vyos-1x

vyos-1x copied to clipboard

wireless: T4287: use upstream regulatory database due to kernel signing (backport #3777)

1

## Change Summary Most likely b/c of our non signed Kernel binary we do not trust the Debian signed wireless regulatory database. Fallback to the upstream database instead. ## Types...

mergify[bot]

T5654: policy: move local-route[6] to ip-rule[6]

4

## Change Summary Move `policy [local-route | local-route6]` to `policy [ip-rule | ip-rule6]` ## Types of changes - [ ] Bug fix (non-breaking change which fixes an issue) - [...

nicolas-fort

vxlan: T6505: Support VXLAN VLAN-VNI range mapping in CLI

4

## Change Summary Now can add vlan-to-vni range mapping ``` set interfaces vxlan vxlan0 vlan-to-vni 31-35 vni 10031-10035 ``` ## Types of changes - [ ] Bug fix (non-breaking change...

natali-rs1985

system: op-mode: T3334: allow delayed getty restart when configuring serial ports

6

## Change Summary Reconfiguration of serial console settings from the serial console is not currently possible - the restart at commit terminates the login shell and does not complete the...

talmakion

T5083: extend xml schema definitions to support child requirements

9

## Change Summary Adds declarative child requirements support to XML schema definitions, and converts the container service to utilize this new functionality as a proof of concept. ## Types of...

thomasfinstad

T6486: T6379: Rewrite generate openvpn client-config

3

## Change Summary This command helps to generate users `.ovpn` files Rewrite `generate openvpn client-config` to use Config() It needs to get the default values as `ConfigTreeQuery` is not supporting...

sever-sever

firewall: T4694: Adding GRE flags & fields matches to firewall rules

7

## Change Summary Allow firewall rules to match flags and fields in GRE protocol headers, primarily, the "key" field. Adding this will allow firewall rules to distinguish individual GRE sessions...

talmakion

T5873: ipsec remote access VPN: support VTI interfaces.

20

## Change Summary Route-based VPNs can be more convenient to configure and tie in nicely with existing routing protocols, zone-based firewalls, and other common network configurations. OpenVPN users are already...

lucasec

ipsec: T6148: Fixed reset command by adding init after terminating

2

## Change Summary If 'close_action' equals 'start', strongswan does not reinitialize the session after terminating by vici. This fix adds connection initialization to the reset function after termination, if 'close_action'...

aapostoliuk

firewall: T4694: Adding rt ipsec exists/missing match to firewall configs

6

## Change Summary Current firewall syntax only permits inbound matching of IPsec, using "meta ipsec", which indicates a packet was decrypted from IPsec encap. This extends firewall capability to also...

talmakion