mirror of
https://github.com/vyos/vyos-documentation.git
synced 2025-12-16 10:32:02 +01:00
fix some build warnings
This commit is contained in:
parent
d6d9dbbbef
commit
5fb241c9ae
@ -71,7 +71,7 @@ In both cases, we will use the following settings:
|
||||
dynamic IP for our remote router.
|
||||
|
||||
Setting up certificates
|
||||
-----------------------
|
||||
=======================
|
||||
|
||||
Setting up a full-blown PKI with a CA certificate would arguably defeat the purpose
|
||||
of site-to-site OpenVPN, since its main goal is supposed to be configuration simplicity,
|
||||
@ -129,7 +129,7 @@ Note: certificate names don't matter, we use 'openvpn-local' and 'openvpn-remote
|
||||
Repeat the procedure on the other router.
|
||||
|
||||
Setting up OpenVPN
|
||||
------------------
|
||||
==================
|
||||
|
||||
Local Configuration:
|
||||
|
||||
@ -148,6 +148,7 @@ Local Configuration:
|
||||
set interfaces openvpn vtun1 tls certificate 'openvpn-local' # The self-signed certificate
|
||||
set interfaces openvpn vtun1 tls peer-fingerprint <remote cert fingerprint> # The output of 'run show pki certificate <name> fingerprint sha256
|
||||
on the remote rout
|
||||
|
||||
Remote Configuration:
|
||||
|
||||
.. code-block:: none
|
||||
@ -163,8 +164,9 @@ Remote Configuration:
|
||||
set interfaces openvpn vtun1 tls certificate 'openvpn-remote' # The self-signed certificate
|
||||
set interfaces openvpn vtun1 tls peer-fingerprint <local cert fingerprint> # The output of 'run show pki certificate <name> fingerprint sha256
|
||||
on the local router
|
||||
|
||||
Pre-shared keys
|
||||
---------------
|
||||
===============
|
||||
|
||||
Until VyOS 1.4, the only option for site-to-site OpenVPN without PKI was to use pre-shared keys.
|
||||
That option is still available but it is deprecated and will be removed in the future.
|
||||
@ -200,6 +202,7 @@ Then you need to install the key on the remote router:
|
||||
Then you need to set the key in your OpenVPN interface settings:
|
||||
|
||||
.. code-block:: none
|
||||
|
||||
set interfaces openvpn vtun1 shared-secret-key s2s
|
||||
|
||||
Firewall Exceptions
|
||||
@ -433,6 +436,7 @@ Branch 1's router might have the following lines:
|
||||
set interfaces openvpn vtun10 tls ca-cert ca-1
|
||||
set interfaces openvpn vtun10 tls certificate branch-1
|
||||
|
||||
|
||||
Client Authentication
|
||||
=====================
|
||||
|
||||
|
||||
@ -1204,7 +1204,7 @@ Interface Configuration
|
||||
synchronizing process of the router's database with all neighbors. The
|
||||
default value is 1 seconds. The interval range is 3 to 65535.
|
||||
|
||||
.. _ospf:v3_redistribution_config:
|
||||
.. _ospf:v3_graceful_restart:
|
||||
|
||||
Graceful Restart
|
||||
----------------
|
||||
@ -1245,6 +1245,8 @@ Graceful Restart
|
||||
|
||||
By default, it supports both planned and unplanned outages.
|
||||
|
||||
.. _ospf:v3_redistribution_config:
|
||||
|
||||
Redistribution Configuration
|
||||
----------------------------
|
||||
|
||||
|
||||
@ -180,6 +180,8 @@ IGMP - Internet Group Management Protocol)
|
||||
Configure watermark warning generation for an IGMP group limit. Generates
|
||||
warning once the configured group limit is reached while adding new groups.
|
||||
|
||||
.. _pim:igmp_interface_commands:
|
||||
|
||||
Interface specific commands
|
||||
===========================
|
||||
|
||||
@ -202,7 +204,7 @@ Interface specific commands
|
||||
Use this command to configure in the selected interface the IGMP
|
||||
query response timeout value (10-250) in deciseconds. If a report is
|
||||
not returned in the specified time, it will be assumed the (S,G) or
|
||||
(*,G) state :rfc:`7761#section-4.1` has timed out.
|
||||
(\*,G) state :rfc:`7761#section-4.1` has timed out.
|
||||
|
||||
.. cfgcmd:: set protocols pim interface <interface> igmp version <version-number>
|
||||
|
||||
|
||||
@ -154,6 +154,8 @@ Configuration
|
||||
|
||||
Disable dhcpv6-relay service.
|
||||
|
||||
.. _dhcp_relay:v6_options:
|
||||
|
||||
Options
|
||||
-------
|
||||
|
||||
|
||||
@ -282,6 +282,8 @@ Configuration
|
||||
VRF and NAT
|
||||
-----------
|
||||
|
||||
.. _vrf:nat_configuration:
|
||||
|
||||
Configuration
|
||||
^^^^^^^^^^^^^
|
||||
|
||||
|
||||
@ -110,7 +110,7 @@ Sagitta (the Arrow) is the codename of the current development
|
||||
branch, so there's no VyOS 1.4 yet.
|
||||
|
||||
Circinus (1.5)
|
||||
-------------
|
||||
--------------
|
||||
|
||||
Circinus (the Compass) is the codename of the upcoming development
|
||||
branch, so there's no VyOS 1.5 yet.
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user