summaryrefslogtreecommitdiff
path: root/docs/configuration
AgeCommit message (Collapse)Author
2025-12-15ssh: update list of supported ciphers!Christian Breunig
2025-12-09ipsec: T7594: Change connection-type to trap for all peers and ↵Alexandr K.
configurations (#1719) The previous 'connection-type respond' option in IPsec site-to-site peers was misleading - instead of passively waiting for peer initiation, it would initiate negotiation when matching traffic appeared, potentially causing SA duplication and renegotiation loops.
2025-12-05T7635: Show OpenConnect certificate based authentication mode option in ↵Giga Murphy
configuration example.
2025-11-28Merge pull request #1701 from alexandr-san4ez/T4251-current-fix2Viacheslav Hletenko
syslog: T4251: Rename "permitted-peers" to "permitted-peer"
2025-11-27dhcp-server: T3936: Added support for DHCP Option 82 (#1666)cblackburn-igl
* dhcp-server: T3936: Added support for DHCP Option 82 This commit adds support in both the CLI and the underlying code for DHCP Option 82 to be used to filter/route DHCP address assignments. The primary use case for this is to support enterprise switches which can "tag" DHCP requests with physical real world informaiton such as which switch first saw the request and which port it originated from (known in this context as remote-id and circuit-id). Once client-classes have been defined they can be assigned to subnets or ranges so that only certain addresses get assigned to specific requests. There is also a corresponding code update which pairs with this documentation change. --------- Co-authored-by: Daniil Baturin <daniil@baturin.org>
2025-11-25firewall: T7739: Default ruleset for firewall zones (#1714)Adam Schultz
Adds new syntax documentation for https://github.com/vyos/vyos-1x/pull/4672
2025-11-25ipsec: T8027: voluntarily send its certificate, even if it wasn't requested ↵Christian Breunig
(#1712)
2025-11-21ipsec: remote-access clean whitespacesChristian Breunig
2025-11-13T6686: adds container health check documentation (#1682)Nicolas Vollmar
2025-11-03frr: T7896: Configure frr profile with 'system frr profile' command (#1700)bl0way
2025-10-31syslog: T4251: Rename "permitted-peers" to "permitted-peer"Oleksandr Kuchmystyi
- Renamed `permitted-peers` to `permitted-peer`. - Added support for multiple `permitted-peer` entries.
2025-10-24syslog: T4251: Fix documentation of TLS enablement logic for syslogOleksandr Kuchmystyi
2025-10-22 haproxy: T7906: Probing of a port other than the one to which normal ↵Alexandr K.
traffic is sent (#1697) * haproxy: T7906: Probing of a port other than the one to which normal traffic is sent Add support for specifying a custom health check port for HAProxy backend servers. This allows health probes to target a dedicated endpoint - such as port 8080 - separate from normal traffic ports (e.g., 80 or 443). * Fix article usage --------- Co-authored-by: Daniil Baturin <daniil@baturin.org>
2025-10-20isis: T7722: Added the interface LFA configuration commands (#1692)aapostoliuk
Added the interface LFA configuration commands documentation in the protocol ISIS.
2025-10-02syslog: T4251: Add documentation for syslog TLS configuration (#1686)Alexandr K.
Documented protocol, certificate, auth-mode, and permitted-peers requirements for TLS configuration.
2025-09-18vrf: fix typo (#1681)Peter Lehmann
2025-09-15op-mode:T3477: Correction of reset command syntax as per latest (#1676)srividya0208
2025-09-15kea: T6211: add VRF support for KEA dhcp server (#1637)David Vølker
Co-authored-by: David Vølker <davvol@davvol.dk>
2025-08-26Added firewall recommendations to the mDNS topic (#1669)aapostoliuk
Added firewall recommendations to the mDNS topic.
2025-07-31Merge pull request #1654 from vyos/c-po-patch-1Christian Breunig
container: T7403: add "force" option to "delete container image"
2025-07-24ipsec: T7504: Added retransmission documentation (#1661)aapostoliuk
Added retransmission documentation Co-authored-by: aapostoliuk <aapostoliuk@vyos.io>
2025-07-21add prefix-list6 config example (#1656)Adam Korab
2025-07-03Updated site-to-site IPsec VPN documentation (#1653)aapostoliuk
Added general theoretical IPsec documentation. Changed site-to-site IPsec VPN documentation. Added steps for configuration. Added documentation for troubleshooting site-to-site IPsec VPN.
2025-07-01container: T7403: add "force" option to "delete container image"c-po-patch-1Christian Breunig
2025-06-26Correction of firewall syntax in multiple pages (#1651)srividya0208
2025-06-26Container: T7473: update document for the log-driver (#1639)opswill
2025-06-26DHCP HA : modified the option `name` definition which is incorrectly written ↵srividya0208
(#1645)
2025-06-20T7531: Add documentation for no-ipv6-auto-rafactor2431
2025-06-17zebra: T7349: Added FRR ip import-table x feature (#1643)aapostoliuk
Added FRR ip import-table x feature to import routes from non-main kernel table.
2025-06-12Expanded the OpenVPN information and added examples (#1644)srividya0208
2025-05-29Merge pull request #1628 from 991jo/policy-vrf-and-fwmarkViacheslav Hletenko
policy: added set vrf and mark matching documentation
2025-05-29ssh: T6013: add example how to use a CA for system loginssh-caChristian Breunig
2025-05-20Merge pull request #1635 from vyos/T1771Christian Breunig
T1771: automatic reboot of system into previous image
2025-05-19Fixed documentation about CoA in Accel-PPP servicesaapostoliuk
Fixed documentation about CoA in Accel-PPP services
2025-05-17T1771: automatic reboot of system into previous imageT1771Christian Breunig
2025-05-12Merge pull request #1634 from markh0338/remote-group-docsChristian Breunig
T7386: firewall: update remote-group docs to support IPv6
2025-04-29T7382: adds container log driver option (#1625)Nicolas Vollmar
2025-04-29T7386: firewall: update remote-group docs to allow IPv6Mark
2025-04-29failover: Added additional information about health checks (#1629)aapostoliuk
Added additional information about health checks
2025-04-29router-advert: T7380: auto-ignore documentation (#1626)Ryan Zuwala
Add documentation for new auto-ignore prefixes feature
2025-04-29firewall: improve zone-based firewall docs (#1622)Ben Woods
2025-04-29Merge pull request #1632 from vyos/kernel-option-quietDaniil Baturin
T7397: add "system kernel option quiet" to suppress boot messages
2025-04-26T7397: add "system kernel option quiet" to suppress boot messageskernel-option-quietChristian Breunig
2025-04-26dhcp-server: ddns: T6773: reflect final config language changesAlex Bukharov
2025-04-26T6773: dhcp-server: ddns: Reflect recent configuration language changesAlex Bukharov
2025-04-26dhcp-server: ddns: T6773: DDNS config language changesAlex Bukharov
2025-04-26Change rst lines to the correct length in ↵Alex Bukharov
docs/configuration/service/dhcp-server.rst Co-authored-by: Robert Göhler <github@ghlr.de>
2025-04-26dhcp-server: ddns: T6773: DDNS configuration docoAlex Bukharov
2025-04-25policy: added set vrf and updated mark matchingJohannes Erwerle
2025-04-16Merge pull request #1624 from dmbaturin/T6919-good-bye-fastnetmonRobert Göhler
T7241: remove Fastnetmon