vyos-1x.git/interface-definitions/vpn-l2tp.xml.in, branch feature/T9082-codeql-cpp

T5474: establish common file name pattern for XML conf mode commands

2023-12-31T22:49:48+00:00

We will use _ as CLI level divider. The XML definition filename and also the Python helper should match the CLI node. Example: set interfaces ethernet -> interfaces_ethernet.xml.in set interfaces bond -> interfaces_bond.xml.in set service dhcp-server -> service_dhcp-server-xml.in

T5801: Rewritten L2TP to get_config_dict

2023-12-20T15:40:29+00:00

Rewritten L2TP to get_config_dict Rewritten L2TP xml to accel-ppp patterns Migrated 'idle' to 'ppp-options.lcp-echo-timeout' Migrated 'authentication.mppe' to 'ppp-options.mppe' Migrated 'authentication.radius.dae-server' to 'authentication.radius.dynamic-author' Migrated 'authentication.require' to 'authentication.protocol' Added 'authentication.radius.acct-interim-jitter' Added 'authentication.radius.preallocate-vif' Added 'authentication.radius.server..acct-port' Added 'ppp-options.ipv4' Added smoke-tests Fixed 'preallocate-vif' in SSTP

accel-ppp: T5688: Standardized pool configuration in accel-ppp

2023-12-04T16:11:49+00:00

Standardized pool configuration for all accel-ppp services. 1. Only named pools are used now. 2. Allows all services to use range in x.x.x.x/mask and x.x.x.x-x.x.x.y format 3. next-pool can be used in all services 2. Allows to use in ipoe gw-ip-address without pool configuration which allows to use Fraimed-IP-Address attribute by radius. 3. Default pool name should be explicidly configured with default-pool. 4. In ipoe netmask and range subnet can be different.

T5704: PPPoE L2TP SSTP IPoE add option max-concurrent-sessions

2023-11-02T13:58:48+00:00

Add `max-starting` option: [common] max-starting=N Specifies maximum concurrent session attempts which server may processed set service pppoe-server max-concurrent-sessions '30' Useful to prevent high CPU utilization and compat execution scripts per time.

T5226: Make host-name constraints to consistent everywhere

2023-05-17T04:18:25+00:00

Make host-name constraints consistent across all definitions

T5213: Add accounting-interim-interval option for L2TP-server

2023-05-10T09:19:11+00:00

Add RADIUS accounting-interim-interval option for L2TP-server Specifies interval in seconds to send accounting information (may be overridden by radius Acct-Interim-Interval attribute) set vpn l2tp remote-access authentication radius accounting-interim-interval '120'

xml: re-use generic-description.xml.i building block whenever possible

2023-04-02T07:53:39+00:00

Remove redundant XML CLI node definitions for the common description node by referencing the common building block.

T4958: ocserv: openconnect: adds support for configuring RADIUS accounting

2023-01-28T04:11:07+00:00

Adds CLI configuration options to configure RADIUS accounting for OpenConnect VPN sessions. This functionality cannot be used outside of the RADIUS OpenConnect VPN authentication mode

T4893: Add ppp-options ipv6-interface-id for L2TP

2022-12-30T18:53:00+00:00

Add ppp-options IPv6 interface id for vpn L2TP - fixed or random interface identifier for IPv6 - peer interface identifier for IPv6 - whether to accept peer’s interface identifier set vpn l2tp remote-access ppp-options ipv6-accept-peer-intf-id set vpn l2tp remote-access ppp-options ipv6-intf-id 'random' set vpn l2tp remote-access ppp-options ipv6-peer-intf-id 'calling-sid'

T4117: Fix for L2TP DAE CoA server configuration

2022-12-08T13:04:56+00:00

Fix l2tp dae server template and python config dict for correctlly handling Dynamic Authorization Extension server configuration