Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-09-27 | nat66: T3853: Change priority to 500 | Viacheslav | |
Service ndppd should start after tunnels. | |||
2021-09-26 | vxlan: T3867: add multicast validator for group address | Christian Poessinger | |
The group CLI node takes a multicast IPv4 or IPv6 address - this must be input validated to not case any OS exception cpo@LR1.wue3# show interfaces vxlan vxlan vxlan0 { + group 254.0.0.1 source-address 172.18.254.201 + source-interface dum0 vni 10 } Results in OSError beeing rasied with the following context: Error: argument "254.0.0.1" is wrong: invalid group address | |||
2021-09-26 | ospf: T3757: add completion help when refering to area ID | Christian Poessinger | |
This extends commit 6f87d8c910 ("ospf: T3757: support to configure area at an interface level") with a completion helper to show which Area ID is already in use when configuring the area for an interface. | |||
2021-09-26 | ospfv3: T3859: add "log-adjacency-changes" CLI command | Christian Poessinger | |
2021-09-25 | bgp: T3657: add "neighbor fe80::202 interface source-interface 'eth1'" command | Christian Poessinger | |
2021-09-25 | bgp: xml: T2387: use "generic-description" building block over BGP specific one | Christian Poessinger | |
There is no benefit in the BGP specific definition of a "description" node. | |||
2021-09-23 | T3850: Revert "login: T1948: add missing ssh-public key name regex" | Christian Poessinger | |
This reverts commit 514da738173696c70440c959b9d7ec9afd77fbae. | |||
2021-09-23 | openvpn: T3642: Add option for TLS 1.3 | Nicolas Riebesel | |
2021-09-21 | vrrp: keepalived: T3847: migrate/streamline CLI options | Christian Poessinger | |
Rename virtual-address -> address as we always talk about an IP address. | |||
2021-09-21 | vrrp: keepalived: T3847: add common transition-script building block | Christian Poessinger | |
This is used for both VRRP groups and sync-groups. | |||
2021-09-21 | vrrp: keepalived: T3847: remove "transition-script mode-force" option | Christian Poessinger | |
2021-09-21 | vrrp: keepalived: T616: use common description building block | Christian Poessinger | |
2021-09-21 | vrrp: keepalived: T3847: migrate to get_config_dict() | Christian Poessinger | |
2021-09-21 | xml: vrrp: T616: add missing valueHelp for "authentication type" | Christian Poessinger | |
2021-09-21 | dhcp-server: T3839: support domain-search and ntp-server config per ↵ | Christian Poessinger | |
shared-network | |||
2021-09-21 | xml: ospf: fix routing-passive-interface-xml.i include | Christian Poessinger | |
Commit a8b2e52148d ("xml: Update routing-passive-interface-xml.i file extension to standard .xml.i") only altered the RIP include statement but did not alter the OSPF include. | |||
2021-09-20 | xml: Update routing-passive-interface-xml.i file extension to standard .xml.i | sarthurdev | |
2021-09-19 | dhcp-server: T3672: re-add missing "name" CLI option | Christian Poessinger | |
This option is mandatory and must be user configurable as it needs to match on both sides. | |||
2021-09-19 | xml: dhcp-server: move building blocks to dhcp subdirectory | Christian Poessinger | |
2021-09-19 | dhcp-server: T3841: add option to perform ICMP check before address assignment | Christian Poessinger | |
2021-09-19 | dhcp-server: T3672: only one failover peer is supported | Christian Poessinger | |
2021-09-18 | T3840: Allow larger DNS forwarding cache sizes | Lucas Christian | |
2021-09-18 | container: T2216: add IPv6 support to container networks | Christian Poessinger | |
2021-09-18 | dhcp-server: T3839: support name-servers and domain config per shared-network | Christian Poessinger | |
DHCP servers "shared-network" level only makes sense if one can specify configuration items that can be inherited by individual subnets. This is now possible for name-servers and the domain-name. set service dhcp-server shared-network-name LAN domain-name 'vyos.net' set service dhcp-server shared-network-name LAN name-server '192.0.2.1' | |||
2021-09-18 | dhcp-server: xml: use description building block | Christian Poessinger | |
2021-09-18 | dhcpv6-server: xml: add description CLI node | Christian Poessinger | |
2021-09-18 | dhcp-server: T3838: rename dns-server to name-server node | Christian Poessinger | |
IPv4 DHCP uses "dns-server" to specify one or more name-servers for a given pool. In order to use the same CLI syntax this should be renamed to name-server, which is already the case for DHCPv6. | |||
2021-09-18 | dhcp-server: T1968: allow multiple static-routes to be configured | Christian Poessinger | |
vyos@vyos# show service dhcp-server shared-network-name LAN { subnet 10.0.0.0/24 { default-router 10.0.0.1 dns-server 194.145.150.1 lease 88 range 0 { start 10.0.0.100 stop 10.0.0.200 } static-route 192.168.10.0/24 { next-hop 10.0.0.2 } static-route 192.168.20.0/24 { router 10.0.0.2 } } } | |||
2021-09-15 | typo: remove unnecessary 'i' from help | Javinator9889 | |
2021-09-14 | ipsec: T3828: Update interface definitions for new behaviour | sarthurdev | |
2021-09-10 | squid: T3810: Node source-group address should be multi | Viacheslav | |
2021-09-06 | pki: xml: T3642: use "txt" as format identifier | Christian Poessinger | |
2021-09-05 | name-server: T3804: merge "system name-servers-dhcp" into "system name-server" | Christian Poessinger | |
We have "set system name-server <ipv4|ipv6>" to specify a name-server IP address we wan't to use. We also have "set system name-servers-dhcp <interface>" which does the same, but the name-server in question is retrieved via DHCP. Both CLI nodes are combined under "set system name-server <ipv4|ipv6|interface>" to keep things as they are in real life - we need a name-server. (cherry picked from commit 2ecf7a9f9cbe9359457bd23b4a0c45f3763123c7) | |||
2021-09-04 | bgp: T3798: "replace-as" option can only be used when "no-prepend" is defined | Christian Poessinger | |
Commit 5f1c1ae4 ("bgp: T3798: add support for neighbor local-as <n> replace-as") added support for a new CLI option when the local-as is changed for a specified neighbor or peer-group. There was an error in the CLI / design as the "replace-as" option can only be used when "no-prepend" is defined. Thus "no-prepend" became a <node> and the new "replace-as" leafNode is now a child of "no-prepend". | |||
2021-09-03 | bgp: T3798: add support for neighbor local-as <n> replace-as | Christian Poessinger | |
2021-09-01 | login: T1948: add missing ssh-public key name regex | Christian Poessinger | |
2021-09-01 | login: T1948: fix username regex - add missing start ^ and end $ | Christian Poessinger | |
2021-08-31 | ssh: T3789: add custom validator for base64 encoded CLI data | Christian Poessinger | |
SSH keys used for remote login are supplied as base64 encoded data on the CLI. The key is not validated, thus an invalid copy/pasted key will render the login useless. This commit adds a custom and re-usable validator which check if the data is properly base64 encoded. | |||
2021-08-30 | ethernet: T3787: remove deprecated UDP fragmentation offloading option | Christian Poessinger | |
Deprecated in the Linux Kernel by commit 08a00fea6de277df12ccfadc21 ("net: Remove references to NETIF_F_UFO from ethtool."). (cherry picked from commit f5e46ee6cc2b6c1c1869e26beca4ccd5bf52b62f) | |||
2021-08-29 | xml: add missing "u32:" value declarator on integer ranges | Christian Poessinger | |
2021-08-29 | ospf: T3236: add possibility to redistribute "table" | Christian Poessinger | |
Add new CLI command: * "set protocols ospf redistribute table <n>" | |||
2021-08-29 | ospf: xml: T3236: update help strings | Christian Poessinger | |
2021-08-27 | ipsec: T1210: Jinj2 template did not honor inactivity/timeout setting | Christian Poessinger | |
2021-08-26 | Merge pull request #965 from c-po/t3739-evpn-route-map | Christian Poessinger | |
bgp: evpn: T3739: add route-map match support | |||
2021-08-26 | ipsec: T1210: support road-warrior IP assignment via RADIUS Framed-IP-Address | Christian Poessinger | |
Extended CLI command: "set vpn ipsec remote-access connection rw pool" with a "radius" option. | |||
2021-08-24 | bgp: T3759: "l2vpn evpn" and ipv4/ipv6 safi route-targets differ | Christian Poessinger | |
The "l2vpn evpn" address-family route-target command only accepts a single route-target value consisting of (A.B.C.D:MN|EF:OPQR|GHJK:MN). The "ipv4-unicast or ipv6-unicast" address-family route-target command for VPNs support multiple, whitespace separated route-target values. This commit adds a new custom validator named "bgp-route-target" with a --single and a --multi option to pass one or more route-target values. | |||
2021-08-24 | policy: T2425: rename validator large-community-list -> bgp-large-community-list | Christian Poessinger | |
... as we will get another bgp route-target validator soon. | |||
2021-08-23 | container: T2216: add option to "disable" a container | Christian Poessinger | |
2021-08-23 | container: T2216: use common "generic-description.xml.i" building block | Christian Poessinger | |
2021-08-23 | container: T2216: increase default memory limit to 512MB | Christian Poessinger | |