vyos-documentation.git/docs/configuration/protocols, branch secure-boot-updates

docs: T8887: backfill Phase 1 commands from recent vyos-1x additions (#2134)

2026-10-13T12:40:47+00:00

* docs: T8887: backfill Phase 1 commands from recent vyos-1x additions Documents six CLI features added to vyos-1x between Nov 2025 and May 2026 that were missing from the docs (gap-audit T8886, Phase 1 / T8887): - policy route-map match source-peer (vyos-1x#5149, T8588) - high-availability vrrp snmp trap (vyos-1x#5108, T8448) - protocols segment-routing traffic-engineering subtree (vyos-1x#4994, T6750) - protocols bgp bmp target monitor pre-policy/post-policy/local-rib (vyos-1x#4922, T8133) - firewall global-options geoip provider/maxmind-* (vyos-1x#4949, T7926/T8049) - vpn ipsec childless IKE SA option (vyos-1x#4930, T8136) system frr watchfrr-timeout and service router-advert prefix base-interface are now documented on rolling via the page rewrites in vyos-documentation#2251 and vyos-documentation#2132. protocols bgp parameters as-notation is deferred: rolling carries it commented out; to be handled in a follow-up. 🤖 Generated by [robots](https://vyos.io) * docs: T8887: wrap pre-existing overlong lines in touched files - route-map, ipsec_general: wrap five pre-existing overlong lines so the doc linter (which scans whole modified files) passes on touched files 🤖 Generated by [robots](https://vyos.io) * docs: T8887: document BMP prerequisites and mandatory target address - state that set system frr bmp needs a commit plus a router reboot (or FRR restart) before BMP targets can be committed (protocols_bgp.py verify) - add target address (mandatory) and port (default 5000) commands and include the address in the example 🤖 Generated by [robots](https://vyos.io) * docs: T8887: state SR-TE segment-list commit requirements Per protocols_segment-routing.py verify(): a segment list needs at least one index; each index needs an MPLS label or a NAI; an adjacency NAI needs both source- and destination-identifier; a prefix identifier needs an algorithm; IS-IS/OSPF import, adjacency/prefix, IPv4/IPv6 and spf/strict-spf are mutually exclusive. Add a complete example. 🤖 Generated by [robots](https://vyos.io) * docs: T8887: escape placeholders in GeoIP and childless cfgcmd headers 🤖 Generated by [robots](https://vyos.io) * Apply suggestions from Liydmyla Co-authored-by: LiudmylaNad <235844477+LiudmylaNad@users.noreply.github.com> --------- Co-authored-by: Daniil Baturin Co-authored-by: LiudmylaNad <235844477+LiudmylaNad@users.noreply.github.com>

docs: T9200: note no-ipv6-auto-ra doesn't stop already-active RA (#2195)

2026-10-06T17:38:04+00:00

* docs: T9200: note no-ipv6-auto-ra doesn't stop already-active RA no-ipv6-auto-ra only prevents future RA initiation; it doesn't retroactively silence router advertisements already sent on an established session. Confirmed on VyOS 1.5.1: neither a soft nor a hard clear/reset bgp on the neighbor stopped it. Per FRR's bgp_zebra_terminate_radv()/upstream PR FRRouting/frr#19487, that only runs when the neighbor's remote-as is removed and re-added. * docs: T9200: distinguish blast radius of the two RA workarounds remote-as re-add only affects the one neighbor; a bgpd/frr restart clears every BGP session on the router. The note listed them as equivalent options - reframe the restart as a maintenance-window fallback instead. Flagged by CodeRabbit review on PR #2195. * Make the note less wordy --------- Co-authored-by: Daniil Baturin

docs: igmp-proxy: document firewall requirements and operational commands (#2174)

2026-08-14T14:45:04+00:00

Co-authored-by: JR Lanteigne

docs: Update BGP page to VyOS 1.5 standards (#2111)

2026-08-14T12:57:42+00:00

* docs: Update BGP page to VyOS 1.5 standards * Update bgp.md * Apply suggestions from code review Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * Apply suggestions from code review Co-authored-by: Daniil Baturin * Apply suggestions from code review Co-authored-by: LiudmylaNad * Update bgp.md * Fix a few factual issues and improve the wording Co-authored-by: Daniil Baturin * Apply style suggestions from code review Co-authored-by: Daniil Baturin * Re-added the closing ``` at line 2289 that the CI bot flagged. No content change --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Daniil Baturin

docs(Traffic Engineering): Clarify OSPF advertisement is not yet supported

2026-07-03T15:50:21+00:00

bgp: T6573: add input/output queue limit CLI commands

2026-06-30T13:57:32+00:00

docs: Update IS-IS page to VyOS 1.5 standards (#2102)

2026-06-16T12:14:56+00:00

* docs: Update IS-IS page to VyOS 1.5 standards * Apply suggestions from code review Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * Update isis.md * Update isis.md --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

docs: Update OpenFabric page to VyOS 1.5 standards (#2060)

2026-06-09T10:24:18+00:00

* docs: Update OpenFabric page to VyOS 1.5 standards * Update openfabric.md * Update openfabric.md * Update openfabric.md

docs: Update RPKI page to VyOS 1.5 standards (#2061)

2026-06-09T10:20:33+00:00

* docs: Update RPKI page to VyOS 1.5 standards * Update rpki.md * Update rpki.md

docs: Update Traffic Engineering page to VyOS 1.5 standards (#2066)

2026-06-08T17:04:56+00:00

* docs: Update Traffic Engineering page to VyOS 1.5 standards * Update traffic-engineering.md * Update traffic-engineering.md