summaryrefslogtreecommitdiff
path: root/src/conf_mode
AgeCommit message (Collapse)Author
2020-04-11vpn: l2tp: T2264: migrate IPv6 prefix node to common CLI styleChristian Poessinger
Combining multiple options into a single CLI node is considered bad practice. IPv6 prefixes consited of the prefix itself and a mask send to the client in one node only. The following CLI parts have been migrated from client-ipv6-pool { delegate-prefix fc00:0:1::/48,64 prefix 2001:db8::/64,64 } to client-ipv6-pool { delegate fc00:0:1::/48 { delegation-prefix 48 } prefix 2001:db8::/48 { mask 64 } } Thus regular validation steps from the VyOS CLI can be used when a prefix is configured.
2020-04-11vpn: l2tp: T2264: simplify IPv6 config dictionary elementsChristian Poessinger
2020-04-11vpn: sstp: T2008: migrate from SysVinit -> systemdChristian Poessinger
2020-04-11vpn: sstp: T2008: bugfix KeyError 'client_gateway'Christian Poessinger
2020-04-11vpn: l2tp: T2264: migrate from SysVinit -> systemdChristian Poessinger
2020-04-11vpn: l2tp: T2264: remove debug pprintChristian Poessinger
2020-04-11vpn: l2tp: T2264: proper set PPP default values to ease Jinja2 templateChristian Poessinger
2020-04-11vpn: l2tp: T2264: migrate to new dictionary keys for radius authChristian Poessinger
2020-04-11vpn: sstp: T2008: set accell default values in config dictChristian Poessinger
This will remove the required if/else parts int he Jinja2 template.
2020-04-11vpn: l2tp: T2264: use "with open()" when writing configChristian Poessinger
2020-04-11vpn: l2tp: T2264: migrate to new dictionary keys for local authChristian Poessinger
2020-04-11vpn: sstp: T2008: improve error message for non existent local-usersChristian Poessinger
2020-04-11vpn: l2tp: T2264: cleanup thread_cnt generationChristian Poessinger
2020-04-11vpn: sstp: T2008: cleanup thread_cnt generationChristian Poessinger
2020-04-11vpn: l2tp: T2264: combine WINS CLI syntaxChristian Poessinger
There is no reason to distinguish between WINS servers in terms of priority. This is solely a task which can be done in the underlaying Python scripts.
2020-04-11vpn: l2tp: T2264: combine IPv4/IPv6 name-server CLI syntaxChristian Poessinger
There is no reason to distinguish between an IPv4 and IPv6 name-server node on the CLI - this can be done in the underlaying Python scripts.
2020-04-11vpn: sstp: T2008: adjust DNS error messageChristian Poessinger
2020-04-11vpn: l2tp: T2264: comment cleanup on chk_con()Christian Poessinger
2020-04-11vpn: l2tp: T2264: use default_config_data dictChristian Poessinger
2020-04-11vpn: l2tp: T2264: introduce common config baseChristian Poessinger
2020-04-11vpn: l2tp: T2264: import cleanupChristian Poessinger
2020-04-11vpn: l2tp: T2264: rename files to match CLI levelsChristian Poessinger
2020-04-10openvpn: T2266: fix verify for client-server bridged modejjakob
2020-04-10pppoe: T2248: connect-on-demand and vrf are mutually exclusiveChristian Poessinger
As PPP can be used to establish a connection on-demand it manages the Kernel default route. This can not be used when using VRFs which are managed by the ip-up.d and ip-down.d scripts - thus those options are now mutially exclusive. The best fix would be adding support for VRFs into PPP.
2020-04-09vxlan: T2172: add source-address optionChristian Poessinger
This is a base requirement for l2vpn evpn. When source-address is configured, the option "local <source-addr> nolearning" is appended when creating the interface as mentioned here: https://vincent.bernat.ch/en/blog/2017-vxlan-bgp-evpn
2020-04-09Revert "vxlan: T2172: remove group or remote check in verify()"Christian Poessinger
This reverts commit 195e1da6a518ee3a2cbc0e1d454317e3c05e3e6e.
2020-04-09Merge branch 'vxlan' of github.com:c-po/vyos-1x into currentChristian Poessinger
* 'vxlan' of github.com:c-po/vyos-1x: vxlan: pseudo-ethernet: T2260: convert link nodes to source-interface wireguard: T2206: fix comment in migration script pppoe: enable Jinja2 trim_blocks
2020-04-09vxlan: pseudo-ethernet: T2260: convert link nodes to source-interfaceChristian Poessinger
2020-04-09pppoe: enable Jinja2 trim_blocksChristian Poessinger
2020-04-09util: T2226: os.system was wrongly converted to runThomas Mangin
os.system does print the ouput of the command, run() does not. A new function called call() does the printing and return the error code.
2020-04-09Revert "tunnel: T2028: prevent single 'remote' keyword"Christian Poessinger
This reverts commit 37973a13bbc168c09e5f4d1e606f91fd7ffbb41a.
2020-04-09Merge pull request #317 from thomas-mangin/T2028-remoteChristian Poessinger
tunnel: T2028: fix remote and registration
2020-04-08tunnel: T2028: prevent single 'remote' keywordThomas Mangin
When the remote keywrod is ommited, the default value of '' is still set, therefore the ip command will include it. Remote is now removed if unset.
2020-04-08vyos.util: introduce chmod_750() for files/directoriesChristian Poessinger
2020-04-08wireguard: T2244: re-use interface removal code from WireGuardIf classChristian Poessinger
2020-04-08wireguard: T2244: fix writing PSKChristian Poessinger
2020-04-08vyos-util: rename chown_file() > chown()Christian Poessinger
... to make it clear also directories can be chown(-ed)
2020-04-08wireguard: T2247: add VRF supportChristian Poessinger
2020-04-08wireguard: T2244: rewrite to match code structure of other interfacesChristian Poessinger
Accessing a list of dictionaries and parsind/manipulating the content can and should be done in a way other interface implementations do it. Just to name a few: - Ethernet - L2TPv3 - WWAN (WirelessModem)
2020-04-08Merge pull request #315 from jjakob/openvpn-templateChristian Poessinger
openvpn: T2234: clean up and rework openvpn template
2020-04-08openvpn: T2234: clean up and rework openvpn templatejjakob
- rearranged options to put them in logical groups separated by blank lines - removed unnecessary blank lines (whitespace) - fixed encryption if-else comparison logic that caused 3des to be ignored - set tls if tls-version-min is set
2020-04-08vrf: add additional documentation linkChristian Poessinger
2020-04-08Merge pull request #313 from DmitriyEshenko/dmvpn-fix1Christian Poessinger
tunnel: T2236: Add additional check for type change
2020-04-08Merge pull request #311 from thomas-mangin/T2028-explainChristian Poessinger
tunnel: T2028: document the classes created
2020-04-08tunnel: T2236: Add additional check for type changeDmitriyEshenko
2020-04-08tunnel: T2028: document the classes createdThomas Mangin
2020-04-08bridge: T2232: bugfix wifi and wwan verify() sectionChristian Poessinger
Commit fcce471 ("bridge: T2232: prevent deletion of enslaved interfaces") added a regression by referencing a wrong variable name.
2020-04-07http api: T2160: Fix error message when api proxy restricted.John Estabrook
2020-04-07http api: T2160: move 'api virtual-host' to 'api-restrict virtual-host'John Estabrook
Restriction of api proxy should be owned by https.py, not http-api.py.
2020-04-07bridge: T2232: prevent deletion of enslaved interfacesChristian Poessinger
Interfaces enslaved to a bridge are not allowed to be deleted. If an interface is deleted from the config but it is still enslaved to a bridge will cause a configuration error on the subsequent boot.
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-17 11:06:45 +0000