686 Commits

Author SHA1 Message Date
Robert Göhler
c99f6c0180
Merge pull request #1179 from sever-sever/nat64
NAT64: Add example of configuration for NAT64
2023-12-11 20:24:23 +01:00
Robert Göhler
f05f2e2b73
Merge pull request #1178 from aapostoliuk/T5688-2-circinus
sstp: T5688: Fixed 'client-ip-pool' configuration in the example
2023-12-11 20:17:59 +01:00
Viacheslav Hletenko
9a049c0070 NAT64: Add example of configuration for NAT64
Add a simple description and example of NAT64
2023-12-08 20:49:54 +02:00
aapostoliuk
f8e26888b9 sstp: T5688: Fixed 'client-ip-pool' configuration in the example
Fixed 'client-ip-pool' configuration in the example
2023-12-08 10:53:21 +02:00
Robert Göhler
4144d78284
Merge pull request #1176 from aapostoliuk/T5688-circunis
accel-ppp: T5688: Changing CLI to create client address pool
2023-12-07 14:17:00 +01:00
Robert Göhler
3c101fedf3
Merge pull request #1175 from nicolas-fort/FWL_UPDATE
Firewall: update firewall bridge docs, and general diagram.
2023-12-07 14:04:52 +01:00
Robert Göhler
cfe60a5644
Merge pull request #1174 from srividya0208/minor_errors
"show ipv6 bgp" command is not available so replaced with show bgp ipv6
2023-12-07 13:45:01 +01:00
Robert Göhler
3a7c582daa
Merge pull request #1173 from aapostoliuk/T4704-circinus
policy: T4704: Added set metric (MED) to (+/-)rtt in route-map
2023-12-07 13:43:36 +01:00
Nicolas Fort
6e545b86f8 Firewall: update firewall bridge docs, and general diagram. Add minor fix to ipv4 firewall doc, and update ipv6 2023-12-06 08:37:44 -03:00
aapostoliuk
1096cbcf95 accel-ppp: T5688: Changing CLI to create client address pool
Changing CLI to create client address pool
2023-12-05 17:30:16 +02:00
srividya0208
4761be6a44 "show ipv6 bgp" command is not available so replaced with show bgp ipv6 2023-12-04 06:24:36 -05:00
aapostoliuk
a78504e95c policy: T4704: Added set metric (MED) to (+/-)rtt in route-map
Added set metric (MED) to (+/-)rtt in route-map
2023-12-04 11:20:52 +02:00
Cheeze_It
b4b3fb12e2 Add ISIS fast reroute documentation
Adding basic descriptions of ISIS fast reroute documentation. Sadly it's sparse because FRR didn't really document it very deeply. But we'll get more as time goes on.
2023-12-03 15:08:55 -07:00
Christian Breunig
0429c31788 vpn: update site2site VTI example 2023-12-02 20:54:27 +01:00
rebortg
d4d3efe7fb fix build and ref warnings 2023-11-30 10:26:50 +01:00
Robert Göhler
7e8c713d45
Merge pull request #1162 from nicolas-fort/RemoveLegacy
Firewall: Remove <Legacy> firewall documentation from current branch.…
2023-11-29 22:12:17 +01:00
Nicolas Fort
165d180109 Firewall: Remove <Legacy> firewall documentation from current branch. 1.5 was born with new firewall structure, so no need to include this information. 2023-11-27 07:20:56 -03:00
Christian Breunig
5953d6f697 ipsec: gre: use dummy interface in example over loopback 2023-11-24 21:29:42 +01:00
Robert Göhler
9a7daff149
Merge pull request #1160 from tooeffayy/circinus-mdns-example-fix
Fix mDNS documentation to correct Example issue
2023-11-23 20:48:26 +01:00
Christian Breunig
f8c2d48a4d
Merge pull request #1155 from vyos/t5753-vxlan-vnifilter
vxlan: T5753: add support for VNI filtering
2023-11-22 11:06:00 +01:00
Christian Breunig
2e3510f988 http: T5762: rename "virtual-host listen-port" -> "virtual-host port" 2023-11-22 11:05:25 +01:00
tooeffayy
9cec1113fd Fix mDNS documentation to correct Example issue 2023-11-21 18:05:15 -05:00
Robert Göhler
ca33735cfc
Merge pull request #1156 from greenpsi/wireguard-pki-update
Update wireguard pki command syntax
2023-11-21 20:37:51 +01:00
Christian Breunig
12ffd3e638 http: T5762: api: make API socket backend communication the one and only default
Why: Smoketests fail as they can not establish IPv6 connection to uvicorn
backend server.

https://github.com/vyos/vyos-1x/pull/2481 added a bunch of new smoketests.

While debugging those failing, it was uncovered, that uvicorn only listens on
IPv4 connections

vyos@vyos# netstat -tulnp | grep 8080
(Not all processes could be identified, non-owned process info
 will not be shown, you would have to be root to see it all.)
tcp        0      0 127.0.0.1:8080          0.0.0.0:*               LISTEN      -

As the CLI already has an option to move the API communication from an IP to a
UNIX domain socket, the best idea is to make this the default way of
communication, as we never directly talk to the API server but rather use the
NGINX reverse proxy.
2023-11-21 08:22:39 +01:00
Christian Breunig
c8f8c2d10c vxlan: T5753: add support for VNI filtering 2023-11-18 19:57:43 +01:00
greenpsi
c32a5a06c4 Update wireguard pki command syntax 2023-11-17 00:15:04 +01:00
greenpsi
f0349e7f1f Nat update
Update some nat commands to new syntax
2023-11-16 00:19:59 +01:00
Christian Breunig
9e9f2755a8
Merge pull request #1151 from vyos/frr-pim-T5733
pim: igmp: T5733: adjust to latest CLI syntax
2023-11-15 18:21:41 +01:00
Christian Breunig
2de650e60c pim: igmp: T5733: adjust to latest CLI syntax 2023-11-13 21:29:52 +01:00
Robert Göhler
092965a217
Update flowtables.rst 2023-11-13 11:16:14 +01:00
Robert Göhler
f59bff9cdd
Merge pull request #1144 from nicolas-fort/fwall-nat-update
Fwall nat update
2023-11-12 21:43:16 +01:00
Robert Göhler
2c14b973a3
Update flowtables.rst 2023-11-12 21:42:49 +01:00
Indrajit Raychaudhuri
510485fd14 mdns: T5227, T5615, T5719: Update mDNS documentation for additional options
Add mdns repeater docs for additional conf-mode and op-mode options.
2023-11-09 22:00:25 -06:00
Daniil Baturin
e4785773bf
Merge pull request #1146 from srividya0208/minor_errors
correction of typos
2023-11-09 13:27:19 +00:00
srividya0208
040472e043 correction of typos 2023-11-09 08:19:04 -05:00
Nicolas Fort
b6c3c7f40a Firewall Update: improve documentation and split file for better experience while reading. Add brief notes regarding Flowtables and Bridge firewall, leaving a note that those documents are still under development. New explanation for Netfilter based firewall, which includes new diagrams. 2023-11-08 13:51:47 -03:00
Robert Göhler
8a1d41b7f1
Merge pull request #1127 from JeffWDH/master
Update ssh.rst
2023-11-07 21:27:00 +01:00
Nicolas Fort
ece28ce809 Update nat and firewall docs. Re-add zone and update several things. 2023-11-01 11:09:42 -03:00
Christian Breunig
8c838d7ca9 T5699: vxlan: migrate "external" CLI know to "parameters external" 2023-10-31 07:37:52 +01:00
JeffWDH
6b2d50c755
Add "monitor log ssh" and "monitor log ssh dynamic-protection" 2023-10-29 10:26:45 -04:00
Christian Breunig
11cb9979e0 vxlan: T5668: add CLI knob to enable ARP/ND suppression 2023-10-28 21:35:55 +02:00
Christian Breunig
8a5804881c vxlan: add missing "parameters nolearning" help 2023-10-28 21:34:25 +02:00
Robert Göhler
7aa0c1ab32
Merge pull request #1126 from srividya0208/ipsec_vips
Added config example of vpn ipsec site-to-site
2023-10-26 13:36:13 +02:00
srividya0208
4d7e44d3e7 Added config example of vpn ipsec site-to-site 2023-10-26 02:00:19 -04:00
Robert Göhler
4db66e6c0c
Update nat44.rst
change interface-name and interface-group
2023-10-25 21:33:07 +02:00
Robert Göhler
535bd97639
Revert "Revert "NAT: add interface-group documentation. "" 2023-10-25 21:30:35 +02:00
JeffWDH
c9a06800f9
Update ssh.rst
Added:
show log ssh
show log ssh dynamic-protection
show ssh fingerprints
show ssh fingerprints ascii
show ssh dynamic-protection
2023-10-19 12:32:06 -04:00
Robert Göhler
858e209ef9
Merge pull request #1119 from aslanvyos/patch-8
Update dmvpn.rst
2023-10-19 13:05:10 +02:00
Robert Göhler
e64913496b
Merge pull request #1118 from aslanvyos/patch-7
Update site2site_ipsec.rst
2023-10-19 10:26:06 +02:00
Veli-Matti Helke
d3afeafb41 Fix two typos in Wireguard doc 2023-10-18 22:08:58 +03:00