summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-12-05dmvpn: T1784: Run ipsec-settings before DMVPNDmitriyEshenko
2019-11-02Merge pull request #26 from DmitriyEshenko/ipsec-closeactChristian Poessinger
T1780 Adding IPSec IKE close-action
2019-10-31T1780 Adding IPSec IKE close-actionDmitriyEshenko
2019-09-28Jenkins: import Pipeline from vyos-1x commit bd00ec7Christian Poessinger
2019-09-28Jenkins: import Pipeline from vyos-1x commit bd00ec7Christian Poessinger
2019-08-19Merge branch 'current' into equuleusDaniil Baturin
2019-08-14update Jenkins file for equuleusUnicronNL
2019-07-25Merge pull request #25 from hagbard-01/l2tphagbard-01
[accel-l2tp] - T834: L2TP implementation
2019-07-25[accel-l2tp] - T834: L2TP implementationhagbard
- disable legacy update-l2tp.pl - ipsec-settings.py last entry to run after all the legacy scripts
2019-07-05T1499: Allow for usage of systemd interface mappings (#23)runborg
2019-06-19[logrotate] T1420 - logrotate permission errors on vyatta logfileshagbard
2019-05-21Create Jenkinsfile currentKim Hagen
2019-04-12add dependencyKim
2019-03-14Fixes T1298 use vti tunnel with ipsec and dhcp.Kim
* make dhcp interface work for vti interfaces * clean up code, loger timeout use python api * change vti tunnel ip on new dhcp lease * only change ip on up and do not get non dhcp ip * fix error in function, include up-host and down-host
2019-03-06[pptp] version bumphagbard
2019-03-06removing script call for pptp which is now being handled by accel-ppphagbard
2019-01-21fix typo in dead-pear-detectionKim
2019-01-15fix typoKim Hagen
2019-01-15do not display connection header when there are no tunnels createdKim Hagen
2019-01-11Reference IPsec profile name in DMPN connection names for op mode.Daniil Baturin
2019-01-07fixing cur_vers reference for Makefilehagbard
2019-01-07bumped config version so the migrate jobs workhagbard
2019-01-07Fix: T1168 - Upgrade: 1,1,7 -> 1.2.0-epa2 Ipsec logging command failure.hagbard
2018-12-31T777: improve "connection-type" option help strings.Daniil Baturin
2018-12-06Fix: T1048: [IPSec] Protocol all does not work in IPSec Tunnelhagbard
2018-11-13T1006: allow the "any" value for the local-address option.Daniil Baturin
2018-11-13Set the architecture to 'all' since this package has no ↵Daniil Baturin
architecture-dependent files.
2018-11-13T1006: replace the is_valid_address.pl script with ipaddrcheck.Daniil Baturin
2018-08-27Add plugins to dependencies.Daniil Baturin
2018-08-20Merge pull request #19 from runborg/currentDaniil Baturin
T787: Make sure dmvpn config is generated after ipsec config.
2018-08-19T787: Make sure dmvpn config is generated after ipsec config. this one needs ↵Runar Borge
more testing to test for breakages on ipsec
2018-08-08T767: cleanup vpn-config.pl - removal of KLIPSChristian Poessinger
Two IPsec kernel stacks are currently available: KLIPS and NETKEY. The Linux kernel NETKEY code is a rewrite from scratch of the KAME IPsec code. The KAME Project was a group effort of six companies in Japan to provide a free IPv6 and IPsec (for both IPv4 and IPv6) protocol stack implementation for variants of the BSD UNIX computer operating system. KLIPS is not a part of the Linux kernel. When using KLIPS, you must apply a patch to the kernel to support NAT-T. When using NETKEY, NAT-T support is already inside the kernel, and there is no need to patch the kernel. [1] KLIPS part has been removed as we always used the NETKEY path in the Perl script. [1]: https://www.linuxjournal.com/article/9916
2018-08-08T767: remove IPSEC deprecated keyword 'interfaces'Christian Poessinger
'interfaces' option no longer available in StrongSWAN as of their Wiki [1]. [1]: https://wiki.strongswan.org/projects/strongswan/wiki/ConfigSetupSection
2018-08-05T71: call the ipsec-settings.py script in VPN.Daniil Baturin
2018-08-05T628: delete the default route from the StrongSWAN table (220 hardcoded) for ↵Daniil Baturin
VTI connections
2018-06-03T674: set DH group default in IKE groups to 2.Daniil Baturin
Using the default: tag in the template for now, this issue should be addressed properly when we get to rewriting IPsec scripts.
2018-06-02Merge branch 'current' of github.com:vyos/vyatta-cfg-vpn into currentDaniil Baturin
2018-06-02T675: for downgrading strongswan to 5.5, remove explicit dependency on libvici.Daniil Baturin
In 5.5 from stretch, it's inside the swanctl package. In 5.6 from sid, the swanctl package depends on it so we don't need to mention it explicitly anyway.
2018-02-27Merge pull request #18 from unixninja92/T542Kim
Lowered minimum DPD interval and timeout as per T542
2018-02-20Lowered minimum DPD interval and timeout as per T542unixninja92
2017-10-31Merge pull request #17 from Taniadz/currentDaniil Baturin
T126: charon listening on ALL interfaces
2017-10-31T126: charon listening on ALL interfaces(correct sorting)Taniadz
2017-10-27T126: charon listening on ALL interfaces(add ipsec restart)Taniadz
2017-10-25T126: charon listening on ALL interfaces( fix the style issues)Taniadz
2017-10-24T126: charon listening on ALL interfacesTaniadz
2017-10-13T423: use listNodes rather than listActiveNodes to enable completion for ↵Daniil Baturin
uncommited IKE and ESP groups.
2017-04-25Merge pull request #15 from smunaut/T137Kim
Fix VTI interface configuration to set both ikey and okey
2017-03-23Fix VTI interface configuration to set both ikey and okeySylvain Munaut
Without this, the outgoing traffic is marked and encrypted but incoming traffic isn't properly forwarded to the VTI and just gets dropped. Partially Fixes T137 Signed-off-by: Sylvain Munaut <s.munaut@whatever-company.com>
2017-03-04T287: Merge pull request #14 from paulgear/patch-1Daniil Baturin
T287: Add missingok to logrotate for ipsec
2017-03-02Add missingok to logrotate for ipsecPaul Gear
If this is not present, it causes hourly messages in /var/log/messages like this: Mar 2 19:17:01 vyos /USR/SBIN/CRON[9140]: (root) CMD ( cd / && run-parts --report /etc/cron.hourly) Mar 2 19:17:01 vyos /USR/SBIN/CRON[9138]: (CRON) error (grandchild #9140 failed with exit status 1) Mar 2 19:17:01 vyos /USR/SBIN/CRON[9138]: (CRON) info (No MTA installed, discarding output) This is because cron wants to produce output like the following when ipsec.log is not present: /etc/cron.hourly/vyatta-logrotate-hourly: error: stat of /var/log/vyatta/ipsec.log failed: No such file or directory run-parts: /etc/cron.hourly/vyatta-logrotate-hourly exited with return code 1
generated by cgit v1.2.3 (git 2.39.1) at 2025-08-29 07:26:11 +0000