Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-08-15 | pbr: T3702: Fix incorrect splits for fwmark | Viacheslav | |
2021-08-15 | ospf: T3757: support to configure area at an interface level | Christian Poessinger | |
FRR supports configuring either network prefixes per area, or assign an interface to an area to participate in the routing process. This is already well known from other venders and supported by FRR. A valid VyOS OSPF configuration would then look like: vyos@vyos# show protocols ospf { interface dum0 { area 0 } interface eth0.201 { area 0 authentication { md5 { key-id 10 { md5-key vyos } } } dead-interval 40 hello-interval 10 priority 1 retransmit-interval 5 transmit-delay 1 } log-adjacency-changes { detail } parameters { abr-type cisco router-id 172.18.254.201 } passive-interface default passive-interface-exclude eth0.201 } | |||
2021-08-15 | wireguard: T3756: fix generated qr code header | Boris Manojlovic | |
2021-08-15 | Merge pull request #944 from sever-sever/T3702 | Christian Poessinger | |
pbr: T3702: Add rules match fwmark | |||
2021-08-15 | Merge pull request #970 from jack9603301/T3648 | Christian Poessinger | |
op-mode: nat: T3648: Modify the operation mode script implementation of NAT to fix the existing problem | |||
2021-08-15 | conntrack: T3275: migrate 'disable' syntax to 'enable' syntax for the new ↵ | Lulu Cathrinus Grimalkin | |
default behavior | |||
2021-08-14 | op-mode: ipsec: T3745: "show vpn ipse sa" improve sorting | Christian Poessinger | |
2021-08-14 | ospf: T3236: use proper daemon named template file | Christian Poessinger | |
2021-08-14 | op-mode: nat: T3648: Modify the operation mode script implementation of NAT ↵ | jack9603301 | |
to fix the existing problem | |||
2021-08-13 | vrf: T3734: T3728: vni must be configured with a higher priority then bgpd | Christian Poessinger | |
When removing bgp (vrf) instances the assigned VRF vni must be deleted from FRR prior the removal of the bgp settings (T3734). This is now done by moving the CLI command "set vrf name red vni 1000" to a dedicated Python script with a priority higher then bgp. | |||
2021-08-13 | Merge pull request #969 from sarthurdev/T3752 | Christian Poessinger | |
pki: T3752: Fix file output for certificate requests | |||
2021-08-13 | pki: T3752: Fix file output for certificate requests | sarthurdev | |
2021-08-13 | openvpn: T3738: Disable authentication option for server mode | Viacheslav | |
2021-08-13 | Merge pull request #967 from sever-sever/T3708-curr | Christian Poessinger | |
isis: T3708: Fix errors in MTU calculation | |||
2021-08-13 | isis: T3708: Fix errors in MTU calculation | Viacheslav | |
2021-08-12 | T3749: Moving some counters into the proper loop | Kroy | |
2021-08-12 | login: T3746: inform users about pending reboots | Christian Poessinger | |
2021-08-12 | Merge pull request #963 from FileGo/T3744 | Christian Poessinger | |
dns: T3744: fixed dns fwd statistics formatting | |||
2021-08-12 | dns: T3744: fixed dns fwd statistics formatting | FileGo | |
2021-08-10 | snmp: T3709: Allow enable oid ipCidrRouteTable | Viacheslav | |
2021-08-10 | pki: wireguard: T3642: strip private key | Christian Poessinger | |
Extend regex used by the "| strip-private" modifier to remove the WireGuard private key portion from stdout. | |||
2021-08-09 | ipsec: T3720: assigning vti secondary address caused interface in A/D state | Christian Poessinger | |
2021-08-08 | ipsec: l2tp: T2816: remove duplicate 3des-sha1-modp1024 proposal | Christian Poessinger | |
2021-08-08 | Merge pull request #956 from Cheeze-It/current | Christian Poessinger | |
PING: T3634: Fixing do not fragment to Ping | |||
2021-08-06 | http-api: T2768: add README.graphql | John Estabrook | |
2021-08-06 | http-api: T2768: example using GraphQL for high-level config operations | John Estabrook | |
2021-08-06 | Revert "http-api: T2768: example using GraphQL for high-level config operations" | John Estabrook | |
This reverts commit a2b959c50c96698da173b9c4720369a51442cc5c. | |||
2021-08-06 | Revert "http-api: T2768: add README.graphql" | John Estabrook | |
This reverts commit 4a9063f755b72786c3c5928b2fa74cf1aa935129. | |||
2021-08-06 | http-api: T2768: add README.graphql | John Estabrook | |
2021-08-06 | http-api: T2768: example using GraphQL for high-level config operations | John Estabrook | |
2021-08-06 | frr: T3694: temporary disable VRF VNI assignment | Christian Poessinger | |
Somehow we hit a priority inversion here as we need to remove the VRF assigned VNI before we can remove a BGP bound VRF instance. Maybe move this to an individual helper script that set's up the VNI for the given VRF after any routing protocol (in our case this was triggered by running "make testc" when building an ISO image by the bgp-rpki config). | |||
2021-08-06 | frr: T2175: remove no longer required loop when removing VRF VNI | Christian Poessinger | |
This is a completing commit to a55585a833 ("frr: T2175: remove no longer required loop when removing routing protocols") that was missed out previously. | |||
2021-08-06 | migration: T548: Rename quagga scripts for correct seq | Viacheslav | |
Rename quagga migration scripts for correct sequences between 1.3 and 1.4 branches 7-to-8 in 1.3 uses the same migration as 8-to-9 in 1.4 This PR fix it | |||
2021-08-05 | PING: T3634: Fixing do not fragment to Ping | Cheeze_It | |
In this commit we fix the do not fragment capability for ping commands. Sorry for messing it up earlier :( | |||
2021-08-04 | ipsec: T3718: fix default processing of ike dh-group proposals | Christian Poessinger | |
IKE dh-group defaults to 2 (modp1024). | |||
2021-08-03 | isis: T1316: rename Jinja2 template to match other FRR daemons | Christian Poessinger | |
2021-08-02 | pbr: T3702: Add rules match fwmark | Viacheslav | |
2021-08-01 | ping: T3707: add UnicodeError exception when invalid IP address is passed | Christian Poessinger | |
2021-08-01 | Merge pull request #943 from Cheeze-It/current | Christian Poessinger | |
isis: T3693: Adding IPv6 redistribution to ISIS | |||
2021-07-31 | isis: T3693: Adding IPv6 redistribution to ISIS | Cheeze_It | |
In this commit we add the ability to redistribute into ISIS for IPv6 address family. | |||
2021-07-31 | bgp: vrf: T3694: cannot delete default BGP instance when VRF BGP instance exists | Christian Poessinger | |
2021-07-31 | sysctl: T3716: remove IPv4/6 routes from FIB when link goes down | Christian Poessinger | |
For more information see: * https://programmersought.com/article/62242485344/ * https://www.spinics.net/lists/netdev/msg332453.html * https://github.com/FRRouting/frr/blob/master/doc/user/Useful_Sysctl_Settings.md | |||
2021-07-31 | sysctl: T671: add missing net.ipv6.route.skip_notify_on_dev_down setting | Christian Poessinger | |
Recommended by FRR best deafults https://github.com/FRRouting/frr/blob/master/doc/user/Useful_Sysctl_Settings.md | |||
2021-07-30 | Merge pull request #947 from bstepler/T3694 | Christian Poessinger | |
configd: T3694: always set script.argv | |||
2021-07-30 | vyos.util: drop custom implementations in favor of is_systemd_service_running() | Christian Poessinger | |
Commit f520182b ("vyos.util: add is_systemd_service_running() helper function") added a new helper function that can be used to check if a systemd service is running. Drop all custom implementations in favor of this library call. | |||
2021-07-29 | configd: T3694: always set script.argv | Brandon Stepler | |
Several scripts imported by vyos-configd (including src/conf_mode/protocols_static.py) rely on argv for operating on VRFs. Always setting script.argv in src/services/vyos-configd ensures those scripts will operate on the default VRF when called with no arguments. Otherwise, a stale argv might cause those scripts to operate on the last modified VRF instead of the default VRF. | |||
2021-07-29 | ipsec: T1210: add op-mode command to print Windows connection profile | Christian Poessinger | |
2021-07-29 | dhcp-server: T2432: Run dhcpd in group vyattacfg to allow recreate lease files | DmitriyEshenko | |
2021-07-26 | ipsec: T1210: remote-access connections only work with IKEv2 | Christian Poessinger | |
2021-07-26 | ipsec: T1210: extend support for iOS profile generation | Christian Poessinger | |
$ generate ipsec mac-ios-profile <connection> remote <ip> |