 Marek Isalski
|
9a619f1048
|
bind ssh to VRF; console on ttyS0 and ttyS1; exec environment
|
4 years ago |
|
Marek Isalski
|
f82403aec1
|
create exec environment if binding to loopback address
|
4 years ago |
|
Marek Isalski
|
053d5df46e
|
VRF support (for management networks)
|
4 years ago |
|
Marek Isalski
|
5754e0209f
|
ssh ciphers, key-exchanges, and macs
|
4 years ago |
|
Marek Isalski
|
2010802ef5
|
don't send /64 to upstream
|
4 years ago |
|
Marek Isalski
|
402262d7d4
|
goodbye oldschool netflow iptables rule
|
4 years ago |
|
Marek Isalski
|
132ae74c2d
|
newer versions of VyOS reject config with same prefix+length
|
4 years ago |
|
Marek Isalski
|
f2e306899e
|
don't log martians
|
4 years ago |
|
Marek Isalski
|
ee175fe7a1
|
more kernel version tweaks for BCP38
|
4 years ago |
|
Marek Isalski
|
ee9973ee76
|
fix RADIUS support pillar
|
4 years ago |
|
Marek Isalski
|
bad9fa19b9
|
add RADIUS
|
4 years ago |
FAELIX SALT
|
538dd78cca
|
add peeringdb support
|
5 years ago |
|
FAELIX SALT
|
29cd4ee90e
|
need to be able to accept most-specific prefixes from downstreams
|
5 years ago |
|
FAELIX SALT
|
43bdf0f0cc
|
add default-originate to BGP peers
|
5 years ago |
|
FAELIX SALT
|
b6d01c8683
|
reduce CPU usage by doing netflow samping in iptables
|
5 years ago |
|
FAELIX SALT
|
1488e40075
|
nflog-range becomes nflog-size
|
5 years ago |
|
FAELIX SALT
|
d8600e464e
|
add hphr-*-LONG-* versions of prefix-lists
|
5 years ago |
|
Marek Isalski
|
5f44c407dc
|
defautl no-ipv4-unicast
|
5 years ago |
|
Marek Isalski
|
7ab8727e2a
|
remove route-map/self.j2
|
5 years ago |
|
Marek Isalski
|
64d2556102
|
template up the users
|
5 years ago |
|
Marek Isalski
|
e6b58a06f8
|
add route-reflector and route-server; fix for NetBox 2.7.x
|
5 years ago |
|
Marek Isalski
|
692c53901d
|
set mode for VyOS 1.3
|
5 years ago |
|
Marek Isalski
|
603fbe1979
|
add route-reflector-client support; fix form_factor
|
5 years ago |
|
Marek Isalski
|
68d95a05ad
|
trying to do netflow
|
5 years ago |
|
Marek Isalski
|
32058cfb5d
|
deploy properly, not testing
|
5 years ago |
|
Marek Isalski
|
7690ec0b12
|
use dicts for BGP control plane protection
|
5 years ago |
|
Marek Isalski
|
b9c5154ec3
|
add BGP control plane filtering
|
5 years ago |
|
Marek Isalski
|
df5e80366e
|
sort out naming of subinterfaces; add sysctls
|
5 years ago |
|
Marek Isalski
|
f88ce976ea
|
add ability to originate default on OSPF
|
5 years ago |
|
Marek Isalski
|
4f85fe97ab
|
add RPKI, maximum-prefix, nexthop-self, and BGP passwords
|
5 years ago |
|
Marek Isalski
|
4fddfa33ca
|
don't fill logs with martians
|
5 years ago |
|
Marek Isalski
|
86f12cf445
|
add RPKI cache connections
|
5 years ago |
|
Marek Isalski
|
be1cdefb27
|
readdress workstation.marek.isal.ski
|
5 years ago |
|
Marek Isalski
|
688784a0ff
|
route-maps for redistribute in BGP; allowas-in; communities; flow accounting
|
5 years ago |
|
Marek Isalski
|
082cdd1f0c
|
add VYATTA_CT_PREROUTING_HOOK for flow statistics
|
5 years ago |
|
Marek Isalski
|
cac2f9a599
|
fixup route-map for ipv6
|
6 years ago |
|
Marek Isalski
|
3a6df16492
|
ssh ciphers and various options
|
6 years ago |
|
Marek Isalski
|
88f6215e8b
|
add blackhole signalling by BGP
|
6 years ago |
|
Marek Isalski
|
ec1905f1bd
|
now doing BCP38
|
6 years ago |
|
Marek Isalski
|
ac521117b0
|
taking over iptables/ip6tables and ipset
|
6 years ago |
|
Marek Isalski
|
2c9be299e0
|
interface routes and fixes to bgpq3 prefix-list generation
|
6 years ago |
|
Marek Isalski
|
b60798c787
|
add bind.so for LD_PRELOAD; run bgpq3 on the router again
|
6 years ago |
|
Marek Isalski
|
87807af1d4
|
only save if commit succeeds
|
6 years ago |
|
Marek Isalski
|
495dc7acf6
|
add IPv6 support to bind.so
|
6 years ago |
|
Marek Isalski
|
413c2b34c5
|
add bind.so
|
6 years ago |
|
Marek Isalski
|
7c99c98792
|
making prefix filters programmatically
|
6 years ago |
|
Marek Isalski
|
a6fbfb43c1
|
add update-source to BGP neighbors
|
6 years ago |
|
Marek Isalski
|
1056ddfdb9
|
use dicts instead of lists to make merging work more nicely
|
6 years ago |
|
Marek Isalski
|
ad775bffe9
|
use netbox's tagged_vlans on an interface to create sub-interfaces
|
6 years ago |
|
Marek Isalski
|
9cb533f71d
|
deploying a very basic template config
|
6 years ago |