Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-08-21 | interfaces: T3090: migrate adjust-mss from "firewall options" to "interface" ↵ | Christian Poessinger | |
level Getting rid of "set firewall options" and move it from: set firewall options interface ethX adjust-mss 1400 set firewall options interface ethX adjust-mss6 1400 to: set interfaces ethernet ethX ip adjust-mss 1400 set interfaces ethernet ethX ipv6 adjust-mss 1400 In addition add an extra option called clamp-mss-to-pmtu instead of a value. | |||
2021-08-20 | bgp: T3759: add IPv4/IPv6 unicast AFI route-map for VPN import/export | Christian Poessinger | |
This adds the following new commands: set protocols bgp address-family ipv4-unicast route-map vpn export foo-map-out set protocols bgp address-family ipv4-unicast route-map vpn import foo-map-in set protocols bgp address-family ipv6-unicast route-map vpn export foo-map-out set protocols bgp address-family ipv6-unicast route-map vpn import foo-map-in | |||
2021-08-20 | smoketest: bgp: movo test for "solo" option to regular neighbor testcase | Christian Poessinger | |
2021-08-20 | smoketest: bgp: add support to extract only given SAFI from FRR | Christian Poessinger | |
2021-08-19 | smoketest: ipsec: T3764: extend testcases for IKE/ESP lifetime | Christian Poessinger | |
2021-08-18 | bgp: T3759: add l3vpn "route-target vpn" commands | Christian Poessinger | |
Add the following new commands: * set protocols bgp address-family ipv4-unicast route-target vpn both 1.1.1.1:100 * set protocols bgp address-family ipv4-unicast route-target vpn export 1.1.1.1:100 * set protocols bgp address-family ipv4-unicast route-target vpn import 1.1.1.1:100 | |||
2021-08-18 | bgp: T3759: add l3vpn "rd" route-distinguisher commands | Christian Poessinger | |
Add the following new commands: * set protocols bgp address-family ipv4-unicast rd vpn export * set protocols bgp address-family ipv6-unicast rd vpn export | |||
2021-08-18 | bgp: T3759: add l3vpn "label vpn export" commands | Christian Poessinger | |
Add the following new commands: * set protocols bgp address-family ipv4-unicast label vpn export (auto | 0-1048575) * set protocols bgp address-family ipv6-unicast label vpn export (auto | 0-1048575) | |||
2021-08-18 | smoketest: ssh: migrate setUp -> setUpClass to run code only once | Christian Poessinger | |
... minor change to speed-up test time | |||
2021-08-18 | smoketest: nat66: migrate setUp -> setUpClass to run code only once | Christian Poessinger | |
... minor change to speed-up test time | |||
2021-08-17 | bgp: T3759: add l3vpn "import vrf" commands | Christian Poessinger | |
2021-08-17 | bgp: T3759: add l3vpn import/export vpn command for IPv4/IPv6 AFI | Christian Poessinger | |
2021-08-16 | smoketest: conntrack: fix function name disable -> enable | Christian Poessinger | |
2021-08-15 | Merge pull request #972 from erkin/current | Christian Poessinger | |
smoketest: conntrack: Update smoketests for new conntrack modules syntax | |||
2021-08-15 | smoketest: ospf: add debug code for redistribution test | Christian Poessinger | |
2021-08-15 | smoketest: ospf: fix type in testcase name #10 | Christian Poessinger | |
2021-08-15 | smoketest: ospf: T3757: test interface area configuration | Christian Poessinger | |
2021-08-15 | smoketest: conntrack: Update smoketests for new conntrack modules syntax | erkin | |
2021-08-15 | Merge pull request #944 from sever-sever/T3702 | Christian Poessinger | |
pbr: T3702: Add rules match fwmark | |||
2021-08-14 | smoketest: shim: wait for commit to be completed | Christian Poessinger | |
This completes commit e7d841d285 ("smoketest: shim: remove superfluous sleep() in getFRRconfig()"). | |||
2021-08-14 | smoketest: shim: remove superfluous sleep() in getFRRconfig() | Christian Poessinger | |
The sleep was intended to handle a FRR issue where the config was/is somehow now available in vtysh even with the commit was done. This rather feels like a race-condition and is fixed in the subsequent commit. | |||
2021-08-11 | smoketest: ospf: add logger to passive-interface test | Christian Poessinger | |
2021-08-08 | smoketest: rpki: remporary disable SSH based connection testing due to FRR bug | Christian Poessinger | |
see: https://github.com/FRRouting/frr/issues/7978 | |||
2021-08-02 | pbr: T3702: Add rules match fwmark | Viacheslav | |
2021-07-30 | Merge pull request #949 from sever-sever/T1176-curr | Christian Poessinger | |
bgp: T1176: Add solo option for neighbor | |||
2021-07-30 | router-advert: T2745: use template common coding style in for loops | Christian Poessinger | |
2021-07-30 | bgp: T1176: Add solo option for neighbor | Viacheslav | |
2021-07-26 | smoketest: config: azure: also utilize "default-esp-group" feature | Christian Poessinger | |
2021-07-23 | login: T3699: verify system username does not conflict with Linux base users | Christian Poessinger | |
(cherry picked from commit 7292631373ea50f9908796ef2eda32e672d1df2e) | |||
2021-07-22 | ipsec: T2816: remove "auto-update" CLI option | Christian Poessinger | |
Update/refresh of DNS records is now handled internally by Strongswan. | |||
2021-07-22 | pki: https: T3642: Migrate HTTPS to use PKI configuration | sarthurdev | |
2021-07-21 | pki: openvpn: T3642: Migrate OpenVPN to PKI and refactor | sarthurdev | |
2021-07-20 | pki: eapol: T3642: Migrate EAPoL to use PKI configuration | sarthurdev | |
2021-07-20 | pki: sstp: T3642: Migrate SSTP to PKI configuration | sarthurdev | |
2021-07-20 | pki: openconnect: T3642: Migrate OpenConnect SSL to PKI configuration | sarthurdev | |
2021-07-19 | pki: wireguard: T3642: Migrate Wireguard private key directly into CLI | sarthurdev | |
Also renames peer pubkey to public-key for consistency | |||
2021-07-18 | smoketest: ospf: extend passive-interface debugging with kernel log | Christian Poessinger | |
2021-07-17 | ipsec: T2816: migrate "ipsec interfaces" to "interface" | Christian Poessinger | |
2021-07-15 | pki: ipsec: l2tp: T2816: T3642: Move IPSec/L2TP code into vpn_ipsec.py and ↵ | sarthurdev | |
update to use PKI. | |||
2021-07-11 | smoketest: ospf: change passive-interface debugging | Christian Poessinger | |
2021-07-07 | pki: T3642: Migrate rsa-keys to PKI configuration | sarthurdev | |
2021-07-04 | smoketest: pki: adjust to "type" node removal on CLI | Christian Poessinger | |
A certificate "type" can be auto derived from the certificate itself. | |||
2021-07-03 | ipsec: T2816: rework IKE and ESP key assignment | Christian Poessinger | |
Commit 2d79a500 ("ipsec: T2816: add Jinja2 converter for ESP/IKE groups to string") added a Jinja2 helper function which can be used to transform VyOS CLI ESP and IKE key proposals into a strongSwan compatible string cipher. This commit changes the IPSec implementation to make use of this new Jinja2 filter fubction/Python helper. This is required base work for better automated tests (smoketests) but also for an IKEv2 road-warrior setup. | |||
2021-07-02 | smoketest: ipam: add site2site x509 auth testcase | Christian Poessinger | |
2021-07-02 | smoketest: ipsec: place peer local-address into variable | Christian Poessinger | |
2021-07-02 | smoketest: ipsec: IKE and ESP settings can be done one time in setUp() | Christian Poessinger | |
2021-07-01 | Merge branch 'pki_ipsec' of https://github.com/sarthurdev/vyos-1x into pki-cli | Christian Poessinger | |
* 'pki_ipsec' of https://github.com/sarthurdev/vyos-1x: pki: ipsec: T3642: Update migration script to account for file permission issues pki: ipsec: T3642: Migrate IPSec to use PKI configuration pki: T3642: New PKI config and management | |||
2021-06-30 | smoketest: ipsec: add more re-usable variable definitions throughout the test | Christian Poessinger | |
2021-06-30 | dhcpdv6: T3658: add support for dhcpdv6 fixed-prefix6 | Brandon Stepler | |
2021-06-29 | pki: ipsec: T3642: Migrate IPSec to use PKI configuration | sarthurdev | |