Age | Commit message (Collapse) | Author | |
---|---|---|---|
2023-03-01 | Merge pull request #1854 from Yuanandcircle/current | Christian Breunig | |
policy: T5035: Add more actions to policy route rule | |||
2023-02-28 | T4967: xml: provide re-usable constraint for CLI host-name definitions | Christian Breunig | |
2023-02-28 | Merge pull request #1857 from nicolas-fort/nft_queue | Christian Breunig | |
T5037: Firewall: Add queue action and options to firewall | |||
2023-02-28 | T4967: Allow setting container hostname | Viacheslav Hletenko | |
Ability setting container hostname This host name is used as /etc/hostname set container name <tag> host-name 'mybox' | |||
2023-02-28 | T5037: Firewall: Add queue action and options to firewall | Nicolas Fort | |
2023-02-28 | Merge branch 'vyos:current' into current | Youyuan | |
2023-02-28 | Merge pull request #1800 from vfreex/feature-babel | Christian Breunig | |
T4977: Add Babel routing protocol support | |||
2023-02-28 | Merge pull request #1784 from Zen3515/current-add-container-command-arg | Christian Breunig | |
container: T4014: Add `command`, `arg` and `entrypoint` configuration options for containers | |||
2023-02-26 | policy: T5035: Add more actions to policy route rule | Youyuan | |
2023-02-25 | tunnel: T5034: migrate "multicast enable" CLI node to enable-multicast | Christian Breunig | |
Tunnel interface multicast settings can be "enabled or disabled". As we prefer valueless nodes, and the linux kernel default is "disabled" we should add a set interfaces tunnel tunXX enable-multicast command | |||
2023-02-23 | T5017: Add interface ifbX to constraint interface-name | Viacheslav Hletenko | |
2023-02-22 | T5025: Fix timezones and validator use timedatectl | Viacheslav Hletenko | |
Fix timezones completion help and validotor Use 'timedatectl' insted of find zoneinfo | |||
2023-02-18 | T4886: allow connection-mark 0 value, which is acceptable | Nicolas Fort | |
2023-02-17 | qos: classes: helptext: T5015: Escape % in printf | Silvan Raijer | |
2023-02-17 | Merge pull request #1826 from aapostoliuk/T5008-sagitta | Christian Breunig | |
macsec: T5008: Changed length of CKN to (2..64 hex-digits) | |||
2023-02-17 | T5005: PPPoE server allow any login with option noauth | Viacheslav Hletenko | |
Disabling authentication is useful in emergency situations (e.g. RADIUS server is down) or testing purposes. Clients can connect with any login and username. set service pppoe-server authentication mode 'noauth' | |||
2023-02-17 | macsec: T5008: Changed length of CKN to (2..64 hex-digits) | aapostoliuk | |
Based on wpa_supplicant documentation. mka_ckn (CKN = CAK Name) takes a 1..32-bytes (8..256 bit) hex-string (2..64 hex-digits) Changed allowable length of CKN from strong 64 hex-digits to the range (2..64 hex-digits) | |||
2023-02-16 | T5002: Add uk United Kindom keymap | Viacheslav Hletenko | |
set system option keyboard-layout uk | |||
2023-02-15 | ipsec: T4593: Migrate and remove legacy `include-ipsec` nodes | sarthurdev | |
Not supported with swanctl | |||
2023-02-13 | ipsec: T4968: Added default values to dpd and close action | aapostoliuk | |
Based on https://docs.strongswan.org/docs/5.9/swanctl/swanctlConf.html Added default value to dpd_action - clear Added default value to close_action - none | |||
2023-02-12 | pppoe: wwan: T4998: fix typo in constraintErrorMessage | Christian Breunig | |
2023-02-12 | pppoe: wwan: T4998: fix username not accepting dot (.) | Christian Breunig | |
This fixes a regressin introduced in commit e22e9c9210cb5 ("wwan: T3622: add constraint for username/password CLI nodes"). | |||
2023-02-10 | Merge pull request #1805 from nicolas-fort/T4857-frr-fix | Christian Breunig | |
T4857: snmp: Fix error when not defining client|network under community | |||
2023-02-10 | snmp: T4857: explicitly define default community networks 0.0.0.0/0 and ::/0 | Christian Breunig | |
After the RESTRICTED view was introduced snmpd requires a network to be specified. Before adding the RESTRICTED view snmpd always assumed the default network 0.0.0.0/0. This commit re-adds the build in default networks for IPv4 and IPv6 and exposes it as a proper default to the CLI so the user is informed about it: vyos@vyos# set service snmp community foooo Possible completions: authorization Authorization type (default: ro) + client IP address of SNMP client allowed to contact system + network Subnet of SNMP client(s) allowed to contact system (default: 0.0.0.0/0, ::/0) | |||
2023-02-10 | interfaces: T4995: rename user -> username CLI node for pppoe, wwan and ↵ | Christian Breunig | |
sstp-client | |||
2023-02-10 | Merge pull request #1808 from sever-sever/T1993 | Christian Breunig | |
T1993: PPPoE-server add section shaper and fwmark option | |||
2023-02-09 | wwan: T3622: add constraint for username/password CLI nodes | Christian Breunig | |
- Username is up to 128 alphanumerical characters, -, _, #, and @ - Password is limited to ASCII characters only, with a total lenght of 128 | |||
2023-02-09 | Revert "container: T4959: Add container registry authentication config for ↵ | Christian Breunig | |
containers" This reverts commit b17251334c57c2f6875c19ad4e6c6127aa9e1811. | |||
2023-02-09 | Merge pull request #1790 from Zen3515/current-add-container-login | Christian Breunig | |
container: T4959: Add container registry authentication config for containers | |||
2023-02-09 | Merge pull request #1803 from sever-sever/T4971 | Christian Breunig | |
T4971: PPPoE server add named ip pool and attr Framed-Pool | |||
2023-02-08 | T1993: PPPoE-server add section shaper and fwmark option | Viacheslav Hletenko | |
Extended PPPoE-server rate-limiter to avoid shaping marked resources Often this feature needs for ISP, which provides access to some IX or its resources. set service pppoe-server shaper fwmark '223' | |||
2023-02-08 | T4977: Add Babel routing protocol support | Yuxiang Zhu | |
This PR adds basic Babel routing protocol support using the implementation in FRR. Signed-off-by: Yuxiang Zhu <vfreex@gmail.com> | |||
2023-02-08 | T2603: PPPoE-server change default min-mtu value 1280 | Viacheslav Hletenko | |
Minimum acceptable MTU. If client will try to negotiate less then specified MTU then it will be NAKed or disconnected if rejects greater MTU. Change 'min-mtu' from 1492 to 1280 | |||
2023-02-07 | T4971: PPPoE server add named ip pool and attr Framed-Pool | Viacheslav Hletenko | |
Add a new feature to allow to use named pools Also it can be used with RADIUS attribute 'Framed-Pool' set service pppoe-server client-ip-pool name POOL1 gateway-address '192.0.2.1' set service pppoe-server client-ip-pool name POOL1 subnet '192.0.2.0/24' | |||
2023-02-04 | dhcp-relay: xml: T2408: fix CLI constraints | Christian Breunig | |
The old interface-name validator was replaced by a faster implementation in OCaml. Interface validator can be selected by including the appropriate code snippet. | |||
2023-02-04 | dhcp-relay: T2408: use Warning() on deprecated interface CLI node | Christian Breunig | |
2023-02-04 | Merge pull request #1603 from nicolas-fort/T2408 | Christian Breunig | |
T2408: dhcp-relay: Add listen-interface and upstream-interface feature | |||
2023-02-04 | qos: xml: T4284: policy-name is alpha-numeric only | Christian Breunig | |
2023-02-04 | qos: xml: T4284: bandwidh unit suffix is optional | Christian Breunig | |
2023-02-04 | bgp: T4817: improve help and constraint error messages | Christian Breunig | |
2023-02-04 | bgp: T4817: add local-role (RFC9234) support for peer-groups | Christian Breunig | |
Extend commit 8a75e92d ("T4817 added support for RFC 9234") to also support peer-groups. | |||
2023-02-04 | qos: T4969: update "match mark" value range | Christian Breunig | |
This improves commit d2885ad0 ("T4969: fix class match mark number"). | |||
2023-02-04 | Merge pull request #1792 from DaniilHarun/current | Christian Breunig | |
T4969: fix class match mark number | |||
2023-02-04 | T4817 added support for RFC 9234 | Kyle McClammy | |
2023-01-31 | T4969: fix class match mark number | DaniilHarun | |
2023-01-31 | container: T4014: Add `command`, `arg` and `entrypoint` configuration ↵ | Zen3515 | |
options for containers | |||
2023-01-30 | container: T4959: Add container registry authentication config for containers | Zen3515 | |
2023-01-30 | Merge pull request #1761 from sever-sever/T4916-curr | Viacheslav Hletenko | |
T4916: Rewrite IPsec peer authentication and psk migration | |||
2023-01-29 | xml: T1579: allow zero length for description | Christian Breunig | |
Some older VyOS 1.3 installations seem to use zero-length description fields. Do not break them! | |||
2023-01-28 | vrrp: T1297: improve gratuitous ARP default value handling and help strings | Christian Breunig | |