Age | Commit message (Collapse) | Author |
|
(cherry picked from commit 3081705175da8eb4ee7c1264e64d06f30b175fdb)
|
|
T4331: IPv6 link local addresses are not configured when an interface is in a VRF (equuleus)
|
|
isis: T4336: add support for MD5 authentication password on a circuit (equuleus)
|
|
T4341 SSH and system login fixes + smoketests
|
|
T4319: bugfixes for disabled IPv6 (equuleus)
|
|
(cherry picked from commit 16a88f6b86e4ab920178701f6b3c02e893f337e8)
|
|
interface in VRF
(cherry picked from commit 5b57c536b5f599deea2106aad7aea95c465bc0c0)
|
|
(cherry picked from commit 6a04ff2840dfcfcad7a1cb93baf210370fa8871e)
|
|
(cherry picked from commit 4bb0adf535e12dc962a0ebea0f5a96f612a76a5d)
|
|
In order to test for proper system authentication and security setup a new
testcase is added which performs an SSH login and command execution with a
predefined user. The result (output of uname -a) must match the output if the
command is run natively.
We also try to login as an invalid user - this is not allowed to work.
(cherry picked from commit e66c45ce7a664ecb26d21a215975777bef0fcd71)
|
|
|
|
Commit f8b3d8999c ("ipv6: T4319: do not configure IPv6 related settings if it's
disabled") moved the MTU configuration part under the code path which is only
run if IPv6 is enabled on the system.
This prevented MTU changes on IPv6 disabled systems.
(cherry picked from commit 53e20097d227ebf4bdb4dc6c85427ec9c5ec3982)
|
|
|
|
(cherry picked from commit a33b737b753843501c86eee744aef75137d2b64e)
|
|
support"
|
|
(cherry picked from commit 6249c2abe7e40a6671549d318ee9b0fbd622b991)
|
|
(cherry picked from commit 625ea99e69a319c88fa67125438fdc457eaaaed3)
|
|
backport: T4515: T4219: policy local-route6 and inbound-interface support
|
|
(cherry picked from commit 1d0d4e83d8413c1b389be763cadd5d150d4be982)
|
|
After hardning the regex validator to be preceeded with ^ and ending with $
it was no longer possible to have a comma separated list as SSH ciphers. The
migrations cript is altered to migrate the previous comma separated list
to individual multi node entries - cipher and key-exchange always had been
multinodes - so this just re-arranges some values and does not break CLI
compatibility
(cherry picked from commit 61fa1c95164e4222e79b078b1a796f41397e0ee3)
|
|
|
|
(cherry picked from commit 15eff1682613ad20f83c46fded866b132a1fb814)
|
|
|
|
.sort() is an inplace operation and return None...
|
|
|
|
|
|
Adds support for `ip -6 rule` policy based routing.
Also, extends the existing ipv4 implemenation with a
`destination` key, which is translated as
`ip rule add to x.x.x.x/x` rules.
https://phabricator.vyos.net/T4151
|
|
|
|
(cherry picked from commit 53517de05e9566c35218d1f07cacb1bff98a46d9)
|
|
(cherry picked from commit e64d45717940aa4fb4a072065bdfa04f884d00cc)
|
|
This reverts commit e11a7ff1b2817cc8f4b595171fe82a43a209ebc2.
|
|
This reverts commit ed7c674da17519e6331a9cef8522c5e49251d505.
|
|
This reverts commit b71a04811bd61e1faf2bc4eaceaaae8bdbf97dc6.
|
|
This reverts commit ad26e92a5dccb4a7b6777d11781c323af2557db7.
|
|
This reverts commit 72d7152f794cfe48821797d62865024c1843096e.
|
|
(cherry picked from commit c3661c8d5d7e8f5c1d040cadf134e87f0d77e28e)
|
|
VXLAN does support using multiple remotes but VyOS does not. Add the ability
to set multiple remotes and add their flood lists using "bridge" command.
(cherry picked from commit 0ecddff7cffa8900d351d5c15e32420f9d780c0b)
|
|
Commit 5d14a04b ("smoketest: dhcp: T4203: move testcase to base class") added
global support in the test case framework for DHCP tests. Some interfaces (e.g.
MACsec) require additional options to be passed before the test can be launched.
In the MACsec case this includes a source interface, or encryption ciphers.
(cherry picked from commit 5ae566086c5c190d52b15f64454abcae9c8a1d46)
|
|
We do not only provide DHCP functionality to ethernet interfaces, it's a common
feature so the testcase should be made available for multiple interface types.
(cherry picked from commit 5d14a04b6ffbd592e8257d98d71da5acb1bb45a9)
|
|
backport: T4515: T4219: policy local-route6 and inbound-interface support
|
|
Commit 5fc9ef9e ("DHCP : T4258: Set correct port for dhcp-failover") changed
how the failover port is rendered into the ISC DHCPd configuration - adjustment
of the smoketests was missed out.
(cherry picked from commit 29ba813fb65b8b292105cdae4f8f71fcce6350a1)
|
|
|
|
Ability to set virtual_address on not vrrp-listen interface
Add ability don't track primary vrrp interface "exclude-vrrp-interface"
Add ability to set tracking (state UP/Down) on desired interfaces
For example eth0 is used for vrrp and we want to track another eth1
interface that not belong to any vrrp-group
set high-avail vrrp group WAN interface 'eth0'
set high-avail vrrp group WAN virtual-address 192.0.2.222/24 interface 'eth2'
set high-avail vrrp group WAN track exclude-vrrp-interface
set high-avail vrrp group WAN track interface 'eth1'
|
|
.sort() is an inplace operation and return None...
|
|
|
|
|
|
Adds support for `ip -6 rule` policy based routing.
Also, extends the existing ipv4 implemenation with a
`destination` key, which is translated as
`ip rule add to x.x.x.x/x` rules.
https://phabricator.vyos.net/T4151
|
|
As INFLUX_TOKEN is present in override.conf.tmpl environment we expect
variable "$INFLUX_TOKEN" in the telegraf template and config but not
value of the token
(cherry picked from commit 19f65290529ac642da419ac77003ddaa70d0cc67)
|
|
|
|
(cherry picked from commit b4185f8356d69476292906ebe32daf1c4867601a)
|