Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-04-11 | Merge branch 't2264-l2tp' of github.com:c-po/vyos-1x into current | Christian Poessinger | |
* 't2264-l2tp' of github.com:c-po/vyos-1x: (25 commits) vpn: l2tp: sstp: T2264: create config dir on demand vpn: l2tp: T2264: migrate IPv6 prefix node to common CLI style vpn: l2tp: T2264: simplify IPv6 config dictionary elements vpn: sstp: T2008: migrate from SysVinit -> systemd vpn: sstp: T2008: bugfix KeyError 'client_gateway' vpn: l2tp: T2264: migrate from SysVinit -> systemd vpn: l2tp: T2264: remove debug pprint vpn: l2tp: T2264: proper set PPP default values to ease Jinja2 template vpn: l2tp: T2110: re-use RADIUS XML include file vpn: l2tp: T2264: remove RADIUS req-limit node vpn: l2tp: T2264: migrate to new dictionary keys for radius auth vpn: sstp: T2008: set accell default values in config dict vpn: l2tp: T2264: use "with open()" when writing config vpn: l2tp: T2264: migrate to new dictionary keys for local auth vpn: sstp: T2008: improve error message for non existent local-users vpn: l2tp: T2264: cleanup thread_cnt generation vpn: sstp: T2008: cleanup thread_cnt generation vpn: l2tp: T2264: combine WINS CLI syntax vpn: l2tp: T2264: combine IPv4/IPv6 name-server CLI syntax vpn: sstp: T2008: adjust DNS error message ... | |||
2020-04-11 | vpn: l2tp: sstp: T2264: create config dir on demand | Christian Poessinger | |
2020-04-11 | Merge pull request #326 from thomas-mangin/T2265 | Christian Poessinger | |
dhcp: T2265: refactor DHCP class | |||
2020-04-11 | vpn: l2tp: T2264: migrate IPv6 prefix node to common CLI style | Christian Poessinger | |
Combining multiple options into a single CLI node is considered bad practice. IPv6 prefixes consited of the prefix itself and a mask send to the client in one node only. The following CLI parts have been migrated from client-ipv6-pool { delegate-prefix fc00:0:1::/48,64 prefix 2001:db8::/64,64 } to client-ipv6-pool { delegate fc00:0:1::/48 { delegation-prefix 48 } prefix 2001:db8::/48 { mask 64 } } Thus regular validation steps from the VyOS CLI can be used when a prefix is configured. | |||
2020-04-11 | vpn: l2tp: T2264: simplify IPv6 config dictionary elements | Christian Poessinger | |
2020-04-11 | dhcp: T2265: refactor DHCP class | Thomas Mangin | |
Break the code between v4 and v6, remove need for getter/setter as they are just exposing the underlying dict. Move FixedDict from tunnel code and expose it to other part so it can be used to prevent accidental change to the dhcp option if no default exists already. | |||
2020-04-11 | dhcp: T2265: v4/v6 conflict for lease file | Thomas Mangin | |
The vyatta-dhclient-hook is not differentiating between v4 and v6 and attempting to use the same lease file for both protocol. Therefore only dhcp v4 or v6 could be setup on an interface and not both. | |||
2020-04-11 | vpn: sstp: T2008: migrate from SysVinit -> systemd | Christian Poessinger | |
2020-04-11 | vpn: sstp: T2008: bugfix KeyError 'client_gateway' | Christian Poessinger | |
2020-04-11 | vpn: l2tp: T2264: migrate from SysVinit -> systemd | Christian Poessinger | |
2020-04-11 | vpn: l2tp: T2264: remove debug pprint | Christian Poessinger | |
2020-04-11 | vpn: l2tp: T2264: proper set PPP default values to ease Jinja2 template | Christian Poessinger | |
2020-04-11 | vpn: l2tp: T2264: remove RADIUS req-limit node | Christian Poessinger | |
It makes less sense for the user to specify this behavior. | |||
2020-04-11 | vpn: l2tp: T2264: migrate to new dictionary keys for radius auth | Christian Poessinger | |
2020-04-11 | vpn: sstp: T2008: set accell default values in config dict | Christian Poessinger | |
This will remove the required if/else parts int he Jinja2 template. | |||
2020-04-11 | vpn: l2tp: T2264: use "with open()" when writing config | Christian Poessinger | |
2020-04-11 | vpn: l2tp: T2264: migrate to new dictionary keys for local auth | Christian Poessinger | |
2020-04-11 | vpn: sstp: T2008: improve error message for non existent local-users | Christian Poessinger | |
2020-04-11 | vpn: l2tp: T2264: cleanup thread_cnt generation | Christian Poessinger | |
2020-04-11 | vpn: sstp: T2008: cleanup thread_cnt generation | Christian Poessinger | |
2020-04-11 | vpn: l2tp: T2264: combine WINS CLI syntax | Christian Poessinger | |
There is no reason to distinguish between WINS servers in terms of priority. This is solely a task which can be done in the underlaying Python scripts. | |||
2020-04-11 | vpn: l2tp: T2264: combine IPv4/IPv6 name-server CLI syntax | Christian Poessinger | |
There is no reason to distinguish between an IPv4 and IPv6 name-server node on the CLI - this can be done in the underlaying Python scripts. | |||
2020-04-11 | vpn: sstp: T2008: adjust DNS error message | Christian Poessinger | |
2020-04-11 | vpn: l2tp: T2264: comment cleanup on chk_con() | Christian Poessinger | |
2020-04-11 | vpn: l2tp: T2264: use default_config_data dict | Christian Poessinger | |
2020-04-11 | vpn: l2tp: T2264: introduce common config base | Christian Poessinger | |
2020-04-11 | vpn: l2tp: T2264: import cleanup | Christian Poessinger | |
2020-04-11 | vpn: l2tp: T2264: rename files to match CLI levels | Christian Poessinger | |
2020-04-11 | Merge pull request #327 from DmitriyEshenko/fix-res-ra | Christian Poessinger | |
sstp: T2263: Implement reset feature | |||
2020-04-10 | sstp: T2263: Implement reset feature | DmitriyEshenko | |
2020-04-10 | Merge pull request #324 from DmitriyEshenko/fix-res-ra | Christian Poessinger | |
pptp: l2tp: T2262: Fix call to function run() | |||
2020-04-10 | pptp: l2tp: T2262: Fix call to function run() | DmitriyEshenko | |
2020-04-10 | openvpn: T2266: fix verify for client-server bridged mode | jjakob | |
2020-04-10 | util: T2253: fix translation to cmd | John Estabrook | |
2020-04-10 | Revert "Revert "util: T2226: rewrite merge config to use cmd"" | John Estabrook | |
This reverts commit 6086b7fa718f502563a17569abc81d4ccb94818c. | |||
2020-04-10 | pppoe: T2248: connect-on-demand and vrf are mutually exclusive | Christian Poessinger | |
As PPP can be used to establish a connection on-demand it manages the Kernel default route. This can not be used when using VRFs which are managed by the ip-up.d and ip-down.d scripts - thus those options are now mutially exclusive. The best fix would be adding support for VRFs into PPP. | |||
2020-04-09 | vxlan: T2172: add source-address option | Christian Poessinger | |
This is a base requirement for l2vpn evpn. When source-address is configured, the option "local <source-addr> nolearning" is appended when creating the interface as mentioned here: https://vincent.bernat.ch/en/blog/2017-vxlan-bgp-evpn | |||
2020-04-09 | Revert "vxlan: T2172: remove group or remote check in verify()" | Christian Poessinger | |
This reverts commit 195e1da6a518ee3a2cbc0e1d454317e3c05e3e6e. | |||
2020-04-09 | Merge branch 'vxlan' of github.com:c-po/vyos-1x into current | Christian Poessinger | |
* 'vxlan' of github.com:c-po/vyos-1x: vxlan: pseudo-ethernet: T2260: convert link nodes to source-interface wireguard: T2206: fix comment in migration script pppoe: enable Jinja2 trim_blocks | |||
2020-04-09 | vxlan: pseudo-ethernet: T2260: convert link nodes to source-interface | Christian Poessinger | |
2020-04-09 | wireguard: T2206: fix comment in migration script | Christian Poessinger | |
2020-04-09 | pppoe: enable Jinja2 trim_blocks | Christian Poessinger | |
2020-04-09 | util: T2226: os.system was wrongly converted to run | Thomas Mangin | |
os.system does print the ouput of the command, run() does not. A new function called call() does the printing and return the error code. | |||
2020-04-09 | Revert "tunnel: T2028: prevent single 'remote' keyword" | Christian Poessinger | |
This reverts commit 37973a13bbc168c09e5f4d1e606f91fd7ffbb41a. | |||
2020-04-09 | Merge pull request #317 from thomas-mangin/T2028-remote | Christian Poessinger | |
tunnel: T2028: fix remote and registration | |||
2020-04-08 | Revert "util: T2226: rewrite merge config to use cmd" | John Estabrook | |
This reverts commit 9664e7d685307f5f9736929731e759ff7bad7353. | |||
2020-04-08 | tunnel: T2028: prevent single 'remote' keyword | Thomas Mangin | |
When the remote keywrod is ommited, the default value of '' is still set, therefore the ip command will include it. Remote is now removed if unset. | |||
2020-04-08 | vyos.util: introduce chmod_750() for files/directories | Christian Poessinger | |
2020-04-08 | wireguard: T2244: re-use interface removal code from WireGuardIf class | Christian Poessinger | |
2020-04-08 | wireguard: T2244: fix writing PSK | Christian Poessinger | |