| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2024-02-03 | ipsec: T5998: add replay-windows setting | Christian Breunig | |
| The replay_window for child SA will always be 32 (hence enabled). Add a CLI node to explicitly change this. * set vpn ipsec site-to-site peer <name> replay-window <0-2040> | |||
| 2023-05-16 | T5226: Combine ipv4-address and ipv6-address validators | Indrajit Raychaudhuri | |
| Use a single ip-address validator to combine and replace ipv4-address and ipv6-address validators. | |||
| 2022-09-16 | ipsec: T4118: Change vpn ipsec syntax for IKE ESP and peer | Viacheslav Hletenko | |
| Migration and Change boolean nodes "enable/disable" to disable-xxxx, enable-xxxx and just xxx for VPN IPsec configurations - IKE changes: - replace 'ipsec ike-group <tag> mobike disable' => 'ipsec ike-group <tag> disable-mobike' - replace 'ipsec ike-group <tag> ikev2-reauth yes|no' => 'ipsec ike-group <tag> ikev2-reauth' - ESP changes: - replace 'ipsec esp-group <tag> compression enable' => 'ipsec esp-group <tag> compression' - PEER changes: - replace: 'peer <tag> id xxx' => 'peer <tag> local-id xxx' - replace: 'peer <tag> force-encapsulation enable' => 'peer <tag> force-udp-encapsulation' - add option: 'peer <tag> remote-address x.x.x.x' Add 'peer <name> remote-address <name>' via migration script | |||
| 2022-05-19 | ipsec: T2816: add completion help for IP addresses to local-address node | Christian Poessinger | |
| 2022-04-29 | xml: T4047: use full string match in the regex validator | Christian Poessinger | |
| 2022-03-07 | ipsec prefix: T4275: Fix for prefix val_help of remote-access and s2s vpn | srividya0208 | |
| It accepts network as the input value but the completion help is showing ip address, continuation of previous commit | |||
| 2021-07-17 | xml: provide common "pre-shared-secret" include block | Christian Poessinger | |
| 2021-07-07 | pki: T3642: Migrate rsa-keys to PKI configuration | sarthurdev | |
| 2021-07-04 | ipsec: T1210: T1251: add "local" traffic-selector include definition | Christian Poessinger | |
| Used by both site2site and remote-access/road-warrior VPN connections. | |||
| 2021-07-04 | ipsec: T2816: add include definition for ipsec local-address | Christian Poessinger | |
| 2021-07-03 | ipsec: T2816: provide x509 certificate base auth building blocks | Christian Poessinger | |
| 2021-07-03 | ipsec: T2816: provide esp and ike-group XML building block | Christian Poessinger | |
 |
index : vyos-1x.git | |
| VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git) |
| summaryrefslogtreecommitdiff |