Age | Commit message (Collapse) | Author | |
---|---|---|---|
2022-05-31 | pki: T3642: Update conf scripts using changed PKI objects | sarthurdev | |
2022-05-31 | policy: T3976: bump version 2 -> 3 | Christian Poessinger | |
2022-05-31 | IPv6: T3976: add prefix-list and access-list option from ipv6 route-map | fett0 | |
2022-05-29 | Policy: T4450: Expand options for ip|ipv6 address match. Now support ↵ | Nicolas Fort | |
prefix-len on both matches. Also change help properties of route-source node. | |||
2022-05-29 | xml: reword static routing completion help | Christian Poessinger | |
2022-05-29 | eigrp: T2472: add missing <multi/> specifier when redistributing protocols | Christian Poessinger | |
2022-05-29 | eigrp: T2472: add "local-as" CLI node to specify ASN like under BGP | Christian Poessinger | |
2022-05-29 | eigrp: T2472: add basic template rendering and FRR communication | Christian Poessinger | |
2022-05-29 | rip: T4448: remove default version for RIP | Christian Poessinger | |
Commit f9e38622 ("rip: T4448: add support to set protocol version on an interface level") also added the versionspecified on a per interface level. the RIp version carried a default value of 2 which makes RIPv1 and RIPv2 no longer working which is dthe default for FRR. Remove the default "2" from the RIP version specifier to make this behavior work again. | |||
2022-05-29 | eigrp: vrf: T2773: prepare XML definitions for VRF instance | Christian Poessinger | |
2022-05-29 | eigrp: T2473: add XML definitions | sever-sever | |
2022-05-29 | Merge branch 'T4449' of https://github.com/nicolas-fort/vyos-1x into current | Christian Poessinger | |
* 'T4449' of https://github.com/nicolas-fort/vyos-1x: Policy: T4449: Extend matching options for route-map ip nexthop | |||
2022-05-28 | rip: T4448: add support to set protocol version on an interface level | Christian Poessinger | |
2022-05-28 | xml: rip: T4448: rename include files to match schema | Christian Poessinger | |
2022-05-28 | Policy: T4449: Extend matching options for route-map ip nexthop | Nicolas Fort | |
2022-05-28 | rip: T4448: add support for explicit version selection | Christian Poessinger | |
2022-05-27 | dhcp6: pd: T4447: bugfix sla-id limits (must be greater then 128 | Christian Poessinger | |
The sla-id parameter of DHCPv6 prefix delegations is limited to 128. While this is enough to use all /64 subnets of a /57 prefix, with a /56 prefix that is no longer sufficient. Increased sla-id length tp 64535 so one could delegate an entire /48. | |||
2022-05-25 | configtest: T4382: missing 'ipv4-options' in 'interfaces openvpn' | John Estabrook | |
As a result of the firewall/5-to-6 migration script, 'firewall options interface vtun0 adjust-mss' is moved to: 'interfaces openvpn vtun0 ip adjust-mss 1380' however, interfaces-openvpn.xml.in is missing the include file ipv4-options.xml.i. Add missing include file. | |||
2022-05-25 | Merge pull request #1088 from zdc/T4020-sagitta | Daniil Baturin | |
FRR: T4020: Added CLI options for FRR daemons | |||
2022-05-21 | xml: flow-accounting: T4437: fix node help | Christian Poessinger | |
2022-05-21 | xml: nhrp: fix CLI description | Christian Poessinger | |
2022-05-20 | Merge pull request #1317 from sever-sever/T4418 | Christian Poessinger | |
monitoring: T4418: Add output plugin azure-data-explorer | |||
2022-05-20 | monitoring: T4418: Add output plugin azure-data-explorer | Viacheslav Hletenko | |
Add output telegraf Plugin Azure Data Explorer set service monitoring telegraf azure-data-explorer authentication client-id 'x' set service monitoring telegraf azure-data-explorer authentication client-secret 'x' set service monitoring telegraf azure-data-explorer authentication tenant-id 'x' set service monitoring telegraf azure-data-explorer database 'x' set service monitoring telegraf azure-data-explorer group-metrics 'single-table' set service monitoring telegraf azure-data-explorer url 'http://localhost.loc' | |||
2022-05-19 | ipsec: T2816: add completion help for IP addresses to local-address node | Christian Poessinger | |
2022-05-16 | Merge pull request #1290 from sever-sever/T4373 | Christian Poessinger | |
ppppoe-server: T4373: Add option multiplier for correct shaping | |||
2022-05-16 | pppoe-server: T4373: Add option multiplier for correct shaping | Viacheslav Hletenko | |
Multiplier option is required by some vendors for correct shaping For RADIUS based rate-limits edit service pppoe-server set authentication radius rate-limit multiplier '0.001' | |||
2022-05-13 | sshguard: T4408: rename whitelist-address -> allow-from | Christian Poessinger | |
We do not only allow individual host addresses but also prefixes. | |||
2022-05-13 | Merge pull request #1320 from sever-sever/T4408 | Christian Poessinger | |
sshguard: T4408: Add service ssh dynamic-protection | |||
2022-05-12 | sshguard: T4408: Add service ssh dynamic-protection | Viacheslav Hletenko | |
Sshguard protects hosts from brute-force attacks Can inspect logs and block "bad" addresses by threshold Auto-generate rules for nftables When service stopped all generated rules are deleted nft "type filter hook input priority filter - 10" set service ssh dynamic-protection set service ssh dynamic-protection block-time 120 set service ssh dynamic-protection detect-time 1800 set service ssh dynamic-protection threshold 30 set service ssh dynamic-protection whitelist-address 192.0.2.1 | |||
2022-05-12 | vrrp: T4417: bugfix service startup priority | Christian Poessinger | |
2022-05-12 | policy: T4424: Fix incorrect format for IPv6 prefixes | Viacheslav Hletenko | |
2022-05-09 | Merge pull request #1279 from nicolas-fort/T990 | Christian Poessinger | |
Firewall: T990: Add snat and dnat connection status on firewall | |||
2022-05-08 | container: T4353: fix conf-mode script name | Christian Poessinger | |
2022-05-08 | policy: evpn: T3739: support "set evpn gateway-ip" | Christian Poessinger | |
2022-05-07 | vrf: T4419: support to disable IP forwarding within a given VRF | Christian Poessinger | |
2022-05-06 | ocserv: T4231: XML OTP support must not be added globally - only for openconnect | Christian Poessinger | |
2022-05-05 | Merge pull request #1312 from sever-sever/T4410 | Christian Poessinger | |
monitoring: T4410: Add telegraf output Plugin http for Splunk | |||
2022-05-05 | policy: T4414: add support for route-map "as-path prepend last-as x" | Christian Poessinger | |
2022-05-05 | monitoring: T4410: Add telegraf output Plugin http for Splunk | Viacheslav Hletenko | |
Ability to send HTTP output to Splunk via telegraf set service monitoring telegraf splunk authentication insecure set service monitoring telegraf splunk authentication token 'xxx' set service monitoring telegraf splunk url 'https://x.x.x.x' | |||
2022-05-03 | monitoring: T4315: Add telegraf output plugin prometheus-client | Viacheslav Hletenko | |
Add output Plugin "prometheus-client" for telegraf: set service monitoring telegraf prometheus-client | |||
2022-05-01 | container: T4353: fix Jinja2 linting errors | Christian Poessinger | |
2022-04-29 | T2216: containers need to be added via "add container image" in advance ↵ | Christian Poessinger | |
before using them | |||
2022-04-29 | xml: T4047: use full string match in the regex validator | Christian Poessinger | |
2022-04-28 | arp: T4397: bump component version number | Christian Poessinger | |
2022-04-28 | arp: T4397: change CLI syntax to support interface and VRF bound ARP entries | Christian Poessinger | |
* set protocols static arp interface eth0 address 192.0.2.1 mac 01:23:45:67:89:01 | |||
2022-04-26 | dhcp: T4389: use lowercase vendor name in CLI | Christian Poessinger | |
2022-04-26 | dhcp: T4389: fix vendor name, it is ubiquiti with an i, not yx | Christian Poessinger | |
2022-04-23 | Firewall: T990: Modifications for new connection-status cli | Nicolas Fort | |
2022-04-22 | dhcp: T4389: add vendor option support for Ubiquity Unifi controller | Christian Poessinger | |
vyos@vyos# show service dhcp-server shared-network-name LAN { subnet 172.18.201.0/24 { default-router 172.18.201.1 name-server 172.18.201.2 range 0 { start 172.18.201.101 stop 172.18.201.109 } vendor-option { ubiquity { unifi-controller 172.16.100.1 } } } } | |||
2022-04-22 | dhcpv6: T4357: rename vsio -> vendor-option | Christian Poessinger | |