Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-06-13 | wwan: T3620: auto detect IP protocol based on requested addresses | Christian Poessinger | |
(cherry picked from commit 1eb6aee88f411127175fdab031d896af1e1adbc3) | |||
2021-06-13 | wwan: T3622: add support for APN authentication | Christian Poessinger | |
Some APNs require a username/password. Add CLI nodes (matching the PPPoE syntax) for client authentication. One APN would be the IPv4/IPv6 APN from Deutsche Telekom (Germany) APN Name: Telekom Internet IPv6 APN: internet.v6.telekom Benutzername: telekom Passwort: tm (cherry picked from commit c667a45a8fb06cb76c907348c4f1e3ec708b6e03) | |||
2021-06-13 | pppoe: T3621: validate that both username and password are set | Christian Poessinger | |
A validator is missing checking that if authentication is used on a PPPoE interface, both username and password are set. (cherry picked from commit 0361c3ac449f183476f7aee31439417d9f7f8012) | |||
2021-06-13 | wwan: T3620: reorder mirgation scripts for 1.3 backport | Christian Poessinger | |
As the new WWAN interface style is backported to VyOS 1.3 we also need to shift the order of the interface migration scripts. so the same order from VyOS 1.4 also applies to VyOS 1.3. In short, 21-to-22 is renamed to 18-to-19 and all other migrators are shifted up one version. | |||
2021-06-13 | wwan: T3620: adjust NAT inbound/outbound interfaces on config migration | Christian Poessinger | |
2021-06-13 | wwan: T3620: fix backup route metric in migration script | Christian Poessinger | |
2021-06-13 | wwan: T3620: rename "wirelessmodem wlm" interfaces to new wwan interface tree | Christian Poessinger | |
2021-06-12 | ipsec: T1501: Use vyos.validate.is_ipv6_link_local | sarthurdev | |
2021-06-12 | Merge pull request #875 from sarthurdev/dhcp_address_wait | Christian Poessinger | |
ipsec: T1501: T3617: Add handling for missing addresses on boot when using dhcp-interface | |||
2021-06-12 | ipsec: T1501: T3617: Add handling for missing addresses on boot when using ↵ | sarthurdev | |
dhcp-interface | |||
2021-06-12 | http-api: T3616: update for strict content-type check in FastAPI 0.65.2 | John Estabrook | |
FastAPI 0.65.2 checks content-type request header before assuming JSON, closing a well-known loophole. This requires a modification of the code providing backwards compatibility of multipart forms. | |||
2021-06-11 | containers: T3614: Fix for network names with hyphen | sever-sever | |
Fix for containers and newtorks names with hyphen in names. We shouldn't mangle tagNode values. | |||
2021-06-10 | wwan: T3611: switch to qmi/mbim mode | Christian Poessinger | |
2021-06-10 | ipsec: T2816: add .py extenstion to dhclient helper script for processing | Christian Poessinger | |
dhclient fails to execute the script without the extension. | |||
2021-06-07 | vti: T3588: remove interfaces not bound to IPSec tunnel | Christian Poessinger | |
A VTI interface also requires an IPSec configuration - VyOS 1.2 supported having a VTI interface in the CLI but no IPSec configuration - drop VTI configuration if this is the case for VyOS 1.4. | |||
2021-06-07 | ipsec: T3588: remove site-to-site tunnel CLI options only valid in Openswan | Christian Poessinger | |
2021-06-07 | nhrp: T3599: Update config path to new /run directory | sarthurdev | |
2021-06-06 | ipsec: T3588: remove CLI options deprecated by strongSwan | Christian Poessinger | |
- set vpn ipsec nat-traversal - set vpn ipsec nat-networks allowed-network | |||
2021-06-06 | T1168: ipsec: add copyright header to migration script | Christian Poessinger | |
2021-06-06 | Merge pull request #865 from sarthurdev/current | Christian Poessinger | |
nhrp: T3599: Migrate NHRP to XML/Python | |||
2021-06-06 | nhrp: T3599: Migrate NHRP to XML/Python | sarthurdev | |
2021-06-05 | Merge pull request #866 from sarthurdev/fix-ipsec | Christian Poessinger | |
ipsec: T2816: Fix typo from refactor | |||
2021-06-04 | ipsec: T2816: Fix typo from refactor | sarthurdev | |
2021-06-04 | vti: T3595: error out when adding VTI interface withouth IPSec | Christian Poessinger | |
2021-06-04 | flow-accounting: T3132: fix egress iptables chain | Jan-Philipp Benecke | |
(cherry picked from commit 95cc2e4b4c11414cc71749af12abb575e96e5bd4) | |||
2021-06-01 | op-mode: T3384: support UDP bandwidth testing | JACK | |
2021-05-31 | conntrack: T3579: add module disable options | Christian Poessinger | |
Some application layer gateway (ALG) modules can be disabled during runtime if requireq. | |||
2021-05-31 | ipsec: T2816: Continued refactor, added proper ipsec-interfaces handling | Simon | |
2021-05-30 | ipsec: T2816: Refactor to remove global variable and tidy up | Simon | |
2021-05-29 | vpn: ipsec: T3093: test for VTI interface availability the easy way | Christian Poessinger | |
We do not need to query the actual configuration if the VTI peer is configured or not. This can be done in a much more simples way by just checking if the desired interface exists on the running system. This is safe to do as the VTI priority is less then IPSec. | |||
2021-05-29 | ipsec: vti: T2816: Update to use correct VTI mark, code cleanup | Simon | |
2021-05-29 | vpn: ipsec: T3093: drop obsolete cleanup_vti_interfaces() function | Christian Poessinger | |
2021-05-29 | vti: T1579: only remove the interface when it exists | Christian Poessinger | |
2021-05-29 | vti: ipsec: T2816: Fix vti-up-down | sarthurdev | |
2021-05-28 | ipsec: T2816: drop absolute path on calls to iproute2 | Christian Poessinger | |
2021-05-28 | vti: ipsec: T2816: interfaces must be created using the vyos.ifconfig library | Christian Poessinger | |
2021-05-28 | ipsec: T2816: fix executable permission on vti-up-down helper | Christian Poessinger | |
2021-05-28 | vti: T1579: implement Virtual Tunnel Interfaces using XML and Python | Christian Poessinger | |
2021-05-28 | dummy: T2241: minor code cleanup | Christian Poessinger | |
No need to call .keys() on a dict when searching for a key. Also drop the unused "import os" call. | |||
2021-05-28 | ipsec: T2816: IPSec python rework, includes DMVPN and VTI support | Simon | |
2021-05-27 | dhcp-server: T2669: do not allow overlapping ranges to be created | Christian Poessinger | |
set service dhcp-server shared-network-name NET01 authoritative set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 default-router '10.0.0.1' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 lease '86400' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 range RNG01 start '10.0.0.60' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 range RNG01 stop '10.0.0.70' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 range RNG02 start '10.0.0.55' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 range RNG02 stop '10.0.0.65' Will result in a dhcpd.conf: shared-network NET01 { authoritative; subnet 10.0.0.0 netmask 255.255.255.0 { option routers 10.0.0.1; default-lease-time 86400; max-lease-time 86400; range 10.0.0.60 10.0.0.70; range 10.0.0.55 10.0.0.65; } on commit { set shared-networkname = "NET01"; } } This is not allowed by ISC DHCPd: dhcpd[3307]: /run/dhcp-server/dhcpd.conf line 25: lease 10.0.0.63 is declared twice! dhcpd[3307]: range 10.0.0.55 10.0.0.65; | |||
2021-05-27 | Merge branch 't3579-conntrack' into current | Christian Poessinger | |
* t3579-conntrack: conntrack: T3535: add conntrack-sync supported vyos-configd services conntrack: T3579: initial implementation with XML and Python | |||
2021-05-27 | conntrack: T3579: initial implementation with XML and Python | Christian Poessinger | |
2021-05-25 | firewall: T3568: add XML definitions for firewall | Viacheslav Hletenko | |
Add XML for configuration mode firewall. Used for future rewriting it to Python style. | |||
2021-05-24 | tunnel: T3555: add "ignore-df" support for GRE tunnels | Christian Poessinger | |
2021-05-24 | isis: T3417: implement domain-password md5 | Christian Poessinger | |
2021-05-24 | pseudo-ethernet: T3575: verify parent interface MTU | Christian Poessinger | |
2021-05-24 | router-advert: T3561: fix inconsistent use of tabs and spaces in indentation | Christian Poessinger | |
Commit c17f259d ("router-advert: T3561: add support for specific routes") used tabs over spaces in the Migration script which triggered a TabError (inconsistent use of tabs and spaces in indentation"). | |||
2021-05-23 | router-advert: T3561: add support for specific routes | Mark Royds | |
Co-authored-by: Mark Royds <mark.royds@vitaminit.co.uk> | |||
2021-05-23 | op-mode: disks: T1621: bugfix no disk output | Christian Poessinger | |
(cherry picked from commit 51899c362f2eba1dd067414f2dfa8e78f30ca408) |