summaryrefslogtreecommitdiff
path: root/interface-definitions
AgeCommit message (Collapse)Author
2020-03-24router-advert: T1831: new implementation using XML and PythonChristian Poessinger
2020-03-23tunnel: T31: add support for vrf on tunnelsThomas Mangin
2020-03-22tunnel: T2028: move interface tunnel to XML/PythonThomas Mangin
This patch migrates the "interface tunnel" section to xml/python
2020-03-22sstp: T2150: use full file path on SSL certificatesChristian Poessinger
2020-03-21salt: import salt-minion configuration from vyos-salt-minionChristian Poessinger
2020-03-20sstp: T2008: migrate SSL certificate nodesChristian Poessinger
2020-03-20sstp: T2006: fix valueHelp and validators for numeric valuesChristian Poessinger
2020-03-20sstp: T2008: remove req-limit config nodeChristian Poessinger
Limiting the amount of requests passed to a server seems to be the wrong way to tackle a problem.
2020-03-20sstp: T2110: use uniform RADIUS CLI syntaxChristian Poessinger
- migrate RADIUS configuration to a more uniform syntax accross the system - authentication radius-server x.x.x.x to authentication radius server x.x.x.x - authentication radius-settings to authentication radius
2020-03-20sstp: T2008: dns: unwind configurationChristian Poessinger
2020-03-20sstp: T2008: move to vpn nodeChristian Poessinger
2020-03-20sstp: T2007: fix MTU boundariesChristian Poessinger
2020-03-19Merge pull request #247 from DmitriyEshenko/mpls-implChristian Poessinger
mpls: T915: Basic MPLS implementation
2020-03-18mpls: T915: Basic MPLS implementationDmitriyEshenko
2020-03-16syslog: T2131: improve valueHelpChristian Poessinger
2020-03-16syslog: T2131: add generic fqdn validatorChristian Poessinger
2020-03-08radius: T2110: move timeout back to system-loginChristian Poessinger
... as e.g. wireless interfaces can not have a timeout specified.
2020-03-08wireless: radius: T2110: migrate to XML includeChristian Poessinger
2020-03-08radius: T2110: provide uniform XML include file for server configurationChristian Poessinger
2020-03-08vrf: T31: enable vrf support for wireless interfaceChristian Poessinger
2020-03-08vrf: T31: enable vrf support for pseudo-ethernet/macvlan interfaceChristian Poessinger
2020-03-08vrf: T31: support VRF usage on VLAN/VIF interfacesChristian Poessinger
2020-03-07vrf: T31: enable vrf support for pppoe interfaceChristian Poessinger
2020-03-06vrf: T31: enable vrf support for bridge interfaceChristian Poessinger
2020-03-06vrf: T31: enable vrf support for bonding interfaceChristian Poessinger
2020-03-06vrf: T31: enable vrf support for ethernet interfaceChristian Poessinger
2020-03-04vrf: T31: enable vrf support for dummy interfaceChristian Poessinger
2020-03-04vrf: T31: rename 'vrf disable-bind-to-all ipv4' to 'vrf bind-to-all'Christian Poessinger
By default the scope of the port bindings for unbound sockets is limited to the default VRF. That is, it will not be matched by packets arriving on interfaces enslaved to an l3mdev and processes may bind to the same port if they bind to an l3mdev. TCP & UDP services running in the default VRF context (ie., not bound to any VRF device) can work across all VRF domains by enabling the 'vrf bind-to-all' option.
2020-03-04vrf: T31: support add/remove of interfaces from vrfChristian Poessinger
2020-03-04xml: include: description: adjust help messageChristian Poessinger
2020-03-04vrf: T31: improve help for routing tableChristian Poessinger
2020-03-04vrf: T31: reuse interface-description.xml.i for instance descriptionChristian Poessinger
2020-03-04vrf: T31: use embedded regex on 'vrf name' instead of python scriptChristian Poessinger
2020-03-04vrf: T31: initial support for a VRF backend in XML/PythonThomas Mangin
This is a work in progress to complete T31 whoever thought it was less than 1 hour of work was ..... optimistic. Only VRF vreation and show is supported right now. No interface can be bound to any one VRF.
2020-02-27openvpn: T2075: add support for OpenVPN tls-crypt file optionChristian Poessinger
Encrypt and authenticate all control channel packets with the key from keyfile. Encrypting (and authenticating) control channel packets: * provides more privacy by hiding the certificate used for the TLS connection * makes it harder to identify OpenVPN traffic as such * provides "poor-man's" post-quantum security, against attackers who will never know the pre-shared key (i.e. no forward secrecy)
2020-02-25login: T1948: sync banner and login node.def fileChristian Poessinger
2020-02-25Revert "login: T1948: also set properties for banner"Christian Poessinger
This reverts commit 998361ed0ac972a6856f373f1fc86e8a73cf141b.
2020-02-25login: T1948: also set properties for bannerChristian Poessinger
2020-02-25login: T1948: migrade local and radius configurationsChristian Poessinger
Splitting was not a good idea. By combining both we can create a RADIUS server XML include file which can be reused by multiple implementations to get a uniformed CLI for the users.
2020-02-25login: radius: T2071: support disabling individual serverChristian Poessinger
2020-02-25login: user: radius: T1948: only allow IPv4 server addressChristian Poessinger
2020-02-23service-pppoe: T2067: Allow setting multiple service-nameshagbard
2020-02-23pppoe: T1318: declutter name-server CLI nodesChristian Poessinger
Instead of letting the user choose between auto and none where auto is default, it makes more sesne to just offer an option to disable the default behavior.
2020-02-23pppoe: T1318: migrate user-id and password nodes under an authentication nodeChristian Poessinger
2020-02-23pppoe: T1318: rename link to source-interfaceChristian Poessinger
2020-02-23pppoe: T1318: use include files for disable and descriptionxChristian Poessinger
2020-02-23pppoe: T1318: rephrase help text on default-routeChristian Poessinger
2020-02-23interface-definitions: include: disable: rephrase help textChristian Poessinger
2020-02-23pppoe: T1318: increase priority so PPPoE is run after bond interfacesChristian Poessinger
2020-02-23pppoe: T1318: support interface descriptionChristian Poessinger
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-16 23:01:26 +0000