1056 Commits

Author SHA1 Message Date
Viacheslav Hletenko
155ddbd19d
Merge pull request #1701 from alexandr-san4ez/T4251-current-fix2
syslog: T4251: Rename "permitted-peers" to "permitted-peer"
2025-11-28 14:18:02 +02:00
cblackburn-igl
af8c829ed0
dhcp-server: T3936: Added support for DHCP Option 82 (#1666)
* dhcp-server: T3936: Added support for DHCP Option 82

This commit adds support in both the CLI and the underlying code for
DHCP Option 82 to be used to filter/route DHCP address assignments.

The primary use case for this is to support enterprise switches which
can "tag" DHCP requests with physical real world informaiton such as
which switch first saw the request and which port it originated from
(known in this context as remote-id and circuit-id). Once
client-classes have been defined they can be assigned to subnets or
ranges so that only certain addresses get assigned to specific
requests.

There is also a corresponding code update which pairs with this
documentation change.

---------

Co-authored-by: Daniil Baturin <daniil@baturin.org>
2025-11-27 14:35:13 +00:00
Adam Schultz
279d3d4edc
firewall: T7739: Default ruleset for firewall zones (#1714)
Adds new syntax documentation for https://github.com/vyos/vyos-1x/pull/4672
2025-11-25 15:25:13 +00:00
Christian Breunig
8c0c0bfe1c
ipsec: T8027: voluntarily send its certificate, even if it wasn't requested (#1712) 2025-11-25 11:54:01 +00:00
Christian Breunig
de4a11142a ipsec: remote-access clean whitespaces 2025-11-21 21:09:15 +01:00
Nicolas Vollmar
fd7d141ef1
T6686: adds container health check documentation (#1682) 2025-11-13 13:32:10 +00:00
bl0way
0cc6bbe6a4
frr: T7896: Configure frr profile with 'system frr profile' command (#1700) 2025-11-03 14:01:24 +00:00
Oleksandr Kuchmystyi
85a097b4a1
syslog: T4251: Rename "permitted-peers" to "permitted-peer"
- Renamed `permitted-peers` to `permitted-peer`.
- Added support for multiple `permitted-peer` entries.
2025-10-31 17:19:27 +03:00
Oleksandr Kuchmystyi
a271d322e2
syslog: T4251: Fix documentation of TLS enablement logic for syslog 2025-10-24 15:01:35 +03:00
Alexandr K.
952837766d
haproxy: T7906: Probing of a port other than the one to which normal traffic is sent (#1697)
* haproxy: T7906: Probing of a port other than the one to which normal traffic is sent

Add support for specifying a custom health check port for HAProxy backend servers.
This allows health probes to target a dedicated endpoint - such as port 8080 - separate
from normal traffic ports (e.g., 80 or 443).

* Fix article usage
---------

Co-authored-by: Daniil Baturin <daniil@baturin.org>
2025-10-22 09:12:13 +01:00
aapostoliuk
93545cfbc8
isis: T7722: Added the interface LFA configuration commands (#1692)
Added the interface LFA configuration commands documentation
in the protocol ISIS.
2025-10-20 12:55:42 +01:00
Alexandr K.
7bed50c205
syslog: T4251: Add documentation for syslog TLS configuration (#1686)
Documented protocol, certificate, auth-mode, and permitted-peers
requirements for TLS configuration.
2025-10-02 13:20:28 +01:00
Peter Lehmann
a980b27826
vrf: fix typo (#1681) 2025-09-18 11:45:36 +01:00
srividya0208
4f5b0e60ea
op-mode:T3477: Correction of reset command syntax as per latest (#1676) 2025-09-15 11:36:50 +01:00
David Vølker
44113897d3
kea: T6211: add VRF support for KEA dhcp server (#1637)
Co-authored-by: David Vølker <davvol@davvol.dk>
2025-09-15 10:16:18 +01:00
aapostoliuk
4081daff9c
Added firewall recommendations to the mDNS topic (#1669)
Added firewall recommendations to the mDNS topic.
2025-08-26 16:35:49 +01:00
Christian Breunig
d8510b7820
Merge pull request #1654 from vyos/c-po-patch-1
container: T7403: add "force" option to "delete container image"
2025-07-31 17:29:57 +02:00
aapostoliuk
f39b25611e
ipsec: T7504: Added retransmission documentation (#1661)
Added retransmission documentation

Co-authored-by: aapostoliuk <aapostoliuk@vyos.io>
2025-07-24 15:29:39 +01:00
Adam Korab
5507e1855d
add prefix-list6 config example (#1656) 2025-07-21 12:41:32 +01:00
aapostoliuk
a973ead642
Updated site-to-site IPsec VPN documentation (#1653)
Added general theoretical IPsec documentation.
Changed site-to-site IPsec VPN documentation. Added steps for configuration.
Added documentation for troubleshooting site-to-site IPsec VPN.
2025-07-03 15:54:26 +01:00
Christian Breunig
1f5ad605bc container: T7403: add "force" option to "delete container image" 2025-07-01 21:51:36 +02:00
srividya0208
711d71329f
Correction of firewall syntax in multiple pages (#1651) 2025-06-26 10:12:41 +01:00
opswill
1772d6700d
Container: T7473: update document for the log-driver (#1639) 2025-06-26 10:10:58 +01:00
srividya0208
2b0d8189cd
DHCP HA : modified the option name definition which is incorrectly written (#1645) 2025-06-26 10:09:10 +01:00
factor2431
102eb9d462
T7531: Add documentation for no-ipv6-auto-ra 2025-06-20 18:27:33 +08:00
aapostoliuk
4b96361fcb
zebra: T7349: Added FRR ip import-table x feature (#1643)
Added FRR ip import-table x feature to import routes from non-main
kernel table.
2025-06-17 08:21:38 +01:00
srividya0208
fcbe40c5d2
Expanded the OpenVPN information and added examples (#1644) 2025-06-12 13:00:03 +01:00
Viacheslav Hletenko
8ce433c4d5
Merge pull request #1628 from 991jo/policy-vrf-and-fwmark
policy: added set vrf and mark matching documentation
2025-05-29 23:10:21 +03:00
Christian Breunig
f5ee81a3bb ssh: T6013: add example how to use a CA for system login 2025-05-29 14:19:13 +02:00
Christian Breunig
60b8d8d64e
Merge pull request #1635 from vyos/T1771
T1771: automatic reboot of system into previous image
2025-05-20 16:27:19 +02:00
aapostoliuk
66ab01fe46 Fixed documentation about CoA in Accel-PPP services
Fixed documentation about CoA in Accel-PPP services
2025-05-19 12:29:30 +03:00
Christian Breunig
6cfd337b8e T1771: automatic reboot of system into previous image 2025-05-17 15:57:37 +02:00
Christian Breunig
835a750a72
Merge pull request #1634 from markh0338/remote-group-docs
T7386: firewall: update remote-group docs to support IPv6
2025-05-12 20:49:41 +02:00
Nicolas Vollmar
67341f4d68
T7382: adds container log driver option (#1625) 2025-04-29 15:35:42 +01:00
Mark
fe9a039060 T7386: firewall: update remote-group docs to allow IPv6 2025-04-29 10:07:27 -04:00
aapostoliuk
51a81fdbfd
failover: Added additional information about health checks (#1629)
Added additional information about health checks
2025-04-29 14:35:29 +01:00
Ryan Zuwala
527d9c0126
router-advert: T7380: auto-ignore documentation (#1626)
Add documentation for new auto-ignore prefixes feature
2025-04-29 14:17:27 +01:00
Ben Woods
170869e18d
firewall: improve zone-based firewall docs (#1622) 2025-04-29 13:43:55 +01:00
Daniil Baturin
f2c96f1a32
Merge pull request #1632 from vyos/kernel-option-quiet
T7397: add "system kernel option quiet" to suppress boot messages
2025-04-29 13:22:58 +01:00
Christian Breunig
fd6b53a2b6 T7397: add "system kernel option quiet" to suppress boot messages 2025-04-26 22:30:05 +02:00
Alex Bukharov
a50a47885a dhcp-server: ddns: T6773: reflect final config language changes 2025-04-26 19:26:48 +10:00
Alex Bukharov
317a44f274 T6773: dhcp-server: ddns: Reflect recent configuration language changes 2025-04-26 19:00:18 +10:00
Alex Bukharov
aef21ce894 dhcp-server: ddns: T6773: DDNS config language changes 2025-04-26 19:00:18 +10:00
Alex Bukharov
17e61c0dbf Change rst lines to the correct length in docs/configuration/service/dhcp-server.rst
Co-authored-by: Robert Göhler <github@ghlr.de>
2025-04-26 19:00:18 +10:00
Alex Bukharov
88f909dd47 dhcp-server: ddns: T6773: DDNS configuration doco 2025-04-26 19:00:18 +10:00
Johannes Erwerle
c369910ce0 policy: added set vrf and updated mark matching 2025-04-25 10:12:17 +02:00
Robert Göhler
0678571263
Merge pull request #1624 from dmbaturin/T6919-good-bye-fastnetmon
T7241: remove Fastnetmon
2025-04-16 23:05:09 +02:00
Christian Breunig
a6a9a54865
dhcpv6: add missing "subnet-id 1" to CLI example 2025-04-14 20:34:39 +02:00
Daniil Baturin
bc5a30751f T7241: remove Fastnetmon 2025-04-14 12:06:00 +01:00
Christian Breunig
9ede5eee5c
Merge pull request #1619 from Embezzle/T5493
firewall: T5493: Document remote-group
2025-03-30 15:02:18 +02:00