Age | Commit message (Collapse) | Author |
|
[SSTP] - T853: accel-ppp: SSTP implementation
|
|
|
|
|
|
|
|
- node.def deletion for show remote-access
- IPSec interface checking for L2TP
- IPSec x509 for l2tp
- verification of outside-address to warning since it was optional in the previous config
|
|
|
|
|
|
when a non-unique subnet is found.
|
|
|
|
|
|
|
|
|
|
configuration line
In the past we used the PowerDNS cofniguration option forward-zones and
forward-zones-recurse, but only the latter one sets the recursion bit in
the DNS query.
Thus all recursions have been moved to this config statement.
|
|
If in config exist `bind=` without value, accel-ppp listen wrong ip address 255.255.255.255:1723. If need default behavior with listening on 0.0.0.0:1723 we don't set empty bind option.
|
|
|
|
|
|
|
|
|
|
|
|
- T1435: dhcp-server: make ip-address optional in static-mapping
- remove [REQUIRED] from dhcpv6-server static-mapping identifier and ipv6-address
- verify if static-mapping ipv6-address is in subnet
- make help and error messages in conf-mode more descriptive
- remove regex ^$ anchors (implied in re.fullmatch)
|
|
[pdns-recursor] T1469 - specified dns forwarding not work
|
|
|
|
return_effective_values output.
|
|
of CLI mode.
|
|
|
|
|
|
|
|
|
|
* fixed minor issues
* fixed lower function for mac addresses if user capitalized it (local mode only)
* added some checks to verify()
* cli ip-address checks on input
|
|
|
|
|
|
T1470: improve output of "show dhcpv6 server leases"
|
|
* chap-secrets file generation
* noauth in accel config as option
* local auth with csid implemented
* radius implementation
* shaper per user implemented
* op comands for stats
|
|
when conflict exists between forward-zone-recurse entry,
the lower one hides the upper one, which leads to inactive dns forwarding configuration
|
|
- change DUID to IAID_DUID
- format IAID_DUID as colon-separated hex list
- implement functions: pool, sort, state
- add op-mode definitions for pool, sort, state
- add columns: State, Type, Last communication, Pool
- implement json output
- implement completionHelp function
|
|
* bfd:
bfd: T1183: support show of individual BFD peer
bfd: T1183: move "multiplier" configuration node to "interval multiplier"
bfd: T1183: add rx/tx interval configuration
bfd: T1183: multihop doesn't accept interface names
bfd: T1183: add support to configure detection multiplier
bfd: T1183: adjust CLI syntax for source address/interface
bfd: T1137: add 'show protocols bfd peer' command
bfd: T1183: add support for multihop
bfd: T1183: first working FRR bfd peer configuration
bfd: T1183: IPv6 peers require explicit local address/interface
bfd: T1183: initial CLI implementation
|
|
T1433: fix show dhcpv6 server leases
|
|
forward-zones-recurse behaves identically to dnsmasq server option
in legacy vyos 1.1.8, while forward-zones option disallow recursive
name resolving, which leads to dns lookup failure
|
|
|
|
|
|
vyos@vyos# show protocols
bfd {
peer 1.1.1.1 {
interval {
receive 400
transmit 300
}
}
}
|
|
|
|
Configures the detection multiplier to determine packet loss. The remote
transmission interval will be multiplied by this value to determine the
connection loss detection timer. The default value is 3.
Example: when the local system has detect-multiplier 3 and the remote
system has transmission interval 300, the local system will detect
failures only after 900 milliseconds without receiving packets.
|
|
Place address/interface under new source node.
vyis@vyos# show protocols bfd
peer 1.1.1.1 {
source {
address 1.2.3.4
interface eth0.201
}
}
|
|
multihop tells the BFD daemon that we should expect packets with TTL less than
254 (because it will take more than one hop) and to listen on the multihop port
(4784). When using multi-hop mode echo-mode will not work (see RFC 5883 section 3).
|
|
|
|
|
|
vyos@vyos# show protocols bfd
peer 172.18.202.10 {
local-address 172.18.201.10
local-interface eth0.201
shutdown
}
peer 172.18.202.12 {
shutdown
}
|
|
[ firewall options interface wg01 ]
Traceback (most recent call last):
File "/usr/libexec/vyos/conf_mode/firewall_options.py", line 139, in <module>
apply(c)
File "/usr/libexec/vyos/conf_mode/firewall_options.py", line 97, in apply
if tcp['new_chain4']:
TypeError: 'NoneType' object is not subscriptable
delete [ firewall options ] failed
delete [ firewall ] failed
Commit failed
|
|
|