summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-08-13Bugfix: 8276: Change htonl after parsing the input.Saurabh Mohan
2012-08-130.12.98debian/0.12.98Saurabh Mohan
2012-08-13Bugfix 8276: Vti not working on a 32-bit machine due to sign bit overload.Saurabh Mohan
In a 32-bit machine the signed bit is at the 32'nd bit position. Mark used by vti set's (0x9000-0000) that bit position. Changed the api to use strtoul to read the data from the command line and configure the mark. Also, changed the vyatta-cfg-vpn package to be arch dependent since it now has a binary that it generates.
2012-08-090.12.97debian/0.12.97Saurabh Mohan
2012-08-09Bugfix 8264: Check if the intf name is defined before using it in the script.Saurabh Mohan
Fix the error message for undefined intf name in error message. Also, add changes to incorporate mark's from range 0-2047. Print warning if a vti interface is defined but not used. Hopefully this will help users understand that they have a partial configuration.
2012-07-250.12.96debian/0.12.96Saurabh Mohan
2012-07-25Bugfix 8222: deletion and adding bind parameter under vti deletes vti ↵Saurabh Mohan
interface in show interfaces output though vti configuration exists The bind, mark parameters can be changed individually but the vti script runs at the vpn node level. By that time the old value is not known. With this change now I find out the exisiting vti tunnels from the kernel and discover the old vti-name, and mark setting from there. After that it is possible to figure out if a. No change was done to a VTI: In that case do not do any config. b. If a tunnel was changed: Delete and create the tunnel again. c. If a tunnel was deleted: Remove the tunnel config from the kernel. d. If the tunnel was added: Configure it. Also, configure the vti interface prior to the strongswan configuration. This way if the ipsec tunnel comes up then we can bring the interface up/down (see Bug 8219). Remove the disable configuration param (see Bug 8221).
2012-07-160.12.95debian/0.12.95Saurabh Mohan
2012-07-16Workaround to setup vti ko and cleaner error message.Saurabh Mohan
2012-06-180.12.94debian/0.12.94Saurabh Mohan
2012-06-18Bugfix: 8015: supress perl warnings.Saurabh Mohan
2012-06-110.12.93debian/0.12.93Saurabh Mohan
2012-06-11VTI: Add support call for checking for vti interface name.Saurabh Mohan
2012-06-040.12.92debian/0.12.92Saurabh Mohan
2012-06-04VTI bring tunnel based on ipsec-sa state.Saurabh Mohan
2012-05-310.12.91debian/0.12.91Saurabh Mohan
2012-05-31Bugfix 8100: Be flexible in char accepted in id field.Saurabh Mohan
2012-05-180.12.90debian/0.12.90Saurabh Mohan
2012-05-18VTI: cfg mark/bind change handlers.Saurabh Mohan
2012-05-17Merge branch 'pacifica' of http://git.vyatta.com/vyatta-cfg-vpn into pacificaSaurabh Mohan
2012-05-17Default keyexchange ikev1.Saurabh Mohan
2012-05-160.12.89debian/0.12.89Saurabh Mohan
2012-05-16Vti config support.Saurabh Mohan
2012-03-290.12.88debian/0.12.88Daniil Baturin
2012-03-29Add commit-time config validation.Daniil Baturin
2012-03-29Add any special case for local-address instead of 0.0.0.0.Daniil Baturin
2012-03-29Rename "local/remote subnet" to "local/remote prefix".Daniil Baturin
2012-03-29Fix protocol help string capitalization.Daniil Baturin
2012-03-29Add IPv6 address completion for peer.Daniil Baturin
2012-03-29Rename local-ip option to local-address.Daniil Baturin
2012-03-29Add a script for validating single IPv4 or IPv6 address with no prefixDaniil Baturin
length.
2012-03-030.12.87debian/0.12.87Deepti Kulkarni
2012-03-03new branchDeepti Kulkarni
2012-02-290.12.86debian/0.12.86John Southworth
2012-02-29Fix uninitilized bugJohn Southworth
2012-02-280.12.85debian/0.12.85John Southworth
2012-02-28Bugfix 6839: Warn that pre-shared key changes aren't loaded until a rekey ↵John Southworth
interval
2011-09-190.12.84debian/0.12.84John Southworth
2011-09-19Switched POSIX character classes to standard character classes representing ↵John Southworth
the same data; removed unneeded '.' from regex; add similar regex to match remote-id
2011-07-110.12.83debian/0.12.83John Southworth
2011-07-11Remove no longer mandatory nodes so that VPN will work smoothly with webgui2John Southworth
(cherry picked from commit 3680e3e42b202c78bd3ffe2ec380e007f3359b5f)
2011-07-070.12.82debian/0.12.82Deepti Kulkarni
2011-07-07new branchDeepti Kulkarni
2011-06-150.12.81debian/0.12.81Bob Gilligan
2011-06-15Bugfix 6767: Move /tmp/ipsec.log to /var/log/vyatta and rotate it.Bob Gilligan
2011-06-080.12.80debian/0.12.80John Southworth
2011-06-08Bugfix 7145: same changes were needed for site-to-site as wellJohn Southworth
2011-04-150.12.79debian/0.12.79Mohit Mehta
2011-04-15add help and check for missed auth node so users put it in /configMohit Mehta
2011-04-130.12.78debian/0.12.78Mohit Mehta