summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2022-06-29xml: streamline interface definition filenames, drop _Christian Poessinger
Some files that described the CLI used underscores to split CLI levels, some others did not. This commit removes all underscores from the filename and only makes use of a hyphen.
2022-06-29Merge pull request #1378 from vfreex/add-igmp-snooping-optionChristian Poessinger
bridge: T4498: add option to enable/disable IGMP/MLD snooping
2022-06-29bridge: add option to enable/disable IGMP/MLD snoopingYuxiang Zhu
This PR adds an config option to enable/disable IGMP/MLD snooping. ``` set interfaces bridge brN igmp snooping ```
2022-06-28Merge pull request #1376 from sever-sever/T4473Christian Poessinger
containers: T4473: Fix create container with not exist network
2022-06-28Merge pull request #1377 from sever-sever/T4486Christian Poessinger
containers: T4486: Fix path for removing containers
2022-06-28containers: T4486: Fix path for removing containersViacheslav Hletenko
Fix correct path for removing containers and container networks Reduce timoute from 10 (default) to 3 seconds for stopping containers
2022-06-28containers: T4473: Fix create container with not exist networkViacheslav Hletenko
Fix for setting container without or wrong network decalaration
2022-06-28Merge pull request #1370 from sever-sever/T4489Christian Poessinger
mpls: T4489: Set priority 400 for MPLS after tunnel
2022-06-28mpls: T4489: Set priority 400 for MPLS after tunnelViacheslav Hletenko
Fix worng behavior with priority with using tunnel interfaces MPLS configuration must be applied after tunnel interfaces as we use an addition sysctl option 'net.mpls.conf.tun0.input = 1' which doesn't exist without tunnel interface Change priority: 299 protocols/mpls 380 interfaces/tunnel To: 380 interfaces/tunnel 400 protocols/mpls
2022-06-26Merge pull request #1368 from sarthurdev/firewall-opsummaryChristian Poessinger
firewall: T4484: Fix op-mode summary for address groups with ranges.
2022-06-25firewall: T4484: Fix op-mode summary for address groups with ranges.sarthurdev
2022-06-25Merge pull request #1360 from sever-sever/T1375Christian Poessinger
op-mode: T1375: Allow to clear dhcp-server lease
2022-06-25Merge pull request #1362 from sarthurdev/T4435Christian Poessinger
firewall: T4435: Verify parent config applied successfully
2022-06-25interfaces: dhcp: T4482: toggle of "dhcp-options no-default-route" has no effectChristian Poessinger
Error introduced by commit 85d6c8f7c ("vyos.configdict: T4391: enable get_interface_dict() ti be used with ConfigTreeQuery()"). Reason was the still in use relative path on calls to node_changed(), these got replaced with absolute config paths and the new implementation if is_node_changed().
2022-06-25dhcp: pppoe: T4384: bugfix not honoring no-default-route CLI optionChristian Poessinger
Commit a2ab95ff68b ("pppoe: T4384: replace default-route CLI option with common CLI nodes already present for DHCP") had an issue as the PPPoE interface options and also DHCP interface options did not honor the no-default-route option. This has been fixed.
2022-06-22Merge pull request #1367 from nicolas-fort/T4475Christian Poessinger
Policy: T4475: add support for matching ipv6 addresses on peer option…
2022-06-22Policy: T4475: add support for matching ipv6 addresses on peer option in ↵Nicolas Fort
route-map
2022-06-21Merge pull request #1366 from c-po/t1748-cli-helpChristian Poessinger
vbash: beautify tab completion output/line breaks
2022-06-20xml: T1748: cleanup <help> and </help> nodes not closing on the same lineChristian Poessinger
Commit a6f82bb484 ("T1748: vbash: beautify tab completion output/line breaks") added a method to split the help string and insert newlines and leading tabs in a deterministic way. This commit cleans up the legacy implementations where leading whitespaces got counted and added by humans in a try/error method.
2022-06-20T1748: vbash: beautify tab completion output/line breaksChristian Poessinger
Indention for multi-line help strings should be auto calculated and not be a human problem. This way we ensure that there is a consistent CLI with predictable newlines at a predictable position.
2022-06-20T778: T782: dhcp-server: add missing bootfile-size and bootfile-name constraintsChristian Poessinger
2022-06-20dhcp: T4156: bootfile-option: add missing constraints and valueHelpChristian Poessinger
2022-06-18policy: T4467: bugfix relative (+/-) increase of metricChristian Poessinger
2022-06-16smoketest: policy: T4467: validate relative route-map metricChristian Poessinger
2022-06-16vyos.ifconfig: T4384: fix file permission (664) on interface.pyChristian Poessinger
2022-06-16Merge pull request #1363 from sever-sever/T4468Christian Poessinger
webproxy: T4468: Fix regex for squidguard source-group
2022-06-16webproxy: T4468: Fix regex for squidguard source-groupViacheslav Hletenko
2022-06-16dhclient: T2393: introduce 20 seconds stop timeout - required for ↵Christian Poessinger
smoketesting on Qemu
2022-06-16op-mode: T1375: Allow to clear dhcp-server leaseViacheslav Hletenko
Allow to reset dhcp-leases per ip Parse file '/config/dhcpd.leases' find match section 'lease x.x.x.x {}' And remove this section clear dhcp-server lease 192.0.2.21
2022-06-15firewall: T4435: Verify parent config applied successfullysarthurdev
2022-06-15Merge pull request #1361 from sarthurdev/firewall_namedChristian Poessinger
firewall: T4147: Use named sets for firewall groups
2022-06-15Merge pull request #1359 from dmbaturin/help-proofreading-1Christian Poessinger
Improve IPsec help strings
2022-06-14firewall: T970: Use set prefix to domain groupssarthurdev
2022-06-14firewall: T4147: Use named sets for firewall groupssarthurdev
* Refactor nftables clean-up code * Adds policy route test for using firewall groups
2022-06-14Improve IPsec help stringsDaniil Baturin
2022-06-12Merge pull request #1357 from sarthurdev/geoipChristian Poessinger
firewall: T4299: Add support for GeoIP filtering
2022-06-11firewall: T4299: Add support for GeoIP filteringsarthurdev
2022-06-10Merge pull request #1356 from sarthurdev/nested_groupsChristian Poessinger
firewall: T478: Add support for nesting groups
2022-06-10firewall: T478: Add support for nesting groupssarthurdev
2022-06-10scripts: T4465: node.def generation requires whitespace on multiple use of ↵Christian Poessinger
<path>
2022-06-10Merge pull request #1355 from nicolas-fort/T4458-ipv4-ttlChristian Poessinger
Firewall:T4458: Add ttl match option in firewall
2022-06-10Merge pull request #1326 from sever-sever/T4429Christian Poessinger
op-mode: T4429: Ability to detect external IP address
2022-06-10xml: drop not always applicable REQUIRED suffix from completion help stringChristian Poessinger
If a parameter is required is determined from the Python string on commit. This "indicator" is not used consistently and sometimes missing, or added where it is not required anymore due to Python script improvement/rewrite.
2022-06-10Firewall:T4458: Add ttl match option in firewallNicolas Fort
2022-06-10Revert "dmvpn: nhrp: T4434: secret length can not exceed 8 characters"Christian Poessinger
This reverts commit 6f818ee9033ee3abeedbed73eb44331dc27e7408.
2022-06-10nhrp: T4460: update error message for cisco-authentication password lengthChristian Poessinger
2022-06-10Merge pull request #1353 from nicolas-fort/T4460Christian Poessinger
Protocols: T4460: Add input checks for cisco-authentication in nhrp
2022-06-10Merge pull request #1354 from sever-sever/T970Christian Poessinger
firewall: T970: Fix for Regex for domain and check empty group
2022-06-10firewall: T970: Fix for Regex for domain and check empty groupViacheslav Hletenko
It can be more then 5 symbols in top-level-domain address for example '.photography' and '.accountants' Firewall group can be added without address: * set firewall group domain-group DOMAIN Check if 'address' exists in group_config
2022-06-10Protocols: T4460: Add input checks for cisco-authentication parameter in ↵Nicolas Fort
nhrp protocol