Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-04-11 | vpn: l2tp: T2264: remove RADIUS req-limit node | Christian Poessinger | |
It makes less sense for the user to specify this behavior. | |||
2020-04-11 | vpn: l2tp: T2264: combine WINS CLI syntax | Christian Poessinger | |
There is no reason to distinguish between WINS servers in terms of priority. This is solely a task which can be done in the underlaying Python scripts. | |||
2020-04-11 | vpn: l2tp: T2264: combine IPv4/IPv6 name-server CLI syntax | Christian Poessinger | |
There is no reason to distinguish between an IPv4 and IPv6 name-server node on the CLI - this can be done in the underlaying Python scripts. | |||
2020-04-11 | vpn: l2tp: T2264: rename files to match CLI levels | Christian Poessinger | |
2020-04-10 | l2tp: xml: group interface definition into vpn section | Christian Poessinger | |
2020-04-10 | vif-c: T2240: add VRF support | Christian Poessinger | |
2020-04-10 | Revert "vif-s: T2240: add VRF support" | Christian Poessinger | |
This reverts commit 2d33cf656f5856fb06e8390fc2250bb99ea0206b. | |||
2020-04-09 | vxlan: T2172: add source-address option | Christian Poessinger | |
This is a base requirement for l2vpn evpn. When source-address is configured, the option "local <source-addr> nolearning" is appended when creating the interface as mentioned here: https://vincent.bernat.ch/en/blog/2017-vxlan-bgp-evpn | |||
2020-04-09 | xml: radius: update source-address valueHelp | Christian Poessinger | |
2020-04-09 | vxlan: pseudo-ethernet: T2260: convert link nodes to source-interface | Christian Poessinger | |
2020-04-08 | vif-s: T2240: add VRF support | Christian Poessinger | |
2020-04-08 | wireguard: T2244: split port configuration to XML include file | Christian Poessinger | |
2020-04-08 | wireguard: T2247: add VRF support | Christian Poessinger | |
2020-04-08 | wireguard: T2244: use xml include for mtu | Christian Poessinger | |
2020-04-08 | tunnel: T1579: Change help value for encapsulation node | Eshenko Dmitriy | |
2020-04-07 | http api: T2160: move 'api virtual-host' to 'api-restrict virtual-host' | John Estabrook | |
Restriction of api proxy should be owned by https.py, not http-api.py. | |||
2020-04-05 | flow-accounting: improve value help on ipfix | Christian Poessinger | |
2020-04-05 | wireless: T2212: bugfix for BF-ANTENNA and SOUNDING-DIMENSION flags | alainlamar | |
VHT flags deal with many variables which depend on antenna count and supported features. BF-ANTENNA-(2|3|4) and SOUNDING-DIMENSION-(2|3|4) were not dealt with correctly. IEEE 802.11ac (VHT) supports at least 1 antenna and up to 8 antennas at most. The hsotapd VHT flags may support as many but most do not. Therefore, we need to be picky here... | |||
2020-04-05 | wireguard: T2228: support ports less then 1024 | Christian Poessinger | |
2020-04-05 | wireguard: T2206: add valueHelp for listen port | Christian Poessinger | |
2020-04-05 | wireguard: T2206: split endpoint node into address and port | Christian Poessinger | |
WireGuard has been the only subsystem combining a remote ip address and a remote port number into a single node. This is bad as there is no possiblity for the XML based input validation for IP address and port numbers. That's the reason the peer endpoint node goets migrated into a peer address and a peer port node utilizing the embedded syntax node checking for IP addresses and port ranges. | |||
2020-04-05 | wwan: T1988: remove trailing whitespace in XML | Christian Poessinger | |
2020-04-05 | Merge pull request #304 from DmitriyEshenko/cur-pim-igm-p2 | Christian Poessinger | |
pim: T1729: Add dr-priority and IGMP join support | |||
2020-04-04 | pim: T1729: Add dr-priority and IGMP join support | DmitriyEshenko | |
2020-04-04 | wireless: T2208: bugfix: errors in the XML and Python file | Alain Lamar | |
Commits to "interfaces wireless wlanX capabilities vht link-adaptation (unsolicited|both)" always failed. | |||
2020-04-04 | pppoe: T1318: support more then 99 dialer interfaces | Christian Poessinger | |
2020-04-03 | Merge pull request #296 from zdc/T1820 | Christian Poessinger | |
VRRP: T1820: Added transition-script support for sync-groups | |||
2020-04-03 | interfaces: XML: constraint: add start of line ^ to regex | Christian Poessinger | |
2020-04-03 | vrf: T31: name of isntance is not allowed to mimic an interface name | Christian Poessinger | |
Every VRF that's created is not allowed to be named like any interface that can be active on the system. This includes eth, lan, br, dum, lo .... In theoriy this would work but as soon as such a regular interface is created things will go sideways rather quick thus we limit the namespace which can be used to create a VRF. Appending an interface name is still possible like coolvrf-eth0. | |||
2020-04-02 | wwan: vrf: T2200: add CLI options and parse configuration to dictionary | Christian Poessinger | |
2020-04-02 | bridge: l2tpv3: T1823: readjust overall priorities | Christian Poessinger | |
Every interface on the system can be a member of a bridge - thus the bridge interface must be the one interface which has the highest priority compared to all other interfaces - incl. l2tpv3. With this change the system boots up fine with also l2tpv3 interfaces participating as bridge members. This change was needed as a l2tpv3 interface requires proper configured routing oin the system, else adding the interface will fail miserably: FileNotFoundError: [Errno 2] ip l2tp add tunnel tunnel_id 200 peer_tunnel_id 100 udp_sport 4000 udp_dport 3000 encap udp local 172.18.201.10 remote 172.18.203.10 returned: RTNETLINK answers: Network is unreachable | |||
2020-04-02 | l2tpv3: T1823: change interface priority | Christian Poessinger | |
As L2TPv3 interfaces can be member interface of a bridge device it must be configured prior to the bridge - else the system will boot with an error as member adding fails. | |||
2020-04-02 | VRRP: T1820: Added transition-script support for sync-groups | zsdc | |
Note: if transition-scripts configured for both vrrp instance and sync group, which are it a member of, both scripts will be executed. | |||
2020-03-30 | http api: T2160: allow restricting HTTP API to specific servers | John Estabrook | |
By default, the HTTP API will be proxied by any nginx virtual server. Allow specifying a subset of servers to act as proxy. | |||
2020-03-29 | vrf: T2178: table id must start at 100 | Christian Poessinger | |
... to not cause any issues with buildin tables or PBR. PBR uses table 1 - 200 so there is a small overlap (by intention) | |||
2020-03-28 | wwan: T1988: add ipv6 addressing nodes | Christian Poessinger | |
2020-03-28 | wwan: T1988: support interface disable | Christian Poessinger | |
2020-03-28 | wwan: T1988: initial XML/Python representation | Christian Poessinger | |
2020-03-28 | ipv6: T1831: migrate eui64 addressing to XML and python | Christian Poessinger | |
2020-03-28 | ipv6: T1831: migrate autoconf node | Christian Poessinger | |
Autoconfigure addresses using Prefix Information in Router Advertisements. | |||
2020-03-28 | ipv6: T1831: migrate forwarding and dup-addr-detect-transmits nodes | Christian Poessinger | |
... to new XML and Python based frontend/backend. | |||
2020-03-27 | pim: T1729: Basic PIM implementation | DmitriyEshenko | |
2020-03-24 | service https: T2157: Organize server block directives as 'virtual host' | John Estabrook | |
2020-03-24 | router-advert: T1831: new implementation using XML and Python | Christian Poessinger | |
2020-03-23 | tunnel: T31: add support for vrf on tunnels | Thomas Mangin | |
2020-03-22 | tunnel: T2028: move interface tunnel to XML/Python | Thomas Mangin | |
This patch migrates the "interface tunnel" section to xml/python | |||
2020-03-22 | sstp: T2150: use full file path on SSL certificates | Christian Poessinger | |
2020-03-21 | salt: import salt-minion configuration from vyos-salt-minion | Christian Poessinger | |
2020-03-20 | sstp: T2008: migrate SSL certificate nodes | Christian Poessinger | |
2020-03-20 | sstp: T2006: fix valueHelp and validators for numeric values | Christian Poessinger | |