Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-05-21 | macsec: T2023: remove gcm-aes-256 cipher type | Christian Poessinger | |
Cipher type gcm-aes-256 is supported by Linux 4.19 but it is not available in iproute2 4.19. We could backport it of course but the plan is to Upgrade to a more recent 5.x series kernel anyway once all out-of-tree module issues are resolved, mainly Intel QAT. gcm-aes-256 support was added to iproute2 package with commit b16f5253233 ("Add support for configuring MACsec gcm-aes-256 cipher type.") which made it into the 5.2 release of iproute2. | |||
2020-05-21 | macsec: T2023: add optional encryption command | Christian Poessinger | |
By default MACsec only authenticates traffic but has support for optional encryption. Encryption can now be enabled using: set interfaces macsec <interface> encrypt | |||
2020-05-21 | macsec: T2023: add initial XML and Python interfaces | Christian Poessinger | |
2020-05-20 | macvlan: T2023: prepare common source interface include file | Christian Poessinger | |
2020-05-19 | Merge pull request #378 from sever-sever/bgp-xml-conf | Christian Poessinger | |
bgp-xml: T2387:Commands in XML for [conf_mode] bgp | |||
2020-05-19 | wireguard: T2481: support IPv6 based underlay | Christian Poessinger | |
2020-05-19 | dhcpv6-pd: T421: support ethernet based interfaces | Christian Poessinger | |
Add support for prefix delegation when receiving the prefix via ethernet, bridge, bond, wireless. | |||
2020-05-19 | bgp-xml: T2387:Commands in XML for [conf_mode] bgp | sever-sever | |
2020-05-17 | pppoe: dhcpv6-pd: T421: initial support | Christian Poessinger | |
The following configuration will assign a /64 prefix out of a /56 delegation to eth0. The IPv6 address assigned to eth0 will be <prefix>::ffff/64. If you do not know the prefix size delegated to you, start with sla-len 0. pppoe pppoe0 { authentication { password vyos user vyos } description sadfas dhcpv6-options { delegate eth0 { interface-id 65535 sla-id 0 sla-len 8 } } ipv6 { address { autoconf } enable } source-interface eth1 } vyos@vyos:~$ show interfaces Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down Interface IP Address S/L Description --------- ---------- --- ----------- eth0 2001:db8:8003:400::ffff/64 u/u | |||
2020-05-17 | xml: split dhcp, dhcpv6 to individual files | Christian Poessinger | |
2020-05-16 | nat: nptv6: T2198: add XML/Python skeleton | Christian Poessinger | |
- define XML CLI interface - read CLI into Python dict | |||
2020-05-16 | nat: T2198: add common ip-protocol validator | Christian Poessinger | |
It allows IP protocol numbers 0-255, protocol names e.g. tcp, ip, ipv6 and the negated form with a leading "!". | |||
2020-05-16 | nat: T2198: add protocol completion helper and regex constraint | Christian Poessinger | |
2020-05-16 | nat: T2198: split nat-address-port include into individual files | Christian Poessinger | |
2020-05-16 | nat: T2198: add ipv4-{address,prefix,rage}-exclude validators | Christian Poessinger | |
Exclude validators are required to support the ! (not) operator on the CLI to exclude addresses from NAT. | |||
2020-05-16 | nat: T2198: add new ipv4-range validator | Christian Poessinger | |
2020-05-16 | nat: T2198: initial XML and Python representation | Christian Poessinger | |
2020-05-07 | wireless: T2427: add common interface includes to template | Jernej Jakob | |
2020-05-06 | sstp: T2392: add IPv6 DNS support | Christian Poessinger | |
New command added: * set vpn sstp network-settings name-server 2001:db8::1111 | |||
2020-05-06 | sstp: T2392: add initial IPv6 support | Christian Poessinger | |
New commands added: * set vpn sstp network-settings client-ipv6-pool prefix 2001:db8::/64 mask 112 * set vpn sstp network-settings client-ipv6-pool delegate 2001:db8:100::/48 delegation-prefix 64 | |||
2020-04-30 | dhcpv6-server: T2406: add lease-time validator to XML | Christian Poessinger | |
2020-04-30 | dhcpv6-server: T2406: merge sip-server-{address,name} to sip-server node | Christian Poessinger | |
The subnet specific nodes sip-server-address & sip-server-name do the same for the user - specify a SIP server. Only the backend is rendered in a different way, as ISC DHCPv6 expects different options. There is absolutely no need for the user to distinguish between both two nodes. | |||
2020-04-26 | salt: T2385: xml: improve help of id and master-key | Christian Poessinger | |
2020-04-26 | salt: T2385: xml: improve completion helpers in interval | Christian Poessinger | |
2020-04-26 | salt: T2384: migrate config options | Christian Poessinger | |
- delete log_file, log_level and user nodes - rename hash_type to hash - rename mine_interval to interval | |||
2020-04-26 | salt: T2385: XML: improve completion helpers on hash_type | Christian Poessinger | |
2020-04-26 | salt: T2384: always log to syslog | Christian Poessinger | |
2020-04-26 | salt: T2382: XML: add proper valueHelp and validators for master | Christian Poessinger | |
2020-04-25 | login: radius: T2304: add VRF support | Christian Poessinger | |
This allows the radius client to work when a management VRF is in use. | |||
2020-04-23 | Merge pull request #374 from DmitriyEshenko/pppoe-impl-auth-proto | Christian Poessinger | |
pppoe-server: T2373: Implement CLI commands for auth protocols | |||
2020-04-23 | pppoe-server: T2373: Implement CLI commands for auth protocols | DmitriyEshenko | |
2020-04-23 | interfaces: T2362: add node to delete the default IPv6 link-local address | Jernej Jakob | |
2020-04-23 | interfaces: T2362: allow setting multiple 'ipv6 address eui64' | Jernej Jakob | |
2020-04-22 | Merge branch 'pptp-rewrite' of github.com:c-po/vyos-1x into current | Christian Poessinger | |
* 'pptp-rewrite' of github.com:c-po/vyos-1x: accel-ppp: fix wrong reference in verify() on missing attributes accel-ppp: T2314: bugfix wrong placement of endif in Jinja2 template vpn: pptp: T2351: add support for common radius-additions XML vpn: pptp: T2351: migrate to common radius CLI vpn: pptp: T2351: migrate to common name-server, wins-server nodes accel-ppp: provide common wins-server include definition vpn: pptp: T2351: use first IP from client pool as gateway address vpn: pptp: T2351: align configuration to other accel implementations vpn: pptp: T2351: migrate from SysVinit to systemd vyos.util: migrate all cpu_count() occurances to common get_half_cpus() | |||
2020-04-22 | vpn: pptp: T2351: add support for common radius-additions XML | Christian Poessinger | |
2020-04-22 | vpn: pptp: T2351: migrate to common radius CLI | Christian Poessinger | |
2020-04-22 | vpn: pptp: T2351: migrate to common name-server, wins-server nodes | Christian Poessinger | |
2020-04-22 | accel-ppp: provide common wins-server include definition | Christian Poessinger | |
2020-04-22 | Merge pull request #368 from DmitriyEshenko/mroute-pim | Christian Poessinger | |
mroute: T2364: Implement CLI commands for mroute | |||
2020-04-21 | mroute: T2364: Implement CLI commands for mroute | DmitriyEshenko | |
2020-04-21 | accel-ppp: unify "authentication mode" XML definition to common include file | Christian Poessinger | |
2020-04-21 | tunnel: T2204: add source-interface | Thomas Mangin | |
2020-04-21 | macvlan: T1635: fix source-interface description | Christian Poessinger | |
2020-04-21 | dhcpv6: T2341: remove obsolete priority causing priority inversion | Christian Poessinger | |
2020-04-20 | macvlan: pseudo-ethernet: T2341: adjust priority to support bond ↵ | Christian Poessinger | |
source-interfaces | |||
2020-04-19 | xml: T2337: bugfix on missing hw-id node | Christian Poessinger | |
Commit 021a2470bd67 ("XML: T2282: clarify on ethernet and wireless hw-id nodes") created a common XML include file out of the MAC address include file which totally blew everything as we now have two "mac" nodes as it was not renamed to "hw-id". | |||
2020-04-19 | {pppoe,ipoe}-server: T2324: T2314: migrate to common accel-name-server XML | Christian Poessinger | |
2020-04-19 | ipoe-server: T2324: use common accel-radius-additions XML file | Christian Poessinger | |
2020-04-19 | pppoe-server: T2314: add common accel-radius-additions XML file | Christian Poessinger | |
2020-04-18 | ipoe-server: T2324: migrate IPv6 client IP pool to common CLI nodes | Christian Poessinger | |