veeos-1x.git/python/vyos/ifconfig, branch circinus

wireless: T6709: fix missing wpa_supplicant configuration

2024-09-19T20:05:02+00:00

Commit 0ee8d5e35 ("ethernet: T6709: move EAPoL support to common framework") added support to also have EAPoL on other interface types then ethernet. This introduced a regression where the wireless interface wpa_supplicant configuration would get deleted. (cherry picked from commit 58dfd957fd8ec24caeca73105f7823148ef8c8bf)

bond: T6709: add EAPoL support (backport #4069) (#4076)

2024-09-17T17:32:02+00:00

* ethernet: T6709: move EAPoL support to common framework Instead of having EAPoL (Extensible Authentication Protocol over Local Area Network) support only available for ethernet interfaces, move this to common ground at vyos.ifconfig.interface making it available for all sorts of interfaces by simply including the XML portion #include (cherry picked from commit 0ee8d5e35044e7480dac6a23e92d43744b8c5d36) * bond: T6709: add EAPoL support (cherry picked from commit 8eeb1bdcdfc104ffa77531f270a38cda2aee7f82) --------- Co-authored-by: Christian Breunig

vxlan: T6505: Support VXLAN VLAN-VNI range mapping in CLI (#3756)

2024-07-26T09:36:35+00:00

(cherry picked from commit 115e99630a317cab62c6f99e0461f6ce2c1edaf3)

interface: T6592: remove interface from conntrack ct_iface_map on deletion

2024-07-24T23:52:13+00:00

We always have had stale interface entries in the ct_iface_map of nftables/ conntrack for any interface that once belonged to a VRF. This commit will always clean the nftables interface map when the interface is deleted from the system. (cherry picked from commit 17c12bde5c6f314311e7524842fd1ddc254009b4)

interfaces: T6592: moving an interface between VRF instances failed

2024-07-20T14:21:20+00:00

To reproduce: set vrf name mgmt table '150' set vrf name no-mgmt table '151' set interfaces ethernet eth2 vrf 'mgmt' commit set interfaces ethernet eth2 vrf no-mgmt commit This resulted in an error while interacting with nftables: [Errno 1] failed to run command: nft add element inet vrf_zones ct_iface_map { "eth2" : 151 } The reason is that the old mapping entry still exists and was not removed. This commit adds a new utility function get_vrf_tableid() and compares the current and new VRF table IDs assigned to an interface. If the IDs do not match, the nftables ct_iface_map entry is removed before the new entry is added. (cherry picked from commit 452068ce78581bb6fba2df4dba197e95b9aeb33d)

macsec: T5447: fix error message syntax - there is no tx and rx key, only key

2024-06-19T19:25:12+00:00

(cherry picked from commit f29caa824c02c833a3978b9236391e4277c1a6ba)

vxlan: T6401: Avoid calling get_vxlan_vni_filter() unless we need it

2024-06-01T13:42:57+00:00

`bridge vni show dev vxlanX` will exit with an error if no VNI filters are installed, but the getter is used even when we haven't installed any. This fix avoids fetching a list of VNI filters unless we know we've created some.

vyos.ifconfig: T6421: verify /etc/hostname exists before reading

2024-05-30T07:46:05+00:00

Inspired-By: Brandon Zhi

bond: T6303: must reset system-mac to 00:00:00:00:00:00 on deletion

2024-05-10T13:18:08+00:00

bond: T6303: system-mac is not allowed to be a multicast MAC address

2024-05-10T13:18:08+00:00