summaryrefslogtreecommitdiff
path: root/templates/system
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2019-12-28 14:16:32 +0100
committerChristian Poessinger <christian@poessinger.com>2019-12-28 14:16:32 +0100
commit2660561453274a0162e226722ecf436f4012ca69 (patch)
tree3cf47bfba16dc03b97ac75220a2533ff87204080 /templates/system
parentcf0bfe70fb855cfffd663d8453ecd17ca99ebb6d (diff)
downloadvyatta-cfg-system-2660561453274a0162e226722ecf436f4012ca69.tar.gz
vyatta-cfg-system-2660561453274a0162e226722ecf436f4012ca69.zip
T1912: migrate 'system ip(v6)' subsystem to XML/Python
Diffstat (limited to 'templates/system')
-rw-r--r--templates/system/ip/arp/node.def1
-rw-r--r--templates/system/ip/arp/table-size/node.def14
-rw-r--r--templates/system/ip/disable-forwarding/node.def3
-rw-r--r--templates/system/ip/multipath/ignore-unreachable-nexthops/node.def5
-rw-r--r--templates/system/ip/multipath/layer4-hashing/node.def4
-rw-r--r--templates/system/ip/multipath/node.def1
-rw-r--r--templates/system/ip/node.def2
-rw-r--r--templates/system/ipv6/blacklist/node.def11
-rw-r--r--templates/system/ipv6/disable-forwarding/node.def46
-rw-r--r--templates/system/ipv6/disable/node.def11
-rw-r--r--templates/system/ipv6/multipath/layer4-hashing/node.def5
-rw-r--r--templates/system/ipv6/multipath/node.def1
-rw-r--r--templates/system/ipv6/neighbor/node.def2
-rw-r--r--templates/system/ipv6/neighbor/table-size/node.def14
-rw-r--r--templates/system/ipv6/node.def1
-rw-r--r--templates/system/ipv6/strict-dad/node.def29
16 files changed, 0 insertions, 150 deletions
diff --git a/templates/system/ip/arp/node.def b/templates/system/ip/arp/node.def
deleted file mode 100644
index 2d3aa69a..00000000
--- a/templates/system/ip/arp/node.def
+++ /dev/null
@@ -1 +0,0 @@
-help: Parameters for ARP cache
diff --git a/templates/system/ip/arp/table-size/node.def b/templates/system/ip/arp/table-size/node.def
deleted file mode 100644
index b4d0a9e3..00000000
--- a/templates/system/ip/arp/table-size/node.def
+++ /dev/null
@@ -1,14 +0,0 @@
-help: Maximum number of entries to keep in the ARP cache
-
-type: u32
-
-default: 8192
-
-allowed: echo "1024 2048 4096 8192 16384 32768"
-
-syntax:expression: exec " \
- /opt/vyatta/sbin/vyatta-update-arp-params \
- 'syntax-check' 'table-size' '$VAR(@)' 'ipv4' "
-
-update:
- /opt/vyatta/sbin/vyatta-update-arp-params 'update' 'table-size' '$VAR(@)' 'ipv4'
diff --git a/templates/system/ip/disable-forwarding/node.def b/templates/system/ip/disable-forwarding/node.def
deleted file mode 100644
index 3bac48b3..00000000
--- a/templates/system/ip/disable-forwarding/node.def
+++ /dev/null
@@ -1,3 +0,0 @@
-help: Disable IPv4 forwarding
-create: sudo sh -c "echo 0 > /proc/sys/net/ipv4/conf/all/forwarding"
-delete: sudo sh -c "echo 1 > /proc/sys/net/ipv4/conf/all/forwarding"
diff --git a/templates/system/ip/multipath/ignore-unreachable-nexthops/node.def b/templates/system/ip/multipath/ignore-unreachable-nexthops/node.def
deleted file mode 100644
index a37d455a..00000000
--- a/templates/system/ip/multipath/ignore-unreachable-nexthops/node.def
+++ /dev/null
@@ -1,5 +0,0 @@
-help: Ignore next hops that are not in the ARP table
-
-create: sudo sysctl -w net.ipv4.fib_multipath_use_neigh=1 >/dev/null
-delete: sudo sysctl -w net.ipv4.fib_multipath_use_neigh=0 >/dev/null
-
diff --git a/templates/system/ip/multipath/layer4-hashing/node.def b/templates/system/ip/multipath/layer4-hashing/node.def
deleted file mode 100644
index 6cc7e3e2..00000000
--- a/templates/system/ip/multipath/layer4-hashing/node.def
+++ /dev/null
@@ -1,4 +0,0 @@
-help: Use layer 4 information for ECMP hashing
-
-create: sudo sysctl -w net.ipv4.fib_multipath_hash_policy=1 >/dev/null
-delete: sudo sysctl -w net.ipv4.fib_multipath_hash_policy=0 >/dev/null
diff --git a/templates/system/ip/multipath/node.def b/templates/system/ip/multipath/node.def
deleted file mode 100644
index 3625e902..00000000
--- a/templates/system/ip/multipath/node.def
+++ /dev/null
@@ -1 +0,0 @@
-help: IPv4 multipath settings
diff --git a/templates/system/ip/node.def b/templates/system/ip/node.def
deleted file mode 100644
index c1359b50..00000000
--- a/templates/system/ip/node.def
+++ /dev/null
@@ -1,2 +0,0 @@
-priority: 400
-help: IPv4 settings
diff --git a/templates/system/ipv6/blacklist/node.def b/templates/system/ipv6/blacklist/node.def
deleted file mode 100644
index 081425bd..00000000
--- a/templates/system/ipv6/blacklist/node.def
+++ /dev/null
@@ -1,11 +0,0 @@
-priority: 400
-help: Prevent the IPv6 kernel module from being loaded
-
-create:
- sudo sh -c "echo blacklist ipv6 > \
- /etc/modprobe.d/vyatta_blacklist_ipv6.conf"
- echo "This change will take affect when the system is rebooted."
-
-delete:
- sudo sh -c "rm -f /etc/modprobe.d/vyatta_blacklist_ipv6.conf"
- echo "This change will take affect when the system is rebooted."
diff --git a/templates/system/ipv6/disable-forwarding/node.def b/templates/system/ipv6/disable-forwarding/node.def
deleted file mode 100644
index 323b99d6..00000000
--- a/templates/system/ipv6/disable-forwarding/node.def
+++ /dev/null
@@ -1,46 +0,0 @@
-priority: 400
-help: Disable IPv6 forwarding on all interfaces
-
-# Disable IPv6 forwarding for all interfaces we currently have,
-# and set default such that it will be disabled on any new interfaces
-# that come up after this.
-#
-create:
- sudo sh -c "echo 0 > /proc/sys/net/ipv6/conf/all/forwarding"
- sudo sh -c "echo 0 > /proc/sys/net/ipv6/conf/default/forwarding"
-
-# Re-enable IPv6 forwarding globally. But setting the global
-# forwarding parameter under "all" has the side effect of setting the
-# per-interface forwarding parameter for all interfaces. Users may
-# disable forwarding per-interface, so we have to restore the state of
-# the per-interface parameter here. A per-interface flag file under
-# /var/run/vyatta/ tells us if forwarding is disabled on specific
-# interfaces. Restore default value of the forwarding parameter under
-# "default" so that any new interfaces that come up after this will
-# have forwarding enabled.
-#
-delete:
- sudo sh -c "echo 1 > /proc/sys/net/ipv6/conf/all/forwarding"
- cd /proc/sys/net/ipv6/conf
- for i in * ; do
- if [[ "$i" == "default" ]] ||
- [[ "$i" == "all" ]] ||
- [[ ! -d "$i" ]]; then
- continue
- fi
- if [[ -e /var/run/vyatta/ipv6_no_fwd.$i ]]; then
- sudo sh -c "echo 0 > $i/forwarding"
- fi
- done
- sudo sh -c "echo 1 > /proc/sys/net/ipv6/conf/default/forwarding"
- #
- # If router advertisements were configured while global IPv6
- # forwarding was disabled, we will need to start the radvd daemon
- # now.
- running=$(pgrep -n radvd)
- if [[ -z "$running" ]] &&
- [[ -e /etc/radvd.conf ]] &&
- [[ -x /etc/init.d/radvd ]]; then
- /etc/init.d/radvd start
- fi
-
diff --git a/templates/system/ipv6/disable/node.def b/templates/system/ipv6/disable/node.def
deleted file mode 100644
index eb61557f..00000000
--- a/templates/system/ipv6/disable/node.def
+++ /dev/null
@@ -1,11 +0,0 @@
-priority: 400
-help: Disable assignment of IPv6 addresses on all interfaces
-
-create:
- sudo sh -c "echo options ipv6 disable_ipv6=1 > \
- /etc/modprobe.d/vyatta_disable_ipv6.conf"
- echo "This change will take affect when the system is rebooted."
-
-delete:
- sudo sh -c "rm -f /etc/modprobe.d/vyatta_disable_ipv6.conf"
- echo "This change will take affect when the system is rebooted."
diff --git a/templates/system/ipv6/multipath/layer4-hashing/node.def b/templates/system/ipv6/multipath/layer4-hashing/node.def
deleted file mode 100644
index 97ffdc61..00000000
--- a/templates/system/ipv6/multipath/layer4-hashing/node.def
+++ /dev/null
@@ -1,5 +0,0 @@
-help: Use layer 4 information for ECMP hashing
-
-create: sudo sysctl -w net.ipv4.fib_multipath_hash_policy=1 >/dev/null
-delete: sudo sysctl -w net.ipv4.fib_multipath_hash_policy=0 >/dev/null
-
diff --git a/templates/system/ipv6/multipath/node.def b/templates/system/ipv6/multipath/node.def
deleted file mode 100644
index 76bf4372..00000000
--- a/templates/system/ipv6/multipath/node.def
+++ /dev/null
@@ -1 +0,0 @@
-help: IPv6 multipath settings
diff --git a/templates/system/ipv6/neighbor/node.def b/templates/system/ipv6/neighbor/node.def
deleted file mode 100644
index ca609636..00000000
--- a/templates/system/ipv6/neighbor/node.def
+++ /dev/null
@@ -1,2 +0,0 @@
-priority: 400
-help: Parameters for Neighbor cache
diff --git a/templates/system/ipv6/neighbor/table-size/node.def b/templates/system/ipv6/neighbor/table-size/node.def
deleted file mode 100644
index 0ea4816e..00000000
--- a/templates/system/ipv6/neighbor/table-size/node.def
+++ /dev/null
@@ -1,14 +0,0 @@
-help: Maximum number of entries to keep in the Neighbor cache
-
-type: u32
-
-default: 8192
-
-allowed: echo "1024 2048 4096 8192 16384 32768"
-
-syntax:expression: exec " \
- /opt/vyatta/sbin/vyatta-update-arp-params \
- 'syntax-check' 'table-size' '$VAR(@)' 'ipv6' "
-
-update:
- /opt/vyatta/sbin/vyatta-update-arp-params 'update' 'table-size' '$VAR(@)' 'ipv6'
diff --git a/templates/system/ipv6/node.def b/templates/system/ipv6/node.def
deleted file mode 100644
index d67a124a..00000000
--- a/templates/system/ipv6/node.def
+++ /dev/null
@@ -1 +0,0 @@
-help: IPv6 settings
diff --git a/templates/system/ipv6/strict-dad/node.def b/templates/system/ipv6/strict-dad/node.def
deleted file mode 100644
index c52de988..00000000
--- a/templates/system/ipv6/strict-dad/node.def
+++ /dev/null
@@ -1,29 +0,0 @@
-
-priority: 290 # Must be run before any interfaces are configured
-
-help: Disable IPv6 operation on interface when DAD fails on LL addr
-
-# Enable strict DAD behavior. Disable IPv6 operation on an interface
-# if DAD fails on the EUI-64 based link-local address.
-#
-create:
- sudo sh -c "echo 2 > /proc/sys/net/ipv6/conf/all/accept_dad"
- sudo sh -c "echo 2 > /proc/sys/net/ipv6/conf/default/accept_dad"
- for ifname in /sys/class/net/eth* ; do
- if [ -d $ifname ]; then
- ifname=${ifname#/sys/class/net/}
- sudo sh -c "echo 2 > /proc/sys/net/ipv6/conf/$ifname/accept_dad"
- fi
- done
-
-
-# Revert back to liberal DAD behavior
-delete:
- sudo sh -c "echo 1 > /proc/sys/net/ipv6/conf/all/accept_dad"
- sudo sh -c "echo 1 > /proc/sys/net/ipv6/conf/default/accept_dad"
- for ifname in /sys/class/net/eth* /sys/class/net/en* ; do
- if [ -d $ifname ]; then
- ifname=${ifname#/sys/class/net/}
- sudo sh -c "echo 1 > /proc/sys/net/ipv6/conf/$ifname/accept_dad"
- fi
- done