Age | Commit message (Collapse) | Author | |
---|---|---|---|
2022-04-10 | nat: T2199: bugfix dry-run newly generated config before install | Christian Poessinger | |
Commit bb76e8d7f1635 ("nat: T2199: dry-run newly generated config before install") added support to verify the generated nftables ruleset. Unfortunately if the verify failed - a Python exception was triggered: NameError: name 'nftables_ct_file' is not defined This was due to bad copy/pasting. | |||
2022-04-09 | Merge pull request #1242 from goodNETnick/ocserv_local_otp | Christian Poessinger | |
ocserv: T4231: Added OTP support for Openconnect 2FA | |||
2022-04-09 | ocserv: T4231: Added OTP support for Openconnect 2FA | goodNETnick | |
2022-04-08 | dhcp-server: T4344: Fix underscores for shared network name | Viacheslav Hletenko | |
Shared network name should not be handled by tag node mangling I.e. should not replace underscores with dashed set service dhcp-server shared-network-name NET_01 shared-network NET_01 { authoritative; ... on commit { set shared-networkname = "NET_01"; } } | |||
2022-04-07 | http api: T4347: return complete and consistent error codes | John Estabrook | |
2022-04-07 | policy: T4194: simplify prefix-list duplication checks | Christian Poessinger | |
Commit 5dafe255d ("policy: T4194: Add prefix-list duplication checks") added first support for FRR prefix-list duplication checks. FRR does not allow to specify the same profix list rule multiple times. vyos(config)# ip prefix-list foo seq 10 permit 192.0.2.0/24 vyos(config)# ip prefix-list foo seq 20 permit 192.0.2.0/24 % Configuration failed. Error type: validation Error description: duplicated prefix list value: 192.0.2.0/24 There is a VyOS verify() function which simply probed for the prefix, action, le and ge settings - but as Python has excellent support when comparing data, this can be as simple as a dictionary comparison using "==". | |||
2022-04-07 | ipv6: T4346: delete (migrate) CLI command to disable IPv6 address family | Christian Poessinger | |
2022-04-07 | ipv6: T4346: deprecate CLI command to disable IPv6 address family | Christian Poessinger | |
2022-04-07 | qos: T4284: rename "traffic-policy" node to "qos policy" | Christian Poessinger | |
"set traffic-policy" now becomes "set qos policy" "set interface ethernet eth0 traffic-policy" now bvecomes "set qos interface eth0" | |||
2022-04-07 | qos: T4284: support mirror and redirect on all interface types | Christian Poessinger | |
2022-04-06 | Merge pull request #1275 from sarthurdev/firewall_limit | Christian Poessinger | |
firewall: T4345: Fix incorrect firewall rule limit rate format | |||
2022-04-06 | firewall: T4345: Fix incorrect rule limit rate syntax | sarthurdev | |
2022-04-06 | dns: forwarding: T3804: fix warning message about "system name-server" | Christian Poessinger | |
2022-04-05 | dns: forwarding: T3804: bugfix DHCP name-servers used for recursion | Christian Poessinger | |
Commit 2ecf7a9f9c ('name-server: T3804: merge "system name-servers-dhcp" into "system name-server"') missed out an old dictionary key "system_name_server_dhcp" and thus system nameservers configured via DHCP did not get used for the DNS forwar recursor. | |||
2022-04-04 | login: T4341: busy wait on userdel(8) until the account was deleted successfully | Christian Poessinger | |
2022-04-04 | login: T4341: disable user account prior to deletion | Christian Poessinger | |
2022-04-04 | wwan: T4338: changing interface description should not trigger reconnect | Christian Poessinger | |
Changing the WWAN interface description will trigger an interface reconnect. Reconnects should only be triggered in changes to the connection parameters like bond interfaces. | |||
2022-04-04 | Merge pull request #1267 from sever-sever/T2580 | Christian Poessinger | |
ipoe: T2580: Add pools and gateway options | |||
2022-04-04 | ipoe: T2580: Add pools and gateway options | Viacheslav Hletenko | |
Add new feature to allow to use named pools Can be used also with Radius attribute 'Framed-Pool' set service ipoe-server client-ip-pool name POOL1 gateway-address '192.0.2.1' set service ipoe-server client-ip-pool name POOL1 subnet '192.0.2.0/24' | |||
2022-04-03 | isis: T3156: add segment routing local-block for ISIS | Christian Poessinger | |
2022-04-02 | wwan: T4324: properly start/stop ModemManager and cron helper on interface ↵ | Christian Poessinger | |
add/removal | |||
2022-04-02 | wwan: T4324: cronjob is setup via interfaces-wwan.py - drop dedicated cron file | Christian Poessinger | |
2022-04-01 | bgp: T4332: addpath-tx-per-as requires BGP deterministic-med paramtere to be set | Christian Poessinger | |
2022-03-31 | Merge branch 'vyos:current' into ocserv_local_otp | goodNETnick | |
2022-03-30 | vrf: T4319: do not add IPv6 localhost address if IPv6 is disabled | Christian Poessinger | |
2022-03-30 | vyos.util: T4319: add is_ipv6_enabled() helper function | Christian Poessinger | |
2022-03-28 | Revert "openvpn: T4230: globally enable ip_nonlocal_bind" | Daniil Baturin | |
This reverts commit 1cbcbf40b7721849f9696c05fac65db010a66b7c. | |||
2022-03-27 | graphql: T3993: add unsettable gql option; this is not exposed by CLI | John Estabrook | |
2022-03-26 | bgp: T4321: check neighbor IP addresses against VRF context | Christian Poessinger | |
2022-03-25 | mpls: T915: use vyos.util.sysctl_write() helper function | Christian Poessinger | |
2022-03-25 | vyos.util: T4319: rename sysctl() -> sysctl_write() | Christian Poessinger | |
2022-03-25 | system: T4319: align ipv6 settings with ipv4 by using get_config_dict() | Christian Poessinger | |
2022-03-24 | ipsec: T4288: drop leading empty line to detect runtime environment | Christian Poessinger | |
2022-03-24 | Merge pull request #1251 from srividya0208/T4288a | Christian Poessinger | |
ike-group: T4288 : close-action is missing in swanctl.conf | |||
2022-03-24 | Merge pull request #1248 from sever-sever/T4290 | Christian Poessinger | |
bgp: T4290: Add verify source-interface for none ip neighbor | |||
2022-03-24 | openvpn: T4294: force service restart on openvpn-option node change | Christian Poessinger | |
2022-03-24 | ike-group: T4288 : close-action is missing in swanctl.conf | srividya0208 | |
close-action parameter is missing in the swanctl.conf file | |||
2022-03-23 | bgp: T4314: add missing check to migration script | John Estabrook | |
2022-03-22 | Merge pull request #1252 from dmbaturin/T4313 | Christian Poessinger | |
T4313: handle exceptions in the "generate public-key-command" script | |||
2022-03-22 | T4313: handle exceptions in the "generate public-key-command" script | Daniil Baturin | |
2022-03-21 | qos: T4284: initial XML interface definitions for rewrite | Christian Poessinger | |
2022-03-21 | mirror: T3089: add verify_mirror() also for bond and bridge interfaces | Christian Poessinger | |
2022-03-18 | OSPF : T4304: add check access-list is defined | fett0 | |
2022-03-16 | ocserv: T4231: Added OTP support for Openconnect 2FA | goodNETnick | |
2022-03-15 | bonding: T4301: Fixed arp-monitor option | zsdc | |
In verify function for arp-monitor option was used by mistake an extra conversion for incoming data before comparing items. This commit removed these unnecessary conversions and makes the option operable. | |||
2022-03-14 | Merge pull request #1247 from nicolas-fort/T4286 | Christian Poessinger | |
Firewall: T4286: Correct ipv6-range validator | |||
2022-03-13 | bgp: T4290: Add verify source-interface for none ip neighbor | Viacheslav Hletenko | |
When we use neighbor as interface we must not use option 'source-interface' for example: neighbor eth0 source-interface eth0 Such option can be used for IP/IPv6 neighbors | |||
2022-03-12 | Firewall: T4286: Correct ipv6-range validator | Nicolas Fort | |
2022-03-10 | Revert "component_version: T4291: consolidate read/write functions" | John Estabrook | |
This reverts commit 534f677d36285863decb2cdff179687b4fd690cb. Revert while investigating failure in vyos-configtest. | |||
2022-03-10 | Revert "save-config: T4292: rewrite vyatta-save-config.pl to Python" | John Estabrook | |
This reverts commit c4d389488970c8510200cac96a67182e9333b891. Revert while investigating failure in vyos-configtest. |