Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-09-18 | ipsec: vti: T3831: avoid usinf xfrm if_id 0 - implement shift by one | Christian Poessinger | |
The key defaults to 0 and will match any policies which similarly do not have a lookup key configuration. This means that a vti0 named interface will pull in all traffic and others will stop working. Thus we simply shift the key by one to also support a vti0 interface. | |||
2021-09-10 | squid: squidguard: T3810: Fix template for sourcre-group and rule | Viacheslav | |
Modify template for squid Replace old directives to actual | |||
2021-09-06 | pki: eapol: T3642: only add "pki" key to interface dict if pki is configured | Christian Poessinger | |
2021-09-06 | ifconfig: T3806: "ipv6 address no_default_link_local" required for MTU < 1280 | Christian Poessinger | |
This commit also extends the smoketest to verify that the exception for this error is raised. | |||
2021-09-04 | bgp: T3798: "replace-as" option can only be used when "no-prepend" is defined | Christian Poessinger | |
Commit 5f1c1ae4 ("bgp: T3798: add support for neighbor local-as <n> replace-as") added support for a new CLI option when the local-as is changed for a specified neighbor or peer-group. There was an error in the CLI / design as the "replace-as" option can only be used when "no-prepend" is defined. Thus "no-prepend" became a <node> and the new "replace-as" leafNode is now a child of "no-prepend". | |||
2021-09-03 | bgp: T3798: add support for neighbor local-as <n> replace-as | Christian Poessinger | |
2021-09-02 | login: T3792: bugfix for usernames containing a hyphen | Christian Poessinger | |
While migrating to get_config_dict() in commit e8a1c291b1 ("login: radius: T3192: migrate to get_config_dict()") the user-name was not excluded from mangling (no_tag_node_value_mangle=True). This resulted in a username "vyos-user" from CLI to be actually created as "vyos_user" on the system. This commit also adds respective Smoketests to prevent this in the future. | |||
2021-08-29 | isis: T3783: bugfix configuring spf-delay-ietf | Christian Poessinger | |
Mandatory FRR options for spf-delay-ietf did not get rendered in the Jinja2 template. | |||
2021-08-26 | Merge pull request #965 from c-po/t3739-evpn-route-map | Christian Poessinger | |
bgp: evpn: T3739: add route-map match support | |||
2021-08-24 | smoketest: bgp: extend ipv4/ipv6 safi route-target tests | Christian Poessinger | |
Commit 474db49a ("bgp: T3759: "l2vpn evpn" and ipv4/ipv6 safi route-targets differ") made it possible to specify a whitelist separated list of route-targets, this is now validated through the smoketests. | |||
2021-08-23 | smoketest: ospf: "metric-type" also works for kernel and static ↵ | Christian Poessinger | |
redistributed routes | |||
2021-08-22 | smoketest: pppoes: adjust testcase to vyos.ifconfig.interface migration | Christian Poessinger | |
Now that the PPPoE interface also makes use of the vyos.ifconfig.interface class, we need to adjust the smoketests to reflect all those changes. TODO: Start a local PPPoE server in a namespace and connect locally for deeper testing. | |||
2021-08-21 | smoketest: base: abbreviate path to /proc/sys/net | Christian Poessinger | |
2021-08-21 | interfaces: T3090: migrate adjust-mss from "firewall options" to "interface" ↵ | Christian Poessinger | |
level Getting rid of "set firewall options" and move it from: set firewall options interface ethX adjust-mss 1400 set firewall options interface ethX adjust-mss6 1400 to: set interfaces ethernet ethX ip adjust-mss 1400 set interfaces ethernet ethX ipv6 adjust-mss 1400 In addition add an extra option called clamp-mss-to-pmtu instead of a value. | |||
2021-08-20 | bgp: T3759: add IPv4/IPv6 unicast AFI route-map for VPN import/export | Christian Poessinger | |
This adds the following new commands: set protocols bgp address-family ipv4-unicast route-map vpn export foo-map-out set protocols bgp address-family ipv4-unicast route-map vpn import foo-map-in set protocols bgp address-family ipv6-unicast route-map vpn export foo-map-out set protocols bgp address-family ipv6-unicast route-map vpn import foo-map-in | |||
2021-08-20 | smoketest: bgp: movo test for "solo" option to regular neighbor testcase | Christian Poessinger | |
2021-08-20 | smoketest: bgp: add support to extract only given SAFI from FRR | Christian Poessinger | |
2021-08-19 | smoketest: ipsec: T3764: extend testcases for IKE/ESP lifetime | Christian Poessinger | |
2021-08-18 | bgp: T3759: add l3vpn "route-target vpn" commands | Christian Poessinger | |
Add the following new commands: * set protocols bgp address-family ipv4-unicast route-target vpn both 1.1.1.1:100 * set protocols bgp address-family ipv4-unicast route-target vpn export 1.1.1.1:100 * set protocols bgp address-family ipv4-unicast route-target vpn import 1.1.1.1:100 | |||
2021-08-18 | bgp: T3759: add l3vpn "rd" route-distinguisher commands | Christian Poessinger | |
Add the following new commands: * set protocols bgp address-family ipv4-unicast rd vpn export * set protocols bgp address-family ipv6-unicast rd vpn export | |||
2021-08-18 | bgp: T3759: add l3vpn "label vpn export" commands | Christian Poessinger | |
Add the following new commands: * set protocols bgp address-family ipv4-unicast label vpn export (auto | 0-1048575) * set protocols bgp address-family ipv6-unicast label vpn export (auto | 0-1048575) | |||
2021-08-18 | smoketest: ssh: migrate setUp -> setUpClass to run code only once | Christian Poessinger | |
... minor change to speed-up test time | |||
2021-08-18 | smoketest: nat66: migrate setUp -> setUpClass to run code only once | Christian Poessinger | |
... minor change to speed-up test time | |||
2021-08-17 | bgp: T3759: add l3vpn "import vrf" commands | Christian Poessinger | |
2021-08-17 | bgp: T3759: add l3vpn import/export vpn command for IPv4/IPv6 AFI | Christian Poessinger | |
2021-08-16 | smoketest: conntrack: fix function name disable -> enable | Christian Poessinger | |
2021-08-15 | Merge pull request #972 from erkin/current | Christian Poessinger | |
smoketest: conntrack: Update smoketests for new conntrack modules syntax | |||
2021-08-15 | smoketest: ospf: add debug code for redistribution test | Christian Poessinger | |
2021-08-15 | smoketest: ospf: fix type in testcase name #10 | Christian Poessinger | |
2021-08-15 | smoketest: ospf: T3757: test interface area configuration | Christian Poessinger | |
2021-08-15 | smoketest: conntrack: Update smoketests for new conntrack modules syntax | erkin | |
2021-08-15 | Merge pull request #944 from sever-sever/T3702 | Christian Poessinger | |
pbr: T3702: Add rules match fwmark | |||
2021-08-14 | smoketest: shim: wait for commit to be completed | Christian Poessinger | |
This completes commit e7d841d285 ("smoketest: shim: remove superfluous sleep() in getFRRconfig()"). | |||
2021-08-14 | smoketest: shim: remove superfluous sleep() in getFRRconfig() | Christian Poessinger | |
The sleep was intended to handle a FRR issue where the config was/is somehow now available in vtysh even with the commit was done. This rather feels like a race-condition and is fixed in the subsequent commit. | |||
2021-08-11 | bgp: evpn: T3739: add prefix-list match support | Christian Poessinger | |
FRR 7.5.1 supports: vyos(config-route-map)# match evpn default-route default EVPN type-5 route rd Route Distinguisher route-type Match route-type vni Match VNI This commit adds a proper VyOS CLI abstraction. | |||
2021-08-11 | smoketest: ospf: add logger to passive-interface test | Christian Poessinger | |
2021-08-08 | smoketest: rpki: remporary disable SSH based connection testing due to FRR bug | Christian Poessinger | |
see: https://github.com/FRRouting/frr/issues/7978 | |||
2021-08-02 | pbr: T3702: Add rules match fwmark | Viacheslav | |
2021-07-30 | Merge pull request #949 from sever-sever/T1176-curr | Christian Poessinger | |
bgp: T1176: Add solo option for neighbor | |||
2021-07-30 | router-advert: T2745: use template common coding style in for loops | Christian Poessinger | |
2021-07-30 | bgp: T1176: Add solo option for neighbor | Viacheslav | |
2021-07-23 | login: T3699: verify system username does not conflict with Linux base users | Christian Poessinger | |
(cherry picked from commit 7292631373ea50f9908796ef2eda32e672d1df2e) | |||
2021-07-22 | pki: https: T3642: Migrate HTTPS to use PKI configuration | sarthurdev | |
2021-07-21 | pki: openvpn: T3642: Migrate OpenVPN to PKI and refactor | sarthurdev | |
2021-07-20 | pki: eapol: T3642: Migrate EAPoL to use PKI configuration | sarthurdev | |
2021-07-20 | pki: sstp: T3642: Migrate SSTP to PKI configuration | sarthurdev | |
2021-07-20 | pki: openconnect: T3642: Migrate OpenConnect SSL to PKI configuration | sarthurdev | |
2021-07-19 | pki: wireguard: T3642: Migrate Wireguard private key directly into CLI | sarthurdev | |
Also renames peer pubkey to public-key for consistency | |||
2021-07-18 | smoketest: ospf: extend passive-interface debugging with kernel log | Christian Poessinger | |
2021-07-17 | ipsec: T2816: migrate "ipsec interfaces" to "interface" | Christian Poessinger | |