summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2021-06-24openvpn: T3641: remove deprecated iproute optionChristian Poessinger
Executing iproute2 commands as unprivileged member of the openvpn group is now handled via a sudoers file.
2021-06-24ipsec: T3643: move swanctl.conf to /runChristian Poessinger
This is the completion of commit 50a742b5 ("IPSec: T3643: Fix path for swanctl.conf file") that moves the generated swanctl file from non-volatile to a volatile (tmpfs backed) storage like we do for all out configuration files. Thus it is ensured after a reboot or service deprecation there are no accidential leftovers from previous configurations stored on the system.
2021-06-24systemd: lcdproc: T3641: override upstream filesChristian Poessinger
Debian Bullseye ships an upstream version of lcdproc.service which infact will start LCDd instead of the lcdproc client. Divert the Debian Upstream service file and use the ones provided by vyos-1x.
2021-06-24systemd: radvd: T3641: empty ConditionPathExists variableChristian Poessinger
The variable ConditionPathExists is now set in the upstream systemd unit file, thus the VyOS generated unit file is located under /run/radvd/radvd.conf and the condition won't match. This can be solved by first clearing the upstream value for ConditionPathExists and the set the new path.
2021-06-24Revert "T3641: lcdproc.service is now shipped in lcdproc package"Christian Poessinger
This reverts commit a4bb1b77ff415700e00df3768915fdc176f779d1.
2021-06-23IPSec: T3643: Fix path for swanctl.conf fileViacheslav
2021-06-22ipsec: T3643: T2816: Update IPSec VPN op-mode commandssarthurdev
2021-06-21ipsec: T3641: Debian Bullseye uses python3-pycryptodomeChristian Poessinger
2021-06-21Revert "vmware: add tools.conf"Christian Poessinger
This reverts commit b776edb38a4755be76e965ca719e9428bcc570e6.
2021-06-20T3641: lcdproc.service is now shipped in lcdproc packageChristian Poessinger
2021-06-20T3641: file /etc/ppp/ip-pre-up is already provided by ppp packageChristian Poessinger
2021-06-20vmware: add tools.confChristian Poessinger
2021-06-20Merge pull request #889 from erkin/currentChristian Poessinger
T3506: loadkey: Add `generate public-key-command` command
2021-06-20Add `save` lineerkin
2021-06-20ipsec: T3617: Correct typo on encryption variablesarthurdev
2021-06-20Merge pull request #887 from sarthurdev/mdns_vrrpChristian Poessinger
mdns: vrrp: T3635: Add ability to use mDNS repeater with VRRP
2021-06-20T3506: loadkey: Add `generate public-key-command` commanderkin
2021-06-20vrf: T3637: bind-to-all didn't work properlyDate Huang
because of typo change from `bind_to_all` to `bind-to-all` refer: interface-definitions/vrf.xml.in
2021-06-19mdns: vrrp: T3635: Add ability to use mDNS repeater with VRRPsarthurdev
2021-06-18import cron.hourly script from vyatta-cfg-systemChristian Poessinger
2021-06-18Merge pull request #884 from sarthurdev/opmode_ike_saChristian Poessinger
ipsec: T2816: Fix 'show vpn ike sa' when key-size is not set
2021-06-18ping: T3634: Adding do not fragment to Ping (#885)Cheeze-It
In this commit we add the do not fragment capability for ping commands. Co-authored-by: Cheeze_It <none@none.com>
2021-06-17ipsec: T2816: Fix 'show vpn ike sa' when key-size is not setsarthurdev
2021-06-17policy: T3631: migrate "set extcommunity-rt|soo" to "set extcommunity rt|soo"Christian Poessinger
migrate "set extcommunity-rt" and "set extcommunity-soo" to "set extcommunity rt|soo" to match FRR syntax. This also makes it easier to implement the "bandwidth" extended community.
2021-06-16tunnel: T3555: fix configuration error message grammarChristian Poessinger
2021-06-15ipsec: T2816: T645: T3613: Migrated IPsec to swanctl, includes multiple ↵sarthurdev
selectors, and selectors with VTI.
2021-06-13wwan: T3620: auto detect IP protocol based on requested addressesChristian Poessinger
(cherry picked from commit 1eb6aee88f411127175fdab031d896af1e1adbc3)
2021-06-13wwan: T3622: add support for APN authenticationChristian Poessinger
Some APNs require a username/password. Add CLI nodes (matching the PPPoE syntax) for client authentication. One APN would be the IPv4/IPv6 APN from Deutsche Telekom (Germany) APN Name: Telekom Internet IPv6 APN: internet.v6.telekom Benutzername: telekom Passwort: tm (cherry picked from commit c667a45a8fb06cb76c907348c4f1e3ec708b6e03)
2021-06-13pppoe: T3621: validate that both username and password are setChristian Poessinger
A validator is missing checking that if authentication is used on a PPPoE interface, both username and password are set. (cherry picked from commit 0361c3ac449f183476f7aee31439417d9f7f8012)
2021-06-13wwan: T3620: reorder mirgation scripts for 1.3 backportChristian Poessinger
As the new WWAN interface style is backported to VyOS 1.3 we also need to shift the order of the interface migration scripts. so the same order from VyOS 1.4 also applies to VyOS 1.3. In short, 21-to-22 is renamed to 18-to-19 and all other migrators are shifted up one version.
2021-06-13wwan: T3620: adjust NAT inbound/outbound interfaces on config migrationChristian Poessinger
2021-06-13wwan: T3620: fix backup route metric in migration scriptChristian Poessinger
2021-06-13wwan: T3620: rename "wirelessmodem wlm" interfaces to new wwan interface treeChristian Poessinger
2021-06-12ipsec: T1501: Use vyos.validate.is_ipv6_link_localsarthurdev
2021-06-12Merge pull request #875 from sarthurdev/dhcp_address_waitChristian Poessinger
ipsec: T1501: T3617: Add handling for missing addresses on boot when using dhcp-interface
2021-06-12ipsec: T1501: T3617: Add handling for missing addresses on boot when using ↵sarthurdev
dhcp-interface
2021-06-12http-api: T3616: update for strict content-type check in FastAPI 0.65.2John Estabrook
FastAPI 0.65.2 checks content-type request header before assuming JSON, closing a well-known loophole. This requires a modification of the code providing backwards compatibility of multipart forms.
2021-06-11containers: T3614: Fix for network names with hyphensever-sever
Fix for containers and newtorks names with hyphen in names. We shouldn't mangle tagNode values.
2021-06-10wwan: T3611: switch to qmi/mbim modeChristian Poessinger
2021-06-10ipsec: T2816: add .py extenstion to dhclient helper script for processingChristian Poessinger
dhclient fails to execute the script without the extension.
2021-06-07vti: T3588: remove interfaces not bound to IPSec tunnelChristian Poessinger
A VTI interface also requires an IPSec configuration - VyOS 1.2 supported having a VTI interface in the CLI but no IPSec configuration - drop VTI configuration if this is the case for VyOS 1.4.
2021-06-07ipsec: T3588: remove site-to-site tunnel CLI options only valid in OpenswanChristian Poessinger
2021-06-07nhrp: T3599: Update config path to new /run directorysarthurdev
2021-06-06ipsec: T3588: remove CLI options deprecated by strongSwanChristian Poessinger
- set vpn ipsec nat-traversal - set vpn ipsec nat-networks allowed-network
2021-06-06T1168: ipsec: add copyright header to migration scriptChristian Poessinger
2021-06-06Merge pull request #865 from sarthurdev/currentChristian Poessinger
nhrp: T3599: Migrate NHRP to XML/Python
2021-06-06nhrp: T3599: Migrate NHRP to XML/Pythonsarthurdev
2021-06-05Merge pull request #866 from sarthurdev/fix-ipsecChristian Poessinger
ipsec: T2816: Fix typo from refactor
2021-06-04ipsec: T2816: Fix typo from refactorsarthurdev
2021-06-04vti: T3595: error out when adding VTI interface withouth IPSecChristian Poessinger
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-28 17:38:21 +0000