summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2018-12-03Merge branch 'current' into cruxDaniil Baturin
2018-12-03T956: display SA traffic counters in human-redable units.Daniil Baturin
2018-12-03T956: correct IKE proposal string parsing for SAs with non-zero counters.Daniil Baturin
2018-11-30Fixes: T1061: Wireguard: Missing option to administrativly shutdown interfacehagbard
2018-11-29T1001: escape backslashes in the input in the commands pipe as well.Daniil Baturin
2018-11-29T1001: Bugfix: Handle backslashes in values with "show configuration commands"arnehaak
This script is usually called with the output of "cli-shell-api showCfg", which does not escape backslashes. "ConfigTree()" expects escaped backslashes when parsing a config string (and also prints them itself). Therefore this script would fail. Manually escape backslashes here to handle backslashes in any configuration strings properly. The alternative would be to modify the output of "cli-shell-api showCfg", but that may be break other things who rely on that specific output. This fixes https://phabricator.vyos.net/T1001
2018-11-29T1001: escape backslashes in the input in the commands pipe as well.Daniil Baturin
2018-11-29T1001: Bugfix: Handle backslashes in values with "show configuration commands"arnehaak
This script is usually called with the output of "cli-shell-api showCfg", which does not escape backslashes. "ConfigTree()" expects escaped backslashes when parsing a config string (and also prints them itself). Therefore this script would fail. Manually escape backslashes here to handle backslashes in any configuration strings properly. The alternative would be to modify the output of "cli-shell-api showCfg", but that may be break other things who rely on that specific output. This fixes https://phabricator.vyos.net/T1001
2018-11-22T835: accel-ppp: pppoe implementationhagbard
- verify if an auth mode is set and if its local checking that a user and password for chap-secrets exists.
2018-11-22T835: accel-ppp: pppoe implementationhagbard
- verify if an auth mode is set and if its local checking that a user and password for chap-secrets exists.
2018-11-21T835: syslog debug message removed (to verbose)hagbard
2018-11-21T835: syslog debug message removed (to verbose)hagbard
2018-11-19Merge branch 'current' into cruxDaniil Baturin
2018-11-19T835: migration script for radius' secret vs. key, rolled back thehagbard
change to 'mode local|radius'
2018-11-19T835: add missing call to write_chap_secrets() to generate()Daniil Baturin
2018-11-19T835: add missing call to write_chap_secrets() to generate()Daniil Baturin
2018-11-19Merge branch 'current' into cruxDaniil Baturin
2018-11-18Merge branch 'current' of https://github.com/vyos/vyos-1x into currentDaniil Baturin
2018-11-18T956: add a new script for displaying IPsec SAs.Daniil Baturin
2018-11-18T956: add a new script for displaying IPsec SAs.Daniil Baturin
2018-11-18T835: adding default pado delay and mode autocompletehagbard
2018-11-17T1018: remove obsoleted 'dynamic' option from NTPChristian Poessinger
Increase NTP config version from 0 to 1. For more information see [1]. ntpd: Warning: the "dynamic" keyword has been obsoleted and will be removed in the next release [1]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=553976 (cherry picked from commit 7a615ab169a7f6141fd9b6e84ac1ea415216d9bb)
2018-11-17T1018: remove obsoleted 'dynamic' option from NTPChristian Poessinger
Increase NTP config version from 0 to 1. For more information see [1]. ntpd: Warning: the "dynamic" keyword has been obsoleted and will be removed in the next release [1]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=553976
2018-11-17Rename show-igmpproxy.py -> show_igmpproxy.pyChristian Poessinger
(cherry picked from commit 604600bf40873a7d64329d88dafd90196ed10745)
2018-11-17T1016: fix IPv4/IPv6 dhcp relay restart commandChristian Poessinger
Current implementation referred to a no longer existing Perl script to restart the IPv4 and IPv6 instance of dhcrelay. > restart dhcp relay-agent > restart dhcpv6 relay-agent (cherry picked from commit f9007c5f5e6e7957ab1c955c10b3842dca7b253d)
2018-11-17Rename show-igmpproxy.py -> show_igmpproxy.pyChristian Poessinger
2018-11-17T1016: fix IPv4/IPv6 dhcp relay restart commandChristian Poessinger
Current implementation referred to a no longer existing Perl script to restart the IPv4 and IPv6 instance of dhcrelay. > restart dhcp relay-agent > restart dhcpv6 relay-agent
2018-11-14Bugfix: T835 - verify radius server settingshagbard
2018-11-14Fixes: T940 adding immark to syslog optionshagbard
(cherry-picked 439d86aa55c7eed9619391ecec04bc1fbd5f9323)
2018-11-14Fixes: T940 adding immark to syslog optionshagbard
2018-11-14T835: accel-ppp pppoe implemetaionhagbard
- ipv6 DNS, ippv6pool, ipv6 PD, ipv6 inf IDs - snmp subagent and master mode - connlimits configurable - more ppp options configurable (mppe, lcp-echo intervals, mtu, mru etc.) - radius extended options (for HA etc.)
2018-11-12migration/l2tp: fix file commentChristian Poessinger
(cherry picked from commit 2375e0876abeff26ba875419b62f974d0ff6122a)
2018-11-12T987: Unclutter PPTP/IPSec RADIUS configuration nodesChristian Poessinger
In other words, remove top level tag nodes from radius-server and introduce a regular "radius" node, thus we can add additional features, too. A migration script is provided in vyos-1x which takes care of this config migration. Change VyOS CLI from: vyos@vyos# show vpn pptp remote-access { authentication { mode radius radius-server 172.16.100.10 { key barbarbar } radius-server 172.16.100.20 { key foofoofoo } } To: vyos@vyos# show vpn l2tp remote-access { authentication { mode radius radius { server 172.16.100.10 { key barbarbar } server 172.16.100.20 { key foofoofoo } } } (cherry picked from commit 2b8af944d60de2fca8370a108e422ccc6b3d006d)
2018-11-12migration/l2tp: fix file commentChristian Poessinger
2018-11-12T987: Unclutter PPTP/IPSec RADIUS configuration nodesChristian Poessinger
In other words, remove top level tag nodes from radius-server and introduce a regular "radius" node, thus we can add additional features, too. A migration script is provided in vyos-1x which takes care of this config migration. Change VyOS CLI from: vyos@vyos# show vpn pptp remote-access { authentication { mode radius radius-server 172.16.100.10 { key barbarbar } radius-server 172.16.100.20 { key foofoofoo } } To: vyos@vyos# show vpn l2tp remote-access { authentication { mode radius radius { server 172.16.100.10 { key barbarbar } server 172.16.100.20 { key foofoofoo } } }
2018-11-12Merge branch 'current' into cruxDaniil Baturin
2018-11-11T998: "service dns dynamic" does now honor the "use-web" statementChristian Poessinger
This bug was present since the old Vyatta days as the use-web statement was only put into action when also "use-web skip" was defined. The service https://ipinfo.io/ip does not place any crap in front of the IP address so the skip statement was not used and made no sense.
2018-11-11T987: Unclutter L2TP/IPSec RADIUS configuration nodesChristian Poessinger
In other words, remove top level tag nodes from radius-server and introduce a regular "radius" node, thus we can add additional features, too. A migration script is provided in vyos-1x which takes care of this config migration. Change VyOS CLI from: vyos@vyos# show vpn l2tp remote-access { authentication { mode radius radius-server 172.16.100.10 { key barbarbar } radius-server 172.16.100.20 { key foofoofoo } radius-source-address 172.16.254.100 } To: vyos@vyos# show vpn l2tp remote-access { authentication { mode radius radius { server 172.16.100.10 { key barbarbar } server 172.16.100.20 { key foofoofoo } source-address 172.16.254.100 } }
2018-11-09T835: accel-ppp pppoe implementationhagbard
2018-11-08T978: Support PowerDNS Recursor outbound queries over IPv6.Geoff Adams
This requires adding a query-local-address6 setting to enable outbound IPv6 queries in general, and also formatting upstream nameserver IPv6 addresses in such a way that Recursor can parse them.
2018-11-08dhcp - move commit hook into shared-networkBob
Move the on commit in a generated dhcpd.conf into the shared-network to fix hostfile-update not working.
2018-11-08cleanup: move files from vyos-build repo to vyos-1x where they are requiredChristian Poessinger
2018-11-08T974: bugfix dns forwarder not listening on IPv6 addressesChristian Poessinger
By default PowerDNS only allows 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16 for incoming DNS queries - we changed this to 0.0.0.0/0 to be reachable by everyone. This only covered the IPv4 address space and any IPv6 related query was not handled by the server.
2018-11-07Merge branch 'igmproxy' into currentChristian Poessinger
* igmproxy: T959: XML/Python rewrite of "protocol igmp-proxy" and op-mode commands show-raid.xml: fixup indention Add missing VyOS copyright notices
2018-11-05T965: Fix Wireguard configuration inconsistencieshagbard
- pubkey updates now work - removing peers or interfaces work, was related tothe fact that tag nodes are called multiple times
2018-11-06Merge branch 'crux' of https://github.com/vyos/vyos-1x into cruxDaniil Baturin
2018-11-06Merge branch 'current' into cruxDaniil Baturin
2018-11-05T966: Traceback when deleting wireguard interfacehagbard
2018-11-05T966: Traceback when deleting wireguard interfacehagbard
2018-11-05T288: add a script for normalizing IP(v6) addresses so that they can be ↵Daniil Baturin
safely passed to iproute2.