summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-06-28ipsec: T1441: switch from vti to xfrm interfacesChristian Poessinger
XFRM interfaces are similar to VTI devices in their basic functionality but offer several advantages: * No tunnel endpoint addresses have to be configured on the interfaces. Compared to VTIs, which are layer 3 tunnel devices with mandatory endpoints, this resolves issues with wildcard addresses (only one VTI with wildcard endpoints is supported), avoids a 1:1 mapping between SAs and interfaces, and easily allows SAs with multiple peers to share the same interface. * Because there are no endpoint addresses, IPv4 and IPv6 SAs are supported on the same interface (VTI devices only support one address family). * IPsec modes other than tunnel are supported (VTI devices only support tunnel mode). * No awkward configuration via GRE keys and XFRM marks. Instead, a new identifier (XFRM interface ID) links policies and SAs with XFRM interfaces.
2021-06-28bgp: T3657: fix remote-as validator for IPv6 link-local peeringChristian Poessinger
The "v6only" CLI tree was not taken into account during validation. vyos@vyos:~$ show configuration commands | grep bgp set protocols bgp local-as '200' set protocols bgp neighbor eth0.204 address-family ipv6-unicast set protocols bgp neighbor eth0.204 interface v6only remote-as '100' vyos@vyos:~$ show bgp ipv6 sum IPv6 Unicast Summary: BGP router identifier 172.18.254.201, local AS number 200 vrf-id 0 BGP table version 0 RIB entries 0, using 0 bytes of memory Peers 1, using 21 KiB of memory Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd PfxSnt eth0.204 4 100 99 99 0 0 0 01:35:07 0 0 Total number of neighbors 1
2021-06-27op-mode: bond: T2546: implement "show interface bond * slaves" commandChristian Poessinger
Add implementation with XML and Python.
2021-06-26Debian: disable systemd salt-minion configuration - all handled in vyos-buildChristian Poessinger
2021-06-26Debian: ensure path for vyos-postconfig-bootup.script existsChristian Poessinger
2021-06-26Debian: drop ipsec key removal from postinst script - done on every system bootChristian Poessinger
2021-06-26Import vyos-postconfig-bootup.script from vyatta-cfg-systemChristian Poessinger
2021-06-26Import configuration files from vyatta-cfg-systemChristian Poessinger
2021-06-26Debian: no need to disable salt-minion in postinst scriptChristian Poessinger
This is already done in systemd service disable hook from vyos-build.
2021-06-26Import sudoers configuration from vyatta-cfg-systemChristian Poessinger
2021-06-26banner: T2135: adjust to raw strings from vyatta-cfg repoChristian Poessinger
2021-06-26nat: T1083: fix Jinja2 templating errorChristian Poessinger
Commit 166d44b3 ("nat: T1083: add translation options for persistent/random mapping of address and port") added support for persistent IP address and port mappings for NAT. Unfortunately one if clause got lost in translation.
2021-06-26nat: T1083: add translation options for persistent/random mapping of address ↵Igor Melnyk
and port Tested using: set destination rule 100 inbound-interface 'eth0' set destination rule 100 translation address '19.13.23.42' set destination rule 100 translation options address-mapping 'random' set destination rule 100 translation options port-mapping 'none' set source rule 1000 outbound-interface 'eth0' set source rule 1000 translation address '122.233.231.12' set source rule 1000 translation options address-mapping 'persistent' set source rule 1000 translation options port-mapping 'fully-random'
2021-06-26openvpn: T3641: adjust deprecated "openvpn --genkey" commandChristian Poessinger
WARNING: Using --genkey --secret filename is DEPRECATED. Use --genkey secret filename instead.
2021-06-26ipsec: T3643: us vyos.util.copy_file() over raw UNIX cp commandChristian Poessinger
2021-06-26vyos.util: add new helper copy_file()Christian Poessinger
Copy a file from A -> B but also support adjusting Bs file permissions and creation of Bs base directory if required.
2021-06-26ipsec: T3643: use variable for path namesChristian Poessinger
2021-06-26Revert "ipsec: T3643: move swanctl.conf to /run"Christian Poessinger
This reverts commit 95bbbb8bed92a60a320ff255c8b8656145f3c540.
2021-06-25Merge pull request #899 from jack9603301/T3648Christian Poessinger
nat: nat66: T3648: Fix script logic errors and missing logic handling
2021-06-26nat: nat66: T3648: Fix script logic errors and missing logic handlingjack9603301
2021-06-25smoketest: ospf: sometimes the passive-interface-test fails - add debug codeChristian Poessinger
2021-06-25openvpn: T1704: drop deprecated disable-ncp optionChristian Poessinger
2021-06-25smoketest: bonding: T3649: fix typo in testcase nameChristian Poessinger
2021-06-25Merge pull request #898 from DmitriyEshenko/1x25062021Christian Poessinger
T3649: bonding: Add additional hash policies
2021-06-25T3649: bonding: Add additional hash policiesDmitriyEshenko
2021-06-24openvpn: T1512: T3641: drop deprecated "compat-names" optionChristian Poessinger
2021-06-24openvpn: T3641: remove deprecated iproute optionChristian Poessinger
Executing iproute2 commands as unprivileged member of the openvpn group is now handled via a sudoers file.
2021-06-24ipsec: T3643: move swanctl.conf to /runChristian Poessinger
This is the completion of commit 50a742b5 ("IPSec: T3643: Fix path for swanctl.conf file") that moves the generated swanctl file from non-volatile to a volatile (tmpfs backed) storage like we do for all out configuration files. Thus it is ensured after a reboot or service deprecation there are no accidential leftovers from previous configurations stored on the system.
2021-06-24systemd: lcdproc: T3641: override upstream filesChristian Poessinger
Debian Bullseye ships an upstream version of lcdproc.service which infact will start LCDd instead of the lcdproc client. Divert the Debian Upstream service file and use the ones provided by vyos-1x.
2021-06-24systemd: radvd: T3641: empty ConditionPathExists variableChristian Poessinger
The variable ConditionPathExists is now set in the upstream systemd unit file, thus the VyOS generated unit file is located under /run/radvd/radvd.conf and the condition won't match. This can be solved by first clearing the upstream value for ConditionPathExists and the set the new path.
2021-06-24Revert "T3641: lcdproc.service is now shipped in lcdproc package"Christian Poessinger
This reverts commit a4bb1b77ff415700e00df3768915fdc176f779d1.
2021-06-24Merge pull request #897 from sever-sever/T3643Christian Poessinger
IPSec: T3643: Fix path for swanctl.conf file
2021-06-23Merge pull request #869 from jestabro/T3574John Estabrook
T3574: add constraintGroup to schema and build-command-templates
2021-06-23T3574: process constraintGroup elementsJohn Estabrook
2021-06-23T3574: do not add constraintGroup property to xml cacheJohn Estabrook
2021-06-23T3574: add constraintGroup to schemaJohn Estabrook
2021-06-23IPSec: T3643: Fix path for swanctl.conf fileViacheslav
2021-06-22vyos.ethtool: T3645: fix compatibility with latest ethtool versionChristian Poessinger
Ethtool version used on Debian Bullseye changed the output format from 0 -> n/a. As we are only interested in the tx/rx keys we do not care about RX Mini/Jumbo.
2021-06-22T3644: build: replace GCC preprocessor with a Python script for template ↵Lulu Cathrinus Grimalkin
expansions
2021-06-22Debian: T3641: add dependency on squashfs-toolsChristian Poessinger
2021-06-22snmp: T3606: Install MIBs into well known locationChristian Poessinger
FRR also expects the MIBs in /usr/share/snmp/mibs
2021-06-22Merge pull request #895 from sever-sever/T3636Christian Poessinger
sstp-l2tp: T3636: Add ipv6 options
2021-06-22sstp-l2tp: T3636: Add ipv6 optionsViacheslav
2021-06-22Merge pull request #894 from sarthurdev/T3643Christian Poessinger
ipsec: T3643: T2816: Update IPSec VPN op-mode commands
2021-06-22ipsec: T3643: T2816: Update IPSec VPN op-mode commandssarthurdev
2021-06-21smoketest: ensure /config is a directoryChristian Poessinger
2021-06-21vyos.certbot: T3641: adjust to new python3-certbot-nginx APIChristian Poessinger
2021-06-21ipsec: T3641: Debian Bullseye uses python3-pycryptodomeChristian Poessinger
2021-06-21Revert "vmware: add tools.conf"Christian Poessinger
This reverts commit b776edb38a4755be76e965ca719e9428bcc570e6.
2021-06-21Python: T3641: adjust to changes in latest vesion of netifaces libraryChristian Poessinger
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-14 09:23:40 +0000