summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-10-12T562: Config syntax for defining DNS forward authoritative zonesLucas Christian
2021-10-02vyos.ifconfig: T3883: bugfix VRF deletionChristian Poessinger
We can not pass None as VRF name, this raises an exception. OSError: [Errno 255] failed to run command: ip link set dev eth2 master None (cherry picked from commit e687502b1cf4a3e15c562a3662afcbe0776b1fe7)
2021-10-02dns: forwarding: T3882: remove deprecated code to work with PowerDNS 4.5Christian Poessinger
(cherry picked from commit 8e6c48563d1612916bd7fcc665d70bfa77ec5667)
2021-10-01smoketest: vrrp: validate rfc3768-compatibility is not setChristian Poessinger
(cherry picked from commit eab6e6830a566af647d7e1b24197bf945788c3d0)
2021-09-30dhcp-server: T2230: add subnet description into rendered configChristian Poessinger
2021-09-30vyos.ethtool: T3874: do not throw exception if adapter has issues with autonegChristian Poessinger
Instead of throwing an exception when an adapters autoneg capabilities can not be detected, just pretend it does not support autoneg.
2021-09-30Merge pull request #1019 from jestabro/interface-namesJohn Estabrook
T3869: Rewrite vyatta_net_name/vyatta_interface_rescan in Python
2021-09-30interface-names: T3869: update udev rulesJohn Estabrook
2021-09-27interface-names: T3869: install vyos_net_name to udev directoryJohn Estabrook
2021-09-27interface-names: T3869: add vyos_net_nameJohn Estabrook
2021-09-27interface-names: T3869: add vyos_interface_rescanJohn Estabrook
2021-09-27interface-names: T3869: add /run/udev/vyos to defaultsJohn Estabrook
2021-09-27nat66: T3863: ndppd requires interfaces to be presentChristian Poessinger
2021-09-27igmp: T2230: fix Jinja2 and FRR indentionChristian Poessinger
2021-09-27frr: T2175: rename daemon Jinja2 templates to match (d)aemon suffixChristian Poessinger
2021-09-27smoketest: interface test base class QoS cleanupChristian Poessinger
There is no need to delete the old ingres-qos and egres-qos values as it's not a multi node and thus the values are simply overwritten. Also address validation is not required as it's done in a dedicates test.
2021-09-27smoketest: interface test base class for 802.1q should not extend testing to QoSChristian Poessinger
2021-09-27openvpn: T690: Fix template for gateway and metricViacheslav
Some OpenVPN clients doesnt support option gateway and metric. Set metric option only when 'metric' was added in config explicity. (cherry picked from commit 96681d8bf1ede069b573a4cbe3a2493c374d048e)
2021-09-27Merge pull request #1016 from sever-sever/T3853Christian Poessinger
nat66: T3853: Change priority to 500
2021-09-27nat66: T3853: Change priority to 500Viacheslav
Service ndppd should start after tunnels.
2021-09-26vxlan: T3867: add multicast validator for group addressChristian Poessinger
The group CLI node takes a multicast IPv4 or IPv6 address - this must be input validated to not case any OS exception cpo@LR1.wue3# show interfaces vxlan vxlan vxlan0 { + group 254.0.0.1 source-address 172.18.254.201 + source-interface dum0 vni 10 } Results in OSError beeing rasied with the following context: Error: argument "254.0.0.1" is wrong: invalid group address
2021-09-26T3866: ignore interfaces without "address" in DNS forwarding migrationDaniil Baturin
2021-09-26op-mode: pki: T3826: perform input validation when listing certificatesChristian Poessinger
2021-09-26ospf: T3757: add completion help when refering to area IDChristian Poessinger
This extends commit 6f87d8c910 ("ospf: T3757: support to configure area at an interface level") with a completion helper to show which Area ID is already in use when configuring the area for an interface.
2021-09-26vyos.ifconfig: T3860: bugfix in get_mac_synthetic()Christian Poessinger
Commit 081e23996f (vyos.ifconfig: get_mac_synthetic() must generate a stable "MAC") calculated a "stable" synthetic MAC address per the interface based on UUID and the interface name. The problem is that this calculation is too stable when run on multiple instances of VyOS on different hosts/hypervisors. Having R1 and R2 setup a connection both via "tun10" interface will become the same "synthetic" MAC address manifesting in the same link-local IPv6 address. This e.g. breaks OSPFv3 badly as both neighbors communicate using the same link-local address. As workaround one can: set interfaces tunnel tun1337 address 'fe80::1:1337/64' set interfaces tunnel tun1337 ipv6 address no-default-link-local This commit changes the way in how the synthetic MAC address is generated. It's based on the first 48 bits of a sha256 sum build from a CPU ID retrieved via DMI, the MAC address of eth0 and the interface name as used before. This should add enough entropy to get a stable pseudo MAC address.
2021-09-26ospfv3: T3859: add "log-adjacency-changes" CLI commandChristian Poessinger
2021-09-26op-mode: reboot/poweroff: T3857: send wall message to all usersChristian Poessinger
2021-09-25bgp: T3657: add "neighbor fe80::202 interface source-interface 'eth1'" commandChristian Poessinger
2021-09-25bgp: xml: T2387: use "generic-description" building block over BGP specific oneChristian Poessinger
There is no benefit in the BGP specific definition of a "description" node.
2021-09-25op-mode: bgp: "show bgp ipv4|ipv6" should display routing tableChristian Poessinger
The <command> node was missed out when adding the XML definitions.
2021-09-25ipsec: T2816: ipsec-dhclient-hook should only run if swanctl.conf existsChristian Poessinger
2021-09-25ipsec: T2816: ipsec-dhclient-hook should use exit(0)Christian Poessinger
2021-09-25ipsec: T2816: ipsec-dhclient-hook should use vyos.util.read_file() / ↵Christian Poessinger
write_file()
2021-09-25vyos.ifconfig: dhcpv6: re-use systemd_service definition variableChristian Poessinger
2021-09-25vyos.ifconfig: dhcp: T3300: always re-start dhcp client instead of startChristian Poessinger
Commit dd2eb5e5686655 ("dhcp: T3300: add DHCP default route distance") changed the logic on how the DHCP process is going to be started. The systemd unit was always "started" even if it was already running. It should rather be re-started to track changes in e.g. the DHCP hostname setting.
2021-09-23smoketest: T3850: use as complicated as possible public-key nameChristian Poessinger
2021-09-23T3850: Revert "login: T1948: add missing ssh-public key name regex"Christian Poessinger
This reverts commit 514da738173696c70440c959b9d7ec9afd77fbae.
2021-09-23smoketest: ospf: debug output only syslog and FRRChristian Poessinger
The Kernel output seemed to be not that helpful and only polluted the log. Now we only gather the syslog and FRRs configuration
2021-09-23Merge pull request #1014 from nagua/fix_smaller_openvpn_issuesChristian Poessinger
T3642: Fix smaller OpenVpn issues
2021-09-23openvpn: T3642: Openvpn does not work without dh parameter in EC modeNicolas Riebesel
2021-09-23openvpn: T3642: Fix password_protected checkNicolas Riebesel
2021-09-23openvpn: T3642: Add option for TLS 1.3Nicolas Riebesel
2021-09-22smoketest: vrrp: delete interface vifs after testChristian Poessinger
2021-09-22vrrp: keepalived: T3847: enable no_tag_node_value_mangle for get_config_dict()Christian Poessinger
Commit 761631d6 ("vrrp: keepalived: T3847: migrate to get_config_dict()") switched to the new python function get_config_dict(), when we deal with tag nodes that can contain a hyphen, we should also set no_tag_node_value_mangle in order to preserve it. This caused a dict lookup error as the hyphens in the test scripts got replaced by an _.
2021-09-21vrrp: keepalived: T3847: migrate/streamline CLI optionsChristian Poessinger
Rename virtual-address -> address as we always talk about an IP address.
2021-09-21vrrp: keepalived: T3847: add common transition-script building blockChristian Poessinger
This is used for both VRRP groups and sync-groups.
2021-09-21vrrp: keepalived: T3847: remove "transition-script mode-force" optionChristian Poessinger
2021-09-21vrrp: keepalived: T616: use common description building blockChristian Poessinger
2021-09-21vrrp: keepalived: T3847: migrate to get_config_dict()Christian Poessinger
2021-09-21vrrp: keepalived: T616: enable script securityChristian Poessinger