vyos-1x

vyos-1x copied to clipboard

## Change Summary Added ability to generate OTP keys for login from VyOS CLI. ## Types of changes - [ ] Bug fix (non-breaking change which fixes an issue) -...

goodNETnick

firewall: T4709: fix firewall MSS clamping issues

4

## Change Summary * ~Fixes TCP MSS clamping by converting the relevant rules to native nftables.~ * Fiixes the MSS clamping range for both IPv4 and IPv6. * Backports the...

initramfs

DMVPN IPSec T4667: Fix security issue with cleartext GRE escaping when IPSec reconnecting in DMVPN environment

11

## Change Summary Added start_action = trap to data/templates/ipsec/swanctl/profile.j2 This prevents almost all unencrypted GRE packets from escaping DMVPN when IPSec is configured ## Types of changes - [x] Bug...

jmarmorato

## Change Summary This is a draft PR, pending the merge of https://github.com/vyos/vyatta-cfg/pull/50 without which the original problem of allowing whitespace in tag node value names will be exacerbated by...

jestabro

T4659: op-mode: Display bridge interface details

11

## Change Summary Display bridge interface details ## Types of changes - [ ] Bug fix (non-breaking change which fixes an issue) - [x] New feature (non-breaking change which adds...

jack9603301

conntrack: T4309: Allow to use address/network groups

6

## Change Summary Ability to use IPv4 address and network groups in the conntrack ignore rules ## Types of changes - [ ] Bug fix (non-breaking change which fixes an...

sever-sever

T6068: dhcp-server: add split option to dhcp-server configuration.

1

## Change Summary Add split option to dhcp-server configuration.This adds the hability to the user to specify load balancing towards dhcp servers defined in failover. ## Types of changes -...

nicolas-fort

## Change Summary Fixed setting a static IP address by Radius in IPoE. Allowing using named pools by default. ## Types of changes - [x] Bug fix (non-breaking change which...

aapostoliuk

## Change Summary When a VTI interface is just created, it is in ADMIN UP state by default, even if an IPSec peer is not connected. After the peer is...

mergify[bot]

## Change Summary ## Types of changes - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ]...

HollyGurza