summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-01-190.12.105+vyos2+lithium9debian/0.12.105+vyos2+lithium9Daniil Baturin
2015-01-19Remove @ from the id/remote-id help string. It was never required.Daniil Baturin
2015-01-190.12.105+vyos2+lithium8debian/0.12.105+vyos2+lithium8Daniil Baturin
2015-01-19Bug #348: remove unnecessary restrictions on the PSK format.Daniil Baturin
2015-01-170.12.105+vyos2+lithium7debian/0.12.105+vyos2+lithium7Alex Harpin
2015-01-17vyatta-cfg-vpn: update pre-shared secret key help for single quotesAlex Harpin
Updated the help for pre-shared secret key usage when special characters are used. These need to be enclosed in single quotes to stop them being expanded by the bash shell. Bug #451 http://bugzilla.vyos.net/show_bug.cgi?id=451
2014-12-260.12.105+vyos2+lithium6debian/0.12.105+vyos2+lithium6Alex Harpin
2014-12-26Update maintainer addressAlex Harpin
2014-12-190.12.105+vyos2+lithium5debian/0.12.105+vyos2+lithium5Daniil Baturin
2014-12-19Bug #415: use remote-id for peer ID unconditionally if it's set.Daniil Baturin
2014-12-19Bug #414: quote the leftid value to avoid problems with non-alphanumeric ↵Daniil Baturin
characters.
2014-12-18Merge pull request #11 from jhendryUK/ikev2_reauth_optionDaniil Baturin
Ikev2 reauth option
2014-12-050.12.105+vyos2+lithium4debian/0.12.105+vyos2+lithium4Alex Harpin
2014-12-05vyatta-cfg-vpn: remove the cfgvti helper programAlex Harpin
The cfgvti helper program was originally added for configuring VTIs. The functionality it provided is now included upstream in iproute, so it is no longer required following the previous commits for Bug #358. Bug #358 http://bugzilla.vyos.net/show_bug.cgi?id=358
2014-12-050.12.105+vyos2+lithium3debian/0.12.105+vyos2+lithium3Alex Harpin
2014-12-04vyatta-cfg-vpn: formatting changes for style consistencyAlex Harpin
Update lib/Vyatta/VPN/vtiIntf.pm to have consistent identation levels and style throughout.
2014-12-04vyatta-cfg-vpn: reduce the vti mark base to prevent integer overflowAlex Harpin
Reduce the vtiMarkBase value to prevent integer overflow on the created ip xfrm states and policies.
2014-12-04vyatta-cfg-vpn: update vti creation in line with changes to strongswanAlex Harpin
Update the VTI creation process to go along with the changes added to the vyatta-strongswan package, due to changes in the kernel vti module. This also removes the need for additional netfilter rules to ensure that packets are directed to the corresponding VTI. Bug #358 http://bugzilla.vyos.net/show_bug.cgi?id=358
2014-12-04vyatta-cfg-vpn: update parseVtiTun to account for vti changesAlex Harpin
Update the parseVtiTun function to account for the new way of configuring VTIs. Bug #358 http://bugzilla.vyos.net/show_bug.cgi?id=358
2014-12-04vyatta-cfg-vpn: move scripts/vtiIntf.pm to lib/Vyatta/VPN/vtiIntf.pmAlex Harpin
Move vtiIntf.pm to a more logical place, in line with all the other packages.
2014-12-01Fixing syntax error in vpn-config.pl, fixing allowed parameters in the ↵Jason Hendry
per-tunnel ikev2-reauth node
2014-12-01Exposing ikev2 reauth option in CLI, defaulting to 'no'Jason Hendry
2014-10-290.12.105+vyos2+lithium2debian/0.12.105+vyos2+lithium2Daniil Baturin
2014-10-29Update changelog for the new branch.Daniil Baturin
2014-10-190.12.105+vyos1+helium4debian/0.12.105+vyos1+helium4Daniil Baturin
2014-10-19Remove the VTI script after use.Daniil Baturin
2014-10-080.12.105+vyos1+helium3debian/0.12.105+vyos1+helium3Daniil Baturin
2014-10-06Merge pull request #10 from cyclops8456/heliumDaniil Baturin
Commits for Bug #291 and Bug #332
2014-10-05vyatta-cfg-vpn: prevent duplicate local rsa key includesAlex Harpin
Prevent duplicate include statements, for the local rsa keys, being added to the ipsec.secrets file when more than one VPN connection is configured. Bug #332 http://bugzilla.vyos.net/show_bug.cgi?id=332
2014-10-05vyatta-cfg-vpn: formatting changes for style consistencyAlex Harpin
Update scripts/vpn-config.pl to have consistent identation levels and style throughout.
2014-10-05vyatta-cfg-vpn: rename vti-up-down.sh to vti-up-downAlex Harpin
Rename vti-up-down.sh to vti-up-down to be consistent with others.
2014-10-05vyatta-cfg-vpn: fix for vti interface going down remains routedAlex Harpin
Revert the fix put in place for Bug #183 as this causes multiple routes to be installed when more than one VTI routes to the same subnet (in the case of failure over routing etc). As it stands, when one of these interfaces goes down, the additional route remains active, resulting in this route still being used even though no traffic can pass. Removing the up-client fix proposed for Bug #183 fixes this issue and doesn't affect the normal operation of these VTIs. Bug #291 http://bugzilla.vyos.net/show_bug.cgi?id=291
2014-09-20Merge pull request #9 from cyclops8456/heliumDaniil Baturin
vyatta-cfg-vpn: add libnfnetlink-dev to build dependencies
2014-09-20vyatta-cfg-vpn: updated the debian package maintainer addressAlex Harpin
2014-09-20vyatta-cfg-vpn: add libnfnetlink-dev to build dependenciesAlex Harpin
Add libnfnetlink-dev to the list of build dependencies, required for compiling src/cfgcti. Bug #317 http://bugzilla.vyos.net/show_bug.cgi?id=317
2014-09-10Remove gre-multipoint referenceKim Hagen
2014-08-23Rename vyatta-update-nhrp.pl to vyos-update-nhrp.pl and change optionsKim Hagen
2014-08-030.12.105+vyos1+helium2vyos/1.1.0-beta1debian/0.12.105+vyos1+helium2Daniil Baturin
2014-08-03Bug #224: rename "enabled|disabled" to "enable|disable" for consistency.Daniil Baturin
2014-06-25Merge pull request #8 from ryanriske/helium-bug241Daniil Baturin
Bug 241: Use auto=route for connection-type respond.
2014-06-17Bug 241: Use auto=route for connection-type respond.Ryan Riske
2014-05-26Merge pull request #4 from TriJetScud/heliumDaniil Baturin
Remove automatic IKE version negoiation.
2014-05-25Merge pull request #6 from TriJetScud/helium-pull-reqDaniil Baturin
Initial MOBIKE Configuration Support
2014-05-25Initial MOBIKE Configuration SupportJeff Leung
For IKEv2, there is support for MOBIKE which basically allows IPSec connections to roam from interface to interface. When MOBIKE is used, the IKE negoiation phase uses UDP port 4500 rather than using proto-51. In strongSwan 4.5.x MOBIKE is automatically enabled for IKEv2 connections. We expose the ability to enable/disable MOBIKE to the user.
2014-05-25Merge pull request #5 from ryanriske/helium-dhgroupsDaniil Baturin
Bug 197: Add back support for groups 22-24 for phase2 pfs
2014-05-25Bug 197: Add back support for groups 22-24 for phase2 pfsRyan Riske
2014-05-25Merge pull request #3 from ryanriske/helium-sha2Daniil Baturin
Bug 220: Add support for SHA2 hashes
2014-05-25Remove automatic IKE version negoiation.Jeff Leung
According to the strongSwan 4.5.x documentation, the keyexchange configuration value "ike" is a synonym to "ikev2". In strongSwan 5.0.0 however, the configuration value "ike" will try to negoiate IKEv2 connections but will accept IKEv1 connections if the remote peer sends an IKEv1 request.
2014-05-25Bug 220: Add support for SHA2 hashesRyan Riske
2014-05-24Merge pull request #2 from ryanriske/helium-dhgroupsDaniil Baturin
Add support for DH groups 14-26
generated by cgit v1.2.3 (git 2.39.1) at 2025-08-30 12:11:04 +0000