vyos-1x.git/data/templates, branch 1.3.4VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=1.3.42023-10-08T16:16:04+00:00Merge pull request #2333 from sever-sever/T5213-eq2023-10-08T16:16:04+00:00Daniil Baturindaniil@vyos.io2023-10-08T16:16:04+00:00urn:sha1:e6118a08081faccaccea14fe1c30a633250ef901
T5213: Add accounting-interim-interval option for PPPoE-serverpppoe: T5630: allow to specify MRU in addition to already configurable MTU2023-10-08T07:45:00+00:00Christian Breunigchristian@breunig.cc2023-10-03T16:14:23+00:00urn:sha1:88c1fd3a35926d813967b3c969e01b41ea67771a
Set the MRU (Maximum Receive Unit) value to n. PPPd will ask the peer to send
packets of no more than n bytes. The value of n must be between 128 and 16384,
the default was always 1492 to match PPPoE MTU.
A value of 296 works well on very slow links (40 bytes for TCP/IP header + 256
bytes of data). Note that for the IPv6 protocol, the MRU must be at least 1280.
CLI:
set interfaces pppoe pppoe0 mru 1280
(cherry picked from commit e062a8c11856f213983f5b41f50d4f9dbc0dde0f)
T5213: Add accounting-interim-interval option for PPPoE-server2023-10-03T13:47:30+00:00Viacheslav Hletenkov.gletenko@vyos.io2023-10-03T13:47:30+00:00urn:sha1:32dc990e1eed669803279b2b36e1bcacafac959f
Add accounting-interim-interval option for PPPoE-server
set service pppoe-server authentication radius accounting-interim-interval '60'
T5545: fix sflow configuration2023-09-04T10:14:51+00:00Maxime.Lmaxime@nfrance.com2023-09-04T10:14:51+00:00urn:sha1:febaec6eed1618465c7f1073b37c7504240c4e81T5428: fix DHCP address renewal/release when running in VRF2023-08-28T19:21:14+00:00Christian Breunigchristian@breunig.cc2023-08-28T19:21:14+00:00urn:sha1:47d9c8067135b97bc1fbc5450dc5fa9b8e65e345Merge pull request #2181 from sever-sever/T738-eq2023-08-31T15:35:17+00:00Christian Breunigchristian@breunig.cc2023-08-31T15:35:17+00:00urn:sha1:0ba723bcdbf608ba73bedbba74a8aa9be1d7df7b
T738: add CLI option for PowerDNS local-portT738: add CLI option for PowerDNS local-port2023-08-29T07:05:30+00:00Viacheslav Hletenkov.gletenko@vyos.io2023-08-28T09:13:33+00:00urn:sha1:cceea89cdfbd4c4c42611fcf74350ab0b25d7c03
set service dns forwarding allow-from '192.0.2.0/24'
set service dns forwarding listen-address '192.0.2.11'
set service dns forwarding port '5353'
T3546: PPPoE-server add extended scripts for RADIUS attributes2023-08-25T10:09:30+00:00Viacheslav Hletenkov.gletenko@vyos.io2023-08-25T10:09:30+00:00urn:sha1:0bf8c55386f0c3d684089c8bdc93e762fe7f7122
Ability to get and parse RADIUS attributes via a shell script and
then execute commands
Ane of the usecases is to create a custom shaper with some smart
Extended scripts receive from PPPoE daemon the following variables:
$1 - Interface name
$4 - Tunnel GW IP address
$5 - Delegated IP address to the client
$6 - Calling Station ID (MAC)
if [ -f /run/accel-pppd/radattr.$1 ]; then
true
fi
sshguard: T5354: Add service ssh dynamic-protection2023-07-19T14:39:45+00:00Viacheslav Hletenkov.gletenko@vyos.io2023-07-19T14:39:45+00:00urn:sha1:cd6f7994a9c5d6501ce56b57362c7f33f64fa3d5
Sshguard protects hosts from brute-force attacks
It can inspect logs and block "bad" addresses by threshold
Auto-generates own tables and rules for nftables, so they are not
intercept with VyOS firewall rules.
When service stops, all generated tables are deleted.
set service ssh dynamic-protection
set service ssh dynamic-protection allow-from '192.0.2.1'
set service ssh dynamic-protection block-time '120'
set service ssh dynamic-protection detect-time '1800'
set service ssh dynamic-protection threshold '30'
vrrp: T5315: add support to explicitly specify version2023-06-26T19:32:49+00:00Christian Breunigchristian@breunig.cc2023-06-26T19:28:10+00:00urn:sha1:463a2078669b5499e82c7d2c06807f16d6c2a99d
set high-availability vrrp group <name> version 2|3
(cherry picked from commit 6ca308182a7891e600a2e8749f7b12b566005576)