summaryrefslogtreecommitdiff
path: root/templates
AgeCommit message (Collapse)Author
2023-09-29T5625: allow "restart vpn" to work when ipsec-interfaces is not setDaniil Baturin
2022-11-21T4812: Add op-mode show vpn ipsec connectionsViacheslav Hletenko
Add new op-mode command to show all configured VPN connections show vpn ipsec connections
2022-04-26op-mode: T4395: Extend show vpn debug for IPSecViacheslav Hletenko
Op-mode 'show vpn debug' Old Perl code 'vyatta-vpn-op.pl --op=show-vpn-debug' doesn't give us enough debug information In fact it show only 'ipsec statusall' Add python script to get all required and useful debug info
2018-11-18T956: add a new script for displaying IPsec SAs.Daniil Baturin
2018-11-05T304: remove the "show vpn debug detail" command that was based on a script ↵Daniil Baturin
StrongSWAN no longer provides.
2018-11-05T930: add missing sudo to ip xfrm commands.Daniil Baturin
2017-09-03Fixes for show vpn ike sa and show vpn ipsec sajules-vyos
Fixed 'show vpn ike sa' to actually show output when the tunnel isn't up. Foxed 'show vpn ipsec sa' to actually use the pretty-printing code, rather than swanctl --list-sas, which is pretty unpleasant.
2017-07-27Move into the CORRECT tree location.jules-vyos
2017-07-27Add templates for extended commandsjules-vyos
2017-02-08change ipsec newhostkey command with openssl commandKim Hagen
2016-09-15Reimplementation of TriJetScud's ↵Kim Hagen
commit:578688a25ba784d839512fefafab4cabdaf32fc5. Simpilfy the operational commands Instead of trying to parse the outout of ipsec or swanctl, just dump whatever swanctl outputs.
2016-05-11Merge branch 'current' into address-debconf-warningsC.J. Collier
Conflicts: templates/show/vpn/ipsec/sa/nat-traversal/node.def.in templates/show/vpn/ipsec/sa/node.def templates/show/vpn/ipsec/status/node.def.in
2016-05-11vyatta-op-vpn (0.15.0+vyos2+current2+nmu1) UNRELEASED; urgency=lowC.J. Collier
* Non-maintainer upload. * address lintian issues - script-not-executable: removed #!/usr/bin/perl from .pm files - debhelper-but-no-misc-depends: added ${misc:Depends} to Depends: field - debian-rules-missing-recommended-target: added build-arch build-indep - out-of-date-standards-version: updated standards version to 3.9.4 - package-contains-linda-override: removed linda override - file-in-unusual-dir: not triggering, removed from override - script-with-language-extension: renamed vyatta-gen-x509-keypair.sh vyatta-gen-x509-keypair * address dpkg-gencontrol issue: - unknown substitution variable ${shlibs:Depends} - removed * address dpkg-source issue: - debian/source/format set to "3.0 (native)" * removed all references to /opt/vyatta but one from source Signed-off-by: C.J. Collier <cjcollier@linuxfoundation.org>
2016-05-11Merge pull request #16 from LLC-Technologies-Collier/address-debconf-warningsKim
Address debconf warnings
2016-05-11Update pluto.pid references to charon.pidJeff Leung
Since pluto doesn't exist anymore in strongSwan 5.0 and later series, we are updating references from pluto* to charon*.
2016-05-11Simpilfy the operational commandsJeff Leung
Instead of trying to parse the outout of ipsec or swanctl, just dump whatever swanctl outputs.
2016-05-11vyatta-op-vpn (0.15.0+vyos2+current2+nmu1) UNRELEASED; urgency=lowC.J. Collier
* Non-maintainer upload. * address lintian issues - script-not-executable: removed #!/usr/bin/perl from .pm files - debhelper-but-no-misc-depends: added ${misc:Depends} to Depends: field - debian-rules-missing-recommended-target: added build-arch build-indep - out-of-date-standards-version: updated standards version to 3.9.4 - package-contains-linda-override: removed linda override - file-in-unusual-dir: not triggering, removed from override - script-with-language-extension: renamed vyatta-gen-x509-keypair.sh vyatta-gen-x509-keypair * address dpkg-gencontrol issue: - unknown substitution variable ${shlibs:Depends} - removed * address dpkg-source issue: - debian/source/format set to "3.0 (native)" Signed-off-by: C.J. Collier <cjcollier@linuxfoundation.org>
2013-02-05Merge + support show vpn ipsec sa detail/statistics profileSaurabh Mohan
2013-01-29Support for reset vpn ipsec-profileSaurabh Mohan
2013-01-22Dmvpn merge with mirantis jan22-2013Saurabh Mohan
2012-09-19Bugfix 8376: Add vti as an option under 'reset vpn ipsec-peer'Saurabh Mohan
Add a new cli 'reset vpn ipsec-peer <peer-ip> vti'.
2011-10-27Bugfix 7568: Add ability to get to in-kernel information for ipsec ↵John Southworth
transformations (cherry picked from commit f1174364ed3380fb346ffe1d4e63b2e3684e59e7)
2011-10-27Move 'clear vpn' to 'reset vpn'John Southworth
(cherry picked from commit ece19376837fb087cfd12b9418aa710ee407a8df)
2011-05-05Add ability to generate an x509 key pair (certificate signing request, ↵John Southworth
private key)
2011-02-25Fix 'show vpn ike status'John Southworth
2011-02-04Allow debugging of specific peers and tunnelsJohn Southworth
2011-02-02Work on new IPsec operational mode script. Split into perl module; ↵John Southworth
Adjustments for showing per tunnel information; Fix parsing of ipsecstatus all when using GRE matching
2011-01-31Work on new IPsec operational mode script. Fix some syntax; make show based ↵John Southworth
on peer better; Add show ike secrets
2011-01-31Work on new IPsec operational mode script. Integrate with more CLI commandsJohn Southworth
2011-01-28Work on new IPsec operational mode script. Integrated with the vyatta-cliJohn Southworth
2011-01-21Bugfix 2837: Change vpn rsa-key generate to generate vpn rsa-key to be more ↵John Southworth
consistent with the rest of the system
2010-08-11remove CLI backend env variables usageAn-Cheng Huang
* use the new cli-shell-api instead.
2010-07-20part of fix for BZ 5839 - move clear process cmds under restartMohit Mehta
2010-05-26remove op-mode command to show vpn route in table 220Mohit Mehta
2010-04-19Fix Bug 5542Mohit Mehta
* allow clear and show commands for IPsec even if site-to-site is not configured since l2tp might be using it
2010-03-17Fix Bug 5464 "show vpn ipsec status" returns no interface and active tunnel ↵Mohit Mehta
number
2010-01-29add op-mode command to show routes added for VPN remote-subnetMohit Mehta
2010-01-12fix show vpn commands to work with strongswanMohit Mehta
(cherry picked from commit 32927e013922e1a79b0f214773e2500a1260871a)
2009-10-09* Fix Bug 4017 Add the ability to restart individual IPSec tunnelsMohit Mehta
added new operational mode commands - clear vpn ipsec-peer peer <peer> # clear all tunnels for given peer clear vpn ipsec-peer peer <peer> tunnel <tunnel> # clear specific tunnel If peer is 0.0.0.0/any/@id then tunnel is brought down and loaded again but connection is not initiated as remote end could be multiple end-points The remote ends will bring up the tunnel when they get/detect tunnel down * don't call script with sudo from templates. use sudo in script where needed * script clean up
2008-07-22Fix permission on call to ipsec.Stig Thormodsrud
2008-06-12Fix 3285: "show vpn debug" has bash errorStig Thormodsrud
2008-05-23Fix 3285: CLI command does not restart VPN: run clear vpn ipsec-processStig Thormodsrud
2008-04-08Fix Bug 3069 Help strings should be standardizedMohit Mehta
- help strings standardized in vyatta-op-vpn
2008-03-20Fix 3023 "show vpn debug" displays system errorsStig Thormodsrud
- don't call the debug script if vpn is not configured.
2008-03-17Fix 2838: Clearing VPN process starts VPN , even if not configured.Stig Thormodsrud
- fix sloppy script which dies with "Unknown op" on valid ops. - use vyatta config rather than ipsec.conf to determine if running
2008-02-24Call 'gen_local_rsa_key.pl' from '/opt/vyatta/bin/sudo-users/' rather than ↵Marat Nepomnyashy
'/opt/vyatta/sbin/'. Bug 2883 fix.
2008-02-22Fixed-up operator commands 'clear vpn ipsec-process' and 'show vpn debug ↵Marat Nepomnyashy
detail' so that they no longer require sudo password.
2008-02-21Moved execution of 'show vpn' commands to '/opt/vyatta/bin/sudo-users' so ↵Marat Nepomnyashy
that operator users can execute them. Bug 2865 fix.
2008-02-17Fix 2838 Clearing VPN process starts VPN, even if not configuredStig Thormodsrud
2008-01-21Added autocompletion for commans 'show vpn ipsec sa detail connection *'.debian/0.1Marat Nepomnyashy
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-15 02:07:03 +0000