Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-09-10 | T3275: conntrack: Backport XML/Python implementation of conntrack CLI | erkin | |
2021-08-15 | wireguard: T3756: fix generated qr code header | Boris Manojlovic | |
(cherry picked from commit d3ae6304a3eabcddba36452e9519ca7b56bb38af) | |||
2021-08-14 | openvpn: T3738: Disable authentication option for server mode | Viacheslav | |
(cherry picked from commit 655876f4c22c0f4ea839a81f4af09d6016e19197) | |||
2021-08-14 | op-mode: ipsec: T3745: "show vpn ipse sa" improve sorting | Christian Poessinger | |
(cherry picked from commit 1229665d353a070e14ee9cceafbfdb107d669745) | |||
2021-08-12 | login: T3746: inform users about pending reboots | Christian Poessinger | |
(cherry picked from commit 7e52a7079afb522d1456833023ad58fa8b05e880) | |||
2021-08-12 | T3697: check config.exists rather than exists_effective | Daniil Baturin | |
2021-08-12 | dns: T3744: fixed dns fwd statistics formatting | FileGo | |
(cherry picked from commit 0f7833483c0fe4982747bbbace45a83fae793257) | |||
2021-08-09 | dhcp-server: T2432: Run dhcpd in group vyattacfg to allow recreate lease files | DmitriyEshenko | |
2021-08-09 | T3695: reword the ocserv fail message. | Daniil Baturin | |
2021-08-09 | openconnect: T3695: Add systemd service checker on commit | DmitriyEshenko | |
2021-08-08 | ping: T3634: Fixing do not fragment to Ping | Cheeze_It | |
In this commit we fix the do not fragment capability for ping commands. Sorry for messing it up earlier :( (cherry picked from commit d012c732a8902d4848e29f37fcede66a060e3c7f) | |||
2021-08-05 | bgp: T548: Migrate maximum-paths to afi ipv4 maximum-paths | Viacheslav | |
2021-08-03 | isis: T1316: rename Jinja2 template to match other FRR daemons | Christian Poessinger | |
(cherry picked from commit d77a2f56ea7e76158c07f5829397be4555473e3d) | |||
2021-08-02 | Merge branch 'equuleus' of https://github.com/vyos/vyos-1x into equuleus | Daniil Baturin | |
2021-08-02 | T3697: explicitly wait for the charon process to respond to strokes | Daniil Baturin | |
2021-08-01 | ping: T3707: add UnicodeError exception when invalid IP address is passed | Christian Poessinger | |
(cherry picked from commit 0d1ad777daf25ef415bf45032d41b587baf20781) | |||
2021-07-27 | T3697: wait for charon to get started before trying to restart it. | Daniil Baturin | |
2021-07-25 | vrf: T31: add missind import for cmd() | Christian Poessinger | |
2021-07-25 | vrf: T31: ignore iproute2 errors | Christian Poessinger | |
Re-issuing the same iproute2 commands can lead to errors, simply ignore them and not raise a Python exception. (cherry-picked from commit 9920f7340d60b51d32bad9dbd24a907718f72837) | |||
2021-07-25 | ifconfig: T2653: obey conding style | Christian Poessinger | |
(cherry-picked from commit 08614557b679c59495b3bf629f763f9a4cc0ed25) | |||
2021-07-25 | ifconfig: backport ifconfig framework from 1.4 to support new tunnel options | Christian Poessinger | |
It is easier to backport the entire vyos.ifconfig library from 1.4 instead of backporting single pieces which are required to add new feature to the tunnel interface section. In addition that both libraries are now back in sync it will become much easier to backport any other new feature introduced in VyOS 1.4! | |||
2021-07-24 | openvpn: T65: Fix auth-user-pass authentication only | Yun Zheng Hu | |
2021-07-24 | T3697: fix a conditional. | Daniil Baturin | |
2021-07-24 | Merge branch 'equuleus' of https://github.com/vyos/vyos-1x into equuleus | Daniil Baturin | |
2021-07-24 | T3697: hopefully complete fix for checking whether IPsec should start. | Daniil Baturin | |
2021-07-24 | Merge pull request #941 from yunzheng/T3682 | Christian Poessinger | |
vyos-1x-vmware: T3682: remove dhclient from ether-resume.py | |||
2021-07-23 | T3697: return an empty dict when IPsec isn't fully configured | Daniil Baturin | |
to avoid trying to wait for a daemon that shouldn't even be running. | |||
2021-07-23 | vyos-1x-vmware: T3682: remove dhclient from ether-resume.py | Yun Zheng Hu | |
dhclient is already handled by netplug so it's removed to avoid double renewing of dhcp leases. | |||
2021-07-23 | login: T3699: verify system username does not conflict with Linux base users | Christian Poessinger | |
2021-07-22 | T3697: check if strongswan should be running before attempting to restart it. | Daniil Baturin | |
2021-07-17 | vxlan: T3683: bugfix on MTU calculation for IPv6 underlay | Christian Poessinger | |
(cherry picked from commit eb8cd3af91bac01a3f7f99b362c8105d69bb3c55) | |||
2021-07-13 | T3663: use inotify-based watching for the IPsec process restart. | Daniil Baturin | |
2021-07-11 | vrf: T3637: bind-to-all didn't work properly | Date Huang | |
because of typo change from `bind_to_all` to `bind-to-all` refer: interface-definitions/vrf.xml.in (cherry picked from commit 8a78c790c1239eef533c7bbe12911aaeec4dc90f) | |||
2021-07-02 | conntrack-sync: T3535: Rewrite conf and op modes to XML python style | Viacheslav | |
2021-06-25 | openvpn: T3641: remove deprecated iproute option | Christian Poessinger | |
Executing iproute2 commands as unprivileged member of the openvpn group is now handled via a sudoers file. (cherry picked from commit 9c8facc69c09163b74bc428f1dbf8be030766758) | |||
2021-06-25 | openvpn: T1704: drop deprecated disable-ncp option | Christian Poessinger | |
(cherry picked from commit 6b7b19c93f90839549dd668116c4da2f38cfdc66) VyOS 1.3 will ship OpenVPN 2.5.1 and thus it is the perfect timing to still remove this option before introducing it in a new LTS release. | |||
2021-06-18 | ping: T3634: Adding do not fragment to Ping (#885) | Cheeze-It | |
In this commit we add the do not fragment capability for ping commands. Co-authored-by: Cheeze_It <none@none.com> (cherry picked from commit c9dbc42bab13d70d22ca55794e4b89cac53adc86) | |||
2021-06-13 | wwan: T3620: auto detect IP protocol based on requested addresses | Christian Poessinger | |
2021-06-13 | wwan: T3622: add support for APN authentication | Christian Poessinger | |
Some APNs require a username/password. Add CLI nodes (matching the PPPoE syntax) for client authentication. One APN would be the IPv4/IPv6 APN from Deutsche Telekom (Germany) APN Name: Telekom Internet IPv6 APN: internet.v6.telekom Benutzername: telekom Passwort: tm | |||
2021-06-13 | pppoe: T3621: validate that both username and password are set | Christian Poessinger | |
A validator is missing checking that if authentication is used on a PPPoE interface, both username and password are set. | |||
2021-06-13 | wwan: T3611: switch to qmi/mbim mode | Christian Poessinger | |
(cherry picked from commit 011f8ede55311e08d42f5afed9a2e8c44fd6d301) | |||
2021-06-13 | wwan: T3620: adjust NAT inbound/outbound interfaces on config migration | Christian Poessinger | |
(cherry picked from commit e24e35e1ac11a0771b15417af191694fd0b88022) | |||
2021-06-13 | wwan: T3620: fix backup route metric in migration script | Christian Poessinger | |
(cherry picked from commit d20dd7a0e6af08a80c7c911e7b151f28e4666173) | |||
2021-06-13 | wwan: T3620: rename "wirelessmodem wlm" interfaces to new wwan interface tree | Christian Poessinger | |
(cherry picked from commit c2a1c071e7d0a9ca754d7f5016eed7db188b3d1a) | |||
2021-06-03 | flow-accounting: T3132: fix egress iptables chain | Jan-Philipp Benecke | |
2021-05-27 | dhcp-server: T2669: do not allow overlapping ranges to be created | Christian Poessinger | |
set service dhcp-server shared-network-name NET01 authoritative set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 default-router '10.0.0.1' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 lease '86400' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 range RNG01 start '10.0.0.60' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 range RNG01 stop '10.0.0.70' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 range RNG02 start '10.0.0.55' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 range RNG02 stop '10.0.0.65' Will result in a dhcpd.conf: shared-network NET01 { authoritative; subnet 10.0.0.0 netmask 255.255.255.0 { option routers 10.0.0.1; default-lease-time 86400; max-lease-time 86400; range 10.0.0.60 10.0.0.70; range 10.0.0.55 10.0.0.65; } on commit { set shared-networkname = "NET01"; } } This is not allowed by ISC DHCPd: dhcpd[3307]: /run/dhcp-server/dhcpd.conf line 25: lease 10.0.0.63 is declared twice! dhcpd[3307]: range 10.0.0.55 10.0.0.65; (cherry picked from commit b0e1c8a9c9ef470297bf3c9f5059ad7c720c46ff) | |||
2021-05-27 | login: T3455: Fix edit level configuration for user | sever-sever | |
2021-05-27 | openconnect: T3461: Delete CA crt file checks | sever-sever | |
2021-05-26 | ospfv3: T3581: Fix op-mode for linkstate | Viacheslav Hletenko | |
2021-05-24 | pseudo-ethernet: T3575: verify parent interface MTU | Christian Poessinger | |
(cherry picked from commit 38b3dff1ebdf8c26a28d0befa6dcf0b4f51f21be) |