summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2009-10-060.12.13debian/0.12.13Mohit Mehta
2009-10-06Fix Bug 3011 Remote VPN configuration issues site-to-site warningMohit Mehta
* issue warning when none of site-to-site peers, remote access l2tp/pptp set
2009-09-040.12.12debian/0.12.12Stig Thormodsrud
2009-09-04Fix 4902: setting ipsec site-to-site tunnel with authentication id <> and ↵Stig Thormodsrud
local-ip 0.0.0.0 got "no connection named <>"
2009-08-270.12.11debian/0.12.11slioch
2009-08-20manage state of add|delete|restart on connections for vpn given disable node.slioch
2009-08-20added support in configuration script to support tunnel disable node.slioch
2009-08-14convert enable to disable node for vpn tunnelslioch
2009-08-14add enable node below tunnel with default flag = trueslioch
2009-08-130.12.10debian/0.12.10slioch
2009-08-13Merge branch 'kenwood' of http://git.vyatta.com/vyatta-cfg-vpn into kenwoodslioch
2009-08-13added description field to site-to-site peer.slioch
2009-07-100.12.9debian/0.12.9Stig Thormodsrud
2009-07-10Fix 4623: Removing IPSEC VPN config without removing cluster ipsec config ↵Stig Thormodsrud
drops all interfaces. Add a check to prevent deleting ipsec if it's referenced by cluster. (cherry picked from commit b17d768af5845cb5b74e9ba8c6d8f8e2701bb0f6)
2009-05-290.12.8debian/0.12.8An-Cheng Huang
2009-05-260.12.7debian/0.12.7Stig Thormodsrud
2009-05-26Fix 3836: Allow VPN authentication ID to accept values of IP address, domain ↵Stig Thormodsrud
name and "" enclosed phrases
2009-04-080.12.6debian/0.12.6Bob Gilligan
2009-04-08Bugfix 3284: Allow commit to succeed if local-ip is not configured.Bob Gilligan
Previously, the ipsec setup script would fail the commit if the IPv4 address given in the local-ip parameter was not configured on one of the ipsec-interfaces at the time that the commit took place. This causes problems for PPP interfaces that may be configured, but down for operational reasons. This change makes the setup script more liberal. It will allow the commit to complete, but issue a warning the address, they can restart ipsec. PPP has logic to restart ipsec when a link comes up.
2009-04-060.12.5debian/0.12.5Bob Gilligan
2009-04-06Bugfix 2387: Don't list interfaces in ipsec config file.Bob Gilligan
The "interfaces=..." entry in the /etc/ipsec.conf file needs to list the actual interfaces we are using only if the underlying kernel IPsec support is provided by KLIPS. In our case, we are using NETKEY, so we don't need to list our interfaces there. Not listing them makes ipsec startup a bit more robust.
2009-03-260.12.4debian/0.12.4Stig Thormodsrud
2009-03-26Change "ipsec-interfaces" to use vyatta-interfaces.pl for allowed tag.Stig Thormodsrud
2009-03-160.12.3debian/0.12.3Stig Thormodsrud
2009-03-16Fix 4219: IPsec VPN does not launch on boot, error "The local-ip address ↵Stig Thormodsrud
X.X.X.X of peer "X.X.X.X" has not been configured in any of the local.
2009-02-120.12.2debian/0.12.2Stephen Hemminger
2009-02-12Fix ambiguous use of $logStephen Hemminger
There were two definitions of $log
2009-02-11Fix use of unitialized valueStephen Hemminger
Bug 4021 Don't die if local ip not configured.
2009-02-11Remove perlcritic warningsStephen Hemminger
Use 3 argument open
2009-01-080.12.1debian/0.12.1An-Cheng Huang
2008-12-12"files" file should be removed before package buildAn-Cheng Huang
2008-12-12update maintainer informationAn-Cheng Huang
2008-12-03Merge branch 'islavista' into jennerRick Balocca
2008-11-253.2.0vyatta/3.2.0debian/0.12Mark O'Brien
2008-11-24Convert to Vyatta:: hierarchyStephen Hemminger
2008-11-21Rename VyattaVPNUtil to Vyatta::VPNUtilStephen Hemminger
2008-11-19add support for development buildAn-Cheng Huang
2008-11-11allow '+' as a valid character in pre-shared-secretMohit Mehta
2008-10-13Remove unused rsa keys.Stig Thormodsrud
2008-10-07Part of fix for bug 3762 Update help and error strings for vpn pre-shared ↵Mohit Mehta
secret value - help and error string updated
2008-07-233.1.2vyatta/3.1.4vyatta/3.1.3vyatta/3.1.2debian/0.11hollywoodMark O'Brien
2008-07-22Fix 3300: VPN over PPPOE completely fails on rebootStig Thormodsrud
2008-07-11fix for bug 3044: hide perl error messagesAn-Cheng Huang
2008-07-09add config version fileAn-Cheng Huang
2008-07-09fix for bugs 3044, 3047, and 3048: support ipsec road warriors.An-Cheng Huang
2008-06-173.1.0vyatta/3.1.1vyatta/3.1.0debian/0.10Mark O'Brien
2008-06-05- disallowing use of special characters ';' and '?' in pre-shared-secret as ↵Mohit Mehta
they were not in glendale - as of now only two new characters have been added to be allowed in hollywood from glendale: ',' ':' - these work good with and without quotes being used
2008-06-05Bug 3194 VPN: xml error in "show vpn ike" command outputMohit Mehta
- reallowing the use of '&' in pre-shared-secret to prevent migration issues this will need looking into the show command procedures
2008-05-14Bug 3194 VPN: xml error in "show vpn ike" command outputMohit Mehta
- looks like the '&' special character is causing this behavior - quick fix: disallowed use of '&' in pre-shared-secret for now
2008-05-24Fix 2043: enhancement - add ability to use a hostname instead of IP address ↵Stig Thormodsrud
fo VPN peer.