Age | Commit message (Collapse) | Author | |
---|---|---|---|
2023-02-10 | interfaces: T4995: rename user -> username CLI node for pppoe, wwan and ↵ | Christian Breunig | |
sstp-client | |||
2023-02-10 | Merge pull request #1808 from sever-sever/T1993 | Christian Breunig | |
T1993: PPPoE-server add section shaper and fwmark option | |||
2023-02-09 | wwan: T3622: add constraint for username/password CLI nodes | Christian Breunig | |
- Username is up to 128 alphanumerical characters, -, _, #, and @ - Password is limited to ASCII characters only, with a total lenght of 128 | |||
2023-02-09 | Revert "container: T4959: Add container registry authentication config for ↵ | Christian Breunig | |
containers" This reverts commit b17251334c57c2f6875c19ad4e6c6127aa9e1811. | |||
2023-02-09 | Merge pull request #1790 from Zen3515/current-add-container-login | Christian Breunig | |
container: T4959: Add container registry authentication config for containers | |||
2023-02-09 | Merge pull request #1803 from sever-sever/T4971 | Christian Breunig | |
T4971: PPPoE server add named ip pool and attr Framed-Pool | |||
2023-02-08 | T1993: PPPoE-server add section shaper and fwmark option | Viacheslav Hletenko | |
Extended PPPoE-server rate-limiter to avoid shaping marked resources Often this feature needs for ISP, which provides access to some IX or its resources. set service pppoe-server shaper fwmark '223' | |||
2023-02-08 | T2603: PPPoE-server change default min-mtu value 1280 | Viacheslav Hletenko | |
Minimum acceptable MTU. If client will try to negotiate less then specified MTU then it will be NAKed or disconnected if rejects greater MTU. Change 'min-mtu' from 1492 to 1280 | |||
2023-02-07 | T4971: PPPoE server add named ip pool and attr Framed-Pool | Viacheslav Hletenko | |
Add a new feature to allow to use named pools Also it can be used with RADIUS attribute 'Framed-Pool' set service pppoe-server client-ip-pool name POOL1 gateway-address '192.0.2.1' set service pppoe-server client-ip-pool name POOL1 subnet '192.0.2.0/24' | |||
2023-02-04 | dhcp-relay: xml: T2408: fix CLI constraints | Christian Breunig | |
The old interface-name validator was replaced by a faster implementation in OCaml. Interface validator can be selected by including the appropriate code snippet. | |||
2023-02-04 | dhcp-relay: T2408: use Warning() on deprecated interface CLI node | Christian Breunig | |
2023-02-04 | Merge pull request #1603 from nicolas-fort/T2408 | Christian Breunig | |
T2408: dhcp-relay: Add listen-interface and upstream-interface feature | |||
2023-02-04 | qos: xml: T4284: policy-name is alpha-numeric only | Christian Breunig | |
2023-02-04 | qos: xml: T4284: bandwidh unit suffix is optional | Christian Breunig | |
2023-02-04 | bgp: T4817: improve help and constraint error messages | Christian Breunig | |
2023-02-04 | bgp: T4817: add local-role (RFC9234) support for peer-groups | Christian Breunig | |
Extend commit 8a75e92d ("T4817 added support for RFC 9234") to also support peer-groups. | |||
2023-02-04 | qos: T4969: update "match mark" value range | Christian Breunig | |
This improves commit d2885ad0 ("T4969: fix class match mark number"). | |||
2023-02-04 | Merge pull request #1792 from DaniilHarun/current | Christian Breunig | |
T4969: fix class match mark number | |||
2023-02-04 | T4817 added support for RFC 9234 | Kyle McClammy | |
2023-01-31 | T4969: fix class match mark number | DaniilHarun | |
2023-01-30 | container: T4959: Add container registry authentication config for containers | Zen3515 | |
2023-01-30 | Merge pull request #1761 from sever-sever/T4916-curr | Viacheslav Hletenko | |
T4916: Rewrite IPsec peer authentication and psk migration | |||
2023-01-29 | xml: T1579: allow zero length for description | Christian Breunig | |
Some older VyOS 1.3 installations seem to use zero-length description fields. Do not break them! | |||
2023-01-28 | vrrp: T1297: improve gratuitous ARP default value handling and help strings | Christian Breunig | |
2023-01-28 | T4958: ocserv: openconnect: adds support for configuring RADIUS accounting | Jamie Austin | |
Adds CLI configuration options to configure RADIUS accounting for OpenConnect VPN sessions. This functionality cannot be used outside of the RADIUS OpenConnect VPN authentication mode | |||
2023-01-26 | T4916: Rewrite IPsec peer authentication and psk migration | Viacheslav Hletenko | |
Rewrite strongswan IPsec authentication to reflect structure from swanctl.conf The most important change is that more than one local/remote ID in the same auth entry should be allowed replace: 'ipsec site-to-site peer <tag> authentication pre-shared-secret xxx' => 'ipsec authentication psk <tag> secret xxx' set vpn ipsec authentication psk <tag> id '192.0.2.1' set vpn ipsec authentication psk <tag> id '192.0.2.2' set vpn ipsec authentication psk <tag> secret 'xxx' set vpn ipsec site-to-site peer <tag> authentication local-id '192.0.2.1' set vpn ipsec site-to-site peer <tag> authentication mode 'pre-shared-secret' set vpn ipsec site-to-site peer <tag> authentication remote-id '192.0.2.2' Add template filter for Jinja2 'generate_uuid4' | |||
2023-01-25 | config-mgmt: T4957: set priority | John Estabrook | |
2023-01-25 | Merge pull request #1777 from nicolas-fort/T1297-garp | Christian Breunig | |
T1297: VRRP: add garp options to vrrp | |||
2023-01-25 | T1297: VRRP: add garp options to vrrp | Nicolas Fort | |
2023-01-24 | vrrp: T4109: improve "address" CLI node help strings | Christian Breunig | |
CLI expects ipv4net/ipv6net but the help strings only suggested it should be ipv4/ipv6. This has been corrected. | |||
2023-01-22 | pppoe: T4948: add CLI option to allow definition of host-uniq flag | Christian Breunig | |
Some ISPs seem to use the host-uniq flag to authenticate client equipment. Add CLI option in VyOS to allow specification of the host-uniq flag. set interfaces pppoe pppoeN host-uniq <value> | |||
2023-01-21 | container: T4947: support mounting container volumes as ro or rw | Christian Breunig | |
Whenever a container is used and a folder is mounted, this happenes as read-write which is the default in Docker/Podman - so is the default in VyOS. A new option is added "set container name foo volume mode <ro|rw>" to specify explicitly if rw (default) or ro should be used for this mounted folder. | |||
2023-01-20 | Merge pull request #1767 from jestabro/config-mgmt | John Estabrook | |
config-mgmt: T4942: rewrite vyatta-config-mgmt to Python/XML | |||
2023-01-20 | config-mgmt: T4942: add interface-definitions | John Estabrook | |
2023-01-19 | T4939: VRRP startup delay for bonding fix | fett0 | |
2023-01-19 | T4939: VRRP startup delay for bonding fix | fett0 | |
2023-01-19 | T4939: VRRP startup delay for bonding fix | fett0 | |
2023-01-19 | Merge pull request #1765 from aapostoliuk/T4925-sagitta | Christian Breunig | |
ipsec: T4925: Added PRF into IKE group | |||
2023-01-19 | Merge pull request #1697 from nicolas-fort/snmp_rework | Christian Breunig | |
T4857: SNMP: Implement FRR SNMP Recomendations | |||
2023-01-18 | ocserv: T4656: only one IP address is supported to listen on | Christian Breunig | |
2023-01-18 | T4857: change description in cli, and change word oid to uppercase OIDs in ↵ | Nicolas Fort | |
warning message | |||
2023-01-18 | ipsec: T4925: Added PRF into IKE group | aapostoliuk | |
Added the possibility to configure Pseudo-Random Functions (PRF) in IKE group set vpn ipsec ike-group <Ike-grp> proposal <number> prf <PRF> | |||
2023-01-18 | T4857: Cleaning pr | Nicolas Fort | |
2023-01-14 | ntp: T3008: migrate from ntpd to chrony | Christian Breunig | |
* Move CLI from "system ntp" -> "service ntp" * Drop NTP server option preempt as not supported by chrony | |||
2023-01-12 | T4118: Add default value any for connection remote-id | Viacheslav Hletenko | |
If IPsec "peer <tag> authentication remote-id" is not set it should be "%any" by default https://docs.strongswan.org/docs/5.9/swanctl/swanctlConf.html#_connections_conn_remote Set XML default value in use it in the python vpn_ipsec.py script | |||
2023-01-07 | xml: T1579: merge generic-description.xml.i and interface/description.xml.i | Christian Poessinger | |
No need to have two distinct include blocks as one superseeds the other. Also this makes the entire behavior of "description" CLI node simpler. | |||
2023-01-06 | xml: T4883: allow whitespace in generic-description | Christian Poessinger | |
2023-01-05 | static: T4883: re-use description XML building block | Christian Poessinger | |
2023-01-05 | Merge pull request #1710 from dmbaturin/routing-table-descriptions | Christian Breunig | |
T4883: add a description field for routing tables | |||
2023-01-04 | ssh: T2651: add source-interface support ssh-client | Christian Poessinger | |