vyos-1x.git/op-mode-definitions/vpn-ipsec.xml.in, branch feature/T9082-codeql-cppVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=feature%2FT9082-codeql-cpp2025-07-29T23:52:45+00:00op-mode: T7527: eliminate bare shell snippets in op mode commands2025-07-29T23:52:45+00:00Daniil Baturindaniil@baturin.org2025-07-29T13:57:57+00:00urn:sha1:01d76637d8513507ec69962c6b95da32b3736133op-mode: T7527: move assorted embedded shel snippets to script files2025-06-10T13:57:14+00:00Daniil Baturindaniil@baturin.org2025-06-09T18:34:00+00:00urn:sha1:1d3242006cca9d78009667f06ad4d73b1bb2ef54op-mode: T7459: eliminate direct use of sudo in op mode commands2025-05-16T11:39:44+00:00Daniil Baturindaniil@baturin.org2025-05-16T11:39:44+00:00urn:sha1:6b562aae240927c14f629b9307583013bc3a9008op-mode: T6577: create generic service restart helper to work with the API2024-07-16T19:29:39+00:00Christian Breunigchristian@breunig.cc2024-07-16T19:28:55+00:00urn:sha1:c74ae852152b0c3c3f00a1847d081d28f500e178
Right now we have multiple restart helpers (e.g. dhcp server, ssh, ntp) that
all do the same (more or less):
* Check if service is configured on CLI
* Restart if configured
* Error out if unconfigured
This is not available via the op-mode API. Create a new restart.py op-mode
helper that takes the service name and possible VRF as argument so it's also
exposed via API.
T5423: Fix for op-mode show vpn ike secrets2023-09-05T17:17:50+00:00Viacheslav Hletenkov.gletenko@vyos.io2023-09-05T17:17:50+00:00urn:sha1:97326920e2907bdb545853887dc54c6a02b76f28
We don't use ipsec.secrets anymore
Fix op-mode for "show vpn ike secrets".
Ability to get "RAW" format
opmode: T5191: replace underscores with hyphens in generated options2023-05-04T00:45:53+00:00Daniil Baturindaniil@baturin.org2023-04-28T16:57:29+00:00urn:sha1:6d4caef050a1aefbddbdae3ad3d3928e464426f1ipsec: T5042: Rewritten 'show vpn ipsec remote-access' command2023-04-14T10:20:31+00:00aapostoliuka.apostoliuk@vyos.io2023-04-14T09:54:35+00:00urn:sha1:b251a183b30a5915fb8e2a8f7a194d75e65ccb34
Now 'show vpn ipsec remote-access' shows only IKEv2 Remote access
VPN IPSec connections.
Added option 'summary' that shows a summary table for
these connections.
Added option 'detail' that shows only RA SAs output of 'swanctl -l'
Added options 'username' and 'connection-id' that filters output.
Fixed output 'show vpn ipsec sa detail', the previous was
'show vpn ipsec sa verbose'.
ipsec: T5093: Fixed 'reset vpn ipsec profile' command2023-03-30T15:28:56+00:00aapostoliuka.apostoliuk@vyos.io2023-03-30T15:28:56+00:00urn:sha1:a78982625a8a18069bd5a13744734873698fd0f9
Fixed 'reset vpn ipsec profile' command
using vici library and new op-mode style.
Added ability to use 'reset vpn ipsec profile' command
with 'remote-host' option.
ipsec: T5043: Rewritten and fixed 'reset vpn' commands2023-03-16T13:45:14+00:00aapostoliuka.apostoliuk@vyos.io2023-03-16T10:33:18+00:00urn:sha1:ecdc9b1f0bf47b762669d8600aaddc5cfa5ed206
1. Rewritten CLI of 'reset vpn' commands.
2. Created 'reset vpn ipsec remote-access' commands to reset
RA IKEv2 session.
3. Created 'reset vpn ipsec site-to-site all' command to reset all
configured IPSec site-to-site peers sessions.
4. Rewritten 'reset vpn l2t|pptp|sstp' commands to
new opmode style.
ipsec: T4985: Changed 'reset vpn ipsec-peer' to use vici library2023-02-24T12:01:02+00:00aapostoliuka.apostoliuk@vyos.io2023-02-24T11:43:36+00:00urn:sha1:f4ecfaf1cd1ad7b7ea9692df5162c998add1e0c1
1. Changed reset IPSEC, IKE SAs to use vici library.
2. Created package vyos.ipsec to communicate with vici library.