Age | Commit message (Collapse) | Author |
|
conntrack-sync: T4888: rewrite the op mode script in the new format
|
|
ipsec: T5042: Rewritten 'show vpn ipsec remote-access' command
|
|
|
|
This extends commit 3fa1092930c (op-mode: bgp: support VRF related "show bgp
vrf" commands).
vyos@vyos:~$ show bgp vni
Possible completions:
1-16777215 VXLAN network identifier (VNI) number
all
vyos@vyos:~$ show bgp vni 1 type
Possible completions:
1 EAD (Type-1) route
2 MAC-IP (Type-2) route
3 Multicast (Type-3) route
ead EAD (Type-1) route
macip MAC-IP (Type-2) route
multicast Multicast (Type-3) route
vyos@vyos:~$ show bgp vni 1 vtep
Possible completions:
<x.x.x.x> Remote VTEP IP address
|
|
Now 'show vpn ipsec remote-access' shows only IKEv2 Remote access
VPN IPSec connections.
Added option 'summary' that shows a summary table for
these connections.
Added option 'detail' that shows only RA SAs output of 'swanctl -l'
Added options 'username' and 'connection-id' that filters output.
Fixed output 'show vpn ipsec sa detail', the previous was
'show vpn ipsec sa verbose'.
|
|
|
|
T5137: refactoring the tech-support command
|
|
|
|
|
|
T5081: ISIS and OSPF syncronization with IGP-LDP sync
|
|
|
|
|
|
Refactoring the tech-support command from .sh to .py
|
|
|
|
|
|
show isis vrf <name> neighbor|route
did not call the vtysh wrapper but instead always called the commands
for the default routing table.
|
|
ipsec: T5093: Fixed 'reset vpn ipsec profile' command
|
|
Add op-mode for sFlow based on hsflowd "show sflow"
Add machine readable format '--raw' and formatted output
|
|
|
|
Fixed 'reset vpn ipsec profile' command
using vici library and new op-mode style.
Added ability to use 'reset vpn ipsec profile' command
with 'remote-host' option.
|
|
Refer to <vyos-build> repository,
commit <2d71f974bf415e7df617afdf872204d6a596e74e>
|
|
|
|
ipsec: T5043: Rewritten and fixed 'reset vpn' commands
|
|
|
|
1. Rewritten CLI of 'reset vpn' commands.
2. Created 'reset vpn ipsec remote-access' commands to reset
RA IKEv2 session.
3. Created 'reset vpn ipsec site-to-site all' command to reset all
configured IPSec site-to-site peers sessions.
4. Rewritten 'reset vpn l2t|pptp|sstp' commands to
new opmode style.
|
|
|
|
T5070: Added show bgp martian/show bgp nexthop to bgp in vrf
|
|
|
|
|
|
|
|
T4977: Add Babel routing protocol support
|
|
|
|
1. Changed reset IPSEC, IKE SAs to use vici library.
2. Created package vyos.ipsec to communicate with vici library.
|
|
|
|
Fixed 'reset vpn ipsec-peer {peer}' command.
The op-mode script uses value 'None' in the 'tunnel' parameter
to clear all CHILD SAs.
|
|
This PR adds basic Babel routing protocol support using the implementation in
FRR.
Signed-off-by: Yuxiang Zhu <vfreex@gmail.com>
|
|
|
|
1. Formatted output of 'show nhrp' commands to table view
2. Rewritten nhrp op-mode in new style
|
|
Commit a0fc8b80 ("T4940: new interfaces debugging command") introduced a new
tree under the op-mode "generate" function. The new "interface" node had no
help string available making the build fail:
> There are empty node.def files! Check your interface definitions.
|
|
igmp-proxy: T4912: Rewrite show IGMP proxy commands in the new op-mode format
|
|
T4940: new interfaces debugging command
|
|
|
|
There are currently two ways to generate the interface name completion helper
list (we use openvpn in this example)
- <script> ${vyos_completion_dir}/list_interfaces.py --type openvpn</script>
- <path>interfaces openvpn</path>
The first one using <script> tends to be rather slow as there is a Python
interpreter startup involved (expensive). The latter simply calls a C program
which is executed rather fast and gives the same result.
We can simply replace the first call with the second one to make the CLI
feel faster.
|
|
|
|
|
|
The script completion helper will only show SSTP client interfaces already
created and beeing active in the Kernel. The path completion helper shows the
real CLI deal.
|
|
The script completion helper will only show MACsec interfaces already created
and beeing active in the Kernel. The path completion helper shows the real
CLI deal.
|
|
Some ISPs seem to use the host-uniq flag to authenticate client equipment.
Add CLI option in VyOS to allow specification of the host-uniq flag.
set interfaces pppoe pppoeN host-uniq <value>
|
|
|
|
The new command will allow you to get full detailed information on the system interfaces.
|