Age | Commit message (Collapse) | Author | |
---|---|---|---|
2022-04-25 | vpn-ipsec: T4398: Fix unexpected passthrough policy for peer | Viacheslav Hletenko | |
Set default passtrough list to None to prevent unexpected policy for peers with not overplapped local and remote prefixes | |||
2022-04-25 | smoketest: config: T4397: add ARP entries for a second interface | Christian Poessinger | |
2022-04-25 | pppoe: T4391: bugfix IPv6 DHCP-PD not working after reboot | Christian Poessinger | |
When VyOS is booting and an interface is brought up (PPPoE) which requires a user callback script that is executed asynchronously when the interface is up we can not use Config(). The problem is, Config() is not available when the system starts and the initial commit is still processed. We need to move to ConfigTreeQuery() which was build for this exact same purpose. | |||
2022-04-25 | vyos.configdict: T4391: enable get_interface_dict() ti be used with ↵ | Christian Poessinger | |
ConfigTreeQuery() When VyOS is booting and an interface is brought up (PPPoE) which requires a user callback script that is executed asynchronously when the interface is up we can not use Config(). The problem is, Config() is not available when the system starts and the initial commit is still processed. We need to move to ConfigTreeQuery() which was build for this exact same purpose. TO reduce side effects and also dependencies on the entire vyos.configdict library the set_level()/get_level() calls got eliminated from within the library. All calls to functions like: * get_removed_vlans() * is_node_changed() * leaf_node_changed() * is_mirror_intf() * ... Now require that the full config path to the node is passed. | |||
2022-04-25 | smoketest: config: T4397: add some static ARP entries | Christian Poessinger | |
2022-04-25 | arp: T4397: migrate to get_config_dict() | Christian Poessinger | |
2022-04-25 | smoketest: arp: add initial testcase for static ARP entries | Christian Poessinger | |
2022-04-25 | smoketest: ethernet: verify addresses are deleted from interface after test | Christian Poessinger | |
2022-04-25 | smoketest: openconnect: use setUpClass() over setUp() | Christian Poessinger | |
2022-04-25 | smoketest: dhcpv6-server: use setUpClass() over setUp() | Christian Poessinger | |
2022-04-25 | smoketest: pki: use setUpClass() over setUp() | Christian Poessinger | |
2022-04-25 | smoketest: migrate pppoe, and wireguard to setUpClass() scheme | Christian Poessinger | |
2022-04-25 | smoketest: bugfix on proper inheritance levels for classmethod | Christian Poessinger | |
2022-04-25 | Merge pull request #1299 from sever-sever/T4395 | Christian Poessinger | |
op-mode: T4395: Extend show vpn debug | |||
2022-04-25 | op-mode: T4395: Extend show vpn debug | Viacheslav Hletenko | |
Get more VPN IPSec information with swanctl and iproute2 commands | |||
2022-04-24 | Merge pull request #1295 from dmbaturin/T4361 | John Estabrook | |
T4361: refactor and simplify vyos.config.exists() | |||
2022-04-24 | op-mode: T4390: add "monitor log dhcp(v6)" CLI commands | Christian Poessinger | |
2022-04-24 | op-mode: T4390: drop superfluous hostname from "monitor log protocol" CLI ↵ | Christian Poessinger | |
commands | |||
2022-04-24 | op-mode: T4390: add "show|monitor log pppoe" CLI commands | Christian Poessinger | |
2022-04-24 | op-mode: T4390: add "monitor log kernel" command | Christian Poessinger | |
2022-04-24 | op-mode: T4390: migrate "monitor log" to journalctl | Christian Poessinger | |
2022-04-24 | op-mode: T4390: migrate "show log kernel" to journalctl | Christian Poessinger | |
2022-04-23 | Merge pull request #1298 from sever-sever/T4386 | Christian Poessinger | |
verify: T4386: Fix traffic-policy key in verify_mirror | |||
2022-04-23 | verify: T4386: Fix traffic-policy key in verify_mirror | Viacheslav Hletenko | |
Fix logic for verify traffic-policy in def verify_mirror_redirect It checks just "traffic_policy.in" and should also checks if 'mirror' or 'redirect' exists in config | |||
2022-04-22 | dhcp: T4389: add vendor option support for Ubiquity Unifi controller | Christian Poessinger | |
vyos@vyos# show service dhcp-server shared-network-name LAN { subnet 172.18.201.0/24 { default-router 172.18.201.1 name-server 172.18.201.2 range 0 { start 172.18.201.101 stop 172.18.201.109 } vendor-option { ubiquity { unifi-controller 172.16.100.1 } } } } | |||
2022-04-22 | dhcpv6: T4357: use variable for systemd service name | Christian Poessinger | |
2022-04-22 | dhcpv6: T4357: only two IPv6 Cisco tftp servers should be defined | Christian Poessinger | |
2022-04-22 | dhcpv6: T4357: remove ConfigError() line breaks - this is done automatically | Christian Poessinger | |
2022-04-22 | dhcpv6: T4357: rename vsio -> vendor-option | Christian Poessinger | |
2022-04-22 | dhcpv6: T4357: length must be encoded else packet is malformed | Christian Poessinger | |
2022-04-22 | dhcpv6: T4357: no need to make the vendor options conditional - they do not hurt | Christian Poessinger | |
Always render int he vendor specific option definition - it doesn't hurt. | |||
2022-04-22 | Merge branch 'T4357' of https://github.com/sever-sever/vyos-1x into current | Christian Poessinger | |
* 'T4357' of https://github.com/sever-sever/vyos-1x: dhcpv6: T4357: Add dhcpv6 options for cisco VoIP tftp | |||
2022-04-22 | dhcp: T4388: missing constraint on tftp-server-name option | Christian Poessinger | |
2022-04-22 | dhcpv6: T4357: Add dhcpv6 options for cisco VoIP tftp | Viacheslav Hletenko | |
Add vendor specific options for DHCPv6-server for working with cisco VoIP phone provisioning over IPv6 | |||
2022-04-21 | pppoe: T4384: replace default-route CLI option with common CLI nodes already ↵ | Christian Poessinger | |
present for DHCP VyOS 1.4 still leverages PPPd internals on the CLI. pppd supports three options for a default route, none, auto, force. * none: No default route is installed on interface up * auto: Default route is only installed if there is yet no default route * force: overwrite any default route There are several drawbacks in this design for VyOS and the users. If auto is specified, this only counted for static default routes - but what about dynamic ones? Same for force, only a static default route got replaced but dynamic ones did not got taken into account. The CLI is changed and we now re-use already existing nodes from the DHCP interface configuration: * no-default-route: On link up no default route is installed, same as the previous default-route none * default-route-distance: We can now specify the distance of this route for the routing table on the system. This defaults to 210 as we have for DHCP interfaces. All this will be migrated using a CLI migration script. | |||
2022-04-21 | vyos.ifconfig: T4384: get_interface_dict() should provide "ifname" key for VIFs | Christian Poessinger | |
2022-04-21 | xml: T4385: provide building blocks for default route configuration | Christian Poessinger | |
2022-04-21 | T4361: refactor and simplify vyos.config.exists() | Daniil Baturin | |
2022-04-21 | bgp: T4385: peer-group member cannot override remote-as of peer-group | Christian Poessinger | |
2022-04-20 | Revert "vyos.configdict(): T4369: leaf_node_changed() must return True when ↵ | Christian Poessinger | |
node is added" This reverts commit c685c0f762ea054c7a220bde625fdab549bbbdd2. | |||
2022-04-20 | Revert "vyos.configdict(): T4369: bugfix - execution order in ↵ | Christian Poessinger | |
leaf_node_changed()" This reverts commit 1a1094c28e32c3d6d072cf14a38aa631d51b8aee. | |||
2022-04-20 | openvpn: T4369: enforce daemon-restart on openvpn-option CLI change | Christian Poessinger | |
2022-04-20 | vyos.configdict: T4369: add is_node_changed() helper | Christian Poessinger | |
2022-04-19 | pppoe: static: T4379: bugfix default-route lost after applying additional ↵ | Christian Poessinger | |
static routes Issue is identical to the problem in T3680 (05aa22dcb4ce) which was for DHCP based routes. Once a static route is added to the system, the PPPoE auto-installed default route is lost. | |||
2022-04-19 | Merge pull request #1289 from nicolas-fort/T4365 | Christian Poessinger | |
NAT: T4365: Fix for nat tables manipulation on netfilter | |||
2022-04-19 | Merge pull request #1291 from andriiandrieiev/current | Christian Poessinger | |
T4268: monitoring: Fixed unnatural LA elevation | |||
2022-04-19 | T4268: monitoring: Fixed unnatural LA elevation | Andrii | |
2022-04-18 | NAT: T4365: Fix for nat tables manipulation on netfilter | Nicolas Fort | |
2022-04-18 | vxlan: geneve: T4370: support configuration of DF bit option | Christian Poessinger | |
set interfaces vxlan vxlan0 parameters ip df <set|unset|inherit> set interfaces geneve gnv0 parameters ip df <set|unset|inherit> | |||
2022-04-18 | vyos.configdict(): T4369: bugfix - execution order in leaf_node_changed() | Christian Poessinger | |
Commit c685c0f7 ("vyos.configdict(): T4369: leaf_node_changed() must return True when node is added") added a code path then a node was newly added to the CLI. Unfortunately it turned out that this introduced a regression: File "/usr/lib/python3/dist-packages/vyos/ifconfig/wireguard.py", line 230, in update super().update(config) File "/usr/lib/python3/dist-packages/vyos/ifconfig/interface.py", line 1428, in update for addr in list_diff(config['address_old'], new_addr): File "/usr/lib/python3/dist-packages/vyos/configdict.py", line 105, in list_diff return [item for item in first if item not in second] TypeError: 'bool' object is not iterable The execution order of the if statements is essential and the new check was moved to the bottom to not interfere with the existing logic. |