summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2021-06-15Merge pull request #881 from sarthurdev/ipsec_swanctlChristian Poessinger
ipsec: T2816: T645: T3613: Migrated IPsec to swanctl format
2021-06-15ipsec: T2816: T645: T3613: Migrated IPsec to swanctl, includes multiple ↵sarthurdev
selectors, and selectors with VTI.
2021-06-13wwan: T3620: auto detect IP protocol based on requested addressesChristian Poessinger
(cherry picked from commit 1eb6aee88f411127175fdab031d896af1e1adbc3)
2021-06-13wwan: T3622: add support for APN authenticationChristian Poessinger
Some APNs require a username/password. Add CLI nodes (matching the PPPoE syntax) for client authentication. One APN would be the IPv4/IPv6 APN from Deutsche Telekom (Germany) APN Name: Telekom Internet IPv6 APN: internet.v6.telekom Benutzername: telekom Passwort: tm (cherry picked from commit c667a45a8fb06cb76c907348c4f1e3ec708b6e03)
2021-06-13pppoe: T3621: validate that both username and password are setChristian Poessinger
A validator is missing checking that if authentication is used on a PPPoE interface, both username and password are set. (cherry picked from commit 0361c3ac449f183476f7aee31439417d9f7f8012)
2021-06-13Merge pull request #879 from erkin/currentChristian Poessinger
T3563: Call `socket.shutdown()` with appropriate argument
2021-06-13T3563: Call `socket.shutdown()` with appropriate argumenterkin
2021-06-13snmp: T3606: fix unknown notification OIDChristian Poessinger
Commit 945300c6f5 ("snmp: mibs: import from vyatta-cfg-system") imported the MIBs from vyatta-cfg-system and provided them with a symlink to /usr/share/vyos/mibs. The symlink was never installed as the directory already existed. Adjust the MIBDIRS environment variable to load the MIBs from the proper VyOS folder and use no symlink at all.
2021-06-13Merge pull request #878 from sarthurdev/ipsec_dhcp_smoketestChristian Poessinger
smoketest: ipsec: T1501: Use VLAN in smoketest to avoid lease from QEMU built-in DHCP server
2021-06-13smoketest: ipsec: T1501: Use VLAN in smoketest to avoid lease from QEMU ↵sarthurdev
built-in DHCP server
2021-06-13wwan: T3620: reorder mirgation scripts for 1.3 backportChristian Poessinger
As the new WWAN interface style is backported to VyOS 1.3 we also need to shift the order of the interface migration scripts. so the same order from VyOS 1.4 also applies to VyOS 1.3. In short, 21-to-22 is renamed to 18-to-19 and all other migrators are shifted up one version.
2021-06-13vti: T2173: add VRF support for virtual tunnel interfacesChristian Poessinger
2021-06-13wwan: T3620: adjust NAT inbound/outbound interfaces on config migrationChristian Poessinger
2021-06-13wwan: T3620: fix backup route metric in migration scriptChristian Poessinger
2021-06-13wwan: T3620: rename "wirelessmodem wlm" interfaces to new wwan interface treeChristian Poessinger
2021-06-13Merge pull request #877 from sarthurdev/disable_peer_tunnelChristian Poessinger
ipsec: T57: Support disable on peer, peer tunnel and dmvpn profile
2021-06-13GitHub: fix yaml typo in PR conflict workflowChristian Poessinger
2021-06-12Merge pull request #876 from sarthurdev/link_localChristian Poessinger
ipsec: T1501: Use vyos.validate.is_ipv6_link_local
2021-06-12ipsec: T1501: Use vyos.validate.is_ipv6_link_localsarthurdev
2021-06-12ipsec: T57: Support disable on peer, tunnel, dmvpn profilesarthurdev
2021-06-12Merge pull request #875 from sarthurdev/dhcp_address_waitChristian Poessinger
ipsec: T1501: T3617: Add handling for missing addresses on boot when using dhcp-interface
2021-06-12smoketest: ipsec: T1501: Add smoketest for failed dhcp-interface scenariosarthurdev
2021-06-12ipsec: T1501: T3617: Add handling for missing addresses on boot when using ↵sarthurdev
dhcp-interface
2021-06-12http-api: T3616: update for strict content-type check in FastAPI 0.65.2John Estabrook
FastAPI 0.65.2 checks content-type request header before assuming JSON, closing a well-known loophole. This requires a modification of the code providing backwards compatibility of multipart forms.
2021-06-12GitHub: add workflow to check for PR conflictsChristian Poessinger
2021-06-12xml: op-mode: add "show log kernel"Christian Poessinger
2021-06-11Merge pull request #873 from sever-sever/T3614Christian Poessinger
containers: T3614: Fix for network names with hyphen
2021-06-11containers: T3614: Fix for network names with hyphensever-sever
Fix for containers and newtorks names with hyphen in names. We shouldn't mangle tagNode values.
2021-06-10xml: ssh: move user/group definition to includable filesChristian Poessinger
2021-06-10vpn: ipsec: T3093: remove leading whitespaces from XML includesChristian Poessinger
2021-06-10wwan: T3611: switch to qmi/mbim modeChristian Poessinger
2021-06-10Debian: T3611: add libqmi-utils as new dependency for WWANChristian Poessinger
2021-06-10ipsec: T2816: add .py extenstion to dhclient helper script for processingChristian Poessinger
dhclient fails to execute the script without the extension.
2021-06-09GitHub: fix workflow token warningChristian Poessinger
2021-06-09Merge pull request #871 from vyos/c-po-patch-1Christian Poessinger
xml: cron: remove whitespaces
2021-06-09xml: cron: remove whitespacesChristian Poessinger
2021-06-09GitHub: Add workflow to auto assign reviewersChristian Poessinger
2021-06-09GitHub: rename Workflow to "PR Triage"Christian Poessinger
2021-06-09Merge pull request #870 from erkin/currentChristian Poessinger
remote, util: Move general helper routines from `remote.py` to `util.py`
2021-06-09GitHub: add action to assign PR author as assigneeChristian Poessinger
2021-06-09remote, util: Move general helper routines from `remote.py` to `util.py`erkin
2021-06-08remote: import is_ipv6 from vyos.templateChristian Poessinger
2021-06-08Merge pull request #867 from erkin/currentChristian Poessinger
T3563: Add support for IPv6 source addresses in SSH connections
2021-06-08remote: Use `is_ipv6()` instead of ad hoc IPv6 checkerkin
2021-06-08policy: T3605: add support to prefer IPv6 global next-hop address in route-mapChristian Poessinger
2021-06-07smoketest: ipsec: chmod +x testcaseChristian Poessinger
2021-06-07nhrp: T3599: adjust Jinja2 template to common style patternChristian Poessinger
2021-06-07ipsec: T2816: adjust Jinja2 template to common style patternChristian Poessinger
2021-06-07vti: T3588: remove interfaces not bound to IPSec tunnelChristian Poessinger
A VTI interface also requires an IPSec configuration - VyOS 1.2 supported having a VTI interface in the CLI but no IPSec configuration - drop VTI configuration if this is the case for VyOS 1.4.
2021-06-07ipsec: T3588: remove site-to-site tunnel CLI options only valid in OpenswanChristian Poessinger