summaryrefslogtreecommitdiff
path: root/scripts
AgeCommit message (Collapse)Author
2011-01-27Work on new IPsec operational mode script. Fixed inverted SPIsJohn Southworth
2011-01-27Work on new IPsec operational mode script. Initial NAT-T detection codeJohn Southworth
2011-01-27Work on new IPsec operational mode script. Still needs a way to detect NAT-TJohn Southworth
2011-01-24Add new operational mode script, doesn't replace current programs yet but ↵John Southworth
included in package; Related to bugs: 5305 and 6228
2011-01-20Make adjustment so OP mode can deal with new secrets file formatJohn Southworth
(cherry picked from commit 35fa51ef099248991ab79d562462c3be6d2c8884)
2010-03-31Fix Bug 5500 Unable to establish a VPN connection from a remote peer with aMohit Mehta
dynamic IP when using FQDN identifier for remote end * fix op-mode part
2010-03-17Fix Bug 5464 "show vpn ipsec status" returns no interface and active tunnel ↵Mohit Mehta
number
2010-01-12fix show vpn commands to work with strongswanMohit Mehta
(cherry picked from commit 32927e013922e1a79b0f214773e2500a1260871a)
2010-01-12use correct path for ported newhostkey commandMohit Mehta
(cherry picked from commit dfe4041f35fdfc7d9909c297396cd40bcf3d2d21)
2010-01-12fix op-mode commands for migration to strongswanMohit Mehta
* use `ipsec update` instead of openswan's `ipsec auto` commands to make 'clear vpn ipsec-peer <> tunnel <>' work * no `ipsec barf` in strongswan. instead use detailed version of the command status i.e. `ipsec statusall` for 'show vpn debug detail' * use strongswan's syntax for `ipsec rereadall` and `ipsec status` (cherry picked from commit 2c5e47cc7871bc7da84f3a14398b15cf3b1da352)
2009-10-09* Fix Bug 4017 Add the ability to restart individual IPSec tunnelsMohit Mehta
added new operational mode commands - clear vpn ipsec-peer peer <peer> # clear all tunnels for given peer clear vpn ipsec-peer peer <peer> tunnel <tunnel> # clear specific tunnel If peer is 0.0.0.0/any/@id then tunnel is brought down and loaded again but connection is not initiated as remote end could be multiple end-points The remote ends will bring up the tunnel when they get/detect tunnel down * don't call script with sudo from templates. use sudo in script where needed * script clean up
2008-12-03Fix reference to Vyatta::VPNUtilStephen Hemminger
Should be Vyatta::VPN::Util
2008-12-02Merge branch 'jenner' of suva.vyatta.com:/git/vyatta-op-vpn into jennerStephen Hemminger
Conflicts: scripts/gen_local_rsa_key.pl
2008-12-01"vpn rsa-key generate" command broken - use new perl hierarchy.Stig Thormodsrud
2008-11-21Convert to Vyatta::Stephen Hemminger
2008-07-07partial fix for bugs 3044, 3047, 3048: minor show command output headerAn-Cheng Huang
changes. fix for bug 3440: regex now matches IP, hostname, or ID.
2008-07-07Fix 3194: VPN: xml error in "show vpn ike" command outputStig Thormodsrud
2008-03-17Fix 2838: Clearing VPN process starts VPN , even if not configured.Stig Thormodsrud
- fix sloppy script which dies with "Unknown op" on valid ops. - use vyatta config rather than ipsec.conf to determine if running
2008-03-10update scripts from VPL1.0 to GPLv2Stephen Hemminger
2008-02-26Query original/active runtime config rather than the new/pending config.Marat Nepomnyashy
2008-02-22Initialize variable and check for invalid args.Marat Nepomnyashy
2008-02-22Fixed-up operator commands 'clear vpn ipsec-process' and 'show vpn debug ↵Marat Nepomnyashy
detail' so that they no longer require sudo password.
2008-02-21Moved execution of 'show vpn' commands to '/opt/vyatta/bin/sudo-users' so ↵Marat Nepomnyashy
that operator users can execute them. Bug 2865 fix.
2008-01-03Initial VPN op template migration.Marat Nepomnyashy