Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-09-30 | wireguard: T2939: bugfix when removing individual peers | Christian Poessinger | |
When individual peers that have been removed got determined they have been added to the config dict as list instead of string - which broke the system plumbing commands as they can not handle a Python list. | |||
2020-09-30 | macsec: T2023: only remove interface when it exists | Christian Poessinger | |
If for whatever reason the macsec interface dropped out of the Kernel - only call .remove() when it still exists to avoid any exceptions at all. | |||
2020-09-29 | vrrp: T2933: Add option virtual-address-excluded | sever-sever | |
2020-09-28 | pppoe-server: T2919: Add possibility change Called-Station-Id format | DmitriyEshenko | |
2020-09-26 | Merge pull request #554 from sever-sever/T2918 | Christian Poessinger | |
accel-ppp: T2918: Add accounting interim jitter option | |||
2020-09-26 | accel-ppp: T2918: Add accounting interim jitter option | sever-sever | |
2020-09-26 | macsec: vxlan: T2653: bugfix in verify() on lower interface MTU size | Christian Poessinger | |
Introduced in commit 818a75c024e ("ifconfig: T2653: get_mtu() should return int() for easier comparison") where the variable used in the formatted string has not been adjusted. | |||
2020-09-26 | login: migration: T2929: add missing if condition when probing for radius-server | Christian Poessinger | |
2020-09-26 | accel-ppp: T2917: Add Preallocate NAS-port-id | sever-sever | |
2020-09-26 | ifconfig: mtu: T2928: remove bridge mtu check as our bridge interface has no mtu | Christian Poessinger | |
2020-09-26 | ifconfig: mtu: disallow MTU < 1280 bytes when IPv6 is enabled on the interface | Christian Poessinger | |
Using an MTU less then the required 1280 bytes (as per RFC) on an interface where IPv6 is not explicitly disabled by: - set interfaces ethernet eth1 ipv6 address no-default-link-local - not having any other IPv6 address configured Will now trigger a commit error via verify() instead of raising FileNotFoundError! | |||
2020-09-25 | T2926: Missing import | kroy | |
2020-09-25 | ethernet: T2912: verify() that hardware supports specified MTU value | Christian Poessinger | |
Check the hardware if MTU value is supported at all. | |||
2020-09-25 | ifconfig: T2653: get_mtu() should return int() for easier comparison | Christian Poessinger | |
2020-09-25 | syslog: T2899: shift system migration files +1 to allow for crux | John Estabrook | |
2020-09-25 | syslog: T1845: fix indentation level | John Estabrook | |
2020-09-25 | dns: forwarding: T2921: migrate to get_config_dict() | Christian Poessinger | |
2020-09-24 | wireless: T2241: add "wds" CLI option | Christian Poessinger | |
2020-09-24 | dns: forwarding: T2921: template cleanup | Christian Poessinger | |
2020-09-22 | openvpn: T2907: add 'none' encryption option to not encrypt any data | Marcus Hoff | |
2020-09-22 | ifconfig: T2653: bond: bridge: ensure member interface is not a source-interface | Christian Poessinger | |
As we already check that a bond/bridge member interface is not a member of any other bridge or bond, the check must be extended. We also need to ensure that the bond member interface is not used as a source-interface to pppoe, macsec, tunnel, pseudo-ethernet, vxlan interfaces. | |||
2020-09-22 | ifconfig: T2653: move is_member() from vyos.vylidate to vyos.configdict | Christian Poessinger | |
2020-09-21 | macsec: T2788: source-interface must not be member of a bridge | Christian Poessinger | |
Add verify() step to ensure the macsec source-interface is not already part of a bridge interface. This should probably also be checked for bond interfaces. | |||
2020-09-20 | macsec: T2023: add missing mtu CLI option | Christian Poessinger | |
Base MTU for MACsec is 1468 bytes (encryption headers), but we leave room for 802.1ad and 802.1q VLAN tags, thus the limit is lowered to 1460 bytes to not make the user juggle with the MTU bytes if he enables VLAN support later on, which is yet to come. | |||
2020-09-20 | ifconfig: T2653: remove duplicates of get_config() | Christian Poessinger | |
A lot of derived classes from Interface implemented their own get_config() method which more or less was the same everywhere. We also hat different qualifiers like @staticmethod or @classmethod. This is now changed to only have the @classmethod in Interface base class which will return the necessary dictionary keys for the required interfaces. This change is a mid reduction in lines of code which is always a very nice thing! | |||
2020-09-20 | wwan: ifconfig: T2905: sync CLI nodes in dialup interfaces | Christian Poessinger | |
Both PPPoE and WWAN interfaces are dialer interfaces handled by ppp, but use different CLI nodes for the same functionality. PPPoE has "connect-on-demand" to initiate an "on-demand" dialing and WWAN uses "ondemand" for this purpose. Rename WWAN "ondemand" node to "connect-on-demand". | |||
2020-09-20 | vif-s: ifconfig: T2903: use explicit VLAN protocol over raw numbers | Christian Poessinger | |
In the past we had to provide the ethertype value used for the VLAN protocol (0x88A8 -> 802.1ad or 0x8100 -> 802.1q). This should be changed to a more user friendly CLI node (protocol over ethertype) and 802.1ad over it's raw value 0x88A8. There is no need in presenting RAW information from the ethernet header to the user. Also iproute2 calls it protocol which makes way more sense over the "raw" value. | |||
2020-09-19 | dns: forwarding: T2900: restore proper Config() level in verify() | Christian Poessinger | |
Despite the fact that running verify on Config() is "bad" and "not as intended" the level of the configuration must match the keys that are checked by exits(). Re-set proper Config() level before querying the system nodes. | |||
2020-09-16 | wireless: T2887: Jinja2 can not work on keys starting with a number | Christian Poessinger | |
... an error would be presented: jinja2.exceptions.TemplateSyntaxError: expected token 'end of statement block', got 'mhz_incapable', thus we simply rename the key before rendering the template. | |||
2020-09-16 | configd: T2885: fix output of error string to config session | John Estabrook | |
2020-09-15 | completion: T2238: add license | Christian Poessinger | |
2020-09-15 | bonding: T2515: preserve interface admin state when removing from bond | Christian Poessinger | |
Removing a member from a bond/LACP will turn the physical interface always in admin-down state. This is invalid, the interface should be placed into the state configured on the VyOS CLI. Smoketest on bond interfaces is extended to check this behavior. | |||
2020-09-15 | vyos.configdict: T2515: leaf_node_changed() should return list or None | Christian Poessinger | |
2020-09-15 | configd: T2885: print commit errors to config session terminal | John Estabrook | |
2020-09-14 | op-mode: T2874: Add new utill for mtu-check | sever-sever | |
2020-09-13 | op-mode: T2841: support IPv6 for "monitor bandwidth-test initiate" | Christian Poessinger | |
2020-09-13 | ddclient: T2858: migrate to get_config_dict() | Christian Poessinger | |
2020-09-13 | qat: T2857: cleanup configuration script | Christian Poessinger | |
2020-09-13 | configd: T2582: add .gitignore | Christian Poessinger | |
2020-09-10 | op-mode: T2856: Fix broken pipe in show version all | sever-sever | |
2020-09-09 | openconnect: T2036: Move CLI commands under vpn openconnect | DmitriyEshenko | |
2020-09-01 | frr-template: T2850: Add BGP template for FRR | sever-sever | |
2020-08-31 | T2636: remove workarounds for get_config_dict() | Christian Poessinger | |
Now that b40c52682a256 ("config: T2636: get_config_dict() returns a list on multi node by default") is implemented the workarounds can be removed. | |||
2020-08-31 | configd: T2582: add scripts to include list for daemon | John Estabrook | |
2020-08-31 | configd: T2582: add shim as config daemon client | John Estabrook | |
2020-08-31 | configd: T2582: add mkjson for use by shim | John Estabrook | |
(https://github.com/Jacajack/mkjson.git) | |||
2020-08-31 | configd: T2582: add config daemon and supporting files | John Estabrook | |
2020-08-30 | nat: T2814: nftables module for NAT has been renamed | Christian Poessinger | |
Depending on the underlaying Kernel version load the corresponding Kernel module. | |||
2020-08-30 | Merge pull request #534 from sever-sever/T2833 | Christian Poessinger | |
rip: T2833: Fix distribute-list filter | |||
2020-08-28 | nat: T2813: translation address is mandatory if rule is not excluded | Christian Poessinger | |