summaryrefslogtreecommitdiff
path: root/templates
AgeCommit message (Collapse)Author
2015-02-26vyatta-cfg-system: redesign the layout and updating of ntpAlex Harpin
When NTP is configured on the system, it not only acts as a client for the configured servers, but also as a server. Although the server is only available as a time source, it still represents a service that the user hasn't specifically enabled. This commit sets the default configuration of NTP to disallow all external access, so the system acts purely as a client by default, and also introduces the ability to configure which addresses / subnets are allowed to both query and use it as a time source. If the servers configured are specified as host names, these are resolved to IP addresses before being added to ntp.conf, with the same process carried out after name server changes. syntax 'set system ntp client address' Bug #94 http://bugzilla.vyos.net/show_bug.cgi?id=94
2015-02-26vyatta-cfg-system: correct typo in node.defAlex Harpin
2015-02-26vyatta-cfg-system: adjust mtu node priority to set mtu after parentAlex Harpin
Adjusting the mtu node prority from 381 to 382 so child interfaces set their MTU after the parent interface. This was reported for multiple vifs when setting the MTU to 9000 for jumbo frames, although it only exhibited it when more than one vif was configured. Bug #473 http://bugzilla.vyos.net/show_bug.cgi?id=473
2015-02-23Add ingress-qos-mapping/egress-qos-mapping to VLAN configuration (#385)kouak
2015-02-22Merge pull request #40 from kouak/lithiumDaniil Baturin
Bug #389: Add RFC2136 configuration options for ddclient 3.8.2
2015-02-20Add RFC2136 configuration options for ddclient 3.8.2 (#389)kouak
2015-02-20Bug #492: fail commit in case of DHCPv6 configuration errors.Daniil Baturin
2015-02-20Bug #490: remove priority inversion in dhcpv6-options.Daniil Baturin
Seems to work with 319.
2015-02-10vyatta-cfg-system: multiple servers for dns forwarding domain overrideAlex Harpin
When configuring DNS fowarding, allow multiple servers to be specified when setting domain overrides, in order to allow Dnsmasq to gracefully handle unavailable nameservers. Bug #408 http://bugzilla.vyos.net/show_bug.cgi?id=408
2015-02-08vyatta-cfg-system: allow dynamic dns updating from behind natAlex Harpin
Add a couple of configuration options to DDNS, to allow the use=web option from ddclient when determining the external IP address. This will allow DDNS to be correctly updated when behind a NAT device. Syntax: set service dns dynamic interface eth0 use-web url (url to use) set service dns dynamic interface eth0 use-web skip (search for this) Bug #455 http://bugzilla.vyos.net/show_bug.cgi?id=455
2015-02-06Can not change EtherType with vif-c interfaces configuredKim Hagen
2015-02-05Bug #352 - QinQ - changing the ethertype value of vif-sKim Hagen
2015-02-02Bug #467, tos inherit not turned on by default on tunnels (IPIP, GRE)Kim Hagen
2015-01-26Fix Bug#382. (Another fix).Hiroyuki Sato
If radvd is not running, the pgrep command returns an empty string, not zero. Reported-by Carl Byington <vyos-bug@five-ten-sg.com>
2015-01-24vyatta-cfg-system: remove default speed value for console accessAlex Harpin
Remove the default value for the console speed node as this is already set by the system. Update the help text to display the defaults for both serial and Xen consoles.
2015-01-17vyatta-cfg-system: add dynamic dns support for no-ip.com/noipAlex Harpin
Add support for using the no-ip.com dynamic DNS service with VyOS. Bug #436 http://bugzilla.vyos.net/show_bug.cgi?id=436
2015-01-02vyatta-cfg-system: add dynamic dns support for afraid.org/freednsAlex Harpin
Add support for using the afraid.org dynamic DNS service with VyOS. This requires the updated ddclient package built for VyOS to work correctly as the version currently in squeeze lacks support for the freedns protocol. Bug #287 http://bugzilla.vyos.net/show_bug.cgi?id=287
2014-12-20vyatta-cfg-system: fix for unusable "link" optionHiroshi Umehara
In the inital state, the "link" option was not usable, so I moved the "link" directory under "node.tag". Aftewards, the "link" option became usable.
2014-12-19support "remote" attribute of VXLAN tunnelRyo Nakamura
2014-11-25Merge pull request #34 from jhendryUK/rsyslog_log_everythingDaniil Baturin
Bug #391: Expose rsyslog log level 'all' in CLI
2014-11-24Expose rsyslog log level 'all' in CLIJason Hendry
2014-11-09Merge pull request #31 from hiroyuki-sato/patch-for-lithiumDaniil Baturin
Fix Bug#382 Removing system ipv6 forwarding causes script error.
2014-11-06Fix Bug#382 Removing system ipv6 forwarding causes script error.Hiroyuki Sato
2014-11-01Removing sysctl all node, adding net.ipv4.igmp_max_membershipsJason Hendry
2014-11-01Adding all + custom sysctl option nodesJason Hendry
2014-10-31Creating template for net.ipv4.ipfrag_time sysctlJason Hendry
2014-10-29Correcting udp offload option name form segmentation to fragmentationJason Hendry
2014-10-29Removing default settings offload valuesJason Hendry
2014-10-29Updating comments so they make a bit more senseJason Hendry
2014-10-29Making offload setting changes change on a single optionJason Hendry
2014-10-29Adding templates for tso options. fixing logic in vyatta-interfaces for tso ↵Jason Hendry
options
2014-10-18vyatta-cfg-system: comment change in the plaintext-password nodeAlex Harpin
Remove the comment from the plaintext-password node regarding empty encrypted password values as you can't set them as empty.
2014-10-18vyatta-cfg-system: fix for deleting encrypted password breaks configAlex Harpin
You can't create a user without a password, but once this user is created, you can then delete the encrypted password. However, deleting the encrypted password from the config doesn't actually remove the password on the system and in addition breaks the config on reboot, resulting in the system login node being entirely absent. This fix ensures that the encrypted password is set to "!" when the config node is deleted, removing the password login capability for this account but still allowing SSH RSA key login. Bug #336 http://bugzilla.vyos.net/show_bug.cgi?id=336
2014-10-07Fix a typo in help string.Daniil Baturin
2014-09-25Merge branch 'helium' of github.com:vyos/vyatta-cfg-system into heliumDaniil Baturin
2014-09-25Rename "dev" to "link" under VXLAN for consistency with pethDaniil Baturin
and whatever else we have.
2014-09-22Fix typoKim Hagen
2014-09-20Remove source-validation templates, those are also autogenerated.Daniil Baturin
2014-09-20Remove ip/node.def, it's autogenerated too.Daniil Baturin
2014-09-20Remove VXLAN templates that are supposed to be generated.Daniil Baturin
2014-09-20Merge pull request #19 from upa/helium-vxlan-cliDaniil Baturin
Add support for VXLAN
2014-09-14vyatta-cfg-system: rename allow-dhcp-nameservers and change to typelessAlex Harpin
Rename allow-dhcp-nameservers to disable-dhcp-nameservers and update the logic to take the new meaning into account. The option is now also typeless, so the node is either absent (default) or present (enabled). Format 'set / delete system disable-dhcp-nameservers' Linked to Bug #182 and Bug #308 Bug #314 http://bugzilla.vyos.net/show_bug.cgi?id=314
2014-09-11Merge pull request #24 from cyclops8456/heliumDaniil Baturin
vyatta-cfg-system: expand 'set system allow-dhcp-nameservers' logic
2014-09-11Fix syntax errorKim Hagen
2014-09-10vyatta-cfg-system: expand 'set system allow-dhcp-nameservers' logicAlex Harpin
Expand the logic in 'set system allow-dhcp-nameservers', so that in addition to either allowing / denying DHCP related updates to resolv.conf when the interface changes state, it will also either add or remove the currently supplied DHCP name-servers depending on it's state. This change in name-servers will take place immediately on commit. Bug #309 http://bugzilla.vyos.net/show_bug.cgi?id=309
2014-09-10Remove gre-multipoint encapsulation option, make the tunnel multipoint if ↵Kim Hagen
'remote-ip' is nowt set.
2014-09-09vyatta-cfg-system: add 'set system allow-dhcp-nameservers' optionAlex Harpin
Instead of simply allowing / denying DHCP related updates to resolv.conf based on the current values of 'set system name-server', as initially proposed for Bug #182 (http://bugzilla.vyos.net/show_bug.cgi?id=182), this patch replaces that behaviour with a global option to allow / deny these updates. Add 'set system allow-dhcp-nameservers' as a boolean value that has the default value of true, so allowing DHCP nameserver updates by default. Bug #308 http://bugzilla.vyos.net/show_bug.cgi?id=308
2014-09-09Bug #306: add option to enable private VLAN proxy ARP on an interface.Daniil Baturin
(aka /proc/sys/net/ipv4/conf/$intf/proxy_arp_pvlan). Patch contributed by Shane Short.
2014-09-04Do not delete tunnel if it is in use by NHRP configKim Hagen
2014-09-02vyatta-cfg-system: remove quotes from SysContact and SysLocationAlex Harpin
When the values for SysContact, SysLocation and SysDecr are written to the snmpd.conf file, they are enclosed in backslash escaped quotes. This isn't part of the syntax for snmpd.conf and looks wrong / could break snmp related things, the example snmpd.conf files show these values as unquoted. This patch corrects the output and adds validation for the supplied values, limiting them to a maximum of 255 printable characters (RFC 3418). The documentation also needs amending to take this into account. Bug #261 http://bugzilla.vyos.net/show_bug.cgi?id=261