63 lines
1.8 KiB
Markdown
63 lines
1.8 KiB
Markdown
# VyOS
|
|
an open source networking OS based on Debian \
|
|
https://docs.vyos.io/en/sagitta/
|
|
|
|
## Overview
|
|
- VyOS has two modes: operational and configuration mode
|
|
- The operational mode is used to view the system status and run commands (command prompt displays `$`)
|
|
- the configuration mode is used to modify the system configuration (command prompt displays `#`)
|
|
|
|
## Commands
|
|
### Basics
|
|
- enter configuration mode from operational mode: `configure`
|
|
- exit configuration mode: `exit`
|
|
- commit current set of changes `commit`
|
|
- save current changes: `save`
|
|
- `commit`, followed by `save` will save configuration changes
|
|
|
|
### Change Password
|
|
```
|
|
set system login user vyos authentication plaintext-password [password]
|
|
```
|
|
|
|
### Set Hostname
|
|
```
|
|
set system host-name fw01-charlotte
|
|
```
|
|
|
|
### Interfaces
|
|
- set IP: `set interfaces ethernet ethX address 172.16.50.X./24`
|
|
- add description: `set interfaces ethernet ethX description SEC350-WAN`
|
|
- `show interfaces`
|
|
|
|
### Gateway and DNS Server
|
|
- create default route (gateway): `set protocols static route 0.0.0.0/0 next-hop 10.0.17.2`
|
|
- set DNS server: `set system name-server 10.0.17.2`
|
|
|
|
|
|
### NAT
|
|
```
|
|
set nat source rule 10 description "NAT FROM DMZ to WAN"
|
|
set nat source rule 10 outbound-interface eth0
|
|
set nat source rule 10 source address 172.16.50.0/29
|
|
set nat source rule 10 translation address masquerade
|
|
show nat source translations
|
|
```
|
|
|
|
### DNS Forwarding
|
|
```
|
|
set service dns forwarding listen-address 172.16.50.2
|
|
set service dns forwarding allow-from 172.16.50.0/29
|
|
set service dns forwarding system
|
|
```
|
|
|
|
### Forward authentication events from vyos to a remote syslog server
|
|
```
|
|
set system syslog host 172.16.50.5 facility authpriv level info
|
|
```
|
|
|
|
|
|
### Export configuration
|
|
```
|
|
show configuration commands | grep -v "syslog global\|ntp\|login\|console\|config\|hw-id\|loopback\|conntrack"
|
|
```
|