summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-06-04vti: T3595: error out when adding VTI interface withouth IPSecChristian Poessinger
2021-06-04flow-accounting: T3132: fix egress iptables chainJan-Philipp Benecke
(cherry picked from commit 95cc2e4b4c11414cc71749af12abb575e96e5bd4)
2021-06-04Merge pull request #861 from sever-sever/T3592Christian Poessinger
tunnels: T3592: Set default TTL to 64
2021-06-03pppoe-server: T3593: Change called-sid position in templateEshenko Dmitriy
2021-06-02tunnels: T3592: Set default TTL to 64sever-sever
Set default TTL value for tunnels from 0 to 64 There are a lot of situation when default value 0 (inherit) not work properly when you have routing configuration for OSPF or BGP over the tunnels. To fix it you need explicit set TTL value other then 0. Or hardcode another value as default.
2021-06-01op-mode: T3384: fix default help string for bandwidth testChristian Poessinger
2021-06-01op-mode: T3384: support UDP bandwidth testingJACK
2021-06-01pppoe-server: T3593: Add extended-scripts featureEshenko Dmitriy
2021-06-01ipsec: T2816: XML in op-mode should not contain ' in the help stringChristian Poessinger
2021-05-31conntrack: T3579: add module disable optionsChristian Poessinger
Some application layer gateway (ALG) modules can be disabled during runtime if requireq.
2021-05-31ipsec: T2816: Continued refactor, added proper ipsec-interfaces handlingSimon
2021-05-30bgp: T3590: limiting maximum number of prefixes to be sent to a peerChristian Poessinger
2021-05-30ipsec: T2816: Refactor to remove global variable and tidy upSimon
2021-05-30op-mode: T3589: add "clear log" command to vacuume journaldChristian Poessinger
2021-05-30op-mode: T3589: replace short journalctl options with long namesChristian Poessinger
... this is done for easier readability of the commands
2021-05-29Debian: T1888: raise required strongSwan version to >= 5.8 for xfrm supportChristian Poessinger
2021-05-29vpn: ipsec: T3093: test for VTI interface availability the easy wayChristian Poessinger
We do not need to query the actual configuration if the VTI peer is configured or not. This can be done in a much more simples way by just checking if the desired interface exists on the running system. This is safe to do as the VTI priority is less then IPSec.
2021-05-29ipsec: vti: T2816: Update to use correct VTI mark, code cleanupSimon
2021-05-29vpn: ipsec: T3093: drop obsolete cleanup_vti_interfaces() functionChristian Poessinger
2021-05-29vti: T1579: only remove the interface when it existsChristian Poessinger
2021-05-29vti: ipsec: T2816: Fix vti-up-downsarthurdev
2021-05-29Revert "vti: T2173: add VRF support for virtual tunnel interfaces"Christian Poessinger
This reverts commit ab398d1a063c5f897df8d63098a272cb34bcf603.
2021-05-28ipsec: T2816: drop absolute path on calls to iproute2Christian Poessinger
2021-05-28vti: ipsec: T2816: interfaces must be created using the vyos.ifconfig libraryChristian Poessinger
2021-05-28vti: T2173: add VRF support for virtual tunnel interfacesChristian Poessinger
2021-05-28ipsec: T2816: fix executable permission on vti-up-down helperChristian Poessinger
2021-05-28vti: T1579: implement Virtual Tunnel Interfaces using XML and PythonChristian Poessinger
2021-05-28dummy: T2241: minor code cleanupChristian Poessinger
No need to call .keys() on a dict when searching for a key. Also drop the unused "import os" call.
2021-05-28ipsec: T2816: IPSec python rework, includes DMVPN and VTI supportSimon
2021-05-27dhcp-server: T2669: do not allow overlapping ranges to be createdChristian Poessinger
set service dhcp-server shared-network-name NET01 authoritative set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 default-router '10.0.0.1' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 lease '86400' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 range RNG01 start '10.0.0.60' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 range RNG01 stop '10.0.0.70' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 range RNG02 start '10.0.0.55' set service dhcp-server shared-network-name NET01 subnet 10.0.0.0/24 range RNG02 stop '10.0.0.65' Will result in a dhcpd.conf: shared-network NET01 { authoritative; subnet 10.0.0.0 netmask 255.255.255.0 { option routers 10.0.0.1; default-lease-time 86400; max-lease-time 86400; range 10.0.0.60 10.0.0.70; range 10.0.0.55 10.0.0.65; } on commit { set shared-networkname = "NET01"; } } This is not allowed by ISC DHCPd: dhcpd[3307]: /run/dhcp-server/dhcpd.conf line 25: lease 10.0.0.63 is declared twice! dhcpd[3307]: range 10.0.0.55 10.0.0.65;
2021-05-27Merge branch 't3579-conntrack' into currentChristian Poessinger
* t3579-conntrack: conntrack: T3535: add conntrack-sync supported vyos-configd services conntrack: T3579: initial implementation with XML and Python
2021-05-27conntrack: T3535: add conntrack-sync supported vyos-configd servicesChristian Poessinger
2021-05-27conntrack: T3579: initial implementation with XML and PythonChristian Poessinger
2021-05-25firewall: T3568: add XML definitions for firewallViacheslav Hletenko
Add XML for configuration mode firewall. Used for future rewriting it to Python style.
2021-05-25smoketest: conntrack: extend tests by parsing iptables rules for nfs/sqlnetChristian Poessinger
2021-05-25smoketest: add initial test for "system conntrack" subsystemChristian Poessinger
2021-05-24tunnel: T3555: add "ignore-df" support for GRE tunnelsChristian Poessinger
2021-05-24xml: T1579: update tunnel key help stringChristian Poessinger
2021-05-24isis: T3576: add IPv6 supportChristian Poessinger
2021-05-24isis: T3417: update help stringsChristian Poessinger
2021-05-24isis: T3417: add CLI node to enable "log-adjacency-changes"Christian Poessinger
2021-05-24isis: T3417: ease Jinja2 template code for is-typeChristian Poessinger
2021-05-24smoketest: isis: T3417: test domain and area-password settingsChristian Poessinger
2021-05-24smoketest: isis: test verify() - net and interface must be setChristian Poessinger
2021-05-24isis: T3417: implement domain-password md5Christian Poessinger
2021-05-24smoketest: isis: T3576: add testcase for default route originationChristian Poessinger
This is the smoketest for the implementation added in commit 9682337c ("isis: T3576: support metric and route-map when originating a default route").
2021-05-24smoketest: isis: abstract common protocol setupChristian Poessinger
2021-05-24isis: T3576: support metric and route-map when originating a default routeChristian Poessinger
2021-05-24smoketest: pseudo-ethernet: add missing "Section" importChristian Poessinger
2021-05-24op-mode: T3571: add missing "show protocol" help stringsChristian Poessinger
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-28 13:38:54 +0000