Extended CLI command: "set vpn ipsec remote-access connection rw pool" with a
"radius" option.

(cherry picked from commit b4b2c91127289c7b62afb24304054d57357a48c5)

The current command to restart any of the FRR processes is:

vyos@vyos:~$ restart frr
Possible c...

Each wireguard interface requires a unique port for in and out
connections. This commit adds the...

ipsec: T3780: shutting down vti when tunnel is down

T3773: delete the original "show system integrity" command

... there was a type setting ecp512 instead of ecp521.

When the interface name was stripped down from "eth0.201" to "eth" to determine
the appropriate ...

Commit 474db49a ("bgp: T3759: "l2vpn evpn" and ipv4/ipv6 safi route-targets
differ") made it pos...

The "l2vpn evpn" address-family route-target command only accepts a single
route-target value co...

... as we will get another bgp route-target validator soon.

After commit 209ce3d9 ("container: T3769: when container networks are used,
always bridge the ne...

Commit a30d74f4 (container: op-mode: T3765: add "connect container mysql-server")
added a CLI op...

As VyOS is a network operation system with bridging and NATing available from
the VyOS CLI, it m...

Volumes must have both a source and destination path specified. Also the
source path must exist ...

A call to .items() was missing that triggered the following error:
ValueError: too many values t...

As VyOS CLI is the only truth for dealing with containers we do not need to
query if a container...

A container is limited to 256MB memory by default and will always restart on
failure.

An environment variable passed to podman can only consist out of alphanumeric
characters, a hype...

A environment variable MUST always have a value specified. Non existing
values will cause the fo...

Commit 99440fc0 ("Makefile: fix logic to detect empty "node.def" files")
disabled the detection ...

That nasty workaround to always specify the same value for the node.def file
as the help text is...

This is an extension to commit b4fdcebe ("T3165: prevent override of populated
node.def file wit...

Now that the PPPoE interface also makes use of the vyos.ifconfig.interface
class, we need to adj...

Now that MSS clamping is done on the "per-interface" level the entire PPPoE
stuff would have nee...

vyos@vyos# show interfaces pppoe
pppoe pppoe10 {
+ access-concentrator asdfg
authentica...

WireGuard, Tunnel and also PPPoE all need a ways to calculate a synthetic MAC
address used for t...

Both building blocks only differed in the help text, so use IP for both
IPv4 and IPv6.

WWAN does no londer need to render any configuration files.

Now that we are based on XFRM interfaces we can also enable specific IPv4 and
IPv6 interface opt...

Getting rid of "set firewall options" and move it from:

set firewall options interface ethX adj...

Skip dh_strip_nondeterminism - this is very time consuming and we have no non
deterministic outp...

This adds the following new commands:
set protocols bgp address-family ipv4-unicast route-map vp...

This reverts commit 0ecc2c26f7ac939e4e23c14f5027ac7592c25761.

This reverts commit 29e438755c8bd2b9598a2016a3c42891f0cbfa1d.

IKE lifetime is life_time, and ESP lifetime is rekey_time.

Commit 7a873eb6 ("ipsec: T3764: bugfix missing IKE and ESP lifetime values")
re-added the lost i...

During the migration the IKE and ESP key/re-key lifetime settings got lost in
translation. This ...

Fixes the following error:

vyos@vyos:~$ podman logs 2511d118563f
WARN[0000] The cgroupv2 manage...

Make the both, export and import XML block re-usable by the IPv4 AFI.

Add the following new commands:
* set protocols bgp address-family ipv4-unicast route-target vpn...

Add the following new commands:
* set protocols bgp address-family ipv4-unicast rd vpn export
* ...