Age | Commit message (Collapse) | Author | |
---|---|---|---|
2012-08-13 | Bugfix: 8276: Change htonl after parsing the input. | Saurabh Mohan | |
2012-08-13 | 0.12.98debian/0.12.98 | Saurabh Mohan | |
2012-08-13 | Bugfix 8276: Vti not working on a 32-bit machine due to sign bit overload. | Saurabh Mohan | |
In a 32-bit machine the signed bit is at the 32'nd bit position. Mark used by vti set's (0x9000-0000) that bit position. Changed the api to use strtoul to read the data from the command line and configure the mark. Also, changed the vyatta-cfg-vpn package to be arch dependent since it now has a binary that it generates. | |||
2012-08-09 | 0.12.97debian/0.12.97 | Saurabh Mohan | |
2012-08-09 | Bugfix 8264: Check if the intf name is defined before using it in the script. | Saurabh Mohan | |
Fix the error message for undefined intf name in error message. Also, add changes to incorporate mark's from range 0-2047. Print warning if a vti interface is defined but not used. Hopefully this will help users understand that they have a partial configuration. | |||
2012-07-25 | 0.12.96debian/0.12.96 | Saurabh Mohan | |
2012-07-25 | Bugfix 8222: deletion and adding bind parameter under vti deletes vti ↵ | Saurabh Mohan | |
interface in show interfaces output though vti configuration exists The bind, mark parameters can be changed individually but the vti script runs at the vpn node level. By that time the old value is not known. With this change now I find out the exisiting vti tunnels from the kernel and discover the old vti-name, and mark setting from there. After that it is possible to figure out if a. No change was done to a VTI: In that case do not do any config. b. If a tunnel was changed: Delete and create the tunnel again. c. If a tunnel was deleted: Remove the tunnel config from the kernel. d. If the tunnel was added: Configure it. Also, configure the vti interface prior to the strongswan configuration. This way if the ipsec tunnel comes up then we can bring the interface up/down (see Bug 8219). Remove the disable configuration param (see Bug 8221). | |||
2012-07-16 | 0.12.95debian/0.12.95 | Saurabh Mohan | |
2012-07-16 | Workaround to setup vti ko and cleaner error message. | Saurabh Mohan | |
2012-06-18 | 0.12.94debian/0.12.94 | Saurabh Mohan | |
2012-06-18 | Bugfix: 8015: supress perl warnings. | Saurabh Mohan | |
2012-06-11 | 0.12.93debian/0.12.93 | Saurabh Mohan | |
2012-06-11 | VTI: Add support call for checking for vti interface name. | Saurabh Mohan | |
2012-06-04 | 0.12.92debian/0.12.92 | Saurabh Mohan | |
2012-06-04 | VTI bring tunnel based on ipsec-sa state. | Saurabh Mohan | |
2012-05-31 | 0.12.91debian/0.12.91 | Saurabh Mohan | |
2012-05-31 | Bugfix 8100: Be flexible in char accepted in id field. | Saurabh Mohan | |
2012-05-18 | 0.12.90debian/0.12.90 | Saurabh Mohan | |
2012-05-18 | VTI: cfg mark/bind change handlers. | Saurabh Mohan | |
2012-05-17 | Merge branch 'pacifica' of http://git.vyatta.com/vyatta-cfg-vpn into pacifica | Saurabh Mohan | |
2012-05-17 | Default keyexchange ikev1. | Saurabh Mohan | |
2012-05-16 | 0.12.89debian/0.12.89 | Saurabh Mohan | |
2012-05-16 | Vti config support. | Saurabh Mohan | |
2012-03-29 | 0.12.88debian/0.12.88 | Daniil Baturin | |
2012-03-29 | Add commit-time config validation. | Daniil Baturin | |
2012-03-29 | Add any special case for local-address instead of 0.0.0.0. | Daniil Baturin | |
2012-03-29 | Rename "local/remote subnet" to "local/remote prefix". | Daniil Baturin | |
2012-03-29 | Fix protocol help string capitalization. | Daniil Baturin | |
2012-03-29 | Add IPv6 address completion for peer. | Daniil Baturin | |
2012-03-29 | Rename local-ip option to local-address. | Daniil Baturin | |
2012-03-29 | Add a script for validating single IPv4 or IPv6 address with no prefix | Daniil Baturin | |
length. | |||
2012-03-03 | 0.12.87debian/0.12.87 | Deepti Kulkarni | |
2012-03-03 | new branch | Deepti Kulkarni | |
2012-02-29 | 0.12.86debian/0.12.86 | John Southworth | |
2012-02-29 | Fix uninitilized bug | John Southworth | |
2012-02-28 | 0.12.85debian/0.12.85 | John Southworth | |
2012-02-28 | Bugfix 6839: Warn that pre-shared key changes aren't loaded until a rekey ↵ | John Southworth | |
interval | |||
2011-09-19 | 0.12.84debian/0.12.84 | John Southworth | |
2011-09-19 | Switched POSIX character classes to standard character classes representing ↵ | John Southworth | |
the same data; removed unneeded '.' from regex; add similar regex to match remote-id | |||
2011-07-11 | 0.12.83debian/0.12.83 | John Southworth | |
2011-07-11 | Remove no longer mandatory nodes so that VPN will work smoothly with webgui2 | John Southworth | |
(cherry picked from commit 3680e3e42b202c78bd3ffe2ec380e007f3359b5f) | |||
2011-07-07 | 0.12.82debian/0.12.82 | Deepti Kulkarni | |
2011-07-07 | new branch | Deepti Kulkarni | |
2011-06-15 | 0.12.81debian/0.12.81 | Bob Gilligan | |
2011-06-15 | Bugfix 6767: Move /tmp/ipsec.log to /var/log/vyatta and rotate it. | Bob Gilligan | |
2011-06-08 | 0.12.80debian/0.12.80 | John Southworth | |
2011-06-08 | Bugfix 7145: same changes were needed for site-to-site as well | John Southworth | |
2011-04-15 | 0.12.79debian/0.12.79 | Mohit Mehta | |
2011-04-15 | add help and check for missed auth node so users put it in /config | Mohit Mehta | |
2011-04-13 | 0.12.78debian/0.12.78 | Mohit Mehta | |