summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-07-25Bugfix 8222: deletion and adding bind parameter under vti deletes vti ↵Saurabh Mohan
interface in show interfaces output though vti configuration exists The bind, mark parameters can be changed individually but the vti script runs at the vpn node level. By that time the old value is not known. With this change now I find out the exisiting vti tunnels from the kernel and discover the old vti-name, and mark setting from there. After that it is possible to figure out if a. No change was done to a VTI: In that case do not do any config. b. If a tunnel was changed: Delete and create the tunnel again. c. If a tunnel was deleted: Remove the tunnel config from the kernel. d. If the tunnel was added: Configure it. Also, configure the vti interface prior to the strongswan configuration. This way if the ipsec tunnel comes up then we can bring the interface up/down (see Bug 8219). Remove the disable configuration param (see Bug 8221).
2012-07-160.12.95debian/0.12.95Saurabh Mohan
2012-07-16Workaround to setup vti ko and cleaner error message.Saurabh Mohan
2012-06-180.12.94debian/0.12.94Saurabh Mohan
2012-06-18Bugfix: 8015: supress perl warnings.Saurabh Mohan
2012-06-110.12.93debian/0.12.93Saurabh Mohan
2012-06-11VTI: Add support call for checking for vti interface name.Saurabh Mohan
2012-06-040.12.92debian/0.12.92Saurabh Mohan
2012-06-04VTI bring tunnel based on ipsec-sa state.Saurabh Mohan
2012-05-310.12.91debian/0.12.91Saurabh Mohan
2012-05-31Bugfix 8100: Be flexible in char accepted in id field.Saurabh Mohan
2012-05-180.12.90debian/0.12.90Saurabh Mohan
2012-05-18VTI: cfg mark/bind change handlers.Saurabh Mohan
2012-05-17Merge branch 'pacifica' of http://git.vyatta.com/vyatta-cfg-vpn into pacificaSaurabh Mohan
2012-05-17Default keyexchange ikev1.Saurabh Mohan
2012-05-160.12.89debian/0.12.89Saurabh Mohan
2012-05-16Vti config support.Saurabh Mohan
2012-03-290.12.88debian/0.12.88Daniil Baturin
2012-03-29Add commit-time config validation.Daniil Baturin
2012-03-29Add any special case for local-address instead of 0.0.0.0.Daniil Baturin
2012-03-29Rename "local/remote subnet" to "local/remote prefix".Daniil Baturin
2012-03-29Fix protocol help string capitalization.Daniil Baturin
2012-03-29Add IPv6 address completion for peer.Daniil Baturin
2012-03-29Rename local-ip option to local-address.Daniil Baturin
2012-03-29Add a script for validating single IPv4 or IPv6 address with no prefixDaniil Baturin
length.
2012-03-030.12.87debian/0.12.87Deepti Kulkarni
2012-03-03new branchDeepti Kulkarni
2012-02-290.12.86debian/0.12.86John Southworth
2012-02-29Fix uninitilized bugJohn Southworth
2012-02-280.12.85debian/0.12.85John Southworth
2012-02-28Bugfix 6839: Warn that pre-shared key changes aren't loaded until a rekey ↵John Southworth
interval
2011-09-190.12.84debian/0.12.84John Southworth
2011-09-19Switched POSIX character classes to standard character classes representing ↵John Southworth
the same data; removed unneeded '.' from regex; add similar regex to match remote-id
2011-07-110.12.83debian/0.12.83John Southworth
2011-07-11Remove no longer mandatory nodes so that VPN will work smoothly with webgui2John Southworth
(cherry picked from commit 3680e3e42b202c78bd3ffe2ec380e007f3359b5f)
2011-07-070.12.82debian/0.12.82Deepti Kulkarni
2011-07-07new branchDeepti Kulkarni
2011-06-150.12.81debian/0.12.81Bob Gilligan
2011-06-15Bugfix 6767: Move /tmp/ipsec.log to /var/log/vyatta and rotate it.Bob Gilligan
2011-06-080.12.80debian/0.12.80John Southworth
2011-06-08Bugfix 7145: same changes were needed for site-to-site as wellJohn Southworth
2011-04-150.12.79debian/0.12.79Mohit Mehta
2011-04-15add help and check for missed auth node so users put it in /configMohit Mehta
2011-04-130.12.78debian/0.12.78Mohit Mehta
2011-04-13* Add help and checks for IPsec x509 nodes to pushMohit Mehta
users towards putting scripts in /config/auth
2011-04-010.12.77debian/0.12.77John Southworth
2011-04-01Bugfix 6972: Suppress messages from the ipsec dhcp scriptJohn Southworth
2011-03-080.12.76debian/0.12.76John Southworth
2011-03-08Fix perlcritic errorsJohn Southworth
2011-02-230.12.75debian/0.12.75John Southworth