Age | Commit message (Collapse) | Author | |
---|---|---|---|
2022-04-09 | Merge pull request #1242 from goodNETnick/ocserv_local_otp | Christian Poessinger | |
ocserv: T4231: Added OTP support for Openconnect 2FA | |||
2022-04-09 | ocserv: T4231: Added OTP support for Openconnect 2FA | goodNETnick | |
2022-04-08 | Merge branch 'current' into T4344 | Viacheslav Hletenko | |
2022-04-08 | Merge branch 'current' into dhcpd | Georg | |
2022-04-08 | dhcp-server: T4344: Fix underscores for shared network name | Viacheslav Hletenko | |
Shared network name should not be handled by tag node mangling I.e. should not replace underscores with dashed set service dhcp-server shared-network-name NET_01 shared-network NET_01 { authoritative; ... on commit { set shared-networkname = "NET_01"; } } | |||
2022-04-08 | dhcp(v6): T4333: migrate to new vyos_defined Jinja2 test | Christian Poessinger | |
2022-04-08 | container: T4333: migrate to new vyos_defined Jinja2 test | Christian Poessinger | |
2022-04-07 | http api: T4347: return complete and consistent error codes | John Estabrook | |
2022-04-06 | dns: forwarding: T4343: add CLI option for PowerDNS network-timeout | Bracken | |
Makes the powerdns `network-timeout` setting configurable via: `service dns forwarding timeout`. The powerdns default is 1500ms, VyOS now explicitly sets the same default value or the configured value so that the setting can have a readily apparent default in the help, rather than the user having to know it's powerdns. | |||
2022-04-04 | Merge pull request #1267 from sever-sever/T2580 | Christian Poessinger | |
ipoe: T2580: Add pools and gateway options | |||
2022-04-04 | ipoe: T2580: Add pools and gateway options | Viacheslav Hletenko | |
Add new feature to allow to use named pools Can be used also with Radius attribute 'Framed-Pool' set service ipoe-server client-ip-pool name POOL1 gateway-address '192.0.2.1' set service ipoe-server client-ip-pool name POOL1 subnet '192.0.2.0/24' | |||
2022-04-03 | static: T4333: migrate to new vyos_defined Jinja2 test | Christian Poessinger | |
2022-04-03 | vrf/vni: T4333: migrate to new vyos_defined Jinja2 test | Christian Poessinger | |
2022-04-03 | rpki: T4333: migrate to new vyos_defined Jinja2 test | Christian Poessinger | |
2022-04-03 | rip(ng): T4333: migrate to new vyos_defined Jinja2 test | Christian Poessinger | |
2022-04-03 | policy: T4333: migrate to new vyos_defined Jinja2 test | Christian Poessinger | |
2022-04-03 | ospf: T4333: migrate to new vyos_defined Jinja2 test | Christian Poessinger | |
2022-04-03 | ospfv3: T4333: migrate to new vyos_defined Jinja2 test | Christian Poessinger | |
2022-04-03 | mpls: T4333: migrate to new vyos_defined Jinja2 test | Christian Poessinger | |
2022-04-03 | isis: T3156: add segment routing local-block for ISIS | Christian Poessinger | |
2022-04-03 | isis: T4333: fix remaining "is defined" instances | Christian Poessinger | |
2022-04-03 | isis: T4336: add support for MD5 authentication password on a circuit | Christian Poessinger | |
2022-04-03 | isis: T4333: migrate to new vyos_defined Jinja2 test | Christian Poessinger | |
2022-04-03 | bfd: T4333: migrate to new vyos_defined Jinja2 test | Christian Poessinger | |
2022-04-03 | conntrack: T4333: migrate to new vyos_defined Jinja2 test | Christian Poessinger | |
2022-04-02 | udp-broadcast-relay: T4333: migrate to new vyos_defined Jinja2 test | Christian Poessinger | |
2022-04-01 | bgp: T4333: migrate to new vyos_defined Jinja2 test | Christian Poessinger | |
2022-03-31 | bgp: T4326: Add bgp parameter no-suppress-duplicates | Viacheslav Hletenko | |
Add new bgp parameter 'no-suppress-duplicates' set protocols bgp parameters no-suppress-duplicates | |||
2022-03-31 | Merge branch 'vyos:current' into ocserv_local_otp | goodNETnick | |
2022-03-24 | Merge pull request #1251 from srividya0208/T4288a | Christian Poessinger | |
ike-group: T4288 : close-action is missing in swanctl.conf | |||
2022-03-24 | ike-group: T4288 : close-action is missing in swanctl.conf | srividya0208 | |
close-action parameter is missing in the swanctl.conf file | |||
2022-03-17 | OSPF : T4304: Set import/export filter inter-area prefix | fett0 | |
2022-03-16 | frr: T4302: fix Jinja2 template to match new FRR syntax | Christian Poessinger | |
According to a wrong bug [1] there is no longer a vrf suffix available for interfaces. This got changed in [2] which no longer print vrf name for interface config when using vrf-lite. 1: https://github.com/FRRouting/frr/issues/10805 2: https://github.com/FRRouting/frr/pull/10411 | |||
2022-03-16 | ocserv: T4231: Added OTP support for Openconnect 2FA | goodNETnick | |
2022-03-15 | frr: T4302: upgrade to version 8.2 | Christian Poessinger | |
2022-03-12 | Merge branch 'T2493-nexthop-unchanged' of https://github.com/plett/vyos-1x ↵ | Christian Poessinger | |
into current * 'T2493-nexthop-unchanged' of https://github.com/plett/vyos-1x: policy: T2493 ip-next-hop unchanged & peer-address | |||
2022-03-09 | policy: T2493 ip-next-hop unchanged & peer-address | Paul Lettington | |
Also add ipv6-next-hop peer-address | |||
2022-03-07 | logrotate: T4250: Fixed logrotate config generation | zsdc | |
* Removed `/var/log/auth.log` and `/var/log/messages` from `/etc/logrotate.d/rsyslog`, because they conflict with VyOS-controlled items what leads to service error. * Removed generation config file for `/var/log/messages` from `system-syslog.py` - this should be done from `syslom logs` now. * Generate each logfile from `system syslog file` to a dedicated logrotate config file. * Fixed logrotate config file names in `/etc/rsyslog.d/vyos-rsyslog.conf`. * Added default logrotate settins for `/var/log/messages` | |||
2022-03-03 | static: T4283: support "reject" routes - emit an ICMP unreachable when matched | Christian Poessinger | |
2022-03-01 | flow-accounting: T4277: support sending flow-data via VRF interface | Christian Poessinger | |
It should be possible to send the gathered data via a VRF bound interface to the collector. This is somehow related to T3981 but it's the opposite side of the netflow process. set system flow-accounting vrf <name> | |||
2022-02-26 | lldp: T4272: minor bugfix in Jinja2 template for location | Christian Poessinger | |
2022-02-26 | lldp: T4272: migrate to get_config_dict() | Christian Poessinger | |
2022-02-25 | zone-policy: T2199: bugfix defaultValue usage | Christian Poessinger | |
Instead of hardcoding the default behavior inside the Jinaj2 template, all defaults are required to be specified inside teh XML definition. This is required to automatically render the appropriate CLI tab completion commands. | |||
2022-02-22 | Merge pull request #1230 from sever-sever/T1856 | Christian Poessinger | |
ipsec: T1856: Ability to set SA life bytes and packets | |||
2022-02-20 | ipsec: T3948: Add CLI site-to-site peer connection-type none | Viacheslav Hletenko | |
set vpn ipsec site-to-site peer 192.0.2.14 connection-type none | |||
2022-02-20 | ipsec: T1856: Ability to set SA life bytes and packets | Viacheslav Hletenko | |
set vpn ipsec esp-group grp-ESP life-bytes '100000' set vpn ipsec esp-group grp-ESP life-packets '2000000' | |||
2022-02-20 | Merge branch 't4203-dhcp' into current | Christian Poessinger | |
* t4203-dhcp: smoketest: dhcp: T4203: move testcase to base class static: T4203: obey interface dhcp default route distance interface: T4203: prevent DHCP client restart if not necessary | |||
2022-02-20 | Merge pull request #1226 from sever-sever/T4254 | Christian Poessinger | |
vpn: T4254: Add cisco_flexvpn and install_virtual_ip_on options | |||
2022-02-20 | static: T4203: obey interface dhcp default route distance | Christian Poessinger | |
Commit 05aa22dc ("protocols: static: T3680: do not delete DHCP received routes") added a bug whenever a static route is modified - the DHCP interface will always end up with metric 210 - if there was a default route over a DHCP interface. | |||
2022-02-19 | vpn: T4254: Add cisco_flexvpn and install_virtual_ip_on options | Viacheslav Hletenko | |
Ability to set Cisco FlexVPN vendor ID payload: charon.cisco_flexvpn charon.install_virtual_ip_on swanctl.connections.<conn>.vips = x.x.x.x, z.z.z.z set vpn ipsec options flexvpn set vpn ipsec options virtual-ip set vpn ipsec options interface tunX set vpn ipsec site-to-site peer x.x.x.x virtual-address x.x.x.x |