Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-09-03 | bgp: T3798: add support for neighbor local-as <n> replace-as | Christian Poessinger | |
2021-09-02 | login: T3792: bugfix for usernames containing a hyphen | Christian Poessinger | |
While migrating to get_config_dict() in commit e8a1c291b1 ("login: radius: T3192: migrate to get_config_dict()") the user-name was not excluded from mangling (no_tag_node_value_mangle=True). This resulted in a username "vyos-user" from CLI to be actually created as "vyos_user" on the system. This commit also adds respective Smoketests to prevent this in the future. | |||
2021-08-29 | isis: T3783: bugfix configuring spf-delay-ietf | Christian Poessinger | |
Mandatory FRR options for spf-delay-ietf did not get rendered in the Jinja2 template. | |||
2021-08-26 | Merge pull request #965 from c-po/t3739-evpn-route-map | Christian Poessinger | |
bgp: evpn: T3739: add route-map match support | |||
2021-08-24 | smoketest: bgp: extend ipv4/ipv6 safi route-target tests | Christian Poessinger | |
Commit 474db49a ("bgp: T3759: "l2vpn evpn" and ipv4/ipv6 safi route-targets differ") made it possible to specify a whitelist separated list of route-targets, this is now validated through the smoketests. | |||
2021-08-23 | smoketest: ospf: "metric-type" also works for kernel and static ↵ | Christian Poessinger | |
redistributed routes | |||
2021-08-22 | smoketest: pppoes: adjust testcase to vyos.ifconfig.interface migration | Christian Poessinger | |
Now that the PPPoE interface also makes use of the vyos.ifconfig.interface class, we need to adjust the smoketests to reflect all those changes. TODO: Start a local PPPoE server in a namespace and connect locally for deeper testing. | |||
2021-08-21 | smoketest: base: abbreviate path to /proc/sys/net | Christian Poessinger | |
2021-08-21 | interfaces: T3090: migrate adjust-mss from "firewall options" to "interface" ↵ | Christian Poessinger | |
level Getting rid of "set firewall options" and move it from: set firewall options interface ethX adjust-mss 1400 set firewall options interface ethX adjust-mss6 1400 to: set interfaces ethernet ethX ip adjust-mss 1400 set interfaces ethernet ethX ipv6 adjust-mss 1400 In addition add an extra option called clamp-mss-to-pmtu instead of a value. | |||
2021-08-20 | bgp: T3759: add IPv4/IPv6 unicast AFI route-map for VPN import/export | Christian Poessinger | |
This adds the following new commands: set protocols bgp address-family ipv4-unicast route-map vpn export foo-map-out set protocols bgp address-family ipv4-unicast route-map vpn import foo-map-in set protocols bgp address-family ipv6-unicast route-map vpn export foo-map-out set protocols bgp address-family ipv6-unicast route-map vpn import foo-map-in | |||
2021-08-20 | smoketest: bgp: movo test for "solo" option to regular neighbor testcase | Christian Poessinger | |
2021-08-20 | smoketest: bgp: add support to extract only given SAFI from FRR | Christian Poessinger | |
2021-08-19 | smoketest: ipsec: T3764: extend testcases for IKE/ESP lifetime | Christian Poessinger | |
2021-08-18 | bgp: T3759: add l3vpn "route-target vpn" commands | Christian Poessinger | |
Add the following new commands: * set protocols bgp address-family ipv4-unicast route-target vpn both 1.1.1.1:100 * set protocols bgp address-family ipv4-unicast route-target vpn export 1.1.1.1:100 * set protocols bgp address-family ipv4-unicast route-target vpn import 1.1.1.1:100 | |||
2021-08-18 | bgp: T3759: add l3vpn "rd" route-distinguisher commands | Christian Poessinger | |
Add the following new commands: * set protocols bgp address-family ipv4-unicast rd vpn export * set protocols bgp address-family ipv6-unicast rd vpn export | |||
2021-08-18 | bgp: T3759: add l3vpn "label vpn export" commands | Christian Poessinger | |
Add the following new commands: * set protocols bgp address-family ipv4-unicast label vpn export (auto | 0-1048575) * set protocols bgp address-family ipv6-unicast label vpn export (auto | 0-1048575) | |||
2021-08-18 | smoketest: ssh: migrate setUp -> setUpClass to run code only once | Christian Poessinger | |
... minor change to speed-up test time | |||
2021-08-18 | smoketest: nat66: migrate setUp -> setUpClass to run code only once | Christian Poessinger | |
... minor change to speed-up test time | |||
2021-08-17 | bgp: T3759: add l3vpn "import vrf" commands | Christian Poessinger | |
2021-08-17 | bgp: T3759: add l3vpn import/export vpn command for IPv4/IPv6 AFI | Christian Poessinger | |
2021-08-16 | smoketest: conntrack: fix function name disable -> enable | Christian Poessinger | |
2021-08-15 | Merge pull request #972 from erkin/current | Christian Poessinger | |
smoketest: conntrack: Update smoketests for new conntrack modules syntax | |||
2021-08-15 | smoketest: ospf: add debug code for redistribution test | Christian Poessinger | |
2021-08-15 | smoketest: ospf: fix type in testcase name #10 | Christian Poessinger | |
2021-08-15 | smoketest: ospf: T3757: test interface area configuration | Christian Poessinger | |
2021-08-15 | smoketest: conntrack: Update smoketests for new conntrack modules syntax | erkin | |
2021-08-15 | Merge pull request #944 from sever-sever/T3702 | Christian Poessinger | |
pbr: T3702: Add rules match fwmark | |||
2021-08-14 | smoketest: shim: wait for commit to be completed | Christian Poessinger | |
This completes commit e7d841d285 ("smoketest: shim: remove superfluous sleep() in getFRRconfig()"). | |||
2021-08-14 | smoketest: shim: remove superfluous sleep() in getFRRconfig() | Christian Poessinger | |
The sleep was intended to handle a FRR issue where the config was/is somehow now available in vtysh even with the commit was done. This rather feels like a race-condition and is fixed in the subsequent commit. | |||
2021-08-11 | bgp: evpn: T3739: add prefix-list match support | Christian Poessinger | |
FRR 7.5.1 supports: vyos(config-route-map)# match evpn default-route default EVPN type-5 route rd Route Distinguisher route-type Match route-type vni Match VNI This commit adds a proper VyOS CLI abstraction. | |||
2021-08-11 | smoketest: ospf: add logger to passive-interface test | Christian Poessinger | |
2021-08-08 | smoketest: rpki: remporary disable SSH based connection testing due to FRR bug | Christian Poessinger | |
see: https://github.com/FRRouting/frr/issues/7978 | |||
2021-08-02 | pbr: T3702: Add rules match fwmark | Viacheslav | |
2021-07-30 | Merge pull request #949 from sever-sever/T1176-curr | Christian Poessinger | |
bgp: T1176: Add solo option for neighbor | |||
2021-07-30 | router-advert: T2745: use template common coding style in for loops | Christian Poessinger | |
2021-07-30 | bgp: T1176: Add solo option for neighbor | Viacheslav | |
2021-07-23 | login: T3699: verify system username does not conflict with Linux base users | Christian Poessinger | |
(cherry picked from commit 7292631373ea50f9908796ef2eda32e672d1df2e) | |||
2021-07-22 | pki: https: T3642: Migrate HTTPS to use PKI configuration | sarthurdev | |
2021-07-21 | pki: openvpn: T3642: Migrate OpenVPN to PKI and refactor | sarthurdev | |
2021-07-20 | pki: eapol: T3642: Migrate EAPoL to use PKI configuration | sarthurdev | |
2021-07-20 | pki: sstp: T3642: Migrate SSTP to PKI configuration | sarthurdev | |
2021-07-20 | pki: openconnect: T3642: Migrate OpenConnect SSL to PKI configuration | sarthurdev | |
2021-07-19 | pki: wireguard: T3642: Migrate Wireguard private key directly into CLI | sarthurdev | |
Also renames peer pubkey to public-key for consistency | |||
2021-07-18 | smoketest: ospf: extend passive-interface debugging with kernel log | Christian Poessinger | |
2021-07-17 | ipsec: T2816: migrate "ipsec interfaces" to "interface" | Christian Poessinger | |
2021-07-11 | smoketest: ospf: change passive-interface debugging | Christian Poessinger | |
2021-07-04 | smoketest: pki: adjust to "type" node removal on CLI | Christian Poessinger | |
A certificate "type" can be auto derived from the certificate itself. | |||
2021-07-03 | ipsec: T2816: rework IKE and ESP key assignment | Christian Poessinger | |
Commit 2d79a500 ("ipsec: T2816: add Jinja2 converter for ESP/IKE groups to string") added a Jinja2 helper function which can be used to transform VyOS CLI ESP and IKE key proposals into a strongSwan compatible string cipher. This commit changes the IPSec implementation to make use of this new Jinja2 filter fubction/Python helper. This is required base work for better automated tests (smoketests) but also for an IKEv2 road-warrior setup. | |||
2021-07-02 | smoketest: ipam: add site2site x509 auth testcase | Christian Poessinger | |
2021-07-02 | smoketest: ipsec: place peer local-address into variable | Christian Poessinger | |