vyos-1x.git/interface-definitions/include/dhcp-interface-multi.xml.i, branch rollingVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=rolling2025-10-14T12:05:07+00:00T5942: Make failover support dhcp-interface2025-10-14T12:05:07+00:00Kyrylo Yatsenkohedrok@gmail.com2025-09-26T19:59:43+00:00urn:sha1:47d5f21b7770b0b8dcd29272e6c93bea9028adfe
* Refactor XML a little: move common dhcp-interface properties to
separate include file
* Add failover support for dhcp-interface
* Add test for DHCP in failover protocol
xml: include building block file name should end with .i and not .in2023-04-01T11:14:30+00:00Christian Breunigchristian@breunig.cc2023-04-01T11:14:30+00:00urn:sha1:2265bb4dc27965da3dce7e3f476366b7d1e911f3xml: T4952: improve interface completion helper CLI experience2023-03-09T18:40:00+00:00Christian Breunigchristian@breunig.cc2023-03-09T18:39:20+00:00urn:sha1:fe4da6288649b32779d30d5672e39cae40e72100T4916: Rewrite IPsec peer authentication and psk migration2023-01-26T11:28:03+00:00Viacheslav Hletenkov.gletenko@vyos.io2023-01-17T11:04:08+00:00urn:sha1:7ae0b404ad9fdefa856c7e450b224b47d854a4eb
Rewrite strongswan IPsec authentication to reflect structure
from swanctl.conf
The most important change is that more than one local/remote ID in the
same auth entry should be allowed
replace: 'ipsec site-to-site peer <tag> authentication pre-shared-secret xxx'
=> 'ipsec authentication psk <tag> secret xxx'
set vpn ipsec authentication psk <tag> id '192.0.2.1'
set vpn ipsec authentication psk <tag> id '192.0.2.2'
set vpn ipsec authentication psk <tag> secret 'xxx'
set vpn ipsec site-to-site peer <tag> authentication local-id '192.0.2.1'
set vpn ipsec site-to-site peer <tag> authentication mode 'pre-shared-secret'
set vpn ipsec site-to-site peer <tag> authentication remote-id '192.0.2.2'
Add template filter for Jinja2 'generate_uuid4'