Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-03-04 | vrf: T31: use embedded regex on 'vrf name' instead of python script | Christian Poessinger | |
2020-03-04 | vrf: T31: initial support for a VRF backend in XML/Python | Thomas Mangin | |
This is a work in progress to complete T31 whoever thought it was less than 1 hour of work was ..... optimistic. Only VRF vreation and show is supported right now. No interface can be bound to any one VRF. | |||
2020-02-27 | openvpn: T2075: add support for OpenVPN tls-crypt file option | Christian Poessinger | |
Encrypt and authenticate all control channel packets with the key from keyfile. Encrypting (and authenticating) control channel packets: * provides more privacy by hiding the certificate used for the TLS connection * makes it harder to identify OpenVPN traffic as such * provides "poor-man's" post-quantum security, against attackers who will never know the pre-shared key (i.e. no forward secrecy) | |||
2020-02-25 | login: T1948: sync banner and login node.def file | Christian Poessinger | |
2020-02-25 | Revert "login: T1948: also set properties for banner" | Christian Poessinger | |
This reverts commit 998361ed0ac972a6856f373f1fc86e8a73cf141b. | |||
2020-02-25 | login: T1948: also set properties for banner | Christian Poessinger | |
2020-02-25 | login: T1948: migrade local and radius configurations | Christian Poessinger | |
Splitting was not a good idea. By combining both we can create a RADIUS server XML include file which can be reused by multiple implementations to get a uniformed CLI for the users. | |||
2020-02-25 | login: radius: T2071: support disabling individual server | Christian Poessinger | |
2020-02-25 | login: user: radius: T1948: only allow IPv4 server address | Christian Poessinger | |
2020-02-23 | service-pppoe: T2067: Allow setting multiple service-names | hagbard | |
2020-02-23 | pppoe: T1318: declutter name-server CLI nodes | Christian Poessinger | |
Instead of letting the user choose between auto and none where auto is default, it makes more sesne to just offer an option to disable the default behavior. | |||
2020-02-23 | pppoe: T1318: migrate user-id and password nodes under an authentication node | Christian Poessinger | |
2020-02-23 | pppoe: T1318: rename link to source-interface | Christian Poessinger | |
2020-02-23 | pppoe: T1318: use include files for disable and descriptionx | Christian Poessinger | |
2020-02-23 | pppoe: T1318: rephrase help text on default-route | Christian Poessinger | |
2020-02-23 | interface-definitions: include: disable: rephrase help text | Christian Poessinger | |
2020-02-23 | pppoe: T1318: increase priority so PPPoE is run after bond interfaces | Christian Poessinger | |
2020-02-23 | pppoe: T1318: support interface description | Christian Poessinger | |
2020-02-23 | pppoe: T1318: add first version of new XML/Python implementation | Christian Poessinger | |
vyos@vyos# show interfaces pppoe pppoe pppoe0 { default-route force link eth2.7 mtu 400 name-server auto password 12345678 user-id vyos@vyos.io } | |||
2020-02-13 | macvlan: T1635: migrate pseudo-ethernet interface definition to XML/Python | Christian Poessinger | |
2020-02-13 | ddclient: T1908: CloudFlares zone option can now also be specified manually | Christian Poessinger | |
If there is no zone option given it will be "guessed" as in the past. This means (hostname -> resulting zone entry) domain.com -> com foo.domain.com -> domain.com bar.foo.domain.com -> foo.domain.com I have zero experience in the CloudFlare zone option what it is and what it does. SO maybe we still have a chance to auto render this setting. | |||
2020-02-10 | banner: T2024: fix type on pre-login node | Christian Poessinger | |
2020-02-10 | banner: T2024: migrate "system login banner" to XML/Python representation | Christian Poessinger | |
2020-02-09 | user: remove ssh-key completionHelper | Christian Poessinger | |
2020-02-09 | user: T2020: bugfix on wrong regex preventing ssh-ed25519 public keys | Christian Poessinger | |
2020-02-05 | Merge branch 't1948-system-login' of github.com:c-po/vyos-1x into current | Christian Poessinger | |
* 't1948-system-login' of github.com:c-po/vyos-1x: radius: T1948: add libnss-mapname support radius: T1948: rename server dictionary radius: T1948: supply PAM configuration template user: T1948: fix system user creation ogin: user: radius: T1948: use discrete configuration for each system login: T1948: remove obsolete config nodes "group" and "level" login: T1948: SSH keys can only be added after user has been created login: T1948: initial support for RADIUS configuration login: T1948: support for SSH keys login: T1948: add/remove local users login: T1948: initial rewrite in XML/Python options: T1919: remove broken comment | |||
2020-02-05 | ogin: user: radius: T1948: use discrete configuration for each system | Christian Poessinger | |
Split combined XML/Python code to individual code for local user accounts and RADIUS authenticated accounts. | |||
2020-02-06 | Merge pull request #212 from thomas-mangin/typo | Daniil Baturin | |
fix typo in interfaces l2tpv3 encapsulation property | |||
2020-02-05 | fix typo in interfaces l2tpv3 encapsulation property | Thomas Mangin | |
2020-02-05 | service https: T1585: add support for letsencrypt certificates | John Estabrook | |
2020-02-04 | service https: T1443: reorder elements for clarity | John Estabrook | |
2020-02-02 | login: T1948: add/remove local users | Christian Poessinger | |
2020-02-02 | login: T1948: initial rewrite in XML/Python | Christian Poessinger | |
2020-02-01 | sstp: shorten completion helper on "protocols" | Christian Poessinger | |
2020-02-01 | sstp: add XML valueHelp node for subnet definition | Christian Poessinger | |
2020-01-30 | vpn-pptp: adjusting name schemes | hagbard | |
2020-01-30 | Merge branch 't1896-remove-lldp-civic' of github.com:c-po/vyos-1x into current | Christian Poessinger | |
* 't1896-remove-lldp-civic' of github.com:c-po/vyos-1x: lldp: T1896: remove MED civic based location information | |||
2020-01-26 | service-ipoe: rename scripts and schemes | hagbard | |
2020-01-26 | Interfaces: unify interface help text | Christian Poessinger | |
2020-01-26 | WireGuard: rephrase constraint error message | Christian Poessinger | |
2020-01-26 | lldp: T1896: remove MED civic based location information | Christian Poessinger | |
Civic based location information was not working for quiet some time and as an unused feature we should drop it to keep the codebase more simple and maintainable. | |||
2020-01-25 | bonding: fix "arp-monitor target" help string | Christian Poessinger | |
2020-01-24 | pppoe-server: T1985: Enable ipv6 modules if ipv6 not denied | DmitriyEshenko | |
2020-01-23 | service-pppoe: T1956: support PADO-delay | hagbard | |
2020-01-22 | Merge pull request #202 from zdc/T1953 | Christian Poessinger | |
dynamic DNS: T1953: Relaxed service name check | |||
2020-01-16 | snmpd: T1964: SNMP Script-extensions allows names with spaces, | hagbard | |
but commit fails | |||
2020-01-14 | vrrp: T1884: Keep transition-script native behaviour and implement ↵ | DmitriyEshenko | |
transaction-script 'stop' | |||
2020-01-13 | vxlan: T1961: Adjusting MTU limits | kroy | |
2020-01-09 | service-snmp: T1955: snmp - cli config val_help missing | hagbard | |
* set for trap-(source|target) | |||
2020-01-09 | dynamic DNS: T1953: Relaxed service name check | zsdc | |
Internally, we can accept more than one server of each type for sending dynamic DNS updates, but due to a strong check in CLI, it is not possible to add more than one server with the same protocol (except "custom", but it allows to add only one more server). The patch relaxing this limitation by allowing adding as many servers with the same protocol, as needed. |