Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-06-28 | bgp: T3657: fix remote-as validator for IPv6 link-local peering | Christian Poessinger | |
The "v6only" CLI tree was not taken into account during validation. vyos@vyos:~$ show configuration commands | grep bgp set protocols bgp local-as '200' set protocols bgp neighbor eth0.204 address-family ipv6-unicast set protocols bgp neighbor eth0.204 interface v6only remote-as '100' vyos@vyos:~$ show bgp ipv6 sum IPv6 Unicast Summary: BGP router identifier 172.18.254.201, local AS number 200 vrf-id 0 BGP table version 0 RIB entries 0, using 0 bytes of memory Peers 1, using 21 KiB of memory Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd PfxSnt eth0.204 4 100 99 99 0 0 0 01:35:07 0 0 Total number of neighbors 1 | |||
2021-06-27 | op-mode: bond: T2546: implement "show interface bond * slaves" command | Christian Poessinger | |
Add implementation with XML and Python. | |||
2021-06-26 | Import configuration files from vyatta-cfg-system | Christian Poessinger | |
2021-06-26 | Import sudoers configuration from vyatta-cfg-system | Christian Poessinger | |
2021-06-26 | banner: T2135: adjust to raw strings from vyatta-cfg repo | Christian Poessinger | |
2021-06-26 | ipsec: T3643: us vyos.util.copy_file() over raw UNIX cp command | Christian Poessinger | |
2021-06-26 | vyos.util: add new helper copy_file() | Christian Poessinger | |
Copy a file from A -> B but also support adjusting Bs file permissions and creation of Bs base directory if required. | |||
2021-06-26 | ipsec: T3643: use variable for path names | Christian Poessinger | |
2021-06-26 | Revert "ipsec: T3643: move swanctl.conf to /run" | Christian Poessinger | |
This reverts commit 95bbbb8bed92a60a320ff255c8b8656145f3c540. | |||
2021-06-26 | nat: nat66: T3648: Fix script logic errors and missing logic handling | jack9603301 | |
2021-06-25 | openvpn: T1704: drop deprecated disable-ncp option | Christian Poessinger | |
2021-06-24 | openvpn: T3641: remove deprecated iproute option | Christian Poessinger | |
Executing iproute2 commands as unprivileged member of the openvpn group is now handled via a sudoers file. | |||
2021-06-24 | ipsec: T3643: move swanctl.conf to /run | Christian Poessinger | |
This is the completion of commit 50a742b5 ("IPSec: T3643: Fix path for swanctl.conf file") that moves the generated swanctl file from non-volatile to a volatile (tmpfs backed) storage like we do for all out configuration files. Thus it is ensured after a reboot or service deprecation there are no accidential leftovers from previous configurations stored on the system. | |||
2021-06-24 | systemd: lcdproc: T3641: override upstream files | Christian Poessinger | |
Debian Bullseye ships an upstream version of lcdproc.service which infact will start LCDd instead of the lcdproc client. Divert the Debian Upstream service file and use the ones provided by vyos-1x. | |||
2021-06-24 | systemd: radvd: T3641: empty ConditionPathExists variable | Christian Poessinger | |
The variable ConditionPathExists is now set in the upstream systemd unit file, thus the VyOS generated unit file is located under /run/radvd/radvd.conf and the condition won't match. This can be solved by first clearing the upstream value for ConditionPathExists and the set the new path. | |||
2021-06-24 | Revert "T3641: lcdproc.service is now shipped in lcdproc package" | Christian Poessinger | |
This reverts commit a4bb1b77ff415700e00df3768915fdc176f779d1. | |||
2021-06-23 | IPSec: T3643: Fix path for swanctl.conf file | Viacheslav | |
2021-06-22 | ipsec: T3643: T2816: Update IPSec VPN op-mode commands | sarthurdev | |
2021-06-21 | ipsec: T3641: Debian Bullseye uses python3-pycryptodome | Christian Poessinger | |
2021-06-21 | Revert "vmware: add tools.conf" | Christian Poessinger | |
This reverts commit b776edb38a4755be76e965ca719e9428bcc570e6. | |||
2021-06-20 | T3641: lcdproc.service is now shipped in lcdproc package | Christian Poessinger | |
2021-06-20 | T3641: file /etc/ppp/ip-pre-up is already provided by ppp package | Christian Poessinger | |
2021-06-20 | vmware: add tools.conf | Christian Poessinger | |
2021-06-20 | Merge pull request #889 from erkin/current | Christian Poessinger | |
T3506: loadkey: Add `generate public-key-command` command | |||
2021-06-20 | Add `save` line | erkin | |
2021-06-20 | ipsec: T3617: Correct typo on encryption variable | sarthurdev | |
2021-06-20 | Merge pull request #887 from sarthurdev/mdns_vrrp | Christian Poessinger | |
mdns: vrrp: T3635: Add ability to use mDNS repeater with VRRP | |||
2021-06-20 | T3506: loadkey: Add `generate public-key-command` command | erkin | |
2021-06-20 | vrf: T3637: bind-to-all didn't work properly | Date Huang | |
because of typo change from `bind_to_all` to `bind-to-all` refer: interface-definitions/vrf.xml.in | |||
2021-06-19 | mdns: vrrp: T3635: Add ability to use mDNS repeater with VRRP | sarthurdev | |
2021-06-18 | import cron.hourly script from vyatta-cfg-system | Christian Poessinger | |
2021-06-18 | Merge pull request #884 from sarthurdev/opmode_ike_sa | Christian Poessinger | |
ipsec: T2816: Fix 'show vpn ike sa' when key-size is not set | |||
2021-06-18 | ping: T3634: Adding do not fragment to Ping (#885) | Cheeze-It | |
In this commit we add the do not fragment capability for ping commands. Co-authored-by: Cheeze_It <none@none.com> | |||
2021-06-17 | ipsec: T2816: Fix 'show vpn ike sa' when key-size is not set | sarthurdev | |
2021-06-17 | policy: T3631: migrate "set extcommunity-rt|soo" to "set extcommunity rt|soo" | Christian Poessinger | |
migrate "set extcommunity-rt" and "set extcommunity-soo" to "set extcommunity rt|soo" to match FRR syntax. This also makes it easier to implement the "bandwidth" extended community. | |||
2021-06-16 | tunnel: T3555: fix configuration error message grammar | Christian Poessinger | |
2021-06-15 | ipsec: T2816: T645: T3613: Migrated IPsec to swanctl, includes multiple ↵ | sarthurdev | |
selectors, and selectors with VTI. | |||
2021-06-13 | wwan: T3620: auto detect IP protocol based on requested addresses | Christian Poessinger | |
(cherry picked from commit 1eb6aee88f411127175fdab031d896af1e1adbc3) | |||
2021-06-13 | wwan: T3622: add support for APN authentication | Christian Poessinger | |
Some APNs require a username/password. Add CLI nodes (matching the PPPoE syntax) for client authentication. One APN would be the IPv4/IPv6 APN from Deutsche Telekom (Germany) APN Name: Telekom Internet IPv6 APN: internet.v6.telekom Benutzername: telekom Passwort: tm (cherry picked from commit c667a45a8fb06cb76c907348c4f1e3ec708b6e03) | |||
2021-06-13 | pppoe: T3621: validate that both username and password are set | Christian Poessinger | |
A validator is missing checking that if authentication is used on a PPPoE interface, both username and password are set. (cherry picked from commit 0361c3ac449f183476f7aee31439417d9f7f8012) | |||
2021-06-13 | wwan: T3620: reorder mirgation scripts for 1.3 backport | Christian Poessinger | |
As the new WWAN interface style is backported to VyOS 1.3 we also need to shift the order of the interface migration scripts. so the same order from VyOS 1.4 also applies to VyOS 1.3. In short, 21-to-22 is renamed to 18-to-19 and all other migrators are shifted up one version. | |||
2021-06-13 | wwan: T3620: adjust NAT inbound/outbound interfaces on config migration | Christian Poessinger | |
2021-06-13 | wwan: T3620: fix backup route metric in migration script | Christian Poessinger | |
2021-06-13 | wwan: T3620: rename "wirelessmodem wlm" interfaces to new wwan interface tree | Christian Poessinger | |
2021-06-12 | ipsec: T1501: Use vyos.validate.is_ipv6_link_local | sarthurdev | |
2021-06-12 | Merge pull request #875 from sarthurdev/dhcp_address_wait | Christian Poessinger | |
ipsec: T1501: T3617: Add handling for missing addresses on boot when using dhcp-interface | |||
2021-06-12 | ipsec: T1501: T3617: Add handling for missing addresses on boot when using ↵ | sarthurdev | |
dhcp-interface | |||
2021-06-12 | http-api: T3616: update for strict content-type check in FastAPI 0.65.2 | John Estabrook | |
FastAPI 0.65.2 checks content-type request header before assuming JSON, closing a well-known loophole. This requires a modification of the code providing backwards compatibility of multipart forms. | |||
2021-06-11 | containers: T3614: Fix for network names with hyphen | sever-sever | |
Fix for containers and newtorks names with hyphen in names. We shouldn't mangle tagNode values. | |||
2021-06-10 | wwan: T3611: switch to qmi/mbim mode | Christian Poessinger | |