summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-05-02radius: T3510: authenticated users must use /sbin/radius_shell as shellChristian Poessinger
2021-05-02login: T1948: use long options when calling adduserChristian Poessinger
... just to make it easier for users to read the commandline.
2021-05-02Improve the OSPF CLI help strings.Daniil Baturin
(Capitalization fixes, more consice wording etc.)
2021-04-30bgp: T3504: add support for per-peer graceful shutdownChristian Poessinger
This commit has a dependecy on https://github.com/FRRouting/frr/issues/8403, thus support will be "commented out" by default.
2021-04-30Merge pull request #827 from sever-sever/T3461Christian Poessinger
openconnect: T3461: Delete CA crt file checks
2021-04-30Merge pull request #826 from sever-sever/T3138Christian Poessinger
ddclient: T3138: Fix typo for key
2021-04-30Merge pull request #825 from sever-sever/T3250Christian Poessinger
pppoe: T3250: Not mangle values for tag nodes
2021-04-30openconnect: T3461: Delete CA crt file checkssever-sever
2021-04-30ddclient: T3138: Fix typo for keysever-sever
2021-04-29bgp: xml: T2387: restructure include files and make them easier to recognizeChristian Poessinger
2021-04-29pppoe: T3250: Not mangle values for tag nodessever-sever
2021-04-27op-mode: ospfv3: T3335: re-use common vtysh_wrapper.sh wrapperChristian Poessinger
Instead of renaming the OSPFv3 commands for every individual XML invocation, also re-use the common helper shell script. One source, one truth!
2021-04-27Merge pull request #821 from bstepler/T3502Christian Poessinger
ecmp: T3502: fix check for "layer4-hashing" key
2021-04-27Merge pull request #822 from bstepler/T3503Christian Poessinger
bgp: T3503: allow "route-reflector-client" when "remote-as" is "internal"
2021-04-27ecmp: T3502: fix check for "layer4-hashing" keyBrandon Stepler
2021-04-27bgp: T3503: allow "route-reflector-client" when "remote-as" is "internal"Brandon Stepler
2021-04-27op-mode: T2946: only call 'stty size' if in terminalJohn Estabrook
2021-04-27Merge pull request #820 from sever-sever/T3473Christian Poessinger
ipsec: T3473: Decode byte csa-name for op-mode
2021-04-27Merge pull request #818 from sever-sever/T2216-portsChristian Poessinger
container: T2216: Add binding for ports and volumes
2021-04-27ipsec: T3473: Decode byte csa-name for op-modesever-sever
2021-04-27container: T2216: Add binding for ports and volumessever-sever
2021-04-26Merge pull request #819 from DmitriyEshenko/1x-fix-dhcpv6-26042021Christian Poessinger
dhcpv6-server: T3494: Get address from network to correct sorting
2021-04-26dhcpv6-server: T3494: Get address from network to correct sortingDmitriyEshenko
2021-04-25lldp: T1898: add completion helper to list assigned IPs for management-addressChristian Poessinger
2021-04-25policy: T3490: lower priority to keep up with Policy-Based-Routing (PBR)Christian Poessinger
PBR is implemented in vyatta-cfg-firewall and the new policy framework uses one script to rule them all that is triggered from the main policy level. As the PBR configuration is a subnode with a lower priority we get an inversion, thus all policy based configuration which applies to FRR only, is set to priority 200. Automated tests did not show any regression.
2021-04-25policy: T3497: add verify() that prefix-lists must carry a defined prefixChristian Poessinger
2021-04-25frr: T2638: fix error message grammar error and add debug howtoChristian Poessinger
2021-04-25tunnel: T3468: add interfaces to completion helper for bridgeChristian Poessinger
2021-04-25wireguard: T1802: add client name to configurationChristian Poessinger
2021-04-24wireguard: T1802: generate QR code for clients on CLIChristian Poessinger
generate wireguard mobile-config wg0 server wg.vyos.net address 1.2.2.2/24 WireGuard client configuration for interface: wg0 [Interface] PrivateKey = AEXrZ4b3xFVLg1lql3hy/93+d43q3+3vPdSMUGI6/Fo= Address = 1.2.2.2/24 [Peer] PublicKey = h1HkYlSuHdJN6Qv4Hz4bBzjGg5WUty+U1L7DJsZy1iE= Endpoint = wg.vyos.net:41751 AllowedIPs = 0.0.0.0/0, ::/0 The servers public key and port are automatically extracter from the running config.
2021-04-24policy: T2425: verify() must check if a policy is still usedChristian Poessinger
When deleting a route-map, prefix-list or access-list, we must ensure that this routing policy is not referenced by any other protocol or policy. When trying to remove a policy still in use, raise an error.
2021-04-23Merge pull request #817 from erkin/currentChristian Poessinger
T3356: Add support for custom source address for connections
2021-04-23T3356: Add support for custom source address for connectionserkin
2021-04-21Merge pull request #816 from sever-sever/T2216-op-modeChristian Poessinger
container: T2216: Rewrite op-mode to python
2021-04-21container: T2216: Rewrite op-mode to pythonsever-sever
2021-04-21containers: T2216: the first IP address is always reserved for podmanChristian Poessinger
2021-04-21containers: T2216: used "address" must belong to the used container networkChristian Poessinger
2021-04-21containers: T2216: refine implementationChristian Poessinger
This commit is a cleanup and refinement of the container hosting implementation. - Renamed CLI node ipv4-prefix -> prefix so both IPv4 and IPv6 prefix can be supplied in the future. This is currently limited to IPv4 only as when using IPv6 networks in combination with IPv4 the IPv4 prefix is altered randomly - De-nested if clauses - Use "for foo, bar in baz.items()" to more easily iterate of dictionary values, this means "bar" can be used to access "baz[foo]"
2021-04-21bridge: T2653: remove superfluous "import re"Christian Poessinger
2021-04-21containers: T2216: add op-mode "show container network" commandChristian Poessinger
2021-04-20Merge pull request #815 from zdc/T3471-sagittaChristian Poessinger
dhclient: T3471: Fixed process search for IPv4
2021-04-20xml: T3488: when using regex one must use ^ and $ when checking string literalsChristian Poessinger
2021-04-20interfaces: T3488: harden regex for supplied address stringChristian Poessinger
The previously used regex allowed an address value of "dhcpfoo" which is invalid and will raise an OSError. Harden the regex that it explicitly must be dhcp or dhcpv6.
2021-04-20dhclient: T3471: Fixed process search for IPv4zsdc
Some software starts dhclient without IP protocol flag (`-4`, `-6`), this commit adds the ability to find such processes as well as with a protocol flag. Additionally, to handle rare situations when PID file may not exists (most likely, when multiple dhclient processes started with the same PID file path), added last-resort action to kill such dhclients.
2021-04-20Revert "T2175: properly exist FRR "router" context when rendering templates"Christian Poessinger
This reverts commit 619c518bfc904b060b5b59180940a804fe1beafd.
2021-04-19mroute: T2364: fix Jinja2 template indentationsChristian Poessinger
2021-04-19T2175: properly exist FRR "router" context when rendering templatesChristian Poessinger
When rendering a dynamic routing protocol ensure the context, e.g. "router bgp" or "router ospf" is proberly exited before applying any zebra route-map.
2021-04-19policy: T2425: verify() route-map match criteriasChristian Poessinger
When we match on a community-list, extended community-list or even a large community-list ensure that the referenced list exists on the CLI.
2021-04-18policy: template: T2425: convert DOS to UNIX line endingsChristian Poessinger
2021-04-18policy: T2425: add missing route-map options when rendering templateChristian Poessinger
The following options one can specify in a route-map not got rendered as they have been missed out: * set comm-list * set community * set extcommunity (both route-target and site-of-origin) * set table