aapostoliuk
6ec864e8d3
Updated site-to-site IPsec VPN documentation ( #1660 )
...
* Updated site-to-site IPsec VPN documentation
Added general theoretical IPsec documentation.
Changed site-to-site IPsec VPN documentation.
Added steps for configuration.
Added documentation for troubleshooting site-to-site IPsec VPN.
Backported from https://github.com/vyos/vyos-documentation/pull/1653
---------
Co-authored-by: aapostoliuk <aapostoliuk@vyos.io>
Co-authored-by: Daniil Baturin <daniil@baturin.org>
2025-07-28 13:51:55 +01:00
srividya0208
2ff18f0cb9
Updated the installation page with latest information ( #1659 )
2025-07-21 12:38:10 +01:00
srividya0208
6dd1ef8e34
dhcp-ha: correction of dhcp HA example and option ( #1646 )
2025-06-26 10:08:42 +01:00
mergify[bot]
6a7eb7beed
T7531: Add documentation for no-ipv6-auto-ra ( #1649 )
...
(cherry picked from commit 102eb9d462d7dcaaba71c1b7e27cf91fda84a21f)
Co-authored-by: factor2431 <factor2431@outlook.com>
2025-06-26 10:00:03 +01:00
Christian Breunig
d9ca18fc33
Merge branch 'sagitta' into mergify/bp/sagitta/pr-1632
2025-05-05 19:48:23 +02:00
Christian Breunig
83371c8e60
T7397: add "system kernel option quiet" to suppress boot messages
...
(cherry picked from commit fd6b53a2b6e2e7757a3600f3ead5fde6855fedd1)
# Conflicts:
# docs/configuration/system/option.rst
2025-04-29 12:24:53 +00:00
Nicolas Vollmar
cb55e6525b
T6703: Add documentation for AMD pstate driver
...
(cherry picked from commit 1930ed17847404d185b1bef0f1e428a37870de67)
2025-04-26 19:52:40 +00:00
systeembeheerder
de4b289219
Update index.rst
...
Explain the limitations in the current version
2025-04-01 09:13:36 +02:00
Robert Göhler
6bd29de86c
Merge pull request #1615 from vyos/mergify/bp/sagitta/pr-1612
...
policy: T7158: Added match source-vrf to route-map (backport #1612 )
2025-03-25 08:23:41 +01:00
aapostoliuk
591e3a5506
policy: T7158: Added match source-vrf to route-map
...
Added match source-vrf to route-map
(cherry picked from commit 10547374e3645353455e39fe40e3ecceee6f0d2f)
2025-03-25 07:21:21 +00:00
aapostoliuk
5da1a87835
bgp: T7157: Allow using route-maps for VRF route leaking in BGP
...
Allow using route-maps for VRF route leaking in BGP
(cherry picked from commit e585f01bf26967835675fa0aafe5308e79f0ba9a)
2025-03-25 07:20:17 +00:00
systeembeheerder
bd737fcb66
Update vxlan.rst
...
more wrong ports..
2025-02-20 11:24:53 +01:00
systeembeheerder
d972a7dbdf
Update vxlan.rst
2025-02-20 11:08:31 +01:00
systeembeheerder
18ae054bda
Update vxlan.rst
...
remove "As VyOS is Linux based the default port used is not using 4789 as the default IANA-assigned destination UDP port number. Instead VyOS uses the Linux default port of 8472."
See
* https://github.com/vyos/vyos-1x/blob/current/src/conf_mode/interfaces_vxlan.py#L226
* https://github.com/vyos/vyos-1x/blob/current/interface-definitions/interfaces_vxlan.xml.in#L105
Looks like VyOS DOES use 4789 and not 8472 by default.
2025-02-20 11:05:41 +01:00
systeembeheerder
92a5e4cf1e
Update vxlan.rst
...
`set interfaces vxlan <interface> source-address <interface>`
should be
`set interfaces vxlan <interface> source-address <IP address>`
in 1.4.1:
```
# set interfaces vxlan vxlan1 source-address
Possible completions:
<x.x.x.x> IPv4 source address
<h:h:h:h:h:h:h:h> IPv6 source address
127.0.0.1
::1
```
2025-02-20 10:52:29 +01:00
Oliver Kelly
de55569fbb
updated dhcp-server documentation for sagitta
2025-01-13 12:09:04 +00:00
Nicolas Fort
ffed422df9
Netflow: add warning message regarding low performnace on router handling lot of traffic.
...
(cherry picked from commit 1832b803cedc7747340e5cb78fea7062ccbe71dd)
2024-09-23 20:22:28 +00:00
fett0
8435b83795
add mac sec over wan
...
(cherry picked from commit b7ad59279d4b253d0aaa4783acca9bd294c3c4f4)
2024-09-14 06:08:18 +00:00
fett0
8fde11a574
OPENVPN: T6555: add documentation bridge feature
...
(cherry picked from commit 71050ef7f329003421c02d9a3eacd589b3785e3e)
2024-09-13 15:09:01 +00:00
Robert Göhler
d3686ec9c3
VRF: write more clear, table id is mandatory
2024-09-06 21:43:36 +02:00
mergify[bot]
4d3b4dfbf3
router-advert: T6681: add new option "no-send-interval" ( #1534 ) ( #1535 )
...
(cherry picked from commit ac6681ca8baab2546ba4522913147582a058de64)
Co-authored-by: Christian Breunig <christian@breunig.cc>
2024-09-03 09:54:33 +01:00
Nicolas Fort
bef6d321e3
ntp: T6344: only one entry per IP family is supported for <set service ntp listen-addreess> command
...
(cherry picked from commit 5416ec288c3aa17c161aeb9b3026c2c63ce94f7b)
2024-08-29 20:32:37 +00:00
Nicolas Fort
5615a6ea40
SSH: change command configuration documentation since its wrong. Appropriate command is <set service ssh mac ...>. Also add clear statement on how to define multiple algorithms.
...
(cherry picked from commit ccf50ef211c14661bae100a640d70c981b393934)
2024-08-29 20:32:37 +00:00
Adam Korab
4d6e71ea03
Update prefix-list.rst
...
add IPv4 prefix-list example
(cherry picked from commit 7600f55643458fb84f2018d35acbd00eceb7a4fe)
2024-08-21 08:03:10 +02:00
Robert Göhler
9ef6d851be
Merge pull request #1518 from aslanvyos/patch-12
...
TACACS Authentication
2024-08-10 22:33:07 +02:00
Balazs Szenczy
ddc8993fe8
Update l2tp.rst
...
Small correction
(cherry picked from commit e835834cded213855cde83335fc49b0d19b9004c)
2024-08-10 20:31:56 +00:00
aslanvyos
977f9646aa
TACACS Authentication
2024-08-09 14:05:44 +04:00
aslanvyos
1ce187b2a0
TACACS Authentication
...
Clarification about TACACS
2024-08-08 14:31:08 +04:00
Nicolas Vollmar
6e4cac26ff
T6539: Add documentation for reverse proxy logging configuration
...
(cherry picked from commit d624058e258ec0f7a77f7a3990b7fffb18a43ea1)
2024-08-07 11:22:59 +00:00
Christian Breunig
e96e7bc19a
ipsec: T6599: add CLI documentation to disable ESP re-key
...
(cherry picked from commit 284b5b8e9bec10f4e69c0add321361a832d39b66)
2024-07-22 12:27:19 +02:00
Christian Breunig
00c35e6869
Add initial hardware platform Gowin GW-FN-1UR1-10G
...
(cherry picked from commit 2a6cf7f4981bed8fc56ed4fa31a041b6ebecf1b6)
2024-07-21 22:25:25 +02:00
whyrlpool
2ae974066f
VPN documentation proofreading ( #1506 )
...
* Fix typos in openconnect.rst
change Cerbort->Certbot
Update first line to reflect that openconnect was introduced in 1.3-rolling (T2036)
* typo in dmvpn.rst
* ipsec.rst justification, minor phrasing changes
* l2tp.rst justification and phrasing changes.
* sstp.rst phrasing, justification changes
* Update ipsec.rst
rephrase for clarity and to avoid possessive plural apostrophe
(cherry picked from commit 873a461bdf972ebd815baf50893700b0a2518213)
2024-07-18 16:09:24 +02:00
srividya0208
dc6ec3b965
ipsec: Added information about operational commands
...
(cherry picked from commit cd1dcb5d8e66e3431415ebf31a2d5902b30c1ffc)
2024-07-13 15:14:10 +00:00
Tim Harman
cc5bd392e6
Update Login with OTP Usage
...
Make it clear the user has to append their OTP token
to their password.
(cherry picked from commit 50c3ddb357097da8cddab5f92d1a774316c99c24)
2024-07-06 05:16:31 +00:00
aapostoliuk
c93d13be47
Deleted not existing options in geneve interface
...
Deleted not existing options in geneve interface.
`set interfaces geneve <interface> disable-link-detect`
`set interfaces geneve <interface> disable-flow-control`
`set interfaces geneve <interface> vrf <vrf>`
(cherry picked from commit 10ddceecba0bd7680090806d2f00f7975cd11d1f)
2024-07-03 14:43:54 +00:00
Nicolas Vollmar
50c1c1bfed
T2891: add documentation for ring-buffer option
...
(cherry picked from commit d160ef08f6f2952a93bfb058f86d193c80fee4b8)
2024-06-26 19:56:13 +00:00
aapostoliuk
0e18f4b416
Added info how to use DNAT and VRRP with rfc3768-compatibility
...
Added warning info on how to use DNAT and VRRP with
rfc3768-compatibility.
(cherry picked from commit c712670979fc1e2690482374e29b5b9384535dee)
2024-06-26 19:49:33 +00:00
Simon Novak
ea8308a8f1
Update flowtables.rst
...
chore(docs): fixed typos & relevant distinctions for ipv4, ipv6
(cherry picked from commit e2427a9c2515780a12fc3a6702cfc95793053605)
2024-06-20 14:18:02 +00:00
Nicolas Fort
d9bf0b0917
Configuration Blueprints: add new example for firewall+vrf. Also, add note about usage of inbound and outbound interface when interface is attached to a non-default vrf.
...
(cherry picked from commit fe416b56cfa30494172a0310c16fd2787330c7bb)
# Conflicts:
# docs/configexamples/zone-policy.rst
2024-06-18 19:32:13 +00:00
Christian Breunig
5a5c8fd305
Merge pull request #1477 from vyos/mergify/bp/sagitta/pr-1476
...
T6219: Add doc for container sysctl parameter (backport #1476 )
2024-06-13 07:21:44 +02:00
fett0
dacd5ca475
T5307: Add doc for traffic match groups
...
(cherry picked from commit 4f71374b273cb0b0f2f181563134324f1d7e57fc)
2024-06-13 05:20:23 +00:00
Nicolas Vollmar
f3d731e6fc
T6219: Add doc for container sysctl parameter
...
(cherry picked from commit a3205cd2ee142ee41239a06acdd2994a3a372de0)
2024-06-11 06:07:34 +00:00
Alex W
aae1bb2841
reverse-proxy: T6434: Support additional health-check protocols
...
(cherry picked from commit a5354a65be668f10136b2f65ba1c9a41bf2708ca)
2024-06-05 19:28:38 +00:00
Alex W
f4a3730b0c
reverse-proxy: T6409: Remove unused backend parameters
...
(cherry picked from commit c2bc79045d065c1661290c9b1baf2f1f0a95ea7c)
2024-05-30 19:04:30 +00:00
Nicolas Vollmar
c024153b14
T6406: rename cpus to cpu
...
(cherry picked from commit a983832d14c28888d035e774ee63c2f459b84aa4)
2024-05-28 21:01:44 +00:00
Nicolas Vollmar
809dd15c52
T6406: document cpu limit config option
...
(cherry picked from commit 6742fa6314fdf448f814d18dac70a638587b75e6)
2024-05-28 21:01:41 +00:00
rebortg
d182801f7d
reverse-proxy: T6370: Documented usage of http-response-headers option
2024-05-28 13:51:18 +02:00
srividya0208
ea88dec5fa
OpenVPN: Added information about mfa settings
...
(cherry picked from commit 6a056849d77c9184ba3004251e22946e6bfa3601)
2024-05-20 08:17:18 +00:00
Nicolas Vollmar
9d72615c66
T6358: add documentation for container host pid
...
(cherry picked from commit f96fa5dd08ab5d3bd3438ebf2c7704abd5df28ae)
2024-05-17 13:36:47 +00:00
Christian Breunig
e8e47c8429
Merge pull request #1451 from nvollmar/T4519
...
T4519: update documentation to reference DUID instead of IAID_DUID
2024-05-16 20:13:02 +02:00