321 Commits

Author SHA1 Message Date
mkorobeinikov
5d3bffe651
Ability to set SA life bytes and packets
https://phabricator.vyos.net/T1856
https://github.com/vyos/vyos-1x/pull/1230
2022-02-23 09:13:27 +10:00
Alex Oberhauser
09d7875ac4
Wireguard (Interfaces) making interface name consistent
Renaming wg0 to wg01 to make the interface name consistent with
the rest of the document and between the command and the related
output.
2022-02-21 00:12:07 -05:00
Alex Oberhauser
d43077ed45
WireGuard (Interfaces) page improvements
- Fixing named private key command, not working in the latest version of Vyos
(tested with 1.4-rolling-g7c82c5c7104-20220217). It needs to be the private key.
- Updating the public key in the example to match the private key example, as
generated in the previous section.
- Explaining the persistent-keepalive flag in the RoadWarrior section
2022-02-21 00:08:33 -05:00
Christian Poessinger
4395d0080a openconnect: remove example b/c of missing PKI
OpenConnect lacks full documentation which would also include how to create and
add use keys from the new PKI backend. For the time beeing we should not
confuse users.
2022-02-20 20:28:13 +01:00
Christian Poessinger
9ca9ddcb07
Merge pull request #704 from rickard-tpo/patch-1
Updated OpenConnect SSL Syntax
2022-02-20 20:23:08 +01:00
srividya0208
06f30a8b32 vpn-gre:incorrect syntax: local-ip and remote-ip changed to source-address and remote
vyos@vyos# set int tunnel tun0
Possible completions:

   remote       Tunnel remote address
   source-address
                Source IP address used to initiate connection
2022-02-15 11:11:00 -05:00
Ferran Tufan
8277d906cb
BFD: fix commands for operational mode and configuration mode
Per https://phabricator.vyos.net/T3267, per-interface configuration for OSPF has been moved from the 'interface' to the 'protocols' tree. Finally, for op-mode, per https://phabricator.vyos.net/T4077, 'show protocols bfd' has been renamed to 'show bfd'.
2022-02-05 21:07:51 +01:00
Henning Surmeier
f97d6d63fc policy: T4151: T4219: update local-route(6) docs 2022-02-01 13:40:57 +01:00
rickard-tpo
e614cc874d
Updated SSL Syntax
Updated syntax to match 1.4.x.
2022-01-26 12:27:57 +00:00
Thomas Jensen
f5c0cc1867
Update dhcp-server.rst
Add commands `hostfile-update` and `host-decl-name` to DHCP server service.
2022-01-25 19:50:29 +01:00
Markus Bukowski
60bb01311c Fix typo in adjust-mss description 2022-01-15 13:06:32 +01:00
Markus Bukowski
cb5d20103c Remove dedicated adjust-mss from wwan 2022-01-15 13:04:11 +01:00
Markus Bukowski
08443de04e Add clamp-mss-to-pmtu option and description 2022-01-15 13:01:57 +01:00
Markus Bukowski
da72f4c39f Removed MSS from interface, added IP to pppoe 2022-01-15 12:51:30 +01:00
Robert Göhler
36ba5e95fe
Merge pull request #692 from goodNETnick/firewall_num
firewall: T4100: increase maximum rule number
2022-01-13 20:41:19 +01:00
goodNETnick
6c107f2147 firewall: T4100: default action number 2022-01-12 21:35:54 -05:00
Viacheslav
3d392e7c20 Add service monitroting telegraf 2022-01-12 14:29:41 +02:00
Robert Göhler
c669f5dfdb
Merge pull request #691 from sever-sever/keepalived
ha: Documentation for VRRP and virtual-server
2022-01-11 20:08:48 +01:00
Christian Poessinger
d060cd8f9c T4170: rename "policy ipv6-route" -> "policy route6" 2022-01-11 10:32:53 +01:00
Viacheslav
60bcacc557 ha: Documentation for VRRP and virtual-server 2022-01-10 22:11:06 +02:00
ouliuquan
5765a7ce3a
Update rpki.rst
fix the missing "set" cmd
2022-01-04 14:21:12 +08:00
Christian Poessinger
a14688033e vxlan: add gpe (Generic Protocol extension) option 2021-12-19 10:26:51 +01:00
Christian Poessinger
1086ffe3e5 vxlan: add new "external" keyword 2021-12-19 10:24:28 +01:00
goodNETnick
865ff61166 ESP group parameters 2021-12-07 13:46:15 +10:00
Robert Göhler
d9133703c5
Merge pull request #662 from goodNETnick/master
IKE group parameters
2021-11-29 20:37:49 +01:00
Eshenko Dmitriy
2b09e1b76d
Update tftp-server.rst 2021-11-29 15:37:28 +03:00
Eshenko Dmitriy
dd7f4793ea
Create tftp-server.rst 2021-11-29 14:58:55 +03:00
Eshenko Dmitriy
57818f5b4b
tftp: Add VRF support 2021-11-29 14:50:49 +03:00
Christian Poessinger
9328b4c35e ospfv3: add vrf support 2021-11-28 10:04:35 +01:00
Christian Poessinger
244eced690 ospf: T3753: document new CLI for passive mode 2021-11-27 19:47:22 +01:00
Christian Poessinger
8ff3e99af1 ospfv3: rename intname -> interface on CLI examples 2021-11-27 19:46:51 +01:00
goodNETnick
8f3c52096c IKE group parameters 2021-11-26 11:26:57 +10:00
srividya0208
07f208bd6a VPN IPsec: Added a note related to rsa key
A private key is also needed to finish the ipsec setup which is not mentioned
in the section "Source tunnel from loopbacks/Setting up IPSec". I have added
for reference.
2021-11-18 10:38:43 -05:00
Christian Poessinger
fd4e5422b1 bond: add note about eve-ng NIC driver 2021-11-17 18:48:46 +01:00
Robert Göhler
ad1cc02a66
Merge pull request #657 from fett0/l3vpn-bgp-vrf-doc
doc: L3vpn: configuration basic
2021-11-16 20:48:22 +01:00
fett0
a2e70ea25c doc: L3vpn: change part 2021-11-16 16:44:28 -03:00
Christian Poessinger
7e01e9f244
openvpn: example add missing closing ' 2021-11-15 20:57:14 +01:00
fett0
c7227ec57b doc: L3vpn: configuration basic 2021-11-15 12:41:31 -03:00
3roin
906d804ba4
Minor changes and corrections
Removed unnecessary crypt-key command, corrected tls configuration for LDAP and added a note to commit each PKI information before applying under the OpenVPN interface.
2021-11-09 11:54:45 +04:00
fett0
5d634a973d doc: L3vpn: settings 2021-11-08 11:59:39 -03:00
fett0
1638e748c0 doc: L3vpn: settings 2021-11-08 11:54:54 -03:00
fett0
8cbe082974 doc: L3vpn: settings 2021-11-05 19:03:45 -03:00
fett0
ffd2cc11cf doc: L3vpn: settings 2021-11-05 16:13:06 -03:00
rebortg
7de1cd016e PKI: correct signed ca gen command 2021-10-25 12:56:32 +02:00
goodNETnick
fccc96e134 RSA-keys updated to new syntax 2021-10-20 15:41:45 +10:00
Chris Poole
4ef2f73b26
Update dns.rst with forwarding source-address
Add documentation for "set service dns forwarding source-address <address>"
We needed this setting in a split-horizon DNS down a VPN tunnel to force the source address to a an IP that can be routed back instead of the VPN tunnel endpoint, but can only find it described in the command line currently.
2021-10-19 18:08:40 +01:00
goodNETnick
72a677f75e IPsec key-pair new synthax 2021-10-19 17:36:44 +10:00
Viacheslav
4407326e42 ddns: allow IPv6 explicit example 2021-10-18 15:33:19 +03:00
Nicolas Fort
47703773d9 Command for setting bgp maximum-paths updated, since it was wrong 2021-10-14 13:26:24 -03:00
Christian Poessinger
90172aca00 dns: improve CLI commands by adding missing parameters 2021-10-13 09:32:14 +02:00