This reverts commit a2b959c50c96698da173b9c4720369a51442cc5c.

This reverts commit 4a9063f755b72786c3c5928b2fa74cf1aa935129.

This is a completing commit to a55585a833 ("frr: T2175: remove no longer
required loop when remo...

Somehow we hit a priority inversion here as we need to remove the VRF assigned
VNI before we can...

migration: T548: Rename quagga scripts for correct seq

Rename quagga migration scripts for correct sequences
between 1.3 and 1.4 branches
7-to-8 in 1.3...

T3721: arm64: fastnetmon 1.2 is amd64 only (arm64 blocker)

In this commit we fix the do not fragment capability
for ping commands. Sorry for messing it up ...

IKE dh-group defaults to 2 (modp1024).

Commit 472c9568 ("isis: T3693: Adding IPv6 redistribution to ISIS") did not
pass rendering, am e...

The class ConfigTreeActiveQuery uses configtree to access tag node
values; note that this will o...

l2tpv3: T1594: Fix timeout before set l2tpv3 interface

In some cases, we need to wait until local address is assigned.
And only then l2tpv3 tunnel can ...

Add the following new commands:
* show bgp mac hash
* show bgp martian next-hop
* show bgp memor...

isis: T3693: Adding IPv6 redistribution to ISIS

In this commit we add the ability to redistribute into
ISIS for IPv6 address family.

Recommended by FRR best deafults
https://github.com/FRRouting/frr/blob/master/doc/user/Useful_Sy...

For more information see:
* https://programmersought.com/article/62242485344/
* https://www.spin...

bgp: T1176: Add solo option for neighbor

configd: T3694: always set script.argv

Commit f520182b ("vyos.util: add is_systemd_service_running() helper function")
added a new help...

Test is a specified systemd service is actually running.
Returns True if service is running, fal...

Several scripts imported by vyos-configd (including
src/conf_mode/protocols_static.py) rely on a...

dhcp-server: T2432: Run dhcpd in group vyattacfg to allow recreate le…

$ generate ipsec mac-ios-profile <connection> remote <ip>

The migrator from 20-to-21 is required as 19-to-20 on VyOS 1.3 - thus simply
rename/reorder the ...

As this is only related to remote-access, keeping it under "options" simply
feels wrong.

set vpn ipsec remote-access connection rw authentication client-mode 'eap-radius'
set vpn ipsec ...

pki: T3642: Add ability to write generated certificates/keys to files

(cherry picked from commit 7292631373ea50f9908796ef2eda32e672d1df2e)

As the keys are now stored inside the CLI configuration and no longer in a file
on the filesyste...

As the keys are now stored inside the CLI configuration and no longer in a file
on the filesyste...

As the keys are now stored inside the CLI configuration and no longer in
a file on the filesyste...

bridge: op-mode: T3698: Support bridge monitoring

Per interface public-key can now be retrieved via:

vyos@vyos:~$ show interfaces wireguard wg10 ...

Update/refresh of DNS records is now handled internally by Strongswan.

bridge: op-mode: T3667: Fix displaying members of a specific bridge interface

pki: https: T3642: Migrate HTTPS to use PKI configuration

pki: openvpn: T3642: Migrate OpenVPN to PKI and refactor

generate ipsec mac-ios-profile <connection> remote <ip|fqdn>

will generate a matching IPSec pro...

pki: eapol: T3642: Migrate EAPoL to use PKI configuration

pki: openconnect: sstp: T3642: Migrate OpenConnect and SSTP to PKI configuration

This extends commit 22791e26 ("VRF: T3655: proper connection tracking for VRFs")
so that when th...

pki: wireguard: T3642: Migrate Wireguard private key directly into CLI

Also renames peer pubkey to public-key for consistency

Connection uniqueness policy to enforce. To avoid multiple connections from the
same user, a uni...

Remote access IP pools can now be defined at a global level and referenced
in IPSec remote-acces...

... this enables a dual-stack IKEv2 VPN deployment.

This reverts commit 70f7f06e778efa4bd3c2ad127d66c080e1db80c5.

VRF: T3655: proper connection tracking for VRFs

Currently, all VRFs share the same connection tracking table, which can
lead to problems:

- tra...

Commit 22739144 ('ipsec: T2816: migrate "ipsec interfaces" to "interface"')
by accident deleted ...

This reverts commit c414479fdf1d5ad77170f977481fb9197c9559ae.

This commit broke the smoketests ...