summaryrefslogtreecommitdiff
path: root/src/conf_mode
AgeCommit message (Collapse)Author
2019-06-28[IPoE] config structure improvedhagbard
* fixed minor issues * fixed lower function for mac addresses if user capitalized it (local mode only) * added some checks to verify() * cli ip-address checks on input
2019-06-28[IPoE] configerror message fixed to show the interface where subnet is missinghagbard
2019-06-28[IPoE] if authentication is local use .lower() for mac addresseshagbard
2019-06-27Merge pull request #77 from jjakob/T1470-improve-show-dhcpv6-server-leaseshagbard-01
T1470: improve output of "show dhcpv6 server leases"
2019-06-27[IPoE] T989 - IPoE implementationhagbard
* chap-secrets file generation * noauth in accel config as option * local auth with csid implemented * radius implementation * shaper per user implemented * op comands for stats
2019-06-24 T1470: improve output of "show dhcpv6 server leases"Jernej Jakob
- change DUID to IAID_DUID - format IAID_DUID as colon-separated hex list - implement functions: pool, sort, state - add op-mode definitions for pool, sort, state - add columns: State, Type, Last communication, Pool - implement json output - implement completionHelp function
2019-06-23Merge branch 'bfd' into currentChristian Poessinger
* bfd: bfd: T1183: support show of individual BFD peer bfd: T1183: move "multiplier" configuration node to "interval multiplier" bfd: T1183: add rx/tx interval configuration bfd: T1183: multihop doesn't accept interface names bfd: T1183: add support to configure detection multiplier bfd: T1183: adjust CLI syntax for source address/interface bfd: T1137: add 'show protocols bfd peer' command bfd: T1183: add support for multihop bfd: T1183: first working FRR bfd peer configuration bfd: T1183: IPv6 peers require explicit local address/interface bfd: T1183: initial CLI implementation
2019-06-22Merge pull request #74 from jjakob/T1433-fix-show-dhcpv6-server-leasesChristian Poessinger
T1433: fix show dhcpv6 server leases
2019-06-22[pdns-recursor] T1469 - replace forward-zones with forward-zones-recurse (#75)qiuchengxuan
forward-zones-recurse behaves identically to dnsmasq server option in legacy vyos 1.1.8, while forward-zones option disallow recursive name resolving, which leads to dns lookup failure
2019-06-22T1433: fix also filenames in /etc/default/isc-dhcpv6-serverJernej Jakob
2019-06-22bfd: T1183: move "multiplier" configuration node to "interval multiplier"Christian Poessinger
2019-06-22bfd: T1183: add rx/tx interval configurationChristian Poessinger
vyos@vyos# show protocols bfd { peer 1.1.1.1 { interval { receive 400 transmit 300 } } }
2019-06-22bfd: T1183: multihop doesn't accept interface namesChristian Poessinger
2019-06-22bfd: T1183: add support to configure detection multiplierChristian Poessinger
Configures the detection multiplier to determine packet loss. The remote transmission interval will be multiplied by this value to determine the connection loss detection timer. The default value is 3. Example: when the local system has detect-multiplier 3 and the remote system has transmission interval 300, the local system will detect failures only after 900 milliseconds without receiving packets.
2019-06-22bfd: T1183: adjust CLI syntax for source address/interfaceChristian Poessinger
Place address/interface under new source node. vyis@vyos# show protocols bfd peer 1.1.1.1 { source { address 1.2.3.4 interface eth0.201 } }
2019-06-22bfd: T1183: add support for multihopChristian Poessinger
multihop tells the BFD daemon that we should expect packets with TTL less than 254 (because it will take more than one hop) and to listen on the multihop port (4784). When using multi-hop mode echo-mode will not work (see RFC 5883 section 3).
2019-06-22bfd: T1183: first working FRR bfd peer configurationChristian Poessinger
2019-06-22bfd: T1183: IPv6 peers require explicit local address/interfaceChristian Poessinger
2019-06-22bfd: T1183: initial CLI implementationChristian Poessinger
vyos@vyos# show protocols bfd peer 172.18.202.10 { local-address 172.18.201.10 local-interface eth0.201 shutdown } peer 172.18.202.12 { shutdown }
2019-06-20firewall: T1461: deleting 'firewall options' causes Python TypeErrorChristian Poessinger
[ firewall options interface wg01 ] Traceback (most recent call last): File "/usr/libexec/vyos/conf_mode/firewall_options.py", line 139, in <module> apply(c) File "/usr/libexec/vyos/conf_mode/firewall_options.py", line 97, in apply if tcp['new_chain4']: TypeError: 'NoneType' object is not subscriptable delete [ firewall options ] failed delete [ firewall ] failed Commit failed
2019-06-20T1458: Regression in 1.2.1-S2 hostname & loggingKim Hagen
2019-06-18[pppoe-server] T1452 - add vendor option to shaperhagbard
2019-06-18[ config ] T1447: Python subprocess called without import in host_name.pyKim Hagen
2019-06-17[syslog/hostname.py] T1394 - syslog systemd and host_name.py race conditionhagbard
- checking if the hostname has changed, otherwise the script and systemd try to restart rsyslogd at the same time, at the end it's not started at all.
2019-06-17[pppoe-server] T1408 - improve verify() function to enable IPv6 only deploymentshagbard
2019-06-16T1439: remove quotes around dhcp6.client-idJernej Jakob
2019-06-16DHCPDv6 T1433: rename daemon configuration fileChristian Poessinger
... to have the same pattern as the DHCPDv6 lease file
2019-06-16DHCPDv6 T1433: fix wrong lease file nameChristian Poessinger
A wrong lease file caused the show command to fail: vyos@vyos:~$ show dhcpv6 server leases Traceback (most recent call last): File "/usr/libexec/vyos/op_mode/show_dhcpv6.py", line 81, in <module> leases = get_leases(lease_file, state='active') File "/usr/libexec/vyos/op_mode/show_dhcpv6.py", line 44, in get_leases leases = IscDhcpLeases(lease_file).get() File "/usr/lib/python3/dist-packages/isc_dhcp_leases/iscdhcpleases.py", line 110, in get with open(self.filename) as lease_file: FileNotFoundError: [Errno 2] No such file or directory: '/config/dhcpdv6.leases'
2019-06-10[wireguard] T1428: Add handling of fwmark setting (#70)Matthias Fetzer
[wireguard] T1428: correct handling of the fwmark option
2019-06-04T1379: Deprecated functions in /sbin/dhclient-scriptKim Hagen
2019-05-21[pppoe-server] T1393 - pppoe IPv6 pool doesn't workhagbard
2019-05-08[VRRP] T1371: add quotes around the health check script string.Daniil Baturin
2019-05-05[dhcp-server] T103: wrong hostnames in hosts fileChristian Poessinger
2019-04-27[rsyslog] T1358 - typo fixed os.path.existshagbard
2019-04-26[pppoe-server] adding CIDR based prefixes as client-ip-pool optionhagbard
2019-04-25[rsyslogd] T1355 - rsyslog stopped after reboot or clean starthagbard
- rsyslog appears now to be started via systemd automatically, checking for the pid to avoid restart race condition between systemd vyos conf script
2019-04-23[pppoe-server] - fixed default RADIUS attribute Filter-Idhagbard
2019-04-21[firewall] T314: add firewall options for MSS clampingChristian Poessinger
* clamp MSS IPv4 set firewall options interface pppoe0 adjust-mss '1452' * clamp MSS IPv6 set firewall options interface pppoe0 adjust-mss6 '1452' * disable entire rule set firewall options interface pppoe0 disable Output ------ $ sudo iptables-save -t mangle # Generated by iptables-save v1.4.21 on Sun Apr 21 12:56:25 2019 *mangle :PREROUTING ACCEPT [1217:439885] :INPUT ACCEPT [290:52459] :FORWARD ACCEPT [920:375774] :OUTPUT ACCEPT [301:100053] :POSTROUTING ACCEPT [1221:475827] :VYOS_FW_OPTIONS - [0:0] -A FORWARD -j VYOS_FW_OPTIONS -A VYOS_FW_OPTIONS -o pppoe0 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1452 COMMIT Completed on Sun Apr 21 12:56:25 2019 (cherry picked from commit 476aa4c3a561ea0ef0bf9b4c26ec8b78d18a5d02)
2019-04-20[hostname] T1336: sanitize FQDN before passing to hostnamectlChristian Poessinger
Remove possible trialing (.) when invoking hostnamectl. A hostname with a trailing (.) is not supported in hostnamectl.
2019-04-19Merge pull request #67 from tmarlok88/currentDaniil Baturin
T1343: do not remove zeros DHCP static route
2019-04-18[pppoe-server] T1341 - Adding rate-limiter for pppoe server usershagbard
- RADIUS shaper settings
2019-04-18[pppoe-server] T1341 - Adding rate-limiter for pppoe server usershagbard
- implementation for locally definied users
2019-04-18T1343: do not remove zeros DHCP static routetmarlok88
2019-04-17[accel-ppp] pppoe shaper op-mode command extendedhagbard
2019-04-10[dhcp] T1330: bugfix for non working wpad urlChristian Poessinger
WPAD url could be configured by CLI but the generated config was not understood by ISC dhcp - caused by infalid if {} statement resulting in a missing "option wpad-url code 252 = text;" block.
2019-04-06[dhcpv6-relay] T1322: bugfix on multiple listen interfacesChristian Poessinger
Same cause as with commit c6988bb4110541478dad74d0b892fd4643ed530a
2019-04-05T1264 - host_name.py improvementshagbard
- checks if a variable exists to avoid setting None on defined defaults
2019-04-03[dhcpv6-relay] T1322: support multiple upstream serversChristian Poessinger
Add support for relaying a DHCPv6 packet to multiple servers on one upstream interface.
2019-04-03[dhcpv6-relay] T1322: bugfix on multiple upstream interfacesChristian Poessinger
When generation the configuration for multiple upstream interfaces a whitespace was missing in the generated configuration: OPTIONS="-6 -l 2001:db8::ffff%eth1 -u 2001:db8:1:ffff%eth2-u 2001:db8:2:ffff%eth3" ^--- This caused an error when starting up the DHCPv6 relay service
2019-03-20[arp] bugfix for 'del prot static arp <ip> hwaddr'hagbard