |