Commit Graph
9 Commits
Author SHA1 Message Date
Hans Dedecker 5878373882 netsnmp: add global enabled config option
Add enabled config option in the global uci section; it allows to put into
place the snmpd config but not yet start the netsnmp daemon.
If config option is unset; netsnmp daemon will be started as before.

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-07-10 21:45:37 +02:00
Hans DedeckerandHans Dedecker bb0dfbe6cc net-snmp: add notification config options
Add config support which allow snmpd to take a more active role by sending
traps.

Following config options are supported which map directly on snmpd directives:
-trapcommunity
-trapsink
-trap2sink
-informsink
-authtrapenable
-v1trapaddress
-trapsess

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-06-19 09:00:27 +02:00
Hans Dedecker ae5ee6ba6c net-snmp: add inbound firewall rule support
Add UCI section general which holds the uci parameter network defining on
which interface(s) the snmp agent is reachable for inbound snmp requests
in case the firewall zone does not allow INPUT traffic by default.

For the different zones to which the different interfaces belong firewall
procd input rules are created making the snmp agent reachable on udp port
161.

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-05-24 15:03:23 +02:00
Hans Dedecker 36e073d820 strongswan: uci config support
Add support to configure strongswan via uci.

uci support is based on the following sections
-ipsec : Global config items belonging in the strongswan.conf file
-remote : Defines the remote peer(s)
-tunnel : Defines the IPSec connections in tunnel mode
-transport : Defines the IPSec connections in transport mode
-crypto_proposal : Defines the different crypto proposals

Signed-off-by: Pierre Lebleu <pme.lebleu@gmail.com>
Signed-off-by: Gino Peeters <peeters.gino@gmail.com>
Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-01-06 13:32:13 +01:00
Hans Dedecker 6282bf2114 net-snmp : update to 5.7.3
Update to 5.7.3 by refreshing patches; remove 800-format-security
as upstream integrated.
Add libnl dependency in the package Makefile as net-snmp will check
if libnl is enabled in config_os_libs2.
Remove unneeded PKG_FIXUP build variable.

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-01-04 12:05:34 +01:00
Hans Dedecker 8b69c86664 strongswan: Fix compile error due to __kernel_nlink_t being re-defined
Patch 101-musl-fixes defines __kernel_nlink_t as void; but using
a pre-3.6.11 kernel on an arm cortex defines __kernel_nlink_t as
unsigned short using uclibc
Fix the compile issue by not redefining __kernel_nlink_t

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2016-11-09 11:32:54 +01:00
Hans Dedecker fbbab2e7a7 strongswan: Include musl.h after _GNU_SOURCE define
musl.h was included before _GNU_SOURCE in 101-musl-fixes patch
leading to compilation issue on gcc (RTLD_DEFAULT not being
defined in dlfcn.h due to __USE_GNU not being set).
As described in the feature test macro man page feature macro
can be defined in the source code but need to be defined before
including any headers.

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2016-11-02 13:44:43 +01:00
Hans Dedecker 29311407ef xl2tpd: Enable netifd notification teardown_on_l3_link_down
Set teardown_on_l3_link_down notifying netifd xl2tpd wants to be
teared down when layer3 link loss is detected

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2016-08-12 09:47:01 +02:00
Hans Dedecker 62257e3660 libnet-1.2.x: Enable pf_packet socket support by setting libnet_cv_have_packet_socket to yes
PF_PACKET support is not enabled by setting ac_libnet_have_pf_packet but by setting libnet_cv_have_packet_socket
in the Makefile

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2016-06-30 14:48:25 +02:00