Age | Commit message (Collapse) | Author | |
---|---|---|---|
2023-01-30 | Merge pull request #1761 from sever-sever/T4916-curr | Viacheslav Hletenko | |
T4916: Rewrite IPsec peer authentication and psk migration | |||
2023-01-26 | T4916: Rewrite IPsec peer authentication and psk migration | Viacheslav Hletenko | |
Rewrite strongswan IPsec authentication to reflect structure from swanctl.conf The most important change is that more than one local/remote ID in the same auth entry should be allowed replace: 'ipsec site-to-site peer <tag> authentication pre-shared-secret xxx' => 'ipsec authentication psk <tag> secret xxx' set vpn ipsec authentication psk <tag> id '192.0.2.1' set vpn ipsec authentication psk <tag> id '192.0.2.2' set vpn ipsec authentication psk <tag> secret 'xxx' set vpn ipsec site-to-site peer <tag> authentication local-id '192.0.2.1' set vpn ipsec site-to-site peer <tag> authentication mode 'pre-shared-secret' set vpn ipsec site-to-site peer <tag> authentication remote-id '192.0.2.2' Add template filter for Jinja2 'generate_uuid4' | |||
2023-01-25 | T1297: VRRP: add garp options to vrrp | Nicolas Fort | |
2023-01-22 | pppoe: T4948: add CLI option to allow definition of host-uniq flag | Christian Breunig | |
Some ISPs seem to use the host-uniq flag to authenticate client equipment. Add CLI option in VyOS to allow specification of the host-uniq flag. set interfaces pppoe pppoeN host-uniq <value> | |||
2023-01-19 | T4939: VRRP startup delay for bonding fix | fett0 | |
2023-01-19 | T4939: VRRP startup delay for bonding fix | fett0 | |
2023-01-19 | Merge pull request #1765 from aapostoliuk/T4925-sagitta | Christian Breunig | |
ipsec: T4925: Added PRF into IKE group | |||
2023-01-19 | Merge pull request #1697 from nicolas-fort/snmp_rework | Christian Breunig | |
T4857: SNMP: Implement FRR SNMP Recomendations | |||
2023-01-18 | ocserv: T4656: only one IP address is supported to listen on | Christian Breunig | |
2023-01-18 | ipsec: T4925: Added PRF into IKE group | aapostoliuk | |
Added the possibility to configure Pseudo-Random Functions (PRF) in IKE group set vpn ipsec ike-group <Ike-grp> proposal <number> prf <PRF> | |||
2023-01-18 | smoketests: modules: wireguard no longer needs to be loaded | Christian Breunig | |
As WireGuard is now part of the mainline Kernel, we no longer need to validate it using the external module loader/tester. | |||
2023-01-18 | T4857: Cleaning pr | Nicolas Fort | |
2023-01-17 | ifb: T4938: add Python implementation for input function block interfaces | Christian Breunig | |
2023-01-17 | smoketest: tftp: do not add/remove interfaces for each testrun, use setUpClass() | Christian Breunig | |
2023-01-17 | smoketest: ntp: T3008: verify chrony runs in appropriate VRF | Christian Breunig | |
2023-01-14 | ntp: T3008: migrate from ntpd to chrony | Christian Breunig | |
* Move CLI from "system ntp" -> "service ntp" * Drop NTP server option preempt as not supported by chrony | |||
2023-01-14 | smoketest: dhcpv6-relay: bugfix TypeError | Christian Breunig | |
Commit e28b10ce ("smoketest: dhcpv6-relay: use setUpClass() over setUp()") introduced a TypeError: TypeError: cli_set() missing 1 required positional argument: 'config' This has been fixed. | |||
2023-01-14 | ospf: T4934: bugfix AssertionError in smoketest for area 10 network | Christian Breunig | |
This fixes commit 20f448d16c ("T4934: ospf: Fix inter-area route summarization") where an assert was present for a CLI option that was missing to be set causing tests to fail. | |||
2023-01-14 | smoketest: T4387: cleanup veth interfaces used during test | Christian Breunig | |
2023-01-13 | smoketest: dhcpv6-relay: use setUpClass() over setUp() | Christian Breunig | |
Improves test runtime as interfaces are not created/deleted on every test case. | |||
2023-01-13 | ospf: T4934: bugfix AssertionError in smoketest | Christian Breunig | |
This fixes commit 20f448d16c ("T4934: ospf: Fix inter-area route summarization") where an assert was present for a CLI option that was missing to be set causing tests to fail. | |||
2023-01-13 | ethernet: rps: T4928: adjust to Kernel ABI changes #2 | Christian Breunig | |
Fix ValueError: Unknown format code 'x' for object of type 'str' added in commit c0ffb8ba4e663 ("ethernet: rps: T4928: adjust to Kernel ABI changes"). | |||
2023-01-12 | T4934: ospf: Fix inter-area route summarization | Yuxiang Zhu | |
Setting something like `protocols ospf area 10 range 10.10.0.0/16` without sub options doesn't work. This is because no range commands are generated when there is no leaf nodes set under the `range` tag node. ``` edit protocols ospf set area 16 network 10.10.0.0/16 set area 16 range 10.10.0.0/16 commit ``` ``` $ vtysh -c 'show run' ! router ospf auto-cost reference-bandwidth 100 timers throttle spf 200 1000 10000 network 10.10.0.0/16 area 16 exit ``` The generated FRR commands above is missing something like: ``` area 16 range 10.10.0.0/16 ``` | |||
2023-01-07 | Merge pull request #1741 from vfreex/ospf-fix-passive-interface | Christian Breunig | |
T4920: ospf: Fix `passive-interface default` option | |||
2023-01-07 | T4920: ospf: Fix `passive-interface default` option | Yuxiang Zhu | |
`passive_interface` is a leaf node. Also adds a smoketest. | |||
2023-01-07 | Merge pull request #1728 from aapostoliuk/T4877-sagitta | Christian Breunig | |
T4877: Added more checks if "import vrf" is used in bgp | |||
2023-01-07 | smoketest: ospf: extend test 09 w/ passive interfaces | Christian Poessinger | |
2023-01-06 | smoketest: T4284: drop redundant qos test config | Christian Poessinger | |
2023-01-06 | T4877: Added more checks if "import vrf" is used in bgp | aapostoliuk | |
1. Fixed: If rd and route-target are used in VRF, can not use "import vrf" in the same VRF in the same AFI/SAFI. 2. Fixed: If rd and route-target is used in VRF, this VRF can not be in the list of command "import vrf" in the same AFI/SAFI but in other VRFs. 3. Fixed: Do not allow to delete vrf if it is used in import list of other vrfs. 4. Added smoketests to check "import vrf" issues. | |||
2023-01-06 | smoketest: qos: T4284: we do not need static routes in qos-basic test | Christian Poessinger | |
2023-01-05 | smoketest: qos: T4284: remove dscp from base config | Christian Poessinger | |
2023-01-05 | qos: T4284: priority-queue and round-robin have no default bandwidth | Christian Poessinger | |
2023-01-04 | qos: T4284: bugfix fair-queue queue-limit range | Christian Poessinger | |
2023-01-04 | qos: T4284: replace qdisc/class instead of always adding it | Christian Poessinger | |
This makes transitions/updates faster and less error prone | |||
2023-01-02 | smoketest: T4284: remove qos from dialup-router-medium-vpn | Christian Poessinger | |
qos config migration is tested using qos-basic example config file. | |||
2023-01-01 | qos: T4284: migrate percentaged bandwidth to absolute value in bit/s | Christian Poessinger | |
2023-01-01 | qos: T4284: first implementation introducing a new vyos.qos module | Christian Poessinger | |
2022-12-30 | smoketest: dummy: T4898: enable MTU testcase | Christian Poessinger | |
2022-12-27 | strongSwan: T4593: add charon-systemd runtime dependency | Christian Poessinger | |
2022-12-27 | strongSwan: upgrade scripts to work with package version 5.9.8 | Christian Poessinger | |
2022-12-20 | smoketest: radvd: T4809: add test case for RA source address | Christian Poessinger | |
2022-12-19 | Merge pull request #1718 from nicolas-fort/T4886_conn_mark | Christian Poessinger | |
T4886: Firewall and route policy: Add connection-mark feature to vyos. | |||
2022-12-19 | dhcp: T4832: fix TypeError in smoketest | Christian Poessinger | |
Commit cca7ec3e ("T4832: dhcp: Add IPv6-only dhcp option support (RFC 8925)") extended the smoketests but used int over str when calilng the CLI wrapper. This led to: TypeError: sequence item 7: expected str instance, int found | |||
2022-12-19 | T4886: Firewall and route policy: Add connection-mark feature to vyos. | Nicolas Fort | |
2022-12-17 | Merge pull request #1669 from vfreex/dhcp-v6-only-option-1.4 | Christian Poessinger | |
T4832: dhcp: Add IPv6-only dhcp option support (RFC 8925) | |||
2022-12-17 | Merge pull request #1626 from nicolas-fort/fwall_group_interface | Christian Poessinger | |
T4780: Firewall: add firewall groups in firewall. Extend matching cri… | |||
2022-12-02 | T4854: route reflector allows to apply route-maps | fett0 | |
2022-11-30 | pki: T4847: add test of eapol to ensure interface update | John Estabrook | |
2022-11-28 | conf-mode: T4845: add smoketest to detect cycles | John Estabrook | |
2022-11-26 | ospf: T4739: Adding missing OSPF FRR template | Cheeze-It | |
Adding the smoketest. |