Age | Commit message (Collapse) | Author | |
---|---|---|---|
2019-09-04 | openvpn: T1548: remove authy 2fa provider | Christian Poessinger | |
According to https://github.com/twilio/authy-openvpn commit 3e5dc73: > This plugin is no longer actively maintained. If you're interested in becoming a maintainer, we welcome forks of this project. In addition this plugin was always missing in the current branch ov VyOS and did not make it into VyOS 1.2 (crux) If 2FA for OpenVPN is required we should probably opt for Google Authenticator or if possible a U2F device. (cherry picked from commit 5d858f0e6ad05b032c88c88a08c15d0876c44e8b) | |||
2019-08-18 | [bridge] T1156: increase bridge priority - bridge interfaces after all ↵ | Christian Poessinger | |
member interfaces are configured | |||
2019-08-17 | openvpn: T1548: 'disabled' leafNode must be valueless | Christian Poessinger | |
2019-08-17 | Merge pull request #107 from c-po/t1548-openvpn | Christian Poessinger | |
T1548 openvpn | |||
2019-08-16 | openvpn: T1548: initial rewrite with XML and Python | Christian Poessinger | |
2019-08-14 | [bfd] T1183: Added validations and fixing bugs in BFD: | zsdc | |
* added validations for "source address IP" and "bfd peer IP" * added check for configuring multihop together with an interface name * fixed "show protocols bfd peer X" for peers with custom options | |||
2019-08-14 | [service https] T1443: add self-signed TLS certificate | John Estabrook | |
2019-08-09 | [bfd] T1183: Added some new functionality and fixed bugs in BFD: | zsdc | |
* added option "echo-mode" and "echo-interval" for BFD peers * added configuration check for usage "multihop" and "echo-mode" * added configuration check for denying deletion BFD peers, which are used in BGP configuration * fixed deleting/changing BFD peers with custom parameters (for example multihop, local-address, etc.) * deleted wrong skipping of configuration check for "shutdown" BFD peers | |||
2019-08-07 | [l2tp] T1566 ipv6 implementation | DmitriyEshenko | |
2019-08-07 | XML: WireGuard: run interfacedefinition through XML lint | Christian Poessinger | |
2019-08-07 | Validator: rename cidr -> ip-cidr to match existing patterns | Christian Poessinger | |
2019-08-05 | [bridge] T1156: add XML completion helpers for interface address (dhcp and ↵ | Christian Poessinger | |
dhcpv6) | |||
2019-08-05 | [bridge] T1156: add XML address constraints | Christian Poessinger | |
2019-08-05 | [bridge] T1156: remove priority of address node | Christian Poessinger | |
2019-08-04 | [bridge] T1156: rename igmp-snooping node to igmp | Christian Poessinger | |
2019-08-03 | [bridge] T1156: support adding and removing bridge member interfaces | Christian Poessinger | |
This is the new syntax bridge br0 { member { interface eth0 { cost 10 } interface eth1 { cost 11 } } } | |||
2019-08-02 | [bridge] T1156: first working implementation using Python and XML | Christian Poessinger | |
2019-08-02 | WireGuard: rename wireguard.py -> interface-wireguard.py | Christian Poessinger | |
2019-08-02 | WireGuard: rename wireguard.xml -> interfaces-wireguard.xml | Christian Poessinger | |
2019-07-31 | T1555 Implementation shared-secret for LNS. Implementation command disabling ↵ | DmitriyEshenko | |
ccp. | |||
2019-07-30 | Merge pull request #94 from hagbard-01/sstp | hagbard-01 | |
[SSTP] - T853: accel-ppp: SSTP implementation | |||
2019-07-30 | [SSTP] - T853: accel-ppp: SSTP implementation | hagbard | |
2019-07-26 | T1546 fix syntax l2tp radius source-address and migrate other radius options | DmitriyEshenko | |
2019-07-25 | [accel-l2tp] - T834: l2tp implementation | hagbard | |
- node.def deletion for show remote-access - IPSec interface checking for L2TP - IPSec x509 for l2tp - verification of outside-address to warning since it was optional in the previous config | |||
2019-07-22 | [wireguard] fixing value help typo | hagbard | |
2019-07-22 | [pppoe] typo fixed | hagbard | |
2019-07-21 | T1537: add missing help for 'set service dns' | Christian Poessinger | |
2019-07-15 | [T1299] - SNMP extension with custom scripts | hagbard | |
2019-07-08 | [IPoE] - T1510: vlan-mon option implementation | hagbard | |
2019-07-08 | [PPPoE] - T1489: vlan_mon config options | hagbard | |
2019-07-04 | T1435 plus other dhcp/dhcpv6-server enhancements | Jernej Jakob | |
- T1435: dhcp-server: make ip-address optional in static-mapping - remove [REQUIRED] from dhcpv6-server static-mapping identifier and ipv6-address - verify if static-mapping ipv6-address is in subnet - make help and error messages in conf-mode more descriptive - remove regex ^$ anchors (implied in re.fullmatch) | |||
2019-07-02 | [IPoE] T1495 - IA-PD via IPoE implemented | hagbard | |
2019-07-01 | [service https] T1443: add service https and service https api | John Estabrook | |
2019-07-01 | T1498: Nameservers are not propagated into resolv.conf | Kim Hagen | |
2019-06-28 | [IPoE] config structure improved | hagbard | |
* fixed minor issues * fixed lower function for mac addresses if user capitalized it (local mode only) * added some checks to verify() * cli ip-address checks on input | |||
2019-06-27 | [IPoE] T989 - IPoE implementation | hagbard | |
* chap-secrets file generation * noauth in accel config as option * local auth with csid implemented * radius implementation * shaper per user implemented * op comands for stats | |||
2019-06-22 | bfd: T1183: move "multiplier" configuration node to "interval multiplier" | Christian Poessinger | |
2019-06-22 | bfd: T1183: add rx/tx interval configuration | Christian Poessinger | |
vyos@vyos# show protocols bfd { peer 1.1.1.1 { interval { receive 400 transmit 300 } } } | |||
2019-06-22 | bfd: T1183: add support to configure detection multiplier | Christian Poessinger | |
Configures the detection multiplier to determine packet loss. The remote transmission interval will be multiplied by this value to determine the connection loss detection timer. The default value is 3. Example: when the local system has detect-multiplier 3 and the remote system has transmission interval 300, the local system will detect failures only after 900 milliseconds without receiving packets. | |||
2019-06-22 | bfd: T1183: adjust CLI syntax for source address/interface | Christian Poessinger | |
Place address/interface under new source node. vyis@vyos# show protocols bfd peer 1.1.1.1 { source { address 1.2.3.4 interface eth0.201 } } | |||
2019-06-22 | bfd: T1183: add support for multihop | Christian Poessinger | |
multihop tells the BFD daemon that we should expect packets with TTL less than 254 (because it will take more than one hop) and to listen on the multihop port (4784). When using multi-hop mode echo-mode will not work (see RFC 5883 section 3). | |||
2019-06-22 | bfd: T1183: initial CLI implementation | Christian Poessinger | |
vyos@vyos# show protocols bfd peer 172.18.202.10 { local-address 172.18.201.10 local-interface eth0.201 shutdown } peer 172.18.202.12 { shutdown } | |||
2019-06-19 | [wireguard] T1425 - assign a /31 address on Wireguard interface | hagbard | |
- added a validator for checking if the address is any cidr noted address | |||
2019-06-18 | [pppoe-server] T1452 - add vendor option to shaper | hagbard | |
2019-06-16 | T1439: remove beginning and end anchors, they are implied with re.fullmatch | Jernej Jakob | |
2019-06-16 | T1439: move DUID validator to regex | Jernej Jakob | |
2019-06-16 | T1439: add dhcpv6-client-id validator | Jernej Jakob | |
2019-06-16 | dhcpv6-server: Add name constraint, clarify help, fix typos | Jernej Jakob | |
2019-04-26 | [pppoe-server] adding CIDR based prefixes as client-ip-pool option | hagbard | |
2019-04-23 | [pppoe-server] - fixed default RADIUS attribute Filter-Id | hagbard | |