VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) https://git.amelek.net/vyos/vyos-1x.git/atom?h=circinus-public-unmaintained 2024-07-31T12:27:38+00:00 2024-07-31T12:27:38+00:00 aapostoliuk 108394744+aapostoliuk@users.noreply.github.com 2024-07-31T12:26:25+00:00 urn:sha1:d213e3f09ad38d3db26e7293ae1e6bc83790016e Removed unused pprint module (cherry picked from commit cb1834742f4ed01d99d6396af8339dd59788ef65) 2024-07-30T12:21:51+00:00 aapostoliuk 108394744+aapostoliuk@users.noreply.github.com 2024-07-28T12:54:08+00:00 urn:sha1:9be079ac855b20622240c0e577c7f5db9d075798 Strongswan does not initiate session after termination via vici. Added an CHILD SAs initialization on the initiator side of the tunnel. (cherry picked from commit 8838b29180ccc26d2aca0c22c9c8ca5e274825b2) 2023-09-05T17:17:50+00:00 Viacheslav Hletenko v.gletenko@vyos.io 2023-09-05T17:17:50+00:00 urn:sha1:97326920e2907bdb545853887dc54c6a02b76f28 We don't use ipsec.secrets anymore Fix op-mode for "show vpn ike secrets". Ability to get "RAW" format 2023-07-15T18:13:12+00:00 Christian Breunig christian@breunig.cc 2023-07-15T18:12:56+00:00 urn:sha1:5f77ccf91eb402c548fc91b2e080a4b2b86f4181 2023-07-14T20:18:36+00:00 Christian Breunig christian@breunig.cc 2023-07-14T20:18:36+00:00 urn:sha1:d1ca536da448749dff557f13ecae97b124026e96 * T5195: move run, cmd, call, rc_cmd helper to vyos.utils.process * T5195: use read_file and write_file implementation from vyos.utils.file Changed code automatically using: find . -type f -not -path '*/\.*' -exec sed -i 's/^from vyos.util import read_file$/from vyos.utils.file import read_file/g' {} + find . -type f -not -path '*/\.*' -exec sed -i 's/^from vyos.util import write_file$/from vyos.utils.file import write_file/g' {} + * T5195: move chmod* helpers to vyos.utils.permission * T5195: use colon_separated_to_dict from vyos.utils.dict * T5195: move is_systemd_service_* to vyos.utils.process * T5195: fix boot issues with missing imports * T5195: move dict_search_* helpers to vyos.utils.dict * T5195: move network helpers to vyos.utils.network * T5195: move commit_* helpers to vyos.utils.commit * T5195: move user I/O helpers to vyos.utils.io 2023-05-28T13:59:49+00:00 Christian Breunig christian@breunig.cc 2023-05-28T13:59:49+00:00 urn:sha1:1c83615492b626f4d897a6a0fda9324353aae416 Connection ID Username Protocol State Uptime Tunnel IP --------------- ---------- ---------- ------- -------- ----------------- 27 cpo IKEv2 UP 11s ['172.16.222.17'] "Tunnel IP" should be a string over list. 2023-04-14T10:20:31+00:00 aapostoliuk a.apostoliuk@vyos.io 2023-04-14T09:54:35+00:00 urn:sha1:b251a183b30a5915fb8e2a8f7a194d75e65ccb34 Now 'show vpn ipsec remote-access' shows only IKEv2 Remote access VPN IPSec connections. Added option 'summary' that shows a summary table for these connections. Added option 'detail' that shows only RA SAs output of 'swanctl -l' Added options 'username' and 'connection-id' that filters output. Fixed output 'show vpn ipsec sa detail', the previous was 'show vpn ipsec sa verbose'. 2023-03-30T15:28:56+00:00 aapostoliuk a.apostoliuk@vyos.io 2023-03-30T15:28:56+00:00 urn:sha1:a78982625a8a18069bd5a13744734873698fd0f9 Fixed 'reset vpn ipsec profile' command using vici library and new op-mode style. Added ability to use 'reset vpn ipsec profile' command with 'remote-host' option. 2023-03-16T13:45:14+00:00 aapostoliuk a.apostoliuk@vyos.io 2023-03-16T10:33:18+00:00 urn:sha1:ecdc9b1f0bf47b762669d8600aaddc5cfa5ed206 1. Rewritten CLI of 'reset vpn' commands. 2. Created 'reset vpn ipsec remote-access' commands to reset RA IKEv2 session. 3. Created 'reset vpn ipsec site-to-site all' command to reset all configured IPSec site-to-site peers sessions. 4. Rewritten 'reset vpn l2t|pptp|sstp' commands to new opmode style. 2023-02-24T12:01:02+00:00 aapostoliuk a.apostoliuk@vyos.io 2023-02-24T11:43:36+00:00 urn:sha1:f4ecfaf1cd1ad7b7ea9692df5162c998add1e0c1 1. Changed reset IPSEC, IKE SAs to use vici library. 2. Created package vyos.ipsec to communicate with vici library.