summaryrefslogtreecommitdiff
path: root/src/conf_mode
AgeCommit message (Collapse)Author
2018-09-01snmp.py: bugfix writing rocommunity string in configChristian Poessinger
2018-09-01snmp.py: beautify generated snmp.confChristian Poessinger
2018-09-01T771: snmp.px: reduce syslog noiseChristian Poessinger
2018-08-31T811: dhcpv6_server.py: add missing validators when comitting config changesChristian Poessinger
2018-08-31dhcp_server.py: cleanupChristian Poessinger
2018-08-31bcast_relay.py: remove obsolete import statementChristian Poessinger
2018-08-30T778: dhcpv6-server: XML and Python rewriteChristian Poessinger
2018-08-30dhcp_server.py: rework verify() error messages/error checkingChristian Poessinger
Commit 067a6b1524 ("vyos: package: extend validator by is_subnet_connected()") added a mechanism to probe if a given IPv4/IPv6 address is connected to any interface on the subnet - or is part of this subnet. We now use this call instead of producing more and more biler-plate code!
2018-08-30T813: fix the check for duplicate VRIDs on the same interface (patch by ↵Daniil Baturin
Watcher7).
2018-08-29snmp.py: only write 'oldEngineID' to config if v3 is enabledChristian Poessinger
2018-08-29T733: snmp.py: switch to new IP address validatorsChristian Poessinger
Commit a30dac7c2 ("vyos package: add IP address validators") added system wide Python validators for IP addresses. Remove duplicated code and switch to single source.
2018-08-29tftp_server.py: switch to new IP address validatorsChristian Poessinger
Commit a30dac7c2 ("vyos package: add IP address validators") added system wide Python validators for IP addresses. Remove duplicated code and switch to a single source.
2018-08-29dhcp_server.py: beautify error messages generated in verify()Christian Poessinger
2018-08-29dhcp_server.py: check if AF_INET address is configure before using it in ↵Christian Poessinger
verify()
2018-08-29dhcp_server.py: fix KeyError in verify()Christian Poessinger
2018-08-29dhcp_server.py: improve handling of 'dhcpd.leases' fileChristian Poessinger
If there was yet no lease file present, dhcpd refused to start. Lease file is created if required. Ususally this is handeled by the isc-dhcp-server init script but we use our own path (for persistance) of that file.
2018-08-28T778: harden dhcp_server.py for non existing filesChristian Poessinger
2018-08-28T810: bugfix broadcast-relay address validator, add 'disable' functionalityChristian Poessinger
Whole broadcast relay service can be temporary disabled via set service broadcast-relay disable Individual instances of the broadcast relay service can be disabled set service broadcast-relay id <n> disable
2018-08-28dhcp_server.py: issue warning and don't generate config if service is disabledChristian Poessinger
2018-08-28dhcp_server.py: rename dictionary key 'disable' to 'disabled'Christian Poessinger
2018-08-27Merge branch 'dhcp-server-rewrite' into currentChristian Poessinger
2018-08-27T778: T782: dhcp-server: XML and Python rewriteChristian Poessinger
This commit changes in addtion the DHCP server config syntax as defined in "T782: Cleanup dhcp-server configuration". Replace boolean parameter from the folowing nodes and make it valueless. This requires a migration script which is tracked with this task * set service dhcp-server shared-network-name <xyz> subnet 172.31.0.0/24 ip-forwarding enable (true|false) * set service dhcp-server shared-network-name <xyz> authoritative (true|false) * set service dhcp-server disabled (true|false) * set service dhcp-server dynamic-dns-update enable (true|fals) * set service dhcp-server hostfile-update (enable|disable) Replace the nested start/stop ip address from "subnet 172.31.0.0/24 start 172.31.0.101 stop 172.31.0.149" to "subnet 172.31.0.0/24 range <foo> start" and "subnet 172.31.0.0/24 range <foo> stop" where foo can be any character or number. In addition the vyatta-cfg-dhcp-server package used it's own init/config file for service startup. This has been migrated to the vanilla Debian files. Copy 'on-dhcp-event.sh' from vyatta-cfg-shcp-server package commit 4749e648bca6.
2018-08-26Merge remote-tracking branch 'upstream/current' into currenthagbard
2018-08-26T427: changed option listen-port to only porthagbard
2018-08-26tftp_server.py: change umask for created filesChristian Poessinger
2018-08-26Merge remote-tracking branch 'upstream/current' into currenthagbard
2018-08-26tftp_server.py: fix copy-paste commentChristian Poessinger
2018-08-26tftp_server.py: fix indention and add more verbose commentsChristian Poessinger
2018-08-26T792: add TFTP server functionalityChristian Poessinger
2018-08-26ssh.py: start/stop service via systemctlChristian Poessinger
2018-08-26ntp.py: start/stop service via systemctlChristian Poessinger
2018-08-25Merge remote-tracking branch 'upstream/current' into currenthagbard
2018-08-25idents fixed (sonarcloud complains)hagbard
2018-08-25ntp.py: fix typo in commentChristian Poessinger
2018-08-24T791: endpoint pattern doesn't need to be checked, wg returns an error ↵hagbard
message if it's not IP:port
2018-08-24T791: mtu size implementationhagbard
2018-08-23T793: fwmark implementationhagbard
2018-08-23listen-port for update mode needs to be 0 to switch back to randomly chosen ↵hagbard
if previously configured
2018-08-23T791: implementationhagbard
TODO: fwmark, mtu and pre-shared key
2018-08-20bugfix: if config and effective value are equal, there is no change ↵hagbard
required, deleting it from the dict will result in a keyerror if not aset at all
2018-08-17T783: to disable keepalive is has to be set to 0.hagbard
2018-08-17T783: conf mode persistent-keepalive implementationhagbard
2018-08-17T427: endpoint is only required for client mode, it's now an optional parameterhagbard
2018-08-17remove endpoint check, which is optional. server mode find the endpoint from ↵hagbard
an authenticated package.
2018-08-14Merge pull request #27 from hagbard-01/currentDaniil Baturin
T427, T773 adding wirguard support
2018-08-12T427: wireguard supporthagbard
2018-08-12T772: fixup for keepalived not understanding escaped quotes.Daniil Baturin
Since it does not understand escaped quotes inside notify_* options, until we fix that, we have to put the script and its arguments in positional arguments and join inside the transition script runner.
2018-08-10T666, T616: fix messed up variables in hello source/peer address checking.Daniil Baturin
2018-08-07T733: snmp.py: set IPv6 community stringJules Taplin
Also fixed it to correctly set an IPv6 community string, even if you don't specify the network it's working on.
2018-08-05T71: rename IPsec "settings" to "options" for consistency with the rest of ↵Daniil Baturin
the system.