summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2020-04-11vpn: l2tp: sstp: T2264: create config dir on demandChristian Poessinger
2020-04-11vpn: l2tp: T2264: migrate IPv6 prefix node to common CLI styleChristian Poessinger
Combining multiple options into a single CLI node is considered bad practice. IPv6 prefixes consited of the prefix itself and a mask send to the client in one node only. The following CLI parts have been migrated from client-ipv6-pool { delegate-prefix fc00:0:1::/48,64 prefix 2001:db8::/64,64 } to client-ipv6-pool { delegate fc00:0:1::/48 { delegation-prefix 48 } prefix 2001:db8::/48 { mask 64 } } Thus regular validation steps from the VyOS CLI can be used when a prefix is configured.
2020-04-11vpn: l2tp: T2264: simplify IPv6 config dictionary elementsChristian Poessinger
2020-04-11vpn: sstp: T2008: migrate from SysVinit -> systemdChristian Poessinger
2020-04-11vpn: sstp: T2008: bugfix KeyError 'client_gateway'Christian Poessinger
2020-04-11vpn: l2tp: T2264: migrate from SysVinit -> systemdChristian Poessinger
2020-04-11vpn: l2tp: T2264: remove debug pprintChristian Poessinger
2020-04-11vpn: l2tp: T2264: proper set PPP default values to ease Jinja2 templateChristian Poessinger
2020-04-11vpn: l2tp: T2110: re-use RADIUS XML include fileChristian Poessinger
2020-04-11vpn: l2tp: T2264: remove RADIUS req-limit nodeChristian Poessinger
It makes less sense for the user to specify this behavior.
2020-04-11vpn: l2tp: T2264: migrate to new dictionary keys for radius authChristian Poessinger
2020-04-11vpn: sstp: T2008: set accell default values in config dictChristian Poessinger
This will remove the required if/else parts int he Jinja2 template.
2020-04-11vpn: l2tp: T2264: use "with open()" when writing configChristian Poessinger
2020-04-11vpn: l2tp: T2264: migrate to new dictionary keys for local authChristian Poessinger
2020-04-11vpn: sstp: T2008: improve error message for non existent local-usersChristian Poessinger
2020-04-11vpn: l2tp: T2264: cleanup thread_cnt generationChristian Poessinger
2020-04-11vpn: sstp: T2008: cleanup thread_cnt generationChristian Poessinger
2020-04-11vpn: l2tp: T2264: combine WINS CLI syntaxChristian Poessinger
There is no reason to distinguish between WINS servers in terms of priority. This is solely a task which can be done in the underlaying Python scripts.
2020-04-11vpn: l2tp: T2264: combine IPv4/IPv6 name-server CLI syntaxChristian Poessinger
There is no reason to distinguish between an IPv4 and IPv6 name-server node on the CLI - this can be done in the underlaying Python scripts.
2020-04-11vpn: sstp: T2008: adjust DNS error messageChristian Poessinger
2020-04-11vpn: l2tp: T2264: comment cleanup on chk_con()Christian Poessinger
2020-04-11vpn: l2tp: T2264: use default_config_data dictChristian Poessinger
2020-04-11vpn: l2tp: T2264: introduce common config baseChristian Poessinger
2020-04-11vpn: l2tp: T2264: import cleanupChristian Poessinger
2020-04-11vpn: l2tp: T2264: rename files to match CLI levelsChristian Poessinger
2020-04-10Merge pull request #324 from DmitriyEshenko/fix-res-raChristian Poessinger
pptp: l2tp: T2262: Fix call to function run()
2020-04-10pptp: l2tp: T2262: Fix call to function run()DmitriyEshenko
2020-04-10Merge pull request #323 from jjakob/openvpn-verify-bridge-fixChristian Poessinger
openvpn: T2266: fix verify for client-server bridged mode
2020-04-10openvpn: T2266: fix verify for client-server bridged modejjakob
2020-04-10Merge pull request #230 from DaniilHarun/upstreamhagbard-01
ipoe-server: T2073: reset op-mode command for sessions
2020-04-10Merge branch 'upstream' of https://github.com/DaniilHarun/vyos-1x into upstreamDaniil Kharun
2020-04-10ipoe-server: T2073: reset op-mode command for sessionsDaniil Kharun
2020-04-10util: T2253: fix translation to cmdJohn Estabrook
2020-04-10Revert "Revert "util: T2226: rewrite merge config to use cmd""John Estabrook
This reverts commit 6086b7fa718f502563a17569abc81d4ccb94818c.
2020-04-10util: T2253: fix translation of subprocess.check_output to cmdJohn Estabrook
2020-04-10Revert "Revert "util: T2226: rewrite remote function helpers to use cmd""John Estabrook
This reverts commit 10717c6a3cdf7da7025b03c1abdbd813b4970b19.
2020-04-10l2tp: xml: group interface definition into vpn sectionChristian Poessinger
2020-04-10pppoe: T2248: connect-on-demand and vrf are mutually exclusiveChristian Poessinger
As PPP can be used to establish a connection on-demand it manages the Kernel default route. This can not be used when using VRFs which are managed by the ip-up.d and ip-down.d scripts - thus those options are now mutially exclusive. The best fix would be adding support for VRFs into PPP.
2020-04-10Merge pull request #321 from jjakob/openvpn-ccd-fixChristian Poessinger
openvpn: T2261: re-add ccd to template (was removed by mistake)
2020-04-10openvpn: T2261: re-add ccd to template (was removed by mistake)jjakob
Commit ef27cef0 mistakenly removed client-config-dir from the server template.
2020-04-10vif-c: T2240: add VRF supportChristian Poessinger
2020-04-10Revert "vif-s: T2240: add VRF support"Christian Poessinger
This reverts commit 2d33cf656f5856fb06e8390fc2250bb99ea0206b.
2020-04-09op-mode: raid: T689: Typo in descriptionViacheslav Hletenko
2020-04-09Debian: T640: explicitly add easy-rsaChristian Poessinger
easy-rsa is used by e.g. OpenVPN installation and was dropped when enabling "--apt-recommends false" in VyOS build system. Dependency has been explicitly added.
2020-04-09vxlan: T2172: add source-address optionChristian Poessinger
This is a base requirement for l2vpn evpn. When source-address is configured, the option "local <source-addr> nolearning" is appended when creating the interface as mentioned here: https://vincent.bernat.ch/en/blog/2017-vxlan-bgp-evpn
2020-04-09Revert "vxlan: T2172: remove group or remote check in verify()"Christian Poessinger
This reverts commit 195e1da6a518ee3a2cbc0e1d454317e3c05e3e6e.
2020-04-09xml: radius: update source-address valueHelpChristian Poessinger
2020-04-09Merge branch 'vxlan' of github.com:c-po/vyos-1x into currentChristian Poessinger
* 'vxlan' of github.com:c-po/vyos-1x: vxlan: pseudo-ethernet: T2260: convert link nodes to source-interface wireguard: T2206: fix comment in migration script pppoe: enable Jinja2 trim_blocks
2020-04-09vxlan: pseudo-ethernet: T2260: convert link nodes to source-interfaceChristian Poessinger
2020-04-09wireguard: T2206: fix comment in migration scriptChristian Poessinger