vyos-1x.git/interface-definitions/service-ipoe-server.xml.in, branch feature/T9082-codeql-cppVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=feature%2FT9082-codeql-cpp2023-12-31T22:49:48+00:00T5474: establish common file name pattern for XML conf mode commands2023-12-31T22:49:48+00:00Christian Breunigchristian@breunig.cc2023-12-30T22:25:20+00:00urn:sha1:4ef110fd2c501b718344c72d495ad7e16d2bd465
We will use _ as CLI level divider. The XML definition filename and also
the Python helper should match the CLI node.
Example:
set interfaces ethernet -> interfaces_ethernet.xml.in
set interfaces bond -> interfaces_bond.xml.in
set service dhcp-server -> service_dhcp-server-xml.in
accel-ppp: T5688: Standardized pool configuration in accel-ppp2023-12-04T16:11:49+00:00aapostoliuka.apostoliuk@vyos.io2023-11-13T09:17:23+00:00urn:sha1:422eb463d413da812eabc28706e507a9910d7b53
Standardized pool configuration for all accel-ppp services.
1. Only named pools are used now.
2. Allows all services to use range in x.x.x.x/mask
and x.x.x.x-x.x.x.y format
3. next-pool can be used in all services
2. Allows to use in ipoe gw-ip-address without pool configuration
which allows to use Fraimed-IP-Address attribute by radius.
3. Default pool name should be explicidly configured
with default-pool.
4. In ipoe netmask and range subnet can be different.
T5704: PPPoE L2TP SSTP IPoE add option max-concurrent-sessions2023-11-02T13:58:48+00:00Viacheslav Hletenkov.gletenko@vyos.io2023-11-02T13:58:48+00:00urn:sha1:47645f9d0243ce48a473ab7f8cdbd22c19f69f28
Add `max-starting` option:
[common]
max-starting=N
Specifies maximum concurrent session attempts which server may processed
set service pppoe-server max-concurrent-sessions '30'
Useful to prevent high CPU utilization and compat execution
scripts per time.
xml: T4952: improve interface completion helper CLI experience2023-03-09T18:40:00+00:00Christian Breunigchristian@breunig.cc2023-03-09T18:39:20+00:00urn:sha1:fe4da6288649b32779d30d5672e39cae40e72100T5005: PPPoE server allow any login with option noauth2023-02-17T10:35:49+00:00Viacheslav Hletenkov.gletenko@vyos.io2023-02-17T10:35:49+00:00urn:sha1:27928236fcd67a0d710e163d7a3cb381a7f700c1
Disabling authentication is useful in emergency situations
(e.g. RADIUS server is down) or testing purposes.
Clients can connect with any login and username.
set service pppoe-server authentication mode 'noauth'
T4971: PPPoE server add named ip pool and attr Framed-Pool2023-02-07T08:50:31+00:00Viacheslav Hletenkov.gletenko@vyos.io2023-02-07T08:45:38+00:00urn:sha1:53d82ea2b1427ac4668cc1b38544219eae960b86
Add a new feature to allow to use named pools
Also it can be used with RADIUS attribute 'Framed-Pool'
set service pppoe-server client-ip-pool name POOL1 gateway-address '192.0.2.1'
set service pppoe-server client-ip-pool name POOL1 subnet '192.0.2.0/24'
T4958: ocserv: openconnect: adds support for configuring RADIUS accounting2023-01-28T04:11:07+00:00Jamie Austinjamiea@opusv.com.au2023-01-27T06:32:29+00:00urn:sha1:e61f7abdb2136d8dfbf73729dbc14c3b5ab2ecba
Adds CLI configuration options to configure RADIUS accounting for OpenConnect VPN sessions. This functionality cannot be used outside of the RADIUS OpenConnect VPN authentication mode
ipoe: T4678: T4703: rewrite to get_config_dict()2022-09-21T14:34:25+00:00Christian Poessingerchristian@poessinger.com2022-09-17T20:28:34+00:00urn:sha1:05df2a5f021f0c7aab7c06db645d210858b6e98d
In addition to the rewrite to make use of get_config_dict() the CLI is
slightly adjusted as specified in T4703.
* Rename vlan-id and vlan-range to simply vlan
* Rename network-mode to simply mode
* Re-use existing common Jinja2 template for Accel-PPP which are shared
with PPPoE and SSTP server.
* Retrieve default values via defaultValue XML node
ipoe: T4507: Add option rate-limit for RADIUS authentication2022-07-02T13:14:22+00:00Viacheslav Hletenkov.gletenko@vyos.io2022-07-02T13:14:22+00:00urn:sha1:173f02d0936ab48e15a16ee57557b759d96b5a27
Add rate-limit options: attribute, muptiplier and vendor
set service ipoe-server auth radius rate-limit attribute 'Mikrotik-Rate-Limit'
set service ipoe-server auth radius rate-limit enable
set service ipoe-server auth radius rate-limit multiplier '0.001'
set service ipoe-server auth radius rate-limit vendor 'Miktorik'
xml: streamline interface definition filenames, drop _2022-06-29T17:18:21+00:00Christian Poessingerchristian@poessinger.com2022-06-29T17:16:53+00:00urn:sha1:6b64f2eeb192ee1133d3f90be2ae2854a0c00ddc
Some files that described the CLI used underscores to split CLI levels, some
others did not. This commit removes all underscores from the filename and only
makes use of a hyphen.