mirror of
https://github.com/vyos/vyos-documentation.git
synced 2025-10-26 08:41:46 +01:00
migrate to new transifex client
This commit is contained in:
parent
99ccd5cd0e
commit
b18aa2f9d8
1831
.tx/config
Normal file → Executable file
1831
.tx/config
Normal file → Executable file
File diff suppressed because it is too large
Load Diff
@ -1 +1 @@
|
||||
Subproject commit f157aea8c7dddd159c9daecc528250370d560db2
|
||||
Subproject commit 8403848a338d54f9e489fca1efd1143d820a14a6
|
||||
@ -1,40 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 09:56+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../404.rst:4 42917a064811496db687a7fa03efffaf
|
||||
msgid "Page Not Found"
|
||||
msgstr ""
|
||||
|
||||
#: ../../404.rst:6 d0620a8760284f7c80177078dc193317
|
||||
msgid ""
|
||||
"Sorry, We could not find a page. Try using the search box or go to the "
|
||||
"release homepage:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../404.rst:9 924fb0d486e14d928a5922a0507c2aaa
|
||||
msgid "`1.2.x (crux) <https://docs.vyos.io/en/crux/>`_"
|
||||
msgstr ""
|
||||
|
||||
#: ../../404.rst:10 0aeab8255f2f4d468d43948024b1b0d8
|
||||
msgid "`1.3.x (equuleus) <https://docs.vyos.io/en/equuleus/>`_"
|
||||
msgstr ""
|
||||
|
||||
#: ../../404.rst:11 08ef1ea3d1de421baaa3d48442a83d88
|
||||
msgid "`rolling release (sagitta) <https://docs.vyos.io/en/latest/>`_"
|
||||
msgstr ""
|
||||
@ -1,492 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:05+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../automation/cloud-init.rst:7 5a1e58e08ed74c5fa7cc0aeccc824ddb
|
||||
msgid "VyOS cloud-init"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:9 b57440a9bce34a6eb76d28e83f310660
|
||||
msgid ""
|
||||
"Cloud and virtualized instances of VyOS are initialized using the industry-"
|
||||
"standard cloud-init. Via cloud-init, the system performs tasks such as "
|
||||
"injecting SSH keys and configuring the network. In addition, the user can "
|
||||
"supply a custom configuration at the time of instance launch."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:16 c7b2cea0881242eba6163a4d117bed1f
|
||||
msgid "Config Sources"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:18 7941c60fef0341a5a744caf4634a2b5b
|
||||
msgid "VyOS support three types of config sources."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:20 4f51359757f4479eae57bfea31130721
|
||||
msgid ""
|
||||
"Metadata - Metadata is sourced by the cloud platform or hypervisor. In some "
|
||||
"clouds, there is implemented as an HTTP endpoint at "
|
||||
"``http://169.254.169.254``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:24 4d39a74fa33b4d599ec13cc1f5bed499
|
||||
msgid ""
|
||||
"Network configuration - This config source informs the system about the "
|
||||
"network settings like IP addresses, routes, DNS. Available only in several "
|
||||
"cloud and virtualization platforms."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:28 f49f055ec7354d9a9ddeba37cafd74f3
|
||||
msgid ""
|
||||
"User-data - User-data is specified by the user. This config source offers "
|
||||
"the ability to insert any CLI configuration commands into the configuration "
|
||||
"before the first boot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:34 c92475e7b9784db89a83843b7355825f
|
||||
msgid "User-data"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:36 afb22e05c7614bb887894f6913f59417
|
||||
msgid ""
|
||||
"Major cloud providers offer a means of providing user-data at the time of "
|
||||
"instance launch. It can be provided as plain text or as base64-encoded text,"
|
||||
" depending on cloud provider. Also, it can be compressed using gzip, which "
|
||||
"makes sense with a long configuration commands list, because of the hard "
|
||||
"limit to ~16384 bytes for the whole user-data."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:42 1ade5247a27141fba6ebc4cffca0dbd4
|
||||
msgid ""
|
||||
"The easiest way to configure the system via user-data is the Cloud-config "
|
||||
"syntax described below."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:47 260de9e525f9497294684996454457c9
|
||||
msgid "Cloud-config modules"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:49 440c4a2d60674ac783a105eb4e25baca
|
||||
msgid "In VyOS, by default, enables only two modules:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:51 e934c507f557401cadb02574e8ef8343
|
||||
msgid ""
|
||||
"``write_files`` - this module allows to insert any files into the filesystem"
|
||||
" before the first boot, for example, pre-generated encryption keys, "
|
||||
"certificates, or even a whole ``config.boot`` file. The format is described "
|
||||
"in the cloudinit documentation `Cloud-init-write_files`_."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:55 1cf4edc857344fb693602873fc191d5f
|
||||
msgid ""
|
||||
"``vyos_userdata`` - the module accepts a list of CLI configuration commands "
|
||||
"in a ``vyos_config_commands`` section, which gives an easy way to configure "
|
||||
"the system during deployment."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:61 154581d4c6864f9a95196e246f6ef186
|
||||
msgid "cloud-config file format"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:63 4c286e38f4ef4732bb47d89e004a30b8
|
||||
msgid ""
|
||||
"A cloud-config document is written in YAML. The file must begin with "
|
||||
"``#cloud-config`` line. The only supported top-level keys are "
|
||||
"``vyos_config_commands`` and ``write_files``. The use of these keys is "
|
||||
"described in the following two sections."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:71 df934b7aa27d4f61b38aa39a09c223a3
|
||||
msgid "Initial Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:74 073a09a0edfd492f8a660b0c56ed4d38
|
||||
msgid ""
|
||||
"The key used to designate a VyOS configuration is ``vyos_config_commands``. "
|
||||
"What follows is VyOS configuration using the \"set-style\" syntax. Both "
|
||||
"\"set\" and \"delete\" commands are supported."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:78 610d037891dc4c29a9cf61de1f97f081
|
||||
msgid "Commands requirements:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:80 0d7a52496c8f433f87e8384f46102b96
|
||||
msgid "One command per line."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:81 f5ddeb42c3ca454caacc06f66342ae43
|
||||
msgid "If command ends in a value, it must be inside single quotes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:82 d695ba3d75674b4ebe336d0ba024fe4c
|
||||
msgid "A single-quote symbol is not allowed inside command or value."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:84 3b81fae7e5e34921b7d5729c1e1443e2
|
||||
msgid ""
|
||||
"The commands list produced by the ``show configuration commands`` command on"
|
||||
" a VyOS router should comply with all the requirements, so it is easy to get"
|
||||
" a proper commands list by copying it from another router."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:88 b66086100a5c4d7e91fe9df3cdba22a0
|
||||
msgid ""
|
||||
"The configuration specified in the cloud-config document overwrites default "
|
||||
"configuration values and values configured via Metadata."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:91 cf8392222e2e4aada3e83cf24a334711
|
||||
msgid ""
|
||||
"Here is an example cloud-config that appends configuration at the time of "
|
||||
"first boot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:107 7ac4e2c2b13b4bcba5cf96245596895c
|
||||
msgid "System Defaults/Fallbacks"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:109 12a9a939ac2e4c9db7db16e5b08344bd
|
||||
msgid "These are the VyOS defaults and fallbacks."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:111 bf96658e8ac746a08f667ba36b36c9b0
|
||||
msgid "SSH is configured on port 22."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:112 03570fecffce4ac8a69c7fe9adb37914
|
||||
msgid "``vyos``/``vyos`` credentials if no others specified by data source."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:113 c8d8dd97c06c4b78ac9caa9b4761649c
|
||||
msgid ""
|
||||
"DHCP on first Ethernet interface if no network configuration is provided."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:115 2e145b1477e34669bec37bdadc3c8154
|
||||
msgid "All of these can be overridden using the configuration in user-data."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:120 845892930f3a4465b390fce4f6fd701f
|
||||
msgid "Command Execution at Initial Boot"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:122 4d20c2b6fed844e5997c822112a4f96f
|
||||
msgid ""
|
||||
"VyOS supports the execution of operational commands and linux commands at "
|
||||
"initial boot. This is accomplished using ``write_files`` to certain files in"
|
||||
" the /opt/vyatta/etc/config/scripts directory. Commands specified in "
|
||||
"opt/vyatta/etc/config/scripts/vyos-preconfig-bootup.script are executed "
|
||||
"prior to configuration. The /opt/vyatta/etc/config/scripts/vyos-postconfig-"
|
||||
"bootup.script file contains commands to be executed after configuration. In "
|
||||
"both cases, commands are executed as the root user."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:131 aae55067a9ac4887a911b230015ec5f9
|
||||
msgid ""
|
||||
"Note that the /opt/vyatta/etc/config is used instead of the /config/scripts "
|
||||
"directory referenced in the :ref:`command-scripting` section of the "
|
||||
"documentation because the /config/script directory isn't mounted when the "
|
||||
"``write_files`` module executes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:136 3ad52c113fd44f5f9712b1e3d3fde0a7
|
||||
msgid ""
|
||||
"The following example shows how to execute commands after the initial "
|
||||
"configuration."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:153 b0ea9945f0ff4d1c9cb07531ccb0a081
|
||||
msgid ""
|
||||
"If you need to gather information from linux commands to configure VyOS, you"
|
||||
" can execute commands and then configure VyOS in the same script."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:156 59beca45859f453399c465e3502cd4b3
|
||||
msgid ""
|
||||
"The following example sets the hostname based on the instance identifier "
|
||||
"obtained from the EC2 metadata service."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:178 643d992607ac4362ad1a396e3837065a
|
||||
msgid "NoCloud"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:180 f545509ef9fb488e8523799bad5c66a9
|
||||
msgid ""
|
||||
"Injecting configuration data is not limited to cloud platforms. Users can "
|
||||
"employ the NoCloud data source to inject user-data and meta-data on "
|
||||
"virtualization platforms such as VMware, Hyper-V and KVM."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:184 2b2d4c6f2d214088b78d1f6ee5f676a8
|
||||
msgid ""
|
||||
"While other methods exist, the most straightforward method for using the "
|
||||
"NoCloud data source is creating a seed ISO and attaching it to the virtual "
|
||||
"machine as a CD drive. The volume must be formatted as a vfat or ISO 9660 "
|
||||
"file system with the label \"cidata\" or \"CIDATA\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:189 dc4845c5e4444218935c1b2262b6731b
|
||||
msgid ""
|
||||
"Create text files named user-data and meta-data. On linux-based systems, the"
|
||||
" mkisofs utility can be used to create the seed ISO. The following syntax "
|
||||
"will add these files to the ISO 9660 file system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:197 1ed8e489b45d4d9a87524b1b4c089cd3
|
||||
msgid ""
|
||||
"The seed.iso file can be attached to the virtual machine. As an example, the"
|
||||
" method with KVM to attach the ISO as a CD drive follows."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:217 7a8f0a5f0bde43f197d6eb89b0cdc29f
|
||||
msgid ""
|
||||
"For more information on the NoCloud data source, visit its `page "
|
||||
"<https://cloudinit.readthedocs.io/en/latest/topics/datasources/nocloud.html>`_"
|
||||
" in the cloud-init documentation."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:223 6c50539fd8294145bf4cca4981db28af
|
||||
msgid "Troubleshooting"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:225 1608b5a68a754edfa27acafa62057558
|
||||
msgid ""
|
||||
"If you encounter problems, verify that the cloud-config document contains "
|
||||
"valid YAML. Online resources such as https://yamlvalidator.com/ provide a "
|
||||
"simple tool for validating YAML."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:229 a3db85f1710145fdbd8c2181d1ada0a4
|
||||
msgid ""
|
||||
"cloud-init logs to /var/log/cloud-init.log. This file can be helpful in "
|
||||
"determining why the configuration varies from what you expect. You can fetch"
|
||||
" the most important data filtering output for ``vyos`` keyword:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:239 60f249a2e8a64bc1a9ab81609926604c
|
||||
msgid "Cloud-init on Proxmox"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:241 a94fe08b104d4a45add735d528466212
|
||||
msgid ""
|
||||
"Before starting, please refer to cloud-init `network-config-docs`_ in order "
|
||||
"to know how to import user and network configurations."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:244 f3ad6b56da1048179d4587c5ac5d09e9
|
||||
msgid "Most important keys that needs to be considered:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:246 f89e13c7ddfe4eb1ae24b64b7abe1c73
|
||||
msgid "VyOS configuration commands are defined in user-data file."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:248 27a35953378648f1966f05482a9329ef
|
||||
msgid "Networking configurations shouldn't be passed in user-data file."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:250 ea015f712bac4a808fa1899062108879
|
||||
msgid ""
|
||||
"If no networking configuration is provided, then dhcp client is going to be "
|
||||
"enabled on first interface. Bare in mind that this configuration will be "
|
||||
"inyected at an OS level, so don't expect to find dhcp client configuration "
|
||||
"on vyos cli. Because of this behavior, in next example lab we will disable "
|
||||
"dhcp-client configuration on eth0."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:256 259dd768212147ef9ad021440aaa4f09
|
||||
msgid "Also, this lab considers:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:258 a85277b4738c471abd72d79b2639b35b
|
||||
msgid "Proxmox IP address: **192.168.0.253/24**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:260 c63831f9ddf14a8db29f00fea590c64c
|
||||
msgid ""
|
||||
"Storaged used: volume local, which is mounted on directory **/var/lib/vz**, "
|
||||
"and contains all type of content, including snippets."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:263 3ed9315ed4f64b328bbf4f2e147340cf
|
||||
msgid ""
|
||||
"Remove default dhcp client on first interface, and load other configuration "
|
||||
"during first boot, using cloud-init."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:268 cf856c6413e34601a093a2239e3df64c
|
||||
msgid "Generate qcow image"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:270 894f4769e6324b32a683c0510fcfcd9a
|
||||
msgid ""
|
||||
"A VyOS qcow image with cloud-init options is needed. This can be obtained "
|
||||
"using `vyos-vm-images`_ repo. After clonning the repo, edit the file "
|
||||
"**qemu.yml** and comment the **download-iso** role."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:274 df71fe2982564599a5f44ba3a55f9794
|
||||
msgid ""
|
||||
"In this lab, we are using 1.3.0 VyOS version and setting a disk of 10G. "
|
||||
"Download VyOS .iso file and save it as ``/tmp/vyos.iso``. Command used for "
|
||||
"generating qcow image:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:284 3a763bbe4f6e47d4bc74ea16091b0544
|
||||
msgid ""
|
||||
"File generated with previous command: ``/tmp/vyos-1.3.0-cloud-"
|
||||
"init-10G-qemu.qcow2``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:287 686677d85d264f1aad4df8ef4e3901b6
|
||||
msgid "Now, that file needs to be copied to proxmox server:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:296 d0a265be824942f3bf27e86483b22443
|
||||
msgid "Prepare cloud-init files"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:298 16b77d3ee3804a148c8809bde254fc67
|
||||
msgid "In Proxmox server three files are going to be used for this setup:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:300 3cff48ac8ac246aa9e69c66df565560c
|
||||
msgid ""
|
||||
"**network-config**: file that will indicate to avoid dhcp client on first "
|
||||
"interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:303 ff9c9021dbf64b50809bb79aade0a92b
|
||||
msgid "**user-data**: includes vyos-commands."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:305 f7b8139b2dc74420ab638a7c84859d6f
|
||||
msgid "**meta-data**: empty file (required)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:307 2f5769aa6f34455c89561c148233c3c6
|
||||
msgid ""
|
||||
"In this lab, all files are located in ``/tmp/``. So, before going on, lets "
|
||||
"move to that directory:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:314 0287930f880d41d3adbc9d8fe5b6df1a
|
||||
msgid ""
|
||||
"**user-data** file must start with ``#cloud-config`` and contains vyos-"
|
||||
"commands. For example:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:333 b90181ca013447bab6244341bdc266ea
|
||||
msgid ""
|
||||
"**network-config** file only has configuration that disables the automatic "
|
||||
"dhcp client on first interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:337 1db23d5d94754a2ab1081e30d3fe0da5
|
||||
msgid "Content of network-config file:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:347 877a675380044cd586ebb0e05e4c531b
|
||||
msgid "Finaly, file **meta-data** has no content, but it's required."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:351 8864c9d6648a40ac8dd41157ba845afb
|
||||
msgid "Create seed.iso"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:353 1adab209dbb2495f83f9808c51ac9749
|
||||
msgid ""
|
||||
"Once the three files were created, it's time to generate the ``seed.iso`` "
|
||||
"image, which needs to be mounted to the new VM as a cd."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:356 d41701cb8aa3407e86af0b16966aea6c
|
||||
msgid "Command for generating ``seed.iso``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:363 46c3c877315148b3accab6ededd0c84c
|
||||
msgid ""
|
||||
"**NOTE**: be carefull while copying and pasting previous commands. Doble "
|
||||
"quotes may need to be corrected."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:368 863a7a3b62c64d1cbdad92442a0386c5
|
||||
msgid "Creating the VM"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:370 3cdde5f24eb24df1907c63206757c453
|
||||
msgid ""
|
||||
"Notes for this particular example, that may need to be modified in other "
|
||||
"setups:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:373 f1e258960ed34b2aa3b5ee9a663162ca
|
||||
msgid "VM ID: in this example, VM ID used is 555."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:375 5ff861cc0d1c44be86c4bd9f67b4aff7
|
||||
msgid "VM Storage: ``local`` volume is used."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:377 60f1e819fadc486bbebfb084047c88cb
|
||||
msgid ""
|
||||
"ISO files storage: ``local`` volume is used for ``.iso`` file storage. In "
|
||||
"this scenario ``local`` volume type is set to **directory**, abd attached to"
|
||||
" ``/var/lib/vz``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:381 11865be2e655411d870bea8c7e9b8acb
|
||||
msgid "VM Resources: these parameters can be modified as needed."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:383 091d1eb812234a78a136ead5906ecdbf
|
||||
msgid ""
|
||||
"``seed.iso`` was previously created in directory ``/tmp/``. It's necessary "
|
||||
"to move it to ``/var/lib/vz/template/iso``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:390 f22c998b66c04304b73fc1dcdabc7ec0
|
||||
msgid "On proxmox server:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:409 3c984167cf6b4083ba0310a3e8d0075f
|
||||
msgid "Power on VM and verifications"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:411 182c863cbaaf422493b001eadc5b13a5
|
||||
msgid "From cli or GUI, power on VM, and after it boots, verify configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:416 df2b02863d1847d386567809945976c9
|
||||
msgid "References"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:418 f9149026e8564f5aa658f00087d0c282
|
||||
msgid "VyOS `cloud-init-docs`_."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:420 9a146991908c4a6e8371986ba2e4d0c6
|
||||
msgid "Cloud-init `network-config-docs`_."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/cloud-init.rst:422 32c72da7713245e293b1a7d0d4547827
|
||||
msgid "Proxmox `Cloud-init-Support`_."
|
||||
msgstr ""
|
||||
@ -1,194 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:05+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../automation/command-scripting.rst:6 2c8c2f645849459f89dc1a54980764dc
|
||||
msgid "Command Scripting"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:8 a81211b38eec4d71870e462e6651c57f
|
||||
msgid ""
|
||||
"VyOS supports executing configuration and operational commands non-"
|
||||
"interactively from shell scripts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:11 4cc198a3f7d24c02a154413cabfbcafb
|
||||
msgid ""
|
||||
"To include VyOS specific functions and aliases you need to ``source "
|
||||
"/opt/vyatta/etc/functions/script-template`` files at the top of your script."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:21 195e544d2ec04affbf7cb5f96643fc40
|
||||
msgid "Run configuration commands"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:23 17f56fe10e0142e89dae23bf4372c53b
|
||||
msgid ""
|
||||
"Configuration commands are executed just like from a normal config session. "
|
||||
"For example, if you want to disable a BGP peer on VRRP transition to backup:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:37 be8951ac72144fdf9b0ae534c7040f51
|
||||
msgid "Run operational commands"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:39 8c78190b1a15458d9a5f0b0327b58972
|
||||
msgid ""
|
||||
"Unlike a normal configuration session, all operational commands must be "
|
||||
"prepended with ``run``, even if you haven't created a session with "
|
||||
"configure."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:50 baf374a95fce4d9a81e78b279342a2ed
|
||||
msgid "Run commands remotely"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:52 421af86bb192480ba3dad43c93bd835d
|
||||
msgid ""
|
||||
"Sometimes you simply wan't to execute a bunch of op-mode commands via SSH on"
|
||||
" a remote VyOS system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:63 db1bcedc53ff4ba8adc0f6efcbc8c6af
|
||||
msgid "Will return:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:77 cbbe6f88dc8d4e009c1e44918d8be89f
|
||||
msgid "Other script languages"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:79 46162a174314441ab91c18aa9aaa1323
|
||||
msgid ""
|
||||
"If you want to script the configs in a language other than bash you can have"
|
||||
" your script output commands and then source them in a bash script."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:82 e579b800945a42238f353a642e0a70bc
|
||||
msgid "Here is a simple example:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:102 371f68a335124cc3b41c936e6427fefb
|
||||
msgid "Executing Configuration Scripts"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:104 df683ee968244371935d1e5f54381ffc
|
||||
msgid ""
|
||||
"There is a pitfall when working with configuration scripts. It is tempting "
|
||||
"to call configuration scripts with \"sudo\" (i.e., temporary root "
|
||||
"permissions), because that's the common way on most Linux platforms to call "
|
||||
"system commands."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:108 59f9aad0a42b43fa828f5a80c6dc4b5b
|
||||
msgid ""
|
||||
"On VyOS this will cause the following problem: After modifying the "
|
||||
"configuration via script like this once, it is not possible to manually "
|
||||
"modify the config anymore:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:118 a053834b07a44621845caaa7ea29cec7
|
||||
msgid ""
|
||||
"This will result in the following error message: ``Set failed`` If this "
|
||||
"happens, a reboot is required to be able to edit the config manually again."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:121 9a5ca8218e28475181b872ae7951f075
|
||||
msgid ""
|
||||
"To avoid these problems, the proper way is to call a script with the "
|
||||
"``vyattacfg`` group, e.g., by using the ``sg`` (switch group) command:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:128 b1877ee52bd24e759b2d42164c56fc63
|
||||
msgid ""
|
||||
"To make sure that a script is not accidentally called without the "
|
||||
"``vyattacfg`` group, the script can be safeguarded like this:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:138 a73d2d5ad41b4aaca7b8c46e8978f080
|
||||
msgid "Executing pre-hooks/post-hooks Scripts"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:140 4b63288775e14ec79d7070908fb6507c
|
||||
msgid ""
|
||||
"VyOS has the ability to run custom scripts before and after each commit"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:142 df1cc1dea2984ac18439061fcc497f7e
|
||||
msgid ""
|
||||
"The default directories where your custom Scripts should be located are:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:152 512a1b7409f149c09140fe2a7028b912
|
||||
msgid ""
|
||||
"Scripts are run in alphabetical order. Their names must consist entirely of "
|
||||
"ASCII upper- and lower-case letters,ASCII digits, ASCII underscores, and "
|
||||
"ASCII minus-hyphens.No other characters are allowed."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:156 61e8706e6133433ebf34b6131240b637
|
||||
msgid ""
|
||||
"Custom scripts are not executed with root privileges (Use sudo inside if "
|
||||
"this is necessary)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:159 a9ffdbf67dd040bbbccabfc967a01f44
|
||||
msgid ""
|
||||
"A simple example is shown below, where the ops command executed in the post-"
|
||||
"hook script is \"show interfaces\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:176 364370e38f4e42fbad4a02dc26aadf6b
|
||||
msgid "Preconfig on boot"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:178 3015d098134f40f79b42c6cf31397430
|
||||
msgid ""
|
||||
"The ``/config/scripts/vyos-preconfig-bootup.script`` script is called on "
|
||||
"boot before the VyOS configuration during boot process."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:181
|
||||
#: ../../automation/command-scripting.rst:200 d6777b5c6e784829a7bcb980465f44d6
|
||||
#: fd486e82744a4d9ab8d582376a99fe51
|
||||
msgid ""
|
||||
"Any modifications were done to work around unfixed bugs and implement "
|
||||
"enhancements that are not complete in the VyOS system can be placed here."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:184
|
||||
#: ../../automation/command-scripting.rst:203 01578e1114e148bc8c4e57f22fac02b0
|
||||
#: 3afb2a6b8ef049fba0b5ee464db29e6d
|
||||
msgid "The default file looks like this:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:195 4122b5cd64b5428b9cea053dd25af3c0
|
||||
msgid "Postconfig on boot"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:197 8b08494bbe6340c4bc24143ae5fb4f35
|
||||
msgid ""
|
||||
"The ``/config/scripts/vyos-postconfig-bootup.script`` script is called on "
|
||||
"boot after the VyOS configuration is fully applied."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/command-scripting.rst:212 e7f470d251e24d66affcfc9374388278
|
||||
msgid ""
|
||||
"For configuration/upgrade management issues, modification of this script "
|
||||
"should be the last option. Always try to find solutions based on CLI "
|
||||
"commands first."
|
||||
msgstr ""
|
||||
@ -1,30 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:05+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../automation/index.rst:3 3901e58b6a9e4771bc4fdac1f10d707a
|
||||
msgid "VyOS Automation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/index.rst:6 47c60c158f06404d97222b5b68773229
|
||||
msgid "Saltstack"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/index.rst:7 9b93b4dad8db45c1a4d99186ab441d51
|
||||
msgid "startup scripts"
|
||||
msgstr ""
|
||||
@ -1,56 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:05+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../automation/vyos-ansible.rst:6 e405b3cd16fd4277a3b245e98f939389
|
||||
msgid "Ansible"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-ansible.rst:8 d20f4882f8ed42c48545b9e08440d24c
|
||||
msgid ""
|
||||
"VyOS supports configuration via ansible. Need to install ``ansible`` and "
|
||||
"``python3-paramiko`` module"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-ansible.rst:11 b256da61f8fb417e857e02cd654d1a53
|
||||
msgid "Structure of files"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-ansible.rst:24 fe2d6a59800142aa8f7d7089c5903489
|
||||
msgid "File contents"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-ansible.rst:26 b6825e1462764e35ac127d1305adc30e
|
||||
msgid "ansible.cfg"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-ansible.rst:35 dd37dc1fca7042b7a42de60899de039c
|
||||
msgid "id_rsa_docker.pub. Needs to declare only public key exactly."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-ansible.rst:42 244ef3fa45a64870b4c2f93f34f93297
|
||||
msgid "hosts"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-ansible.rst:56 8dcbd822cb6641b8924558f1f81e4076
|
||||
msgid "main.yml"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-ansible.rst:80 592908ab475948ca9d6640d236f6918c
|
||||
msgid "Run ansible"
|
||||
msgstr ""
|
||||
@ -1,167 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:05+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../automation/vyos-api.rst:7 07d92ac230e84acd850c6c56f9238a08
|
||||
msgid "VyOS API"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:9 ec3a654fc40a41509c6320d64796822b
|
||||
msgid "For configuration and enabling the API see :ref:`http-api`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:13 13d0f2086690496290e1666ed1ac14df
|
||||
msgid "Authentication"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:15 25d9abb447b84093a6cba32829e95073
|
||||
msgid ""
|
||||
"All endpoints only listen on HTTP POST requests and the API KEY must set as "
|
||||
"``key`` in the formdata."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:18 b15a5df54b174996a0f356f56895799c
|
||||
msgid ""
|
||||
"Below see one example for curl and one for python. The rest of the "
|
||||
"documentation is reduced to curl."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:41 252ce6bc7e2245349d8f0883011edd9b
|
||||
msgid "API Endpoints"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:44 3f35b10b1bdb4a729e744a243862c8e9
|
||||
msgid "/retrieve"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:46 22ecac4116354d649e383c4dbb67002a
|
||||
msgid ""
|
||||
"With the ``retrieve`` endpoint you get parts or the whole configuration."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:48 6a45d66826544acb962f4b1f2948fcb0
|
||||
msgid ""
|
||||
"To get the whole configuration, pass an empty list to the ``path`` field"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:79 06b5968f35ca40faabf6f34fd38ac531
|
||||
msgid ""
|
||||
"To only get a part of the configuration, for example ``system syslog``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:106 5cf33fb0621d4263b8da22d1b15c168f
|
||||
msgid ""
|
||||
"if you just want the Value of a multi-valued node, use the ``returnValues`` "
|
||||
"operation."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:109 3e3c810c9d35481191225d8204240e18
|
||||
msgid "For example, get the addresses of a ``dum0`` interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:129 32e76c75c60747ea90fc1da23ed22a21
|
||||
msgid "/reset"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:131 04506f0762a74afe90a49f3749da11a7
|
||||
msgid "The ``reset`` endpoint run a ``reset`` command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:147 03e6e381062541a28f40487ac95d93d6
|
||||
msgid "/image"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:149 f066c84e0a4e448e84abc7f7594f47df
|
||||
msgid "To add or delete an image, use the ``/image`` endpoint."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:151 b3446c29406246fb91eb70ec5e18e792
|
||||
msgid "add an image"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:168 fd06f368fea143e69379753c9718a5c4
|
||||
msgid "delete an image, for example ``1.3-rolling-202006070117``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:185 7ef7094b6f624238a5c5eaf1be0666d4
|
||||
msgid "/show"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:187 9f1cdf71940045788be283501f2d710b
|
||||
msgid "The ``/show`` endpoint is to show everything in the operational mode."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:189 35c82a691c0a43e68967e89023d43839
|
||||
msgid "For example, show which images are installed."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:209 8bd2484508c84078837601953b36655e
|
||||
msgid "/generate"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:211 ad32f841945e4ae0bf0c6020efedb644
|
||||
msgid "The ``generate`` endpoint run a ``generate`` command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:228 33f32365e11745ad8e267a8b323deb3a
|
||||
msgid "/configure"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:230 be11836154a94618814cecb82ef8bf86
|
||||
msgid ""
|
||||
"You can pass a ``set``, ``delete`` or ``comment`` command to the "
|
||||
"``/configure`` endpoint."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:233 3fa4011df5394a10b66f8efa6c2f7f18
|
||||
msgid "``set`` a single command"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:249 d0fd1e24ed8944b3b0681e9ded9fee28
|
||||
msgid "``delete`` a single command"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:264 db6fe5f1b1ae4d72b7e9be759134c062
|
||||
msgid ""
|
||||
"The API pushes every request to a session and commit it. But some of VyOS "
|
||||
"components like DHCP and PPPoE Servers, IPSec, VXLAN, and other tunnels "
|
||||
"require full configuration for commit. The endpoint will process multiple "
|
||||
"commands when you pass them as a list to the ``data`` field."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:285 f0c2175c25fc43a98e4c157e4dd81c41
|
||||
msgid "/config-file"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:287 8c74b78f0845409aad565b935aa9fcd4
|
||||
msgid "The endpoint ``/config-file`` is to save or load a configuration."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:289 98a84ef55d9b46eda653b57c973106b6
|
||||
msgid ""
|
||||
"Save a running configuration to the startup configuration. When you don't "
|
||||
"specify the file when saving, it saves to ``/config/config.boot``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:307 320e97c17b5a4bc5831e2bc06d60e11e
|
||||
msgid "Save a running configuration to a file."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-api.rst:323 482efdddbacf4305934ee05a988c3d4c
|
||||
msgid "To Load a configuration file."
|
||||
msgstr ""
|
||||
@ -1,60 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:05+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../automation/vyos-napalm.rst:6 a458dac8c8414b63b48d2d702f96b7d0
|
||||
msgid "Napalm"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-napalm.rst:8 e192c0db73584de984c9316e63ee6b5d
|
||||
msgid ""
|
||||
"VyOS supports some napalm_ functions for configuration and op-mode. It "
|
||||
"requires more tests."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-napalm.rst:11 380f8923978046bd999342f858bd3d73
|
||||
msgid "Install ``napalm-vyos`` module"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-napalm.rst:21 1188d17bc22a4b94b26a42f5000971c2
|
||||
msgid "Op-mode"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-napalm.rst:48 e46e17b55de8404198ffce64badd6d2e
|
||||
msgid "Output op-mode"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-napalm.rst:85 4b9386b23f6a4cb097a1a15d688d27b5
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-napalm.rst:87 b74837137fea4fce960c3eea4a2a5c73
|
||||
msgid "We need 2 files, commands.conf and script itself."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-napalm.rst:89 bf55d87890744b2996a8bc0f1b3757cc
|
||||
msgid "Content of commands.conf"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-napalm.rst:99 1f1b6521bb624b9393a916124d54d9e1
|
||||
msgid "Script vyos-napalm.py"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-napalm.rst:129 63b5c22d2a674e0cbd6211a2cf5ddce6
|
||||
msgid "Output"
|
||||
msgstr ""
|
||||
@ -1,36 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:05+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../automation/vyos-netmiko.rst:6 1e1871eb1060440dba0e768d6b404310
|
||||
msgid "Netmiko"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-netmiko.rst:8 6ecaf43a6559480484b28c5cf9b91652
|
||||
msgid ""
|
||||
"VyOS supports configuration via netmiko_. It requires to install "
|
||||
"``python3-netmiko`` module."
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-netmiko.rst:12 fd4e8a489d28462dbcb0fded5000da1a
|
||||
msgid "Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../automation/vyos-netmiko.rst:47 7741fe48ac53415bb39935b122505e2d
|
||||
msgid "Output"
|
||||
msgstr ""
|
||||
File diff suppressed because it is too large
Load Diff
@ -1,22 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:04+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../changelog/index.rst:6 529936d0c3b6409db1590c78cdb9ab74
|
||||
msgid "Changelog"
|
||||
msgstr ""
|
||||
@ -1,638 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 09:54+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../cli.rst:5 21120cf0a35e462896221ba7d3955dbe
|
||||
msgid "Command Line Interface"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:7 c4c8616f9aa64506ba32a918e751ba09
|
||||
msgid ""
|
||||
"The VyOS :abbr:`CLI (Command-Line Interface)` comprises an operational and a"
|
||||
" configuration mode."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:11 636d7ebd8bda4c32a2f48642143d3a7a
|
||||
msgid "Operational Mode"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:13 057dab6dbd964a17bce2e139dc2c72e2
|
||||
msgid ""
|
||||
"Operational mode allows for commands to perform operational system tasks and"
|
||||
" view system and service status, while configuration mode allows for the "
|
||||
"modification of system configuration."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:17 974e4e76b1454a4e8ca19c0f850b2a84
|
||||
msgid ""
|
||||
"The CLI provides a built-in help system. In the CLI the ``?`` key may be "
|
||||
"used to display available commands. The ``TAB`` key can be used to auto-"
|
||||
"complete commands and will present the help system upon a conflict or "
|
||||
"unknown value."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:21 d1bbdf92bf8348de9e475c14fe95c9dd
|
||||
msgid ""
|
||||
"For example typing ``sh`` followed by the ``TAB`` key will complete to "
|
||||
"``show``. Pressing ``TAB`` a second time will display the possible sub-"
|
||||
"commands of the ``show`` command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:30 2bc6da04f33d4eb8be20b26bd6726241
|
||||
msgid "Example showing possible show commands:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:58 4ca86db4c84640a29821d88b0735f98a
|
||||
msgid ""
|
||||
"You can scroll up with the keys ``[Shift]+[PageUp]`` and scroll down with "
|
||||
"``[Shift]+[PageDown]``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:61 5973ef10ccfb4177baf6e3b7334a657e
|
||||
msgid ""
|
||||
"When the output of a command results in more lines than can be displayed on "
|
||||
"the terminal screen the output is paginated as indicated by a ``:`` prompt."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:72 d728194e036c4716a3e5df62b26a6f0d
|
||||
msgid "When viewing in page mode the following commands are available:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:65 f156509bc7f441369c63114c298f5567
|
||||
msgid "``q`` key can be used to cancel output"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:66 d1da597d959e479faf7ae04e966bb225
|
||||
msgid "``space`` will scroll down one page"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:67 e1b5265ce5ee42d7bec396e8f923aaa9
|
||||
msgid "``b`` will scroll back one page"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:68 40182dbf44634a399c48c2cd47d56462
|
||||
msgid "``return`` will scroll down one line"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:69 64033505e1fc4e56bcb38f0a59d8bd65
|
||||
msgid ""
|
||||
"``up-arrow`` and ``down-arrow`` will scroll up or down one line at a time "
|
||||
"respectively"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:71 313c1a098e59429bab5c553f35b29f59
|
||||
msgid ""
|
||||
"``left-arrow`` and ``right-arrow`` can be used to scroll left or right in "
|
||||
"the event that the output has lines which exceed the terminal size."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:75 d66ecd7309114d0c860911540edfc345
|
||||
msgid "Configuration Mode"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:77 76e2cb38ca4b4644bbb92ea0bbc81ad1
|
||||
msgid "To enter configuration mode use the ``configure`` command:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:85 e03339907b6346f895084097041d4c51
|
||||
msgid ""
|
||||
"Prompt changes from ``$`` to ``#``. To exit configuration mode, type "
|
||||
"``exit``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:94 ad7485be1ea34472bf1e5e77f0989a1c
|
||||
msgid ""
|
||||
"See the configuration section of this document for more information on "
|
||||
"configuration mode."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:102 7dfc482dbadc4882a2e417a29ab5cbf7
|
||||
msgid "Configuration Overview"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:104 4bd2c0e5d42f4b0f86b7985adb949dc8
|
||||
msgid ""
|
||||
"VyOS makes use of a unified configuration file for the entire system's "
|
||||
"configuration: ``/config/config.boot``. This allows easy template creation, "
|
||||
"backup, and replication of system configuration. A system can thus also be "
|
||||
"easily cloned by simply copying the required configuration files."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:111 187a65db793741b58ce69646d651efb6
|
||||
msgid "Terminology"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:113 1512f1014e654ba39a66f114f90cd01b
|
||||
msgid "A live VyOS system has three major types of configurations:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:115 b8195128e71541ef922ea1d13eb5291d
|
||||
msgid ""
|
||||
"**Active** or **running configuration** is the system configuration that is "
|
||||
"loaded and currently active (used by VyOS). Any change in the configuration"
|
||||
" will have to be committed to belong to the active/running configuration."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:120 f868599712844158b1d899b814a51c48
|
||||
msgid ""
|
||||
"**Working configuration** is the one that is currently being modified in "
|
||||
"configuration mode. Changes made to the working configuration do not go into"
|
||||
" effect until the changes are committed with the :cfgcmd:`commit` command. "
|
||||
"At which time the working configuration will become the active or running "
|
||||
"configuration."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:126 e5573c12df9943adae64cd8bba01d9b4
|
||||
msgid ""
|
||||
"**Saved configuration** is the one saved to a file using the :cfgcmd:`save` "
|
||||
"command. It allows you to keep safe a configuration for future uses. There "
|
||||
"can be multiple configuration files. The default or \"boot\" configuration "
|
||||
"is saved and loaded from the file ``/config/config.boot``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:133 414f4b2d94054beda99ee34d4c6cddf8
|
||||
msgid "Seeing and navigating the configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:137 f2187452b1574497be64b5979ae7096e
|
||||
msgid ""
|
||||
"View the current active configuration, also known as the running "
|
||||
"configuration, from the operational mode."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:193 1ac505b1896f4525a8a35db2da65c3f8
|
||||
msgid ""
|
||||
"By default, the configuration is displayed in a hierarchy like the above "
|
||||
"example, this is only one of the possible ways to display the configuration."
|
||||
" When the configuration is generated and the device is configured, changes "
|
||||
"are added through a collection of :cfgcmd:`set` and :cfgcmd:`delete` "
|
||||
"commands."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:201 f305d616417e436eb6d9c3d134502654
|
||||
msgid ""
|
||||
"Get a collection of all the set commands required which led to the running "
|
||||
"configuration."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:221 d63b2f797bf045f48fc49417c906c3a9
|
||||
msgid ""
|
||||
"Both these ``show`` commands should be executed when in operational mode, "
|
||||
"they do not work directly in configuration mode. There is a special way on "
|
||||
"how to :ref:`run_opmode_from_config_mode`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:225 f2d3dc3b3cf5403c83a82d444c1a069c
|
||||
msgid ""
|
||||
"Use the ``show configuration commands | strip-private`` command when you "
|
||||
"want to hide private data. You may want to do so if you want to share your "
|
||||
"configuration on the `forum`_."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:233 03f09d2c45bb4f86adc9eede7fffdaf9
|
||||
msgid "View the current active configuration in JSON format."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:241 2d3d5eacec064a2392c692c31e9a79d1
|
||||
msgid "View the current active configuration in readable JSON format."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:338 177ac8bf938e4b8f8801b35cacae5e30
|
||||
msgid "The config mode"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:340 cfe4a5e07e254f808e1a35ab07b7b9e9
|
||||
msgid ""
|
||||
"When entering the configuration mode you are navigating inside a tree "
|
||||
"structure, to enter configuration mode enter the command :opcmd:`configure` "
|
||||
"when in operational mode."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:351 30efd4da83d5459db163be96f3d962f5
|
||||
msgid ""
|
||||
"When going into configuration mode, prompt changes from ``$`` to ``#``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:355 5566a21e9dbe4083bf97b8cae1e30904
|
||||
msgid ""
|
||||
"All commands executed here are relative to the configuration level you have "
|
||||
"entered. You can do everything from the top level, but commands will be "
|
||||
"quite lengthy when manually typing them."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:359 7ff733c108854732841a6ede3f81a49d
|
||||
msgid ""
|
||||
"The current hierarchy level can be changed by the :cfgcmd:`edit` command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:370 3e1937e3dd54420bbdd56f60079a09ef
|
||||
msgid ""
|
||||
"You are now in a sublevel relative to ``interfaces ethernet eth0``, all "
|
||||
"commands executed from this point on are relative to this sublevel. Use "
|
||||
"eithe the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of "
|
||||
"the hierarchy. You can also use the :cfgcmd:`up` command to move only one "
|
||||
"level up at a time."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:378 8f7965edb6714d02a6b695b2db020ee9
|
||||
msgid ""
|
||||
"The :cfgcmd:`show` command within configuration mode will show the working "
|
||||
"configuration indicating line changes with ``+`` for additions, ``>`` for "
|
||||
"replacements and ``-`` for deletions."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:382 96f7016a82594c3a91d2972ea7c1a806
|
||||
msgid "**Example:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:413 14395d359ccd4f09835d9c9a7ceb89b3
|
||||
msgid ""
|
||||
"It is also possible to display all `set` commands within configuration mode "
|
||||
"using :cfgcmd:`show | commands`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:422 4379bd3c11e1471e984e477f3776de26
|
||||
msgid ""
|
||||
"These commands are also relative to the level you are inside and only "
|
||||
"relevant configuration blocks will be displayed when entering a sub-level."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:433 f280fe6780114f6bb14fbfc79974a6a6
|
||||
msgid ""
|
||||
"Exiting from the configuration mode is done via the :cfgcmd:`exit` command "
|
||||
"from the top level, executing :cfgcmd:`exit` from within a sub-level takes "
|
||||
"you back to the top level."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:447 264cd6422a324d2aa97de4518ae5e725
|
||||
msgid "Editing the configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:449 114c539fc9bd4b95a193332bb9875f86
|
||||
msgid ""
|
||||
"The configuration can be edited by the use of :cfgcmd:`set` and "
|
||||
":cfgcmd:`delete` commands from within configuration mode."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:454 b628dfa48fca49c0a0e09812e0efc07e
|
||||
msgid ""
|
||||
"Use this command to set the value of a parameter or to create a new element."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:457 8f3ee422c03c423ab83ea00d2cbcef8a
|
||||
msgid ""
|
||||
"Configuration commands are flattened from the tree into 'one-liner' commands"
|
||||
" shown in :opcmd:`show configuration commands` from operation mode. Commands"
|
||||
" are relative to the level where they are executed and all redundant "
|
||||
"information from the current level is removed from the command entered."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:475 48ed6b56b27b48b691ba9d45dd4414f6
|
||||
msgid ""
|
||||
"These two commands above are essentially the same, just executed from "
|
||||
"different levels in the hierarchy."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:480 299391b2c4624c48a25d5bd67d613dbb
|
||||
msgid ""
|
||||
"To delete a configuration entry use the :cfgcmd:`delete` command, this also "
|
||||
"deletes all sub-levels under the current level you've specified in the "
|
||||
":cfgcmd:`delete` command. Deleting an entry will also result in the element "
|
||||
"reverting back to its default value if one exists."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:493 f63691ef1fc44ce29633e2b7b3fef591
|
||||
msgid ""
|
||||
"Any change you do on the configuration, will not take effect until committed"
|
||||
" using the :cfgcmd:`commit` command in configuration mode."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:508 7ca29c616aca49a9b661173a26e82f20
|
||||
msgid ""
|
||||
"Use this command to preserve configuration changes upon reboot. By default "
|
||||
"it is stored at */config/config.boot*. In the case you want to store the "
|
||||
"configuration file somewhere else, you can add a local path, a SCP address, "
|
||||
"a FTP address or a TFTP address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:535 bc85992170124de0b767b8248cd55508
|
||||
msgid ""
|
||||
"Configuration mode can not be exited while uncommitted changes exist. To "
|
||||
"exit configuration mode without applying changes, the :cfgcmd:`exit discard`"
|
||||
" command must be used."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:539 848cecddb2ec4673bfeb45247cd46f7b
|
||||
msgid "All changes in the working config will thus be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:552 ef753ddae18c488a9b84cf835728ac5d
|
||||
msgid ""
|
||||
"Use this command to temporarily commit your changes and set the number of "
|
||||
"minutes available for validation. ``confirm`` must be entered within those "
|
||||
"minutes, otherwise the system will reboot into the previous configuration. "
|
||||
"The default value is 10 minutes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:558 119b474b2099422aa174b2c6bc91c7f7
|
||||
msgid ""
|
||||
"What if you are doing something dangerous? Suppose you want to setup a "
|
||||
"firewall, and you are not sure there are no mistakes that will lock you out "
|
||||
"of your system. You can use confirmed commit. If you issue the ``commit-"
|
||||
"confirm`` command, your changes will be commited, and if you don't issue "
|
||||
"the ``confirm`` command in 10 minutes, your system will reboot into previous"
|
||||
" config revision."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:576 d67fd3690dd748e2a517f447aebf3d99
|
||||
msgid ""
|
||||
"A reboot because you did not enter ``confirm`` will not take you necessarily"
|
||||
" to the *saved configuration*, but to the point before the unfortunate "
|
||||
"commit."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:583 6591ff7781ce4c219aac0152b516f86f
|
||||
msgid "Copy a configuration element."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:585 3005c44d1bba423898370647ead0582f
|
||||
msgid ""
|
||||
"You can copy and remove configuration subtrees. Suppose you set up a "
|
||||
"firewall ruleset ``FromWorld`` with one rule that allows traffic from "
|
||||
"specific subnet. Now you want to setup a similar rule, but for different "
|
||||
"subnet. Change your edit level to ``firewall name FromWorld`` and use ``copy"
|
||||
" rule 10 to rule 20``, then modify rule 20."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:616 d4bc2b2f4cb247f2a542d660c4d15b06
|
||||
msgid "Rename a configuration element."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:618 b4568f35db6745d19ea4ffc2b9812507
|
||||
msgid "You can also rename config subtrees:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:627 929db380162e483db7f0e824e917f84a
|
||||
msgid ""
|
||||
"Note that ``show`` command respects your edit level and from this level you "
|
||||
"can view the modified firewall ruleset with just ``show`` with no "
|
||||
"parameters."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:651 fee0c71cd0f54c3e9db781d686ca07d9
|
||||
msgid "Add comment as an annotation to a configuration node."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:653 87025547a81e4a7c86ddccbee2e1d7f2
|
||||
msgid ""
|
||||
"The ``comment`` command allows you to insert a comment above the ``<config "
|
||||
"node>`` configuration section. When shown, comments are enclosed with ``/*``"
|
||||
" and ``*/`` as open/close delimiters. Comments need to be commited, just "
|
||||
"like other config changes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:658 e408cab2d1c44990985e546091a55da8
|
||||
msgid ""
|
||||
"To remove an existing comment from your current configuration, specify an "
|
||||
"empty string enclosed in double quote marks (``\"\"``) as the comment text."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:662 f4f32c52be714bd1ba68aab1ef4e93c0
|
||||
msgid "Example:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:676 dd7cbd1d1e6a4e0b9139c4d8f76a1c9a
|
||||
msgid ""
|
||||
"An important thing to note is that since the comment is added on top of the "
|
||||
"section, it will not appear if the ``show <section>`` command is used. With "
|
||||
"the above example, the `show firewall` command would return starting after "
|
||||
"the ``firewall {`` line, hiding the comment."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:690 a70b770a4a1648c29883265dfaa1d0ce
|
||||
msgid "Access opmode from config mode"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:692 f3c6588821924287ba297b1d64fe8274
|
||||
msgid ""
|
||||
"When inside configuration mode you are not directly able to execute "
|
||||
"operational commands."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:697 68ff26c8c2564460a9fd8ebd24e166e7
|
||||
msgid ""
|
||||
"Access to these commands are possible through the use of the ``run "
|
||||
"[command]`` command. From this command you will have access to everything "
|
||||
"accessible from operational mode."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:701 7d68211d96144d49b588c53b2f626905
|
||||
msgid ""
|
||||
"Command completion and syntax help with ``?`` and ``[tab]`` will also work."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:714 e747f3137f9c464c8c33893aba78ea9a
|
||||
msgid "Managing configurations"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:716 2819f3d0832b475eb4165e5ef25c3260
|
||||
msgid ""
|
||||
"VyOS comes with an integrated versioning system for the system "
|
||||
"configuration. It automatically maintains a backup of every previous "
|
||||
"configuration which has been committed to the system. The configurations are"
|
||||
" versioned locally for rollback but they can also be stored on a remote host"
|
||||
" for archiving/backup reasons."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:723 2236c75f85514bb38f672cd59756bc1b
|
||||
msgid "Local Archive"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:725 891345c94d15435ba7630ec7a30cac79
|
||||
msgid ""
|
||||
"Revisions are stored on disk. You can view, compare and rollback them to any"
|
||||
" previous revisions if something goes wrong."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:730 0dc22fad77084db89ce2f40e4005861f
|
||||
msgid "View all existing revisions on the local system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:747 503fef0c5d8f4225abc6e58896c4b348
|
||||
msgid ""
|
||||
"You can specify the number of revisions stored on disk. N can be in the "
|
||||
"range of 0 - 65535. When the number of revisions exceeds the configured "
|
||||
"value, the oldest revision is removed. The default setting for this value is"
|
||||
" to store 100 revisions locally."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:754 198087cd084f4fbdad0394f5501dbaec
|
||||
msgid "Compare configurations"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:756 351345bd9aeb421d9ee0a147299255b7
|
||||
msgid "VyOS lets you compare different configurations."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:760 0a1afe6b5de948a6accb87224583e888
|
||||
msgid ""
|
||||
"Use this command to spot what the differences are between different "
|
||||
"configurations."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:784 7921c3a125324f148f82df7eb01980b9
|
||||
msgid ""
|
||||
"The command :cfgcmd:`compare` allows you to compare different type of "
|
||||
"configurations. It also lets you compare different revisions through the "
|
||||
":cfgcmd:`compare N M` command, where N and M are revision numbers. The "
|
||||
"output will describe how the configuration N is when compared to M "
|
||||
"indicating with a plus sign (``+``) the additional parts N has when compared"
|
||||
" to M, and indicating with a minus sign (``-``) the lacking parts N misses "
|
||||
"when compared to M."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:810 bfe635c8c3e94e09a98d7ddc32ce788f
|
||||
msgid "Show commit revision difference."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:813 4f906beed751459d8bc34a3445e1e74b
|
||||
msgid ""
|
||||
"The command above also lets you see the difference between two commits. By "
|
||||
"default the difference with the running config is shown."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:824 db6c957f421a444496f8784b79699171
|
||||
msgid ""
|
||||
"This means four commits ago we did ``set system ipv6 disable-forwarding``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:828 9c2de0768c6e4f16854f38b5f889a83f
|
||||
msgid "Rollback Changes"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:830 e67c1d21f51e49a18387fd9d8cd0f8a6
|
||||
msgid ""
|
||||
"You can rollback configuration changes using the rollback command. This will"
|
||||
" apply the selected revision and trigger a system reboot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:835 759a6ee824774d68b313f9a431d58e08
|
||||
msgid "Rollback to revision N (currently requires reboot)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:850 285d97e1809e4a8daa89be4dd398a4c9
|
||||
msgid "Remote Archive"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:852 970b578f48a74395bff8817fd16af559
|
||||
msgid ""
|
||||
"VyOS can upload the configuration to a remote location after each call to "
|
||||
":cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, "
|
||||
"FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is "
|
||||
"successfull the ``config.boot`` file will be copied to the defined "
|
||||
"destination(s). The filename used on the remote host will be ``config.boot-"
|
||||
"hostname.YYYYMMDD_HHMMSS``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:861 20a82b39f3594b408c46d14465c3f059
|
||||
msgid ""
|
||||
"Specify remote location of commit archive as any of the below :abbr:`URI "
|
||||
"(Uniform Resource Identifier)`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:864 62cfe72cc99a445bb4fdde3d267d526e
|
||||
msgid "``scp://<user>:<passwd>@<host>:/<dir>``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:865 0ced9798781d45e7b88341ad48889798
|
||||
msgid "``sftp://<user>:<passwd>@<host>/<dir>``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:866 15c574cb9b51484eb2a5bb2c8d549560
|
||||
msgid "``ftp://<user>:<passwd>@<host>/<dir>``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:867 fcb0ee5aba23487a981a1b78d5dea8a0
|
||||
msgid "``tftp://<host>/<dir>``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:869 3d3ee415428c40999ddcbf8e003c8080
|
||||
msgid "The number of revisions don't affect the commit-archive."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:871 b6d77c3086db492687bb9376b10093d5
|
||||
msgid ""
|
||||
"You may find VyOS not allowing the secure connection because it cannot "
|
||||
"verify the legitimacy of the remote server. You can use the workaround below"
|
||||
" to quickly add the remote host's SSH fingerprint to your "
|
||||
"``~/.ssh/known_hosts`` file:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:881 d517ea3bf3a541c68d04542637086726
|
||||
msgid "Saving and loading manually"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:883 20be23aacb3b490aa9e2ff0908360d2a
|
||||
msgid ""
|
||||
"You can use the ``save`` and ``load`` commands if you want to manually "
|
||||
"manage specific configuration files."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:886 51b922b90d7f41b8890f4720cf931423
|
||||
msgid ""
|
||||
"When using the save_ command, you can add a specific location where to store"
|
||||
" your configuration file. And, when needed it, you will be able to load it "
|
||||
"with the ``load`` command:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:892 234408e9886440fe8e8b9ab63f96736d
|
||||
msgid ""
|
||||
"Use this command to load a configuration which will replace the running "
|
||||
"configuration. Define the location of the configuration file to be loaded. "
|
||||
"You can use a path to a local file, an SCP address, an SFTP address, an FTP "
|
||||
"address, an HTTP address, an HTTPS address or a TFTP address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:914 b416e5fa71104e75978dcefda0ac7fe6
|
||||
msgid "Restore Default"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:916 cb77dda7a9464a1d88ead879c5b011ed
|
||||
msgid ""
|
||||
"In the case you want to completely delete your configuration and restore the"
|
||||
" default one, you can enter the following command in configuration mode:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:924 2d6d4d7065c24114957b9d91223f7996
|
||||
msgid ""
|
||||
"You will be asked if you want to continue. If you accept, you will have to "
|
||||
"use :cfgcmd:`commit` if you want to make the changes active."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:927 9f9c7cb332794ad780df77618ded6502
|
||||
msgid ""
|
||||
"Then you may want to :cfgcmd:`save` in order to delete the saved "
|
||||
"configuration too."
|
||||
msgstr ""
|
||||
|
||||
#: ../../cli.rst:930 4a703606ba2d421f9f3a49ad90bbf71d
|
||||
msgid ""
|
||||
"If you are remotely connected, you will lose your connection. You may want "
|
||||
"to copy first the config, edit it to ensure connectivity, and load the "
|
||||
"edited config."
|
||||
msgstr ""
|
||||
@ -1,108 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:05+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:3
|
||||
#: b6d67f49feb24b3fa122917d1713c0ba
|
||||
msgid "DHCP Relay trough GRE-Bridge"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:6
|
||||
#: 1d016bc7120144c1a698121e631b88ce
|
||||
msgid "Testdate: 2022-10-09"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:7
|
||||
#: 6e048b6b5d1e4ed6b4f25e94edecf47b
|
||||
msgid "Version: 1.4-rolling-202210090955"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:10
|
||||
#: 127597ad8c8f4e5eb5d2b85948c155dd
|
||||
msgid ""
|
||||
"This simple structure shows how to configure a DHCP Relay over a GRE Bridge "
|
||||
"interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:15
|
||||
#: 836e04717d9b453d93aa06d489e25a0d
|
||||
msgid "Topology"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:17
|
||||
#: 153ef16cb87c40c29370123457b2278c
|
||||
msgid ""
|
||||
"The topology has 3 VyOS routers and one client. Between the DHCP Server and "
|
||||
"the DHCP Relay is a GRE tunnel. The `transport` VyOS represent a large "
|
||||
"Network."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rstNone
|
||||
#: e3f84da3f42e4d51862669dd2cb899b2
|
||||
msgid "Ansible Example topology image"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:26
|
||||
#: 78c31c77e3374b9287e0f46c5547ff07
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:28
|
||||
#: 85735f69fefc4e47a6eeb0a79631ea61
|
||||
msgid "First, we configure the transport network and the Tunnel interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:31
|
||||
#: 635c882d632a43dc83f0f02362c57f56
|
||||
msgid "Transport:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:37
|
||||
#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:55
|
||||
#: e87f4b14b9ae4bfda9bbf5436e2580ee cd57953b80374d54ae35108ce6357ed2
|
||||
msgid "DHCP-Server"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:44
|
||||
#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:62
|
||||
#: 379e70552a164cfe986786970522535d 77e16e1cf47f416d9877c94023f07a85
|
||||
msgid "DHCP-Relay"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:51
|
||||
#: d6c3ef6fe4d84842af6b47146a6bf09d
|
||||
msgid ""
|
||||
"After this, we need the DHCP-Server and Relay configuration. To get a "
|
||||
"testable result, we just have one IP in the DHCP range. Expand it as you "
|
||||
"need it."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:71
|
||||
#: cf696a295396415b829948546d904674
|
||||
msgid "Test the result"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:73
|
||||
#: 1c9009bcb8ef4063a0dbc89927cb394e
|
||||
msgid "Ping the Client from the DHCP Server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:90
|
||||
#: 7deadd4f386f48b48429ebd1d788fbf9
|
||||
msgid "And show all DHCP Leases"
|
||||
msgstr ""
|
||||
@ -1,248 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:05+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:4
|
||||
#: dca7066243a64ac9bb911c232c07a55c
|
||||
msgid "L3VPN EVPN with VyOS"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:6
|
||||
#: 40009f7cec44488b973f2aa05da6cf76
|
||||
msgid "Testdate: 2022-10-10"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:7
|
||||
#: 259b38aa4a6447c4bd22d3d881ef6445
|
||||
msgid "Version: 1.4-rolling-202210090955"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:9
|
||||
#: a18b811d628d480a83d2d5a41fa905db
|
||||
msgid ""
|
||||
"I spun up a new lab in EVE-NG, which represents this as the \"Foo Bar - "
|
||||
"Service Provider Inc.\" that has 3 points of presence (PoP) in random "
|
||||
"datacenters/sites named PE1, PE2, and PE3. Each PoP aggregates at least two "
|
||||
"customers."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:14
|
||||
#: c847a6183ba6486095e722083c3f7a6d
|
||||
msgid ""
|
||||
"I named the customers blue, red and green which is common practice in VRF "
|
||||
"(Virtual Routing and Forwarding) documentation scenarios."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:17
|
||||
#: 59b7c95414774841abc20f1e2f4202d2
|
||||
msgid ""
|
||||
"PE1 is located in an industrial area that holds multiple office buildings. "
|
||||
"All customers have a site in this area."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:19
|
||||
#: 6fffa1cde14c4de0a3264303ddab2209
|
||||
msgid ""
|
||||
"PE2 is located in a smaller area where by coincidence two customers (blue "
|
||||
"and red) share an office building."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:21
|
||||
#: 84cea04906cc4f6cafbb0a5b05df5eb8
|
||||
msgid ""
|
||||
"PE3 is located in a smaller area where by coincidence two customers (blue "
|
||||
"and green) are located."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:26
|
||||
#: 2984bd561ad44a85b369de655fc4c04f
|
||||
msgid "Management VRF"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:28
|
||||
#: e0c8580baf144bec8f6652c6226fa5d5
|
||||
msgid ""
|
||||
"A brief excursion into VRFs: This has been one of the longest-standing "
|
||||
"feature requests of VyOS (dating back to 2016) which can be described as \"a"
|
||||
" VLAN for layer 2 is what a VRF is for layer 3\". With VRFs, a router/system"
|
||||
" can hold multiple, isolated routing tables on the same system. If you "
|
||||
"wonder what's the difference between multiple tables that people used for "
|
||||
"policy-based routing since forever, it's that a VRF also isolates connected "
|
||||
"routes rather than just static and dynamically learned routes, so it allows "
|
||||
"NICs in different VRFs to use conflicting network ranges without issues."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:38
|
||||
#: 1a678edb2c814554987d969567cb843d
|
||||
msgid ""
|
||||
"VyOS 1.3 added initial support for VRFs (including IPv4/IPv6 static routing)"
|
||||
" and VyOS 1.4 now enables full dynamic routing protocol support for OSPF, "
|
||||
"IS-IS, and BGP for individual VRFs."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:42
|
||||
#: 8308ef8d3eef4bf583ba6ae20941f9e5
|
||||
msgid ""
|
||||
"The lab I built is using a VRF (called **mgmt**) to provide out-of-band SSH "
|
||||
"access to the PE (Provider Edge) routers."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:52
|
||||
#: eba9ea05ad7841849983d2705c9410d6
|
||||
msgid "Topology"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:54
|
||||
#: e2986d31e7ee4bffa5b2e115a952b7ae
|
||||
msgid "We use the following network topology in this example:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rstNone
|
||||
#: cec7142cd4c146bf944e487d1c071124
|
||||
msgid "L3VPN EVPN with VyOS topology image"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:62
|
||||
#: dc04d5ec28614dd58ed11e537c255941
|
||||
msgid "Core network"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:64
|
||||
#: 79db8a2ac0774a52805405daab666a6e
|
||||
msgid ""
|
||||
"I chose to run OSPF as the IGP (Interior Gateway Protocol). All required BGP"
|
||||
" sessions are established via a dummy interfaces (similar to the loopback, "
|
||||
"but in Linux you can have only one loopback, while there can be many dummy "
|
||||
"interfaces) on the PE routers. In case of a link failure, traffic is "
|
||||
"diverted in the other direction in this triangle setup and BGP sessions will"
|
||||
" not go down. One could even enable BFD (Bidirectional Forwarding Detection)"
|
||||
" on the links for a faster failover and resilience in the network."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:73
|
||||
#: c03653c3a768410a8ba4e3f35a9df6f8
|
||||
msgid ""
|
||||
"Regular VyOS users will notice that the BGP syntax has changed in VyOS 1.4 "
|
||||
"from even the prior post about this subject. This is due to T1711, where it "
|
||||
"was finally decided to get rid of the redundant BGP ASN (Autonomous System "
|
||||
"Number) specification on the CLI and move it to a single leaf node (set "
|
||||
"protocols bgp local-as)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:79
|
||||
#: b54e76d59f2a4879ad57e4d751f44534
|
||||
msgid ""
|
||||
"It's important to note that all your existing configurations will be "
|
||||
"migrated automatically on image upgrade. Nothing to do on your side."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:82
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:123
|
||||
#: 778bcf8867dd4742b90af58c3c2974f9 03e0d184dd814620b0ebf2066fe5cd54
|
||||
msgid "PE1"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:88
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:129
|
||||
#: feca16238d384858bde862fcffc4f668 e764ab9f7c1c464fb6b8ad766e9a97da
|
||||
msgid "PE2"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:94
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:135
|
||||
#: 418db537cb7e4646b396025335c225fb 34e53a71b2a6421992ee83f3d458883a
|
||||
msgid "PE3"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:103
|
||||
#: 5a2fa388fab34210972487efc12cc05f
|
||||
msgid "Tenant networks (VRFs)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:105
|
||||
#: 54d85baae8274726b442dabf00d643bc
|
||||
msgid ""
|
||||
"Once all routers can be safely remotely managed and the core network is "
|
||||
"operational, we can now setup the tenant networks."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:108
|
||||
#: d1d790f73bb545edbcb20f8ded69e5f7
|
||||
msgid ""
|
||||
"Every tenant is assigned an individual VRF that would support overlapping "
|
||||
"address ranges for customers blue, red and green. In our example, we do not "
|
||||
"use overlapping ranges to make it easier when showing debug commands."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:112
|
||||
#: 6e4c009e66714b06982495a718d7bed4
|
||||
msgid "Thus you can easily match it to one of the devices/networks below."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:114
|
||||
#: 8eda9841785d48eaa53e33b241c5dfb6
|
||||
msgid ""
|
||||
"Every router that provides access to a customer network needs to have the "
|
||||
"customer network (VRF + VNI) configured. To make our own lives easier, we "
|
||||
"utilize the same VRF table id (local routing table number) and VNI (Virtual "
|
||||
"Network Identifier) per tenant on all our routers."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:119
|
||||
#: 5acd5a7623b2476d9e2e2c66ccb740b4
|
||||
msgid "blue uses local routing table id and VNI 2000"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:120
|
||||
#: c79bdaa44fb94e9284a8043361262dde
|
||||
msgid "red uses local routing table id and VNI 3000"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:121
|
||||
#: 2afb2d9e933344099bf7b103aa2f4187
|
||||
msgid "green uses local routing table id and VNI 4000"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:143
|
||||
#: 6cefa7e52add4fe1a75562495292efe0
|
||||
msgid "Testing and debugging"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:145
|
||||
#: 4be9bdc170984b6ab7e3ee7e60617ff4
|
||||
msgid ""
|
||||
"You managed to come this far, now we want to see the network and routing "
|
||||
"tables in action."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:148
|
||||
#: c5321083829e4286b93d550d75d5060f
|
||||
msgid "Show routes for all VRFs"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:189
|
||||
#: 4b9a7dc8ae3849178c5061f8c9e40b00
|
||||
msgid "Information about Ethernet Virtual Private Networks"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:236
|
||||
#: 0464a050fc0e428bbf2d160f31fa2225
|
||||
msgid ""
|
||||
"If we need to retrieve information about a specific host/network inside the "
|
||||
"EVPN network we need to run"
|
||||
msgstr ""
|
||||
@ -1,120 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:05+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configexamples/autotest/Wireguard/Wireguard.rst:3
|
||||
#: 1112b498492f4f97b47ca5315651543c
|
||||
msgid "Wireguard"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/Wireguard/Wireguard.rst:6
|
||||
#: cad83059fc954e2f9797528e77ae3265
|
||||
msgid "Testdate: 2022-10-09"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/Wireguard/Wireguard.rst:7
|
||||
#: b8317168f5c34dacac426bbf160099c2
|
||||
msgid "Version: 1.4-rolling-202210090955"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/Wireguard/Wireguard.rst:10
|
||||
#: ff88b0392e1342eda89e21f06001f593
|
||||
msgid ""
|
||||
"This simple structure show how to connect two offices. One remote branch and"
|
||||
" the central office."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/Wireguard/Wireguard.rst:15
|
||||
#: fa805f515da84e8eae724617bc7f6a2b
|
||||
msgid "Topology"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/Wireguard/Wireguard.rst:17
|
||||
#: 7954fa9a77a346759a5b29c935061602
|
||||
msgid ""
|
||||
"The topology have a central and a branch VyOS router and one client, to "
|
||||
"test, in each site."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/Wireguard/Wireguard.rstNone
|
||||
#: 2fb68483c1724b5ab8b9fd6d3929e5f3
|
||||
msgid "Ansible Example topology image"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/Wireguard/Wireguard.rst:25
|
||||
#: 13f50b70eced428b8cf14ab4dbf1569d
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/Wireguard/Wireguard.rst:27
|
||||
#: 762f0d7725dd4ddcb4c8f6abd1cd7185
|
||||
msgid ""
|
||||
"Set the local subnet on eth2 and the public ip address eth1 on each site."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/Wireguard/Wireguard.rst:29
|
||||
#: ../../configexamples/autotest/Wireguard/Wireguard.rst:55
|
||||
#: ../../configexamples/autotest/Wireguard/Wireguard.rst:71
|
||||
#: 5b82506aea5a4d4383ed66f8751497e5 c06020215f594cdf94351ebe8149581e
|
||||
#: 56ed8089bd3a4ece8b90b56a21269698
|
||||
msgid "Central"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/Wireguard/Wireguard.rst:35
|
||||
#: ../../configexamples/autotest/Wireguard/Wireguard.rst:61
|
||||
#: ../../configexamples/autotest/Wireguard/Wireguard.rst:77
|
||||
#: 958fa8e6ae9742c4a8c9f7000989d8f0 08cfff8b32b744379d8d6526dfd47ec1
|
||||
#: 4ba49eec7bc4436d8d4841fb437ee866
|
||||
msgid "Branch"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/Wireguard/Wireguard.rst:42
|
||||
#: 37eddc3053d14cbf9fcf84a5e2e47bff
|
||||
msgid ""
|
||||
"Next thing to do, is to create a wireguard keypair on each side. After this,"
|
||||
" the public key can be displayed, to save for later."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/Wireguard/Wireguard.rst:52
|
||||
#: 898c59cc02ef490a88ddd78faaeeb42e
|
||||
msgid "After you have each public key. The wireguard interfaces can be setup."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/Wireguard/Wireguard.rst:68
|
||||
#: 403a421f999b4d2b99e5a45f8fcc58bb
|
||||
msgid ""
|
||||
"To reach the network, a route must be set on each VyOS host. In this "
|
||||
"structure, a static interface route will fit the requirements."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/Wireguard/Wireguard.rst:85
|
||||
#: 75c272fbdcdb40028fb502ba388339e7
|
||||
msgid "Testing and debugging"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/Wireguard/Wireguard.rst:87
|
||||
#: fcbab0e2725d4fd3b59226ef41192888
|
||||
msgid ""
|
||||
"After all is done and commit, let's take a look if the Wireguard interface "
|
||||
"is up and running."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/Wireguard/Wireguard.rst:99
|
||||
#: 1f323a79c53143b7b93f62946f16329c
|
||||
msgid "And ping the Branch PC from your central router to check the response."
|
||||
msgstr ""
|
||||
@ -1,282 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:05+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:5
|
||||
#: e858d6875b1c46cbaece3f265eebe9cb
|
||||
msgid "Tunnelbroker.net (IPv6)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:7
|
||||
#: 43c9e137b1d64397b43509cefc6afbde
|
||||
msgid "Testdate: 2022-10-10"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:8
|
||||
#: 1f2dc4f37d04432da5f6c54a33f566d7
|
||||
msgid "Version: 1.4-rolling-202210090955"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:10
|
||||
#: 0e33bf12fa6a4b59bff76e91b4f74173
|
||||
msgid ""
|
||||
"This guide walks through the setup of https://www.tunnelbroker.net/ for an "
|
||||
"IPv6 Tunnel."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:14
|
||||
#: 4510e8e67ecf46b48da0836bd31fdfd7
|
||||
msgid "Prerequisites"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:16
|
||||
#: e4f40532bb684bddae9a98badaa6f494
|
||||
msgid ""
|
||||
"A public, routable IPv4 address. This does not necessarily need to be "
|
||||
"static, but you will need to update the tunnel endpoint when/if your IP "
|
||||
"address changes, which can be done with a script and a scheduled task."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:19
|
||||
#: bf9411243d594a209d8e5233a911faca
|
||||
msgid "Account at https://www.tunnelbroker.net/"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:20
|
||||
#: 3384e179dd6b47fbb4bbcc549b558601
|
||||
msgid ""
|
||||
"Requested a \"Regular Tunnel\". You want to choose a location that is "
|
||||
"closest to your physical location for the best response time."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:26
|
||||
#: 4beeca87d8534dbaaa908be33faa6199
|
||||
msgid "Topology"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:28
|
||||
#: 1fae284fcce641af8a51074758c69698
|
||||
msgid ""
|
||||
"The example topology has 2 VyOS routers. One as The WAN Router and on as a "
|
||||
"Client, to test a single LAN setup"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rstNone
|
||||
#: bb725568726e4e059b23a99e4c66a6cd
|
||||
msgid "Tunnelbroker topology image"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:37
|
||||
#: 30329a3d8a1c4912965057dbcf802832
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:39
|
||||
#: bae83b5f1ac1460ea11b8864f65ffd79
|
||||
msgid "First, we configure the ``vyos-wan`` interface to get a DHCP address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:45
|
||||
#: 51ab034c5a6a42ce821332f22f016579
|
||||
msgid "Now we are able to setup the tunnel interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:51
|
||||
#: a07ed24d74054c0d9c83a9f732ddd57e
|
||||
msgid "Setup the ipv6 default route to the tunnel interface"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:57
|
||||
#: 2a5666024df949d2b4235f6df9bbeb54
|
||||
msgid "Now you should be able to ping a public IPv6 Address"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:74
|
||||
#: b35fbadb6df74e5b83c5e1416d1afede
|
||||
msgid ""
|
||||
"Assuming the pings are successful, you need to add some DNS servers. Some "
|
||||
"options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:81
|
||||
#: aeed9b7f61534e3f95b805dde17b42dd
|
||||
msgid "You should now be able to ping something by IPv6 DNS name:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:100
|
||||
#: a736ca5cd747403e8c14e673245d821e
|
||||
msgid "LAN Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:102
|
||||
#: 1112b0d0ef1d4918a7ebca59efac58e4
|
||||
msgid ""
|
||||
"At this point, your VyOS install should have full IPv6, but now your LAN "
|
||||
"devices need access."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:105
|
||||
#: 1a65570c0367426c9a4f873d63f4942e
|
||||
msgid "With Tunnelbroker.net, you have two options:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:107
|
||||
#: 3c6a7c5ec4ea449fa91711d03dac4c3b
|
||||
msgid ""
|
||||
"Routed /64. This is the default assignment. In IPv6-land, it's good for a "
|
||||
"single \"LAN\", and is somewhat equivalent to a /24."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:110
|
||||
#: 29591255e2fd43a8b7fa1644284d59e1
|
||||
msgid ""
|
||||
"Routed /48. This is something you can request by clicking the \"Assign /48\""
|
||||
" link in the Tunnelbroker.net tunnel config. It allows you to have up to 65k"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:113
|
||||
#: 67cd1fd9c371469c86c53c680bb79daf
|
||||
msgid ""
|
||||
"Unlike IPv4, IPv6 is really not designed to be broken up smaller than /64. "
|
||||
"So if you ever want to have multiple LANs, VLANs, DMZ, etc, you'll want to "
|
||||
"ignore the assigned /64, and request the /48 and use that."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:119
|
||||
#: 4f74d70dd2874430ae4b1614cd2d2739
|
||||
msgid "Single LAN Setup"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:121
|
||||
#: 2df56212558149feb9fd81bb336775fa
|
||||
msgid ""
|
||||
"Single LAN setup where eth2 is your LAN interface. Use the Tunnelbroker "
|
||||
"Routed /64 prefix:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:128
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:195
|
||||
#: 13574cf1c9174aa6b9237ea264787b9a 1c15190bf24244529f6ed886c2ef9c2e
|
||||
msgid ""
|
||||
"Please note, 'autonomous-flag' and 'on-link-flag' are enabled by default, "
|
||||
"'valid-lifetime' and 'preferred-lifetime' are set to default values of 30 "
|
||||
"days and 4 hours respectively."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:132
|
||||
#: 023eef0d8ac74055a7706a8605b9a7eb
|
||||
msgid ""
|
||||
"And the ``client`` to receive an IPv6 address with stateless autoconfig."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:137
|
||||
#: f83b8f3084da425dbc98cb5a735692d9
|
||||
msgid "This accomplishes a few things:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:139
|
||||
#: 10c4928833d54de2905620ff414d3954
|
||||
msgid "Sets your LAN interface's IP address"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:140
|
||||
#: 49ca773f9de54f74b956dae477d7e0a8
|
||||
msgid ""
|
||||
"Enables router advertisements. This is an IPv6 alternative for DHCP (though "
|
||||
"DHCPv6 can still be used). With RAs, Your devices will automatically find "
|
||||
"the information they need for routing and DNS."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:144
|
||||
#: b7b7e14f124c43be8e51f03ad82aaff1
|
||||
msgid "Now the Client is able to ping a public IPv6 address"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:162
|
||||
#: d73b8a6e7c8a47b8a0b44b9542eb3945
|
||||
msgid "Multiple LAN/DMZ Setup"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:164
|
||||
#: 17df49416ec247fdb8f8862ec2ec8dc3
|
||||
msgid ""
|
||||
"That's how you can expand the example above. Use the `Routed /48` "
|
||||
"information. This allows you to assign a different /64 to every interface, "
|
||||
"LAN, or even device. Or you could break your network into smaller chunks "
|
||||
"like /56 or /60."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:169
|
||||
#: e4872a8b039f4965ba7db797feb6ce70
|
||||
msgid "The format of these addresses:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:171
|
||||
#: a680481984ce4e3cba3147ace39339f2
|
||||
msgid ""
|
||||
"`2001:470:xxxx::/48`: The whole subnet. xxxx should come from Tunnelbroker."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:172
|
||||
#: 8811a6910f0d41029f75986a4051e439
|
||||
msgid "`2001:470:xxxx:1::/64`: A subnet suitable for a LAN"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:173
|
||||
#: 0be6cdcfbf9b494d972beb120cbff231
|
||||
msgid "`2001:470:xxxx:2::/64`: Another subnet"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:174
|
||||
#: 048263091af848179c2b55a901b94f6f
|
||||
msgid "`2001:470:xxxx:ffff:/64`: The last usable /64 subnet."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:176
|
||||
#: 1544240be6e040c3b2316d2bb28a83b9
|
||||
msgid ""
|
||||
"In the above examples, 1,2,ffff are all chosen by you. You can use 1-ffff "
|
||||
"(1-65535)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:179
|
||||
#: 9555909b8f964a02a14bf995b7370a81
|
||||
msgid ""
|
||||
"So, when your LAN is eth1, your DMZ is eth2, your cameras are on eth3, etc:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:200
|
||||
#: 79d2a568ce054e6f82dcd8208b682cd4
|
||||
msgid "Firewall"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:202
|
||||
#: bdb36fc61be6473681e2d4013d05cc20
|
||||
msgid ""
|
||||
"Finally, don't forget the :ref:`firewall`. The usage is identical, except "
|
||||
"for instead of `set firewall name NAME`, you would use `set firewall "
|
||||
"ipv6-name NAME`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:206
|
||||
#: 45493d140daa4adb80535f448eebc499
|
||||
msgid ""
|
||||
"Similarly, to attach the firewall, you would use `set interfaces ethernet "
|
||||
"eth0 firewall in ipv6-name` or `set firewall zone LOCAL from WAN firewall "
|
||||
"ipv6-name`."
|
||||
msgstr ""
|
||||
@ -1,179 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:05+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:6 f83fa44add8c41fab8110d1f2e321206
|
||||
msgid "Route-Based Site-to-Site VPN to Azure (BGP over IKEv2/IPsec)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:8 534f72f752e84afb8b770ad8a53a1bd5
|
||||
msgid ""
|
||||
"This guide shows an example of a route-based IKEv2 site-to-site VPN to Azure"
|
||||
" using VTI and BGP for dynamic routing updates."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:11 049d04f68cd44accb87923158043df03
|
||||
msgid ""
|
||||
"For redundant / active-active configurations see :ref:`examples-azure-vpn-"
|
||||
"dual-bgp`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:16 54fc3df452904c5ea43d99c856544676
|
||||
msgid "Prerequisites"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:18 abec6e0963af4d7fbe1c1162390d4a60
|
||||
msgid ""
|
||||
"A pair of Azure VNet Gateways deployed in active-passive configuration with "
|
||||
"BGP enabled."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:21 22aeb09e6d9344c4be9e08c70c779758
|
||||
msgid ""
|
||||
"A local network gateway deployed in Azure representing the Vyos device, "
|
||||
"matching the below Vyos settings except for address space, which only "
|
||||
"requires the Vyos private IP, in this example 10.10.0.5/32"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:26 e6783a61f8d54c33a95e58407aea2c46
|
||||
msgid ""
|
||||
"A connection resource deployed in Azure linking the Azure VNet gateway and "
|
||||
"the local network gateway representing the Vyos device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:31 f6198f4f4b574ab7b36ae8f6ee5dc732
|
||||
msgid "Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:34 cc5a2912e07c44bfb396b9262365fc92
|
||||
msgid "WAN Interface"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:34 df85aea4568748798a33025246e4f9ff
|
||||
msgid "eth0"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:36 20ce51d06a40433d84365d4573b1c4bd
|
||||
msgid "On-premises address space"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:36 46b911f0e0634cd99a4106fb467df923
|
||||
msgid "10.10.0.0/16"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:38 e7d5f286aec147fcaee08602adc1d133
|
||||
msgid "Azure address space"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:38 69d765b32e0f4434ab5158857004439d
|
||||
msgid "10.0.0.0/16"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:40 806362f58c034acbb2ccd5390bfa3a3f
|
||||
msgid "Vyos public IP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:40 a09e867c84484ac0b7c657ce599b4d76
|
||||
msgid "198.51.100.3"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:42 6680466007f8459b8859bba84a6ef5f0
|
||||
msgid "Vyos private IP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:42 05581a563fb248cfbce55b48fc9b516c
|
||||
msgid "10.10.0.5"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:44 ab851443a7a74c0dbd76a3d9c2b741ae
|
||||
msgid "Azure VNet Gateway public IP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:44 76422c1c147445248b6990ab012ca135
|
||||
msgid "203.0.113.2"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:46 aca3077ca2d946bbb13bfe1d5bc3b9fd
|
||||
msgid "Azure VNet Gateway BGP IP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:46 4d0cb52280314731a2b791c9ac669e5f
|
||||
msgid "10.0.0.4"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:48 4170c65ca13340a49596468c75bfeb01
|
||||
msgid "Pre-shared key"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:48 240e9cc921f447b897bdbf946b707747
|
||||
msgid "ch00s3-4-s3cur3-psk"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:50 4eb2ac883ece41aa9e8d90fb835c8f29
|
||||
msgid "Vyos ASN"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:50 f19b0284d6d747f1abea3cd22b340a78
|
||||
msgid "64499"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:52 7592137fa3bf405d9bc5c9a66d0c91ec
|
||||
msgid "Azure ASN"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:52 1a542064bc174d668ec6c1701490a076
|
||||
msgid "65540"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:56 bca5f6372b374ec19f70a3d2ec0ca67e
|
||||
msgid "Vyos configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:58 e2d8a5f4046240d0a23ca4e3fd684639
|
||||
msgid ""
|
||||
"Configure the IKE and ESP settings to match a subset of those supported by "
|
||||
"Azure:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:80 6d547d6d1fa14ccc8948bceef68615b4
|
||||
msgid "Enable IPsec on eth0"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:86 62b5ee4ee0924f2cab8739de17862612
|
||||
msgid "Configure a VTI with a dummy IP address"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:93 75d6082877044b21a8352a52d5887883
|
||||
msgid "Clamp the VTI's MSS to 1350 to avoid PMTU blackholes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:99 3a6c4bc871fe4c048e7ead2f2d1eda9a
|
||||
msgid "Configure the VPN tunnel"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:115 f49b5c5e37e24e1689dddc469c4608ea
|
||||
msgid "**Important**: Add an interface route to reach Azure's BGP listener"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:121 7714f19656884885a022c6df481adf48
|
||||
msgid "Configure your BGP settings"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-bgp.rst:131 a3b60878de2a436a895eac195a191428
|
||||
msgid "**Important**: Disable connected check \\"
|
||||
msgstr ""
|
||||
@ -1,222 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:05+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:6
|
||||
#: 9b9db6fa09124662b2a7c3335dbc144a
|
||||
msgid "Route-Based Redundant Site-to-Site VPN to Azure (BGP over IKEv2/IPsec)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:8
|
||||
#: 759fb45f3bf44f8fa56771e2b1d8299f
|
||||
msgid ""
|
||||
"This guide shows an example of a redundant (active-active) route-based IKEv2"
|
||||
" site-to-site VPN to Azure using VTI and BGP for dynamic routing updates."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:13
|
||||
#: 73abec87c3ca4f83b32d667d2263bfa1
|
||||
msgid "Prerequisites"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:15
|
||||
#: 18c0980f9b09457f82b75d3473ff7764
|
||||
msgid ""
|
||||
"A pair of Azure VNet Gateways deployed in active-active configuration with "
|
||||
"BGP enabled."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:18
|
||||
#: 5c5653cb683f464fb3b5880c79c617ac
|
||||
msgid ""
|
||||
"A local network gateway deployed in Azure representing the Vyos device, "
|
||||
"matching the below Vyos settings except for address space, which only "
|
||||
"requires the Vyos private IP, in this example 10.10.0.5/32"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:23
|
||||
#: bbfc8956ac7443eba627417fdf67d024
|
||||
msgid ""
|
||||
"A connection resource deployed in Azure linking the Azure VNet gateway and "
|
||||
"the local network gateway representing the Vyos device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:28
|
||||
#: e6ff621563b042338d4425002ae8a78b
|
||||
msgid "Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:31
|
||||
#: 716721a06b7f4669a9b2409eb2aac65d
|
||||
msgid "WAN Interface"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:31
|
||||
#: dfcb3352016049a98f1d3c0b0be32998
|
||||
msgid "eth0"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:33
|
||||
#: 5d959b80a81f430f9d86a26a9ad19c3e
|
||||
msgid "On-premises address space"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:33
|
||||
#: a3ceef7fc78c48949eb6c0eeae0b667a
|
||||
msgid "10.10.0.0/16"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:35
|
||||
#: 80e725a06e004cc69f8ee875fcc6dfa8
|
||||
msgid "Azure address space"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:35
|
||||
#: 6d16c5efb5d745cf95e8ff423757616b
|
||||
msgid "10.0.0.0/16"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:37
|
||||
#: ee5c0ac6e9014725a3fd16837ae0e288
|
||||
msgid "Vyos public IP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:37
|
||||
#: fc806f5176d946a9805e3f7baf40c7ce
|
||||
msgid "198.51.100.3"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:39
|
||||
#: e846499ba5d248af818ff80cd6910265
|
||||
msgid "Vyos private IP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:39
|
||||
#: 5e6a6539cd5e45ac9e8f1f9b07c0fc86
|
||||
msgid "10.10.0.5"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:41
|
||||
#: 90a33f04bce84814be2fb2de47ee9af5
|
||||
msgid "Azure VNet Gateway 1 public IP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:41
|
||||
#: 0559c71d81a6400fb5029149976df8d7
|
||||
msgid "203.0.113.2"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:43
|
||||
#: b834b0cd721542aba5842057601df99e
|
||||
msgid "Azure VNet Gateway 2 public IP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:43
|
||||
#: 494e561c165342a995c23b36a38b97f4
|
||||
msgid "203.0.113.3"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:45
|
||||
#: 801eca976a174615b5cd752c1646d5b6
|
||||
msgid "Azure VNet Gateway BGP IP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:45
|
||||
#: 1dd2e30409cb4e1da1af32da8e2ef380
|
||||
msgid "10.0.0.4,10.0.0.5"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:47
|
||||
#: 500be57e62db42f5a73ba13af5f90661
|
||||
msgid "Pre-shared key"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:47
|
||||
#: f4e179a9bbd249d0b23c6d6e252a1365
|
||||
msgid "ch00s3-4-s3cur3-psk"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:49
|
||||
#: 16b7665d8270452080540cc94e6ee8fa
|
||||
msgid "Vyos ASN"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:49
|
||||
#: 9250aa14f188401d9e4778537e44a36d
|
||||
msgid "64499"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:51
|
||||
#: 4f57f84278e84e15af808cd47888d74c
|
||||
msgid "Azure ASN"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:51
|
||||
#: c583b170be9e4aeaaff113835ebee4e1
|
||||
msgid "65540"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:55
|
||||
#: 58d06a64237740d5921366d353c0cc2e
|
||||
msgid "Vyos configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:57
|
||||
#: 8752f9b33a9745629c606f160f9f2e18
|
||||
msgid ""
|
||||
"Configure the IKE and ESP settings to match a subset of those supported by "
|
||||
"Azure:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:79
|
||||
#: f91c7ac88fd64a51afaa2497ea5c97a0
|
||||
msgid "Enable IPsec on eth0"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:85
|
||||
#: b00fe5e7ffe24f7caf9c9ec2145cf006
|
||||
msgid "Configure two VTIs with a dummy IP address each"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:95
|
||||
#: c78f7df8e90f48d398ddfdf6f25403a1
|
||||
msgid "Clamp the VTI's MSS to 1350 to avoid PMTU blackholes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:102
|
||||
#: 6bad30973bc846639ab878dcf67cbb4f
|
||||
msgid "Configure the VPN tunnels"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:130
|
||||
#: 44e9904045894f43baea76edb6326273
|
||||
msgid ""
|
||||
"**Important**: Add an interface route to reach both Azure's BGP listeners"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:137
|
||||
#: e86362b48b914a9285d07293c4dfc900
|
||||
msgid "Configure your BGP settings"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/azure-vpn-dual-bgp.rst:152
|
||||
#: 8eff32668c1d4fef849d705526783f9d
|
||||
msgid ""
|
||||
"**Important**: Disable connected check, otherwise the routes learned from "
|
||||
"Azure will not be imported into the routing table."
|
||||
msgstr ""
|
||||
@ -1,50 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:05+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configexamples/bgp-ipv6-unnumbered.rst:7
|
||||
#: d09ae8126681462993e92d093899abfd
|
||||
msgid "BGP IPv6 unnumbered with extended nexthop"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/bgp-ipv6-unnumbered.rst:9
|
||||
#: 32a43eae8561459abb680e6c4ed1e083
|
||||
msgid "General information can be found in the :ref:`routing-bgp` chapter."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/bgp-ipv6-unnumbered.rst:12
|
||||
#: 79b61cb0a1b049fdbe7cd106aeefbc98
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/bgp-ipv6-unnumbered.rst:14
|
||||
#: ../../configexamples/bgp-ipv6-unnumbered.rst:57
|
||||
#: 4cec5409b9554b65a3f193999725cc79 4e82bbee18eb49fca04f67464cd968e1
|
||||
msgid "Router A:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/bgp-ipv6-unnumbered.rst:34
|
||||
#: ../../configexamples/bgp-ipv6-unnumbered.rst:118
|
||||
#: 56a2def17e61479c80767f815f9c2c34 4a9918e9212a49ca8899c41058c15724
|
||||
msgid "Router B:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/bgp-ipv6-unnumbered.rst:55
|
||||
#: 4abe7ac3ae0b4dd79f948dc26d129037
|
||||
msgid "Results"
|
||||
msgstr ""
|
||||
@ -1,598 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:05+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configexamples/ha.rst:7 6635636e1b2848cdaff0110647b1a93a
|
||||
msgid "High Availability Walkthrough"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:9 328dc19e47f3451c94a92ab9fd1d91be
|
||||
msgid ""
|
||||
"This document walks you through a complete HA setup of two VyOS machines. "
|
||||
"This design is based on a VM as the primary router and a physical machine as"
|
||||
" a backup, using VRRP, BGP, OSPF, and conntrack sharing."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:13 f3fa38c6974646a1bee041f198e3bc34
|
||||
msgid ""
|
||||
"This document aims to walk you through setting everything up, so at a point "
|
||||
"where you can reboot any machine and not lose more than a few seconds worth "
|
||||
"of connectivity."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:18 cd75d9827a5e47f0b243e5ac7c9c1526
|
||||
msgid "Design"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:20 e7dd91e9f3b84f5f8b058f7ec1f550e3
|
||||
msgid ""
|
||||
"This is based on a real-life production design. One of the complex issues is"
|
||||
" ensuring you have redundant data INTO your network. We do this with a pair "
|
||||
"of Cisco Nexus switches and using Virtual PortChannels that are spanned "
|
||||
"across them. As a bonus, this also allows for complete switch failure "
|
||||
"without an outage. How you achieve this yourself is left as an exercise to "
|
||||
"the reader. But our setup is documented here."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:28 a8c9be49e8834a5989d661c13939f74d
|
||||
msgid "Walkthrough suggestion"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:30 5107a6fd819845d6bfe5da4bbc5cd410
|
||||
msgid ""
|
||||
"The ``commit`` command is implied after every section. If you make an error,"
|
||||
" ``commit`` will warn you and you can fix it before getting too far into "
|
||||
"things. Please ensure you commit early and commit often."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:34 9b466ae1e3084c2487fa455690176700
|
||||
msgid ""
|
||||
"If you are following through this document, it is strongly suggested you "
|
||||
"complete the entire document, ONLY doing the virtual router1 steps, and then"
|
||||
" come back and walk through it AGAIN on the backup hardware router."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:38 45de19cee0d54c2b8dcc4e176eb9cf7a
|
||||
msgid ""
|
||||
"This ensures you don't go too fast or miss a step. However, it will make "
|
||||
"your life easier to configure the fixed IP address and default route now on "
|
||||
"the hardware router."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:43 4ff61bf6bb484462be110aba531c24ad
|
||||
msgid "Example Network"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:45 e5762566a37b47e9956fce030e9219eb
|
||||
msgid ""
|
||||
"In this document, we have been allocated 203.0.113.0/24 by our upstream "
|
||||
"provider, which we are publishing on VLAN100."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:48 f8c62807293d4310af27b812215c71eb
|
||||
msgid ""
|
||||
"They want us to establish a BGP session to their routers on 192.0.2.11 and "
|
||||
"192.0.2.12 from our routers 192.0.2.21 and 192.0.2.22. They are AS 65550 and"
|
||||
" we are AS 65551."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:52 f5c58c9d490245f8a4a137b7e716a599
|
||||
msgid ""
|
||||
"Our routers are going to have a floating IP address of 203.0.113.1, and use "
|
||||
".2 and .3 as their fixed IPs."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:55 858e51844e7a46ae8f90e89347793ba7
|
||||
msgid ""
|
||||
"We are going to use 10.200.201.0/24 for an 'internal' network on VLAN201."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:57 ad0d8fa61ad84a79bcda13f5c24035f6
|
||||
msgid ""
|
||||
"When traffic is originated from the 10.200.201.0/24 network, it will be "
|
||||
"masqueraded to 203.0.113.1"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:60 8c41661f7f0d47909e9cd9b41488f2fb
|
||||
msgid ""
|
||||
"For connection between sites, we are running a WireGuard link to two REMOTE "
|
||||
"routers and using OSPF over those links to distribute routes. That remote "
|
||||
"site is expected to send traffic from anything in 10.201.0.0/16"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:65 61fe940554c040708bee57444169fa8e
|
||||
msgid "VLANs"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:67 8e8acb9d0feb48a48864e4d5a334b49c
|
||||
msgid "These are the vlans we will be using:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:69 1d1fdf6d8f2248ee80b33f9c4156323b
|
||||
msgid "50: Upstream, using the 192.0.2.0/24 network allocated by them."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:70 1c606178267146308a748c1680340a5b
|
||||
msgid "100: 'Public' network, using our 203.0.113.0/24 network."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:71 ceb5aa6290cb496e8862dbdc9810eeed
|
||||
msgid "201: 'Internal' network, using 10.200.201.0/24"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:74 ed3303e4df4f47a6a44b1c4e563eef9f
|
||||
msgid "Hardware"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:76 6c8cc0e1d2ba4e068a9a56edab17035e
|
||||
msgid "switch1 (Nexus 10gb Switch)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:77 2b8ca1bfc14b4f889f6250d8bb9cefd1
|
||||
msgid "switch2 (Nexus 10gb Switch)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:78 24ba0c7bad77467fa78e8b78dc3e6511
|
||||
msgid "compute1 (VMware ESXi 6.5)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:79 cb94b9b3258a4e499cc77606f027e53e
|
||||
msgid "compute2 (VMware ESXi 6.5)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:80 e8bfef4d8cf744f785f31e6fab83f0e2
|
||||
msgid "compute3 (VMware ESXi 6.5)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:81 3201e0706ae44014a8c66fbcdf98396d
|
||||
msgid "router2 (Random 1RU machine with 4 NICs)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:83 1fcc6ca17f1c43c7a8f06987e57f9b0e
|
||||
msgid "Note that router1 is a VM that runs on one of the compute nodes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:86 0de10057e9b6488e829ed5a52d9ddbc9
|
||||
msgid "Network Cabling"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:88 c635e244c7954a5b9a920bb7d5eee4ff
|
||||
msgid ""
|
||||
"From Datacenter - This connects into port 1 on both switches, and is tagged "
|
||||
"as VLAN 50"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:90 3db2a959fe2b43c389856f9ec845c94a
|
||||
msgid "Cisco VPC Crossconnect - Ports 39 and 40 bonded between each switch"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:91 887ffd05a80d4ed3b8237e0937efd045
|
||||
msgid "Hardware Router - Port 8 of each switch"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:92 dbcb6bca65914da7828f17d1cd0012cb
|
||||
msgid "compute1 - Port 9 of each switch"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:93 58f7491bce3049d4b855c840bbd278c2
|
||||
msgid "compute2 - Port 10 of each switch"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:94 67b8ad69203a49f6a1f3f51db1340ba0
|
||||
msgid "compute3 - Port 11 of each switch"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:96 922733c2845c439281cf4ae28367406d
|
||||
msgid ""
|
||||
"This is ignoring the extra Out-of-band management networking, which should "
|
||||
"be on totally different switches, and a different feed into the rack, and is"
|
||||
" out of scope of this."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:100 ff780c97cb90413796269eb194ae6b07
|
||||
msgid ""
|
||||
"Our implementation uses VMware's Distributed Port Groups, which allows "
|
||||
"VMware to use LACP. This is a part of the ENTERPRISE licence, and is not "
|
||||
"available on a free licence. If you are implementing this and do not have "
|
||||
"access to DPGs, you should not use VMware, and use some other virtualization"
|
||||
" platform instead."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:108 a84f52e0e1d64b0aa9fc5a0c773d7602
|
||||
msgid "Basic Setup (via console)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:110 200c203631fd4a4b8aaebed5bf35b9fb
|
||||
msgid ""
|
||||
"Create your router1 VM. So it can withstand a VM Host failing or a network "
|
||||
"link failing. Using VMware, this is achieved by enabling vSphere DRS, "
|
||||
"vSphere Availability, and creating a Distributed Port Group that uses LACP."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:114 56302a6a7a91496b8b2812c697f399f2
|
||||
msgid ""
|
||||
"Many other Hypervisors do this, and I'm hoping that this document will be "
|
||||
"expanded to document how to do this for others."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:117 16738dc1523d4c9d89cd0721071045e1
|
||||
msgid ""
|
||||
"Create an 'All VLANs' network group, that passes all trunked traffic through"
|
||||
" to the VM. Attach this network group to router1 as eth0."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:120 c95508528a7b44baa796c0145a6f1c82
|
||||
msgid ""
|
||||
"VMware: You must DISABLE SECURITY on this Port group. Make sure that "
|
||||
"``Promiscuous Mode``\\ , ``MAC address changes`` and ``Forged transmits`` "
|
||||
"are enabled. All of these will be done as part of failover."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:125 e73697b70e1146d895921faf43c2af71
|
||||
msgid "Bonding on Hardware Router"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:127 ddaaa893a69f44cb984a0c51e15a6e5f
|
||||
msgid ""
|
||||
"Create a LACP bond on the hardware router. We are assuming that eth0 and "
|
||||
"eth1 are connected to port 8 on both switches, and that those ports are "
|
||||
"configured as a Port-Channel."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:141 169cb700875f4be98c4dce46ffa51ca5
|
||||
msgid "Assign external IP addresses"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:143 968533e09d8e4ff2a10eced097e77e09
|
||||
msgid ""
|
||||
"VLAN 100 and 201 will have floating IP addresses, but VLAN50 does not, as "
|
||||
"this is talking directly to upstream. Create our IP address on vlan50."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:146 66ee1b962118455aa159df42da77deb1
|
||||
msgid ""
|
||||
"For the hardware router, replace ``eth0`` with ``bond0``. As (almost) every "
|
||||
"command is identical, this will not be specified unless different things "
|
||||
"need to be performed on different hosts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:154 59a6738568c540f1949fe02d4fcf34cc
|
||||
msgid "In this case, the hardware router has a different IP, so it would be"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:161 3e40d84c53a04d9eb0d6809ccc20b7b2
|
||||
msgid "Add (temporary) default route"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:163 de5087605cf546c68ee58e5687e5f92a
|
||||
msgid ""
|
||||
"It is assumed that the routers provided by upstream are capable of acting as"
|
||||
" a default router, add that as a static route."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:174 a79c996cc6f64b5eb9fbdee8f7a226cf
|
||||
msgid "Enable SSH"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:176 551ce6f349f647d2b9d4ea9deff17487
|
||||
msgid ""
|
||||
"Enable SSH so you can now SSH into the routers, rather than using the "
|
||||
"console."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:184 fada2faa8d5046bd96ca04b615f816b3
|
||||
msgid ""
|
||||
"At this point, you should be able to SSH into both of them, and will no "
|
||||
"longer need access to the console (unless you break something!)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:189 874f028d74c2487e872a241eedb25679
|
||||
msgid "VRRP Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:191 5cb0eca9555b466eb78c771fbec62eba
|
||||
msgid ""
|
||||
"We are setting up VRRP so that it does NOT fail back when a machine returns "
|
||||
"into service, and it prioritizes router1 over router2."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:195 134f86480d6846d19b2a5c475d9a09f9
|
||||
msgid "Internal Network"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:197 f5ecaa7e6a99408cbc48e6191f936e12
|
||||
msgid ""
|
||||
"This has a floating IP address of 10.200.201.1/24, using virtual router ID "
|
||||
"201. The difference between them is the interface name, hello-source-"
|
||||
"address, and peer-address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:201 ../../configexamples/ha.rst:237
|
||||
#: ../../configexamples/ha.rst:366 ../../configexamples/ha.rst:540
|
||||
#: 024e10c2ef1d45538b14d1441b2aba12 4ff23649975144ea8761a1f0db9fc38b
|
||||
#: ead03513ccf349d69a72ad719341ccc0 3b0bc4b0e37242ea9b06d4a5fd523b51
|
||||
msgid "**router1**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:215 ../../configexamples/ha.rst:250
|
||||
#: ../../configexamples/ha.rst:581 64a85b10ff4940fe834992340e3d79e9
|
||||
#: d5a58d53fb57403a93d109ea8f0499b8 b0c10d042e1b4aa7aebd7cbbb4359cff
|
||||
msgid "**router2**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:230 c02ad28f7389436488aa2f0667a4c92a
|
||||
msgid "Public Network"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:232 6ba11351d94e405ca551816733f5d6a7
|
||||
msgid ""
|
||||
"This has a floating IP address of 203.0.113.1/24, using virtual router ID "
|
||||
"113. The virtual router ID is just a random number between 1 and 254, and "
|
||||
"can be set to whatever you want. Best practices suggest you try to keep them"
|
||||
" unique enterprise-wide."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:265 5cc83f7b616a4ba094220576cb889002
|
||||
msgid "Create VRRP sync-group"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:267 7ecafb24ca98488b8f1415f33752a416
|
||||
msgid ""
|
||||
"The sync group is used to replicate connection tracking. It needs to be "
|
||||
"assigned to a random VRRP group, and we are creating a sync group called "
|
||||
"``sync`` using the vrrp group ``int``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:276 ../../configexamples/ha.rst:337
|
||||
#: 0c50ea68a8144106bada8d98ee2c0b35 ce7487619dbe4873a0e344be20f23baf
|
||||
msgid "Testing"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:278 8bfcd793743d4ff0a4b8de2e4d72977d
|
||||
msgid ""
|
||||
"At this point, you should be able to see both IP addresses when you run "
|
||||
"``show interfaces``\\ , and ``show vrrp`` should show both interfaces in "
|
||||
"MASTER state (and SLAVE state on router2)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:292 0fb62e4241214eb89230fb03c7372d34
|
||||
msgid "You should be able to ping to and from all the IPs you have allocated."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:295 aa72fecb45c44884a1139c0375451e82
|
||||
msgid "NAT and conntrack-sync"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:297 eded51367628479d8b4117240d6478eb
|
||||
msgid ""
|
||||
"Masquerade Traffic originating from 10.200.201.0/24 that is heading out the "
|
||||
"public interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:300 5451f8ac48d346bda205c19c2c4691bd
|
||||
msgid ""
|
||||
"We explicitly exclude the primary upstream network so that BGP or OSPF "
|
||||
"traffic doesn't accidentally get NAT'ed."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:312 5d204005a8004750afc2d562b5dc1a33
|
||||
msgid "Configure conntrack-sync and enable helpers"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:314 43870f92ca894847be0108d6643fdbf0
|
||||
msgid ""
|
||||
"Conntrack helper modules are enabled by default, but they tend to cause more"
|
||||
" problems than they're worth in complex networks. You can disable all of "
|
||||
"them at one go."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:322 f38092677ae4464187fe29eda38f2ae8
|
||||
msgid ""
|
||||
"Now enable replication between nodes. Replace eth0.201 with bond0.201 on the"
|
||||
" hardware router."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:339 2860f289aac74a5687ebd85c0487d8e9
|
||||
msgid ""
|
||||
"The simplest way to test is to look at the connection tracking stats on the "
|
||||
"standby hardware router with the command ``show conntrack-sync statistics``."
|
||||
" The numbers should be very close to the numbers on the primary router."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:343 2754bcacb8b141ffb07a28ac712e5f0f
|
||||
msgid ""
|
||||
"When you have both routers up, you should be able to establish a connection "
|
||||
"from a NAT'ed machine out to the internet, reboot the active machine, and "
|
||||
"that connection should be preserved, and will not drop out."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:348 7926537525124f4ba89416e2b9c2b296
|
||||
msgid "OSPF Over WireGuard"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:350 eb10c0fc01ad4eadbd69a27512fa8cff
|
||||
msgid ""
|
||||
"Wireguard doesn't have the concept of an up or down link, due to its design."
|
||||
" This complicates AND simplifies using it for network transport, as for "
|
||||
"reliable state detection you need to use SOMETHING to detect when the link "
|
||||
"is down."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:354 34792be20b6a4dc2a479d4fd1eb38c5a
|
||||
msgid ""
|
||||
"If you use a routing protocol itself, you solve two problems at once. This "
|
||||
"is only a basic example, and is provided as a starting point."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:358 07fe314c1d244c58918fbec62add102c
|
||||
msgid "Configure Wireguard"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:360 79d18f239c9d47e89a9ea9d3e6c8b7d6
|
||||
msgid ""
|
||||
"There is plenty of instructions and documentation on setting up Wireguard. "
|
||||
"The only important thing you need to remember is to only use one WireGuard "
|
||||
"interface per OSPF connection."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:364 6e2c049a5e2b4d6b9c9de79ba7dcfcc3
|
||||
msgid "We use small /30's from 10.254.60/24 for the point-to-point links."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:368 6313ed08caa34dfa8dc53630ad69e9cb
|
||||
msgid ""
|
||||
"Replace the 203.0.113.3 with whatever the other router's IP address is."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:389 82b6b6db1dc44350b4cbc8e8a314eae6
|
||||
msgid "**offsite1**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:391 b355d228c62349df8cff68502b2d1b29
|
||||
msgid "This is connecting back to the STATIC IP of router1, not the floating."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:412 d625b918b5054ea1be331cc13b37e9f2
|
||||
msgid "Test WireGuard"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:414 79ca90a7810649a39de3f4757d54fe5f
|
||||
msgid "Make sure you can ping 10.254.60.1 and .2 from both routers."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:417 ea2eda10fd404f6eb09c00f3a56609d1
|
||||
msgid "Create Export Filter"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:419 1781368cc3fb4fa8a7fef2ca50fd2238
|
||||
msgid ""
|
||||
"We only want to export the networks we know. Always do a whitelist on your "
|
||||
"route filters, both importing and exporting. A good rule of thumb is **'If "
|
||||
"you are not the default router for a network, don't advertise it'**. This "
|
||||
"means we explicitly do not want to advertise the 192.0.2.0/24 network (but "
|
||||
"do want to advertise 10.200.201.0 and 203.0.113.0, which we ARE the default "
|
||||
"route for). This filter is applied to ``redistribute connected``. If we WERE"
|
||||
" to advertise it, the remote machines would see 192.0.2.21 available via "
|
||||
"their default route, establish the connection, and then OSPF would say "
|
||||
"'192.0.2.0/24 is available via this tunnel', at which point the tunnel would"
|
||||
" break, OSPF would drop the routes, and then 192.0.2.0/24 would be reachable"
|
||||
" via default again. This is called 'flapping'."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:448 3fa81ded7b2b4191977371b88e9c359c
|
||||
msgid "Create Import Filter"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:450 3908a1799dea49648304c5e91a236abf
|
||||
msgid ""
|
||||
"We only want to import networks we know. Our OSPF peer should only be "
|
||||
"advertising networks in the 10.201.0.0/16 range. Note that this is an "
|
||||
"INVERSE MATCH. You deny in access-list 100 to accept the route."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:470 0d63d8b7e349423689b890c3fbe79241
|
||||
msgid "Enable OSPF"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:472 9d6650db6fd84a4b91a026c32f4cb9fd
|
||||
msgid ""
|
||||
"Every router **must** have a unique router-id. The 'reference-bandwidth' is "
|
||||
"used because when OSPF was originally designed, the idea of a link faster "
|
||||
"than 1gbit was unheard of, and it does not scale correctly."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:489 6ebb88d1d9ca46488180f5a76ef013d9
|
||||
msgid "Test OSPF"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:491 812917c76e66417e8eb1ae6a4a48b711
|
||||
msgid ""
|
||||
"When you have enabled OSPF on both routers, you should be able to see each "
|
||||
"other with the command ``show ip ospf neighbour``. The state must be 'Full' "
|
||||
"or '2-Way'. If it is not, then there is a network connectivity issue between"
|
||||
" the hosts. This is often caused by NAT or MTU issues. You should not see "
|
||||
"any new routes (unless this is the second pass) in the output of ``show ip "
|
||||
"route``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:498 fc0e4249dc1449e2b16c6ed4d2970097
|
||||
msgid "Advertise connected routes"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:500 30a19b02b06842b5854ddffa7b0f3ad9
|
||||
msgid ""
|
||||
"As a reminder, only advertise routes that you are the default router for. "
|
||||
"This is why we are NOT announcing the 192.0.2.0/24 network, because if that "
|
||||
"was announced into OSPF, the other routers would try to connect to that "
|
||||
"network over a tunnel that connects to that network!"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:511 fdefb152353a413e8238054e3c158d8e
|
||||
msgid ""
|
||||
"You should now be able to see the advertised network on the other host."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:514 76e146cffb1a47fdaae34f9c1a74d2a7
|
||||
msgid "Duplicate configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:516 9af13c626127489190a5475e554d0027
|
||||
msgid ""
|
||||
"At this point, you now need to create the X link between all four routers. "
|
||||
"Use amdifferent /30 for each link."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:520 44602b1155fc4647a8d3de483e9f37c5
|
||||
msgid "Priorities"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:522 bb7300e02c254e0bbae13bf9e5106d59
|
||||
msgid ""
|
||||
"Set the cost on the secondary links to be 200. This means that they will not"
|
||||
" be used unless the primary links are down."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:531 9fe545f2929b484f83077b7c0a5c3a5e
|
||||
msgid "This will be visible in 'show ip route'."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:534 114fb5790b9c49fb8133c2a9fd5d2465
|
||||
msgid "BGP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:536 ec4424a0b26f40e985a844767d8916ee
|
||||
msgid ""
|
||||
"BGP is an extremely complex network protocol. An example is provided here."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:538 db63ce80f3a14d99914fc0eeff1d8c29
|
||||
msgid "Router id's must be unique."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:543 0d5527a10ee54fea8be1fd010b1b3af8
|
||||
msgid ""
|
||||
"The ``redistribute ospf`` command is there purely as an example of how this "
|
||||
"can be expanded. In this walkthrough, it will be filtered by BGPOUT rule "
|
||||
"10000, as it is not 203.0.113.0/24."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ha.rst:583 569496a685d24d70a371a91381b90bf3
|
||||
msgid ""
|
||||
"This is identical, but you use the BGPPREPENDOUT route-map to advertise the "
|
||||
"route with a longer path."
|
||||
msgstr ""
|
||||
@ -1,74 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:05+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configexamples/index.rst:4 221cdd3e723548398440f0bbb733d7d3
|
||||
msgid "Configuration Blueprints"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/index.rst:6 af362a0bbe0343efb3c18e916f6eb5fa
|
||||
msgid "This chapter contains various configuration examples:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/index.rst:24 6078e9736f7a4bf3871932455e83b281
|
||||
msgid "Configuration Blueprints (autotest)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/index.rst:26 7356a0291dfd4eef8b3548ffe16c6c3d
|
||||
msgid "The next pages contains automatic full tested configuration examples."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/index.rst:28 76e850e3a0b149f79fd0256fa46bd4b2
|
||||
msgid ""
|
||||
"Each lab will build an test from an external script. The page content will "
|
||||
"generate, so changes will not take an effect."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/index.rst:31 d07c374b439e49e3bc9896a7315fe837
|
||||
msgid ""
|
||||
"A host ``vyos-oobm`` will use as a ssh proxy. This host is just necessary "
|
||||
"for the Lab test."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/index.rst:34 886c86ce28bc41d8911370caa26d877f
|
||||
msgid "The process will do the following steps:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/index.rst:36 5856e3be60d54e04bed197f4afccdd20
|
||||
msgid "create the lab on a eve-ng server"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/index.rst:37 d942be2969a045e5a2a68b24d7ffccbe
|
||||
msgid "configure each host in the lab"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/index.rst:38 cc5afea66c11467fb2d0f65f86aeb8f3
|
||||
msgid "do some defined tests"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/index.rst:39 c416622bee5e41aa82b6eaaef4d3ca15
|
||||
msgid "optional do an upgrade to a higher version and do step 3 again."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/index.rst:40 448ae7b0c859456f81c549a1cf2e3a78
|
||||
msgid "generate the documentation and include files"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/index.rst:41 50da447b745c4d14a81d72608448b992
|
||||
msgid "shutdown and destroy the lab, if there is no error"
|
||||
msgstr ""
|
||||
@ -1,575 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:05+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:3
|
||||
#: eb41ae1b116f44aca5187f22bd6e3c38
|
||||
msgid "Inter-VRF Routing over VRF Lite"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:5
|
||||
#: f0616081b9784167ab9c07a7350cb12c
|
||||
msgid ""
|
||||
"**Virtual Routing and Forwarding** is a technology that allow multiple "
|
||||
"instance of a routing table to exist within a single device. One of the key "
|
||||
"aspect of **VRFs** is that do not share the same routes or interfaces, "
|
||||
"therefore packets are forwarded between interfaces that belong to the same "
|
||||
"VRF only."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:10
|
||||
#: ea59f5e8a5e6486d80e4e4d65d0de34c
|
||||
msgid ""
|
||||
"Any information related to a VRF is not exchanged between devices -or in the"
|
||||
" same device- by default, this is a technique called **VRF-Lite**."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:13
|
||||
#: ac294973fcec422ea2769beb2f586a5d
|
||||
msgid ""
|
||||
"Keep networks isolated is -in general- a good principle, but there are cases"
|
||||
" where you might need that some network can access other in a different VRF."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:16
|
||||
#: 8b47e55fd64d400b96bd14a41ba2f2cd
|
||||
msgid ""
|
||||
"The scope of this document is to cover such cases in a dynamic way without "
|
||||
"the use of MPLS-LDP."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:19
|
||||
#: 0a4d0fe3ed8948c685128f24ac43b5e2
|
||||
msgid ""
|
||||
"General information about L3VPNs can be found in the "
|
||||
":ref:`configuration/vrf/index:L3VPN VRFs` chapter."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:23
|
||||
#: 4c8919e0683e407e853338762e005b73
|
||||
msgid "Overview"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:25
|
||||
#: 4649bebe3b9c452a983b440677eef8ef
|
||||
msgid "Let’s say we have a requirement to have multiple networks."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:27
|
||||
#: 4adf12c76e3042d1aa0615aa93f6c028
|
||||
msgid "LAN 1"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:28
|
||||
#: 2bb42d1b9104415db47557052928d2e8
|
||||
msgid "LAN 2"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:29
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:91
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:106
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:727
|
||||
#: 9e0ca4a0df5f4fb88e8aeb21241714a2 7eecdf4e5fe844e39ce8c9bd6e275a30
|
||||
#: e12f1fbf318148dda9a8468e462ec0f0 9da4873cd37c45d2a1e9e6c8cce272f7
|
||||
msgid "Management"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:30
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:108
|
||||
#: c81a9b48a8c045e2aed48642d26b13ab 091224a1afed4eac89b75bb783b866c4
|
||||
msgid "Internet"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:32
|
||||
#: 99888ffd849e412cbad21c08b326160e
|
||||
msgid ""
|
||||
"Both LANs have to be able to route between each other, both will have "
|
||||
"managed devices through a dedicated management network and both will need "
|
||||
"Internet access yet the LAN2 will need access to some set of outside "
|
||||
"networks, not all. The management network will need access to both LANs but "
|
||||
"cannot have access to/from the outside."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:38
|
||||
#: 0f23fd96749846889ded22c066ef1961
|
||||
msgid ""
|
||||
"This scenario could be a nightmare applying regular routing and might need "
|
||||
"filtering in multiple interfaces."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:41
|
||||
#: 6ab38930088d40d7828f23898bd381d1
|
||||
msgid ""
|
||||
"A simple solution could be using different routing tables, or VRFs for all "
|
||||
"the networks so we can keep the routing restrictions. But for us to route "
|
||||
"between the different VRFs we would need a cable or a logical connection "
|
||||
"between each other:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:46
|
||||
#: 5a813032fce9458eb29d0498989614da
|
||||
msgid "One cable/logical connection between LAN1 and LAN2"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:47
|
||||
#: ef9bfefcf4104ea0b95f1a3b7a9ee796
|
||||
msgid "One cable/logical connection between LAN1 and Internet"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:48
|
||||
#: 6462901ab71c4c9ba3bdd5ed60994278
|
||||
msgid "One cable/logical connection between LAN2 and Internet"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:49
|
||||
#: d3f6c4a564e741508c3095bd738b4e0b
|
||||
msgid "One cable/logical connection between LAN1 and Management"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:50
|
||||
#: 50efd8066bcb420fbf4f3e43a4b2ac4a
|
||||
msgid "One cable/logical connection between LAN2 and Management"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:52
|
||||
#: 12a6f2d5993647ca884f54b7ea65424d
|
||||
msgid "As we can see this is unpractical."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:54
|
||||
#: 86964e2fdcfe42b1acef7ebe5f6be8e7
|
||||
msgid ""
|
||||
"To address this scenario we will use to our advantage an extension of the "
|
||||
"BGP routing protocol that will help us in the “Export” between VRFs without "
|
||||
"the need for MPLS."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:58
|
||||
#: 67c99502bfe344c18b2772fead0bfdef
|
||||
msgid ""
|
||||
"MP-BGP or MultiProtocol BGP introduces two main concepts to solve this "
|
||||
"limitation: - Route Distinguisher (RD): Is used to distinguish between "
|
||||
"different VRFs –called VPNs- inside the BGP Process. The RD is appended to "
|
||||
"each IPv4 Network that is advertised into BGP for that VPN making it a "
|
||||
"unique VPNv4 route. - Route Target (RT): This is an extended BGP community "
|
||||
"append to the VPNv4 route in the Import/Export process. When a route passes "
|
||||
"from the VRF routing table into the BGP process it will add the configured "
|
||||
"export extended community(ies) for that VPN. When that route needs to go "
|
||||
"from BGP into the VRF routing table will only pass if that given VPN import "
|
||||
"policy matches any of the appended community(ies) into that prefix."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:72
|
||||
#: de34231c61084297b36ddb578477b67d
|
||||
msgid "Topology"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rstNone
|
||||
#: cdc1520b038842a68babb2a9a2525fc4
|
||||
msgid "Network Topology Diagram"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:82
|
||||
#: 16f28c31e1f143c5986ab85cc840b32b
|
||||
msgid "IP Schema"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:85
|
||||
#: 40ae6d91025b43babf6a28156ac7500b
|
||||
msgid "Device-A"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:85
|
||||
#: c35074ba59f949b8a2a46f3811869080
|
||||
msgid "Device-B"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:85
|
||||
#: bc3f51095ca3484f863d2762794aa0f8
|
||||
msgid "IPv4 Network"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:85
|
||||
#: 72b11e54e57a4b439f2b75faa92ce102
|
||||
msgid "IPv6 Network"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:87
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:89
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:91
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:93
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:616
|
||||
#: 3f41e5bfa21947be87ec7081d7ee8ba2 b54901e4a8b249f89f67b364fa24663d
|
||||
#: 19cc658588fd4ebf9502ea26ea498d7a 02ad5c6d77bf461396340263ef2d3420
|
||||
#: 900ff739e58e4f79bf99a1f561c405b4
|
||||
msgid "Core"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:87
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:102
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:701
|
||||
#: 56574650a4194ff79d5645140cf03d6b f25b32ec296c44b7aa3458a0f9b44760
|
||||
#: 9b5243427ba34f7cbf9939103226d9b1
|
||||
msgid "LAN1"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:87
|
||||
#: 2d1e1dc89c1f40318ed9748de6273f9f
|
||||
msgid "10.1.1.0/30"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:87
|
||||
#: cbe4082191094f4bab8916aef6f9a5c0
|
||||
msgid "2001:db8::/127"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:89
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:104
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:713
|
||||
#: 65ddfdbbfa3b4c349173b73a2fa3356f b7f31fe8dd854681bb11900e87d1f179
|
||||
#: 5734149a4be547639059a2cdd24050e8
|
||||
msgid "LAN2"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:89
|
||||
#: b7c3c79b8c4842cca5336eb1b94dff85
|
||||
msgid "172.16.2.0/30"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:89
|
||||
#: f4007f87de1f4bada7ce0e55633d427b
|
||||
msgid "2001:db8::2/127"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:91
|
||||
#: 1daaf01c8340423d93f96757bf6041ed
|
||||
msgid "192.168.3.0/30"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:91
|
||||
#: 1b4913f318a04b02a17c852a5f28e312
|
||||
msgid "2001:db8::4/127"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:93
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:739
|
||||
#: f9c8ebe5ce5f46d5ae5f6a311ec9ce1c 1a78a58c2a3d41d8aa2f998dc8bfa291
|
||||
msgid "ISP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:93
|
||||
#: e5138de5b6844fb4bc208ad2d66aec94
|
||||
msgid "10.2.2.0/30"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:93
|
||||
#: c048ed3059334c8c964fc7c9595d8062
|
||||
msgid "2001:db8::6/127"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:97
|
||||
#: a4c3a66971e240858d9343a409da32e9
|
||||
msgid "RD & RT Schema"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:100
|
||||
#: 129b297c60754ac498ec18058a07dcee
|
||||
msgid "VRF"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:100
|
||||
#: 935cb9b1a2e0495fb580d674e4a9e3d0
|
||||
msgid "RD"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:100
|
||||
#: edb2eabdd1284a7dbe82d4544b8616b6
|
||||
msgid "RT"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:102
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:102
|
||||
#: 79ca3a7d0fa14923bfca6af65dff61e9 b49d97869905413e8df40c8e1abb1b3b
|
||||
msgid "64496:1"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:104
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:104
|
||||
#: 81afc720df0d48a0b9df047a6543aeea 0e1ffef8c627472daa211f00b436b220
|
||||
msgid "64496:2"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:106
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:106
|
||||
#: 471376839df44e6a98853fbe83f8c302 3b9f6979c3374fb7a754201c21604f75
|
||||
msgid "64496:50"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:108
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:108
|
||||
#: 901fb99798914a7ba27ae0b4e7e2af72 c22fb6bacd9f4f178ebc8d64e28967fe
|
||||
msgid "64496:100"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:113
|
||||
#: 37b3b1695a5142b8b4eb0f4eda8e9392
|
||||
msgid "Configurations"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:115
|
||||
#: 8fcddacdabb347938fdddd5df33ef082
|
||||
msgid ""
|
||||
"We use a static route configuration in between the Core and each LAN and "
|
||||
"Management router, and BGP between the Core router and the ISP router but "
|
||||
"any dynamic routing protocol can be used."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:120
|
||||
#: d0ba532920c146b58e8609eeb52a9351
|
||||
msgid "Remote Networks"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:122
|
||||
#: 2370f525c998496dae1e93ecb14ef1d2
|
||||
msgid ""
|
||||
"The following template configuration can be used in each remote router based"
|
||||
" in our topology."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:134
|
||||
#: a3a69aba21694a54945c258e54511f4c
|
||||
msgid "Core Router"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:137
|
||||
#: 1d698f00b16644879ae215618bc43467
|
||||
msgid "Step 1: VRF and Configurations to remote networks"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:139
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:231
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:290
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:774
|
||||
#: e37f8f84308849c193ca0456b07b9e12 7a85dc42dbe8467c93d1259f5c8a2831
|
||||
#: 00c29f4758af4aa6bdb6ae7100df73c1 2b99ef8b24734d5ca80591ca6fdd5b75
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:143
|
||||
#: 9d83ffd71ed3407584a88fe68993f486
|
||||
msgid ""
|
||||
"Set the VRF name and Table ID, set interface address and bind it to the VRF."
|
||||
" Last add the static route to the remote network."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:160
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:248
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:320
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:829
|
||||
#: 3aba84af46df47cc9fd2ae84f9b503da da748005d3874b4480b7bbd9d591e27a
|
||||
#: 1ecb9ec20cdc4c2893ee6fca2ee51358 a280fb687cdc40178d509af90951189b
|
||||
msgid "Verification"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:164
|
||||
#: 37ce0e67288f45fe9ef9c08369138fb2
|
||||
msgid ""
|
||||
"Checking the routing table of the VRF should reveal both static and "
|
||||
"connected entries active. A PING test between the Core and remote router is "
|
||||
"a way to validate connectivity within the VRF."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:228
|
||||
#: c75588c0d4934b26bc2191593d95078c
|
||||
msgid "Step 2: BGP Configuration for VRF-Lite"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:235
|
||||
#: 1b8331d7180b4c1fa784335dc8a73fb7
|
||||
msgid ""
|
||||
"Setting BGP global local-as as well inside the VRF. Redistribute static "
|
||||
"routes to inject configured networks into the BGP process but still inside "
|
||||
"the VRF."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:252
|
||||
#: 23fba5b0b23849658c56bfe042cba29a
|
||||
msgid ""
|
||||
"Check the BGP VRF table and verify if the static routes are injected showing"
|
||||
" the correct next-hop information."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:287
|
||||
#: 43ff822c83a548f1bfc03261deb495b8
|
||||
msgid "Step 3: VPN Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:293
|
||||
#: c4ae33aea35c4a3f9deaff43b955090e
|
||||
msgid ""
|
||||
"Within the VRF we set the Route-Distinguisher (RD) and Route-Targets (RT), "
|
||||
"then we enable the export/import VPN."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:312
|
||||
#: 4186090c0eb4432aa7763a11232d7c73
|
||||
msgid ""
|
||||
"A key point to understand is that if we need two VRFs to communicate between"
|
||||
" each other EXPORT rt from VRF1 has to be in the IMPORT rt list from VRF2. "
|
||||
"But this is only in ONE direction, to complete the communication the EXPORT "
|
||||
"rt from VRF2 has to be in the IMPORT rt list from VRF1."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:317
|
||||
#: dbff84d09cf543e78ef3bedf22f4cce0
|
||||
msgid ""
|
||||
"There are some cases where this is not needed -for example, in some DDoS "
|
||||
"appliance- but most inter-vrf routing designs use the above configurations."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:324
|
||||
#: 20333d5d9494441a974b2c7b031c3620
|
||||
msgid ""
|
||||
"After configured all the VRFs involved in this topology we take a deeper "
|
||||
"look at both BGP and Routing table for the VRF LAN1"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:417
|
||||
#: 50932524836549ed803143fff7ca704a
|
||||
msgid ""
|
||||
"As we can see in the BGP table any imported route has been injected with a "
|
||||
"\"@\" followed by the VPN id; In the routing table of the VRF, if the route "
|
||||
"was installed, we can see -between round brackets- the exported VRF table."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:422
|
||||
#: 040c2e2ba85b4694b54fc037d8e22e62
|
||||
msgid "Step 4: End to End verification"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:425
|
||||
#: 56ca70dcbe824d18ad0daeed1283e2cb
|
||||
msgid "Now we perform some end-to-end testing"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:427
|
||||
#: 5f0852ffedff48d0b4b2996888183b7a
|
||||
msgid "From Management to LAN1/LAN2"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:469
|
||||
#: 6ce8210eb4d24cceb40d4b8940231d99
|
||||
msgid "From Management to Outside (fails as intended)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:520
|
||||
#: c1d07bc3b8de4706bd224c06ee17dbbe
|
||||
msgid "LAN1 to Outside"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:571
|
||||
#: 3db16afd744a4f0bb44dfcf01987a098
|
||||
msgid ""
|
||||
"we are using \"source-address\" option cause we are not redistributing "
|
||||
"connected interfaces into BGP on the Core router hence there is no comeback "
|
||||
"route and ping will fail."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:575
|
||||
#: cfb5c05281f242db8863602ddb0693f9
|
||||
msgid "LAN1 to LAN2"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:601
|
||||
#: bf275914b4ec4567b5fecc55c805c298
|
||||
msgid "Conclusions"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:603
|
||||
#: 066850a20fcf43a8a9f17c58e2038810
|
||||
msgid ""
|
||||
"Inter-VRF routing is a well-known solution to address complex routing "
|
||||
"scenarios that enable -in a dynamic way- to leak routes between VRFs. Is "
|
||||
"recommended to take special consideration while designing route-targets and "
|
||||
"its application as it can minimize future interventions while creating a new"
|
||||
" VRF will automatically take the desired effect in its propagation."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:611
|
||||
#: 8683a9d3f2104a9db49b0a0907555f32
|
||||
msgid "Appendix-A"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:614
|
||||
#: 5abc7d4aebac4e02af6886aac14cf1ce
|
||||
msgid "Full configuration from all devices"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:764
|
||||
#: 41e37392648b4e2da99de7267631749e
|
||||
msgid "Appendix-B"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:767
|
||||
#: 8f882d02b8fa437f87c5f3e7520c95c5
|
||||
msgid "Route-Filtering"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:770
|
||||
#: bf9c4776ac3e43c180cf5abb70bfa7aa
|
||||
msgid ""
|
||||
"When importing routes using MP-BGP it is possible to filter a subset of them"
|
||||
" before are injected in the BGP table. One of the most common case is to use"
|
||||
" a route-map with an prefix-list."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:778
|
||||
#: 68fcdc98c6d246099510635b49afe34e
|
||||
msgid "We create a prefix-list first and add all the routes we need to."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:803
|
||||
#: e7a748ac55dc4c02b90fea5c37b64b9b
|
||||
msgid ""
|
||||
"Then add a route-map and reference to above prefix. Consider that the "
|
||||
"actions taken inside the prefix will MATCH the routes that will be affected "
|
||||
"by the actions inside the rules of the route-map."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:815
|
||||
#: 1bb8831212be41398444370636f0f441
|
||||
msgid ""
|
||||
"We are using a \"white list\" approach by allowing only what is necessary. "
|
||||
"In case that need to implement a \"black list\" approach then you will need "
|
||||
"to change the action in the route-map for a deny BUT you need to add a rule "
|
||||
"that permits the rest due to the implicit deny in the route-map."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:820
|
||||
#: 384686127eda49c39439e379043fd224
|
||||
msgid ""
|
||||
"Then we need to attach the policy to the BGP process. This needs to be under"
|
||||
" the import statement in the vrf we need to filter."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:853
|
||||
#: e9beeb420b0e42cf8fe71412b1255dc0
|
||||
msgid ""
|
||||
"As we can see even if both VRF LAN1 and LAN2 has the same import RTs we are "
|
||||
"able to select which routes are effectively imported and installed."
|
||||
msgstr ""
|
||||
@ -1,588 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:05+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:4
|
||||
#: 998a7d4fc7604358b63c64b7e10c9256
|
||||
msgid "L3VPN for Hub-and-Spoke connectivity with VyOS"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:6
|
||||
#: 686abf9e6407494ea9f8adb1e6a38ba4
|
||||
msgid ""
|
||||
"IP/MPLS technology is widely used by various service providers and large "
|
||||
"enterprises in order to achieve better network scalability, manageability "
|
||||
"and flexibility. It also provides the possibility to deliver different "
|
||||
"services for the customers in a seamless manner. Layer 3 VPN (L3VPN) is a "
|
||||
"type of VPN mode that is built and delivered through OSI layer 3 networking "
|
||||
"technologies. Often the border gateway protocol (BGP) is used to send and "
|
||||
"receive VPN-related data that is responsible for the control plane. L3VPN "
|
||||
"utilizes virtual routing and forwarding (VRF) techniques to receive and "
|
||||
"deliver user data as well as separate data planes of the end-users. It is "
|
||||
"built using a combination of IP- and MPLS-based information. Generally, "
|
||||
"L3VPNs are used to send data on back-end VPN infrastructures, such as for "
|
||||
"VPN connections between data centres, HQs and branches."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:20
|
||||
#: 890e7aea999d499bbcd0cdf856d99266
|
||||
msgid ""
|
||||
"An L3VPN consists of multiple access links, multiple VPN routing and "
|
||||
"forwarding (VRF) tables, and multiple MPLS paths or multiple P2MP LSPs. An "
|
||||
"L3VPN can be configured to connect two or more customer sites. In hub-and-"
|
||||
"spoke MPLS L3VPN environments, the spoke routers need to have unique Route "
|
||||
"Distinguishers (RDs). In order to use the hub site as a transit point for "
|
||||
"connectivity in such an environment, the spoke sites export their routes to "
|
||||
"the hub. Spokes can talk to hubs, but never have direct paths to other "
|
||||
"spokes. All traffic between spokes is controlled and delivered over the hub "
|
||||
"site."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:31
|
||||
#: e546c7fa938240fbb028a21e16cd21bd
|
||||
msgid ""
|
||||
"To deploy a Layer3 VPN with MPLS on VyOS, we should meet a couple "
|
||||
"requirements in order to properly implement the solution. We'll use the "
|
||||
"following nodes in our LAB environment:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:35
|
||||
#: 98565fe6ffb947e09692e9b7b1fb9912
|
||||
msgid "2 x Route reflectors (VyOS-RRx)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:36
|
||||
#: 56560e4d5b514b569eb498d80ccfd796
|
||||
msgid "4 x Provider routers (VyOS-Px)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:37
|
||||
#: 29e234d5eff54c03b262f561d6ba4308
|
||||
msgid "3 x Provider Edge (VyOs-PEx)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:38
|
||||
#: b6d0c34166be4ebeb304f7da74c8fedf
|
||||
msgid "3 x Customer Edge (VyOS-CEx)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:40
|
||||
#: 95ddfbd9c6d14f0284add13b0b318aeb
|
||||
msgid "The following software was used in the creation of this document:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:42
|
||||
#: 2e1ff92ea1d34b3380b4735f9231bbaa
|
||||
msgid "Operating system: VyOS"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:43
|
||||
#: 1a1845ca31364523ac85c14afed17a6b
|
||||
msgid "Version: 1.4-rolling-202110310317"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:44
|
||||
#: be17aee6c8e24d0a9c81a719c92b962c
|
||||
msgid "Image name: vyos-1.4-rolling-202110310317-amd64.iso"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:46
|
||||
#: 94e4d99e94914c41b8f5a501b90a9c1a
|
||||
msgid ""
|
||||
"**NOTE:** VyOS Router (tested with VyOS 1.4-rolling-202110310317) – The "
|
||||
"configurations below are specifically for VyOS 1.4.x."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:49
|
||||
#: cf278ef398a348f19de9082189238ad3
|
||||
msgid ""
|
||||
"General information can be found in the :ref:`configuration/vrf/index:L3VPN "
|
||||
"VRFs` chapter."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:55
|
||||
#: b78300c0062d4f20adb7a5a718366771
|
||||
msgid "Topology"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rstNone
|
||||
#: 1f165bb067114d18877f62c65d93df63
|
||||
msgid "Network Topology Diagram"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:65
|
||||
#: 8a0c9d1b570c4c7cbe2de877527a2c8d
|
||||
msgid "How does it work?"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:67
|
||||
#: cb4349ce8fa34bd391aeef02ba55c8c9
|
||||
msgid ""
|
||||
"As we know the main assumption of L3VPN “Hub and Spoke” is, that the traffic"
|
||||
" between spokes have to pass via hub, in our scenario VyOS-PE2 is the Hub PE"
|
||||
" and the VyOS-CE1-HUB is the central customer office device that is "
|
||||
"responsible for controlling access between all spokes and announcing its "
|
||||
"network prefixes (10.0.0.100/32). VyOS-PE2 has the main VRF (its name is "
|
||||
"BLUE_HUB), its own Route-Distinguisher(RD) and route-target import/export "
|
||||
"lists. Multiprotocol-BGP(MP-BGP) delivers L3VPN related control-plane "
|
||||
"information to the nodes across network where PEs Spokes import the route-"
|
||||
"target 60535:1030 (this is export route-target of vrf BLUE_HUB) and export "
|
||||
"its own route-target 60535:1011(this is vrf BLUE_SPOKE export route-target)."
|
||||
" Therefore, the Customer edge nodes can only learn the network prefixes of "
|
||||
"the HUB site [10.0.0.100/32]. For this example VyOS-CE1 has network prefixes"
|
||||
" [10.0.0.80/32] / VyOS-CE2 has network prefixes [10.0.0.90/32]. Route-"
|
||||
"Reflector devices VyOS-RR1 and VyOS-RR2 are used to simplify network routes "
|
||||
"exchange and minimize iBGP peerings between devices."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:83
|
||||
#: 60dd546b31004b06af47f4a1ce701957
|
||||
msgid "L3VPN configuration parameters table:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:86
|
||||
#: 565d53c1b26a4de38feaa86b567c6b4e
|
||||
msgid "Node"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:86
|
||||
#: 34eba7825ea54979a42f178e9dcd15bf
|
||||
msgid "Role"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:86
|
||||
#: b89d4c69529d4488b011d8e8db5aa4b4
|
||||
msgid "VRF"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:86
|
||||
#: f55441b962624fd6b5c1538290091f7e
|
||||
msgid "RD"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:86
|
||||
#: 6e72edabaf07419ea0abb13bb7789540
|
||||
msgid "RT import"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:86
|
||||
#: e547d56f80ca46f1ac625b270ab02628
|
||||
msgid "RT export"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:88
|
||||
#: ea3d4c4a18ec433b8c7f3ac03981f8c2
|
||||
msgid "VyOS-PE2"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:88
|
||||
#: 55bc9c2598064d92a3b9fae0fc6a1154
|
||||
msgid "Hub"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:88
|
||||
#: 1291d942846d4c6cae1e8833e139cb5d
|
||||
msgid "BLUE_HUB"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:88
|
||||
#: 27596f3bee3d43f28a16a42174e74667
|
||||
msgid "10.80.80.1:1011"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:88
|
||||
#: a4ca55dd19b14bd9a3b02fddeaf7eb11
|
||||
msgid "65035:1011 65035:1030"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:88
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:91
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:93
|
||||
#: 21adc69cf2bf4575ae4476a8cb6d056c 4862295b4bae4ea1baac2124700b1236
|
||||
#: 5a80925f27574dddb9d476febf102516
|
||||
msgid "65035:1030"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:91
|
||||
#: a0fdcadaac2946a1bad9533989517a9c
|
||||
msgid "VyOS-PE1"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:91
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:93
|
||||
#: b4744ce92c634f65b6558eb37e536454 c98d8778bb984c8eab3202150c36d157
|
||||
msgid "Spoke"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:91
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:93
|
||||
#: bce236afe7fb4c15b1adff31ccdaeea6 b1801511514c4b169d55b38e25b0a021
|
||||
msgid "BLUE_SPOKE"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:91
|
||||
#: cc8eb3ef69e94ebf81b298848a74f246
|
||||
msgid "10.50.50.1:1011"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:91
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:93
|
||||
#: b234869593f9450bb4866570315fb225 93a1e9117a7041a4ab0ec98cdde1a35d
|
||||
msgid "65035:1011"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:93
|
||||
#: 60fdfd315f2a4711a0f2b53299b51566
|
||||
msgid "VyOS-PE3"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:93
|
||||
#: 23c8e2bb64ab41d593c0e2aa6e921fbe
|
||||
msgid "10.60.60.1:1011"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:100
|
||||
#: 9e879fff2f324772adfe0bc310edc4a4
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:105
|
||||
#: 7477a6ffa308480fbee1b135a33ae15a
|
||||
msgid "Step-1: Configuring IGP and enabling MPLS LDP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:107
|
||||
#: 15b715d0ed4248cf9593d4c8c72bc20c
|
||||
msgid ""
|
||||
"At the first step we need to configure the IP/MPLS backbone network using "
|
||||
"OSPF as IGP protocol and LDP as label-switching protocol for the base "
|
||||
"connectivity between **P** (rovider), **P** (rovider) **E** (dge) and **R** "
|
||||
"(oute) **R** (eflector) nodes:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:112
|
||||
#: 0fdd2f02198142519dfa1b13c7a87d43
|
||||
msgid "VyOS-P1:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:142
|
||||
#: 6fa7d00718fa44eea0355cfc8d67d9af
|
||||
msgid "VyOS-P2:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:168
|
||||
#: 405ddfb3d90241e6b9791a694e8c02fc
|
||||
msgid "VyOS-P3:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:194
|
||||
#: f214a604b9194bceb30e7ad4dcc9cc04
|
||||
msgid "VyOS-P4:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:224
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:362
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:413
|
||||
#: ed57672a54e540168ca1cb343c953144 91ace2d281b24fd5b0ea37e1876978bc
|
||||
#: de90bc4f836b493cad00b4ef434ed1ee
|
||||
msgid "VyOS-PE1:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:241
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:376
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:435
|
||||
#: 2b0b8e09b36c4192905fd8fcadb3317e a4e9cf5d0fbb4537addb56d6ecff66e3
|
||||
#: b6016d3b47a549e0bcfba58d5fa86717
|
||||
msgid "VyOS-PE2:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:262
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:390
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:457
|
||||
#: dc7cd8343e6743a0815e02f3d65df79a 0d769e475d9c4846ae32e22f5bf3d91c
|
||||
#: 77fe05eee30a4adf9df916a5462cd9a5
|
||||
msgid "VyOS-PE3:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:279
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:328
|
||||
#: 61d86fc34fbd4aed98036cf60f0dd615 fd431069d9f24c3084c24124059724d4
|
||||
msgid "VyOS-RR1:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:299
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:345
|
||||
#: 55304b8d06834fc69cdb07738e63e625 f8923e269249490fa37cc90c7b1342ec
|
||||
msgid "VyOS-RR2:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:322
|
||||
#: 2e846b31f9c44dfbab01271d60e398c6
|
||||
msgid "Step-2: Configuring iBGP for L3VPN control-plane"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:324
|
||||
#: 7b89e4318dec4188b74b6b3f5dab7b59
|
||||
msgid ""
|
||||
"At this step we are going to enable iBGP protocol on MPLS nodes and Route "
|
||||
"Reflectors (two routers for redundancy) that will deliver IPv4 VPN (L3VPN) "
|
||||
"routes between them:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:407
|
||||
#: 58d3377a35da4d30a1cdb7229a5fe29c
|
||||
msgid "Step-3: Configuring L3VPN VRFs on PE nodes"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:409
|
||||
#: fe4e7c69c7424e24888c3f3706d8c8b0
|
||||
msgid ""
|
||||
"This section provides configuration steps for setting up VRFs on our PE "
|
||||
"nodes including CE facing interfaces, BGP, rd and route-target import/export"
|
||||
" based on the pre-defined parameters."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:482
|
||||
#: fc9f63f8aca0444da7ec55ff854e4676
|
||||
msgid "Step-4: Configuring CE nodes"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:484
|
||||
#: 925625dcfa774f7f9934408b8214a7f1
|
||||
msgid ""
|
||||
"Dynamic routing used between CE and PE nodes and eBGP peering established "
|
||||
"for the route exchanging between them. All routes received by PEs are then "
|
||||
"exported to L3VPN and delivered from Spoke sites to Hub and vise-versa based"
|
||||
" on previously configured L3VPN parameters."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:490
|
||||
#: 47a7f4d1ffeb4def9c259e4e6e629cd2
|
||||
msgid "VyOS-CE1-SPOKE:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:507
|
||||
#: 8f961af78f9b4d888bd12c34cf65ec60
|
||||
msgid "VyOS-CE1-HUB:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:525
|
||||
#: a41c0ae5954a4760acf3b56323072447
|
||||
msgid "VyOS-CE2-SPOKE:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:545
|
||||
#: 4c4149624eba4d5b903a371d003f6dba
|
||||
msgid "Step-5: Verification"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:547
|
||||
#: a82f92d1466d41e994f0679d05553320
|
||||
msgid ""
|
||||
"This section describes verification commands for MPLS/BGP/LDP protocols and "
|
||||
"L3VPN related routes as well as diagnosis and reachability checks between CE"
|
||||
" nodes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:551
|
||||
#: d87f385db4c442eea1c679e29862e55f
|
||||
msgid ""
|
||||
"Let’s check IPv4 routing and MPLS information on provider nodes (same "
|
||||
"procedure for all P nodes):"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:554
|
||||
#: 387768aa305a4d89bf9504179b279283
|
||||
msgid "“show ip ospf neighbor” for checking ospf relationship"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:567
|
||||
#: 14d1985bcdcc43e4a9381ab7d746af1f
|
||||
msgid "“show mpls ldp neighbor “ for checking ldp neighbors"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:579
|
||||
#: 14f7b630eb854181a68a201cd4ff573b
|
||||
msgid "“show mpls ldp binding” for checking mpls label assignment"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:636
|
||||
#: 9f0c750511f44cac99373cc626930b21
|
||||
msgid ""
|
||||
"Now we’re checking iBGP status and routes from route-reflector nodes to "
|
||||
"other devices:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:639
|
||||
#: 27aef0ad05464cc59458e0f4d7785462
|
||||
msgid "“show bgp ipv4 vpn summary” for checking BGP VPNv4 neighbors:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:658
|
||||
#: dc50a484ccb14f9ca7e7dec858073973
|
||||
msgid "“show bgp ipv4 vpn” for checking all VPNv4 prefixes information:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:698
|
||||
#: fc808be9ede24f739e02e5129eba3963
|
||||
msgid ""
|
||||
"“show bgp ipv4 vpn x.x.x.x/x” for checking best path selected for specific "
|
||||
"VPNv4 destination"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:716
|
||||
#: 528fe8121f4640fb96768623ce8ca51d
|
||||
msgid ""
|
||||
"Also we can verify how PE devices receives VPNv4 networks from the RRs and "
|
||||
"installing them to the specific customer VRFs:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:719
|
||||
#: ef0c4185fb5d4547b3e2c790769f104d
|
||||
msgid ""
|
||||
"“show bgp ipv4 vpn summary” for checking iBGP neighbors against route-"
|
||||
"reflector devices:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:736
|
||||
#: 1f1dbb0745cc43278c22ba38335200df
|
||||
msgid "“show bgp vrf all” for checking all the prefix learning on BGP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:736
|
||||
#: 3705f8a528294628a4b27fa3913af275
|
||||
msgid "within VRFs:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:764
|
||||
#: c668ee5332604c59a958d6d9565e2cfe
|
||||
msgid "“show bgp vrf BLUE_SPOKE summary” for checking EBGP neighbor"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:764
|
||||
#: 82b64c97c93a4f7c901153092449c801
|
||||
msgid "information between PE and CE:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:784
|
||||
#: 0ca40736901446fcad91df434b158fb5
|
||||
msgid "“show ip route vrf BLUE_SPOKE” for viewing the RIB in our Spoke PE."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:783
|
||||
#: 388ba3e42cfb453682eff0522884b664
|
||||
msgid ""
|
||||
"Using this command we are also able to check the transport and customer "
|
||||
"label (inner/outer) for Hub network prefix (10.0.0.100/32):"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:807
|
||||
#: df85772519284579bf2097c0313d76b2
|
||||
msgid "“show bgp ipv4 vpn x.x.x.x/32” for checking the best-path to the"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:806
|
||||
#: 3ded1eaa580b4d75a1aebdd4248776fe
|
||||
msgid ""
|
||||
"specific VPNv4 destination including extended community and remotelabel "
|
||||
"information. This procedure is the same on all Spoke nodes:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:831
|
||||
#: dbb5f2aa2caa4f5aa52ca697597e0f4c
|
||||
msgid "Now, let’s check routing information on out Hub PE:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:834
|
||||
#: 1e4f350b52274f58ae7a54adaff0b412
|
||||
msgid "“show bgp ipv4 vpn summary” for checking iBGP neighbors again"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:834
|
||||
#: 8a347810b376407ba2c69b3f23fce640
|
||||
msgid "VyOS-RR1/RR2"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:851
|
||||
#: 9bc7d0b71fba42b281873b8a1be783d8
|
||||
msgid "“show bgp vrf all” for checking all the prefixes learning on BGP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:891
|
||||
#: 118b9f4e005f4e04b1632e4589ddfa17
|
||||
msgid "“show bgp vrf BLUE_HUB summary” for checking EBGP neighbor"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:891
|
||||
#: 93c455e1b8874441adba6171d4381d59
|
||||
msgid "CE Hub device"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:909
|
||||
#: 0137b1e74074467495469f4604661c56
|
||||
msgid "“show ip route vrf BLUE_HUB” to view the RIB in our Hub PE."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:907
|
||||
#: 54511e5d16824c21a9eeb419cf668caa
|
||||
msgid ""
|
||||
"With this command we are able to check the transport and customer label "
|
||||
"(inner/outer) for network spokes prefixes 10.0.0.80/32 - 10.0.0.90/32"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:941
|
||||
#: 0e7f267bff6140e598dee3231a8eadc5
|
||||
msgid "“show bgp ipv4 vpn x.x.x.x/32” for checking best-path,"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:941
|
||||
#: 2d0e3c0fc3c74b058df139a5fb208aa0
|
||||
msgid "extended community and remote label of specific destination"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:985
|
||||
#: 3d25f766a7a743f289fdb81b7bbe3168
|
||||
msgid "Finally, let’s check the reachability between CEs:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:987
|
||||
#: 08b5c6d6886144fa86ad19ea63c1afb2
|
||||
msgid "VyOS-CE1-SPOKE -----> VyOS-CE-HUB"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:1025
|
||||
#: 9cbd876b3f4d48b78595fcb0300221cf
|
||||
msgid "VyOS-CE-HUB -------> VyOS-CE1-SPOKE"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:1026
|
||||
#: 368f34ba9eb84e7ebeca0b2dafdff68a
|
||||
msgid "VyOS-CE-HUB -------> VyOS-CE2-SPOKE"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:1085
|
||||
#: 17a80175953c4e24916458908f8443e1
|
||||
msgid "VyOS-CE2-SPOKE -------> VyOS-CE-HUB"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/l3vpn-hub-and-spoke.rst:1123
|
||||
#: 062bae083b9c48369539bf248ef35b6f
|
||||
msgid ""
|
||||
"**Note:** At the moment, trace mpls doesn’t show labels/paths. So we’ll see "
|
||||
"* * * for the transit routers of the mpls backbone."
|
||||
msgstr ""
|
||||
@ -1,48 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:05+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configexamples/ospf-unnumbered.rst:7 29d634a6af9c469eb9fd48424a9f3d5c
|
||||
msgid "OSPF unnumbered with ECMP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ospf-unnumbered.rst:9 c3072bd445424325bf17c2296e1d44e1
|
||||
msgid "General information can be found in the :ref:`routing-ospf` chapter."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ospf-unnumbered.rst:12
|
||||
#: 9aa3a8a8aff941979fa7396c8509d31c
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ospf-unnumbered.rst:14
|
||||
#: ../../configexamples/ospf-unnumbered.rst:52
|
||||
#: f9990c6209254eddae5cf323b898db68 7615801deebe40a6b1b55c8cd441ef0e
|
||||
msgid "Router A:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ospf-unnumbered.rst:31
|
||||
#: ../../configexamples/ospf-unnumbered.rst:87
|
||||
#: a6c539b6f0ad42d7ae958feb6f19b9b3 9cb799c9efc549b0a72113e8514dc7b6
|
||||
msgid "Router B:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/ospf-unnumbered.rst:50
|
||||
#: a5b67b9fc6ba4a79a42835e8a06ea49c
|
||||
msgid "Results"
|
||||
msgstr ""
|
||||
@ -1,172 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:05+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rst:7
|
||||
#: d01a18dec1a142a8855a0bc03a82e72d
|
||||
msgid "PPPoE IPv6 Basic Setup for Home Network"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rst:9
|
||||
#: 9ef7b0d68dd9494faf9502d86502f352
|
||||
msgid ""
|
||||
"This document is to describe a basic setup using PPPoE with DHCPv6-PD + "
|
||||
"SLAAC to construct a typical home network. The user can follow the steps "
|
||||
"described here to quickly setup a working network and use this as a starting"
|
||||
" point to further configure or fine-tune other settings."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rst:14
|
||||
#: 1bc45c10d4a248f6998a8a90665ee73a
|
||||
msgid ""
|
||||
"To achieve this, your ISP is required to support DHCPv6-PD. If you're not "
|
||||
"sure, please contact your ISP for more information."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rst:18
|
||||
#: e57a18b57aac4b5ebe79cd1b5a249be4
|
||||
msgid "Network Topology"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rstNone
|
||||
#: 7d29b5deb46f4dd5ba8c411ff15c3580
|
||||
msgid "Network Topology Diagram"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rst:26
|
||||
#: 9b4e35fc5bf949f6a08a601e0f85b41f
|
||||
msgid "Configurations"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rst:29
|
||||
#: e2264f3deb0f48e3be8d824b4558bdf6
|
||||
msgid "PPPoE Setup"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rst:38
|
||||
#: 0fb2a3f4a82946bc801f42aea42116a9
|
||||
msgid ""
|
||||
"Fill ``password`` and ``user`` with the credential provided by your ISP."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rst:39
|
||||
#: 37defbee2b744b67a69c4393ca546d72
|
||||
msgid "``service-name`` can be an arbitrary string."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rst:42
|
||||
#: 5ae65ec790db46bbbfe7d471f2f7ebd2
|
||||
msgid "DHCPv6-PD Setup"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rst:44
|
||||
#: 0abfd09ecb7a423196d7010533a9eef5
|
||||
msgid ""
|
||||
"During address configuration, in addition to assigning an address to the WAN"
|
||||
" interface, ISP also provides a prefix to allow the router to configure "
|
||||
"addresses of LAN interface and other nodes connecting to LAN, which is "
|
||||
"called prefix delegation (PD)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rst:54
|
||||
#: f09a5ec22ab24c12907d90a279d89a13
|
||||
msgid ""
|
||||
"Here we use the prefix to configure the address of eth1 (LAN) to form "
|
||||
"``<prefix>::64``, where ``64`` is hexadecimal of address 100."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rst:56
|
||||
#: 1f554d13466d467d9d8a1aa4480dec52
|
||||
msgid ""
|
||||
"For home network users, most of time ISP only provides /64 prefix, hence "
|
||||
"there is no need to set SLA ID and prefix length. See :ref:`pppoe-interface`"
|
||||
" for more information."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rst:61
|
||||
#: 37a4fe866ce44dd6a82988da55311a6a
|
||||
msgid "Router Advertisement"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rst:63
|
||||
#: 5d74e570a4be470e951a4fe806442c2d
|
||||
msgid ""
|
||||
"We need to enable router advertisement for LAN network so that PC can "
|
||||
"receive the prefix and use SLAAC to configure the address automatically."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rst:72
|
||||
#: 1922e24702884c2289071ab9cc0053e5
|
||||
msgid "Set MTU in advertisement to 1492 because of PPPoE header overhead."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rst:73
|
||||
#: 4efc1c1477cf49399f430202782675f3
|
||||
msgid ""
|
||||
"Set DNS server address in the advertisement so that clients can obtain it by"
|
||||
" using RDNSS option. Most operating systems (Windows, Linux, Mac) should "
|
||||
"already support it."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rst:76
|
||||
#: ba3687f3d52e4e0dad78491c4827825e
|
||||
msgid ""
|
||||
"Here we set the prefix to ``::/64`` to indicate advertising any /64 prefix "
|
||||
"the LAN interface is assigned."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rst:78
|
||||
#: ed8c9fcabb584dd28037b2deb6954f8e
|
||||
msgid ""
|
||||
"Since some ISPs disconnects continuous connection for every 2~3 days, we set"
|
||||
" ``valid-lifetime`` to 2 days to allow PC for phasing out old address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rst:82
|
||||
#: 7de4b4c573da4409bceb27abd04c4063
|
||||
msgid "Basic Firewall"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rst:84
|
||||
#: bbe045c3a1fb403385b959777dfdfe8c
|
||||
msgid ""
|
||||
"To have basic protection while keeping IPv6 network functional, we need to:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rst:86
|
||||
#: 9cb07d9a5372428d883056ccd6073d79
|
||||
msgid "Allow all established and related traffic for router and LAN"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rst:87
|
||||
#: f98467c842b64dbc948d17d120011d65
|
||||
msgid "Allow all icmpv6 packets for router and LAN"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rst:88
|
||||
#: a6cc69dd5a304905844a5ff7218dca13
|
||||
msgid "Allow DHCPv6 packets for router"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/pppoe-ipv6-basic.rst:111
|
||||
#: b101c4ec16274088a7a102a7ebe1bb82
|
||||
msgid ""
|
||||
"Note to allow the router to receive DHCPv6 response from ISP. We need to "
|
||||
"allow packets with source port 547 (server) and destination port 546 "
|
||||
"(client)."
|
||||
msgstr ""
|
||||
@ -1,219 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:05+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:8
|
||||
#: 9f05f08a64a4424292daad78fad5a6e2
|
||||
msgid "WAN Load Balancer examples"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:12
|
||||
#: ced8dacc57da404fb3d767a8fa5f199b
|
||||
msgid "Example 1: Distributing load evenly"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:14
|
||||
#: 71129440d8fa4e80958dde7df43ed1db
|
||||
msgid "The setup used in this example is shown in the following diagram:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rstNone
|
||||
#: ../../configexamples/wan-load-balancing.rstNone
|
||||
#: eef518f424234b9e877063b444e4715e 36a842a81f0e40eb8491f2b78a82b3d0
|
||||
msgid "Network Topology Diagram"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:23
|
||||
#: ../../configexamples/wan-load-balancing.rst:75
|
||||
#: ../../configexamples/wan-load-balancing.rst:104
|
||||
#: ../../configexamples/wan-load-balancing.rst:135
|
||||
#: f84efa18552041ddb93b10d114806dbc c05f3e6b75614f619891c902ea58dad2
|
||||
#: 290135d81ebf4d28a6c79ac052c171f6 cf186aa1226e49a38af1fbfe6ba85e1b
|
||||
msgid "Overview"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:24
|
||||
#: d6df93a47c7f48b5b195b2f219a88bb3
|
||||
msgid ""
|
||||
"All traffic coming in through eth2 is balanced between eth0 and eth1 on the "
|
||||
"router."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:26
|
||||
#: 9cbde66a8bff45f2b23af438df71dd36
|
||||
msgid ""
|
||||
"Pings will be sent to four targets for health testing (33.44.55.66, "
|
||||
"44.55.66.77, 55.66.77.88 and 66.77.88.99)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:28
|
||||
#: 77ed08f8b1454a09ad8eeffdefdf17b2
|
||||
msgid ""
|
||||
"All outgoing packets are assigned the source address of the assigned "
|
||||
"interface (SNAT)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:30
|
||||
#: 08426bfc131c48d6bc2162479ec7b56d
|
||||
msgid ""
|
||||
"eth0 is set to be removed from the load balancer's interface pool after 5 "
|
||||
"ping failures, eth1 will be removed after 4 ping failures."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:34
|
||||
#: 11f1d3c652c54f049e9af334fa38a106
|
||||
msgid "Create static routes to ping targets"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:35
|
||||
#: f973a670c56346c2926c9be556660bd4
|
||||
msgid ""
|
||||
"Create static routes through the two ISPs towards the ping targets and "
|
||||
"commit the changes:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:46
|
||||
#: a9cb47e088ac44c19325a69295109a9d
|
||||
msgid "Configure the load balancer"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:47
|
||||
#: d5f35bfbdbb9448e9082c8598285675e
|
||||
msgid "Configure the WAN load balancer with the parameters described above:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:68
|
||||
#: 384337b95dcc4f60ad417e0e7fc93f82
|
||||
msgid "Example 2: Failover based on interface weights"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:70
|
||||
#: f414970795f740d49d837fe9561c7d72
|
||||
msgid "This example uses the failover mode."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:76
|
||||
#: a14f9000d16c4cf2a6dc8db548872845
|
||||
msgid ""
|
||||
"In this example, eth0 is the primary interface and eth1 is the secondary "
|
||||
"interface. To provide simple failover functionality. If eth0 fails, eth1 "
|
||||
"takes over."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:81
|
||||
#: a709f9da975d434d83d8d1ecccfae31f
|
||||
msgid "Create interface weight based configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:82
|
||||
#: 122b99f9d9274c83b31f16ac0ddf7f07
|
||||
msgid ""
|
||||
"The configuration steps are the same as in the previous example, except rule"
|
||||
" 10. So we keep the configuration, remove rule 10 and add a new rule for the"
|
||||
" failover mode:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:95
|
||||
#: 9470dd8d60da4a6fb676059fc12c2e1c
|
||||
msgid "Example 3: Failover based on rule order"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:97
|
||||
#: c32d2814f74240a1807a5295a10b21de
|
||||
msgid ""
|
||||
"The previous example used the failover command to send traffic through eth1 "
|
||||
"if eth0 fails. In this example, failover functionality is provided by rule "
|
||||
"order."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:105
|
||||
#: 855bce2604b44db0be549937bd437e78
|
||||
msgid ""
|
||||
"Two rules will be created, the first rule directs traffic coming in from "
|
||||
"eth2 to eth0 and the second rule directs the traffic to eth1. If eth0 fails "
|
||||
"the first rule is bypassed and the second rule matches, directing traffic to"
|
||||
" eth1."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:111
|
||||
#: 2825af09d2bb40deb7ab2b0b4425a37f
|
||||
msgid "Create rule order based configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:112
|
||||
#: 42e71205c1374e30b236fd3c33d88d07
|
||||
msgid ""
|
||||
"We keep the configuration from the previous example, delete rule 10 and "
|
||||
"create the two new rules as described:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:124
|
||||
#: f4162881a62d48769911ff1fec82ee95
|
||||
msgid "Example 4: Failover based on rule order - priority traffic"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:126
|
||||
#: ../../configexamples/wan-load-balancing.rst:136
|
||||
#: e3e9af1e73994f4ab2d38a9e67a7fdf5 2888de594abc4c1ebea9fd2c1b3189bf
|
||||
msgid ""
|
||||
"A rule order for prioritizing traffic is useful in scenarios where the "
|
||||
"secondary link has a lower speed and should only carry high priority "
|
||||
"traffic. It is assumed for this example that eth1 is connected to a slower "
|
||||
"connection than eth0 and should prioritize VoIP traffic."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:142
|
||||
#: c255dbcebfcd4beaac19f746a4516531
|
||||
msgid "Create rule order based configuration with low speed secondary link"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:143
|
||||
#: dd2df2f8dbc3418b8a56fccef4db961f
|
||||
msgid ""
|
||||
"We keep the configuration from the previous example, delete rule 20 and "
|
||||
"create a new rule as described:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:156
|
||||
#: a16b4fa634b5462eb57dac3d1700cffe
|
||||
msgid "Example 5: Exclude traffic from load balancing"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:158
|
||||
#: fc3846b150314a348e795d7bffdfbcea
|
||||
msgid ""
|
||||
"In this example two LAN interfaces exist in different subnets instead of one"
|
||||
" like in the previous examples:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:167
|
||||
#: d3071c91cb44411f98bf1f4db5206a4f
|
||||
msgid "Adding a rule for the second interface"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/wan-load-balancing.rst:169
|
||||
#: c06ffdabeef740e182701946afb4b6ec
|
||||
msgid ""
|
||||
"Based on the previous example, another rule for traffic from the second "
|
||||
"interface eth3 can be added to the load balancer. However, traffic meant to "
|
||||
"flow between the LAN subnets will be sent to eth0 and eth1 as well. To "
|
||||
"prevent this, another rule is required. This rule excludes traffic between "
|
||||
"the local subnets from the load balancer. It also excludes locally-sources "
|
||||
"packets (required for web caching with load balancing). eth+ is used as an "
|
||||
"alias that refers to all ethernet interfaces:"
|
||||
msgstr ""
|
||||
@ -1,323 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:05+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:6 3c76f26421954ac884480d0cffe55150
|
||||
msgid "Zone-Policy example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:8 b000af62a2ff45e3bea0983ff08c6ca9
|
||||
msgid ""
|
||||
"In :vytask:`T2199` the syntax of the zone configuration was changed. The "
|
||||
"zone configuration moved from ``zone-policy zone <name>`` to ``firewall zone"
|
||||
" <name>``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:13 518ed4192332498b988ad701dbe4ae94
|
||||
msgid "Native IPv4 and IPv6"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:15 e785499caee9483ebbfa8fea63bd3f60
|
||||
msgid "We have three networks."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:24 d5184c69966f41c5acd57ba576316df4
|
||||
msgid ""
|
||||
"**This specific example is for a router on a stick, but is very easily "
|
||||
"adapted for however many NICs you have**:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:28 dc181a02a98a45da8888bc017de3ea1f
|
||||
msgid "Internet - 192.168.200.100 - TCP/80"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:29 4e066389682c40048d57dec2c83a5aae
|
||||
msgid "Internet - 192.168.200.100 - TCP/443"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:30 99c22b93805b4a9d97c17590c0d1ff93
|
||||
msgid "Internet - 192.168.200.100 - TCP/25"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:31 98671bd795584e58ab09f67a17c41bf1
|
||||
msgid "Internet - 192.168.200.100 - TCP/53"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:32 132e6aa544e14ab68d588186821b0cf1
|
||||
msgid "VyOS acts as DHCP, DNS forwarder, NAT, router and firewall."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:33 378d3439fdd441d0b598dee31369da95
|
||||
msgid ""
|
||||
"192.168.200.200/2001:0DB8:0:BBBB::200 is an internal/external DNS, web and "
|
||||
"mail (SMTP/IMAP) server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:35 45a4384bc0fc4bd1a25c98a27c2a81ce
|
||||
msgid ""
|
||||
"192.168.100.10/2001:0DB8:0:AAAA::10 is the administrator's console. It can "
|
||||
"SSH to VyOS."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:37 5cc8e033a70c48bcbc424e36c169c4af
|
||||
msgid "LAN and DMZ hosts have basic outbound access: Web, FTP, SSH."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:38 7345f3e3a5874d65b6922d88f3117ecd
|
||||
msgid "LAN can access DMZ resources."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:39 2413bb4e87ee4a92922530672b633c3c
|
||||
msgid "DMZ cannot access LAN resources."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:40 604e13042cc6421fa69f297748ae55ab
|
||||
msgid "Inbound WAN connect to DMZ host."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rstNone c296c8f6b6874d18872c119a8cc8ee57
|
||||
msgid "Network Topology Diagram"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:47 8aacd45be8534832803d7d08a1a8b19d
|
||||
msgid ""
|
||||
"The VyOS interface is assigned the .1/:1 address of their respective "
|
||||
"networks. WAN is on VLAN 10, LAN on VLAN 20, and DMZ on VLAN 30."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:50 5e0f72b4b2db4789ac8dd371ba669517
|
||||
msgid "It will look something like this:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:79 74742cf5724e4f2cb3049240b8b10f52
|
||||
msgid "Zones Basics"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:81 634e5b24c3f749cc9428984dd8206b28
|
||||
msgid ""
|
||||
"Each interface is assigned to a zone. The interface can be physical or "
|
||||
"virtual such as tunnels (VPN, PPTP, GRE, etc) and are treated exactly the "
|
||||
"same."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:85 6224d85ed139427b8bec0f53015beeb3
|
||||
msgid ""
|
||||
"Traffic flows from zone A to zone B. That flow is what I refer to as a zone-"
|
||||
"pair-direction. eg. A->B and B->A are two zone-pair-destinations."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:88 8cfb35f32511467cb39a75b1d6cd9548
|
||||
msgid "Ruleset are created per zone-pair-direction."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:90 ab2f3b9301084a50ac3c4342abfc2cfa
|
||||
msgid ""
|
||||
"I name rule sets to indicate which zone-pair-direction they represent. eg. "
|
||||
"ZoneA-ZoneB or ZoneB-ZoneA. LAN-DMZ, DMZ-LAN."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:93 c7c352c3ba8341ee9563ded10b507dd9
|
||||
msgid ""
|
||||
"In VyOS, you have to have unique Ruleset names. In the event of overlap, I "
|
||||
"add a \"-6\" to the end of v6 rulesets. eg. LAN-DMZ, LAN-DMZ-6. This allows "
|
||||
"for each auto-completion and uniqueness."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:97 c0ee89a6de5b40e8b7b1f41327938ce7
|
||||
msgid ""
|
||||
"In this example we have 4 zones. LAN, WAN, DMZ, Local. The local zone is the"
|
||||
" firewall itself."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:100 25d67004a0b34f2d80fe07eb586b31eb
|
||||
msgid ""
|
||||
"If your computer is on the LAN and you need to SSH into your VyOS box, you "
|
||||
"would need a rule to allow it in the LAN-Local ruleset. If you want to "
|
||||
"access a webpage from your VyOS box, you need a rule to allow it in the "
|
||||
"Local-LAN ruleset."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:105 074031ebe23742cf9ab553c1d3c89851
|
||||
msgid ""
|
||||
"In rules, it is good to keep them named consistently. As the number of rules"
|
||||
" you have grows, the more consistency you have, the easier your life will "
|
||||
"be."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:123 36212be96d234f809e3aa0635b224e23
|
||||
msgid ""
|
||||
"The first two rules are to deal with the idiosyncrasies of VyOS and "
|
||||
"iptables."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:126 cdaf927567ba470a843b6daed8e148a5
|
||||
msgid ""
|
||||
"Zones and Rulesets both have a default action statement. When using Zone-"
|
||||
"Policies, the default action is set by the zone-policy statement and is "
|
||||
"represented by rule 10000."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:130 b923769f3fa648cabd265468da6f0ed8
|
||||
msgid ""
|
||||
"It is good practice to log both accepted and denied traffic. It can save you"
|
||||
" significant headaches when trying to troubleshoot a connectivity issue."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:134 8cdbfa157d0c40c5aaa5ce98e2e10eba
|
||||
msgid "To add logging to the default rule, do:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:141 8370b1669e3244a6a370ab9344a5e114
|
||||
msgid ""
|
||||
"By default, iptables does not allow traffic for established sessions to "
|
||||
"return, so you must explicitly allow this. I do this by adding two rules to "
|
||||
"every ruleset. 1 allows established and related state packets through and "
|
||||
"rule 2 drops and logs invalid state packets. We place the "
|
||||
"established/related rule at the top because the vast majority of traffic on "
|
||||
"a network is established and the invalid rule to prevent invalid state "
|
||||
"packets from mistakenly being matched against other rules. Having the most "
|
||||
"matched rule listed first reduces CPU load in high volume environments. "
|
||||
"Note: I have filed a bug to have this added as a default action as well."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:152 b98728b4c0444251a8ddd9aae0061313
|
||||
msgid ""
|
||||
"''It is important to note, that you do not want to add logging to the "
|
||||
"established state rule as you will be logging both the inbound and outbound "
|
||||
"packets for each session instead of just the initiation of the session. Your"
|
||||
" logs will be massive in a very short period of time.''"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:157 5731588a00a1445aae957e1dfca6f6a9
|
||||
msgid ""
|
||||
"In VyOS you must have the interfaces created before you can apply it to the "
|
||||
"zone and the rulesets must be created prior to applying it to a zone-policy."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:161 214fa70e97f947ecb6bcb6ee8a95f7d7
|
||||
msgid ""
|
||||
"I create/configure the interfaces first. Build out the rulesets for each "
|
||||
"zone-pair-direction which includes at least the three state rules. Then I "
|
||||
"setup the zone-policies."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:165 ff4bfdb0fea6403bbb05ec6ea9fa65b7
|
||||
msgid ""
|
||||
"Zones do not allow for a default action of accept; either drop or reject. It"
|
||||
" is important to remember this because if you apply an interface to a zone "
|
||||
"and commit, any active connections will be dropped. Specifically, if you are"
|
||||
" SSH’d into VyOS and add local or the interface you are connecting through "
|
||||
"to a zone and do not have rulesets in place to allow SSH and established "
|
||||
"sessions, you will not be able to connect."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:172 217de4fa5abe448d8c381c002f97e539
|
||||
msgid ""
|
||||
"The following are the rules that were created for this example (may not be "
|
||||
"complete), both in IPv4 and IPv6. If there is no IP specified, then the "
|
||||
"source/destination address is not explicit."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:226 68c0c6d0b20b468f99608f851ae72f5f
|
||||
msgid "Since we have 4 zones, we need to setup the following rulesets."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:243 5b84e1b04a934648956fa3d46c7d7ab3
|
||||
msgid ""
|
||||
"Even if the two zones will never communicate, it is a good idea to create "
|
||||
"the zone-pair-direction rulesets and set enable-default-log. This will allow"
|
||||
" you to log attempts to access the networks. Without it, you will never see "
|
||||
"the connection attempts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:248 633e0ef63aa44eb68b1f92674e715140
|
||||
msgid "This is an example of the three base rules."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:272 617108f6e8a04def8d089d3373c5fdc4
|
||||
msgid "Here is an example of an IPv6 DMZ-WAN ruleset."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:345 a17a13e6dca3416fb9c3d5fa95aff51b
|
||||
msgid ""
|
||||
"Once you have all of your rulesets built, then you need to create your zone-"
|
||||
"policy."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:348 2570cdfd598542d4ab4b7e38b8fb7d1e
|
||||
msgid "Start by setting the interface and default action for each zone."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:355 ac4dd0fd6ee24b81a3d208db070b0029
|
||||
msgid ""
|
||||
"In this case, we are setting the v6 ruleset that represents traffic sourced "
|
||||
"from the LAN, destined for the DMZ. Because the zone-policy firewall syntax "
|
||||
"is a little awkward, I keep it straight by thinking of it backwards."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:364 ded641d51758415e9f0cf27ae1e9b3c4
|
||||
msgid ""
|
||||
"DMZ-LAN policy is LAN-DMZ. You can get a rhythm to it when you build out a "
|
||||
"bunch at one time."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:367 f3adf536211a4f12817bf30695b1b65f
|
||||
msgid ""
|
||||
"In the end, you will end up with something like this config. I took out "
|
||||
"everything but the Firewall, Interfaces, and zone-policy sections. It is "
|
||||
"long enough as is."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:373 d4a2cf9526ec4602822a592145060277
|
||||
msgid "IPv6 Tunnel"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:375 44a092c185cb4956b7b4bec83f6da9b6
|
||||
msgid ""
|
||||
"If you are using a IPv6 tunnel from HE.net or someone else, the basis is the"
|
||||
" same except you have two WAN interfaces. One for v4 and one for v6."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:378 a9091d4fcd5b424088a2352f008d5947
|
||||
msgid ""
|
||||
"You would have 5 zones instead of just 4 and you would configure your v6 "
|
||||
"ruleset between your tunnel interface and your LAN/DMZ zones instead of to "
|
||||
"the WAN."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:382 eb7fd578bb60426f8d96fd0016a0d005
|
||||
msgid "LAN, WAN, DMZ, local and TUN (tunnel)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:384 c4c7ca9af6244fcf9b0b9ff4ad49cd10
|
||||
msgid "v6 pairs would be:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:401 28572036af8b4fd4b48436a393b06d90
|
||||
msgid "Notice, none go to WAN since WAN wouldn't have a v6 address on it."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:403 0c5f292540b24741a12114027008fe61
|
||||
msgid ""
|
||||
"You would have to add a couple of rules on your wan-local ruleset to allow "
|
||||
"protocol 41 in."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configexamples/zone-policy.rst:406 36b65f4c07e644a7b2d18c4ca8639c83
|
||||
msgid "Something like:"
|
||||
msgstr ""
|
||||
@ -1,242 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:02+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/container/index.rst:5 039191360057464e976739d9e11140a7
|
||||
msgid "Container"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:7 2adeecef2073485caa7ef731dbb1d908
|
||||
msgid ""
|
||||
"The VyOS container implementation is based on `Podman<https://podman.io/>` "
|
||||
"as a deamonless container engine."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:12 f9eb9622fe284115804f9ad094eade74
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:16 390adaa195084fa68cae2d52ff202ad7
|
||||
msgid "Sets the image name in the hub registry"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:22 7196e6ef2f7a4a2ea97dd7ae1da5b649
|
||||
msgid ""
|
||||
"If a registry is not specified, Docker.io will be used as the container "
|
||||
"registry unless an alternative registry is specified using **set container "
|
||||
"registry <name>** or the registry is included in the image name"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:32 ac1d6dc699ee4f358bf2e07e812cd642
|
||||
msgid ""
|
||||
"Allow host networking in a container. The network stack of the container is "
|
||||
"not isolated from the host and will use the host IP."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:35 980d056cd7e0458abe3286ffc8a64d27
|
||||
msgid ""
|
||||
"The following commands translate to \"--net host\" when the container is "
|
||||
"created"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:38 97b53a0d18d34c6da2f1cdf99aeb89e6
|
||||
msgid "**allow-host-networks** cannot be used with **network**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:42 4fd9ffd52de941db9660bcb5f873f4a4
|
||||
msgid ""
|
||||
"Attaches user-defined network to a container. Only one network must be "
|
||||
"specified and must already exist."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:47 bbfe5816cb1c48d88f6e3f56ed3364f4
|
||||
msgid ""
|
||||
"Optionally set a specific static IPv4 or IPv6 address for the container. "
|
||||
"This address must be within the named network prefix."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:50 6816d1315c4241b49438860816340bcc
|
||||
msgid ""
|
||||
"The first IP in the container network is reserved by the engine and cannot "
|
||||
"be used"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:54 2720022ba5334a1f956445669de184ad
|
||||
msgid "Set a container description"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:58 c25b427ae981495d93759ad78e5582be
|
||||
msgid ""
|
||||
"Add custom environment variables. Multiple environment variables are "
|
||||
"allowed. The following commands translate to \"-e key=value\" when the "
|
||||
"container is created."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:74 d329f77f29fa42a894b89f54f2ccda7c
|
||||
msgid "Publish a port for the container."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:85 dfc93c6334374953a75c7386a5a943bb
|
||||
msgid "Mount a volume into the container"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:94 6318eb3b475341418dd4c65c5d3c20f4
|
||||
msgid "Set the restart behavior of the container."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:96 07c65a65f29645a9a0780d34ef675cb7
|
||||
msgid "**no**: Do not restart containers on exit"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:97 b249af827afc4afc923cd011aaab9ed9
|
||||
msgid ""
|
||||
"**on-failure**: Restart containers when they exit with a non-zero exit code,"
|
||||
" retrying indefinitely (default)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:98 9b0a646b45844cc5ae8d4c625596b4c4
|
||||
msgid ""
|
||||
"**always**: Restart containers when they exit, regardless of status, "
|
||||
"retrying indefinitely"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:102
|
||||
#: d612314ec5cd44dd929dc534a648f847
|
||||
msgid "Constrain the memory available to the container."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:104
|
||||
#: bc1ef74797fd4d528a29e534fa671fdf
|
||||
msgid "Default is 512 MB. Use 0 MB for unlimited memory."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:109
|
||||
#: 315b006060874c30bb96a7e10e7ed673
|
||||
msgid "Add a host device to the container."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:113
|
||||
#: 68632205e8c14e2eb2e188544cc9cc1d
|
||||
msgid "Set container capabilities or permissions."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:115
|
||||
#: 4636681f9c7445f7a0234b1de814965f
|
||||
msgid ""
|
||||
"**net-admin**: Network operations (interface, firewall, routing tables)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:116
|
||||
#: 900bfc609b30441d952a332c2b40663e
|
||||
msgid ""
|
||||
"**net-bind-service**: Bind a socket to privileged ports (port numbers less "
|
||||
"than 1024)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:117
|
||||
#: 54e552def9f14bc099a5d16c416c0ab2
|
||||
msgid "**net-raw**: Permission to create raw network sockets"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:118
|
||||
#: a9b1dde39dde4cfdbcba244fea22ec14
|
||||
msgid "**setpcap**: Capability sets (from bounded or inherited set)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:119
|
||||
#: 16481be21dd94a39b62496569d592513
|
||||
msgid ""
|
||||
"**sys-admin**: Administation operations (quotactl, mount, sethostname, "
|
||||
"setdomainame)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:120
|
||||
#: 35d062351a9c4f458c94edeb90811e76
|
||||
msgid "**sys-time**: Permission to set system clock"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:124
|
||||
#: 75cec34f8e2e4be1b12848644132cb12
|
||||
msgid "Disable a container."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:128
|
||||
#: 59b8016c6dcf458e8e69abaed6bf76b7
|
||||
msgid "Creates a named container network"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:132
|
||||
#: 5d93d01648af4dc99bf915f6f753c024
|
||||
msgid ""
|
||||
"Adds registry to list of unqualified-search-registries. By default, for any "
|
||||
"image that does not include the registry in the image name, Vyos will use "
|
||||
"docker.io as the container registry."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:139
|
||||
#: bf7c9cb9a093403aaf0ba43d3ad430b6
|
||||
msgid "Operation Commands"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:143
|
||||
#: 3d2536dc92ba40f0baf7e8726d54160c
|
||||
msgid "Pull a new image for container"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:147
|
||||
#: d618ade17b804e44bbb2757823e436b7
|
||||
msgid "Show the list of all active containers."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:151
|
||||
#: 5840b9c48a224101a8903db05b4e813f
|
||||
msgid "Show the local container images."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:155
|
||||
#: 17533e28c8c2408d9f2b2eb1a6005e47
|
||||
msgid "Show logs from a given container"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:159
|
||||
#: a5c84a11b819436f845bf518ee80377f
|
||||
msgid "Show a list available container networks"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:163
|
||||
#: 9de0d2a828e04bf99ce8d3b8f05fd969
|
||||
msgid "Restart a given container"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:167
|
||||
#: 53faa3642cfa4df5a91cbf68624159f8
|
||||
msgid "Update container image"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:173
|
||||
#: b08858a996954ab9af8501e0779aa6cc
|
||||
msgid "Example Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/container/index.rst:175
|
||||
#: adb87bc9114347ed9f9620182be87309
|
||||
msgid ""
|
||||
"For the sake of demonstration, `example #1 in the official documentation "
|
||||
"<https://www.zabbix.com/documentation/current/manual/installation/containers>`_"
|
||||
" to the declarative VyOS CLI syntax."
|
||||
msgstr ""
|
||||
@ -1,703 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:02+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/firewall/general.rst:7 facda9eb148246a2846c50c633b112f9
|
||||
msgid "Firewall"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:11
|
||||
#: aceb51461c424017811ef9c3ea4048f5
|
||||
msgid "Overview"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:13
|
||||
#: ca220acdd7534a4e83ef13b14ae719ce
|
||||
msgid ""
|
||||
"VyOS makes use of Linux `netfilter <https://netfilter.org/>`_ for packet "
|
||||
"filtering."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:16
|
||||
#: 8d0be6e7960b49c6bf07b480d571be5d
|
||||
msgid ""
|
||||
"The firewall supports the creation of groups for ports, addresses, and "
|
||||
"networks (implemented using netfilter ipset) and the option of interface or "
|
||||
"zone based firewall policy."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:20
|
||||
#: a15c763d1f6e46319f5f684a5f8713d6
|
||||
msgid ""
|
||||
"**Important note on usage of terms:** The firewall makes use of the terms "
|
||||
"`in`, `out`, and `local` for firewall policy. Users experienced with "
|
||||
"netfilter often confuse `in` to be a reference to the `INPUT` chain, and "
|
||||
"`out` the `OUTPUT` chain from netfilter. This is not the case. These instead"
|
||||
" indicate the use of the `FORWARD` chain and either the input or output "
|
||||
"interface. The `INPUT` chain, which is used for local traffic to the OS, is "
|
||||
"a reference to as `local` with respect to its input interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:32
|
||||
#: 298968df02e44fd09d9c3b204af151cc
|
||||
msgid "Global settings"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:34
|
||||
#: b5f6dfb8c8fe4b0baaf5790d838398eb
|
||||
msgid ""
|
||||
"Some firewall settings are global and have an affect on the whole system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:38
|
||||
#: 35b1850e49ef4d4bb6d587fcda347576
|
||||
msgid ""
|
||||
"By default, when VyOS receives an ICMP echo request packet destined for "
|
||||
"itself, it will answer with an ICMP echo reply, unless you avoid it through "
|
||||
"its firewall."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:42
|
||||
#: 0e87c692d83c48ec92ae6070ddf48ff8
|
||||
msgid ""
|
||||
"With the firewall you can set rules to accept, drop or reject ICMP in, out "
|
||||
"or local traffic. You can also use the general **firewall all-ping** "
|
||||
"command. This command affects only to LOCAL (packets destined for your VyOS "
|
||||
"system), not to IN or OUT traffic."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:47
|
||||
#: 76673288caa94ded99da45cd22decf21
|
||||
msgid ""
|
||||
"**firewall all-ping** affects only to LOCAL and it always behaves in the "
|
||||
"most restrictive way"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:54
|
||||
#: 8a184bad84f14f0eba6912256d9f94dd
|
||||
msgid ""
|
||||
"When the command above is set, VyOS will answer every ICMP echo request "
|
||||
"addressed to itself, but that will only happen if no other rule is applied "
|
||||
"dropping or rejecting local echo requests. In case of conflict, VyOS will "
|
||||
"not answer ICMP echo requests."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:63
|
||||
#: 628e4a7363f246988b1f8a0d1516ef46
|
||||
msgid ""
|
||||
"When the command above is set, VyOS will answer no ICMP echo request "
|
||||
"addressed to itself at all, no matter where it comes from or whether more "
|
||||
"specific rules are being applied to accept them."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:69
|
||||
#: d794be6514794b079a541d68fe0986e2
|
||||
msgid ""
|
||||
"This setting enable or disable the response of icmp broadcast messages. The "
|
||||
"following system parameter will be altered:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:72
|
||||
#: abe9ce167df74de084ce9fb279ab694f
|
||||
msgid "``net.ipv4.icmp_echo_ignore_broadcasts``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:77
|
||||
#: 3a6696ea227b491da06f8e42f4d33912
|
||||
msgid ""
|
||||
"This setting handle if VyOS accept packets with a source route option. The "
|
||||
"following system parameter will be altered:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:80
|
||||
#: c39fbd4fbb8f4bcd96292cf321380077
|
||||
msgid "``net.ipv4.conf.all.accept_source_route``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:81
|
||||
#: bf4508a2f284414b816c07e50bd5cd94
|
||||
msgid "``net.ipv6.conf.all.accept_source_route``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:86
|
||||
#: b5afe069c3ff4b1fabb3dda8191dde3c
|
||||
msgid ""
|
||||
"enable or disable of ICMPv4 or ICMPv6 redirect messages accepted by VyOS. "
|
||||
"The following system parameter will be altered:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:89
|
||||
#: 21aa25c284bd4b6b9a1d6d6c8788d366
|
||||
msgid "``net.ipv4.conf.all.accept_redirects``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:90
|
||||
#: c814ace417b94a43a399195fdca0523a
|
||||
msgid "``net.ipv6.conf.all.accept_redirects``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:94
|
||||
#: e45406d59c154498a13efdc0db18a6b9
|
||||
msgid ""
|
||||
"enable or disable ICMPv4 redirect messages send by VyOS The following "
|
||||
"system parameter will be altered:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:97
|
||||
#: a36420053b9c44c4b54f6a729e7df994
|
||||
msgid "``net.ipv4.conf.all.send_redirects``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:101
|
||||
#: 0ecb9e02759749a8b99f3a85c8c2c6f7
|
||||
msgid ""
|
||||
"enable or disable the logging of martian IPv4 packets. The following system "
|
||||
"parameter will be altered:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:104
|
||||
#: db95ca7571774c0cb4f969382d6aa03e
|
||||
msgid "``net.ipv4.conf.all.log_martians``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:108
|
||||
#: cc79cd7b42b34bda9853eea2ca4e2e9e
|
||||
msgid ""
|
||||
"Set the IPv4 source validation mode. The following system parameter will be "
|
||||
"altered:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:111
|
||||
#: bbbdbbf914be44648e2f6a934ca195b7
|
||||
msgid "``net.ipv4.conf.all.rp_filter``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:115
|
||||
#: 3188c681545246dbaf9c2066daa982ac
|
||||
msgid ""
|
||||
"Enable or Disable if VyOS use IPv4 TCP SYN Cookies. The following system "
|
||||
"parameter will be altered:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:118
|
||||
#: 735347352834482cace8aafee8fa444e
|
||||
msgid "``net.ipv4.tcp_syncookies``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:122
|
||||
#: 8efed673f5664290b4229930a12b9ff8
|
||||
msgid ""
|
||||
"Enable or Disable VyOS to be :rfc:`1337` conform. The following system "
|
||||
"parameter will be altered:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:125
|
||||
#: fe6b1ca3e46e4d9ca143df6ab2a452ad
|
||||
msgid "``net.ipv4.tcp_rfc1337``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:132
|
||||
#: 72af8d6f48aa4d14a8ee04617607ec80
|
||||
msgid "Set the global setting for an established connection."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:138
|
||||
#: d2a0302b9c85484fabaa1f0cde5405e5
|
||||
msgid "Set the global setting for invalid packets."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:144
|
||||
#: ae97bd44d2274ef0a30d56787251f49a
|
||||
msgid "Set the global setting for related connections."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:149
|
||||
#: a7e9b84524f644339caafb416bca1d47
|
||||
msgid "Groups"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:151
|
||||
#: bc99d552d610455aab5eb6b4836740af
|
||||
msgid ""
|
||||
"Firewall groups represent collections of IP addresses, networks, or ports. "
|
||||
"Once created, a group can be referenced by firewall rules as either a source"
|
||||
" or destination. Members can be added or removed from a group without "
|
||||
"changes to, or the need to reload, individual firewall rules."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:157
|
||||
#: dd713103cf254ccb8dcffe2cbaaa7d57
|
||||
msgid ""
|
||||
"Groups need to have unique names. Even though some contain IPv4 addresses "
|
||||
"and others contain IPv6 addresses, they still need to have unique names, so "
|
||||
"you may want to append \"-v4\" or \"-v6\" to your group names."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:164
|
||||
#: 6265d626263442f7848b812a3765dd0f
|
||||
msgid "Address Groups"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:166
|
||||
#: f00e5e102aaa478ba25e6cbd5ce869a1
|
||||
msgid ""
|
||||
"In an **address group** a single IP address or IP address ranges are "
|
||||
"defined."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:173
|
||||
#: 98947547bac64502994fa7d94fa5cc30
|
||||
msgid "Define a IPv4 or a IPv6 address group"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:184
|
||||
#: 8f3dda4c071f44ec8de0a04166a5df4e
|
||||
msgid "Provide a IPv4 or IPv6 address group description"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:188
|
||||
#: a864cc2e72a644019ae7a8c7115569c0
|
||||
msgid "Network Groups"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:190
|
||||
#: c86eacf4462b4530b70c206938b906dc
|
||||
msgid ""
|
||||
"While **network groups** accept IP networks in CIDR notation, specific IP "
|
||||
"addresses can be added as a 32-bit prefix. If you foresee the need to add a "
|
||||
"mix of addresses and networks, the network group is recommended."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:198
|
||||
#: 34121fa5d124402b8f18899cec821a31
|
||||
msgid "Define a IPv4 or IPv6 Network group."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:209
|
||||
#: 493d17c76a364daa877d8573a7a4f715
|
||||
msgid "Provide a IPv4 or IPv6 network group description."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:213
|
||||
#: f6835c4043314465b684752615c3f00e
|
||||
msgid "Port Groups"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:215
|
||||
#: 96ecef3d7725410ea5132e9b2bf7a73d
|
||||
msgid ""
|
||||
"A **port group** represents only port numbers, not the protocol. Port groups"
|
||||
" can be referenced for either TCP or UDP. It is recommended that TCP and UDP"
|
||||
" groups are created separately to avoid accidentally filtering unnecessary "
|
||||
"ports. Ranges of ports can be specified by using `-`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:224
|
||||
#: 63eaa704285c4f3b90f855084f507860
|
||||
msgid ""
|
||||
"Define a port group. A port name can be any name defined in /etc/services. "
|
||||
"e.g.: http"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:235
|
||||
#: 26aada148f9f4a938f5f30b9c49f8c47
|
||||
msgid "Provide a port group description."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:240
|
||||
#: 123938033ee0482ca04359691035f20c
|
||||
msgid "Rule-Sets"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:242
|
||||
#: 573e2361d6be443fa9b9b9ef1134653c
|
||||
msgid ""
|
||||
"A rule-set is a named collection of firewall rules that can be applied to an"
|
||||
" interface or a zone. Each rule is numbered, has an action to apply if the "
|
||||
"rule is matched, and the ability to specify the criteria to match. Data "
|
||||
"packets go through the rules from 1 - 999999, at the first match the action "
|
||||
"of the rule will be executed."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:251
|
||||
#: 0bdc6e4fb0f54cdc9569e4da34ad48cc
|
||||
msgid "Provide a rule-set description."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:257
|
||||
#: ddd70472446348c7a8fd28cd7166c77b
|
||||
msgid ""
|
||||
"This set the default action of the rule-set if no rule matched a packet "
|
||||
"criteria."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:263
|
||||
#: d5e1808f6f2a4a1db69cf784e93d7fc3
|
||||
msgid "Use this command to enable the logging of the default action."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:270
|
||||
#: b0397e84921f4a6aa7fc63b293138faf
|
||||
msgid "This required setting defines the action of the current rule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:275
|
||||
#: 2776dbf09b174d7fabfd98be4df00e60
|
||||
msgid "Provide a description for each rule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:281
|
||||
#: 29b80b71d6a64be08d7b6df16ec342bb
|
||||
msgid "Enable or disable logging for the matched packet."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:288
|
||||
#: 9dcfd8dc1e484f6b901aee3f189f9acb
|
||||
msgid "Define log-level. Only applicable if rule log is enable."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:293
|
||||
#: 6a350042b33a416a990ed5c6a0706952
|
||||
msgid "If you want to disable a rule but let it in the configuration."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:296
|
||||
#: 2b58304d911642fdbde93cbf19aa4119
|
||||
msgid "Matching criteria"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:298
|
||||
#: 0de1da37a0f14a22b37fcebc07d88607
|
||||
msgid ""
|
||||
"There are a lot of matching criteria against which the package can be "
|
||||
"tested."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:305
|
||||
#: 8e9386bd9d5245f6895aad11486bbfb1
|
||||
msgid "Match criteria based on nat connection status."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:316
|
||||
#: 444c3ff082e04598b27d9466e62a4d2e
|
||||
msgid ""
|
||||
"This is similar to the network groups part, but here you are able to negate "
|
||||
"the matching addresses."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:342
|
||||
#: 9641ccf10ee64769a8ea9dd6b4f3c63b
|
||||
msgid ""
|
||||
"Match IP addresses based on its geolocation. More info: `geoip matching "
|
||||
"<https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching>`_."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:346
|
||||
#: a2681cdb81194806ac5dda4e311574d8
|
||||
msgid "Use inverse-match to match anything except the given country-codes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:348
|
||||
#: 0f888cea51f94d15bfc01fd41bd8388e
|
||||
msgid ""
|
||||
"Data is provided by DB-IP.com under CC-BY-4.0 license. Attribution required,"
|
||||
" permits redistribution so we can include a database in images(~3MB "
|
||||
"compressed). Includes cron script (manually callable by op-mode update "
|
||||
"geoip) to keep database and rules updated."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:358
|
||||
#: cbd5e1eea66547d996d118aca4b351e1
|
||||
msgid "Only in the source criteria, you can specify a mac-address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:374
|
||||
#: 4bc70e0727e44362b2b5dbb88b85b850
|
||||
msgid ""
|
||||
"A port can be set with a port number or a name which is here defined: "
|
||||
"``/etc/services``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:383
|
||||
#: a8f2c47ad17d47cd881715958dc77ab3
|
||||
msgid ""
|
||||
"Multiple source ports can be specified as a comma-separated list. The whole "
|
||||
"list can also be \"negated\" using '!'. For example:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:399
|
||||
#: 53d8497a74db4f6faadad9b2e629a0a5
|
||||
msgid ""
|
||||
"Use a specific address-group. Prepend character '!' for inverted matching "
|
||||
"criteria."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:411
|
||||
#: 622b2b59cf64487782287392cff6baca
|
||||
msgid ""
|
||||
"Use a specific network-group. Prepend character '!' for inverted matching "
|
||||
"criteria."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:423
|
||||
#: 2b958fd6bd5a49a282cd63a0e02938bd
|
||||
msgid ""
|
||||
"Use a specific port-group. Prepend character '!' for inverted matching "
|
||||
"criteria."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:435
|
||||
#: a7b1012b364d453bb4aeddbd76a67144
|
||||
msgid ""
|
||||
"Use a specific domain-group. Prepend character '!' for inverted matching "
|
||||
"criteria."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:447
|
||||
#: 5600afb8b39648a7bf4ffbdb058408e9
|
||||
msgid ""
|
||||
"Use a specific mac-group. Prepend character '!' for inverted matching "
|
||||
"criteria."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:455
|
||||
#: 982f10bd288a4508a2d3aa5af778bc8e
|
||||
msgid "Match based on fragment criteria."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:462
|
||||
#: d782cd89fcf54acfb8e171306cc308ad
|
||||
msgid "Match based on icmp|icmpv6 code and type."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:468
|
||||
#: 4c36fbfb88fe4d1eb3e4cb2597e6da90
|
||||
msgid ""
|
||||
"Match based on icmp|icmpv6 type-name criteria. Use tab for information about"
|
||||
" what **type-name** criteria are supported."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:476
|
||||
#: 241005b1326f4c9bba2d2dd707495aab
|
||||
msgid "Match based on ipsec criteria."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:483
|
||||
#: 8c27b7eaf6154f03ad9a4ccfd62b7c8c
|
||||
msgid ""
|
||||
"Match based on the maximum number of packets to allow in excess of rate."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:490
|
||||
#: 8d69de7f11ec4e8a92fec23e89e83fd5
|
||||
msgid ""
|
||||
"Match based on the maximum average rate, specified as **integer/unit**. For "
|
||||
"example **5/minutes**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:502
|
||||
#: bbb0d89917294eb09ef6a46cb0ca8074
|
||||
msgid ""
|
||||
"Match based on packet length criteria. Multiple values from 1 to 65535 and "
|
||||
"ranges are supported."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:510
|
||||
#: 31e6f9370baf4ba0b249cb334bdb0d25
|
||||
msgid ""
|
||||
"Match a protocol criteria. A protocol number or a name which is here "
|
||||
"defined: ``/etc/protocols``. Special names are ``all`` for all protocols and"
|
||||
" ``tcp_udp`` for tcp and udp based packets. The ``!`` negate the selected "
|
||||
"protocol."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:528
|
||||
#: 16fd1e887fd6420b9de1317ca2588722
|
||||
msgid "Match bases on recently seen sources."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:533
|
||||
#: 43e403011b5c4119a3ff6a1f9bdeac5a
|
||||
msgid ""
|
||||
"Allowed values fpr TCP flags: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, "
|
||||
"``PSH``, ``ALL`` When specifying more than one flag, flags should be comma "
|
||||
"separated. The ``!`` negate the selected protocol."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:548
|
||||
#: 73c574adcac14c45b9f02aa1182c5f33
|
||||
msgid "Match against the state of a packet."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:561
|
||||
#: 962efaa3df214ee9ad60d44f42b806ce
|
||||
msgid "Time to match the defined rule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:565
|
||||
#: 7e03a09636ee46ad9a9b0cbb8870b7b0
|
||||
msgid ""
|
||||
"Match time to live parameter, where 'eq' stands for 'equal'; 'gt' stands for"
|
||||
" 'greater than', and 'lt' stands for 'less than'."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:571
|
||||
#: a95df0ad07844417920d2d8b76667e80
|
||||
msgid ""
|
||||
"Match hop-limit parameter, where 'eq' stands for 'equal'; 'gt' stands for "
|
||||
"'greater than', and 'lt' stands for 'less than'."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:581
|
||||
#: 6f7029a7ec47442fa643950ec6abc017
|
||||
msgid ""
|
||||
"Match when 'count' amount of connections are seen within 'time'. These "
|
||||
"matching criteria can be used to block brute-force attempts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:586
|
||||
#: df75fba3d7b247a99ccc3f46392e0092
|
||||
msgid "Applying a Rule-Set to an Interface"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:588
|
||||
#: dcf78ea0ed0949cb80f5244d09d25eb4
|
||||
msgid "A Rule-Set can be applied to every interface:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:590
|
||||
#: ad45626da9714083b35cc8d80c737990
|
||||
msgid "``in``: Ruleset for forwarded packets on an inbound interface"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:591
|
||||
#: 66b0977f8c2649618fd2e1436b6519db
|
||||
msgid "``out``: Ruleset for forwarded packets on an outbound interface"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:592
|
||||
#: 6ad207f09245467d9cc9b2cc31a3e700
|
||||
msgid "``local``: Ruleset for packets destined for this router"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:598
|
||||
#: 5a943940b6374473a10f0cf1f197aac4
|
||||
msgid "Here are some examples for applying a rule-set to an interface"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:608
|
||||
#: 7fa4610e2fad4d3fa60821ff2e70ad18
|
||||
msgid ""
|
||||
"As you can see in the example here, you can assign the same rule-set to "
|
||||
"several interfaces. An interface can only have one rule-set per chain."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:613
|
||||
#: 7c13e8863c38495abd4f8007838b76c0
|
||||
msgid "Operation-mode Firewall"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:616
|
||||
#: 561e72c9e2b643be8e8554f61eeb0ea7
|
||||
msgid "Rule-set overview"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:620
|
||||
#: 2263ec044f8a4a06bff2947cacc36c0d
|
||||
msgid "This will show you a basic firewall overview"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:686
|
||||
#: ac5a8cd3bbf44d6bb76bc578352a48fd
|
||||
msgid "This will show you a summary of rule-sets and groups"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:735
|
||||
#: dfb494ea440449f8adfba984fd4f4bb6
|
||||
msgid "This will show you a statistic of all rule-sets since the last boot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:739
|
||||
#: 7565359384b3452da861ae9152f3d4eb
|
||||
msgid "This command will give an overview of a rule in a single rule-set"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:743
|
||||
#: fb9f15ae8f9e4c8f8cb68bdeef942141
|
||||
msgid ""
|
||||
"Overview of defined groups. You see the type, the members, and where the "
|
||||
"group is used."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:767
|
||||
#: d0668ab595134a74a7044c97f56de8c2
|
||||
msgid "This command will give an overview of a single rule-set."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:771
|
||||
#: aa9896f9c09e4e92ae4797c245bdf2b3
|
||||
msgid "This will show you a rule-set statistic since the last boot."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:775
|
||||
#: 3ad4f2e340244329a0b6874a4fe94b32
|
||||
msgid "This command will give an overview of a rule in a single rule-set."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:779
|
||||
#: 365492b986654422a24c09b6da767f30
|
||||
msgid "Zone-Policy Overview"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:783
|
||||
#: f2e84b43686a497bb9b1c21a3b14d472
|
||||
msgid "Use this command to get an overview of a zone."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:800
|
||||
#: 9cab45c84f154c46a6c4902f96b8bd28
|
||||
msgid "Show Firewall log"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:804
|
||||
#: 20309ec504fa4730a68e27d18ec18831
|
||||
msgid "Show the logs of a specific Rule-Set."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:807
|
||||
#: 2682d60a4cf041eabc29452db7c982c0
|
||||
msgid ""
|
||||
"At the moment it not possible to look at the whole firewall log with VyOS "
|
||||
"operational commands. All logs will save to ``/var/logs/messages``. For "
|
||||
"example: ``grep '10.10.0.10' /var/log/messages``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:814
|
||||
#: 30acfdb389ca4dc1a7591daa6378cfda
|
||||
msgid "Example Partial Config"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:885
|
||||
#: a1a7b42d8cbd4b608237d2622c4e8c99
|
||||
msgid "Update geoip database"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/general.rst:889
|
||||
#: 44b5c290f6ec4cb5aa3a9360d648da79
|
||||
msgid "Command used to update GeoIP database and firewall sets."
|
||||
msgstr ""
|
||||
@ -1,22 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:02+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/firewall/index.rst:3 83da7a4aa24d433bb28aa381e98308e0
|
||||
msgid "Firewall"
|
||||
msgstr ""
|
||||
@ -1,137 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:02+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/firewall/zone.rst:7 5d28a2195d14466baed1010a0a168f55
|
||||
msgid "Zone Based Firewall"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/zone.rst:9 b2437dbbf0fb48408613fe98c6a2832d
|
||||
msgid ""
|
||||
"In zone-based policy, interfaces are assigned to zones, and inspection "
|
||||
"policy is applied to traffic moving between the zones and acted on according"
|
||||
" to firewall rules. A Zone is a group of interfaces that have similar "
|
||||
"functions or features. It establishes the security borders of a network. A "
|
||||
"zone defines a boundary where traffic is subjected to policy restrictions as"
|
||||
" it crosses to another region of a network."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/zone.rst:16 3ce50b7a632d4644aeca6f3dd6669d2f
|
||||
msgid "Key Points:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/zone.rst:18 c6a82db982e4460d89e0327e7638c991
|
||||
msgid ""
|
||||
"A zone must be configured before an interface is assigned to it and an "
|
||||
"interface can be assigned to only a single zone."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/zone.rst:20 f278728404e24c00b87a4316efcc3bc7
|
||||
msgid "All traffic to and from an interface within a zone is permitted."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/zone.rst:21 3250a916b149435da22a5da5c8348d1b
|
||||
msgid "All traffic between zones is affected by existing policies"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/zone.rst:22 3a4e10156f8b40d6aa04d9de0359dd51
|
||||
msgid ""
|
||||
"Traffic cannot flow between zone member interface and any interface that is "
|
||||
"not a zone member."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/zone.rst:24 6bf7b896b0ce4f32be0df6d583e216d5
|
||||
msgid ""
|
||||
"You need 2 separate firewalls to define traffic: one for each direction."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/zone.rst:26 60d79f43c53d412199a05a4a7df7599c
|
||||
msgid ""
|
||||
"In :vytask:`T2199` the syntax of the zone configuration was changed. The "
|
||||
"zone configuration moved from ``zone-policy zone <name>`` to ``firewall zone"
|
||||
" <name>``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/zone.rst:32 dcb705c4a157435e9a5a284250fc6d53
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/zone.rst:34 67d48c8cf5b94192a1f0d5f632a7c7b8
|
||||
msgid ""
|
||||
"As an alternative to applying policy to an interface directly, a zone-based "
|
||||
"firewall can be created to simplify configuration when multiple interfaces "
|
||||
"belong to the same security zone. Instead of applying rule-sets to "
|
||||
"interfaces, they are applied to source zone-destination zone pairs."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/zone.rst:39 041eb6555f584b6dadfb1829286ac3e4
|
||||
msgid ""
|
||||
"An basic introduction to zone-based firewalls can be found `here "
|
||||
"<https://support.vyos.io/en/kb/articles/a-primer-to-zone-based-firewall>`_, "
|
||||
"and an example at :ref:`examples-zone-policy`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/zone.rst:44 a8184b0664a44b21bae1a29e218e3778
|
||||
msgid "Define a Zone"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/zone.rst:46 b670d82911e546da85e9ffce53a07e3c
|
||||
msgid "To define a zone setup either one with interfaces or a local zone."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/zone.rst:50 be3602e936ca413db078eb0a5e9158ad
|
||||
msgid ""
|
||||
"Set interfaces to a zone. A zone can have multiple interfaces. But an "
|
||||
"interface can only be a member in one zone."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/zone.rst:55 1f12fe538ab5463781231da8e7e156ae
|
||||
msgid ""
|
||||
"Define the zone as a local zone. A local zone has no interfaces and will be "
|
||||
"applied to the router itself."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/zone.rst:60 07aa100c1d8a41eab684f1ac8a662b15
|
||||
msgid "Change the default-action with this setting."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/zone.rst:64 d1b1278ff64a4c40be25e661d0e4a8a0
|
||||
msgid "Set a meaningful description."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/zone.rst:67 6b49f9abba254393a18d78dac2eb1f2d
|
||||
msgid "Applying a Rule-Set to a Zone"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/zone.rst:69 c2f1603c68894d989b0eca018fc7bf33
|
||||
msgid ""
|
||||
"Before you are able to apply a rule-set to a zone you have to create the "
|
||||
"zones first."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/zone.rst:72 530102046b7a49c1a53bc8f6e93a5508
|
||||
msgid ""
|
||||
"It helps to think of the syntax as: (see below). The 'rule-set' should be "
|
||||
"written from the perspective of: *Source Zone*-to->*Destination Zone*"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/firewall/zone.rst:84 fa380c6499fc44f586738b5ba60f0786
|
||||
msgid ""
|
||||
"You apply a rule-set always to a zone from an other zone, it is recommended "
|
||||
"to create one rule-set for each zone pair."
|
||||
msgstr ""
|
||||
@ -1,423 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:6
|
||||
#: e7d0067351e5444ca36c8cb4d93c5af9
|
||||
msgid "High availability"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:8
|
||||
#: fee9f33470d64631bc8e70e402dbfe36
|
||||
msgid ""
|
||||
"VRRP (Virtual Router Redundancy Protocol) provides active/backup redundancy "
|
||||
"for routers. Every VRRP router has a physical IP/IPv6 address, and a virtual"
|
||||
" address. On startup, routers elect the master, and the router with the "
|
||||
"highest priority becomes the master and assigns the virtual address to its "
|
||||
"interface. All routers with lower priorities become backup routers. The "
|
||||
"master then starts sending keepalive packets to notify other routers that "
|
||||
"it's available. If the master fails and stops sending keepalive packets, the"
|
||||
" router with the next highest priority becomes the new master and takes over"
|
||||
" the virtual address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:17
|
||||
#: 25a3e62efb7c4d2183b983047c244baa
|
||||
msgid ""
|
||||
"VRRP keepalive packets use multicast, and VRRP setups are limited to a "
|
||||
"single datalink layer segment. You can setup multiple VRRP groups (also "
|
||||
"called virtual routers). Virtual routers are identified by a VRID (Virtual "
|
||||
"Router IDentifier). If you setup multiple groups on the same interface, "
|
||||
"their VRIDs must be unique if they use the same address family, but it's "
|
||||
"possible (even if not recommended for readability reasons) to use duplicate "
|
||||
"VRIDs on different interfaces."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:26
|
||||
#: 50e07d38d6674c60bfc4d8afce18e577
|
||||
msgid "Basic setup"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:28
|
||||
#: bcccc3691f5b49a3acf383f0c3378d1b
|
||||
msgid ""
|
||||
"VRRP groups are created with the ``set high-availability vrrp group "
|
||||
"$GROUP_NAME`` commands. The required parameters are interface, vrid, and "
|
||||
"address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:32
|
||||
#: dbb9b6dd1a6d4235ad7fc110fb6e49f2
|
||||
msgid "minimal config"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:40
|
||||
#: 92dfa1aaaa8142208503b6f301266196
|
||||
msgid ""
|
||||
"You can verify your VRRP group status with the operational mode ``run show "
|
||||
"vrrp`` command:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:51
|
||||
#: 017b3a53fe81487ebe2dc8259ff7f4d2
|
||||
msgid "IPv6 support"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:53
|
||||
#: 36bcb7945b3a4bd6915096bb3147bff3
|
||||
msgid ""
|
||||
"The ``address`` parameter can be either an IPv4 or IPv6 address, but you can"
|
||||
" not mix IPv4 and IPv6 in the same group, and will need to create groups "
|
||||
"with different VRIDs specially for IPv4 and IPv6. If you want to use IPv4 + "
|
||||
"IPv6 address you can use option ``excluded-address``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:59
|
||||
#: 44bb40746b9d4d8fb2fd126ed64cce44
|
||||
msgid "Address"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:60
|
||||
#: 35c31ebae84a417f8703e10a214721f5
|
||||
msgid ""
|
||||
"The ``address`` can be configured either on the VRRP interface or on not "
|
||||
"VRRP interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:70
|
||||
#: 476c3ac4b65646cf8d5e725c978fc0e8
|
||||
msgid "Disabling a VRRP group"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:72
|
||||
#: 54daaf1c6d0b442898fdb59362e44ed6
|
||||
msgid "You can disable a VRRP group with ``disable`` option:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:78
|
||||
#: 12373c26525c47faab9e90599a8fcc14
|
||||
msgid ""
|
||||
"A disabled group will be removed from the VRRP process and your router will "
|
||||
"not participate in VRRP for that VRID. It will disappear from operational "
|
||||
"mode commands output, rather than enter the backup state."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:83
|
||||
#: b82e411c327644279cd48efbd5a70bdb
|
||||
msgid "Exclude address"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:85
|
||||
#: 819ce5a5641945a797a4ddc43a813e2c
|
||||
msgid ""
|
||||
"Exclude IP addresses from ``VRRP packets``. This option ``excluded-address``"
|
||||
" is used when you want to set IPv4 + IPv6 addresses on the same virtual "
|
||||
"interface or when used more than 20 IP addresses."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:96
|
||||
#: c4a6f6333ae64f5ca601b3549e7bc407
|
||||
msgid "Setting VRRP group priority"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:98
|
||||
#: 95b3436ef1f24d21abd13275933a2224
|
||||
msgid "VRRP priority can be set with ``priority`` option:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:104
|
||||
#: 765d297e220b41e2bedd1df69a1d379f
|
||||
msgid ""
|
||||
"The priority must be an integer number from 1 to 255. Higher priority value "
|
||||
"increases router's precedence in the master elections."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:108
|
||||
#: fe4a11d3fdbf46e5a2e5f4f389d7bd28
|
||||
msgid "Sync groups"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:110
|
||||
#: 9f19a839f9c84fbba9c2318dd41e3f8b
|
||||
msgid "A sync group allows VRRP groups to transition together."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:118
|
||||
#: a7e01366f1c14a5a861873456eda1b59
|
||||
msgid ""
|
||||
"In the following example, when VLAN9 transitions, VLAN20 will also "
|
||||
"transition:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:142
|
||||
#: fdd8c618b0fa4d12a948061883f450ac
|
||||
msgid ""
|
||||
"All items in a sync group should be similarly configured. If one VRRP group "
|
||||
"is set to a different preemption delay or priority, it would result in an "
|
||||
"endless transition loop."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:148
|
||||
#: ab27c891a1f6448ea2df6cb6d3df34b1
|
||||
msgid "Preemption"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:150
|
||||
#: 6a37e5389a064e748629b73dec803da4
|
||||
msgid ""
|
||||
"VRRP can use two modes: preemptive and non-preemptive. In the preemptive "
|
||||
"mode, if a router with a higher priority fails and then comes back, routers "
|
||||
"with lower priority will give up their master status. In non-preemptive "
|
||||
"mode, the newly elected master will keep the master status and the virtual "
|
||||
"address indefinitely."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:155
|
||||
#: b7bb9c1034a444a5956033355527158e
|
||||
msgid ""
|
||||
"By default VRRP uses preemption. You can disable it with the \"no-preempt\" "
|
||||
"option:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:162
|
||||
#: d0e96e3976a94e7d89cd3fd1e3dec53f
|
||||
msgid ""
|
||||
"You can also configure the time interval for preemption with the \"preempt-"
|
||||
"delay\" option. For example, to set the higher priority router to take over "
|
||||
"in 180 seconds, use:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:171
|
||||
#: 49fe606e3aa84de4a52c96006a543d55
|
||||
msgid "Track"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:173
|
||||
#: ed3d8925bc214126bd79ea2546fe5e65
|
||||
msgid ""
|
||||
"Track option to track non VRRP interface states. VRRP changes status to "
|
||||
"``FAULT`` if one of the track interfaces in state ``down``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:181
|
||||
#: 56ecfbe000a1440da35b09aeec7d2c12
|
||||
msgid "Ignore VRRP main interface faults"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:188
|
||||
#: a8d83d134f684d2783d8edbb8b544a60
|
||||
msgid "Unicast VRRP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:190
|
||||
#: 2c4a6cc88ea7489b94a8de86f6931799
|
||||
msgid ""
|
||||
"By default VRRP uses multicast packets. If your network does not support "
|
||||
"multicast for whatever reason, you can make VRRP use unicast communication "
|
||||
"instead."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:200
|
||||
#: 52449fa8f2ab4390a89a9e18401cabcb
|
||||
msgid "rfc3768-compatibility"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:202
|
||||
#: 2c4ff3cabdde4c89ac827d7870a88a38
|
||||
msgid ""
|
||||
"RFC 3768 defines a virtual MAC address to each VRRP virtual router. This "
|
||||
"virtual router MAC address will be used as the source in all periodic VRRP "
|
||||
"messages sent by the active node. When the rfc3768-compatibility option is "
|
||||
"set, a new VRRP interface is created, to which the MAC address and the "
|
||||
"virtual IP address is automatically assigned."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:212
|
||||
#: 8ec5cf8bd8ee4af2b3c5e9c34ad72d2a
|
||||
msgid "Verification"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:224
|
||||
#: cb133a4a167f4939a19cf39c6dcb430b
|
||||
msgid "Scripting"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:226
|
||||
#: 8891db909c754134b972d1b43111e2f8
|
||||
msgid ""
|
||||
"VRRP functionality can be extended with scripts. VyOS supports two kinds of "
|
||||
"scripts: health check scripts and transition scripts. Health check scripts "
|
||||
"execute custom checks in addition to the master router reachability. "
|
||||
"Transition scripts are executed when VRRP state changes from master to "
|
||||
"backup or fault and vice versa and can be used to enable or disable certain "
|
||||
"services, for example."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:233
|
||||
#: 1b16230ec9dd4b17b36e4e54f77e7320
|
||||
msgid "Health check scripts"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:235
|
||||
#: b21c8fbc7a644edbbf03c53b4a8d0af0
|
||||
msgid ""
|
||||
"This setup will make the VRRP process execute the ``/config/scripts/vrrp-"
|
||||
"check.sh script`` every 60 seconds, and transition the group to the fault "
|
||||
"state if it fails (i.e. exits with non-zero status) three times:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:247
|
||||
#: 187a8c6f9d84432ebb272eab2ca267b4
|
||||
msgid "Transition scripts"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:249
|
||||
#: c2516ea16d1e4ab28d54feff178a1c9e
|
||||
msgid ""
|
||||
"Transition scripts can help you implement various fixups, such as starting "
|
||||
"and stopping services, or even modifying the VyOS config on VRRP transition."
|
||||
" This setup will make the VRRP process execute the ``/config/scripts/vrrp-"
|
||||
"fail.sh`` with argument ``Foo`` when VRRP fails, and the "
|
||||
"``/config/scripts/vrrp-master.sh`` when the router becomes the master:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:261
|
||||
#: 4e011f89b21d4a0e9620cad9c40917cb
|
||||
msgid ""
|
||||
"To know more about scripting, check the :ref:`command-scripting` section."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:264
|
||||
#: 08f7855239604db8b1f19272c6775811
|
||||
msgid "Virtual-server"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/need_improvement.txt:11 c945c68683964cb98e4925c4d9d7c722
|
||||
msgid "This section needs improvements, examples and explanations."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/need_improvement.txt:13 0cc892ecba514bbb91d33ffea746268c
|
||||
msgid ""
|
||||
"Please take a look at the Contributing Guide for our :ref:`documentation`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:267
|
||||
#: 5f47de8f78064bebae45e0b39db5512e
|
||||
msgid ""
|
||||
"Virtual Server allows to Load-balance traffic destination virtual-"
|
||||
"address:port between several real servers."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:271
|
||||
#: 28705ad5afd34698b67f0973c60741d0
|
||||
msgid "Algorithm"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:272
|
||||
#: af6c518e0f944e45bab41e7214045c83
|
||||
msgid "Load-balancing schedule algorithm:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:274
|
||||
#: 23d7ad76dbfc473e80ef1cc50955bcf8
|
||||
msgid "round-robin"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:275
|
||||
#: 4e346244fd4a4f6a8d8dabce29c927bb
|
||||
msgid "weighted-round-robin"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:276
|
||||
#: 232c91c0283e4e12a88438382a30a995
|
||||
msgid "least-connection"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:277
|
||||
#: 2f5a374ab4cf45059a2f5a83e9fa59fa
|
||||
msgid "weighted-least-connection"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:278
|
||||
#: c9024d7dc4e9428387069b7d398fb8c0
|
||||
msgid "source-hashing"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:279
|
||||
#: aa052642dff74d0abcfdd761b1994f7e
|
||||
msgid "destination-hashing"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:280
|
||||
#: f6c4fbbe8745473d9d08729f77c60b58
|
||||
msgid "locality-based-least-connection"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:287
|
||||
#: 64ea694d5b9942d9915efb108850b6f1
|
||||
msgid "Forward method"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:288
|
||||
#: 5a9334aad7df44c6aab7219fb87d8b6d
|
||||
msgid "NAT"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:289
|
||||
#: 53cf91eddb564854a44a0b4b97c4302e
|
||||
msgid "direct"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:290
|
||||
#: 9fe0a2533e6846d8b10795af938dfb5e
|
||||
msgid "tunnel"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:298
|
||||
#: b239f52802a940bf9bcfeb06f95e0ce7
|
||||
msgid "Real server"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:299
|
||||
#: f743bcaf5d254b53814b81b02a9c313c
|
||||
msgid "Real server IP address and port"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:307
|
||||
#: 1f0f3fabb3cb420195438fc6a358aad4
|
||||
msgid "Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:308
|
||||
#: cfe751288bbf4d7bb235ceff4a52dc0e
|
||||
msgid ""
|
||||
"Virtual-server can be configured with VRRP virtual address or without VRRP."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:310
|
||||
#: 3e1ddf07fc1c4e26bdc35f56a086fcf5
|
||||
msgid ""
|
||||
"In the next example all traffic destined to ``203.0.113.1`` and port "
|
||||
"``8280`` protocol TCP is balanced between 2 real servers ``192.0.2.11`` and "
|
||||
"``192.0.2.12`` to port ``80``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/highavailability/index.rst:314
|
||||
#: 7c81fb7780c546b392f62a9add692246
|
||||
msgid "Real server is auto-excluded if port check with this server fail."
|
||||
msgstr ""
|
||||
@ -1,26 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:02+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/index.rst:3 9b38201e769b4a2b948f146166059dab
|
||||
msgid "Configuration Guide"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/index.rst:5 532e00ffea094ea8ab1bfadcbffefafe
|
||||
msgid "The following structure respresent the cli structure."
|
||||
msgstr ""
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
@ -1,116 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:04+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/interfaces/dummy.rst:7 225fa9192f7245189c47d69a79d66d35
|
||||
msgid "Dummy"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/dummy.rst:9 25f653d5461546308795a9dcab143c7f
|
||||
msgid ""
|
||||
"The dummy interface is really a little exotic, but rather useful "
|
||||
"nevertheless. Dummy interfaces are much like the :ref:`loopback-interface` "
|
||||
"interface, except you can have as many as you want."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/dummy.rst:13
|
||||
#: 1e72c2b3315f45928e90e8d30d1923cc
|
||||
msgid ""
|
||||
"Dummy interfaces can be used as interfaces that always stay up (in the same "
|
||||
"fashion to loopbacks in Cisco IOS), or for testing purposes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/dummy.rst:16
|
||||
#: 0f78a91330de49e681900b47a31bb411
|
||||
msgid ""
|
||||
"On systems with multiple redundant uplinks and routes, it's a good idea to "
|
||||
"use a dedicated address for management and dynamic routing protocols. "
|
||||
"However, assigning that address to a physical link is risky: if that link "
|
||||
"goes down, that address will become inaccessible. A common solution is to "
|
||||
"assign the management address to a loopback or a dummy interface and "
|
||||
"advertise that address via all physical links, so that it's reachable "
|
||||
"through any of them. Since in Linux-based systems, there can be only one "
|
||||
"loopback interface, it's better to use a dummy interface for that purpose, "
|
||||
"since they can be added, removed, and taken up and down independently."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/dummy.rst:28
|
||||
#: 363d47c14c71419298141b7209551463
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/dummy.rst:31
|
||||
#: 78a0f0518d1045deacbfcb071ee33aad
|
||||
msgid "Common interface configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address.txt:3 becfa4c0c1e144a1abe948450867a0c7
|
||||
msgid ""
|
||||
"Configure interface `<interface>` with one or more interface addresses."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address.txt:6 70bcc023c96441598cb38b8a42113441
|
||||
msgid ""
|
||||
"**address** can be specified multiple times as IPv4 and/or IPv6 address, "
|
||||
"e.g. 192.0.2.1/24 and/or 2001:db8::1/64"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address.txt:9
|
||||
#: ../../_include/interface-description.txt:7
|
||||
#: ../../_include/interface-disable.txt:7 ../../_include/interface-vrf.txt:9
|
||||
#: 9cdcd75236bd4c819652a8d43bba01e4 c9f9403a597241718822a3225fd4362e
|
||||
#: c7334a858dfc41798672ae98c0a8fd32 0f64c4e6d05e4c7baf2324c07653d633
|
||||
msgid "Example:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-description.txt:4 a58ea870199b4693b3eda69fc63aa369
|
||||
msgid ""
|
||||
"Set a human readable, descriptive alias for this connection. Alias is used "
|
||||
"by e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable.txt:4 cd74f2aaff3849ae895c4d86a920159b
|
||||
msgid ""
|
||||
"Disable given `<interface>`. It will be placed in administratively down "
|
||||
"(``A/D``) state."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vrf.txt:4 fb2a2814c8f7412f8070882df988f433
|
||||
msgid "Place interface in given VRF instance."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vrf.txt:6 28a05cc94e584988b99c98e85556c00a
|
||||
msgid ""
|
||||
"There is an entire chapter about how to configure a :ref:`vrf`, please check"
|
||||
" this for additional information."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/dummy.rst:51
|
||||
#: 97699624680d4972a9ddf3fb1f96ee89
|
||||
msgid "Operation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/dummy.rst:55
|
||||
#: 20d8ebe4f85e4f73b50f10134b157bf5
|
||||
msgid "Show brief interface information."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/dummy.rst:67
|
||||
#: d9802ea9a0f04566bfe1ee1265121260
|
||||
msgid "Show detailed information on given `<interface>`"
|
||||
msgstr ""
|
||||
File diff suppressed because it is too large
Load Diff
@ -1,457 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:04+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/interfaces/geneve.rst:7
|
||||
#: 45b4ec6af6be411187dee6623bb1b8f3
|
||||
msgid "GENEVE"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/geneve.rst:9
|
||||
#: a5ca4b4496264335baf8827148c96ddf
|
||||
msgid ""
|
||||
":abbr:`GENEVE (Generic Network Virtualization Encapsulation)` supports all "
|
||||
"of the capabilities of :abbr:`VXLAN (Virtual Extensible LAN)`, :abbr:`NVGRE "
|
||||
"(Network Virtualization using Generic Routing Encapsulation)`, and "
|
||||
":abbr:`STT (Stateless Transport Tunneling)` and was designed to overcome "
|
||||
"their perceived limitations. Many believe GENEVE could eventually replace "
|
||||
"these earlier formats entirely."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/geneve.rst:16
|
||||
#: 99a59ee4244f4c0883054721bb4c0748
|
||||
msgid ""
|
||||
"GENEVE is designed to support network virtualization use cases, where "
|
||||
"tunnels are typically established to act as a backplane between the virtual "
|
||||
"switches residing in hypervisors, physical switches, or middleboxes or other"
|
||||
" appliances. An arbitrary IP network can be used as an underlay although "
|
||||
"Clos networks - A technique for composing network fabrics larger than a "
|
||||
"single switch while maintaining non-blocking bandwidth across connection "
|
||||
"points. ECMP is used to divide traffic across the multiple links and "
|
||||
"switches that constitute the fabric. Sometimes termed \"leaf and spine\" or "
|
||||
"\"fat tree\" topologies."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/geneve.rst:25
|
||||
#: 00c4bae64e2147aab606950605503588
|
||||
msgid "Geneve Header:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/geneve.rst:39
|
||||
#: 78bede1ec9ef4deea9b7e5670d56b113
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/geneve.rst:42
|
||||
#: eecd0a480145411a9aed6f6743c06cff
|
||||
msgid "Common interface configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address.txt:3 0bd1260575664a28a98b7395129f1aa2
|
||||
msgid ""
|
||||
"Configure interface `<interface>` with one or more interface addresses."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address.txt:6 5f3f55bec0b5466cad218f980e2f9edf
|
||||
msgid ""
|
||||
"**address** can be specified multiple times as IPv4 and/or IPv6 address, "
|
||||
"e.g. 192.0.2.1/24 and/or 2001:db8::1/64"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address.txt:9
|
||||
#: ../../_include/interface-description.txt:7
|
||||
#: ../../_include/interface-disable.txt:7
|
||||
#: ../../_include/interface-disable-flow-control.txt:19
|
||||
#: ../../_include/interface-disable-link-detect.txt:9
|
||||
#: ../../_include/interface-mac.txt:7 ../../_include/interface-mtu.txt:7
|
||||
#: ../../_include/interface-ip.txt:27 ../../_include/interface-ip.txt:50
|
||||
#: ../../_include/interface-ip.txt:144 ../../_include/interface-ipv6.txt:15
|
||||
#: ../../_include/interface-ipv6.txt:28 ../../_include/interface-ipv6.txt:39
|
||||
#: ../../_include/interface-ipv6.txt:51 ../../_include/interface-vrf.txt:9
|
||||
#: 5ff9c096088447b78f34acf3ec9da03d 0d3a22874f754d7da0ce4f056e7bc1ba
|
||||
#: 8c72f6882b6d48b79af833bc031b654a d31543e329e340d285af99a5acddf8f6
|
||||
#: 36c1cd4eb1eb4e68a428e156149c5d7e b56d141c7edd49bd9d4cb588c5769c8f
|
||||
#: 1f7a8b05e6714c8c9b01e29a970a3ee6 1b15a161400e4d84a98c5614cde7ac54
|
||||
#: 26c1f3ae54cb4352afac06a96dd80446 df61e3d8c62847efb3942c22877919e0
|
||||
#: 3b485d8a7cdc430eb545ab2d35341ad2 9053c615aeab4a5fa4068a2f2d80eac2
|
||||
#: 452615d4373f41c393a6b703597a720c 3e0d7093f2fe432a8168c4e63e7d5031
|
||||
#: c25cac76452d4380b2b582e4b6c2c41e
|
||||
msgid "Example:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-description.txt:4 dd909e7c98a84d5ba1be6cb97ed6af12
|
||||
msgid ""
|
||||
"Set a human readable, descriptive alias for this connection. Alias is used "
|
||||
"by e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable.txt:4 92693613cc1f4ba2a20453bfa091a52c
|
||||
msgid ""
|
||||
"Disable given `<interface>`. It will be placed in administratively down "
|
||||
"(``A/D``) state."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-flow-control.txt:4
|
||||
#: 6098809a41a74db1b0ea66957bd88975
|
||||
msgid ""
|
||||
"Ethernet flow control is a mechanism for temporarily stopping the "
|
||||
"transmission of data on Ethernet family computer networks. The goal of this "
|
||||
"mechanism is to ensure zero packet loss in the presence of network "
|
||||
"congestion."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-flow-control.txt:8
|
||||
#: 94f184f12b1740e7a2761a975100231d
|
||||
msgid ""
|
||||
"The first flow control mechanism, the pause frame, was defined by the IEEE "
|
||||
"802.3x standard."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-flow-control.txt:11
|
||||
#: 5f640d13ac97483199d96591970e4791
|
||||
msgid ""
|
||||
"A sending station (computer or network switch) may be transmitting data "
|
||||
"faster than the other end of the link can accept it. Using flow control, the"
|
||||
" receiving station can signal the sender requesting suspension of "
|
||||
"transmissions until the receiver catches up."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-flow-control.txt:16
|
||||
#: b181651d8f42471fa8e9ed0fd6fc2773
|
||||
msgid ""
|
||||
"Use this command to disable the generation of Ethernet flow control (pause "
|
||||
"frames)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-link-detect.txt:4
|
||||
#: 02b60a2dbbd145be9a468d1c427f36cf
|
||||
msgid ""
|
||||
"Use this command to direct an interface to not detect any physical state "
|
||||
"changes on a link, for example, when the cable is unplugged."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-link-detect.txt:7
|
||||
#: e80745aa6b9e41f5bdbef0a9cc66f0ca
|
||||
msgid "Default is to detects physical link state changes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-mac.txt:4 526bbd540da242e9a5ed0da7a58bd373
|
||||
msgid ""
|
||||
"Configure user defined :abbr:`MAC (Media Access Control)` address on given "
|
||||
"`<interface>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-mtu.txt:4 c8a30d7447164b86ba0ce6bfa5fb76b0
|
||||
msgid ""
|
||||
"Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It"
|
||||
" is the size (in bytes) of the largest ethernet frame sent on this link."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:4 ../../_include/interface-ipv6.txt:60
|
||||
#: cb7d40339f684194b92a3858927474bb ae789a739dfc49b3aec9de3c776b994f
|
||||
msgid ""
|
||||
"As Internet wide PMTU discovery rarely works, we sometimes need to clamp our"
|
||||
" TCP MSS value to a specific value. This is a field in the TCP options part "
|
||||
"of a SYN packet. By setting the MSS value, you are telling the remote side "
|
||||
"unequivocally 'do not try to send me packets bigger than this value'."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:9 65057095dc9745fcb9263045afa1d934
|
||||
msgid ""
|
||||
"This command was introduced in VyOS 1.4 - it was previously called: ``set "
|
||||
"firewall options interface <name> adjust-mss <value>``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:12 60fb2d61b5114149a04ab14d59258642
|
||||
msgid ""
|
||||
"MSS value = MTU - 20 (IP header) - 20 (TCP header), resulting in 1452 bytes "
|
||||
"on a 1492 byte MTU."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:15 ../../_include/interface-ipv6.txt:71
|
||||
#: 0f2cd078626040c8ac69bbfb78601a3f eb605f7e65d2421db06a443e1a24686c
|
||||
msgid ""
|
||||
"Instead of a numerical MSS value `clamp-mss-to-pmtu` can be used to "
|
||||
"automatically set the proper value."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:21 65f6ed70d35f476b9942a753870c4ab5
|
||||
msgid ""
|
||||
"Once a neighbor has been found, the entry is considered to be valid for at "
|
||||
"least for this specific time. An entry's validity will be extended if it "
|
||||
"receives positive feedback from higher level protocols."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:25 031a9bbf13644af398d293a3c35cd0f0
|
||||
msgid "This defaults to 30 seconds."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:36 1f42962643a84d0297e691d1db6a3a1e
|
||||
msgid ""
|
||||
"If set the kernel can respond to arp requests with addresses from other "
|
||||
"interfaces. This may seem wrong but it usually makes sense, because it "
|
||||
"increases the chance of successful communication. IP addresses are owned by "
|
||||
"the complete host on Linux, not by particular interfaces. Only for more "
|
||||
"complex setups like load-balancing, does this behaviour cause problems."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:42 422f719f999046fba17d05d8b76c7f72
|
||||
msgid ""
|
||||
"If not set (default) allows you to have multiple network interfaces on the "
|
||||
"same subnet, and have the ARPs for each interface be answered based on "
|
||||
"whether or not the kernel would route a packet from the ARP'd IP out that "
|
||||
"interface (therefore you must use source based routing for this to work)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:47 533c54b53f6b4b4eabde1ece11e3c087
|
||||
msgid ""
|
||||
"In other words it allows control of which cards (usually 1) will respond to "
|
||||
"an arp request."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:59 ../../_include/interface-ipv6.txt:48
|
||||
#: 31b9942079c944f384444a699ec20fc0 6af2fe7715584f82b886c0f0a39d53be
|
||||
msgid ""
|
||||
"Configure interface-specific Host/Router behaviour. If set, the interface "
|
||||
"will switch to host mode and IPv6 forwarding will be disabled on this "
|
||||
"interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:69 d363d626596e4469b613a645ddb88f26
|
||||
msgid ""
|
||||
"Define different modes for IP directed broadcast forwarding as described in "
|
||||
":rfc:`1812` and :rfc:`2644`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:72 8be6aad2ae50429c86dd1cd823da40a7
|
||||
msgid ""
|
||||
"If configured, incoming IP directed broadcast packets on this interface will"
|
||||
" be forwarded."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:75 4f006dcf0b05439f8f4bce16d097e08d
|
||||
msgid ""
|
||||
"If this option is unset (default), incoming IP directed broadcast packets "
|
||||
"will not be forwarded."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:85 2a833dcdf79c4f27b411e1f3ba5c2c5f
|
||||
msgid ""
|
||||
"Define behavior for gratuitous ARP frames who's IP is not already present in"
|
||||
" the ARP table. If configured create new entries in the ARP table."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:88 7bd4cd3b2c6d4ed9b1b8220b7be38aab
|
||||
msgid ""
|
||||
"Both replies and requests type gratuitous arp will trigger the ARP table to "
|
||||
"be updated, if this setting is on."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:91 dad407b4fd70478a8c4117d21b852586
|
||||
msgid ""
|
||||
"If the ARP table already contains the IP address of the gratuitous arp "
|
||||
"frame, the arp table will be updated regardless if this setting is on or "
|
||||
"off."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:101 2968819d0f72417fb5f7d8e83d0a6ead
|
||||
msgid ""
|
||||
"Define different restriction levels for announcing the local source IP "
|
||||
"address from IP packets in ARP requests sent on interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:104 94051b647f6744de8404f9fa5cd1c038
|
||||
msgid "Use any local address, configured on any interface if this is not set."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:106 190779bcaa6a4443aa44f14f337a960f
|
||||
msgid ""
|
||||
"If configured, try to avoid local addresses that are not in the target's "
|
||||
"subnet for this interface. This mode is useful when target hosts reachable "
|
||||
"via this interface require the source IP address in ARP requests to be part "
|
||||
"of their logical network configured on the receiving interface. When we "
|
||||
"generate the request we will check all our subnets that include the target "
|
||||
"IP and will preserve the source address if it is from such subnet. If there "
|
||||
"is no such subnet we select source address according to the rules for level "
|
||||
"2."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:121 9794fa87412541a2a8bcb7bd960f886c
|
||||
msgid ""
|
||||
"Define different modes for sending replies in response to received ARP "
|
||||
"requests that resolve local target IP addresses:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:124 d8f64bde988046a6b13e5d593fa1cb43
|
||||
msgid ""
|
||||
"If configured, reply only if the target IP address is local address "
|
||||
"configured on the incoming interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:127 9afcc57695994e32a9ace37efa6ce907
|
||||
msgid ""
|
||||
"If this option is unset (default), reply for any local target IP address, "
|
||||
"configured on any interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:137 a898f51b5a5549a0a928c3a6a5699be0
|
||||
msgid ""
|
||||
"Use this command to enable proxy Address Resolution Protocol (ARP) on this "
|
||||
"interface. Proxy ARP allows an Ethernet interface to respond with its own "
|
||||
":abbr:`MAC (Media Access Control)` address to ARP requests for destination "
|
||||
"IP addresses on subnets attached to other interfaces on the system. "
|
||||
"Subsequent packets sent to those destination IP addresses are forwarded "
|
||||
"appropriately by the system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:153 6d72ad7a000a4ee388652bf980338fe5
|
||||
msgid ""
|
||||
"Private VLAN proxy arp. Basically allow proxy arp replies back to the same "
|
||||
"interface (from which the ARP request/solicitation was received)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:156 292655601ca341119b46cf186d3619a7
|
||||
msgid ""
|
||||
"This is done to support (ethernet) switch features, like :rfc:`3069`, where "
|
||||
"the individual ports are NOT allowed to communicate with each other, but "
|
||||
"they are allowed to talk to the upstream router. As described in "
|
||||
":rfc:`3069`, it is possible to allow these hosts to communicate through the "
|
||||
"upstream router by proxy_arp'ing."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:162 0c42fe8715f14991a2938afb72eeb3ee
|
||||
msgid "Does not need to be used together with proxy_arp."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:164 5fdd8bb881f842aa9cf6e1295c09320d
|
||||
msgid "This technology is known by different names:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:166 b4d56acb38754eae870f7681ca3d61ef
|
||||
msgid "In :rfc:`3069` it is called VLAN Aggregation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:168 3afb9c16a0d54368b5003d4b762dba09
|
||||
msgid "Cisco and Allied Telesyn call it Private VLAN"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:170 93459971979c4e8d99852189ff9f367a
|
||||
msgid "Hewlett-Packard call it Source-Port filtering or port-isolation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:172 6439a622b49a439f9824724b5b24eb0f
|
||||
msgid "Ericsson call it MAC-Forced Forwarding (RFC Draft)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:177 1641933a0b36450dbaaf123cf7b8cda1
|
||||
msgid ""
|
||||
"Enable policy for source validation by reversed path, as specified in "
|
||||
":rfc:`3704`. Current recommended practice in :rfc:`3704` is to enable strict"
|
||||
" mode to prevent IP spoofing from DDos attacks. If using asymmetric routing "
|
||||
"or other complicated routing, then loose mode is recommended."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:182 da59d7685f3d4a0e8426f61b70a14dbb
|
||||
msgid ""
|
||||
"strict: Each incoming packet is tested against the FIB and if the interface "
|
||||
"is not the best reverse path the packet check will fail. By default failed "
|
||||
"packets are discarded."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:186 d696fba5987240c787add034c366ffcd
|
||||
msgid ""
|
||||
"loose: Each incoming packet's source address is also tested against the FIB "
|
||||
"and if the source address is not reachable via any interface the packet "
|
||||
"check will fail."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:190 a738f2d490f444c5b2092d32970bc76e
|
||||
msgid "disable: No source validation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:4 73943e917da84e298a26879f4fa1db4f
|
||||
msgid ""
|
||||
":abbr:`SLAAC (Stateless Address Autoconfiguration)` :rfc:`4862`. IPv6 hosts "
|
||||
"can configure themselves automatically when connected to an IPv6 network "
|
||||
"using the Neighbor Discovery Protocol via :abbr:`ICMPv6 (Internet Control "
|
||||
"Message Protocol version 6)` router discovery messages. When first connected"
|
||||
" to a network, a host sends a link-local router solicitation multicast "
|
||||
"request for its configuration parameters; routers respond to such a request "
|
||||
"with a router advertisement packet that contains Internet Layer "
|
||||
"configuration parameters."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:12 83c3ef51d3ad470dbefec7d2e6c915e5
|
||||
msgid ""
|
||||
"This method automatically disables IPv6 traffic forwarding on the interface "
|
||||
"in question."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:25 f6441bd659e8494cb8d21032804f9a58
|
||||
msgid ""
|
||||
":abbr:`EUI-64 (64-Bit Extended Unique Identifier)` as specified in "
|
||||
":rfc:`4291` allows a host to assign iteslf a unique 64-Bit IPv6 address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:37 ae818d0f1d024af4b344bcef6f3999fa
|
||||
msgid "Do not assign a link-local IPv6 address to this interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:65 8cc686e77a784579bd8b80ccdbca673e
|
||||
msgid ""
|
||||
"This command was introduced in VyOS 1.4 - it was previously called: ``set "
|
||||
"firewall options interface <name> adjust-mss6 <value>``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:68 422932b961684d54a019d464df13e008
|
||||
msgid ""
|
||||
"MSS value = MTU - 40 (IPv6 header) - 20 (TCP header), resulting in 1432 "
|
||||
"bytes on a 1492 byte MTU."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vrf.txt:4 8b529a66b32a4916806f909b25fcb69d
|
||||
msgid "Place interface in given VRF instance."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vrf.txt:6 29c798fb8a5d4c34bbce96cd4c808852
|
||||
msgid ""
|
||||
"There is an entire chapter about how to configure a :ref:`vrf`, please check"
|
||||
" this for additional information."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/geneve.rst:49
|
||||
#: 19a525dd9d7e4a82b88790638f21b301
|
||||
msgid "GENEVE options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/geneve.rst:53
|
||||
#: 714bf1023a974187bd62fa685f82a1ba
|
||||
msgid "Configure GENEVE tunnel far end/remote tunnel endpoint."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/geneve.rst:57
|
||||
#: d8c9d5a189d7425e803af2c35e998cb2
|
||||
msgid ""
|
||||
":abbr:`VNI (Virtual Network Identifier)` is an identifier for a unique "
|
||||
"element of a virtual network. In many situations this may represent an L2 "
|
||||
"segment, however, the control plane defines the forwarding semantics of "
|
||||
"decapsulated packets. The VNI MAY be used as part of ECMP forwarding "
|
||||
"decisions or MAY be used as a mechanism to distinguish between overlapping "
|
||||
"address spaces contained in the encapsulated packet when load balancing "
|
||||
"across CPUs."
|
||||
msgstr ""
|
||||
@ -1,22 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:04+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/interfaces/index.rst:3 ab9a70daf6804d80807e63d01d94250f
|
||||
msgid "Interfaces"
|
||||
msgstr ""
|
||||
@ -1,580 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:04+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../_include/need_improvement.txt:11 dac5eab4a62649579e9185de834b69b6
|
||||
msgid "This section needs improvements, examples and explanations."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/need_improvement.txt:13 071e7ddff14e4ba8b11b2c7f4ad5fd72
|
||||
msgid ""
|
||||
"Please take a look at the Contributing Guide for our :ref:`documentation`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:9
|
||||
#: 80a5f3ff52de494784fa6451a877bfda
|
||||
msgid "L2TPv3"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:11
|
||||
#: 2bf52e340b274dbb85ac0969b5e243c1
|
||||
msgid ""
|
||||
"Layer 2 Tunnelling Protocol Version 3 is an IETF standard related to L2TP "
|
||||
"that can be used as an alternative protocol to :ref:`mpls` for encapsulation"
|
||||
" of multiprotocol Layer 2 communications traffic over IP networks. Like "
|
||||
"L2TP, L2TPv3 provides a pseudo-wire service but is scaled to fit carrier "
|
||||
"requirements."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:16
|
||||
#: 216d69c5f641482eb036c69e29e2332f
|
||||
msgid ""
|
||||
"L2TPv3 can be regarded as being to MPLS what IP is to ATM: a simplified "
|
||||
"version of the same concept, with much of the same benefit achieved at a "
|
||||
"fraction of the effort, at the cost of losing some technical features "
|
||||
"considered less important in the market."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:21
|
||||
#: 0e315d62f88649fb94136e727d13132a
|
||||
msgid ""
|
||||
"In the case of L2TPv3, the features lost are teletraffic engineering "
|
||||
"features considered important in MPLS. However, there is no reason these "
|
||||
"features could not be re-engineered in or on top of L2TPv3 in later "
|
||||
"products."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:25
|
||||
#: 8b3d6d6ceae4443988d8a858efb7cc76
|
||||
msgid ""
|
||||
"The protocol overhead of L2TPv3 is also significantly bigger than MPLS."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:27
|
||||
#: 09dcef77322249d6af4e20b9d9181480
|
||||
msgid "L2TPv3 is described in :rfc:`3921`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:31
|
||||
#: 951b0e5015c5404c84f7938e83c7a3b1
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:34
|
||||
#: 53bce1a1d575491895ac3971b1847dfd
|
||||
msgid "Common interface configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address.txt:3 13557021f7714f29ade0991d84b3c218
|
||||
msgid ""
|
||||
"Configure interface `<interface>` with one or more interface addresses."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address.txt:6 ae162220fd0d434894a00c3b2a952cb1
|
||||
msgid ""
|
||||
"**address** can be specified multiple times as IPv4 and/or IPv6 address, "
|
||||
"e.g. 192.0.2.1/24 and/or 2001:db8::1/64"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address.txt:9
|
||||
#: ../../_include/interface-description.txt:7
|
||||
#: ../../_include/interface-disable.txt:7
|
||||
#: ../../_include/interface-disable-flow-control.txt:19
|
||||
#: ../../_include/interface-disable-link-detect.txt:9
|
||||
#: ../../_include/interface-mac.txt:7 ../../_include/interface-mtu.txt:7
|
||||
#: ../../_include/interface-ip.txt:27 ../../_include/interface-ip.txt:50
|
||||
#: ../../_include/interface-ip.txt:144 ../../_include/interface-ipv6.txt:15
|
||||
#: ../../_include/interface-ipv6.txt:28 ../../_include/interface-ipv6.txt:39
|
||||
#: ../../_include/interface-ipv6.txt:51 ../../_include/interface-vrf.txt:9
|
||||
#: afbf098123304ddb965c36cf484f762b 29300d566a8e4409aaad04523d51b3e9
|
||||
#: 86f8e7fdd7814842940850cfca7eaa1e abebefba11ab4a48b68223304d2bd911
|
||||
#: 18aaebc9558f47e897c5ee1d4519536d 74fefa37e8ea45f7bcf7a28c1ba0de13
|
||||
#: f7301e227ffe428fbeacaa810f2bbc9c 14dd6f6e15dd449ea6972ddf00c953bd
|
||||
#: 72b582717cf44fcabc90f936a60aca2b 6479d4af762d4496a56200bdf09f22c9
|
||||
#: 2909f91a4730450198de33f4b47f42b2 7481645a67ba41e5863759c0da7e2823
|
||||
#: 852a18cd45be455c94431939d42dbd55 5fef7a7859564e8fbfe0dc27988b289b
|
||||
#: 70eaf5a1e7454bacb00e71312ac33106
|
||||
msgid "Example:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-description.txt:4 012103d50444459c8666e360b3a4ee12
|
||||
msgid ""
|
||||
"Set a human readable, descriptive alias for this connection. Alias is used "
|
||||
"by e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable.txt:4 c61357b8ff7b4ad0b8914576e4de9e08
|
||||
msgid ""
|
||||
"Disable given `<interface>`. It will be placed in administratively down "
|
||||
"(``A/D``) state."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-flow-control.txt:4
|
||||
#: c513b326250c487cb9b646f3ccd2f4db
|
||||
msgid ""
|
||||
"Ethernet flow control is a mechanism for temporarily stopping the "
|
||||
"transmission of data on Ethernet family computer networks. The goal of this "
|
||||
"mechanism is to ensure zero packet loss in the presence of network "
|
||||
"congestion."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-flow-control.txt:8
|
||||
#: 476ba4b12d384c20b6bff637b967328d
|
||||
msgid ""
|
||||
"The first flow control mechanism, the pause frame, was defined by the IEEE "
|
||||
"802.3x standard."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-flow-control.txt:11
|
||||
#: 3322f3b3908243e5aa9733d09f5b233b
|
||||
msgid ""
|
||||
"A sending station (computer or network switch) may be transmitting data "
|
||||
"faster than the other end of the link can accept it. Using flow control, the"
|
||||
" receiving station can signal the sender requesting suspension of "
|
||||
"transmissions until the receiver catches up."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-flow-control.txt:16
|
||||
#: ab684d4842654a70ad523f94a5fe59bf
|
||||
msgid ""
|
||||
"Use this command to disable the generation of Ethernet flow control (pause "
|
||||
"frames)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-link-detect.txt:4
|
||||
#: 5f8fcb112b984d5da992d07edf3956ac
|
||||
msgid ""
|
||||
"Use this command to direct an interface to not detect any physical state "
|
||||
"changes on a link, for example, when the cable is unplugged."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-link-detect.txt:7
|
||||
#: 124fcb56a97847cc8782c10fa6701c75
|
||||
msgid "Default is to detects physical link state changes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-mac.txt:4 bff4a06d0cfc44f0bb8c9089c76f7410
|
||||
msgid ""
|
||||
"Configure user defined :abbr:`MAC (Media Access Control)` address on given "
|
||||
"`<interface>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-mtu.txt:4 1dbc58521cd74a27b6f7fbc68da706fc
|
||||
msgid ""
|
||||
"Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It"
|
||||
" is the size (in bytes) of the largest ethernet frame sent on this link."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:4 ../../_include/interface-ipv6.txt:60
|
||||
#: 9387dacadb164835992002a875ac9b48 30a6d9eacb2f4fcb8257278ce4c0bc90
|
||||
msgid ""
|
||||
"As Internet wide PMTU discovery rarely works, we sometimes need to clamp our"
|
||||
" TCP MSS value to a specific value. This is a field in the TCP options part "
|
||||
"of a SYN packet. By setting the MSS value, you are telling the remote side "
|
||||
"unequivocally 'do not try to send me packets bigger than this value'."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:9 95a1b2e32dcf45739425deefbc695991
|
||||
msgid ""
|
||||
"This command was introduced in VyOS 1.4 - it was previously called: ``set "
|
||||
"firewall options interface <name> adjust-mss <value>``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:12 5987b8980526411b94948ce0c2e2380b
|
||||
msgid ""
|
||||
"MSS value = MTU - 20 (IP header) - 20 (TCP header), resulting in 1452 bytes "
|
||||
"on a 1492 byte MTU."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:15 ../../_include/interface-ipv6.txt:71
|
||||
#: 973ad0d54ee84a1ebe2fbcd7679476f2 85448214c03f4f9989a83c897efa16d3
|
||||
msgid ""
|
||||
"Instead of a numerical MSS value `clamp-mss-to-pmtu` can be used to "
|
||||
"automatically set the proper value."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:21 3d3a5ace69d847078d19754826ab1c56
|
||||
msgid ""
|
||||
"Once a neighbor has been found, the entry is considered to be valid for at "
|
||||
"least for this specific time. An entry's validity will be extended if it "
|
||||
"receives positive feedback from higher level protocols."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:25 13a3b17ddd2a43c7887cbf5ded0b1493
|
||||
msgid "This defaults to 30 seconds."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:36 ba800bef1df04ca0be66e8f990395de1
|
||||
msgid ""
|
||||
"If set the kernel can respond to arp requests with addresses from other "
|
||||
"interfaces. This may seem wrong but it usually makes sense, because it "
|
||||
"increases the chance of successful communication. IP addresses are owned by "
|
||||
"the complete host on Linux, not by particular interfaces. Only for more "
|
||||
"complex setups like load-balancing, does this behaviour cause problems."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:42 1a884453bc3f4677b7e9f29a6e42b3bd
|
||||
msgid ""
|
||||
"If not set (default) allows you to have multiple network interfaces on the "
|
||||
"same subnet, and have the ARPs for each interface be answered based on "
|
||||
"whether or not the kernel would route a packet from the ARP'd IP out that "
|
||||
"interface (therefore you must use source based routing for this to work)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:47 a0708a24cf3746df8083206d06a6b0ae
|
||||
msgid ""
|
||||
"In other words it allows control of which cards (usually 1) will respond to "
|
||||
"an arp request."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:59 ../../_include/interface-ipv6.txt:48
|
||||
#: 456a7407877643a58c8e4b325bd0bdf0 cd1ead00693c46049ed0da7f7bdf2483
|
||||
msgid ""
|
||||
"Configure interface-specific Host/Router behaviour. If set, the interface "
|
||||
"will switch to host mode and IPv6 forwarding will be disabled on this "
|
||||
"interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:69 ddbcb5ca85564306bf295473762325bf
|
||||
msgid ""
|
||||
"Define different modes for IP directed broadcast forwarding as described in "
|
||||
":rfc:`1812` and :rfc:`2644`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:72 5b3597d7c156434f8a8a33f769e27b74
|
||||
msgid ""
|
||||
"If configured, incoming IP directed broadcast packets on this interface will"
|
||||
" be forwarded."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:75 78a38ccdebaa404bb72b2d2424fecbb3
|
||||
msgid ""
|
||||
"If this option is unset (default), incoming IP directed broadcast packets "
|
||||
"will not be forwarded."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:85 bd6dc03be05c4c719341e32545491d5d
|
||||
msgid ""
|
||||
"Define behavior for gratuitous ARP frames who's IP is not already present in"
|
||||
" the ARP table. If configured create new entries in the ARP table."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:88 7cda99f59f4c4c8a92d7a69e92110165
|
||||
msgid ""
|
||||
"Both replies and requests type gratuitous arp will trigger the ARP table to "
|
||||
"be updated, if this setting is on."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:91 526574e9cd814565a961af6d64a173f5
|
||||
msgid ""
|
||||
"If the ARP table already contains the IP address of the gratuitous arp "
|
||||
"frame, the arp table will be updated regardless if this setting is on or "
|
||||
"off."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:101 bbd3a35fa55043e1a701b7311bc7235f
|
||||
msgid ""
|
||||
"Define different restriction levels for announcing the local source IP "
|
||||
"address from IP packets in ARP requests sent on interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:104 ae6007ef432f44c58faa2cacf1ee0a3d
|
||||
msgid "Use any local address, configured on any interface if this is not set."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:106 164a392dd5ce4fb78902dea939863c43
|
||||
msgid ""
|
||||
"If configured, try to avoid local addresses that are not in the target's "
|
||||
"subnet for this interface. This mode is useful when target hosts reachable "
|
||||
"via this interface require the source IP address in ARP requests to be part "
|
||||
"of their logical network configured on the receiving interface. When we "
|
||||
"generate the request we will check all our subnets that include the target "
|
||||
"IP and will preserve the source address if it is from such subnet. If there "
|
||||
"is no such subnet we select source address according to the rules for level "
|
||||
"2."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:121 e83d949b2a4d4e1c9e52ffe79eb39fdd
|
||||
msgid ""
|
||||
"Define different modes for sending replies in response to received ARP "
|
||||
"requests that resolve local target IP addresses:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:124 c6d21f7f12af468495c7e7e4ca0e92df
|
||||
msgid ""
|
||||
"If configured, reply only if the target IP address is local address "
|
||||
"configured on the incoming interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:127 b87a4a5f245e43f0a104c9a5d871fbff
|
||||
msgid ""
|
||||
"If this option is unset (default), reply for any local target IP address, "
|
||||
"configured on any interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:137 1769d9bb67e84d2baed91e871bcf203c
|
||||
msgid ""
|
||||
"Use this command to enable proxy Address Resolution Protocol (ARP) on this "
|
||||
"interface. Proxy ARP allows an Ethernet interface to respond with its own "
|
||||
":abbr:`MAC (Media Access Control)` address to ARP requests for destination "
|
||||
"IP addresses on subnets attached to other interfaces on the system. "
|
||||
"Subsequent packets sent to those destination IP addresses are forwarded "
|
||||
"appropriately by the system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:153 54b6d73f53484ca385c7d4c0d8bf6346
|
||||
msgid ""
|
||||
"Private VLAN proxy arp. Basically allow proxy arp replies back to the same "
|
||||
"interface (from which the ARP request/solicitation was received)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:156 f12e3c9892164e1abd0d84a792bef125
|
||||
msgid ""
|
||||
"This is done to support (ethernet) switch features, like :rfc:`3069`, where "
|
||||
"the individual ports are NOT allowed to communicate with each other, but "
|
||||
"they are allowed to talk to the upstream router. As described in "
|
||||
":rfc:`3069`, it is possible to allow these hosts to communicate through the "
|
||||
"upstream router by proxy_arp'ing."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:162 71b5abe710f9417abe718324e558571a
|
||||
msgid "Does not need to be used together with proxy_arp."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:164 4f78c6f9ca1c40ffbd8b6989644b2082
|
||||
msgid "This technology is known by different names:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:166 11d4c72e6ec7449fac379d34377debc0
|
||||
msgid "In :rfc:`3069` it is called VLAN Aggregation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:168 ac84a9aeb69a450bb22813c03909f368
|
||||
msgid "Cisco and Allied Telesyn call it Private VLAN"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:170 e3f4b1e106444b8eaf9bd7f830f725a5
|
||||
msgid "Hewlett-Packard call it Source-Port filtering or port-isolation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:172 911ea297c97341d4966b9d4cff837f1c
|
||||
msgid "Ericsson call it MAC-Forced Forwarding (RFC Draft)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:177 cbbbdb2c2b3946cab9a40c8f8acb9b77
|
||||
msgid ""
|
||||
"Enable policy for source validation by reversed path, as specified in "
|
||||
":rfc:`3704`. Current recommended practice in :rfc:`3704` is to enable strict"
|
||||
" mode to prevent IP spoofing from DDos attacks. If using asymmetric routing "
|
||||
"or other complicated routing, then loose mode is recommended."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:182 7700f2a8fa7240ff824903e4dff23d9c
|
||||
msgid ""
|
||||
"strict: Each incoming packet is tested against the FIB and if the interface "
|
||||
"is not the best reverse path the packet check will fail. By default failed "
|
||||
"packets are discarded."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:186 c0143891bc134edabbdcc0a78be348c2
|
||||
msgid ""
|
||||
"loose: Each incoming packet's source address is also tested against the FIB "
|
||||
"and if the source address is not reachable via any interface the packet "
|
||||
"check will fail."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:190 cc2275903b3a4186bbaccd0902bde73c
|
||||
msgid "disable: No source validation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:4 521f27630ece4e259c0a5fcaa1a7c752
|
||||
msgid ""
|
||||
":abbr:`SLAAC (Stateless Address Autoconfiguration)` :rfc:`4862`. IPv6 hosts "
|
||||
"can configure themselves automatically when connected to an IPv6 network "
|
||||
"using the Neighbor Discovery Protocol via :abbr:`ICMPv6 (Internet Control "
|
||||
"Message Protocol version 6)` router discovery messages. When first connected"
|
||||
" to a network, a host sends a link-local router solicitation multicast "
|
||||
"request for its configuration parameters; routers respond to such a request "
|
||||
"with a router advertisement packet that contains Internet Layer "
|
||||
"configuration parameters."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:12 dd3974c16c034d66bb5e7ca10146e28c
|
||||
msgid ""
|
||||
"This method automatically disables IPv6 traffic forwarding on the interface "
|
||||
"in question."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:25 fd2213b4663e474d9bbaa870b0ad11c2
|
||||
msgid ""
|
||||
":abbr:`EUI-64 (64-Bit Extended Unique Identifier)` as specified in "
|
||||
":rfc:`4291` allows a host to assign iteslf a unique 64-Bit IPv6 address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:37 3ce57f1c84814f48b1b67a4b2a720feb
|
||||
msgid "Do not assign a link-local IPv6 address to this interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:65 f085c79681904d8bab80bdff2777d466
|
||||
msgid ""
|
||||
"This command was introduced in VyOS 1.4 - it was previously called: ``set "
|
||||
"firewall options interface <name> adjust-mss6 <value>``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:68 4219dd2456994dc395ec71dca16afcd4
|
||||
msgid ""
|
||||
"MSS value = MTU - 40 (IPv6 header) - 20 (TCP header), resulting in 1432 "
|
||||
"bytes on a 1492 byte MTU."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vrf.txt:4 4a34e9b11fa44afd925bcf52a7f82b78
|
||||
msgid "Place interface in given VRF instance."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vrf.txt:6 4676b07efb6f494b99975c985855a52d
|
||||
msgid ""
|
||||
"There is an entire chapter about how to configure a :ref:`vrf`, please check"
|
||||
" this for additional information."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:41
|
||||
#: 18a6be25898f4db5a7717f929bb48040
|
||||
msgid "L2TPv3 options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:45
|
||||
#: 9bc626a7ab75448694af2d36560829f8
|
||||
msgid ""
|
||||
"Set the encapsulation type of the tunnel. Valid values for encapsulation "
|
||||
"are: udp, ip."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:48
|
||||
#: 2da504259ec446f0b458bb38483e80d4
|
||||
msgid "This defaults to UDP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:52
|
||||
#: 336d351066eb47e98e478410d30a0528
|
||||
msgid "Set the IP address of the local interface to be used for the tunnel."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:54
|
||||
#: dffb149d4a1943e3be5693211485f68e
|
||||
msgid ""
|
||||
"This address must be the address of a local interface. It may be specified "
|
||||
"as an IPv4 address or an IPv6 address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:59
|
||||
#: 443629a545b2426d9b51246454b2085c
|
||||
msgid ""
|
||||
"Set the IP address of the remote peer. It may be specified as an IPv4 "
|
||||
"address or an IPv6 address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:64
|
||||
#: 97ecc068147d42169f97590f08382641
|
||||
msgid ""
|
||||
"Set the session id, which is a 32-bit integer value. Uniquely identifies the"
|
||||
" session being created. The value used must match the peer_session_id value "
|
||||
"being used at the peer."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:70
|
||||
#: 8bad611ba2c345168c39053947c551f6
|
||||
msgid ""
|
||||
"Set the peer-session-id, which is a 32-bit integer value assigned to the "
|
||||
"session by the peer. The value used must match the session_id value being "
|
||||
"used at the peer."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:76
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:81
|
||||
#: ab4120f9461a4eb6876dafb5b12913bb 6c450221982941e583041a1368f41d0d
|
||||
msgid ""
|
||||
"Set the tunnel id, which is a 32-bit integer value. Uniquely identifies the "
|
||||
"tunnel into which the session will be created."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:86
|
||||
#: 56b231ed8c3143d49555db70fdd7bc3f
|
||||
msgid "Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:89
|
||||
#: 5e39b2768e4a4771b457b24f537a94c4
|
||||
msgid "Over IP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:105
|
||||
#: 7d268ef3a29c44a594f5686f0febe4e8
|
||||
msgid "The inverse configuration has to be applied to the remote side."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:108
|
||||
#: f0985c4e7e7c451980ba11f5b3ce3bb2
|
||||
msgid "Over UDP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:110
|
||||
#: d364aaf5fda74874a570fa02c19cb0de
|
||||
msgid "UDP mode works better with NAT:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:112
|
||||
#: 3059e0525fb649a4b0f6a74448414ca8
|
||||
msgid "Set source-address to your local IP (LAN)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:113
|
||||
#: c7b584f9e86a4242887e0ad4e5900cf9
|
||||
msgid "Add a forwarding rule matching UDP port on your internet router."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:131
|
||||
#: 650f57ef5adf4994b1dba720ee409a19
|
||||
msgid "To create more than one tunnel, use distinct UDP ports."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:135
|
||||
#: 65bd503a18ff4579ad81e37d7b21c096
|
||||
msgid "Over IPSec, L2 VPN (bridge)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:137
|
||||
#: 074562e9f51941d69ab5372475e487c3
|
||||
msgid ""
|
||||
"This is the LAN extension use case. The eth0 port of the distant VPN peers "
|
||||
"will be directly connected like if there was a switch between them."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:140
|
||||
#: 053c02da02e34ab0a45904846c00a873
|
||||
msgid "IPSec:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:168
|
||||
#: f453f04187964087880cfa6c7e02f12c
|
||||
msgid "Bridge:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/l2tpv3.rst:179
|
||||
#: c145c0fc701d4685bb3527fdabc35cd3
|
||||
msgid "L2TPv3:"
|
||||
msgstr ""
|
||||
@ -1,97 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:04+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/interfaces/loopback.rst:7
|
||||
#: 55644a7b018b4f9e83697cb41a249931
|
||||
msgid "Loopback"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/loopback.rst:9
|
||||
#: f8adf4b7ba95412ca5a6a589f2222521
|
||||
msgid ""
|
||||
"The loopback networking interface is a virtual network device implemented "
|
||||
"entirely in software. All traffic sent to it \"loops back\" and just targets"
|
||||
" services on your local machine."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/loopback.rst:13
|
||||
#: 230f7e52cc1b4dc8ba555f239060522f
|
||||
msgid ""
|
||||
"There can only be one loopback ``lo`` interface on the system. If you need "
|
||||
"multiple interfaces, please use the :ref:`dummy-interface` interface type."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/loopback.rst:17
|
||||
#: 6445f25853924a4a9dd23f3b0ea43cf5
|
||||
msgid ""
|
||||
"A lookback interface is always up, thus it could be used for management "
|
||||
"traffic or as source/destination for and :abbr:`IGP (Interior Gateway "
|
||||
"Protocol)` like :ref:`routing-bgp` so your internal BGP link is not "
|
||||
"dependent on physical link states and multiple routes can be chosen to the "
|
||||
"destination. A :ref:`dummy-interface` Interface should always be preferred "
|
||||
"over a :ref:`loopback-interface` interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/loopback.rst:26
|
||||
#: c40cbdedadf64b698cc2b823e8487c41
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/loopback.rst:29
|
||||
#: 88e688f5abae46e29d7b189e2d698eb8
|
||||
msgid "Common interface configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address.txt:3 04883830808f47caa328da33c3f772a0
|
||||
msgid ""
|
||||
"Configure interface `<interface>` with one or more interface addresses."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address.txt:6 04fa13d37f734c538cd652110c898d9a
|
||||
msgid ""
|
||||
"**address** can be specified multiple times as IPv4 and/or IPv6 address, "
|
||||
"e.g. 192.0.2.1/24 and/or 2001:db8::1/64"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address.txt:9
|
||||
#: ../../_include/interface-description.txt:7 599d98cdcccc464e834e86b57f9e82e9
|
||||
#: 097adbe514f84a78be84b483863f1e1d
|
||||
msgid "Example:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-description.txt:4 c9994bbc256a4c019fe16ea0a0f56cc6
|
||||
msgid ""
|
||||
"Set a human readable, descriptive alias for this connection. Alias is used "
|
||||
"by e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/loopback.rst:41
|
||||
#: fb00faeea21a47909b9ae10b814c8f90
|
||||
msgid "Operation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/loopback.rst:45
|
||||
#: dac70a23e95241bbbeae30a23a14d3d7
|
||||
msgid "Show brief interface information."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/loopback.rst:58
|
||||
#: 0a4d8bbfb8614138839fc7e44ecfb175
|
||||
msgid "Show detailed information on the given loopback interface `lo`."
|
||||
msgstr ""
|
||||
@ -1,755 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:04+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:7
|
||||
#: 2e5055bbbd0f42c8a64518d17a882b53
|
||||
msgid "MACsec"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:9
|
||||
#: d73b98a748ba49febca474314dab4942
|
||||
msgid ""
|
||||
"MACsec is an IEEE standard (IEEE 802.1AE) for MAC security, introduced in "
|
||||
"2006. It defines a way to establish a protocol independent connection "
|
||||
"between two hosts with data confidentiality, authenticity and/or integrity, "
|
||||
"using GCM-AES-128. MACsec operates on the Ethernet layer and as such is a "
|
||||
"layer 2 protocol, which means it's designed to secure traffic within a layer"
|
||||
" 2 network, including DHCP or ARP requests. It does not compete with other "
|
||||
"security solutions such as IPsec (layer 3) or TLS (layer 4), as all those "
|
||||
"solutions are used for their own specific use cases."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:20
|
||||
#: 0e4d47c6be1a43ad89535ec3835c9df9
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:23
|
||||
#: 3486851fad2442d5afc94c3ca4aee1e9
|
||||
msgid "Common interface configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address-with-dhcp.txt:5
|
||||
#: 8751d316a248448b97a8f28caa3abd2f
|
||||
msgid ""
|
||||
"Configure interface `<interface>` with one or more interface addresses."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address-with-dhcp.txt:7
|
||||
#: 4ea434d98ae141e9867ec3059b3f4237
|
||||
msgid ""
|
||||
"**address** can be specified multiple times as IPv4 and/or IPv6 address, "
|
||||
"e.g. 192.0.2.1/24 and/or 2001:db8::1/64"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address-with-dhcp.txt:9
|
||||
#: e622f6317ea843c5b0fe08abce9d2dae
|
||||
msgid ""
|
||||
"**dhcp** interface address is received by DHCP from a DHCP server on this "
|
||||
"segment."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address-with-dhcp.txt:11
|
||||
#: d5721cb99cbf4e6ca2e29a9b8785d506
|
||||
msgid ""
|
||||
"**dhcpv6** interface address is received by DHCPv6 from a DHCPv6 server on "
|
||||
"this segment."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address-with-dhcp.txt:14
|
||||
#: ../../_include/interface-description.txt:7
|
||||
#: ../../_include/interface-disable.txt:7
|
||||
#: ../../_include/interface-disable-flow-control.txt:19
|
||||
#: ../../_include/interface-disable-link-detect.txt:9
|
||||
#: ../../_include/interface-mac.txt:7 ../../_include/interface-mtu.txt:7
|
||||
#: ../../_include/interface-ip.txt:27 ../../_include/interface-ip.txt:50
|
||||
#: ../../_include/interface-ip.txt:144 ../../_include/interface-ipv6.txt:15
|
||||
#: ../../_include/interface-ipv6.txt:28 ../../_include/interface-ipv6.txt:39
|
||||
#: ../../_include/interface-ipv6.txt:51 ../../_include/interface-vrf.txt:9
|
||||
#: ../../_include/interface-dhcp-options.txt:10
|
||||
#: ../../_include/interface-dhcp-options.txt:22
|
||||
#: ../../_include/interface-dhcp-options.txt:34
|
||||
#: ../../_include/interface-dhcp-options.txt:46
|
||||
#: ../../_include/interface-dhcp-options.txt:57
|
||||
#: ../../_include/interface-dhcp-options.txt:72
|
||||
#: 06437c2f4cfe408c9e84a4331de8bbbf 269dc6daef1f412ebd797ba5cecb8aff
|
||||
#: 87a8b9c2d52c4762a5cb361d079eb3ff e03300e3f4f649d0ba411c4811eac739
|
||||
#: 0dc3cb15bc99417abd58bd8b33c2f549 a6aa5027bcd6401abddb0b980e27846f
|
||||
#: 067416b2c533473f874006de24383dba 04e1740c282b4ac8b8cda6f4059387e5
|
||||
#: 7cd21bf76fe3429c9f9a356cf24f8c7c 374d7f584bf34bfba10784e551745f73
|
||||
#: a154d5ee25fe4b0ab2dd3e92c072afee 7b11e439aacb4ba283d6706cf513cf60
|
||||
#: 3e530deec81940d8a0d2778f18998b99 a532ac8d2a034c1c9ce2a2fa0621c7db
|
||||
#: 0ae78fa4d7d343d6a0aa41fba2849bea 2c960c765f3a4900b2602c454c90d14d
|
||||
#: 3a609c8e2c6b4681a10873ad5c35c2d8 f329577b845e49a2a1f111b81146b39e
|
||||
#: 05843c35c6da4e4b8a62479371eba9c1 ad21fe06540f4d7cb90b4e68818ad898
|
||||
#: 916661fdbdf5473a85c0c3f329bfe949
|
||||
msgid "Example:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-description.txt:4 22afef3c31b44127956c70209e89c213
|
||||
msgid ""
|
||||
"Set a human readable, descriptive alias for this connection. Alias is used "
|
||||
"by e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable.txt:4 528a19d4df23464bad7387d43230fd91
|
||||
msgid ""
|
||||
"Disable given `<interface>`. It will be placed in administratively down "
|
||||
"(``A/D``) state."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-flow-control.txt:4
|
||||
#: 78e3477e120944f2b37ab1051345d113
|
||||
msgid ""
|
||||
"Ethernet flow control is a mechanism for temporarily stopping the "
|
||||
"transmission of data on Ethernet family computer networks. The goal of this "
|
||||
"mechanism is to ensure zero packet loss in the presence of network "
|
||||
"congestion."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-flow-control.txt:8
|
||||
#: e2f1af4fa63646dba21c300c9622a239
|
||||
msgid ""
|
||||
"The first flow control mechanism, the pause frame, was defined by the IEEE "
|
||||
"802.3x standard."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-flow-control.txt:11
|
||||
#: 160166919805423894abcb6b9eeba549
|
||||
msgid ""
|
||||
"A sending station (computer or network switch) may be transmitting data "
|
||||
"faster than the other end of the link can accept it. Using flow control, the"
|
||||
" receiving station can signal the sender requesting suspension of "
|
||||
"transmissions until the receiver catches up."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-flow-control.txt:16
|
||||
#: d4a317b5616a4dcb92e163661cdae93a
|
||||
msgid ""
|
||||
"Use this command to disable the generation of Ethernet flow control (pause "
|
||||
"frames)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-link-detect.txt:4
|
||||
#: 1add1e20c2714f5188e90613c86bca44
|
||||
msgid ""
|
||||
"Use this command to direct an interface to not detect any physical state "
|
||||
"changes on a link, for example, when the cable is unplugged."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-link-detect.txt:7
|
||||
#: 570e5cd17bfc4c5c9a3d37602ec6352d
|
||||
msgid "Default is to detects physical link state changes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-mac.txt:4 d5b3cd87e2784e14adf67f1e66bc7e5d
|
||||
msgid ""
|
||||
"Configure user defined :abbr:`MAC (Media Access Control)` address on given "
|
||||
"`<interface>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-mtu.txt:4 db34ce847b9d442e979b0eb727555539
|
||||
msgid ""
|
||||
"Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It"
|
||||
" is the size (in bytes) of the largest ethernet frame sent on this link."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:4 ../../_include/interface-ipv6.txt:60
|
||||
#: 21d19e9d7a4a4d868d446ffb45ad8541 5401986e67d84490acdecfea223726f4
|
||||
msgid ""
|
||||
"As Internet wide PMTU discovery rarely works, we sometimes need to clamp our"
|
||||
" TCP MSS value to a specific value. This is a field in the TCP options part "
|
||||
"of a SYN packet. By setting the MSS value, you are telling the remote side "
|
||||
"unequivocally 'do not try to send me packets bigger than this value'."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:9 1a612625c0554742888b94bd97ab7c19
|
||||
msgid ""
|
||||
"This command was introduced in VyOS 1.4 - it was previously called: ``set "
|
||||
"firewall options interface <name> adjust-mss <value>``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:12 1af15ba0bc70411a9b6d3fe2ec9d1329
|
||||
msgid ""
|
||||
"MSS value = MTU - 20 (IP header) - 20 (TCP header), resulting in 1452 bytes "
|
||||
"on a 1492 byte MTU."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:15 ../../_include/interface-ipv6.txt:71
|
||||
#: 93e252c0f7fa42508aace215ab27e4ef eb13c2a11ca24eed84398dc2f8ce5aca
|
||||
msgid ""
|
||||
"Instead of a numerical MSS value `clamp-mss-to-pmtu` can be used to "
|
||||
"automatically set the proper value."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:21 a505747ae7fe4a00b034e86c4a2c7b37
|
||||
msgid ""
|
||||
"Once a neighbor has been found, the entry is considered to be valid for at "
|
||||
"least for this specific time. An entry's validity will be extended if it "
|
||||
"receives positive feedback from higher level protocols."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:25 a24873a9225342f2a50988e131ab27fb
|
||||
msgid "This defaults to 30 seconds."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:36 77d963b11efb4666a7dbda53be1fb66a
|
||||
msgid ""
|
||||
"If set the kernel can respond to arp requests with addresses from other "
|
||||
"interfaces. This may seem wrong but it usually makes sense, because it "
|
||||
"increases the chance of successful communication. IP addresses are owned by "
|
||||
"the complete host on Linux, not by particular interfaces. Only for more "
|
||||
"complex setups like load-balancing, does this behaviour cause problems."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:42 ba187fb38181491ba4df460f48f18540
|
||||
msgid ""
|
||||
"If not set (default) allows you to have multiple network interfaces on the "
|
||||
"same subnet, and have the ARPs for each interface be answered based on "
|
||||
"whether or not the kernel would route a packet from the ARP'd IP out that "
|
||||
"interface (therefore you must use source based routing for this to work)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:47 29f3677deb3944c784c8c2f8ac3e4893
|
||||
msgid ""
|
||||
"In other words it allows control of which cards (usually 1) will respond to "
|
||||
"an arp request."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:59 ../../_include/interface-ipv6.txt:48
|
||||
#: 46580566b44340e180e1c8ff6654dfca 5e227fc000824cc390ec435ddd6abed4
|
||||
msgid ""
|
||||
"Configure interface-specific Host/Router behaviour. If set, the interface "
|
||||
"will switch to host mode and IPv6 forwarding will be disabled on this "
|
||||
"interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:69 734a03a9c9d445479c741bf414cc765d
|
||||
msgid ""
|
||||
"Define different modes for IP directed broadcast forwarding as described in "
|
||||
":rfc:`1812` and :rfc:`2644`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:72 b63043f49c7b460a90661cf0c68c1590
|
||||
msgid ""
|
||||
"If configured, incoming IP directed broadcast packets on this interface will"
|
||||
" be forwarded."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:75 159589d1bc404019a3b9899fa9284c19
|
||||
msgid ""
|
||||
"If this option is unset (default), incoming IP directed broadcast packets "
|
||||
"will not be forwarded."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:85 af7cc3c458a44e35acd9de1db3ec2a1c
|
||||
msgid ""
|
||||
"Define behavior for gratuitous ARP frames who's IP is not already present in"
|
||||
" the ARP table. If configured create new entries in the ARP table."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:88 de1558e075e84322b426407576c69c70
|
||||
msgid ""
|
||||
"Both replies and requests type gratuitous arp will trigger the ARP table to "
|
||||
"be updated, if this setting is on."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:91 12c38373e4b54cf48721b9a27fe497ca
|
||||
msgid ""
|
||||
"If the ARP table already contains the IP address of the gratuitous arp "
|
||||
"frame, the arp table will be updated regardless if this setting is on or "
|
||||
"off."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:101 378a427e7c374d33944b96027d9910ec
|
||||
msgid ""
|
||||
"Define different restriction levels for announcing the local source IP "
|
||||
"address from IP packets in ARP requests sent on interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:104 fa61304409294a93a95bd32624eaab7d
|
||||
msgid "Use any local address, configured on any interface if this is not set."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:106 4fd0b026f881413895bb1384fcd71350
|
||||
msgid ""
|
||||
"If configured, try to avoid local addresses that are not in the target's "
|
||||
"subnet for this interface. This mode is useful when target hosts reachable "
|
||||
"via this interface require the source IP address in ARP requests to be part "
|
||||
"of their logical network configured on the receiving interface. When we "
|
||||
"generate the request we will check all our subnets that include the target "
|
||||
"IP and will preserve the source address if it is from such subnet. If there "
|
||||
"is no such subnet we select source address according to the rules for level "
|
||||
"2."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:121 e024f2ac17c1495d81149bc9f94ad374
|
||||
msgid ""
|
||||
"Define different modes for sending replies in response to received ARP "
|
||||
"requests that resolve local target IP addresses:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:124 d789fa8f75634057b829f85f67d003fe
|
||||
msgid ""
|
||||
"If configured, reply only if the target IP address is local address "
|
||||
"configured on the incoming interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:127 b2eef40be6374f81b54869e2b41f0bea
|
||||
msgid ""
|
||||
"If this option is unset (default), reply for any local target IP address, "
|
||||
"configured on any interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:137 2ea3ef2222594abeaf1d3180b79ceb6d
|
||||
msgid ""
|
||||
"Use this command to enable proxy Address Resolution Protocol (ARP) on this "
|
||||
"interface. Proxy ARP allows an Ethernet interface to respond with its own "
|
||||
":abbr:`MAC (Media Access Control)` address to ARP requests for destination "
|
||||
"IP addresses on subnets attached to other interfaces on the system. "
|
||||
"Subsequent packets sent to those destination IP addresses are forwarded "
|
||||
"appropriately by the system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:153 8d5284157e70416ea393a5281c21a677
|
||||
msgid ""
|
||||
"Private VLAN proxy arp. Basically allow proxy arp replies back to the same "
|
||||
"interface (from which the ARP request/solicitation was received)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:156 f497f36ffbec4465b5b74dab8767fa86
|
||||
msgid ""
|
||||
"This is done to support (ethernet) switch features, like :rfc:`3069`, where "
|
||||
"the individual ports are NOT allowed to communicate with each other, but "
|
||||
"they are allowed to talk to the upstream router. As described in "
|
||||
":rfc:`3069`, it is possible to allow these hosts to communicate through the "
|
||||
"upstream router by proxy_arp'ing."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:162 43892dd27cfe436daf260c4fae43a926
|
||||
msgid "Does not need to be used together with proxy_arp."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:164 07ff120cb9484682b53103be3cc89ac7
|
||||
msgid "This technology is known by different names:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:166 94e426aa727c4672b91b5156043d8a5b
|
||||
msgid "In :rfc:`3069` it is called VLAN Aggregation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:168 70606918dbfc4d668fefa2a58fbb0c8a
|
||||
msgid "Cisco and Allied Telesyn call it Private VLAN"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:170 351974b6df6c45bca221101cd497febe
|
||||
msgid "Hewlett-Packard call it Source-Port filtering or port-isolation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:172 ea6233a921d844fca468596715013d3b
|
||||
msgid "Ericsson call it MAC-Forced Forwarding (RFC Draft)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:177 84fafe4541ac4ecfad407e4a81574a5f
|
||||
msgid ""
|
||||
"Enable policy for source validation by reversed path, as specified in "
|
||||
":rfc:`3704`. Current recommended practice in :rfc:`3704` is to enable strict"
|
||||
" mode to prevent IP spoofing from DDos attacks. If using asymmetric routing "
|
||||
"or other complicated routing, then loose mode is recommended."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:182 0411b4d24983486b9aee22041df9842c
|
||||
msgid ""
|
||||
"strict: Each incoming packet is tested against the FIB and if the interface "
|
||||
"is not the best reverse path the packet check will fail. By default failed "
|
||||
"packets are discarded."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:186 d348c799b88445208300675801f4ae9b
|
||||
msgid ""
|
||||
"loose: Each incoming packet's source address is also tested against the FIB "
|
||||
"and if the source address is not reachable via any interface the packet "
|
||||
"check will fail."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:190 e8474f2419544aa5908e89e436a83810
|
||||
msgid "disable: No source validation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:4 80f45edf9dfc49a9bb5f46058c9a92ac
|
||||
msgid ""
|
||||
":abbr:`SLAAC (Stateless Address Autoconfiguration)` :rfc:`4862`. IPv6 hosts "
|
||||
"can configure themselves automatically when connected to an IPv6 network "
|
||||
"using the Neighbor Discovery Protocol via :abbr:`ICMPv6 (Internet Control "
|
||||
"Message Protocol version 6)` router discovery messages. When first connected"
|
||||
" to a network, a host sends a link-local router solicitation multicast "
|
||||
"request for its configuration parameters; routers respond to such a request "
|
||||
"with a router advertisement packet that contains Internet Layer "
|
||||
"configuration parameters."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:12 ace3f3fa32604d78abd7010e1b9cdeed
|
||||
msgid ""
|
||||
"This method automatically disables IPv6 traffic forwarding on the interface "
|
||||
"in question."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:25 5bbb09d0b14c41648b95900cadba40b1
|
||||
msgid ""
|
||||
":abbr:`EUI-64 (64-Bit Extended Unique Identifier)` as specified in "
|
||||
":rfc:`4291` allows a host to assign iteslf a unique 64-Bit IPv6 address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:37 22229373557b481080e294ba5eb23a3b
|
||||
msgid "Do not assign a link-local IPv6 address to this interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:65 4f6d0b65061243e691ba12f9a7429264
|
||||
msgid ""
|
||||
"This command was introduced in VyOS 1.4 - it was previously called: ``set "
|
||||
"firewall options interface <name> adjust-mss6 <value>``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:68 9932c01917f94c91a6cdb69a6c4f9e77
|
||||
msgid ""
|
||||
"MSS value = MTU - 40 (IPv6 header) - 20 (TCP header), resulting in 1432 "
|
||||
"bytes on a 1492 byte MTU."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vrf.txt:4 071ce023f4c74493b4d59b66d526aa11
|
||||
msgid "Place interface in given VRF instance."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vrf.txt:6 0e55454b89ff467199c3ce3c971be684
|
||||
msgid ""
|
||||
"There is an entire chapter about how to configure a :ref:`vrf`, please check"
|
||||
" this for additional information."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-common-with-dhcp.txt:9
|
||||
#: 5648a890403d4783872c22980ff917bd
|
||||
msgid "**DHCP(v6)**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcp-options.txt:4
|
||||
#: e11aabb27ee845e99189b9aab87e66a9
|
||||
msgid ""
|
||||
":rfc:`2131` states: The client MAY choose to explicitly provide the "
|
||||
"identifier through the 'client identifier' option. If the client supplies a "
|
||||
"'client identifier', the client MUST use the same 'client identifier' in all"
|
||||
" subsequent messages, and the server MUST use that identifier to identify "
|
||||
"the client."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcp-options.txt:19
|
||||
#: bf2b6dee7ff648ddad300c38ae4df749
|
||||
msgid ""
|
||||
"Instead of sending the real system hostname to the DHCP server, overwrite "
|
||||
"the host-name with this given-value."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcp-options.txt:31
|
||||
#: f5a2003de78145c781a18e67d1d0f23c
|
||||
msgid ""
|
||||
"The vendor-class-id option can be used to request a specific class of vendor"
|
||||
" options from the server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcp-options.txt:43
|
||||
#: 1e8f1cc4cf9340a48bd7ae8da278d69e
|
||||
msgid ""
|
||||
"Only request an address from the DHCP server but do not request a default "
|
||||
"gateway."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcp-options.txt:55
|
||||
#: 07a7c11083d4461a9cba42bdbad72846
|
||||
msgid "Set the distance for the default gateway sent by the DHCP server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcp-options.txt:66
|
||||
#: 5628888167354514897413213275f049
|
||||
msgid ""
|
||||
"Reject DHCP leases from a given address or range. This is useful when a "
|
||||
"modem gives a local IP when first starting."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcp-options.txt:69
|
||||
#: e431d22b4e5140138f01e26ecc21e51d
|
||||
msgid ""
|
||||
"**address** can be specified multiple times, e.g. 192.168.100.1 and/or "
|
||||
"192.168.100.0/24"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-options.txt:4
|
||||
#: a1f44b38db70478bafd74d8ad59d11a5
|
||||
msgid ""
|
||||
"The DHCP unique identifier (DUID) is used by a client to get an IP address "
|
||||
"from a DHCPv6 server. It has a 2-byte DUID type field, and a variable-length"
|
||||
" identifier field up to 128 bytes. Its actual length depends on its type. "
|
||||
"The server compares the DUID with its database and delivers configuration "
|
||||
"data (address, lease times, DNS servers, etc.) to the client."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-options.txt:17
|
||||
#: 3f0dfb732df244e4a2552cac26168716
|
||||
msgid ""
|
||||
"This statement specifies dhcp6c to only exchange informational configuration"
|
||||
" parameters with servers. A list of DNS server addresses is an example of "
|
||||
"such parameters. This statement is useful when the client does not need "
|
||||
"stateful configuration parameters such as IPv6 addresses or prefixes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-options.txt:29
|
||||
#: 304aa980a5bc41519efd9226fe2cace7
|
||||
msgid ""
|
||||
"When rapid-commit is specified, dhcp6c will include a rapid-commit option in"
|
||||
" solicit messages and wait for an immediate reply instead of advertisements."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-options.txt:39
|
||||
#: b05b3017f8ce49fb999f3010d88a8412
|
||||
msgid ""
|
||||
"Request only a temporary address and not form an IA_NA (Identity Association"
|
||||
" for Non-temporary Addresses) partnership."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1
|
||||
#: 891e4c1bdac042c5b5812d91ea44bbc2
|
||||
msgid "**DHCPv6 Prefix Delegation (PD)**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:3
|
||||
#: 565b0a36d3294d1292c3aa1a75995850
|
||||
msgid ""
|
||||
"VyOS 1.3 (equuleus) supports DHCPv6-PD (:rfc:`3633`). DHCPv6 Prefix "
|
||||
"Delegation is supported by most ISPs who provide native IPv6 for consumers "
|
||||
"on fixed networks."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:10
|
||||
#: 89b4f6dc97654604a8c145da2457fd8a
|
||||
msgid ""
|
||||
"Some ISPs by default only delegate a /64 prefix. To request for a specific "
|
||||
"prefix size use this option to request for a bigger delegation for this pd "
|
||||
"`<id>`. This value is in the range from 32 - 64 so you could request up to a"
|
||||
" /32 prefix (if your ISP allows this) down to a /64 delegation."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:15
|
||||
#: 3009eb83996b443ba1a0abfadb1f2c83
|
||||
msgid "The default value corresponds to 64."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:17
|
||||
#: a2e7662a772841a0ab67356f3bc2282c
|
||||
msgid "To request a /56 prefix from your ISP use:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:27
|
||||
#: 9a640ad9e4ac47fc80607e18143b9338
|
||||
msgid ""
|
||||
"Specify the interface address used locally on the interface where the prefix"
|
||||
" has been delegated to. ID must be a decimal integer."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:30
|
||||
#: aa52a825eec6448097f16fabbfa72e74
|
||||
msgid ""
|
||||
"It will be combined with the delegated prefix and the sla-id to form a "
|
||||
"complete interface address. The default is to use the EUI-64 address of the "
|
||||
"interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:36
|
||||
#: 83da7580f03d40d094eb536a65218e03
|
||||
msgid ""
|
||||
"Example: Delegate a /64 prefix to interface eth8 which will use a local "
|
||||
"address on this router of ``<prefix>::ffff``, as the address 65534 will "
|
||||
"correspond to ``ffff`` in hexadecimal notation."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:50
|
||||
#: a8e6407d4ec047c18679917baf7f9c0b
|
||||
msgid ""
|
||||
"Specify the identifier value of the site-level aggregator (SLA) on the "
|
||||
"interface. ID must be a decimal number greater then 0 which fits in the "
|
||||
"length of SLA IDs (see below)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:54
|
||||
#: 824ba646f74c4647b6a12ee920c3a31c
|
||||
msgid ""
|
||||
"Example: If ID is 1 and the client is delegated an IPv6 prefix "
|
||||
"2001:db8:ffff::/48, dhcp6c will combine the two values into a single IPv6 "
|
||||
"prefix, 2001:db8:ffff:1::/64, and will configure the prefix on the specified"
|
||||
" interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:30
|
||||
#: 28e43e4c2347477e8aedeffa0eeb283c
|
||||
msgid "MACsec options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:34
|
||||
#: 6e6ea53962fa40dc95fbea88bb89c8f3
|
||||
msgid ""
|
||||
"Select cipher suite used for cryptographic operations. This setting is "
|
||||
"mandatory."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:39
|
||||
#: 980c197f21d54ede9f33e94ae960d9ac
|
||||
msgid ""
|
||||
"MACsec only provides authentication by default, encryption is optional. This"
|
||||
" command will enable encryption for all outgoing packets."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:44
|
||||
#: 81ae2e7401c244c5b8cbb9151ec7b128
|
||||
msgid ""
|
||||
"A physical interface is required to connect this MACsec instance to. Traffic"
|
||||
" leaving this interface will now be authenticated/encrypted."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:48
|
||||
#: e43d4cf09b6846d39b37d9b3103547d7
|
||||
msgid "Key Management"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:50
|
||||
#: 105a3fe45bfd4c258668c4bb300e79ce
|
||||
msgid ""
|
||||
":abbr:`MKA (MACsec Key Agreement protocol)` is used to synchronize keys "
|
||||
"between individual peers."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:55
|
||||
#: 55c4d4cd0a0c4de18bccdae3f25a923a
|
||||
msgid ""
|
||||
"IEEE 802.1X/MACsec pre-shared key mode. This allows configuring MACsec with "
|
||||
"a pre-shared key using a :abbr:`CAK (MACsec connectivity association key)` "
|
||||
"and :abbr:`CKN (MACsec connectivity association name)` pair."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:61
|
||||
#: 0285c48be69c433292ed76f4a50d1475
|
||||
msgid ":abbr:`CKN (MACsec connectivity association name)` key"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:65
|
||||
#: eefa15dec5604ccdb56c037c43c4794b
|
||||
msgid ""
|
||||
"The peer with lower priority will become the key server and start "
|
||||
"distributing SAKs."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:69
|
||||
#: fb1f4822b75843caa708ff6a59edc8f0
|
||||
msgid "Replay protection"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:73
|
||||
#: ce3ecb05a5e04e0ebfe34699c579170c
|
||||
msgid ""
|
||||
"IEEE 802.1X/MACsec replay protection window. This determines a window in "
|
||||
"which replay is tolerated, to allow receipt of frames that have been "
|
||||
"misordered by the network."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:77
|
||||
#: 51ac299d65e64cc28206e7d43d6994ff
|
||||
msgid "``0``: No replay window, strict check"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:78
|
||||
#: d2c2a2c9df8143f8a3ecf728454d888b
|
||||
msgid "``1-4294967295``: Number of packets that could be misordered"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:82
|
||||
#: 8d20b736031e439ea73a8741c61bdab6
|
||||
msgid "Operation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:86
|
||||
#: 9c25c3f946c24608994c201237df822d
|
||||
msgid ""
|
||||
"Generate :abbr:`MKA (MACsec Key Agreement protocol)` CAK key 128 or 256 "
|
||||
"bits."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:95
|
||||
#: 46bc8631094e42499b94c12a1d2153f7
|
||||
msgid "Generate :abbr:`MKA (MACsec Key Agreement protocol)` CAK key."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:104
|
||||
#: d31d415763a7452395fe592d870ac863
|
||||
msgid "List all MACsec interfaces."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:118
|
||||
#: 4235e0d04b1f4853a2e6182df25d9c86
|
||||
msgid "Show specific MACsec interface information"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:129
|
||||
#: ced335e1a9394ae7893be1481e04e087
|
||||
msgid "Examples"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:131
|
||||
#: 2649b8b5966c4936bec7f88b2a831c83
|
||||
msgid "Two routers connected both via eth1 through an untrusted switch"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:132
|
||||
#: 2383a835685440f49157408ebe6b782d
|
||||
msgid "R1 has 192.0.2.1/24 & 2001:db8::1/64"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:133
|
||||
#: 254f4d17217c475ab070b2467aaadcfe
|
||||
msgid "R2 has 192.0.2.2/24 & 2001:db8::2/64"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:135
|
||||
#: 0d435b68f5104bcd9ccca68dbcb4057c
|
||||
msgid "**R1**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:147
|
||||
#: 0d287f9e8ee74d538ec16fd0afbaf75d
|
||||
msgid "**R2**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:159
|
||||
#: 4cc62649c7654b7b925bff23a92c3ad7
|
||||
msgid ""
|
||||
"Pinging (IPv6) the other host and intercepting the traffic in ``eth1`` will "
|
||||
"show you the content is encrypted."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/macsec.rst:175
|
||||
#: fd620090261d4cc4992b6d8cdaa15ec8
|
||||
msgid ""
|
||||
"Disabling the encryption on the link by removing ``security encrypt`` will "
|
||||
"show the unencrypted but authenticated content."
|
||||
msgstr ""
|
||||
@ -1,616 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:04+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:7
|
||||
#: 49a4e313af8b47da8d0c2c000d721255
|
||||
msgid "OpenVPN"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:9
|
||||
#: 24c641c02ee1432b85457380d5a9442e
|
||||
msgid ""
|
||||
"Traditionally hardware routers implement IPsec exclusively due to relative "
|
||||
"ease of implementing it in hardware and insufficient CPU power for doing "
|
||||
"encryption in software. Since VyOS is a software router, this is less of a "
|
||||
"concern. OpenVPN has been widely used on UNIX platform for a long time and "
|
||||
"is a popular option for remote access VPN, though it's also capable of site-"
|
||||
"to-site connections."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:16
|
||||
#: 8705ef07eb7c4133898d4093647e1e6e
|
||||
msgid "Advantages of OpenVPN are:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:18
|
||||
#: 700f4b6c11f74f3aadff507e7d8fa925
|
||||
msgid ""
|
||||
"It uses a single TCP or UDP connection and does not rely on packet source "
|
||||
"addresses, so it will work even through a double NAT: perfect for public "
|
||||
"hotspots and such"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:22
|
||||
#: 698154b399704e69872d5e27747d0c47
|
||||
msgid "It's easy to setup and offers very flexible split tunneling"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:24
|
||||
#: 79100fbc787946c29e00895de9a6cce2
|
||||
msgid "There's a variety of client GUI frontends for any platform"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:26
|
||||
#: e023bf4ba8eb42e2a917425162c2fb05
|
||||
msgid "Disadvantages are:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:28
|
||||
#: c03b6c6fdace492db97013b65896e7ff
|
||||
msgid ""
|
||||
"It's slower than IPsec due to higher protocol overhead and the fact it runs "
|
||||
"in user mode while IPsec, on Linux, is in kernel mode"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:31
|
||||
#: 1f713d3a0e7745159c65166081a76f37
|
||||
msgid ""
|
||||
"None of the operating systems have client software installed by default"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:33
|
||||
#: 6285fb18d721436593aa4e1da721f476
|
||||
msgid ""
|
||||
"In the VyOS CLI, a key point often overlooked is that rather than being "
|
||||
"configured using the `set vpn` stanza, OpenVPN is configured as a network "
|
||||
"interface using `set interfaces openvpn`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:39
|
||||
#: ed41362196c84a52b4a00426cb2ea4d7
|
||||
msgid "Site-to-Site"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:43
|
||||
#: a42219859326463ebc9da64095f2cade
|
||||
msgid ""
|
||||
"While many are aware of OpenVPN as a Client VPN solution, it is often "
|
||||
"overlooked as a site-to-site VPN solution due to lack of support for this "
|
||||
"mode in many router platforms."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:47
|
||||
#: b35c1ae6e30441548999d4badacc81bb
|
||||
msgid ""
|
||||
"Site-to-site mode supports x.509 but doesn't require it and can also work "
|
||||
"with static keys, which is simpler in many cases. In this example, we'll "
|
||||
"configure a simple site-to-site OpenVPN tunnel using a 2048-bit pre-shared "
|
||||
"key."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:51
|
||||
#: d9b2fd8cf2a24b1f9b5e3c8259826240
|
||||
msgid ""
|
||||
"First, one of the systems generate the key using the :ref:`generate pki "
|
||||
"openvpn shared-secret<configuration/pki/index:pki>` command. Once generated,"
|
||||
" you will need to install this key on the local system, then copy and "
|
||||
"install this key to the remote router."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:55
|
||||
#: 2ea4c91c77e94f3e9c0972c6550484e1
|
||||
msgid ""
|
||||
"In our example, we used the key name ``openvpn-1`` which we will reference "
|
||||
"in our configuration."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:58
|
||||
#: ae8ce996d0764647b187fa432ab5da73
|
||||
msgid ""
|
||||
"The public IP address of the local side of the VPN will be 198.51.100.10."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:59
|
||||
#: fd9f2b1633cf4882b0fe035111d5015d
|
||||
msgid ""
|
||||
"The public IP address of the remote side of the VPN will be 203.0.113.11."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:60
|
||||
#: 8fb58cd1d9e54b9f84f450766236f4b1
|
||||
msgid ""
|
||||
"The tunnel will use 10.255.1.1 for the local IP and 10.255.1.2 for the "
|
||||
"remote."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:61
|
||||
#: 2f7dd832268b45b8978f378358855280
|
||||
msgid "The local site will have a subnet of 10.0.0.0/16."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:62
|
||||
#: e7fd5219fca14a3c921fd7865e877a2b
|
||||
msgid "The remote site will have a subnet of 10.1.0.0/16."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:63
|
||||
#: cda1b065f9ae40b29f5ab53a0575ee26
|
||||
msgid ""
|
||||
"Static Routing or other dynamic routing protocols can be used over the vtun "
|
||||
"interface"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:64
|
||||
#: 59ba809b2f984230860ef133ce4431d2
|
||||
msgid ""
|
||||
"OpenVPN allows for either TCP or UDP. UDP will provide the lowest latency, "
|
||||
"while TCP will work better for lossy connections; generally UDP is preferred"
|
||||
" when possible."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:67
|
||||
#: 2645ab57ec6949ed8728b1215eb4ed0d
|
||||
msgid ""
|
||||
"The official port for OpenVPN is 1194, which we reserve for client VPN; we "
|
||||
"will use 1195 for site-to-site VPN."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:69
|
||||
#: 761526d038c44f7cbe439eca6cf24a95
|
||||
msgid ""
|
||||
"The ``persistent-tunnel`` directive will allow us to configure tunnel-"
|
||||
"related attributes, such as firewall policy as we would on any normal "
|
||||
"network interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:72
|
||||
#: b18e504b82d446169c94dd325823b185
|
||||
msgid ""
|
||||
"If known, the IP of the remote router can be configured using the ``remote-"
|
||||
"host`` directive; if unknown, it can be omitted. We will assume a dynamic IP"
|
||||
" for our remote router."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:77
|
||||
#: ../../configuration/interfaces/openvpn.rst:189
|
||||
#: cab68ffde37744b59d4cd0a1e0f0d850 422a662d43c6473daa8e0d2cf92dc34e
|
||||
msgid "Local Configuration:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:96
|
||||
#: db11f80ff5394719aa58ffe0dd9a501b
|
||||
msgid "Local Configuration - Annotated:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:120
|
||||
#: ../../configuration/interfaces/openvpn.rst:195
|
||||
#: b7a3e0e2c3e543bb8d8eff8dd7d5e827 340bb3b25c7a4fce958d9e3fb4444318
|
||||
msgid "Remote Configuration:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:137
|
||||
#: e65f707bda204e099463092bf0f8c303
|
||||
msgid "Remote Configuration - Annotated:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:157
|
||||
#: 53eb821bc2c3458cb52668c7de2a18ec
|
||||
msgid "Firewall Exceptions"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:159
|
||||
#: 385eabf716fc469cb21a61b025282f1e
|
||||
msgid ""
|
||||
"For the OpenVPN traffic to pass through the WAN interface, you must create a"
|
||||
" firewall exception."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:175
|
||||
#: 7a1560761c4e4744a421fd7c5e03c7f0
|
||||
msgid ""
|
||||
"You should also ensure that the OUTISDE_LOCAL firewall group is applied to "
|
||||
"the WAN interface and a direction (local)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:183
|
||||
#: 12bceb7181f6434bb48414f2e893a3e2
|
||||
msgid "Static Routing:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:185
|
||||
#: 2940b3f164b34fccbe2ed317b8aae081
|
||||
msgid ""
|
||||
"Static routes can be configured referencing the tunnel interface; for "
|
||||
"example, the local router will use a network of 10.0.0.0/16, while the "
|
||||
"remote has a network of 10.1.0.0/16:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:201
|
||||
#: 66ff84e8e5e34de0b0c132a7dff8cf1f
|
||||
msgid ""
|
||||
"The configurations above will default to using 256-bit AES in GCM mode for "
|
||||
"encryption (if both sides support NCP) and SHA-1 for HMAC authentication. "
|
||||
"SHA-1 is considered weak, but other hashing algorithms are available, as are"
|
||||
" encryption algorithms:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:206
|
||||
#: 0b31ab06453141d3b6ba4c441611568c
|
||||
msgid "For Encryption:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:208
|
||||
#: 86ee9217a4a140728b9e88421d7d86d1
|
||||
msgid ""
|
||||
"This sets the cipher when NCP (Negotiable Crypto Parameters) is disabled or "
|
||||
"OpenVPN version < 2.4.0."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:226
|
||||
#: 7b9425a5391b45ee88f872989ebcebbc
|
||||
msgid ""
|
||||
"This sets the accepted ciphers to use when version => 2.4.0 and NCP is "
|
||||
"enabled (which is the default). Default NCP cipher for versions >= 2.4.0 is "
|
||||
"aes256gcm. The first cipher in this list is what server pushes to clients."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:243
|
||||
#: daaa5904c30b4f09bc8fbaa49b7f42a9
|
||||
msgid "For Hashing:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:254
|
||||
#: 14ce402c4f214056990108c250a7089e
|
||||
msgid ""
|
||||
"If you change the default encryption and hashing algorithms, be sure that "
|
||||
"the local and remote ends have matching configurations, otherwise the tunnel"
|
||||
" will not come up."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:259
|
||||
#: 66053eddf2e6491c8f739135a27ce02a
|
||||
msgid ""
|
||||
"Firewall policy can also be applied to the tunnel interface for `local`, "
|
||||
"`in`, and `out` directions and functions identically to ethernet interfaces."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:262
|
||||
#: 5bb0689956194c29a85595b417e6f716
|
||||
msgid ""
|
||||
"If making use of multiple tunnels, OpenVPN must have a way to distinguish "
|
||||
"between different tunnels aside from the pre-shared-key. This is either by "
|
||||
"referencing IP address or port number. One option is to dedicate a public IP"
|
||||
" to each tunnel. Another option is to dedicate a port number to each tunnel "
|
||||
"(e.g. 1195,1196,1197...)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:268
|
||||
#: be7b2b4173ad4394a99d325856c10d8c
|
||||
msgid ""
|
||||
"OpenVPN status can be verified using the `show openvpn` operational "
|
||||
"commands. See the built-in help for a complete list of options."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:273
|
||||
#: e60ff00a9fdf4f2f81f109d6e3ad2d68
|
||||
msgid "Server"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:275
|
||||
#: 09af881109e046fca4c58f1633df9d69
|
||||
msgid ""
|
||||
"Multi-client server is the most popular OpenVPN mode on routers. It always "
|
||||
"uses x.509 authentication and therefore requires a PKI setup. Refer this "
|
||||
"topic :ref:`configuration/pki/index:pki` to generate a CA certificate, a "
|
||||
"server certificate and key, a certificate revocation list, a Diffie-Hellman "
|
||||
"key exchange parameters file. You do not need client certificates and keys "
|
||||
"for the server setup."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:282
|
||||
#: f37e123fc5194cb19176aa1503a58ab2
|
||||
msgid ""
|
||||
"In this example we will use the most complicated case: a setup where each "
|
||||
"client is a router that has its own subnet (think HQ and branch offices), "
|
||||
"since simpler setups are subsets of it."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:286
|
||||
#: e837488cac2d48ef82c0c2e27488c653
|
||||
msgid ""
|
||||
"Suppose you want to use 10.23.1.0/24 network for client tunnel endpoints and"
|
||||
" all client subnets belong to 10.23.0.0/20. All clients need access to the "
|
||||
"192.168.0.0/16 network."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:290
|
||||
#: 8dfced3dc81d4ffab1643fdf9b8f15a6
|
||||
msgid ""
|
||||
"First we need to specify the basic settings. 1194/UDP is the default. The "
|
||||
"``persistent-tunnel`` option is recommended, it prevents the TUN/TAP device "
|
||||
"from closing on connection resets or daemon reloads."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:294
|
||||
#: 29480370e25846f3ad3820a8d19f0b45
|
||||
msgid ""
|
||||
"Using **openvpn-option -reneg-sec** can be tricky. This option is used to "
|
||||
"renegotiate data channel after n seconds. When used at both server and "
|
||||
"client, the lower value will trigger the renegotiation. If you set it to 0 "
|
||||
"on one side of the connection (to disable it), the chosen value on the other"
|
||||
" side will determine when the renegotiation will occur."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:307
|
||||
#: 57b1113e85e24c5dbae5ca745935c57b
|
||||
msgid ""
|
||||
"Then we need to generate, add and specify the names of the cryptographic "
|
||||
"materials. Each of the install command should be applied to the "
|
||||
"configuration and commited before using under the openvpn interface "
|
||||
"configuration."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:333
|
||||
#: 756b20926c26490bb8249155d68b413e
|
||||
msgid ""
|
||||
"Now we need to specify the server network settings. In all cases we need to "
|
||||
"specify the subnet for client tunnel endpoints. Since we want clients to "
|
||||
"access a specific network behind our router, we will use a push-route option"
|
||||
" for installing that route on clients."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:343
|
||||
#: abac85d1dbfd4f75aca8ae2ec0d8817a
|
||||
msgid ""
|
||||
"Since it's a HQ and branch offices setup, we will want all clients to have "
|
||||
"fixed addresses and we will route traffic to specific subnets through them. "
|
||||
"We need configuration for each client to achieve this."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:347
|
||||
#: 7479a7ab758f42569c8c44c4b9529576
|
||||
msgid ""
|
||||
"Clients are identified by the CN field of their x.509 certificates, in this "
|
||||
"example the CN is ``client0``:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:355
|
||||
#: d5b2801f47644e74a5b916d60c828783
|
||||
msgid ""
|
||||
"OpenVPN **will not** automatically create routes in the kernel for client "
|
||||
"subnets when they connect and will only use client-subnet association "
|
||||
"internally, so we need to create a route to the 10.23.0.0/20 network "
|
||||
"ourselves:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:363
|
||||
#: e5c52c8f69554323bdaf973188ccc9f7
|
||||
msgid ""
|
||||
"Additionally, each client needs a copy of ca cert and its own client key and"
|
||||
" cert files. The files are plaintext so they may be copied either manually "
|
||||
"from the CLI. Client key and cert files should be signed with the proper ca "
|
||||
"cert and generated on the server side."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:368
|
||||
#: 29182698394c4432aee0199abc60a1e6
|
||||
msgid ""
|
||||
"HQ's router requires the following steps to generate crypto materials for "
|
||||
"the Branch 1:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:376
|
||||
#: a554a86bd32a4c0784d62d3ec50adc1c
|
||||
msgid "Branch 1's router might have the following lines:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:388
|
||||
#: 17b4887e99374bc88d6fce86f4597621
|
||||
msgid "Client Authentication"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:391
|
||||
#: 038d555a70b04bdaa7ae87f8bf995ef2
|
||||
msgid "LDAP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:393
|
||||
#: 5130e1cebbb64b4ba444fc9787f21e10
|
||||
msgid ""
|
||||
"Enterprise installations usually ship a kind of directory service which is "
|
||||
"used to have a single password store for all employees. VyOS and OpenVPN "
|
||||
"support using LDAP/AD as single user backend."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:397
|
||||
#: e8644bf4cc7a47b1a409d1d182f8ce5b
|
||||
msgid ""
|
||||
"Authentication is done by using the ``openvpn-auth-ldap.so`` plugin which is"
|
||||
" shipped with every VyOS installation. A dedicated configuration file is "
|
||||
"required. It is best practise to store it in ``/config`` to survive image "
|
||||
"updates"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:406
|
||||
#: 38b8b68dc305461d9b94b4333ba7a068
|
||||
msgid "The required config file may look like this:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:431
|
||||
#: ee85ab9fe267488d88f9b2600b6b5704
|
||||
msgid "Active Directory"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:433
|
||||
#: a33ecf0d70df4755838c5f71752619f4
|
||||
msgid "Despite the fact that AD is a superset of LDAP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:466
|
||||
#: 82ab9b1c8177477face38193289304c3
|
||||
msgid ""
|
||||
"If you only want to check if the user account is enabled and can "
|
||||
"authenticate (against the primary group) the following snipped is "
|
||||
"sufficient:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:486
|
||||
#: 8f3869732b8e4cf9b4591d6ca13d3019
|
||||
msgid ""
|
||||
"A complete LDAP auth OpenVPN configuration could look like the following "
|
||||
"example:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:518
|
||||
#: 1e0aabccc72f4098bfcb6523647e7c17
|
||||
msgid "Client"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:520
|
||||
#: 0b1a28801b7143179e523d004c3a857e
|
||||
msgid ""
|
||||
"VyOS can not only act as an OpenVPN site-to-site or server for multiple "
|
||||
"clients. You can indeed also configure any VyOS OpenVPN interface as an "
|
||||
"OpenVPN client connecting to a VyOS OpenVPN server or any other OpenVPN "
|
||||
"server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:524
|
||||
#: 13dabeeafa784b0aa98cdd5dbf5f8c31
|
||||
msgid ""
|
||||
"Given the following example we have one VyOS router acting as OpenVPN server"
|
||||
" and another VyOS router acting as OpenVPN client. The server also pushes a "
|
||||
"static client IP address to the OpenVPN client. Remember, clients are "
|
||||
"identified using their CN attribute in the SSL certificate."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:532
|
||||
#: 2c6ec6c8ba11405e8461a988a327f20b
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:535
|
||||
#: c00ac5ce2f5b4682b9673b07cf934904
|
||||
msgid "Server Side"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:561
|
||||
#: f312f23678d542d49dc29fe8450f29b3
|
||||
msgid "Client Side"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:578
|
||||
#: 4fedcc73e58942e3828a272f9e3fa7ee
|
||||
msgid "Options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:580
|
||||
#: 31005d6f9b9e458e8c083b953b5c4035
|
||||
msgid ""
|
||||
"We do not have CLI nodes for every single OpenVPN option. If an option is "
|
||||
"missing, a feature request should be opened at Phabricator_ so all users can"
|
||||
" benefit from it (see :ref:`issues_features`)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:584
|
||||
#: 03ab237055d04a219aa83a19cac07c45
|
||||
msgid ""
|
||||
"If you are a hacker or want to try on your own we support passing raw "
|
||||
"OpenVPN options to OpenVPN."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:589
|
||||
#: 6dbea9b586f14267ac370fa56a7804e7
|
||||
msgid ""
|
||||
"Will add ``persistent-key`` at the end of the generated OpenVPN "
|
||||
"configuration. Please use this only as last resort - things might break and "
|
||||
"OpenVPN won't start if you pass invalid options/syntax."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:596
|
||||
#: 34f3fbe8e4694912bcad8926f2ead50d
|
||||
msgid "Will add ``push \"keepalive 1 10\"`` to the generated OpenVPN config file."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:598
|
||||
#: 284f24a2c99b4c14b28c475cc994e2c3
|
||||
msgid ""
|
||||
"Sometimes option lines in the generated OpenVPN configuration require "
|
||||
"quotes. This is done through a hack on our config generator. You can pass "
|
||||
"quotes using the ``"`` statement."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:604
|
||||
#: 55725e1e11cd4fad85c13e48ab226eba
|
||||
msgid "Troubleshooting"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:606
|
||||
#: a2ed69794d954f78af215653514b9e26
|
||||
msgid "VyOS provides some operational commands on OpenVPN."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:609
|
||||
#: f927ebdf8c6f4e92924f5a0217e5f83f
|
||||
msgid "Check status"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:611
|
||||
#: 2525426e9a4844e4b47378ebf5fc6df3
|
||||
msgid "The following commands let you check tunnel status."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:615
|
||||
#: a440cc7591184a83b546cb32682bcc18
|
||||
msgid ""
|
||||
"Use this command to check the tunnel status for OpenVPN client interfaces."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:619
|
||||
#: 1ffd21f37b644e5582d05a98d86b7d07
|
||||
msgid ""
|
||||
"Use this command to check the tunnel status for OpenVPN server interfaces."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:623
|
||||
#: 545e3d4311594d858c3ce957784e1eb3
|
||||
msgid ""
|
||||
"Use this command to check the tunnel status for OpenVPN site-to-site "
|
||||
"interfaces."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:628
|
||||
#: b815ea96d89c452aaa7b1d2f14102780
|
||||
msgid "Reset OpenVPN"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:630
|
||||
#: 75698dec800d40c5a8feb3bc9e05a4eb
|
||||
msgid "The following commands let you reset OpenVPN."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:634
|
||||
#: 43f4e02ebf12449d84b4b2dd81e2c681
|
||||
msgid "Use this command to reset the specified OpenVPN client."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/openvpn.rst:638
|
||||
#: f4620017a238485c9f6e21a5ef43663f
|
||||
msgid "Use this command to reset the OpenVPN process on a specific interface."
|
||||
msgstr ""
|
||||
@ -1,568 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:04+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:7 d53d4b6baa8f44edb70ccf76be15b863
|
||||
msgid "PPPoE"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:9 6abb75ee77db4427ad8ac8beef0923cd
|
||||
msgid ""
|
||||
":abbr:`PPPoE (Point-to-Point Protocol over Ethernet)` is a network protocol "
|
||||
"for encapsulating PPP frames inside Ethernet frames. It appeared in 1999, in"
|
||||
" the context of the boom of DSL as the solution for tunneling packets over "
|
||||
"the DSL connection to the :abbr:`ISPs (Internet Service Providers)` IP "
|
||||
"network, and from there to the rest of the Internet. A 2005 networking book "
|
||||
"noted that \"Most DSL providers use PPPoE, which provides authentication, "
|
||||
"encryption, and compression.\" Typical use of PPPoE involves leveraging the "
|
||||
"PPP facilities for authenticating the user with a username and password, "
|
||||
"predominately via the PAP protocol and less often via CHAP."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:21
|
||||
#: 9721c90abdef4f86a951abef8c4ea4aa
|
||||
msgid "Operating Modes"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:23
|
||||
#: 82ff5d414c124c64b356619926f5fa1d
|
||||
msgid ""
|
||||
"VyOS supports setting up PPPoE in two different ways to a PPPoE internet "
|
||||
"connection. This is because most ISPs provide a modem that is also a "
|
||||
"wireless router."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:28
|
||||
#: 5902b3f8635d49379a76467ff5a8836f
|
||||
msgid "Home Users"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:30
|
||||
#: 00431be2df4c4c6fbdbeb474e80bcdbf
|
||||
msgid ""
|
||||
"In this method, the DSL Modem/Router connects to the ISP for you with your "
|
||||
"credentials preprogrammed into the device. This gives you an :rfc:`1918` "
|
||||
"address, such as ``192.168.1.0/24`` by default."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:34
|
||||
#: 4c9e9aa580c64e22a0d67f1ceffeed37
|
||||
msgid ""
|
||||
"For a simple home network using just the ISP's equipment, this is usually "
|
||||
"desirable. But if you want to run VyOS as your firewall and router, this "
|
||||
"will result in having a double NAT and firewall setup. This results in a few"
|
||||
" extra layers of complexity, particularly if you use some NAT or tunnel "
|
||||
"features."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:41
|
||||
#: 1dd23f7efa6940d8bf16457d59d026fd
|
||||
msgid "Business Users"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:43
|
||||
#: 184d373652de4d7b8d6320520367cb01
|
||||
msgid ""
|
||||
"In order to have full control and make use of multiple static public IP "
|
||||
"addresses, your VyOS will have to initiate the PPPoE connection and control "
|
||||
"it. In order for this method to work, you will have to figure out how to "
|
||||
"make your DSL Modem/Router switch into a Bridged Mode so it only acts as a "
|
||||
"DSL Transceiver device to connect between the Ethernet link of your VyOS and"
|
||||
" the phone cable. Once your DSL Transceiver is in Bridge Mode, you should "
|
||||
"get no IP address from it. Please make sure you connect to the Ethernet Port"
|
||||
" 1 if your DSL Transceiver has a switch, as some of them only work this way."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:52
|
||||
#: bafd015de35c47bb9fa736466f6682ae
|
||||
msgid ""
|
||||
"Once you have an Ethernet device connected, i.e. `eth0`, then you can "
|
||||
"configure it to open the PPPoE session for you and your DSL Transceiver "
|
||||
"(Modem/Router) just acts to translate your messages in a way that vDSL/aDSL "
|
||||
"understands."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:59
|
||||
#: 85df608d39764692838250e06c716eda
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:62
|
||||
#: f11e711898cc43be83e421ca5ef672a2
|
||||
msgid "Common interface configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-description.txt:4 05c178fc8deb475381ffda9e8b09ff52
|
||||
msgid ""
|
||||
"Set a human readable, descriptive alias for this connection. Alias is used "
|
||||
"by e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-description.txt:7
|
||||
#: ../../_include/interface-disable.txt:7 ../../_include/interface-vrf.txt:9
|
||||
#: ../../configuration/interfaces/pppoe.rst:123
|
||||
#: ../../configuration/interfaces/pppoe.rst:136
|
||||
#: 4aa038e69164485d8ee4cc35b98ed61f 8e65d13e53674944a1a8a5efb0d1ceb6
|
||||
#: dc8b06eb678a4679b77efe2dae4f670a c2ab4fe4c94346c194248ea60aa1e5e0
|
||||
#: 17ab7b57f3a2452292f867055755e308
|
||||
msgid "Example:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable.txt:4 8f9974b14a3442e3b675cf81f2448745
|
||||
msgid ""
|
||||
"Disable given `<interface>`. It will be placed in administratively down "
|
||||
"(``A/D``) state."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vrf.txt:4 84df64f631e64ae0b83f76b7d11ed90d
|
||||
msgid "Place interface in given VRF instance."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vrf.txt:6 714a85d74a9c4d1e9d8518f97da03dbd
|
||||
msgid ""
|
||||
"There is an entire chapter about how to configure a :ref:`vrf`, please check"
|
||||
" this for additional information."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:77
|
||||
#: 4378b4cf2fa945449829bd518424a4ce
|
||||
msgid "PPPoE options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:81
|
||||
#: f9b3aaabbe5b4754a4231472dfb08bc2
|
||||
msgid ""
|
||||
"Use this command to restrict the PPPoE session on a given access "
|
||||
"concentrator. Normally, a host sends a PPPoE initiation packet to start the "
|
||||
"PPPoE discovery process, a number of access concentrators respond with offer"
|
||||
" packets and the host selects one of the responding access concentrators to "
|
||||
"serve this session."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:87
|
||||
#: c7e63e8b326947069aaa600dac853945
|
||||
msgid ""
|
||||
"This command allows you to select a specific access concentrator when you "
|
||||
"know the access concentrators `<name>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:92
|
||||
#: 200175b74f814d189822d5add21fb81a
|
||||
msgid ""
|
||||
"Use this command to set the username for authenticating with a remote PPPoE "
|
||||
"endpoint. Authentication is optional from the system's point of view but "
|
||||
"most service providers require it."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:98
|
||||
#: 99a36b3415994c51a936eefc84960a0c
|
||||
msgid ""
|
||||
"Use this command to set the password for authenticating with a remote PPPoE "
|
||||
"endpoint. Authentication is optional from the system's point of view but "
|
||||
"most service providers require it."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:104
|
||||
#: 0b0b2ec10f824c35a09ebc8c9bf8537c
|
||||
msgid "When set the interface is enabled for \"dial-on-demand\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:106
|
||||
#: dc0b11ee560642e1865dfd6aee442087
|
||||
msgid ""
|
||||
"Use this command to instruct the system to establish a PPPoE connection "
|
||||
"automatically once traffic passes through the interface. A disabled on-"
|
||||
"demand connection is established at boot time and remains up. If the link "
|
||||
"fails for any reason, the link is brought back up immediately."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:111
|
||||
#: 7eed5581b05449aa8b1851e2a20c59b7
|
||||
msgid ""
|
||||
"Enabled on-demand PPPoE connections bring up the link only when traffic "
|
||||
"needs to pass this link. If the link fails for any reason, the link is "
|
||||
"brought back up automatically once traffic passes the interface again. If "
|
||||
"you configure an on-demand PPPoE connection, you must also configure the "
|
||||
"idle timeout period, after which an idle PPPoE link will be disconnected. A "
|
||||
"non-zero idle timeout will never disconnect the link after it first came up."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:120
|
||||
#: 1ff41a77925a4989a978fd62d9844bb4
|
||||
msgid ""
|
||||
"Only request an address from the PPPoE server but do not install any default"
|
||||
" route."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:129
|
||||
#: 2963d8c432354fe89658b6a6c33a2865
|
||||
msgid ""
|
||||
"This command got added in VyOS 1.4 and inverts the logic from the old "
|
||||
"``default-route`` CLI option."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:134
|
||||
#: 84705c4c189744e182b5724ee1354489
|
||||
msgid "Set the distance for the default gateway sent by the PPPoE server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:144
|
||||
#: 45970db8743b445f88b01f88d5c1d195
|
||||
msgid ""
|
||||
"Use this command to set the idle timeout interval to be used with on-demand "
|
||||
"PPPoE sessions. When an on-demand connection is established, the link is "
|
||||
"brought up only when traffic is sent and is disabled when the link is idle "
|
||||
"for the interval specified."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:149
|
||||
#: cc58dc123af648fead7716ed2ac16e6e
|
||||
msgid ""
|
||||
"If this parameter is not set or 0, an on-demand link will not be taken down "
|
||||
"when it is idle and after the initial establishment of the connection. It "
|
||||
"will stay up forever."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:155
|
||||
#: c0ac8dabbfa34951b877e348c435e01c
|
||||
msgid ""
|
||||
"Use this command to set the IP address of the local endpoint of a PPPoE "
|
||||
"session. If it is not set it will be negotiated."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:160
|
||||
#: 58ddff7e5def4669a30de42918d22f73
|
||||
msgid ""
|
||||
"Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It"
|
||||
" is the size (in bytes) of the largest ethernet frame sent on this link."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:165
|
||||
#: b18a94e8f57d4fdea0c511ef5d4911b7
|
||||
msgid ""
|
||||
"Use this command to not install advertised DNS nameservers into the local "
|
||||
"system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:170
|
||||
#: 4632203180c64f6c82ebbe12e3675b74
|
||||
msgid ""
|
||||
"Use this command to set the IP address of the remote endpoint of a PPPoE "
|
||||
"session. If it is not set it will be negotiated."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:175
|
||||
#: ef2ad700020243c1a4aeff284e6645a5
|
||||
msgid ""
|
||||
"Use this command to specify a service name by which the local PPPoE "
|
||||
"interface can select access concentrators to connect with. It will connect "
|
||||
"to any access concentrator if not set."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:181
|
||||
#: 9af7057126c342de886a45d8c25d1fae
|
||||
msgid ""
|
||||
"Use this command to link the PPPoE connection to a physical interface. Each "
|
||||
"PPPoE connection must be established over a physical interface. Interfaces "
|
||||
"can be regular Ethernet interfaces, VIFs or bonding interfaces/VIFs."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:187
|
||||
#: ../../configuration/interfaces/pppoe.rst:233
|
||||
#: fa776ec02764490d9f46195e7e7e56f6 1805241e56fe4d188b38bb1753f06c18
|
||||
msgid ""
|
||||
"As Internet wide PMTU discovery rarely works, we sometimes need to clamp our"
|
||||
" TCP MSS value to a specific value. This is a field in the TCP options part "
|
||||
"of a SYN packet. By setting the MSS value, you are telling the remote side "
|
||||
"unequivocally 'do not try to send me packets bigger than this value'."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:192
|
||||
#: ../../configuration/interfaces/pppoe.rst:238
|
||||
#: 13f51b67aee44b7db6073ee1717d24e1 9a3d6b4478d7474bb2c07642d17b9e36
|
||||
msgid ""
|
||||
"This command was introduced in VyOS 1.4 - it was previously called: ``set "
|
||||
"firewall options interface <name> adjust-mss <value>``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:195
|
||||
#: ../../configuration/interfaces/pppoe.rst:241
|
||||
#: 3df76abfe8194781b12374bd33272b12 d3f745666fc041b4873bee4819b553eb
|
||||
msgid ""
|
||||
"MSS value = MTU - 20 (IP header) - 20 (TCP header), resulting in 1452 bytes "
|
||||
"on a 1492 byte MTU."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:198
|
||||
#: ../../configuration/interfaces/pppoe.rst:244
|
||||
#: bdaedb8ebb5a4b88bd278b1ffff3f33a 4f1b52acfea644358ca0631ccec7584d
|
||||
msgid ""
|
||||
"Instead of a numerical MSS value `clamp-mss-to-pmtu` can be used to "
|
||||
"automatically set the proper value."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:203
|
||||
#: ../../configuration/interfaces/pppoe.rst:249
|
||||
#: c1711d0754714423b79ea4d7f2474754 ad78c955d45745318d299f3097ef1d04
|
||||
msgid ""
|
||||
"Configure interface-specific Host/Router behaviour. If set, the interface "
|
||||
"will switch to host mode and IPv6 forwarding will be disabled on this "
|
||||
"interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:208
|
||||
#: e4a7328d92664fdfacc40053a416bba1
|
||||
msgid ""
|
||||
"Enable policy for source validation by reversed path, as specified in "
|
||||
":rfc:`3704`. Current recommended practice in :rfc:`3704` is to enable strict"
|
||||
" mode to prevent IP spoofing from DDos attacks. If using asymmetric routing "
|
||||
"or other complicated routing, then loose mode is recommended."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:213
|
||||
#: 198a7f0e5db24ab5a310e1ddba5e3a8a
|
||||
msgid ""
|
||||
"strict: Each incoming packet is tested against the FIB and if the interface "
|
||||
"is not the best reverse path the packet check will fail. By default failed "
|
||||
"packets are discarded."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:217
|
||||
#: c0702ab6da574f2a986c201ee49873df
|
||||
msgid ""
|
||||
"loose: Each incoming packet's source address is also tested against the FIB "
|
||||
"and if the source address is not reachable via any interface the packet "
|
||||
"check will fail."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:221
|
||||
#: c7c5753e81c04e389a51ddeb9220c3a7
|
||||
msgid "disable: No source validation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:224
|
||||
#: 05928bbc69a04b78b578a51147592185
|
||||
msgid "IPv6"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:228
|
||||
#: f46e116bf45c49cd8bf4fed6fd7b3d36
|
||||
msgid ""
|
||||
"Use this command to enable acquisition of IPv6 address using stateless "
|
||||
"autoconfig (SLAAC)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1
|
||||
#: 1cae9ddad8054c99b058b049f52c5726
|
||||
msgid "**DHCPv6 Prefix Delegation (PD)**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:3
|
||||
#: d63453587a724517a9317e56a4ced137
|
||||
msgid ""
|
||||
"VyOS 1.3 (equuleus) supports DHCPv6-PD (:rfc:`3633`). DHCPv6 Prefix "
|
||||
"Delegation is supported by most ISPs who provide native IPv6 for consumers "
|
||||
"on fixed networks."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:10
|
||||
#: 29b449e1c8db4d53a2c82693ababc842
|
||||
msgid ""
|
||||
"Some ISPs by default only delegate a /64 prefix. To request for a specific "
|
||||
"prefix size use this option to request for a bigger delegation for this pd "
|
||||
"`<id>`. This value is in the range from 32 - 64 so you could request up to a"
|
||||
" /32 prefix (if your ISP allows this) down to a /64 delegation."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:15
|
||||
#: 1512a42baaab4db28963062b1a5778a6
|
||||
msgid "The default value corresponds to 64."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:17
|
||||
#: 0b47d3dc4ca044e494ddd1e3fab83da6
|
||||
msgid "To request a /56 prefix from your ISP use:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:27
|
||||
#: d870182fe29744a99b68048d3808be96
|
||||
msgid ""
|
||||
"Specify the interface address used locally on the interface where the prefix"
|
||||
" has been delegated to. ID must be a decimal integer."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:30
|
||||
#: 7c4d122355644d9e897e2403168efa1e
|
||||
msgid ""
|
||||
"It will be combined with the delegated prefix and the sla-id to form a "
|
||||
"complete interface address. The default is to use the EUI-64 address of the "
|
||||
"interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:36
|
||||
#: 973d2e33b8c54c759440ba03e8a98d84
|
||||
msgid ""
|
||||
"Example: Delegate a /64 prefix to interface eth8 which will use a local "
|
||||
"address on this router of ``<prefix>::ffff``, as the address 65534 will "
|
||||
"correspond to ``ffff`` in hexadecimal notation."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:50
|
||||
#: c0f68a9157fa445bad915bfa2389b6e9
|
||||
msgid ""
|
||||
"Specify the identifier value of the site-level aggregator (SLA) on the "
|
||||
"interface. ID must be a decimal number greater then 0 which fits in the "
|
||||
"length of SLA IDs (see below)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:54
|
||||
#: 6e9261341b384bf79e31e05131e18dae
|
||||
msgid ""
|
||||
"Example: If ID is 1 and the client is delegated an IPv6 prefix "
|
||||
"2001:db8:ffff::/48, dhcp6c will combine the two values into a single IPv6 "
|
||||
"prefix, 2001:db8:ffff:1::/64, and will configure the prefix on the specified"
|
||||
" interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:258
|
||||
#: 8a0a2a6e166240288019af568b290651
|
||||
msgid "Operation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:262
|
||||
#: e91a9e557113422691f8093b4080f8c3
|
||||
msgid "Show detailed information on given `<interface>`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:279
|
||||
#: 4316e751ea6641e2834fa8212eb33d25
|
||||
msgid "Displays queue information for a PPPoE interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:289
|
||||
#: aa2eda29f5054d5faf3dc0597c2e193d
|
||||
msgid "Connect/Disconnect"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:293
|
||||
#: 76532e8dafd844e3b1732db45beb6d72
|
||||
msgid ""
|
||||
"Test disconnecting given connection-oriented interface. `<interface>` can be"
|
||||
" ``pppoe0`` as the example."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:298
|
||||
#: fce1b4b4eeb34b36b1cd8c909b55353d
|
||||
msgid ""
|
||||
"Test connecting given connection-oriented interface. `<interface>` can be "
|
||||
"``pppoe0`` as the example."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:303
|
||||
#: 88982933d6f44e53b727fdfa0818fe6f
|
||||
msgid "Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:305
|
||||
#: 98117828f7174b8da41ecfcbffcfbb81
|
||||
msgid "Requirements:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:307
|
||||
#: b6c27fdc2e274128bb72538c47c261ac
|
||||
msgid "Your ISPs modem is connected to port ``eth0`` of your VyOS box."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:308
|
||||
#: b4dbd28b8a864ad6a209f756fb929270
|
||||
msgid "No VLAN tagging required by your ISP."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:309
|
||||
#: c6545685b5f54fb59868cded7e27e928
|
||||
msgid ""
|
||||
"You need your PPPoE credentials from your DSL ISP in order to configure "
|
||||
"this. The usual username is in the form of name@host.net but may vary "
|
||||
"depending on ISP."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:312
|
||||
#: 6cb996a4363f4097aa5919015932b1c1
|
||||
msgid ""
|
||||
"The largest MTU size you can use with DSL is 1492 due to PPPoE overhead. If "
|
||||
"you are switching from a DHCP based ISP like cable then be aware that things"
|
||||
" like VPN links may need to have their MTU sizes adjusted to work within "
|
||||
"this limit."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:316
|
||||
#: d5e1f9fdb134472cbd3a39ed4803b5c7
|
||||
msgid ""
|
||||
"With the ``name-server`` option set to ``none``, VyOS will ignore the "
|
||||
"nameservers your ISP sends you and thus you can fully rely on the ones you "
|
||||
"have configured statically."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:320
|
||||
#: 0be62b44fac04649baee90229ecc0fa8
|
||||
msgid ""
|
||||
"Syntax has changed from VyOS 1.2 (crux) and it will be automatically "
|
||||
"migrated during an upgrade."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:323
|
||||
#: bc624d59618c40ee8722ce3b1c27810a
|
||||
msgid ""
|
||||
"A default route is automatically installed once the interface is up. To "
|
||||
"change this behavior use the ``no-default-route`` CLI option."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:333
|
||||
#: ef0b2fc91fb64e49a4a47350f437ae10
|
||||
msgid ""
|
||||
"You should add a firewall to your configuration above as well by assigning "
|
||||
"it to the pppoe0 itself as shown here:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:343
|
||||
#: b28f2e92947b42908e1f5d3a6d006c8a
|
||||
msgid "VLAN Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:345
|
||||
#: e124b13f8606492eabb44c9f1d407323
|
||||
msgid ""
|
||||
"Some recent ISPs require you to build the PPPoE connection through a VLAN "
|
||||
"interface. One of those ISPs is e.g. Deutsche Telekom in Germany. VyOS can "
|
||||
"easily create a PPPoE session through an encapsulated VLAN interface. The "
|
||||
"following configuration will run your PPPoE connection through VLAN7 which "
|
||||
"is the default VLAN for Deutsche Telekom:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:359
|
||||
#: 479be4afdc7448229fb6ee819f8521d1
|
||||
msgid "IPv6 DHCPv6-PD Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pppoe.rst:363
|
||||
#: 074a53774fa347db8d5848ff452f7129
|
||||
msgid ""
|
||||
"The following configuration will assign a /64 prefix out of a /56 delegation"
|
||||
" to eth0. The IPv6 address assigned to eth0 will be <prefix>::ffff/64. If "
|
||||
"you do not know the prefix size delegated to you, start with sla-len 0."
|
||||
msgstr ""
|
||||
@ -1,827 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:04+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/interfaces/pseudo-ethernet.rst:7
|
||||
#: a1b5ff090a4a4e61aafb8e3a611c9ba8
|
||||
msgid "MACVLAN - Pseudo Ethernet"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pseudo-ethernet.rst:9
|
||||
#: e39ce485204b4e41953be6052434c89f
|
||||
msgid ""
|
||||
"Pseudo-Ethernet or MACVLAN interfaces can be seen as subinterfaces to "
|
||||
"regular ethernet interfaces. Each and every subinterface is created a "
|
||||
"different media access control (MAC) address, for a single physical Ethernet"
|
||||
" port. Pseudo- Ethernet interfaces have most of their application in "
|
||||
"virtualized environments,"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pseudo-ethernet.rst:14
|
||||
#: dc124108d228495db8e23f3929b5efb8
|
||||
msgid ""
|
||||
"By using Pseudo-Ethernet interfaces there will be less system overhead "
|
||||
"compared to running a traditional bridging approach. Pseudo-Ethernet "
|
||||
"interfaces can also be used to workaround the general limit of 4096 virtual "
|
||||
"LANs (VLANs) per physical Ethernet port, since that limit is with respect to"
|
||||
" a single MAC address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pseudo-ethernet.rst:20
|
||||
#: 40d72daa9d854110b37ef2cdbcbffd5d
|
||||
msgid ""
|
||||
"Every Virtual Ethernet interfaces behaves like a real Ethernet interface. "
|
||||
"They can have IPv4/IPv6 addresses configured, or can request addresses by "
|
||||
"DHCP/ DHCPv6 and are associated/mapped with a real ethernet port. This also "
|
||||
"makes Pseudo-Ethernet interfaces interesting for testing purposes. A Pseudo-"
|
||||
"Ethernet device will inherit characteristics (speed, duplex, ...) from its "
|
||||
"physical parent (the so called link) interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pseudo-ethernet.rst:27
|
||||
#: 40b1f81b20a7412b9871fc3e71b81dec
|
||||
msgid ""
|
||||
"Once created in the system, Pseudo-Ethernet interfaces can be referenced in "
|
||||
"the exact same way as other Ethernet interfaces. Notes about using Pseudo- "
|
||||
"Ethernet interfaces:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pseudo-ethernet.rst:31
|
||||
#: 3c8c50d3304a4b998ca69064d20f7868
|
||||
msgid ""
|
||||
"Pseudo-Ethernet interfaces can not be reached from your internal host. This "
|
||||
"means that you can not try to ping a Pseudo-Ethernet interface from the host"
|
||||
" system on which it is defined. The ping will be lost."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pseudo-ethernet.rst:34
|
||||
#: 9f0f08c4078442a9af4e46a9c99a697b
|
||||
msgid ""
|
||||
"Loopbacks occurs at the IP level the same way as for other interfaces, "
|
||||
"ethernet frames are not forwarded between Pseudo-Ethernet interfaces."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pseudo-ethernet.rst:36
|
||||
#: 6bb81cffea774a2c835132a39142fece
|
||||
msgid ""
|
||||
"Pseudo-Ethernet interfaces may not work in environments which expect a "
|
||||
":abbr:`NIC (Network Interface Card)` to only have a single address. This "
|
||||
"applies to: - VMware machines using default settings - Network switches with"
|
||||
" security settings allowing only a single MAC address - xDSL modems that try"
|
||||
" to learn the MAC address of the NIC"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pseudo-ethernet.rst:45
|
||||
#: 192799865dac4f92b5d0f77f59787cfc
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pseudo-ethernet.rst:48
|
||||
#: 20df90402556415bb1ccc0c7d90bd1de
|
||||
msgid "Common interface configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address-with-dhcp.txt:5
|
||||
#: ../../_include/interface-address-with-dhcp.txt:5
|
||||
#: c1254388fbda4649b9a9e75084114709 7e7119bed8b74dfbafae498d9d849389
|
||||
msgid ""
|
||||
"Configure interface `<interface>` with one or more interface addresses."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address-with-dhcp.txt:7
|
||||
#: ../../_include/interface-address-with-dhcp.txt:7
|
||||
#: a452d156ef284953992423c7b64d9483 7f0b7794f21c4be7bacc05aa185aecf3
|
||||
msgid ""
|
||||
"**address** can be specified multiple times as IPv4 and/or IPv6 address, "
|
||||
"e.g. 192.0.2.1/24 and/or 2001:db8::1/64"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address-with-dhcp.txt:9
|
||||
#: ../../_include/interface-address-with-dhcp.txt:9
|
||||
#: 3374df8696a8446883571826dd72d2f6 f4e08d4038f4470c8790d6ea80ff8f51
|
||||
msgid ""
|
||||
"**dhcp** interface address is received by DHCP from a DHCP server on this "
|
||||
"segment."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address-with-dhcp.txt:11
|
||||
#: ../../_include/interface-address-with-dhcp.txt:11
|
||||
#: 50b0bedf515c408c9dfed55712cb4c11 d4ee9160a3a948749d285bdc74acc8a6
|
||||
msgid ""
|
||||
"**dhcpv6** interface address is received by DHCPv6 from a DHCPv6 server on "
|
||||
"this segment."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address-with-dhcp.txt:14
|
||||
#: ../../_include/interface-description.txt:7
|
||||
#: ../../_include/interface-disable.txt:7
|
||||
#: ../../_include/interface-disable-flow-control.txt:19
|
||||
#: ../../_include/interface-disable-link-detect.txt:9
|
||||
#: ../../_include/interface-mac.txt:7 ../../_include/interface-mtu.txt:7
|
||||
#: ../../_include/interface-ip.txt:27 ../../_include/interface-ip.txt:50
|
||||
#: ../../_include/interface-ip.txt:144 ../../_include/interface-ipv6.txt:15
|
||||
#: ../../_include/interface-ipv6.txt:28 ../../_include/interface-ipv6.txt:39
|
||||
#: ../../_include/interface-ipv6.txt:51 ../../_include/interface-vrf.txt:9
|
||||
#: ../../_include/interface-dhcp-options.txt:10
|
||||
#: ../../_include/interface-dhcp-options.txt:22
|
||||
#: ../../_include/interface-dhcp-options.txt:34
|
||||
#: ../../_include/interface-dhcp-options.txt:46
|
||||
#: ../../_include/interface-dhcp-options.txt:57
|
||||
#: ../../_include/interface-dhcp-options.txt:72
|
||||
#: ../../_include/interface-address-with-dhcp.txt:14
|
||||
#: ../../_include/interface-description.txt:7
|
||||
#: ../../_include/interface-disable.txt:7
|
||||
#: ../../_include/interface-disable-link-detect.txt:9
|
||||
#: ../../_include/interface-mac.txt:7 ../../_include/interface-mtu.txt:7
|
||||
#: ../../_include/interface-ip.txt:27 ../../_include/interface-ip.txt:50
|
||||
#: ../../_include/interface-ip.txt:144 ../../_include/interface-ipv6.txt:15
|
||||
#: ../../_include/interface-ipv6.txt:28 ../../_include/interface-ipv6.txt:39
|
||||
#: ../../_include/interface-ipv6.txt:51 ../../_include/interface-vrf.txt:9
|
||||
#: ../../_include/interface-dhcp-options.txt:10
|
||||
#: ../../_include/interface-dhcp-options.txt:22
|
||||
#: ../../_include/interface-dhcp-options.txt:34
|
||||
#: ../../_include/interface-dhcp-options.txt:46
|
||||
#: ../../_include/interface-dhcp-options.txt:57
|
||||
#: ../../_include/interface-dhcp-options.txt:72
|
||||
#: 0be7c7166acf4e5eb8a8b57cfc483552 3c4c8b649d424e68a160e948e05f6acd
|
||||
#: fd09086b5bed4e58af49570e8850e277 95f268309b2c42d3936f29c4a70e8bdf
|
||||
#: 18b279643a8b467488e6b8401081997e b36426baaa2f436d89a1b4796145d1e2
|
||||
#: 1dccf35e33674e5b8af782f242ef9572 c2ec5a74e20543728a5eabebc75e68c1
|
||||
#: 088b581aff2841039a5c0ebeea28175c 9790eba2a61d4a31a65c439db93f811e
|
||||
#: 698d18bba3e64ce8b21f8685a2a9efd4 966fd7669f954e2eacd0e2a3f3f058ba
|
||||
#: 6cd868d272654f309c8f5f2577074aac 841d715b73364f84b9bc610de818ef4d
|
||||
#: 14247af93f6f40a5ad188836ef00fe22 4d06aba027704b2ab493a0a32c5e9b25
|
||||
#: 2ff2fb3afc8e46eea46f4e43482765b8 b58f7594208247be8f2cc45d300f5aa4
|
||||
#: b8991d3ec8874a3a94a56daa9de4c03f 34c510b91cf04184b086cee39292f2da
|
||||
#: 468539132eea4126bdbeba3338743c15 dc9bcaa929414656bb84371186805b40
|
||||
#: 8e0d9bc008134381a8872422a97cd9a4 ad369bd537c04dcea5f4ae0d500c2363
|
||||
#: 3b522e8f7ce743b29df7121a69e8c1f3 46dce806082e4190a09826dd6cb90564
|
||||
#: 34cca74f6e7e404aa4f0e34ce58b1cf7 f27cbbcc7ac64be2ad43894c7f487d1b
|
||||
#: c6d1620813b740abb895c49a405bdc5c a41e7a06ee61484f99ba3b672e37d5ce
|
||||
#: 57dea7a63cde454c984a627286074a5e 01315c3fdb434ef3aabea6d484d22e4b
|
||||
#: 1947b7927a7a4cbab7cd9f0b19d8bb3e a13e1e194a494ece8760b158fbcf7dc3
|
||||
#: 8565c26323614cc9820727eba9f60358 a92056b1d6d446a4b1e9e7427ee50e61
|
||||
#: 1c3a9d289a8e4389b03454e6076c6515 6c2ebf684c0d4f2d86fe31348fc61e51
|
||||
#: c47d59158d814e5686532703bb698c54 55df8d495289452fb2d8c56471a44281
|
||||
#: d49225e7d9184946b560f18add21bc0d
|
||||
msgid "Example:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-description.txt:4
|
||||
#: ../../_include/interface-description.txt:4 6650dde0eaf347e0958d0a8e0109a629
|
||||
#: d381917960fd42a2a141e9db86786760
|
||||
msgid ""
|
||||
"Set a human readable, descriptive alias for this connection. Alias is used "
|
||||
"by e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable.txt:4
|
||||
#: ../../_include/interface-disable.txt:4 7a82ce23397a49ba9ff366f0567c666f
|
||||
#: b1137acd6e54407fa15b0153821844e9
|
||||
msgid ""
|
||||
"Disable given `<interface>`. It will be placed in administratively down "
|
||||
"(``A/D``) state."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-flow-control.txt:4
|
||||
#: 7c8a7ea4ed3b4b5ab4bf6c4b2eba652b
|
||||
msgid ""
|
||||
"Ethernet flow control is a mechanism for temporarily stopping the "
|
||||
"transmission of data on Ethernet family computer networks. The goal of this "
|
||||
"mechanism is to ensure zero packet loss in the presence of network "
|
||||
"congestion."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-flow-control.txt:8
|
||||
#: 97aee86078ed4d9b99056d74824f9541
|
||||
msgid ""
|
||||
"The first flow control mechanism, the pause frame, was defined by the IEEE "
|
||||
"802.3x standard."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-flow-control.txt:11
|
||||
#: b544fcacc84e4756aa51d13951060260
|
||||
msgid ""
|
||||
"A sending station (computer or network switch) may be transmitting data "
|
||||
"faster than the other end of the link can accept it. Using flow control, the"
|
||||
" receiving station can signal the sender requesting suspension of "
|
||||
"transmissions until the receiver catches up."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-flow-control.txt:16
|
||||
#: 0b9cc540a0e14c1fb42b4c0dfae6e982
|
||||
msgid ""
|
||||
"Use this command to disable the generation of Ethernet flow control (pause "
|
||||
"frames)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-link-detect.txt:4
|
||||
#: ../../_include/interface-disable-link-detect.txt:4
|
||||
#: af28860b0b6f4630961412fdef50c9cb dcb828c09523467580212b6f251380c5
|
||||
msgid ""
|
||||
"Use this command to direct an interface to not detect any physical state "
|
||||
"changes on a link, for example, when the cable is unplugged."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-link-detect.txt:7
|
||||
#: ../../_include/interface-disable-link-detect.txt:7
|
||||
#: 564f05bedef74615856ac1636d72f376 926baf20767546e48900c301f8e490bc
|
||||
msgid "Default is to detects physical link state changes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-mac.txt:4 ../../_include/interface-mac.txt:4
|
||||
#: d62824132ac54b38910d355e29f661ff 9584164dae4746eab6d6fd78ed1ff846
|
||||
msgid ""
|
||||
"Configure user defined :abbr:`MAC (Media Access Control)` address on given "
|
||||
"`<interface>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-mtu.txt:4 ../../_include/interface-mtu.txt:4
|
||||
#: 786fe39c22a844a3aedf9cac007c3601 3b36fa7a16e8435eae2c2044a45c5148
|
||||
msgid ""
|
||||
"Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It"
|
||||
" is the size (in bytes) of the largest ethernet frame sent on this link."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:4 ../../_include/interface-ipv6.txt:60
|
||||
#: ../../_include/interface-ip.txt:4 ../../_include/interface-ipv6.txt:60
|
||||
#: 4daaab9f21984923a7da57f82d501604 c181269ca88249b680902948b5df7f66
|
||||
#: 7a31630c519245bc87a88e6ffb4d387a bd615d0ca69e45faa753393e69272183
|
||||
msgid ""
|
||||
"As Internet wide PMTU discovery rarely works, we sometimes need to clamp our"
|
||||
" TCP MSS value to a specific value. This is a field in the TCP options part "
|
||||
"of a SYN packet. By setting the MSS value, you are telling the remote side "
|
||||
"unequivocally 'do not try to send me packets bigger than this value'."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:9 ../../_include/interface-ip.txt:9
|
||||
#: d5e0e123cb4c4f3d828d3c343287c40e 2ef6f3843b6b4bc7857c090f19eb0dc4
|
||||
msgid ""
|
||||
"This command was introduced in VyOS 1.4 - it was previously called: ``set "
|
||||
"firewall options interface <name> adjust-mss <value>``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:12 ../../_include/interface-ip.txt:12
|
||||
#: 61977cd808724dd985372456629267b3 4d18b6a453c946ffb08cee28c7a58487
|
||||
msgid ""
|
||||
"MSS value = MTU - 20 (IP header) - 20 (TCP header), resulting in 1452 bytes "
|
||||
"on a 1492 byte MTU."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:15 ../../_include/interface-ipv6.txt:71
|
||||
#: ../../_include/interface-ip.txt:15 ../../_include/interface-ipv6.txt:71
|
||||
#: f875c1c0b05d4201aa38f948deb2cd7c 70cb41c2b398493188e31ffe646e636b
|
||||
#: 02c79026b8db42e3a620194b78d25ff0 b3a38bccbd4d418d9bae2cd10d16a9f6
|
||||
msgid ""
|
||||
"Instead of a numerical MSS value `clamp-mss-to-pmtu` can be used to "
|
||||
"automatically set the proper value."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:21 ../../_include/interface-ip.txt:21
|
||||
#: 57499582a38648078eff45448eddd72e ec2da7f69c0d4b7d9058636e2c52984a
|
||||
msgid ""
|
||||
"Once a neighbor has been found, the entry is considered to be valid for at "
|
||||
"least for this specific time. An entry's validity will be extended if it "
|
||||
"receives positive feedback from higher level protocols."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:25 ../../_include/interface-ip.txt:25
|
||||
#: 87ae26b4149a4c1ba4f517121b61f421 82beaad393d448919dcd56903cea9b58
|
||||
msgid "This defaults to 30 seconds."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:36 ../../_include/interface-ip.txt:36
|
||||
#: 55e69c14e9f345708f29509a967960e9 098c5319c84048a0b140c452023d7500
|
||||
msgid ""
|
||||
"If set the kernel can respond to arp requests with addresses from other "
|
||||
"interfaces. This may seem wrong but it usually makes sense, because it "
|
||||
"increases the chance of successful communication. IP addresses are owned by "
|
||||
"the complete host on Linux, not by particular interfaces. Only for more "
|
||||
"complex setups like load-balancing, does this behaviour cause problems."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:42 ../../_include/interface-ip.txt:42
|
||||
#: f11b0234314f4b8eb885c1cadcf2613d 4f9d162daa764e5e946a5be285bd3f42
|
||||
msgid ""
|
||||
"If not set (default) allows you to have multiple network interfaces on the "
|
||||
"same subnet, and have the ARPs for each interface be answered based on "
|
||||
"whether or not the kernel would route a packet from the ARP'd IP out that "
|
||||
"interface (therefore you must use source based routing for this to work)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:47 ../../_include/interface-ip.txt:47
|
||||
#: 5ca884aebab74dcd846d83e00c1451f6 cf7bee41ca1f42039e9de905506d695f
|
||||
msgid ""
|
||||
"In other words it allows control of which cards (usually 1) will respond to "
|
||||
"an arp request."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:59 ../../_include/interface-ipv6.txt:48
|
||||
#: ../../_include/interface-ip.txt:59 ../../_include/interface-ipv6.txt:48
|
||||
#: 9f747ba0d8504f2889dfb5903ddd4cb3 c0c1346c81c843ddb07e53ac62a57af2
|
||||
#: f78faaf72a1144f6887b7ac00db38cf9 a449b6a189b94b48ab40dd58b06b0347
|
||||
msgid ""
|
||||
"Configure interface-specific Host/Router behaviour. If set, the interface "
|
||||
"will switch to host mode and IPv6 forwarding will be disabled on this "
|
||||
"interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:69 ../../_include/interface-ip.txt:69
|
||||
#: d45c7bde4b71432aa951b2879b335014 fde3035bb93b473c8de5debd7749accd
|
||||
msgid ""
|
||||
"Define different modes for IP directed broadcast forwarding as described in "
|
||||
":rfc:`1812` and :rfc:`2644`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:72 ../../_include/interface-ip.txt:72
|
||||
#: 96694acba5cc48c9b45473a08677c844 bd7c50468e19409d926b69b311735761
|
||||
msgid ""
|
||||
"If configured, incoming IP directed broadcast packets on this interface will"
|
||||
" be forwarded."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:75 ../../_include/interface-ip.txt:75
|
||||
#: de22bfd2c60342d8ad06c7dce5fc24e1 3c55655b023e4c52b8cea1c0b5f5c2eb
|
||||
msgid ""
|
||||
"If this option is unset (default), incoming IP directed broadcast packets "
|
||||
"will not be forwarded."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:85 ../../_include/interface-ip.txt:85
|
||||
#: 3f82ba7e32f14c439e8fa1bc4f111307 567e0de264064b219c9fd0daff427572
|
||||
msgid ""
|
||||
"Define behavior for gratuitous ARP frames who's IP is not already present in"
|
||||
" the ARP table. If configured create new entries in the ARP table."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:88 ../../_include/interface-ip.txt:88
|
||||
#: 06282db4270649b8880a005cf67bb9bf 02d76906725c459dafff8657a0e0bd8e
|
||||
msgid ""
|
||||
"Both replies and requests type gratuitous arp will trigger the ARP table to "
|
||||
"be updated, if this setting is on."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:91 ../../_include/interface-ip.txt:91
|
||||
#: 47343c4d811142889024c792e78f8284 9e9f35d8c7a341479e38f00628cfe801
|
||||
msgid ""
|
||||
"If the ARP table already contains the IP address of the gratuitous arp "
|
||||
"frame, the arp table will be updated regardless if this setting is on or "
|
||||
"off."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:101 ../../_include/interface-ip.txt:101
|
||||
#: 88f62ff75f1041888b90b1c4b1df887e e71ac0ece8934ffb8285eff6e669e22b
|
||||
msgid ""
|
||||
"Define different restriction levels for announcing the local source IP "
|
||||
"address from IP packets in ARP requests sent on interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:104 ../../_include/interface-ip.txt:104
|
||||
#: 929f85a3b5384f6dbbba2ef901984abf f51918699efa41f4847e552de896f946
|
||||
msgid "Use any local address, configured on any interface if this is not set."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:106 ../../_include/interface-ip.txt:106
|
||||
#: aa99bc339051400bad3398d366929c57 f2e2fc224db94ffb920a3e6c014515c4
|
||||
msgid ""
|
||||
"If configured, try to avoid local addresses that are not in the target's "
|
||||
"subnet for this interface. This mode is useful when target hosts reachable "
|
||||
"via this interface require the source IP address in ARP requests to be part "
|
||||
"of their logical network configured on the receiving interface. When we "
|
||||
"generate the request we will check all our subnets that include the target "
|
||||
"IP and will preserve the source address if it is from such subnet. If there "
|
||||
"is no such subnet we select source address according to the rules for level "
|
||||
"2."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:121 ../../_include/interface-ip.txt:121
|
||||
#: ebc7cfa384eb4863baaac62b9ebfe268 7e81645780f04579833d19ad8e0323eb
|
||||
msgid ""
|
||||
"Define different modes for sending replies in response to received ARP "
|
||||
"requests that resolve local target IP addresses:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:124 ../../_include/interface-ip.txt:124
|
||||
#: 6be442ff158f4e18b9c26f7c19562151 5c10056f2dc346dc879f07a5ff1b2266
|
||||
msgid ""
|
||||
"If configured, reply only if the target IP address is local address "
|
||||
"configured on the incoming interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:127 ../../_include/interface-ip.txt:127
|
||||
#: d4d29a570a124afeaaccd739a291395e 4d247b75f48c445a8ea8da06c22aac82
|
||||
msgid ""
|
||||
"If this option is unset (default), reply for any local target IP address, "
|
||||
"configured on any interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:137 ../../_include/interface-ip.txt:137
|
||||
#: ee5823179b5946db9a13ec472a9384b5 30800ed6723f4c558f051136b3869bee
|
||||
msgid ""
|
||||
"Use this command to enable proxy Address Resolution Protocol (ARP) on this "
|
||||
"interface. Proxy ARP allows an Ethernet interface to respond with its own "
|
||||
":abbr:`MAC (Media Access Control)` address to ARP requests for destination "
|
||||
"IP addresses on subnets attached to other interfaces on the system. "
|
||||
"Subsequent packets sent to those destination IP addresses are forwarded "
|
||||
"appropriately by the system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:153 ../../_include/interface-ip.txt:153
|
||||
#: 023a3e6fb9114baa9f1c79015e4077b1 71552688dd2243fa967a78252efa23ea
|
||||
msgid ""
|
||||
"Private VLAN proxy arp. Basically allow proxy arp replies back to the same "
|
||||
"interface (from which the ARP request/solicitation was received)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:156 ../../_include/interface-ip.txt:156
|
||||
#: 5cf6d6be3b2b4d8f8ebf04e8165c2c13 b7de9522f83f48d89057e0769523120f
|
||||
msgid ""
|
||||
"This is done to support (ethernet) switch features, like :rfc:`3069`, where "
|
||||
"the individual ports are NOT allowed to communicate with each other, but "
|
||||
"they are allowed to talk to the upstream router. As described in "
|
||||
":rfc:`3069`, it is possible to allow these hosts to communicate through the "
|
||||
"upstream router by proxy_arp'ing."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:162 ../../_include/interface-ip.txt:162
|
||||
#: 7e7ccbaf9ee94f4990b69323a8c4eb68 f666ec4afbe94270bf92bd1a2bd349ce
|
||||
msgid "Does not need to be used together with proxy_arp."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:164 ../../_include/interface-ip.txt:164
|
||||
#: a1768d47f14941b899394305acf4e5e4 0a6f0d087ef94e2cbbff549935f57e6a
|
||||
msgid "This technology is known by different names:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:166 ../../_include/interface-ip.txt:166
|
||||
#: b19113cd237a44d79951463de9b564a3 1934229f8db9488baa6b379ece2ab71b
|
||||
msgid "In :rfc:`3069` it is called VLAN Aggregation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:168 ../../_include/interface-ip.txt:168
|
||||
#: 70da481dc30745c3a726314c5b18c8d4 44d3c5b72a7347a2b11e4a9f78f51c61
|
||||
msgid "Cisco and Allied Telesyn call it Private VLAN"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:170 ../../_include/interface-ip.txt:170
|
||||
#: fe0aca5ac5c449f6a890bde4123a2d42 de7081a446284d129e78fd76839fef5b
|
||||
msgid "Hewlett-Packard call it Source-Port filtering or port-isolation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:172 ../../_include/interface-ip.txt:172
|
||||
#: c36ebe2f67874d339d62e9733932a072 d18a28e6f0ce4530b5faa873e266fc1c
|
||||
msgid "Ericsson call it MAC-Forced Forwarding (RFC Draft)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:177 ../../_include/interface-ip.txt:177
|
||||
#: a90a189e97bc4e0fbf8eaa46d2d50205 3c4b52ad28244916a5a428ffa0a440f5
|
||||
msgid ""
|
||||
"Enable policy for source validation by reversed path, as specified in "
|
||||
":rfc:`3704`. Current recommended practice in :rfc:`3704` is to enable strict"
|
||||
" mode to prevent IP spoofing from DDos attacks. If using asymmetric routing "
|
||||
"or other complicated routing, then loose mode is recommended."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:182 ../../_include/interface-ip.txt:182
|
||||
#: 31c937346f8c4643931dbb6d1107af89 797fb32aad7b42e88bb52fa9f20a2549
|
||||
msgid ""
|
||||
"strict: Each incoming packet is tested against the FIB and if the interface "
|
||||
"is not the best reverse path the packet check will fail. By default failed "
|
||||
"packets are discarded."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:186 ../../_include/interface-ip.txt:186
|
||||
#: f946dafeaf0345729a498f5cca2c10a9 3295b647a82643d593c3cb7303310432
|
||||
msgid ""
|
||||
"loose: Each incoming packet's source address is also tested against the FIB "
|
||||
"and if the source address is not reachable via any interface the packet "
|
||||
"check will fail."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:190 ../../_include/interface-ip.txt:190
|
||||
#: c69401da56a748fa831c14b33617451c f0cb79f81352458a815a9b9ca920c53b
|
||||
msgid "disable: No source validation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:4 ../../_include/interface-ipv6.txt:4
|
||||
#: f519afaef56a45b4b24c9bffc7be1e24 4c838e8e6e204ab8a5807beb79ce4bce
|
||||
msgid ""
|
||||
":abbr:`SLAAC (Stateless Address Autoconfiguration)` :rfc:`4862`. IPv6 hosts "
|
||||
"can configure themselves automatically when connected to an IPv6 network "
|
||||
"using the Neighbor Discovery Protocol via :abbr:`ICMPv6 (Internet Control "
|
||||
"Message Protocol version 6)` router discovery messages. When first connected"
|
||||
" to a network, a host sends a link-local router solicitation multicast "
|
||||
"request for its configuration parameters; routers respond to such a request "
|
||||
"with a router advertisement packet that contains Internet Layer "
|
||||
"configuration parameters."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:12 ../../_include/interface-ipv6.txt:12
|
||||
#: dea40b23a3a741c2a04ad9df593248a3 b1f54346c8df4093a8f032d87a6e0235
|
||||
msgid ""
|
||||
"This method automatically disables IPv6 traffic forwarding on the interface "
|
||||
"in question."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:25 ../../_include/interface-ipv6.txt:25
|
||||
#: 28d3701f8b594638936e2df8b722bbcb a588ed52bb504e24952476296a8d52b5
|
||||
msgid ""
|
||||
":abbr:`EUI-64 (64-Bit Extended Unique Identifier)` as specified in "
|
||||
":rfc:`4291` allows a host to assign iteslf a unique 64-Bit IPv6 address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:37 ../../_include/interface-ipv6.txt:37
|
||||
#: c1d4381c6815441880f7912765dbc121 7fd52f1b75ef44bbbca96365b47e3785
|
||||
msgid "Do not assign a link-local IPv6 address to this interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:65 ../../_include/interface-ipv6.txt:65
|
||||
#: bb0863b7e22b4d79a9750f8a8939860a 46957e59968844f5a127bfa154c32b73
|
||||
msgid ""
|
||||
"This command was introduced in VyOS 1.4 - it was previously called: ``set "
|
||||
"firewall options interface <name> adjust-mss6 <value>``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:68 ../../_include/interface-ipv6.txt:68
|
||||
#: e852ec677f6f469c93a3fc70930e6553 b12c6b304a08479fa22e1b0f08cf3a96
|
||||
msgid ""
|
||||
"MSS value = MTU - 40 (IPv6 header) - 20 (TCP header), resulting in 1432 "
|
||||
"bytes on a 1492 byte MTU."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vrf.txt:4 ../../_include/interface-vrf.txt:4
|
||||
#: c8a69cb9357640f4a8602f9fa4df52b6 ec070c6f4d484c0eab9cf66ebf8017b0
|
||||
msgid "Place interface in given VRF instance."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vrf.txt:6 ../../_include/interface-vrf.txt:6
|
||||
#: 537a415289f64ada99c725f02b33d24d dcebb4990d5c467ab5e71fc01f2651ae
|
||||
msgid ""
|
||||
"There is an entire chapter about how to configure a :ref:`vrf`, please check"
|
||||
" this for additional information."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-common-with-dhcp.txt:9
|
||||
#: ../../_include/interface-vlan-8021q.txt:97 de8b10ad411c4bdf987e1d36e6fa3481
|
||||
#: 5d9ec421cee94d5a87880963d6135876
|
||||
msgid "**DHCP(v6)**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcp-options.txt:4
|
||||
#: ../../_include/interface-dhcp-options.txt:4
|
||||
#: fd91ebe76cfe414380e86707df4aad86 401c362649544c7086304981542e2677
|
||||
msgid ""
|
||||
":rfc:`2131` states: The client MAY choose to explicitly provide the "
|
||||
"identifier through the 'client identifier' option. If the client supplies a "
|
||||
"'client identifier', the client MUST use the same 'client identifier' in all"
|
||||
" subsequent messages, and the server MUST use that identifier to identify "
|
||||
"the client."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcp-options.txt:19
|
||||
#: ../../_include/interface-dhcp-options.txt:19
|
||||
#: 4fd57858a87548648e85e5e2504d4aec ea8dc3c12cfa4a89afbfdb1519d00e21
|
||||
msgid ""
|
||||
"Instead of sending the real system hostname to the DHCP server, overwrite "
|
||||
"the host-name with this given-value."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcp-options.txt:31
|
||||
#: ../../_include/interface-dhcp-options.txt:31
|
||||
#: 42319a6f21504f948ab9fd476834b509 7a8006e442024679ad4485b31b99d0f4
|
||||
msgid ""
|
||||
"The vendor-class-id option can be used to request a specific class of vendor"
|
||||
" options from the server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcp-options.txt:43
|
||||
#: ../../_include/interface-dhcp-options.txt:43
|
||||
#: 0e03cce0542d4962ab2a16fd5457e141 d15341df42674b5580e94c00157d9f96
|
||||
msgid ""
|
||||
"Only request an address from the DHCP server but do not request a default "
|
||||
"gateway."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcp-options.txt:55
|
||||
#: ../../_include/interface-dhcp-options.txt:55
|
||||
#: da09cd3271c546468690961cb6b2c0b7 e9d20901b9a64b0f89d5448b36b210da
|
||||
msgid "Set the distance for the default gateway sent by the DHCP server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcp-options.txt:66
|
||||
#: ../../_include/interface-dhcp-options.txt:66
|
||||
#: 3feb5fb7dc14432a8be841938534cbe4 c245b00e2315471ea88d042a70dd111e
|
||||
msgid ""
|
||||
"Reject DHCP leases from a given address or range. This is useful when a "
|
||||
"modem gives a local IP when first starting."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcp-options.txt:69
|
||||
#: ../../_include/interface-dhcp-options.txt:69
|
||||
#: 0c1d37506dc849629b55167268c715bf 8889335254c946e0a6e63539a7556a91
|
||||
msgid ""
|
||||
"**address** can be specified multiple times, e.g. 192.168.100.1 and/or "
|
||||
"192.168.100.0/24"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-options.txt:4
|
||||
#: ../../_include/interface-dhcpv6-options.txt:4
|
||||
#: 1b78e660ac5e445d87a85a95a7aa416e 5c79bfe4ffd24bb9bd06ca0129028d43
|
||||
msgid ""
|
||||
"The DHCP unique identifier (DUID) is used by a client to get an IP address "
|
||||
"from a DHCPv6 server. It has a 2-byte DUID type field, and a variable-length"
|
||||
" identifier field up to 128 bytes. Its actual length depends on its type. "
|
||||
"The server compares the DUID with its database and delivers configuration "
|
||||
"data (address, lease times, DNS servers, etc.) to the client."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-options.txt:17
|
||||
#: ../../_include/interface-dhcpv6-options.txt:17
|
||||
#: e8dbb2e8941945b89b5f2545dbf38186 3d9fcba12e1b48b6a9d5474131fea9eb
|
||||
msgid ""
|
||||
"This statement specifies dhcp6c to only exchange informational configuration"
|
||||
" parameters with servers. A list of DNS server addresses is an example of "
|
||||
"such parameters. This statement is useful when the client does not need "
|
||||
"stateful configuration parameters such as IPv6 addresses or prefixes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-options.txt:29
|
||||
#: ../../_include/interface-dhcpv6-options.txt:29
|
||||
#: cd1f0f3893034ea289db7e6b9a90b737 1fbb8cba5fbc47c38af0b2954ce5eac4
|
||||
msgid ""
|
||||
"When rapid-commit is specified, dhcp6c will include a rapid-commit option in"
|
||||
" solicit messages and wait for an immediate reply instead of advertisements."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-options.txt:39
|
||||
#: ../../_include/interface-dhcpv6-options.txt:39
|
||||
#: f2dea25cbdfb4b54bd81427bf326217a 9139d58fe3834354a0abbf8cf3fed94a
|
||||
msgid ""
|
||||
"Request only a temporary address and not form an IA_NA (Identity Association"
|
||||
" for Non-temporary Addresses) partnership."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1
|
||||
#: a64c6d0f95794d8688ae7ec5045e90da 4345138d20dd4b8c98c582958ba46fda
|
||||
msgid "**DHCPv6 Prefix Delegation (PD)**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:3
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:3
|
||||
#: a6b0be84becb47328ad353297b268df4 35a45ef978f24f54aa6e96eebaaa3732
|
||||
msgid ""
|
||||
"VyOS 1.3 (equuleus) supports DHCPv6-PD (:rfc:`3633`). DHCPv6 Prefix "
|
||||
"Delegation is supported by most ISPs who provide native IPv6 for consumers "
|
||||
"on fixed networks."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:10
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:10
|
||||
#: 055fd101e7334add85176db58b68689c e7360afdde954b058798b419de4c8340
|
||||
msgid ""
|
||||
"Some ISPs by default only delegate a /64 prefix. To request for a specific "
|
||||
"prefix size use this option to request for a bigger delegation for this pd "
|
||||
"`<id>`. This value is in the range from 32 - 64 so you could request up to a"
|
||||
" /32 prefix (if your ISP allows this) down to a /64 delegation."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:15
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:15
|
||||
#: 9a6af50ed8e541d8929f0006e6ae6d23 8c640e2c7979431e8cc7181c3ea6d8bf
|
||||
msgid "The default value corresponds to 64."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:17
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:17
|
||||
#: 033128aaaa534f7fb55db579acfcc595 30c0d81bb3ea47da9c44dbaa952e3fc2
|
||||
msgid "To request a /56 prefix from your ISP use:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:27
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:27
|
||||
#: d2432ac18e904befb4853954fcb49740 7bbc79be4c8748dfbbc8edd88c48fa68
|
||||
msgid ""
|
||||
"Specify the interface address used locally on the interface where the prefix"
|
||||
" has been delegated to. ID must be a decimal integer."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:30
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:30
|
||||
#: c73ce44bbee7423682377ba2d5489e66 ebe53d7fcb3748b49807a602daab7b48
|
||||
msgid ""
|
||||
"It will be combined with the delegated prefix and the sla-id to form a "
|
||||
"complete interface address. The default is to use the EUI-64 address of the "
|
||||
"interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:36
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:36
|
||||
#: 42131f95164f497c909fbb296ba65310 062c492206c141c391d27610211da623
|
||||
msgid ""
|
||||
"Example: Delegate a /64 prefix to interface eth8 which will use a local "
|
||||
"address on this router of ``<prefix>::ffff``, as the address 65534 will "
|
||||
"correspond to ``ffff`` in hexadecimal notation."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:50
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:50
|
||||
#: 6827c9a19e1747568ba888f8bf12b05f 69b6dacc22cc4492846fc10adeafcb07
|
||||
msgid ""
|
||||
"Specify the identifier value of the site-level aggregator (SLA) on the "
|
||||
"interface. ID must be a decimal number greater then 0 which fits in the "
|
||||
"length of SLA IDs (see below)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:54
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:54
|
||||
#: d4d741f2f5c147ca90d879280e1d659b 4b4c89a922e842ca912f695e6fd3486e
|
||||
msgid ""
|
||||
"Example: If ID is 1 and the client is delegated an IPv6 prefix "
|
||||
"2001:db8:ffff::/48, dhcp6c will combine the two values into a single IPv6 "
|
||||
"prefix, 2001:db8:ffff:1::/64, and will configure the prefix on the specified"
|
||||
" interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pseudo-ethernet.rst:55
|
||||
#: d1d7e1d1ef1f4234837fbfb355d23d6a
|
||||
msgid "Pseudo Ethernet/MACVLAN options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pseudo-ethernet.rst:59
|
||||
#: 1f634d1a772643688cf6163aa78fe8d2
|
||||
msgid ""
|
||||
"Specifies the physical `<ethX>` Ethernet interface associated with a Pseudo "
|
||||
"Ethernet `<interface>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/pseudo-ethernet.rst:63
|
||||
#: eef1ecf9aa1d40398f7e7bd42d95a334
|
||||
msgid "VLAN"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vlan-8021q.txt:1 34a2d574ded24fa8aaf097f9c9d32bff
|
||||
msgid ""
|
||||
"IEEE 802.1q_, often referred to as Dot1q, is the networking standard that "
|
||||
"supports virtual LANs (VLANs) on an IEEE 802.3 Ethernet network. The "
|
||||
"standard defines a system of VLAN tagging for Ethernet frames and the "
|
||||
"accompanying procedures to be used by bridges and switches in handling such "
|
||||
"frames. The standard also contains provisions for a quality-of-service "
|
||||
"prioritization scheme commonly known as IEEE 802.1p and defines the Generic "
|
||||
"Attribute Registration Protocol."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vlan-8021q.txt:9 46f01b05e1174be8b1cd12f6c88b802d
|
||||
msgid ""
|
||||
"Portions of the network which are VLAN-aware (i.e., IEEE 802.1q_ conformant)"
|
||||
" can include VLAN tags. When a frame enters the VLAN-aware portion of the "
|
||||
"network, a tag is added to represent the VLAN membership. Each frame must be"
|
||||
" distinguishable as being within exactly one VLAN. A frame in the VLAN-aware"
|
||||
" portion of the network that does not contain a VLAN tag is assumed to be "
|
||||
"flowing on the native VLAN."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vlan-8021q.txt:16 6ede5fa0f97c4bab8a8897de4ff517a6
|
||||
msgid ""
|
||||
"The standard was developed by IEEE 802.1, a working group of the IEEE 802 "
|
||||
"standards committee, and continues to be actively revised. One of the "
|
||||
"notable revisions is 802.1Q-2014 which incorporated IEEE 802.1aq (Shortest "
|
||||
"Path Bridging) and much of the IEEE 802.1d standard."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vlan-8021q.txt:21 24f8504f28894257b4653fea906dffcf
|
||||
msgid ""
|
||||
"802.1q VLAN interfaces are represented as virtual sub-interfaces in VyOS. "
|
||||
"The term used for this is ``vif``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vlan-8021q.txt:26 8022ccd3290d4d039827ad0a6b7142ed
|
||||
msgid ""
|
||||
"Create a new VLAN interface on interface `<interface>` using the VLAN number"
|
||||
" provided via `<vlan-id>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vlan-8021q.txt:29 7cc4fff7645b4fa38d58ca2bbaba8944
|
||||
msgid ""
|
||||
"You can create multiple VLAN interfaces on a physical interface. The VLAN ID"
|
||||
" range is from 0 to 4094."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vlan-8021q.txt:32 5f825f2be8f54643a0cbfd3cbfe14bad
|
||||
msgid "Only 802.1Q-tagged packets are accepted on Ethernet vifs."
|
||||
msgstr ""
|
||||
@ -1,637 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:04+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:6
|
||||
#: 4f65d335c87743e98057873277a1353a
|
||||
msgid "Tunnel"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:8
|
||||
#: c8de9a02576d461f97bec190d3ea93ed
|
||||
msgid "This article touches on 'classic' IP tunneling protocols."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:10
|
||||
#: 254b46d5f7664473b8b2e92dff2baef1
|
||||
msgid ""
|
||||
"GRE is often seen as a one size fits all solution when it comes to classic "
|
||||
"IP tunneling protocols, and for a good reason. However, there are more "
|
||||
"specialized options, and many of them are supported by VyOS. There are also "
|
||||
"rather obscure GRE options that can be useful."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:15
|
||||
#: e90d161e9e8947c1b0d5514fa3272b58
|
||||
msgid ""
|
||||
"All those protocols are grouped under ``interfaces tunnel`` in VyOS. Let's "
|
||||
"take a closer look at the protocols and options currently supported by VyOS."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:19
|
||||
#: c2b0d5af1476473b9189223164608f4e
|
||||
msgid "Common interface configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address.txt:3 5078f639ddbc492a87eeba14c59b2c45
|
||||
msgid ""
|
||||
"Configure interface `<interface>` with one or more interface addresses."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address.txt:6 574477bca2cf4d8282ce4b1787a2a68f
|
||||
msgid ""
|
||||
"**address** can be specified multiple times as IPv4 and/or IPv6 address, "
|
||||
"e.g. 192.0.2.1/24 and/or 2001:db8::1/64"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address.txt:9
|
||||
#: ../../_include/interface-description.txt:7
|
||||
#: ../../_include/interface-disable.txt:7
|
||||
#: ../../_include/interface-disable-flow-control.txt:19
|
||||
#: ../../_include/interface-disable-link-detect.txt:9
|
||||
#: ../../_include/interface-mtu.txt:7 ../../_include/interface-ip.txt:27
|
||||
#: ../../_include/interface-ip.txt:50 ../../_include/interface-ip.txt:144
|
||||
#: ../../_include/interface-ipv6.txt:15 ../../_include/interface-ipv6.txt:28
|
||||
#: ../../_include/interface-ipv6.txt:39 ../../_include/interface-ipv6.txt:51
|
||||
#: ../../_include/interface-vrf.txt:9 e32a7dc8f2b54a8783033f5847a6e560
|
||||
#: a16a333daf7b49368def81a80ebdf599 dc0ed264fd4d47a8b381055995e313b1
|
||||
#: a166201dc0d1423fb673992999338c08 3607747f82cd4b159f126f5f06714797
|
||||
#: 47fcc3dc1bca4db8a0531db39cee7703 6003414eb6ef4e81932ae206316bb0f8
|
||||
#: f2ac87e6ebdf4072a6a9033e8c33bd60 4f07be30ced545538b6afb92a88b3ffb
|
||||
#: b06b839165f64bc18c3ba29baff3785b 3650174d32ae46ca95f7fcb863c28b3d
|
||||
#: 80f59ffaead947df9f31ecfbaf167140 8f735bc8814d4df6b651de20c7ee75cd
|
||||
#: c0adda6294a54a7b9ced05325f955c03
|
||||
msgid "Example:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-description.txt:4 a89a6d99fce647b594ddbdbeead413bf
|
||||
msgid ""
|
||||
"Set a human readable, descriptive alias for this connection. Alias is used "
|
||||
"by e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable.txt:4 b81dffd58eb34a7e9064268a6ae98051
|
||||
msgid ""
|
||||
"Disable given `<interface>`. It will be placed in administratively down "
|
||||
"(``A/D``) state."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-flow-control.txt:4
|
||||
#: c2a7d65177f64b69851492fb28b07312
|
||||
msgid ""
|
||||
"Ethernet flow control is a mechanism for temporarily stopping the "
|
||||
"transmission of data on Ethernet family computer networks. The goal of this "
|
||||
"mechanism is to ensure zero packet loss in the presence of network "
|
||||
"congestion."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-flow-control.txt:8
|
||||
#: 93a595e71513427ca7fe9030a5878f29
|
||||
msgid ""
|
||||
"The first flow control mechanism, the pause frame, was defined by the IEEE "
|
||||
"802.3x standard."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-flow-control.txt:11
|
||||
#: c2fe745650374aacaa665e483550c1b5
|
||||
msgid ""
|
||||
"A sending station (computer or network switch) may be transmitting data "
|
||||
"faster than the other end of the link can accept it. Using flow control, the"
|
||||
" receiving station can signal the sender requesting suspension of "
|
||||
"transmissions until the receiver catches up."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-flow-control.txt:16
|
||||
#: be42ddb31ef840d08bfd0a919d876bf3
|
||||
msgid ""
|
||||
"Use this command to disable the generation of Ethernet flow control (pause "
|
||||
"frames)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-link-detect.txt:4
|
||||
#: 0174b489a8294100b875271096104dbb
|
||||
msgid ""
|
||||
"Use this command to direct an interface to not detect any physical state "
|
||||
"changes on a link, for example, when the cable is unplugged."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-link-detect.txt:7
|
||||
#: ac6d5213881040789a52c9c81bc90024
|
||||
msgid "Default is to detects physical link state changes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-mtu.txt:4 c20cf181fa5848bfbe01f9f5edc12f3a
|
||||
msgid ""
|
||||
"Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It"
|
||||
" is the size (in bytes) of the largest ethernet frame sent on this link."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:4 ../../_include/interface-ipv6.txt:60
|
||||
#: 0c8e00cdcca74ecba7e8947d893256fb e91350f7e593470abaeec0777c262c31
|
||||
msgid ""
|
||||
"As Internet wide PMTU discovery rarely works, we sometimes need to clamp our"
|
||||
" TCP MSS value to a specific value. This is a field in the TCP options part "
|
||||
"of a SYN packet. By setting the MSS value, you are telling the remote side "
|
||||
"unequivocally 'do not try to send me packets bigger than this value'."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:9 bc1fa0cdb29b4cc8b3553ff689c2d224
|
||||
msgid ""
|
||||
"This command was introduced in VyOS 1.4 - it was previously called: ``set "
|
||||
"firewall options interface <name> adjust-mss <value>``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:12 b56d7dd7185a46e0a67700105e42a068
|
||||
msgid ""
|
||||
"MSS value = MTU - 20 (IP header) - 20 (TCP header), resulting in 1452 bytes "
|
||||
"on a 1492 byte MTU."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:15 ../../_include/interface-ipv6.txt:71
|
||||
#: 2531ac25a34a4f3dacd8408997b2c67f b0a1a2371dc84cab99cab059bf377749
|
||||
msgid ""
|
||||
"Instead of a numerical MSS value `clamp-mss-to-pmtu` can be used to "
|
||||
"automatically set the proper value."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:21 c2c51b5241e641b0baf0a07650976111
|
||||
msgid ""
|
||||
"Once a neighbor has been found, the entry is considered to be valid for at "
|
||||
"least for this specific time. An entry's validity will be extended if it "
|
||||
"receives positive feedback from higher level protocols."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:25 7068bf0b709d4b5f8b47742aaaadaa19
|
||||
msgid "This defaults to 30 seconds."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:36 e1908d3d12eb426e8972ec3f80942337
|
||||
msgid ""
|
||||
"If set the kernel can respond to arp requests with addresses from other "
|
||||
"interfaces. This may seem wrong but it usually makes sense, because it "
|
||||
"increases the chance of successful communication. IP addresses are owned by "
|
||||
"the complete host on Linux, not by particular interfaces. Only for more "
|
||||
"complex setups like load-balancing, does this behaviour cause problems."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:42 4a87915fcbc5487581424881375fa1e1
|
||||
msgid ""
|
||||
"If not set (default) allows you to have multiple network interfaces on the "
|
||||
"same subnet, and have the ARPs for each interface be answered based on "
|
||||
"whether or not the kernel would route a packet from the ARP'd IP out that "
|
||||
"interface (therefore you must use source based routing for this to work)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:47 210d512fb473413d82bc7a7b6b470000
|
||||
msgid ""
|
||||
"In other words it allows control of which cards (usually 1) will respond to "
|
||||
"an arp request."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:59 ../../_include/interface-ipv6.txt:48
|
||||
#: 008d8655ebe14f308f2fbedf2e6770f2 6f8bfdf8d200454d96098626c48e5c57
|
||||
msgid ""
|
||||
"Configure interface-specific Host/Router behaviour. If set, the interface "
|
||||
"will switch to host mode and IPv6 forwarding will be disabled on this "
|
||||
"interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:69 82fecab14aee4ae9b1c359caaa80fd45
|
||||
msgid ""
|
||||
"Define different modes for IP directed broadcast forwarding as described in "
|
||||
":rfc:`1812` and :rfc:`2644`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:72 069ba34e0b794788b59f7abe9b97f478
|
||||
msgid ""
|
||||
"If configured, incoming IP directed broadcast packets on this interface will"
|
||||
" be forwarded."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:75 2e7bb96c51054b989214f107b47dfc71
|
||||
msgid ""
|
||||
"If this option is unset (default), incoming IP directed broadcast packets "
|
||||
"will not be forwarded."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:85 3414eea84d064891b529936ab0fcd72a
|
||||
msgid ""
|
||||
"Define behavior for gratuitous ARP frames who's IP is not already present in"
|
||||
" the ARP table. If configured create new entries in the ARP table."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:88 8933130461a64fd489419f5959fb9d33
|
||||
msgid ""
|
||||
"Both replies and requests type gratuitous arp will trigger the ARP table to "
|
||||
"be updated, if this setting is on."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:91 dc32c4ffa55941d2b4f6c668ead08239
|
||||
msgid ""
|
||||
"If the ARP table already contains the IP address of the gratuitous arp "
|
||||
"frame, the arp table will be updated regardless if this setting is on or "
|
||||
"off."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:101 72ef11bef45a41a6bed39241dca769e8
|
||||
msgid ""
|
||||
"Define different restriction levels for announcing the local source IP "
|
||||
"address from IP packets in ARP requests sent on interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:104 0fbfe686bcab45e7931c6aeef83a6226
|
||||
msgid "Use any local address, configured on any interface if this is not set."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:106 e3c428c696b64bfab4f023d4f13ad399
|
||||
msgid ""
|
||||
"If configured, try to avoid local addresses that are not in the target's "
|
||||
"subnet for this interface. This mode is useful when target hosts reachable "
|
||||
"via this interface require the source IP address in ARP requests to be part "
|
||||
"of their logical network configured on the receiving interface. When we "
|
||||
"generate the request we will check all our subnets that include the target "
|
||||
"IP and will preserve the source address if it is from such subnet. If there "
|
||||
"is no such subnet we select source address according to the rules for level "
|
||||
"2."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:121 f884754de2f448ec999d582831ea715d
|
||||
msgid ""
|
||||
"Define different modes for sending replies in response to received ARP "
|
||||
"requests that resolve local target IP addresses:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:124 6706378a4a6b4048bbfcba401575f936
|
||||
msgid ""
|
||||
"If configured, reply only if the target IP address is local address "
|
||||
"configured on the incoming interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:127 75e6f3280f6e45b9b48e7d616f199aa9
|
||||
msgid ""
|
||||
"If this option is unset (default), reply for any local target IP address, "
|
||||
"configured on any interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:137 9cc3195a6aba44ffb05f0c5f0d6e08fc
|
||||
msgid ""
|
||||
"Use this command to enable proxy Address Resolution Protocol (ARP) on this "
|
||||
"interface. Proxy ARP allows an Ethernet interface to respond with its own "
|
||||
":abbr:`MAC (Media Access Control)` address to ARP requests for destination "
|
||||
"IP addresses on subnets attached to other interfaces on the system. "
|
||||
"Subsequent packets sent to those destination IP addresses are forwarded "
|
||||
"appropriately by the system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:153 9608fcb29a4e41d6a8fbb434ee251740
|
||||
msgid ""
|
||||
"Private VLAN proxy arp. Basically allow proxy arp replies back to the same "
|
||||
"interface (from which the ARP request/solicitation was received)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:156 a68720ed4ae4451fa2459bfe1c9fee43
|
||||
msgid ""
|
||||
"This is done to support (ethernet) switch features, like :rfc:`3069`, where "
|
||||
"the individual ports are NOT allowed to communicate with each other, but "
|
||||
"they are allowed to talk to the upstream router. As described in "
|
||||
":rfc:`3069`, it is possible to allow these hosts to communicate through the "
|
||||
"upstream router by proxy_arp'ing."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:162 d6fbcfcd005547d98dd26cbe4dc94e05
|
||||
msgid "Does not need to be used together with proxy_arp."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:164 92b9deb750ab47af985dedad621a5d87
|
||||
msgid "This technology is known by different names:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:166 6b7e3692bbcf42f2a7913c4afdb87126
|
||||
msgid "In :rfc:`3069` it is called VLAN Aggregation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:168 865143eadfe946ed9de7a7688b4db18d
|
||||
msgid "Cisco and Allied Telesyn call it Private VLAN"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:170 b8f2e24d41e04ff6b8a32f7bdc88f846
|
||||
msgid "Hewlett-Packard call it Source-Port filtering or port-isolation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:172 57979fee60934e7f8a4f4ff1330fb20d
|
||||
msgid "Ericsson call it MAC-Forced Forwarding (RFC Draft)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:177 491c0319f4f9467fb28492e46e88225a
|
||||
msgid ""
|
||||
"Enable policy for source validation by reversed path, as specified in "
|
||||
":rfc:`3704`. Current recommended practice in :rfc:`3704` is to enable strict"
|
||||
" mode to prevent IP spoofing from DDos attacks. If using asymmetric routing "
|
||||
"or other complicated routing, then loose mode is recommended."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:182 85ca42bc6a90437c96b5aed70a94c171
|
||||
msgid ""
|
||||
"strict: Each incoming packet is tested against the FIB and if the interface "
|
||||
"is not the best reverse path the packet check will fail. By default failed "
|
||||
"packets are discarded."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:186 6a96c1e3a70b4f9ea16eca7ac0f8f5ae
|
||||
msgid ""
|
||||
"loose: Each incoming packet's source address is also tested against the FIB "
|
||||
"and if the source address is not reachable via any interface the packet "
|
||||
"check will fail."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:190 9572b20ad99441f3905611c2c8a0f671
|
||||
msgid "disable: No source validation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:4 454d991eb872406d9a96ed1762d87fd6
|
||||
msgid ""
|
||||
":abbr:`SLAAC (Stateless Address Autoconfiguration)` :rfc:`4862`. IPv6 hosts "
|
||||
"can configure themselves automatically when connected to an IPv6 network "
|
||||
"using the Neighbor Discovery Protocol via :abbr:`ICMPv6 (Internet Control "
|
||||
"Message Protocol version 6)` router discovery messages. When first connected"
|
||||
" to a network, a host sends a link-local router solicitation multicast "
|
||||
"request for its configuration parameters; routers respond to such a request "
|
||||
"with a router advertisement packet that contains Internet Layer "
|
||||
"configuration parameters."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:12 91f461ed80284ce4ab95b3145fa91a74
|
||||
msgid ""
|
||||
"This method automatically disables IPv6 traffic forwarding on the interface "
|
||||
"in question."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:25 205268030ea749aaaca8b72e866c6265
|
||||
msgid ""
|
||||
":abbr:`EUI-64 (64-Bit Extended Unique Identifier)` as specified in "
|
||||
":rfc:`4291` allows a host to assign iteslf a unique 64-Bit IPv6 address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:37 99a02475a4474823ac102454de9289a3
|
||||
msgid "Do not assign a link-local IPv6 address to this interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:65 7b46299131ff4d61808a97837bf1c890
|
||||
msgid ""
|
||||
"This command was introduced in VyOS 1.4 - it was previously called: ``set "
|
||||
"firewall options interface <name> adjust-mss6 <value>``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:68 d8485d9a6af643a090b50a06260822a9
|
||||
msgid ""
|
||||
"MSS value = MTU - 40 (IPv6 header) - 20 (TCP header), resulting in 1432 "
|
||||
"bytes on a 1492 byte MTU."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vrf.txt:4 311c5e81f671403d81d7908edea0e5c1
|
||||
msgid "Place interface in given VRF instance."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vrf.txt:6 693baabf7fd54e8dbbb1a7be6f989ee2
|
||||
msgid ""
|
||||
"There is an entire chapter about how to configure a :ref:`vrf`, please check"
|
||||
" this for additional information."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:26
|
||||
#: b151193fb3e047eda14032e737c63650
|
||||
msgid "IPIP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:28
|
||||
#: 87f65e55a8c542b99ade1a324e7f7d4e
|
||||
msgid ""
|
||||
"This is one of the simplest types of tunnels, as defined by :rfc:`2003`. It "
|
||||
"takes an IPv4 packet and sends it as a payload of another IPv4 packet. For "
|
||||
"this reason, there are no other configuration options for this kind of "
|
||||
"tunnel."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:32
|
||||
#: ../../configuration/interfaces/tunnel.rst:50
|
||||
#: ../../configuration/interfaces/tunnel.rst:67
|
||||
#: ../../configuration/interfaces/tunnel.rst:89
|
||||
#: ../../configuration/interfaces/tunnel.rst:190
|
||||
#: b0e45f41c8894e9bbb1f55a2c075bd2e fc25967bdf544064b9aeb81cb54d4121
|
||||
#: 9666fb00460f47dc8239a1b66fc234f8 c539c4fae01a4f66a175044565fe35e9
|
||||
#: 67bf0165317c478fa9148d5f6c4c2a37
|
||||
msgid "An example:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:42
|
||||
#: a33ee07355864ac89d93072f15290ac1
|
||||
msgid "IP6IP6"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:44
|
||||
#: 46829db2f10f428bbd41bdab5bddaaa4
|
||||
msgid ""
|
||||
"This is the IPv6 counterpart of IPIP. I'm not aware of an RFC that defines "
|
||||
"this encapsulation specifically, but it's a natural specific case of IPv6 "
|
||||
"encapsulation mechanisms described in :rfc:2473`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:48
|
||||
#: 6a86b1681089405199bd21b2491928e6
|
||||
msgid ""
|
||||
"It's not likely that anyone will need it any time soon, but it does exist."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:60
|
||||
#: d4082a24ca0f40e2aea8a4ff9e98a14b
|
||||
msgid "IPIP6"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:62
|
||||
#: 8af75c3f876745e5a57d117e22f8c0ef
|
||||
msgid ""
|
||||
"In the future this is expected to be a very useful protocol (though there "
|
||||
"are `other proposals`_)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:65
|
||||
#: 5b5b87809f134e35866ff347936c1430
|
||||
msgid ""
|
||||
"As the name implies, it's IPv4 encapsulated in IPv6, as simple as that."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:77
|
||||
#: 580cdc6604024dabb40d8bd50a6260ba
|
||||
msgid "6in4 (SIT)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:79
|
||||
#: 89cd5ab44db34879b0a9b5e09f8866b4
|
||||
msgid ""
|
||||
"6in4 uses tunneling to encapsulate IPv6 traffic over IPv4 links as defined "
|
||||
"in :rfc:`4213`. The 6in4 traffic is sent over IPv4 inside IPv4 packets whose"
|
||||
" IP headers have the IP protocol number set to 41. This protocol number is "
|
||||
"specifically designated for IPv6 encapsulation, the IPv4 packet header is "
|
||||
"immediately followed by the IPv6 packet being carried. The encapsulation "
|
||||
"overhead is the size of the IPv4 header of 20 bytes, therefore with an MTU "
|
||||
"of 1500 bytes, IPv6 packets of 1480 bytes can be sent without fragmentation."
|
||||
" This tunneling technique is frequently used by IPv6 tunnel brokers like "
|
||||
"`Hurricane Electric`_."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:98
|
||||
#: 49e85b13242c4e4f96775899e1cf2153
|
||||
msgid ""
|
||||
"A full example of a Tunnelbroker.net config can be found at :ref:`here "
|
||||
"<examples-tunnelbroker-ipv6>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:102
|
||||
#: f2c54aca23964dbc942b5b0697982295
|
||||
msgid "Generic Routing Encapsulation (GRE)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:104
|
||||
#: c35d2f4103684f20945db93745927ae5
|
||||
msgid ""
|
||||
"A GRE tunnel operates at layer 3 of the OSI model and is represented by IP "
|
||||
"protocol 47. The main benefit of a GRE tunnel is that you are able to carry "
|
||||
"multiple protocols inside the same tunnel. GRE also supports multicast "
|
||||
"traffic and supports routing protocols that leverage multicast to form "
|
||||
"neighbor adjacencies."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:110
|
||||
#: 4ed5edc555254668b0d1c10924f7e947
|
||||
msgid ""
|
||||
"A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be "
|
||||
"created over either IPv4 (gre) or IPv6 (ip6gre)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:115
|
||||
#: d77c25d6de8a425bb6a51c71cfebcc3b
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:117
|
||||
#: 07bffabda4d34ea09b0eb92554b1365b
|
||||
msgid ""
|
||||
"A basic configuration requires a tunnel source (source-address), a tunnel "
|
||||
"destination (remote), an encapsulation type (gre), and an address "
|
||||
"(ipv4/ipv6). Below is a basic IPv4 only configuration example taken from a "
|
||||
"VyOS router and a Cisco IOS router. The main difference between these two "
|
||||
"configurations is that VyOS requires you explicitly configure the "
|
||||
"encapsulation type. The Cisco router defaults to GRE IP otherwise it would "
|
||||
"have to be configured as well."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:124
|
||||
#: ../../configuration/interfaces/tunnel.rst:145
|
||||
#: 3cf14ec500bd46a98866a89cb689a9da d6e123bd798b44d4884c82afadcd21cc
|
||||
msgid "**VyOS Router:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:133
|
||||
#: c8155402a6b94f518b29ca18ca78749e
|
||||
msgid "**Cisco IOS Router:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:142
|
||||
#: 5398a448d41849e7a83855e8feec7d00
|
||||
msgid ""
|
||||
"Here is a second example of a dual-stack tunnel over IPv6 between a VyOS "
|
||||
"router and a Linux host using systemd-networkd."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:155
|
||||
#: 4fc76f4ce8e24167bd9ade89d0ae5faa
|
||||
msgid "**Linux systemd-networkd:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:157
|
||||
#: b0fa4795150641768523fd6308d0244d
|
||||
msgid ""
|
||||
"This requires two files, one to create the device (XXX.netdev) and one to "
|
||||
"configure the network on the device (XXX.network)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:183
|
||||
#: e804245ca1fc4347b511dadc9525bd5f
|
||||
msgid "Tunnel keys"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:185
|
||||
#: da2f4c93f18647d88f21a8600f0168f4
|
||||
msgid ""
|
||||
"GRE is also the only classic protocol that allows creating multiple tunnels "
|
||||
"with the same source and destination due to its support for tunnel keys. "
|
||||
"Despite its name, this feature has nothing to do with security: it's simply "
|
||||
"an identifier that allows routers to tell one tunnel from another."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:207
|
||||
#: fa7ebf37e9924485bfd9744aeb5b8474
|
||||
msgid "GRETAP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:209
|
||||
#: 39358377fd2b42188b44d431c0e9df2c
|
||||
msgid ""
|
||||
"While normal GRE is for layer 3, GRETAP is for layer 2. GRETAP can "
|
||||
"encapsulate Ethernet frames, thus it can be bridged with other interfaces to"
|
||||
" create datalink layer segments that span multiple remote sites."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:223
|
||||
#: b6d9e3b53b9c42f49b2ff33be81e3f5d
|
||||
msgid "Troubleshooting"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:225
|
||||
#: 3c0e0d048ed54015b343703077997c69
|
||||
msgid ""
|
||||
"GRE is a well defined standard that is common in most networks. While not "
|
||||
"inherently difficult to configure there are a couple of things to keep in "
|
||||
"mind to make sure the configuration performs as expected. A common cause for"
|
||||
" GRE tunnels to fail to come up correctly include ACL or Firewall "
|
||||
"configurations that are discarding IP protocol 47 or blocking your "
|
||||
"source/destination traffic."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:231
|
||||
#: 7b67e03351864c5699f2478972a613b8
|
||||
msgid ""
|
||||
"**1. Confirm IP connectivity between tunnel source-address and remote:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:246
|
||||
#: f8b2cf1dfdc84a868398121ad64528fe
|
||||
msgid "**2. Confirm the link type has been set to GRE:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:263
|
||||
#: 912de8d676d84372b9a85d5c935ffc0e
|
||||
msgid "**3. Confirm IP connectivity across the tunnel:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/tunnel.rst:278
|
||||
#: 902dcd77a85a4bcb9ffbe77538581461
|
||||
msgid ""
|
||||
"There is also a GRE over IPv6 encapsulation available, it is called: "
|
||||
"``ip6gre``."
|
||||
msgstr ""
|
||||
@ -1,52 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:04+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/interfaces/vti.rst:5 ece3b9b5ceb44dd48b2eef45d29161c2
|
||||
msgid "VTI - Virtual Tunnel Interface"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vti.rst:7 d9210025e3454777853ff821a4f702e7
|
||||
msgid "Set Virtual Tunnel Interface"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vti.rst:14 5fae19d0ae2e49e2ae0607d9e7756b87
|
||||
msgid "Results in:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vti.rst:25 5e68df2c354341febdf7628a9c26bed2
|
||||
msgid ""
|
||||
"When using site-to-site IPsec with VTI interfaces, be sure to disable route "
|
||||
"autoinstall"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vti.rst:32 9004d665083e497d9c6b279d5298489f
|
||||
msgid ""
|
||||
"More details about the IPsec and VTI issue and option disable-route-"
|
||||
"autoinstall https://blog.vyos.io/vyos-1-dot-2-0-development-news-in-july"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vti.rst:35 a626cf0aaf8443f5a4484e0295813893
|
||||
msgid ""
|
||||
"The root cause of the problem is that for VTI tunnels to work, their traffic"
|
||||
" selectors have to be set to 0.0.0.0/0 for traffic to match the tunnel, even"
|
||||
" though actual routing decision is made according to netfilter marks. Unless"
|
||||
" route insertion is disabled entirely, StrongSWAN thus mistakenly inserts a "
|
||||
"default route through the VTI peer address, which makes all traffic routed "
|
||||
"to nowhere."
|
||||
msgstr ""
|
||||
@ -1,724 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:04+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:7 861f5ae599e742f2919b15bfa636a4a6
|
||||
msgid "VXLAN"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:9 3c3d329833414a5687c59245dad6694d
|
||||
msgid ""
|
||||
":abbr:`VXLAN (Virtual Extensible LAN)` is a network virtualization "
|
||||
"technology that attempts to address the scalability problems associated with"
|
||||
" large cloud computing deployments. It uses a VLAN-like encapsulation "
|
||||
"technique to encapsulate OSI layer 2 Ethernet frames within layer 4 UDP "
|
||||
"datagrams, using 4789 as the default IANA-assigned destination UDP port "
|
||||
"number. VXLAN endpoints, which terminate VXLAN tunnels and may be either "
|
||||
"virtual or physical switch ports, are known as :abbr:`VTEPs (VXLAN tunnel "
|
||||
"endpoints)`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:17
|
||||
#: 26316c6cfdfa4532bbd34f3570cd0d48
|
||||
msgid ""
|
||||
"VXLAN is an evolution of efforts to standardize an overlay encapsulation "
|
||||
"protocol. It increases the scalability up to 16 million logical networks and"
|
||||
" allows for layer 2 adjacency across IP networks. Multicast or unicast with "
|
||||
"head-end replication (HER) is used to flood broadcast, unknown unicast, and "
|
||||
"multicast (BUM) traffic."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:23
|
||||
#: 79fddbeedccc48119d0e8f371e2eb25d
|
||||
msgid ""
|
||||
"The VXLAN specification was originally created by VMware, Arista Networks "
|
||||
"and Cisco. Other backers of the VXLAN technology include Huawei, Broadcom, "
|
||||
"Citrix, Pica8, Big Switch Networks, Cumulus Networks, Dell EMC, Ericsson, "
|
||||
"Mellanox, FreeBSD, OpenBSD, Red Hat, Joyent, and Juniper Networks."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:28
|
||||
#: 07da17ff720d453cb1e2d8b3893ca56c
|
||||
msgid "VXLAN was officially documented by the IETF in :rfc:`7348`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:30
|
||||
#: 312bc701f4ed4e00a097ea0133053efe
|
||||
msgid ""
|
||||
"If configuring VXLAN in a VyOS virtual machine, ensure that MAC spoofing "
|
||||
"(Hyper-V) or Forged Transmits (ESX) are permitted, otherwise forwarded "
|
||||
"frames may be blocked by the hypervisor."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:34
|
||||
#: ab11a1c69bb5470a801fc2a5f242200f
|
||||
msgid ""
|
||||
"As VyOS is based on Linux and there was no official IANA port assigned for "
|
||||
"VXLAN, VyOS uses a default port of 8472. You can change the port on a per "
|
||||
"VXLAN interface basis to get it working across multiple vendors."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:39
|
||||
#: 8c5a8c7c253d4b1895bd2ce80f392531
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:42
|
||||
#: 02b83fdbc2f04e53bf3c16732716d50b
|
||||
msgid "Common interface configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address.txt:3 653c18aa4561494da3ebea0bf45edd5c
|
||||
msgid ""
|
||||
"Configure interface `<interface>` with one or more interface addresses."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address.txt:6 71bd0c05ea8a4652955b410c91695dd5
|
||||
msgid ""
|
||||
"**address** can be specified multiple times as IPv4 and/or IPv6 address, "
|
||||
"e.g. 192.0.2.1/24 and/or 2001:db8::1/64"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address.txt:9
|
||||
#: ../../_include/interface-description.txt:7
|
||||
#: ../../_include/interface-disable.txt:7
|
||||
#: ../../_include/interface-disable-flow-control.txt:19
|
||||
#: ../../_include/interface-disable-link-detect.txt:9
|
||||
#: ../../_include/interface-mac.txt:7 ../../_include/interface-mtu.txt:7
|
||||
#: ../../_include/interface-ip.txt:27 ../../_include/interface-ip.txt:50
|
||||
#: ../../_include/interface-ip.txt:144 ../../_include/interface-ipv6.txt:15
|
||||
#: ../../_include/interface-ipv6.txt:28 ../../_include/interface-ipv6.txt:39
|
||||
#: ../../_include/interface-ipv6.txt:51 ../../_include/interface-vrf.txt:9
|
||||
#: 85c1440ebde046739458cc08b8dc9375 21a27ae41dd0478e8921c4178c3dd960
|
||||
#: 1f2088f1d6d44e6c92b7970a0ae6ce60 8e2e4ac8e1274547a54ba61155da6911
|
||||
#: 8489c3c9cd2d47eb9b6ef29c3121a2a3 58c30e7dee4a4f1d9083f70b263997ac
|
||||
#: 3f2ae39087cc4dc38c8db7c826766559 452f33461dce4124b7858a2cddd10acf
|
||||
#: 19bba869306d490280be69696be1252d e2cb58dc453342899a4ef2b53f3a1bc2
|
||||
#: f38c70d59faa4518818be55cdb052165 97c4a321888e4ca5bfa0ed0dd14e982c
|
||||
#: a6940bfc66f74bd1932c0d4a277cb46f 9bd19c5b8d034647aa83e95f0da0a19b
|
||||
#: f96c6d0348b642e5846c46d22ae36eb2
|
||||
msgid "Example:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-description.txt:4 bd5c089ee1fd4f6388d331df1315b0e8
|
||||
msgid ""
|
||||
"Set a human readable, descriptive alias for this connection. Alias is used "
|
||||
"by e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable.txt:4 73c54ed5e5544a939383fdd677f37094
|
||||
msgid ""
|
||||
"Disable given `<interface>`. It will be placed in administratively down "
|
||||
"(``A/D``) state."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-flow-control.txt:4
|
||||
#: e23d83c2bce84b57b30e40f2b301ca2d
|
||||
msgid ""
|
||||
"Ethernet flow control is a mechanism for temporarily stopping the "
|
||||
"transmission of data on Ethernet family computer networks. The goal of this "
|
||||
"mechanism is to ensure zero packet loss in the presence of network "
|
||||
"congestion."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-flow-control.txt:8
|
||||
#: 676d243f0315463aba3a7c35afe47d38
|
||||
msgid ""
|
||||
"The first flow control mechanism, the pause frame, was defined by the IEEE "
|
||||
"802.3x standard."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-flow-control.txt:11
|
||||
#: fe5cb1e527c24d9eb3fbfee7f33e8f88
|
||||
msgid ""
|
||||
"A sending station (computer or network switch) may be transmitting data "
|
||||
"faster than the other end of the link can accept it. Using flow control, the"
|
||||
" receiving station can signal the sender requesting suspension of "
|
||||
"transmissions until the receiver catches up."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-flow-control.txt:16
|
||||
#: 489b6f34a79b49ecb8444985b95bec9b
|
||||
msgid ""
|
||||
"Use this command to disable the generation of Ethernet flow control (pause "
|
||||
"frames)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-link-detect.txt:4
|
||||
#: 435f0bca1cee488ab6679c6d3881c6df
|
||||
msgid ""
|
||||
"Use this command to direct an interface to not detect any physical state "
|
||||
"changes on a link, for example, when the cable is unplugged."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-link-detect.txt:7
|
||||
#: f9dbed0a960040ce883a30d13efb1836
|
||||
msgid "Default is to detects physical link state changes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-mac.txt:4 77fadc2e085a4ba1abbd89f881fd73c0
|
||||
msgid ""
|
||||
"Configure user defined :abbr:`MAC (Media Access Control)` address on given "
|
||||
"`<interface>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-mtu.txt:4 553ada5da7ef461fb618c44671d872c8
|
||||
msgid ""
|
||||
"Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It"
|
||||
" is the size (in bytes) of the largest ethernet frame sent on this link."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:4 ../../_include/interface-ipv6.txt:60
|
||||
#: da5725692ac947958eaeb7e09b13c717 8b6801f4e72040a7a5a3b0db8a1e8ce1
|
||||
msgid ""
|
||||
"As Internet wide PMTU discovery rarely works, we sometimes need to clamp our"
|
||||
" TCP MSS value to a specific value. This is a field in the TCP options part "
|
||||
"of a SYN packet. By setting the MSS value, you are telling the remote side "
|
||||
"unequivocally 'do not try to send me packets bigger than this value'."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:9 c13731a10863498ab456d67a41f9bf4c
|
||||
msgid ""
|
||||
"This command was introduced in VyOS 1.4 - it was previously called: ``set "
|
||||
"firewall options interface <name> adjust-mss <value>``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:12 ff609c51ef04466d8b56128d61698dcd
|
||||
msgid ""
|
||||
"MSS value = MTU - 20 (IP header) - 20 (TCP header), resulting in 1452 bytes "
|
||||
"on a 1492 byte MTU."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:15 ../../_include/interface-ipv6.txt:71
|
||||
#: e6647173df5940febea0a7569406e00d 993cc711f0684e82a1c7c00c9fc22554
|
||||
msgid ""
|
||||
"Instead of a numerical MSS value `clamp-mss-to-pmtu` can be used to "
|
||||
"automatically set the proper value."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:21 2f039362e97b434babaa612730aa546a
|
||||
msgid ""
|
||||
"Once a neighbor has been found, the entry is considered to be valid for at "
|
||||
"least for this specific time. An entry's validity will be extended if it "
|
||||
"receives positive feedback from higher level protocols."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:25 46afb4fa52034043b3cda8fc97a1c8a2
|
||||
msgid "This defaults to 30 seconds."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:36 d3f58cb3133d4fbabf001760cf98cba1
|
||||
msgid ""
|
||||
"If set the kernel can respond to arp requests with addresses from other "
|
||||
"interfaces. This may seem wrong but it usually makes sense, because it "
|
||||
"increases the chance of successful communication. IP addresses are owned by "
|
||||
"the complete host on Linux, not by particular interfaces. Only for more "
|
||||
"complex setups like load-balancing, does this behaviour cause problems."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:42 2030c890f148423a9c9c9871641141f5
|
||||
msgid ""
|
||||
"If not set (default) allows you to have multiple network interfaces on the "
|
||||
"same subnet, and have the ARPs for each interface be answered based on "
|
||||
"whether or not the kernel would route a packet from the ARP'd IP out that "
|
||||
"interface (therefore you must use source based routing for this to work)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:47 1a49daee52914cb5bb02b9a5ba8f4fa7
|
||||
msgid ""
|
||||
"In other words it allows control of which cards (usually 1) will respond to "
|
||||
"an arp request."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:59 ../../_include/interface-ipv6.txt:48
|
||||
#: 18f7de617f3c4486aba7e7a1da21463c 598c280233154eef85320c5c51fae210
|
||||
msgid ""
|
||||
"Configure interface-specific Host/Router behaviour. If set, the interface "
|
||||
"will switch to host mode and IPv6 forwarding will be disabled on this "
|
||||
"interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:69 011e73345e9443e1bc481ffba93c4200
|
||||
msgid ""
|
||||
"Define different modes for IP directed broadcast forwarding as described in "
|
||||
":rfc:`1812` and :rfc:`2644`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:72 f535c0edab444846a03327282fcd46c9
|
||||
msgid ""
|
||||
"If configured, incoming IP directed broadcast packets on this interface will"
|
||||
" be forwarded."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:75 92d2ce61725e4bfe8b116714e89974f2
|
||||
msgid ""
|
||||
"If this option is unset (default), incoming IP directed broadcast packets "
|
||||
"will not be forwarded."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:85 e5494815eb8e4cdab930669949a30e29
|
||||
msgid ""
|
||||
"Define behavior for gratuitous ARP frames who's IP is not already present in"
|
||||
" the ARP table. If configured create new entries in the ARP table."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:88 8719d6792af347dcbf90227f8e9ee7f4
|
||||
msgid ""
|
||||
"Both replies and requests type gratuitous arp will trigger the ARP table to "
|
||||
"be updated, if this setting is on."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:91 0284e8a19c8148d18e9ea7dc23f731db
|
||||
msgid ""
|
||||
"If the ARP table already contains the IP address of the gratuitous arp "
|
||||
"frame, the arp table will be updated regardless if this setting is on or "
|
||||
"off."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:101 7c37ae8855094bc3afaae4b475cd9cbd
|
||||
msgid ""
|
||||
"Define different restriction levels for announcing the local source IP "
|
||||
"address from IP packets in ARP requests sent on interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:104 a349f62e6831499b8099c5ccff2a96e8
|
||||
msgid "Use any local address, configured on any interface if this is not set."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:106 4b5ae8e0d3334aabb04ba418872e9036
|
||||
msgid ""
|
||||
"If configured, try to avoid local addresses that are not in the target's "
|
||||
"subnet for this interface. This mode is useful when target hosts reachable "
|
||||
"via this interface require the source IP address in ARP requests to be part "
|
||||
"of their logical network configured on the receiving interface. When we "
|
||||
"generate the request we will check all our subnets that include the target "
|
||||
"IP and will preserve the source address if it is from such subnet. If there "
|
||||
"is no such subnet we select source address according to the rules for level "
|
||||
"2."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:121 aee5e92031404e79b3cd8257a7c1ccf7
|
||||
msgid ""
|
||||
"Define different modes for sending replies in response to received ARP "
|
||||
"requests that resolve local target IP addresses:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:124 a571c97ccb5f4be6bb8edd134685c5e7
|
||||
msgid ""
|
||||
"If configured, reply only if the target IP address is local address "
|
||||
"configured on the incoming interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:127 30d493e68a3f4e4ab00048a2007d3797
|
||||
msgid ""
|
||||
"If this option is unset (default), reply for any local target IP address, "
|
||||
"configured on any interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:137 51faa1903f8648e58e874cb3c02f0494
|
||||
msgid ""
|
||||
"Use this command to enable proxy Address Resolution Protocol (ARP) on this "
|
||||
"interface. Proxy ARP allows an Ethernet interface to respond with its own "
|
||||
":abbr:`MAC (Media Access Control)` address to ARP requests for destination "
|
||||
"IP addresses on subnets attached to other interfaces on the system. "
|
||||
"Subsequent packets sent to those destination IP addresses are forwarded "
|
||||
"appropriately by the system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:153 80b676f56c784515b2214e5bb2b92492
|
||||
msgid ""
|
||||
"Private VLAN proxy arp. Basically allow proxy arp replies back to the same "
|
||||
"interface (from which the ARP request/solicitation was received)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:156 e10e8175f80f4758aff03302083e5867
|
||||
msgid ""
|
||||
"This is done to support (ethernet) switch features, like :rfc:`3069`, where "
|
||||
"the individual ports are NOT allowed to communicate with each other, but "
|
||||
"they are allowed to talk to the upstream router. As described in "
|
||||
":rfc:`3069`, it is possible to allow these hosts to communicate through the "
|
||||
"upstream router by proxy_arp'ing."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:162 0d9b15c1b3d84918937bc20888c57dd8
|
||||
msgid "Does not need to be used together with proxy_arp."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:164 bef9c002bf4c43b18dd17314f7155b6f
|
||||
msgid "This technology is known by different names:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:166 c5e66eaa42894b919444ba115db00246
|
||||
msgid "In :rfc:`3069` it is called VLAN Aggregation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:168 139cf4329e5d4b6a833a6b3518a1d828
|
||||
msgid "Cisco and Allied Telesyn call it Private VLAN"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:170 6680ee41c8d14b838f93126ec55533e4
|
||||
msgid "Hewlett-Packard call it Source-Port filtering or port-isolation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:172 8dfb99a102aa49d6bdb44d25e7b82a28
|
||||
msgid "Ericsson call it MAC-Forced Forwarding (RFC Draft)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:177 3e9163776b9d426bbebe7024acd9c6ed
|
||||
msgid ""
|
||||
"Enable policy for source validation by reversed path, as specified in "
|
||||
":rfc:`3704`. Current recommended practice in :rfc:`3704` is to enable strict"
|
||||
" mode to prevent IP spoofing from DDos attacks. If using asymmetric routing "
|
||||
"or other complicated routing, then loose mode is recommended."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:182 90a30406470244ceb8e2010529479723
|
||||
msgid ""
|
||||
"strict: Each incoming packet is tested against the FIB and if the interface "
|
||||
"is not the best reverse path the packet check will fail. By default failed "
|
||||
"packets are discarded."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:186 e3efa5b9d49d4495a2bc0a54bd68dd43
|
||||
msgid ""
|
||||
"loose: Each incoming packet's source address is also tested against the FIB "
|
||||
"and if the source address is not reachable via any interface the packet "
|
||||
"check will fail."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:190 d9418e17490c4a22badeebcd573131cb
|
||||
msgid "disable: No source validation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:4 b1f43c681c274734804516e931f6bf1b
|
||||
msgid ""
|
||||
":abbr:`SLAAC (Stateless Address Autoconfiguration)` :rfc:`4862`. IPv6 hosts "
|
||||
"can configure themselves automatically when connected to an IPv6 network "
|
||||
"using the Neighbor Discovery Protocol via :abbr:`ICMPv6 (Internet Control "
|
||||
"Message Protocol version 6)` router discovery messages. When first connected"
|
||||
" to a network, a host sends a link-local router solicitation multicast "
|
||||
"request for its configuration parameters; routers respond to such a request "
|
||||
"with a router advertisement packet that contains Internet Layer "
|
||||
"configuration parameters."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:12 395b248df78341caadfde30698c7399b
|
||||
msgid ""
|
||||
"This method automatically disables IPv6 traffic forwarding on the interface "
|
||||
"in question."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:25 81e4b4f9b5e640559321657da11cabe7
|
||||
msgid ""
|
||||
":abbr:`EUI-64 (64-Bit Extended Unique Identifier)` as specified in "
|
||||
":rfc:`4291` allows a host to assign iteslf a unique 64-Bit IPv6 address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:37 deec060d699c4d359dbb5ef5186413d5
|
||||
msgid "Do not assign a link-local IPv6 address to this interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:65 10c9858d52984653b4ea942cfa5695c1
|
||||
msgid ""
|
||||
"This command was introduced in VyOS 1.4 - it was previously called: ``set "
|
||||
"firewall options interface <name> adjust-mss6 <value>``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:68 a2b95daa10ba401783fd7434a31bfa3b
|
||||
msgid ""
|
||||
"MSS value = MTU - 40 (IPv6 header) - 20 (TCP header), resulting in 1432 "
|
||||
"bytes on a 1492 byte MTU."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vrf.txt:4 a9dd6e480e244b208cdd37e605a843b5
|
||||
msgid "Place interface in given VRF instance."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vrf.txt:6 e04116eef19742b7a60d2774810dd5e5
|
||||
msgid ""
|
||||
"There is an entire chapter about how to configure a :ref:`vrf`, please check"
|
||||
" this for additional information."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:49
|
||||
#: 1476323fe1c54f98b88e61e3473e54ca
|
||||
msgid "VXLAN specific options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:53
|
||||
#: 80dd1b1d972247d99c27e24d530a1401
|
||||
msgid ""
|
||||
"Each VXLAN segment is identified through a 24-bit segment ID, termed the "
|
||||
":abbr:`VNI (VXLAN Network Identifier (or VXLAN Segment ID))`, This allows up"
|
||||
" to 16M VXLAN segments to coexist within the same administrative domain."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:59
|
||||
#: b064c6b2bebf49c1a0d50f107f200ca3
|
||||
msgid "Configure port number of remote VXLAN endpoint."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:61
|
||||
#: 88fd9cfc91d74705b8dcf5ee711321cf
|
||||
msgid ""
|
||||
"As VyOS is Linux based the default port used is not using 4789 as the "
|
||||
"default IANA-assigned destination UDP port number. Instead VyOS uses the "
|
||||
"Linux default port of 8472."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:67
|
||||
#: 3f744f355bef4481bb55ddcedaefb933
|
||||
msgid ""
|
||||
"Source IP address used for VXLAN underlay. This is mandatory when using "
|
||||
"VXLAN via L2VPN/EVPN."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:72
|
||||
#: f9f0162c65b54bde997a5a8356580007
|
||||
msgid ""
|
||||
"Specifies whether an external control plane (e.g. BGP L2VPN/EVPN) or the "
|
||||
"internal FDB should be used."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:77
|
||||
#: fcf40ec79f7344a0acbb50e2833219d4
|
||||
msgid ""
|
||||
"Eenables the Generic Protocol extension (VXLAN-GPE). Currently, this is only"
|
||||
" supported together with the external keyword."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:81
|
||||
#: ea8ed064d99842139fb29f1f91a03472
|
||||
msgid "Unicast"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:85
|
||||
#: 95b19e1341064663a8897744a5ad653f
|
||||
msgid ""
|
||||
"IPv4/IPv6 remote address of the VXLAN tunnel. Alternative to multicast, the "
|
||||
"remote IPv4/IPv6 address can set directly."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:89
|
||||
#: 1800ab3e0d314294a45522b960de7903
|
||||
msgid "Multicast"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:93
|
||||
#: ec86ed7adb54440fbe1f7f47a4402f7e
|
||||
msgid ""
|
||||
"Interface used for VXLAN underlay. This is mandatory when using VXLAN via a "
|
||||
"multicast network. VXLAN traffic will always enter and exit this interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:99
|
||||
#: d0b716a849e94f3dbced13299e986051
|
||||
msgid ""
|
||||
"Multicast group address for VXLAN interface. VXLAN tunnels can be built "
|
||||
"either via Multicast or via Unicast."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:102
|
||||
#: 9840154fd32c493c910ca16537811da7
|
||||
msgid "Both IPv4 and IPv6 multicast is possible."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:105
|
||||
#: 37ddf648102d4acdbdc8fd8d8ce0ca5d
|
||||
msgid "Multicast VXLAN"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:107
|
||||
#: b1fcbb04245b46ba90fc2520b4a31896
|
||||
msgid "Topology: PC4 - Leaf2 - Spine1 - Leaf3 - PC5"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:109
|
||||
#: a86f72f507ce47fda688f8efd3ffc9e4
|
||||
msgid ""
|
||||
"PC4 has IP 10.0.0.4/24 and PC5 has IP 10.0.0.5/24, so they believe they are "
|
||||
"in the same broadcast domain."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:112
|
||||
#: 9e6506a0ad5e47b0bec15a4b12df250f
|
||||
msgid ""
|
||||
"Let's assume PC4 on Leaf2 wants to ping PC5 on Leaf3. Instead of setting "
|
||||
"Leaf3 as our remote end manually, Leaf2 encapsulates the packet into a UDP-"
|
||||
"packet and sends it to its designated multicast-address via Spine1. When "
|
||||
"Spine1 receives this packet it forwards it to all other leaves who has "
|
||||
"joined the same multicast-group, in this case Leaf3. When Leaf3 receives the"
|
||||
" packet it forwards it, while at the same time learning that PC4 is "
|
||||
"reachable behind Leaf2, because the encapsulated packet had Leaf2's IP "
|
||||
"address set as source IP."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:120
|
||||
#: 3422507669e04dbeacbf442b9c3475fa
|
||||
msgid ""
|
||||
"PC5 receives the ping echo, responds with an echo reply that Leaf3 receives "
|
||||
"and this time forwards to Leaf2's unicast address directly because it "
|
||||
"learned the location of PC4 above. When Leaf2 receives the echo reply from "
|
||||
"PC5 it sees that it came from Leaf3 and so remembers that PC5 is reachable "
|
||||
"via Leaf3."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:125
|
||||
#: 9d0e7a2289144212bc401909e045be60
|
||||
msgid ""
|
||||
"Thanks to this discovery, any subsequent traffic between PC4 and PC5 will "
|
||||
"not be using the multicast-address between the leaves as they both know "
|
||||
"behind which Leaf the PCs are connected. This saves traffic as less "
|
||||
"multicast packets sent reduces the load on the network, which improves "
|
||||
"scalability when more leaves are added."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:131
|
||||
#: 73db07c32dc646808feeb341b0c5dd8f
|
||||
msgid ""
|
||||
"For optimal scalability, Multicast shouldn't be used at all, but instead use"
|
||||
" BGP to signal all connected devices between leaves. Unfortunately, VyOS "
|
||||
"does not yet support this."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:136
|
||||
#: 926a7f86dd7949dfa2c603aaabb8b49e
|
||||
msgid "Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:138
|
||||
#: 107ad2c3a2ba4decbceb11f7dd0a6dbf
|
||||
msgid "The setup is this: Leaf2 - Spine1 - Leaf3"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:140
|
||||
#: 916193a4d6204668be8a32c031dd5d13
|
||||
msgid ""
|
||||
"Spine1 is a Cisco IOS router running version 15.4, Leaf2 and Leaf3 is each a"
|
||||
" VyOS router running 1.2."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:143
|
||||
#: f9e58e6df40e4d6a811315fbc570286d
|
||||
msgid "This topology was built using GNS3."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:145
|
||||
#: 8058a20e78a74ed597ac686040016dad
|
||||
msgid "Topology:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:161
|
||||
#: 2dce7611b99741e5adbfef04c2aefcec
|
||||
msgid "**Spine1 Configuration:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:179
|
||||
#: 691055343fbb44bb9fbb82905b0925c7
|
||||
msgid ""
|
||||
"Multicast-routing is required for the leaves to forward traffic between each"
|
||||
" other in a more scalable way. This also requires PIM to be enabled towards "
|
||||
"the leaves so that the Spine can learn what multicast groups each Leaf "
|
||||
"expects traffic from."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:184
|
||||
#: 458b3a86f34348e598277ab8179fd711
|
||||
msgid "**Leaf2 configuration:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:209
|
||||
#: 4534495a3a3b476e9de8ff22e94caf20
|
||||
msgid "**Leaf3 configuration:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:234
|
||||
#: fde246b1b0164d30aba06fe4fd8edb92
|
||||
msgid ""
|
||||
"As you can see, Leaf2 and Leaf3 configuration is almost identical. There are"
|
||||
" lots of commands above, I'll try to into more detail below, command "
|
||||
"descriptions are placed under the command boxes:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:242
|
||||
#: c9be86b1405540a68f8843486e0b8001
|
||||
msgid ""
|
||||
"This commands creates a bridge that is used to bind traffic on eth1 vlan 241"
|
||||
" with the vxlan241-interface. The IP address is not required. It may however"
|
||||
" be used as a default gateway for each Leaf which allows devices on the vlan"
|
||||
" to reach other subnets. This requires that the subnets are redistributed by"
|
||||
" OSPF so that the Spine will learn how to reach it. To do this you need to "
|
||||
"change the OSPF network from '10.0.0.0/8' to '0.0.0.0/0' to allow "
|
||||
"172.16/12-networks to be advertised."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:255
|
||||
#: 0e61439579354d8d9a45de2547e2c10b
|
||||
msgid ""
|
||||
"Binds eth1.241 and vxlan241 to each other by making them both member "
|
||||
"interfaces of the same bridge."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:262
|
||||
#: 6489cee9f7ae49cbac8fe1b2ba49d79e
|
||||
msgid ""
|
||||
"The multicast-group used by all leaves for this vlan extension. Has to be "
|
||||
"the same on all leaves that has this interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:269
|
||||
#: 2066c6b7213242ce8331e2645c575637
|
||||
msgid ""
|
||||
"Sets the interface to listen for multicast packets on. Could be a loopback, "
|
||||
"not yet tested."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:276
|
||||
#: f94113b900fe4be9a24425630b69055d
|
||||
msgid ""
|
||||
"Sets the unique id for this vxlan-interface. Not sure how it correlates with"
|
||||
" multicast-address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:283
|
||||
#: 668dbcb7aaa54add97365968915bfcae
|
||||
msgid ""
|
||||
"The destination port used for creating a VXLAN interface in Linux defaults "
|
||||
"to its pre-standard value of 8472 to preserve backward compatibility. A "
|
||||
"configuration directive to support a user-specified destination port to "
|
||||
"override that behavior is available using the above command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:289
|
||||
#: aba21afdabbc4e148e4c30cab03dc66d
|
||||
msgid "Unicast VXLAN"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:291
|
||||
#: f30d134ae72442c8b1a589d0886f64aa
|
||||
msgid ""
|
||||
"Alternative to multicast, the remote IPv4 address of the VXLAN tunnel can be"
|
||||
" set directly. Let's change the Multicast example from above:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/vxlan.rst:306
|
||||
#: d870be0823214e3aa5ee2fdd008decec
|
||||
msgid ""
|
||||
"The default port udp is set to 8472. It can be changed with ``set interface "
|
||||
"vxlan <vxlanN> port <port>``"
|
||||
msgstr ""
|
||||
@ -1,372 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:04+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:7
|
||||
#: a1bee5f5221a453aaf1cd16cb00b6129
|
||||
msgid "WireGuard"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:9
|
||||
#: 710bfba9877a436bb50b7c27cde335f7
|
||||
msgid ""
|
||||
"WireGuard is an extremely simple yet fast and modern VPN that utilizes "
|
||||
"state-of-the-art cryptography. See https://www.wireguard.com for more "
|
||||
"information."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:15
|
||||
#: 3435bf602fee482387028b79743e9eab
|
||||
msgid "Site to Site VPN"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:17
|
||||
#: d6aa2700e90143f287d2a94c1cf3b1d6
|
||||
msgid ""
|
||||
"This diagram corresponds with the example site to site configuration below."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:23
|
||||
#: ec99e10935ac4c93bc66cbce754ebdc6
|
||||
msgid "Keypairs"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:25
|
||||
#: d04e0d6124264156a0220815965a0f2b
|
||||
msgid ""
|
||||
"WireGuard requires the generation of a keypair, which includes a private key"
|
||||
" to decrypt incoming traffic, and a public key for peer(s) to encrypt "
|
||||
"traffic."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:29
|
||||
#: c8be0ca19d684d8a889a10e4f1d3f3a9
|
||||
msgid "Generate Keypair"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:33
|
||||
#: 13d45a18444e45aa86f39e1417764b47
|
||||
msgid ""
|
||||
"It generates the keypair, which includes the public and private parts. The "
|
||||
"key is not stored on the system - only a keypair is generated."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:44
|
||||
#: 0272e272bba34e2aaaaa9ff6b27f2d35
|
||||
msgid ""
|
||||
"Generates a keypair, which includes the public and private parts, and build "
|
||||
"a configuration command to install this key to ``interface``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:57
|
||||
#: ../../configuration/interfaces/wireguard.rst:120
|
||||
#: 31f23ec215da437aa4e8356459455d6c 3f2023b9d9ee4ebc943bef15afb2bf6a
|
||||
msgid ""
|
||||
"If this command is invoked from configure mode with the ``run`` prefix the "
|
||||
"key is automatically installed to the appropriate interface:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:77
|
||||
#: 9f257b81f6504655a735155401277302
|
||||
msgid "Retrieve public key portion from configured WIreGuard interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:86
|
||||
#: f2af224a811e4c4c92b9df55aa527e0a
|
||||
msgid "Optional"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:90
|
||||
#: b00f9a26c713415792790e3eae8c3430
|
||||
msgid ""
|
||||
"An additional layer of symmetric-key crypto can be used on top of the "
|
||||
"asymmetric crypto."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:93
|
||||
#: ../../configuration/interfaces/wireguard.rst:107
|
||||
#: f2116c1a9f2f4ffc82656d101b7dcdf1 675df37fb69747e3955e2a707047f583
|
||||
msgid "This is optional."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:103
|
||||
#: f0fff0ae537549ab86505d1a104b35b1
|
||||
msgid ""
|
||||
"An additional layer of symmetric-key crypto can be used on top of the "
|
||||
"asymmetric crypto. This command automatically creates for you the required "
|
||||
"CLI command to install this PSK for a given peer."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:126
|
||||
#: 7c99f5758f9c457a9212343271e4b987
|
||||
msgid "Interface configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:128
|
||||
#: 24a42de74dfd456eb95e6a0dd6b1c53a
|
||||
msgid ""
|
||||
"The next step is to configure your local side as well as the policy based "
|
||||
"trusted destination addresses. If you only initiate a connection, the listen"
|
||||
" port and address/port is optional; however, if you act like a server and "
|
||||
"endpoints initiate the connections to your system, you need to define a port"
|
||||
" your clients can connect to, otherwise the port is randomly chosen and may "
|
||||
"make connection difficult with firewall rules, since the port may be "
|
||||
"different each time the system is rebooted."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:136
|
||||
#: 0deee65bec00410eafa271fb1247fdcb
|
||||
msgid ""
|
||||
"You will also need the public key of your peer as well as the network(s) you"
|
||||
" want to tunnel (allowed-ips) to configure a WireGuard tunnel. The public "
|
||||
"key below is always the public key from your peer, not your local one."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:140
|
||||
#: ba5550371dcf4d778767b5ab35a38b0a
|
||||
msgid "**local side - commands**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:142
|
||||
#: 4d65a076c1194586a18aa696727290fe
|
||||
msgid "WireGuard interface itself uses address 10.1.0.1/30"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:143
|
||||
#: 769476a44da940689a48ce04125ad8a6
|
||||
msgid "We only allow the 192.168.2.0/24 subnet to travel over the tunnel"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:144
|
||||
#: 4b962d4e32fc4719a0e6e1d8c9422db0
|
||||
msgid ""
|
||||
"Our remote end of the tunnel for peer `to-wg02` is reachable at 192.0.2.1 "
|
||||
"port 51820"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:146
|
||||
#: aaea26c9ecba457b8a3bfc95acd32fb7
|
||||
msgid ""
|
||||
"The remote peer `to-wg02` uses XMrlPykaxhdAAiSjhtPlvi30NVkvLQliQuKP7AI7CyI= "
|
||||
"as its public key portion"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:148
|
||||
#: 384cc95688fe4980b69440e39bb8681d
|
||||
msgid "We listen on port 51820"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:149
|
||||
#: 730b88fad94646b5a9f9f81a42d71455
|
||||
msgid ""
|
||||
"We route all traffic for the 192.168.2.0/24 network to interface `wg01`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:163
|
||||
#: 6f4ee13223c14b94a51a25a20db46d19
|
||||
msgid ""
|
||||
"The last step is to define an interface route for 192.168.2.0/24 to get "
|
||||
"through the WireGuard interface `wg01`. Multiple IPs or networks can be "
|
||||
"defined and routed. The last check is allowed-ips which either prevents or "
|
||||
"allows the traffic."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:168
|
||||
#: 333629b161c34847a2a56c56143833f4
|
||||
msgid ""
|
||||
"You can not assign the same allowed-ips statement to multiple WireGuard "
|
||||
"peers. This a design decision. For more information please check the "
|
||||
"`WireGuard mailing list`_."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:174
|
||||
#: 5ce51b439ec347768b4f74bb19cec70e
|
||||
msgid ""
|
||||
"Associates the previously generated private key to a specific WireGuard "
|
||||
"interface. The private key can be generate via the command :opcmd:`generate "
|
||||
"pki wireguard key-pair`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:182
|
||||
#: 28863acf61374fa4898e36969aeea933
|
||||
msgid ""
|
||||
"The command :opcmd:`show interfaces wireguard wg01 public-key` will then "
|
||||
"show the public key, which needs to be shared with the peer."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:185
|
||||
#: 0070cb42879e45c18f19f855a89af73c
|
||||
msgid "**remote side - commands**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:201
|
||||
#: 216ca950a66847a8b152b646cb9a35ea
|
||||
msgid "Firewall Exceptions"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:203
|
||||
#: e892a0980c394747a411659ab5bb5618
|
||||
msgid ""
|
||||
"For the WireGuard traffic to pass through the WAN interface, you must create"
|
||||
" a firewall exception."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:219
|
||||
#: 1e9c996c042748aeb8d5b73959b61342
|
||||
msgid ""
|
||||
"You should also ensure that the OUTISDE_LOCAL firewall group is applied to "
|
||||
"the WAN interface and a direction (local)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:226
|
||||
#: 878579387eb849d1b7740e5b814fd244
|
||||
msgid ""
|
||||
"Assure that your firewall rules allow the traffic, in which case you have a "
|
||||
"working VPN using WireGuard."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:241
|
||||
#: 2962f488240a4e05b65a2cf2912a3708
|
||||
msgid ""
|
||||
"An additional layer of symmetric-key crypto can be used on top of the "
|
||||
"asymmetric crypto. This is optional."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:249
|
||||
#: 44ee94bee28443cd92075862639cc18b
|
||||
msgid ""
|
||||
"Copy the key, as it is not stored on the local filesystem. Because it is a "
|
||||
"symmetric key, only you and your peer should have knowledge of its content. "
|
||||
"Make sure you distribute the key in a safe manner,"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:261
|
||||
#: 8e6f16c2d425421f949bb875bbfc15ef
|
||||
msgid "Remote Access \"RoadWarrior\" Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:263
|
||||
#: 5b103c21987d42a1a8999ad95bd9dfbf
|
||||
msgid ""
|
||||
"With WireGuard, a Road Warrior VPN config is similar to a site-to-site VPN. "
|
||||
"It just lacks the ``address`` and ``port`` statements."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:266
|
||||
#: 17a313f0dc7646e59fd0a552d16f5757
|
||||
msgid ""
|
||||
"In the following example, the IPs for the remote clients are defined in the "
|
||||
"peers. This allows the peers to interact with one another. In comparison to "
|
||||
"the site-to-site example the ``persistent-keepalive`` flag is set to 15 "
|
||||
"seconds to assure the connection is kept alive. This is mainly relevant if "
|
||||
"one of the peers is behind NAT and can't be connected to if the connection "
|
||||
"is lost. To be effective this value needs to be lower than the UDP timeout."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:295
|
||||
#: 25cf7f28ebd74991a17c92edf42ca10c
|
||||
msgid ""
|
||||
"The following is the config for the iPhone peer above. It's important to "
|
||||
"note that the ``AllowedIPs`` wildcard setting directs all IPv4 and IPv6 "
|
||||
"traffic through the connection."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:312
|
||||
#: b0aecf335b6a4073ae9dd69c800e64dd
|
||||
msgid ""
|
||||
"However, split-tunneling can be achieved by specifying the remote subnets. "
|
||||
"This ensures that only traffic destined for the remote site is sent over the"
|
||||
" tunnel. All other traffic is unaffected."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:331
|
||||
#: 964f1ba345564dbabe3008c96efd1e88
|
||||
msgid "Operational Commands"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:334
|
||||
#: b9cfaeb7547c4c40963e6702a11566cd
|
||||
msgid "Status"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:338
|
||||
#: 2211de4664e4433ab4e4bed8ebb59bf0
|
||||
msgid ""
|
||||
"Show info about the Wireguard service. It also shows the latest handshake."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:357
|
||||
#: 4daa4d6d12654c81b93ee6e4218007d4
|
||||
msgid "Get a list of all wireguard interfaces"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:369
|
||||
#: d21be5b2fffc448596ed14ca4b478572
|
||||
msgid "Show general information about specific WireGuard interface"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:387
|
||||
#: 7564628d39d84223ae0163f5bf633cd4
|
||||
msgid "Remote Access \"RoadWarrior\" clients"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:389
|
||||
#: ccf0c6ec8d3949c3b619991d0c0a97b1
|
||||
msgid ""
|
||||
"Some users tend to connect their mobile devices using WireGuard to their "
|
||||
"VyOS router. To ease deployment one can generate a \"per mobile\" "
|
||||
"configuration from the VyOS CLI."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:393
|
||||
#: 3830e59d42034f69adc601a57fac3846
|
||||
msgid ""
|
||||
"From a security perspective, it is not recommended to let a third party "
|
||||
"create and share the private key for a secured connection. You should create"
|
||||
" the private portion on your own and only hand out the public key. Please "
|
||||
"keep this in mind when using this convenience feature."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:401
|
||||
#: 4aaf366a8434463885eb6c386837abb4
|
||||
msgid ""
|
||||
"Using this command, you will create a new client configuration which can "
|
||||
"connect to ``interface`` on this router. The public key from the specified "
|
||||
"interface is automatically extracted and embedded into the configuration."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:405
|
||||
#: ee4f0857baa449ceb1212c77e5a21807
|
||||
msgid ""
|
||||
"The command also generates a configuration snipped which can be copy/pasted "
|
||||
"into the VyOS CLI if needed. The supplied ``<name>`` on the CLI will become "
|
||||
"the peer name in the snippet."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:409
|
||||
#: c5728006d4fa435eb2be15a7683d6aac
|
||||
msgid ""
|
||||
"In addition you will specifiy the IP address or FQDN for the client where it"
|
||||
" will connect to. The address parameter can be used up to two times and is "
|
||||
"used to assign the clients specific IPv4 (/32) or IPv6 (/128) address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wireguard.rst:0
|
||||
#: c602b15c70a844c1b9d77f134396f260
|
||||
msgid "WireGuard Client QR code"
|
||||
msgstr ""
|
||||
File diff suppressed because it is too large
Load Diff
@ -1,710 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:04+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:7 231ad24e31bf4bae9e51fb542ecb65da
|
||||
msgid "WWAN - Wireless Wide-Area-Network"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:9 992449ad4b314c509e739000f706ad8b
|
||||
msgid ""
|
||||
"The Wireless Wide-Area-Network interface provides access (through a wireless"
|
||||
" modem/wwan) to wireless networks provided by various cellular providers."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:12 6943d09f5e43468691c34c43ef0dd9e8
|
||||
msgid "VyOS uses the `interfaces wwan` subsystem for configuration."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:16 9e60f4603c07426d9bb2dad3ac8a9726
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:19 bb98d42be4c54cb79102d0d9284d154d
|
||||
msgid "Common interface configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address-with-dhcp.txt:5
|
||||
#: 43eed503a0ab44ea87274b41f64c8040
|
||||
msgid ""
|
||||
"Configure interface `<interface>` with one or more interface addresses."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address-with-dhcp.txt:7
|
||||
#: 00a1d95d696b428ca4bfd0a914fee715
|
||||
msgid ""
|
||||
"**address** can be specified multiple times as IPv4 and/or IPv6 address, "
|
||||
"e.g. 192.0.2.1/24 and/or 2001:db8::1/64"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address-with-dhcp.txt:9
|
||||
#: a911e739d0804fee998e1212318a0f47
|
||||
msgid ""
|
||||
"**dhcp** interface address is received by DHCP from a DHCP server on this "
|
||||
"segment."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address-with-dhcp.txt:11
|
||||
#: c142efec979e446c9ceb226eb698870f
|
||||
msgid ""
|
||||
"**dhcpv6** interface address is received by DHCPv6 from a DHCPv6 server on "
|
||||
"this segment."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-address-with-dhcp.txt:14
|
||||
#: ../../_include/interface-description.txt:7
|
||||
#: ../../_include/interface-disable.txt:7
|
||||
#: ../../_include/interface-disable-link-detect.txt:9
|
||||
#: ../../_include/interface-mtu.txt:7 ../../_include/interface-ip.txt:27
|
||||
#: ../../_include/interface-ip.txt:50 ../../_include/interface-ip.txt:144
|
||||
#: ../../_include/interface-ipv6.txt:15 ../../_include/interface-ipv6.txt:28
|
||||
#: ../../_include/interface-ipv6.txt:39 ../../_include/interface-ipv6.txt:51
|
||||
#: ../../_include/interface-vrf.txt:9
|
||||
#: ../../_include/interface-dhcp-options.txt:10
|
||||
#: ../../_include/interface-dhcp-options.txt:22
|
||||
#: ../../_include/interface-dhcp-options.txt:34
|
||||
#: ../../_include/interface-dhcp-options.txt:46
|
||||
#: ../../_include/interface-dhcp-options.txt:57
|
||||
#: ../../_include/interface-dhcp-options.txt:72
|
||||
#: c49654900b14484f964e38d59959c135 d717d1274735424196e53b89855f1fc5
|
||||
#: e20c48a9b9d6432c9f04fcf87a2b0ac3 cc255888362948d4899243491dcf537a
|
||||
#: a17c14c8dced46e48d5609c2771a92e6 5e7fbda40059408c9e70aa1ebca1db2f
|
||||
#: a6cdab28989b42e592bdafe100defdcd 909400dc3a86408293a2240a0e58b6ee
|
||||
#: 63308f063926423babd611462d72bae1 776816f619c440b3a73644372e5f6af6
|
||||
#: f3c9e2da690a42058d14c869c94e6607 d6e2f7152d66469c97f2feeeeed0fcde
|
||||
#: 6a0418c49f5045b0b4a44fa4fcb1ddbd c0081bb19f834487814fc0a5b3dea77b
|
||||
#: e6cdb19e2a1e496481a40ab031363478 42faec2a295b4eefa62a0ea824e24440
|
||||
#: b1dcebe389ee48cdbb01212136513773 070010405f644fd1af21f74de8e2f439
|
||||
#: 9e722ffd4f3348768e4136d4e584b095
|
||||
msgid "Example:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-description.txt:4 50f9869b06c64e0c9f07b632b7f32e21
|
||||
msgid ""
|
||||
"Set a human readable, descriptive alias for this connection. Alias is used "
|
||||
"by e.g. the :opcmd:`show interfaces` command or SNMP based monitoring tools."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable.txt:4 af43383d8ff84f7aa41dfc27c324adc8
|
||||
msgid ""
|
||||
"Disable given `<interface>`. It will be placed in administratively down "
|
||||
"(``A/D``) state."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-link-detect.txt:4
|
||||
#: a47e96df9e734941a13794d3fa328172
|
||||
msgid ""
|
||||
"Use this command to direct an interface to not detect any physical state "
|
||||
"changes on a link, for example, when the cable is unplugged."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-disable-link-detect.txt:7
|
||||
#: 75c2510fb55143f49f6d860f24fd4866
|
||||
msgid "Default is to detects physical link state changes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-mtu.txt:4 10b652a4979545eca88554674139bc70
|
||||
msgid ""
|
||||
"Configure :abbr:`MTU (Maximum Transmission Unit)` on given `<interface>`. It"
|
||||
" is the size (in bytes) of the largest ethernet frame sent on this link."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:4 ../../_include/interface-ipv6.txt:60
|
||||
#: 7e9f0242c89640dab2a3b827cf9849b7 b499b697a64846faa35f7707866bd890
|
||||
msgid ""
|
||||
"As Internet wide PMTU discovery rarely works, we sometimes need to clamp our"
|
||||
" TCP MSS value to a specific value. This is a field in the TCP options part "
|
||||
"of a SYN packet. By setting the MSS value, you are telling the remote side "
|
||||
"unequivocally 'do not try to send me packets bigger than this value'."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:9 81e306041aca440f9706787da9df16a5
|
||||
msgid ""
|
||||
"This command was introduced in VyOS 1.4 - it was previously called: ``set "
|
||||
"firewall options interface <name> adjust-mss <value>``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:12 57a7f6b80536429a91a1c296d2b1dc2d
|
||||
msgid ""
|
||||
"MSS value = MTU - 20 (IP header) - 20 (TCP header), resulting in 1452 bytes "
|
||||
"on a 1492 byte MTU."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:15 ../../_include/interface-ipv6.txt:71
|
||||
#: ddfbfdfbf5ec46ef9bcf241ef73c6118 9b8fda98f7934303a3a5c822aa4dabb6
|
||||
msgid ""
|
||||
"Instead of a numerical MSS value `clamp-mss-to-pmtu` can be used to "
|
||||
"automatically set the proper value."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:21 f0040f44ce3b42f58b3d4a838e2ef93a
|
||||
msgid ""
|
||||
"Once a neighbor has been found, the entry is considered to be valid for at "
|
||||
"least for this specific time. An entry's validity will be extended if it "
|
||||
"receives positive feedback from higher level protocols."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:25 cc6597faf4b249d4bcd18366956037f4
|
||||
msgid "This defaults to 30 seconds."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:36 ea95a6a6be094784bf96ce87b4008272
|
||||
msgid ""
|
||||
"If set the kernel can respond to arp requests with addresses from other "
|
||||
"interfaces. This may seem wrong but it usually makes sense, because it "
|
||||
"increases the chance of successful communication. IP addresses are owned by "
|
||||
"the complete host on Linux, not by particular interfaces. Only for more "
|
||||
"complex setups like load-balancing, does this behaviour cause problems."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:42 e1b2f19234094227a3462475cc112e1b
|
||||
msgid ""
|
||||
"If not set (default) allows you to have multiple network interfaces on the "
|
||||
"same subnet, and have the ARPs for each interface be answered based on "
|
||||
"whether or not the kernel would route a packet from the ARP'd IP out that "
|
||||
"interface (therefore you must use source based routing for this to work)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:47 5fb3535e049f412e8fca5cb078ae3c47
|
||||
msgid ""
|
||||
"In other words it allows control of which cards (usually 1) will respond to "
|
||||
"an arp request."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:59 ../../_include/interface-ipv6.txt:48
|
||||
#: 2d0bcb8299ba4891997f7b91f5d3ba12 ed8895f1d4f645d0886979c22a58238d
|
||||
msgid ""
|
||||
"Configure interface-specific Host/Router behaviour. If set, the interface "
|
||||
"will switch to host mode and IPv6 forwarding will be disabled on this "
|
||||
"interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:69 9ef7d844460448df8e53f2889d9b20d2
|
||||
msgid ""
|
||||
"Define different modes for IP directed broadcast forwarding as described in "
|
||||
":rfc:`1812` and :rfc:`2644`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:72 5f98f57288274f2fa1199334e395a89d
|
||||
msgid ""
|
||||
"If configured, incoming IP directed broadcast packets on this interface will"
|
||||
" be forwarded."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:75 1c93a73e4b2f4612b8d2050d6baa6d2a
|
||||
msgid ""
|
||||
"If this option is unset (default), incoming IP directed broadcast packets "
|
||||
"will not be forwarded."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:85 420aaa4a8caa449cb241cfaa8c235c03
|
||||
msgid ""
|
||||
"Define behavior for gratuitous ARP frames who's IP is not already present in"
|
||||
" the ARP table. If configured create new entries in the ARP table."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:88 4c4f518296444c72a56908585d21cfcd
|
||||
msgid ""
|
||||
"Both replies and requests type gratuitous arp will trigger the ARP table to "
|
||||
"be updated, if this setting is on."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:91 81b43184006e4597abb49adbcc2b1677
|
||||
msgid ""
|
||||
"If the ARP table already contains the IP address of the gratuitous arp "
|
||||
"frame, the arp table will be updated regardless if this setting is on or "
|
||||
"off."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:101 0b9da423e2c34802a9e3cb1f097a5843
|
||||
msgid ""
|
||||
"Define different restriction levels for announcing the local source IP "
|
||||
"address from IP packets in ARP requests sent on interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:104 3fef637e145a4e36b6c31519a04c1f1e
|
||||
msgid "Use any local address, configured on any interface if this is not set."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:106 b9cbb256e4de421f88d5d53440db17f7
|
||||
msgid ""
|
||||
"If configured, try to avoid local addresses that are not in the target's "
|
||||
"subnet for this interface. This mode is useful when target hosts reachable "
|
||||
"via this interface require the source IP address in ARP requests to be part "
|
||||
"of their logical network configured on the receiving interface. When we "
|
||||
"generate the request we will check all our subnets that include the target "
|
||||
"IP and will preserve the source address if it is from such subnet. If there "
|
||||
"is no such subnet we select source address according to the rules for level "
|
||||
"2."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:121 4c001043510b4657b37f667e71f6e0f6
|
||||
msgid ""
|
||||
"Define different modes for sending replies in response to received ARP "
|
||||
"requests that resolve local target IP addresses:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:124 8cedabddff8c46b099d7498205adac00
|
||||
msgid ""
|
||||
"If configured, reply only if the target IP address is local address "
|
||||
"configured on the incoming interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:127 56aab1ab16034b2ea055b95e51ec904d
|
||||
msgid ""
|
||||
"If this option is unset (default), reply for any local target IP address, "
|
||||
"configured on any interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:137 a0113b8c4af14f6a9628b3eaf5e46612
|
||||
msgid ""
|
||||
"Use this command to enable proxy Address Resolution Protocol (ARP) on this "
|
||||
"interface. Proxy ARP allows an Ethernet interface to respond with its own "
|
||||
":abbr:`MAC (Media Access Control)` address to ARP requests for destination "
|
||||
"IP addresses on subnets attached to other interfaces on the system. "
|
||||
"Subsequent packets sent to those destination IP addresses are forwarded "
|
||||
"appropriately by the system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:153 fcc8686cf0c34219a91c115c589514fb
|
||||
msgid ""
|
||||
"Private VLAN proxy arp. Basically allow proxy arp replies back to the same "
|
||||
"interface (from which the ARP request/solicitation was received)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:156 10c82886a9fd479ab18c609da348b773
|
||||
msgid ""
|
||||
"This is done to support (ethernet) switch features, like :rfc:`3069`, where "
|
||||
"the individual ports are NOT allowed to communicate with each other, but "
|
||||
"they are allowed to talk to the upstream router. As described in "
|
||||
":rfc:`3069`, it is possible to allow these hosts to communicate through the "
|
||||
"upstream router by proxy_arp'ing."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:162 f94dc7a593104a938d1e3b39a3d6d0f9
|
||||
msgid "Does not need to be used together with proxy_arp."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:164 3c0554f13f61454db9de8d4bf6ce86e8
|
||||
msgid "This technology is known by different names:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:166 0709e9a3c9bc40baad7310fad184e0e3
|
||||
msgid "In :rfc:`3069` it is called VLAN Aggregation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:168 c54d5675f813483181273a1a8efe2d93
|
||||
msgid "Cisco and Allied Telesyn call it Private VLAN"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:170 a83194ba2b354d0d9f5848c1e6603041
|
||||
msgid "Hewlett-Packard call it Source-Port filtering or port-isolation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:172 f233bb60fc044a34956b95ab0ea07e02
|
||||
msgid "Ericsson call it MAC-Forced Forwarding (RFC Draft)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:177 14de387da9d94cb5a2ed52c1ffc30950
|
||||
msgid ""
|
||||
"Enable policy for source validation by reversed path, as specified in "
|
||||
":rfc:`3704`. Current recommended practice in :rfc:`3704` is to enable strict"
|
||||
" mode to prevent IP spoofing from DDos attacks. If using asymmetric routing "
|
||||
"or other complicated routing, then loose mode is recommended."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:182 cf36da1daf8a45a5a1181a7c2ad2cf86
|
||||
msgid ""
|
||||
"strict: Each incoming packet is tested against the FIB and if the interface "
|
||||
"is not the best reverse path the packet check will fail. By default failed "
|
||||
"packets are discarded."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:186 26ada7c06b9649ae9fdd8d51852362db
|
||||
msgid ""
|
||||
"loose: Each incoming packet's source address is also tested against the FIB "
|
||||
"and if the source address is not reachable via any interface the packet "
|
||||
"check will fail."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ip.txt:190 7eac584eecf6438599b9980fb835acf7
|
||||
msgid "disable: No source validation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:4 e8f2ce9363a345ccb0ea12a35014d715
|
||||
msgid ""
|
||||
":abbr:`SLAAC (Stateless Address Autoconfiguration)` :rfc:`4862`. IPv6 hosts "
|
||||
"can configure themselves automatically when connected to an IPv6 network "
|
||||
"using the Neighbor Discovery Protocol via :abbr:`ICMPv6 (Internet Control "
|
||||
"Message Protocol version 6)` router discovery messages. When first connected"
|
||||
" to a network, a host sends a link-local router solicitation multicast "
|
||||
"request for its configuration parameters; routers respond to such a request "
|
||||
"with a router advertisement packet that contains Internet Layer "
|
||||
"configuration parameters."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:12 cd540d2584da421490378bf3e831122e
|
||||
msgid ""
|
||||
"This method automatically disables IPv6 traffic forwarding on the interface "
|
||||
"in question."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:25 6f3aa6ae21e040779b6ca6d0fd95865b
|
||||
msgid ""
|
||||
":abbr:`EUI-64 (64-Bit Extended Unique Identifier)` as specified in "
|
||||
":rfc:`4291` allows a host to assign iteslf a unique 64-Bit IPv6 address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:37 661b9d644aaf45fb8dcf2d1aad1897aa
|
||||
msgid "Do not assign a link-local IPv6 address to this interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:65 68ccfbe56259486d827279f784960845
|
||||
msgid ""
|
||||
"This command was introduced in VyOS 1.4 - it was previously called: ``set "
|
||||
"firewall options interface <name> adjust-mss6 <value>``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-ipv6.txt:68 70e961e874c547d3a2a239fe4cad82d8
|
||||
msgid ""
|
||||
"MSS value = MTU - 40 (IPv6 header) - 20 (TCP header), resulting in 1432 "
|
||||
"bytes on a 1492 byte MTU."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vrf.txt:4 6a36ef03d12f47da8614fe8e817e69d5
|
||||
msgid "Place interface in given VRF instance."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-vrf.txt:6 b0ae9521dcd246b69806f893fd1ce7c0
|
||||
msgid ""
|
||||
"There is an entire chapter about how to configure a :ref:`vrf`, please check"
|
||||
" this for additional information."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:54 be1222941fae4434bb9528104345da7f
|
||||
msgid "**DHCP(v6)**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcp-options.txt:4
|
||||
#: b6193a92af4946b3bb865520ca8534f0
|
||||
msgid ""
|
||||
":rfc:`2131` states: The client MAY choose to explicitly provide the "
|
||||
"identifier through the 'client identifier' option. If the client supplies a "
|
||||
"'client identifier', the client MUST use the same 'client identifier' in all"
|
||||
" subsequent messages, and the server MUST use that identifier to identify "
|
||||
"the client."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcp-options.txt:19
|
||||
#: c047021d3b264227bf2b140808628d47
|
||||
msgid ""
|
||||
"Instead of sending the real system hostname to the DHCP server, overwrite "
|
||||
"the host-name with this given-value."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcp-options.txt:31
|
||||
#: 5e8e884d082048d68e3f93a1904f1003
|
||||
msgid ""
|
||||
"The vendor-class-id option can be used to request a specific class of vendor"
|
||||
" options from the server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcp-options.txt:43
|
||||
#: a71ea77bb8ae4fff998a21e933fcb752
|
||||
msgid ""
|
||||
"Only request an address from the DHCP server but do not request a default "
|
||||
"gateway."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcp-options.txt:55
|
||||
#: 7f4baa304c034d7287c3d5c64fa7fc00
|
||||
msgid "Set the distance for the default gateway sent by the DHCP server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcp-options.txt:66
|
||||
#: ea1d6d6d35d54df0992662a6ea231c26
|
||||
msgid ""
|
||||
"Reject DHCP leases from a given address or range. This is useful when a "
|
||||
"modem gives a local IP when first starting."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcp-options.txt:69
|
||||
#: 2941f6b5d5ea4265b4ca81a4ff6ec788
|
||||
msgid ""
|
||||
"**address** can be specified multiple times, e.g. 192.168.100.1 and/or "
|
||||
"192.168.100.0/24"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-options.txt:4
|
||||
#: 5281378f797f4c51ace9a5c8f60eaf7f
|
||||
msgid ""
|
||||
"The DHCP unique identifier (DUID) is used by a client to get an IP address "
|
||||
"from a DHCPv6 server. It has a 2-byte DUID type field, and a variable-length"
|
||||
" identifier field up to 128 bytes. Its actual length depends on its type. "
|
||||
"The server compares the DUID with its database and delivers configuration "
|
||||
"data (address, lease times, DNS servers, etc.) to the client."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-options.txt:17
|
||||
#: 7d0eb274334c44ac8707035db5e42ef0
|
||||
msgid ""
|
||||
"This statement specifies dhcp6c to only exchange informational configuration"
|
||||
" parameters with servers. A list of DNS server addresses is an example of "
|
||||
"such parameters. This statement is useful when the client does not need "
|
||||
"stateful configuration parameters such as IPv6 addresses or prefixes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-options.txt:29
|
||||
#: 641b4e0060a841d6914310f11739fa00
|
||||
msgid ""
|
||||
"When rapid-commit is specified, dhcp6c will include a rapid-commit option in"
|
||||
" solicit messages and wait for an immediate reply instead of advertisements."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-options.txt:39
|
||||
#: 38b55a8d8770499488a25ac3d0247f5b
|
||||
msgid ""
|
||||
"Request only a temporary address and not form an IA_NA (Identity Association"
|
||||
" for Non-temporary Addresses) partnership."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1
|
||||
#: 964d131501d0439bb5582fc387f21aa0
|
||||
msgid "**DHCPv6 Prefix Delegation (PD)**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:3
|
||||
#: 9bebbc60e2554c35ad2fc16b61cad324
|
||||
msgid ""
|
||||
"VyOS 1.3 (equuleus) supports DHCPv6-PD (:rfc:`3633`). DHCPv6 Prefix "
|
||||
"Delegation is supported by most ISPs who provide native IPv6 for consumers "
|
||||
"on fixed networks."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:10
|
||||
#: ab9a16df68474805bd0f169876c893dd
|
||||
msgid ""
|
||||
"Some ISPs by default only delegate a /64 prefix. To request for a specific "
|
||||
"prefix size use this option to request for a bigger delegation for this pd "
|
||||
"`<id>`. This value is in the range from 32 - 64 so you could request up to a"
|
||||
" /32 prefix (if your ISP allows this) down to a /64 delegation."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:15
|
||||
#: a17e2b05141e458db342754e33d86492
|
||||
msgid "The default value corresponds to 64."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:17
|
||||
#: 393b4e3ad57844cdbfa33ef246dfb356
|
||||
msgid "To request a /56 prefix from your ISP use:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:27
|
||||
#: 1f53c131486c4d01a755cd9b36bb1571
|
||||
msgid ""
|
||||
"Specify the interface address used locally on the interface where the prefix"
|
||||
" has been delegated to. ID must be a decimal integer."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:30
|
||||
#: ed8206eddcc44d5ebf5b04870fb70ded
|
||||
msgid ""
|
||||
"It will be combined with the delegated prefix and the sla-id to form a "
|
||||
"complete interface address. The default is to use the EUI-64 address of the "
|
||||
"interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:36
|
||||
#: 31e8c898b32c44a7be3a896c510aa44f
|
||||
msgid ""
|
||||
"Example: Delegate a /64 prefix to interface eth8 which will use a local "
|
||||
"address on this router of ``<prefix>::ffff``, as the address 65534 will "
|
||||
"correspond to ``ffff`` in hexadecimal notation."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:50
|
||||
#: 373885c3a2fb41a3a19cc533d689e575
|
||||
msgid ""
|
||||
"Specify the identifier value of the site-level aggregator (SLA) on the "
|
||||
"interface. ID must be a decimal number greater then 0 which fits in the "
|
||||
"length of SLA IDs (see below)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/interface-dhcpv6-prefix-delegation.txt:54
|
||||
#: b3717515150e4d0d930b5a27b555c60a
|
||||
msgid ""
|
||||
"Example: If ID is 1 and the client is delegated an IPv6 prefix "
|
||||
"2001:db8:ffff::/48, dhcp6c will combine the two values into a single IPv6 "
|
||||
"prefix, 2001:db8:ffff:1::/64, and will configure the prefix on the specified"
|
||||
" interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:69 315e5e5f9bd940d298bf51260adb99a0
|
||||
msgid "WirelessModem (WWAN) options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:73 afb346a57af6412280fd9917014cbeee
|
||||
msgid ""
|
||||
"Every WWAN connection requires an :abbr:`APN (Access Point Name)` which is "
|
||||
"used by the client to dial into the ISPs network. This is a mandatory "
|
||||
"parameter. Contact your Service Provider for correct APN."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:80 b6b605d0acd64827aa669538ec3cddd1
|
||||
msgid "Operation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:84 a142e54046e84b668d16364d4dc6b2f3
|
||||
msgid "Show detailed information on given `<interface>`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:103
|
||||
#: 4be1cdcdb94346c78fbc408c3a071941
|
||||
msgid "Show detailed information summary on given `<interface>`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:170
|
||||
#: 2554d1c57ec847d9935f1a450939b8ab
|
||||
msgid "Show WWAN module hardware capabilities."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:185
|
||||
#: 32e59af3aee3445ab3208d6aa92769f9
|
||||
msgid "Show WWAN module firmware."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:201
|
||||
#: c1b838c53f6948c6bd895cae41fd565e
|
||||
msgid "Show WWAN module IMEI."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:212
|
||||
#: b63eaa3f23ee4dd89b497e015f18fd89
|
||||
msgid "Show WWAN module IMSI."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:221
|
||||
#: e323d5cbe6be49d6ae0ac1ecb74f554a
|
||||
msgid "Show WWAN module model."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:230
|
||||
#: 286e154437444060b11011946f83862f
|
||||
msgid "Show WWAN module MSISDN."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:239
|
||||
#: 6bd9633c1b3f4b73ae1b22f1eb783411
|
||||
msgid "Show WWAN module hardware revision."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:248
|
||||
#: de452cea54584b3dbd77135e508adf82
|
||||
msgid "Show WWAN module signal strength."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:264
|
||||
#: 9332150ebb51464fbf27dfd47a82ffb3
|
||||
msgid "Show WWAN module SIM card information."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:295
|
||||
#: 787dd9a9ffa84ea383b74bc9f8c263ae
|
||||
msgid "Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:297
|
||||
#: 7f26d04f336c43c28e578611a22b59a7
|
||||
msgid ""
|
||||
"The following example is based on a Sierra Wireless MC7710 miniPCIe card "
|
||||
"(only the form factor in reality it runs UBS) and Deutsche Telekom as ISP. "
|
||||
"The card is assembled into a :ref:`pc-engines-apu4`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:308
|
||||
#: f76ad889f5e5420ebbf0f927a23641de
|
||||
msgid "Supported Modules"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:310
|
||||
#: d6a7cdc8dc6541d39a84f303e029848b
|
||||
msgid ""
|
||||
"The following hardware modules have been tested successfully in an :ref:`pc-"
|
||||
"engines-apu4` board:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:313
|
||||
#: 07727509a31d4182b9b509488028bc19
|
||||
msgid "Sierra Wireless AirPrime MC7304 miniPCIe card (LTE)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:314
|
||||
#: 0b662895705e4f7bb0b43495db3f4d0b
|
||||
msgid "Sierra Wireless AirPrime MC7430 miniPCIe card (LTE)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:315
|
||||
#: d015c5f5dd7645659acafab0c65d61a3
|
||||
msgid "Sierra Wireless AirPrime MC7455 miniPCIe card (LTE)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:316
|
||||
#: c0265d6c4c374f988ae7463ec005f516
|
||||
msgid "Sierra Wireless AirPrime MC7710 miniPCIe card (LTE)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:317
|
||||
#: 1d726fdddfae4f059228ab8bf24847d2
|
||||
msgid "Huawei ME909u-521 miniPCIe card (LTE)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:318
|
||||
#: 2e2f6d7818df4077974b8168cca0135f
|
||||
msgid "Huawei ME909s-120 miniPCIe card (LTE)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:322
|
||||
#: 441bc83d707e4052a307f76ac4e1bdb6
|
||||
msgid "Firmware Update"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:324
|
||||
#: 62d86826f13d4874ab0542360526c1c1
|
||||
msgid ""
|
||||
"All available WWAN cards have a build in, reprogrammable firmware. Most of "
|
||||
"the vendors provide a regular update to the firmware used in the baseband "
|
||||
"chip."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:327
|
||||
#: ef6020a1d3854fa18115e9acd98f1c63
|
||||
msgid ""
|
||||
"As VyOS makes use of the QMI interface to connect to the WWAN modem cards, "
|
||||
"also the firmware can be reprogrammed."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/interfaces/wwan.rst:330
|
||||
#: 25873f16f3d8445fb1bf073788fc370d
|
||||
msgid ""
|
||||
"To update the firmware, VyOS also ships the `qmi-firmware-update` binary. To"
|
||||
" upgrade the firmware of an e.g. Sierra Wireless MC7710 module to the "
|
||||
"firmware provided in the file "
|
||||
"``9999999_9999999_9200_03.05.14.00_00_generic_000.000_001_SPKG_MC.cwe`` use "
|
||||
"the following command:"
|
||||
msgstr ""
|
||||
@ -1,393 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:02+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:6
|
||||
#: 7568028d69a845c69b1b2d92f392082a
|
||||
msgid "WAN load balancing"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:8
|
||||
#: 831779fbc3a341e5a239a149d09d66e2
|
||||
msgid ""
|
||||
"Outbound traffic can be balanced between two or more outbound interfaces. If"
|
||||
" a path fails, traffic is balanced across the remaining healthy paths, a "
|
||||
"recovered path is automatically added back to the routing table and used by "
|
||||
"the load balancer. The load balancer automatically adds routes for each path"
|
||||
" to the routing table and balances traffic across the configured interfaces,"
|
||||
" determined by interface health and weight."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:16
|
||||
#: 0dd7a9ac1a5d4900b665c3fe1dae4ab0
|
||||
msgid "In a minimal configuration, the following must be provided:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:18
|
||||
#: 2b30983e9e9247d0b31a2cf1c3976067
|
||||
msgid "an interface with a nexthop"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:19
|
||||
#: be2e576a1a1941e6be617332eae116a6
|
||||
msgid "one rule with a LAN (inbound-interface) and the WAN (interface)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:21
|
||||
#: debcda34477a49b5bd85f423120c45fa
|
||||
msgid "Let's assume we have two DHCP WAN interfaces and one LAN (eth2):"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:33
|
||||
#: 7404c5dbac3a4701b6b59a3a52beb241
|
||||
msgid ""
|
||||
"WAN Load Balacing should not be used when dynamic routing protocol is "
|
||||
"used/needed. This feature creates customized routing tables and firewall "
|
||||
"rules, that makes it incompatible to use with routing protocols."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:38
|
||||
#: c4c246bf197f4991bacb14b75e41ba61
|
||||
msgid "Balancing Rules"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:40
|
||||
#: a3c32d78cb8c4f9d997eda1219828b3d
|
||||
msgid ""
|
||||
"Interfaces, their weight and the type of traffic to be balanced are defined "
|
||||
"in numbered balancing rule sets. The rule sets are executed in numerical "
|
||||
"order against outgoing packets. In case of a match the packet is sent "
|
||||
"through an interface specified in the matching rule. If a packet doesn't "
|
||||
"match any rule it is sent by using the system routing table. Rule numbers "
|
||||
"can't be changed."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:46
|
||||
#: da73e3fb4c1340ff80083bec02688c84
|
||||
msgid "Create a load balancing rule, it can be a number between 1 and 9999:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:64
|
||||
#: 680e9d86d8954ce8bfbc7bb85512db7b
|
||||
msgid "Interface weight"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:66
|
||||
#: 829ea07e43eb41129add9c9472205cd0
|
||||
msgid ""
|
||||
"Let's expand the example from above and add weight to the interfaces. The "
|
||||
"bandwidth from eth0 is larger than eth1. Per default, outbound traffic is "
|
||||
"distributed randomly across available interfaces. Weights can be assigned to"
|
||||
" interfaces to influence the balancing."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:76
|
||||
#: 73dfb6b5278e4a0b9a398f2d5ebc11c5
|
||||
msgid "66% of traffic is routed to eth0, eth1 gets 33% of traffic."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:79
|
||||
#: 306eab57aabb4c16bf2e988a3636abc7
|
||||
msgid "Rate limit"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:81
|
||||
#: 2684d5aabac54cd7aafcf36cf050eab9
|
||||
msgid ""
|
||||
"A packet rate limit can be set for a rule to apply the rule to traffic above"
|
||||
" or below a specified threshold. To configure the rate limiting use:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:88
|
||||
#: 565368e68c144469be58b56ce8f36ba9
|
||||
msgid ""
|
||||
"``burst``: Number of packets allowed to overshoot the limit within "
|
||||
"``period``. Default 5."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:90
|
||||
#: 75e76fe9a1f544adac8e936aa91cb68a
|
||||
msgid ""
|
||||
"``period``: Time window for rate calculation. Possible values: ``second`` "
|
||||
"(one second), ``minute`` (one minute), ``hour`` (one hour). Default is "
|
||||
"``second``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:93
|
||||
#: e79cff8d308f4d14b23aff256cff5f79
|
||||
msgid "``rate``: Number of packets. Default 5."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:94
|
||||
#: cd3881207f2e4efc98fb371fc142eb20
|
||||
msgid "``threshold``: ``below`` or ``above`` the specified rate limit."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:97
|
||||
#: 42d3358f24004b2b8d02ccde3dc71185
|
||||
msgid "Flow and packet-based balancing"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:99
|
||||
#: 5e061b435c3b409a9166a8bde7a0d7ca
|
||||
msgid ""
|
||||
"Outgoing traffic is balanced in a flow-based manner. A connection tracking "
|
||||
"table is used to track flows by their source address, destination address "
|
||||
"and port. Each flow is assigned to an interface according to the defined "
|
||||
"balancing rules and subsequent packets are sent through the same interface. "
|
||||
"This has the advantage that packets always arrive in order if links with "
|
||||
"different speeds are in use."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:106
|
||||
#: ab745f4ea74444f49c61da3cb83ed14d
|
||||
msgid ""
|
||||
"Packet-based balancing can lead to a better balance across interfaces when "
|
||||
"out of order packets are no issue. Per-packet-based balancing can be set for"
|
||||
" a balancing rule with:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:115
|
||||
#: d5d06dae4fc24bee9df960b93e3a7ce3
|
||||
msgid "Exclude traffic"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:117
|
||||
#: be76a1da707d40778a27af8a791c7773
|
||||
msgid ""
|
||||
"To exclude traffic from load balancing, traffic matching an exclude rule is "
|
||||
"not balanced but routed through the system routing table instead:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:126
|
||||
#: ec9e884888ec42a686e6033d6e1d7189
|
||||
msgid "Health checks"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:128
|
||||
#: 4cf9259df4964df1887489b08ce5bff5
|
||||
msgid ""
|
||||
"The health of interfaces and paths assigned to the load balancer is "
|
||||
"periodically checked by sending ICMP packets (ping) to remote destinations, "
|
||||
"a TTL test or the execution of a user defined script. If an interface fails "
|
||||
"the health check it is removed from the load balancer's pool of interfaces. "
|
||||
"To enable health checking for an interface:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:143
|
||||
#: 7ceb201d025c42f48ddbc23e79a9ff7d
|
||||
msgid ""
|
||||
"Specify nexthop on the path to the destination, ``ipv4-address`` can be set "
|
||||
"to ``dhcp``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:150
|
||||
#: f4134f8e6eb54eaea1ef88105d72e4ca
|
||||
msgid ""
|
||||
"Set the number of health check failures before an interface is marked as "
|
||||
"unavailable, range for number is 1 to 10, default 1. Or set the number of "
|
||||
"successful health checks before an interface is added back to the interface "
|
||||
"pool, range for number is 1 to 10, default 1."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:160
|
||||
#: 66b7f0a004304beda063ea57212d7ea2
|
||||
msgid ""
|
||||
"Each health check is configured in its own test, tests are numbered and "
|
||||
"processed in numeric order. For multi target health checking multiple tests "
|
||||
"can be defined:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:174
|
||||
#: d6cba43dbf1242fc99da877ce0edbc6b
|
||||
msgid ""
|
||||
"``resp-time``: the maximum response time for ping in seconds. Range 1...30, "
|
||||
"default 5"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:176
|
||||
#: 8c1e19b0548e4feab27eebe31e14eeff
|
||||
msgid ""
|
||||
"``target``: the target to be sent ICMP packets to, address can be an IPv4 "
|
||||
"address or hostname"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:178
|
||||
#: 2177b897db4b413aa3e3c337b4daa812
|
||||
msgid ""
|
||||
"``test-script``: A user defined script must return 0 to be considered "
|
||||
"successful and non-zero to fail. Scripts are located in /config/scripts, for"
|
||||
" different locations the full path needs to be provided"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:181
|
||||
#: 2a21ab9f07e348ed9314596574c08a07
|
||||
msgid ""
|
||||
"``ttl-limit``: For the UDP TTL limit test the hop count limit must be "
|
||||
"specified. The limit must be shorter than the path length, an ICMP time "
|
||||
"expired message is needed to be returned for a successful test. default 1"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:184
|
||||
#: 56785e8688d0440fa7280788ddb5a940
|
||||
msgid ""
|
||||
"``type``: Specify the type of test. type can be ping, ttl or a user defined "
|
||||
"script"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:188
|
||||
#: e5b8efbb670b49eaa0033d6110b5bca9
|
||||
msgid "Source NAT rules"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:190
|
||||
#: 5d59554e0d6f4662891a6271f775a42c
|
||||
msgid ""
|
||||
"Per default, interfaces used in a load balancing pool replace the source IP "
|
||||
"of each outgoing packet with its own address to ensure that replies arrive "
|
||||
"on the same interface. This works through automatically generated source NAT"
|
||||
" (SNAT) rules, these rules are only applied to balanced traffic. In cases "
|
||||
"where this behaviour is not desired, the automatic generation of SNAT rules "
|
||||
"can be disabled:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:202
|
||||
#: 39a7bbb7d17b479e9e1b72a772cead9d
|
||||
msgid "Sticky Connections"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:203
|
||||
#: 91da7f59bb7e4418a41836d13bfcc20e
|
||||
msgid ""
|
||||
"Inbound connections to a WAN interface can be improperly handled when the "
|
||||
"reply is sent back to the client."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:211
|
||||
#: fbb632606ae2401a9e31fb41f26df32d
|
||||
msgid ""
|
||||
"Upon reception of an incoming packet, when a response is sent, it might be "
|
||||
"desired to ensure that it leaves from the same interface as the inbound one."
|
||||
" This can be achieved by enabling sticky connections in the load balancing:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:220
|
||||
#: ffcede5ef47341309cba8c638209b8ba
|
||||
msgid "Failover"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:222
|
||||
#: 22bb9f5b92e14c1e9c09b138b4c0a808
|
||||
msgid ""
|
||||
"In failover mode, one interface is set to be the primary interface and other"
|
||||
" interfaces are secondary or spare. Instead of balancing traffic across all "
|
||||
"healthy interfaces, only the primary interface is used and in case of "
|
||||
"failure, a secondary interface selected from the pool of available "
|
||||
"interfaces takes over. The primary interface is selected based on its weight"
|
||||
" and health, others become secondary interfaces. Secondary interfaces to "
|
||||
"take over a failed primary interface are chosen from the load balancer's "
|
||||
"interface pool, depending on their weight and health. Interface roles can "
|
||||
"also be selected based on rule order by including interfaces in balancing "
|
||||
"rules and ordering those rules accordingly. To put the load balancer in "
|
||||
"failover mode, create a failover rule:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:237
|
||||
#: c14b0b6e33834c97b4112891ad54156f
|
||||
msgid ""
|
||||
"Because existing sessions do not automatically fail over to a new path, the "
|
||||
"session table can be flushed on each connection state change:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:246
|
||||
#: b2398f465a9f47d4b6f59f2784d0cf17
|
||||
msgid ""
|
||||
"Flushing the session table will cause other connections to fall back from "
|
||||
"flow-based to packet-based balancing until each flow is reestablished."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:250
|
||||
#: 1956ee55d594400892fc1a565f1c09f1
|
||||
msgid "Script execution"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:252
|
||||
#: 49495379028c4d5084c39d1b7dc5eaf1
|
||||
msgid ""
|
||||
"A script can be run when an interface state change occurs. Scripts are run "
|
||||
"from /config/scripts, for a different location specify the full path:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:259
|
||||
#: 851bc19f9d2247a59080b9c7ea6bcb35
|
||||
msgid "Two environment variables are available:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:261
|
||||
#: 67add2d32d0f44fab31ba8cfc5863bfb
|
||||
msgid "``WLB_INTERFACE_NAME=[interfacename]``: Interface to be monitored"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:262
|
||||
#: 3c00120d56f6425a8d89838805058f7f
|
||||
msgid "``WLB_INTERFACE_STATE=[ACTIVE|FAILED]``: Interface state"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:266
|
||||
#: 475f317333bd44ff85c2f6901c2aca1e
|
||||
msgid ""
|
||||
"Blocking call with no timeout. System will become unresponsive if script "
|
||||
"does not return!"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:270
|
||||
#: 5ae6f839cbea42b081cbd2c2d5e412ab
|
||||
msgid "Handling and monitoring"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:273
|
||||
#: efcebfb9543344069b8365aa4d931abd
|
||||
msgid ""
|
||||
"Show WAN load balancer information including test types and targets. A "
|
||||
"character at the start of each line depicts the state of the test"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:276
|
||||
#: 43e0b718d9d24e56a8eec67a31685931
|
||||
msgid "``+`` successful"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:277
|
||||
#: 4c1dc2cbcdb64116a7bf938941e2557c
|
||||
msgid "``-`` failed"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:278
|
||||
#: 694e1dbfeb2a4017870c3d5d3cd3a70a
|
||||
msgid "a blank indicates that no test has been carried out"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:299
|
||||
#: f117595dd72b4b1280e813a4ac299bc2
|
||||
msgid "Show connection data of load balanced traffic:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/loadbalancing/index.rst:311
|
||||
#: c958cc4741894858b134b203aa00d436
|
||||
msgid "Restart"
|
||||
msgstr ""
|
||||
@ -1,22 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:02+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/nat/index.rst:5 0be96f1f2c914c17957ec95f65e80e87
|
||||
msgid "NAT"
|
||||
msgstr ""
|
||||
@ -1,763 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:02+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:5 1b9e6cdee6d74c85b2e8c45fb9d2eba8
|
||||
msgid "NAT44"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:7 e08ab3f298144e30953a0e3c994d4757
|
||||
msgid ""
|
||||
":abbr:`NAT (Network Address Translation)` is a common method of remapping "
|
||||
"one IP address space into another by modifying network address information "
|
||||
"in the IP header of packets while they are in transit across a traffic "
|
||||
"routing device. The technique was originally used as a shortcut to avoid the"
|
||||
" need to readdress every host when a network was moved. It has become a "
|
||||
"popular and essential tool in conserving global address space in the face of"
|
||||
" IPv4 address exhaustion. One Internet-routable IP address of a NAT gateway "
|
||||
"can be used for an entire private network."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:17 4ea7c21ae60b4113900fbda6434cc2a4
|
||||
msgid ""
|
||||
"IP masquerading is a technique that hides an entire IP address space, "
|
||||
"usually consisting of private IP addresses, behind a single IP address in "
|
||||
"another, usually public address space. The hidden addresses are changed into"
|
||||
" a single (public) IP address as the source address of the outgoing IP "
|
||||
"packets so they appear as originating not from the hidden host but from the "
|
||||
"routing device itself. Because of the popularity of this technique to "
|
||||
"conserve IPv4 address space, the term NAT has become virtually synonymous "
|
||||
"with IP masquerading."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:26 064330dfcfaf4415b2dd857e44eba2e9
|
||||
msgid ""
|
||||
"As network address translation modifies the IP address information in "
|
||||
"packets, NAT implementations may vary in their specific behavior in various "
|
||||
"addressing cases and their effect on network traffic. The specifics of NAT "
|
||||
"behavior are not commonly documented by vendors of equipment containing NAT "
|
||||
"implementations."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:32 188c9203e52c4f87b21e186cc041ba77
|
||||
msgid ""
|
||||
"The computers on an internal network can use any of the addresses set aside "
|
||||
"by the :abbr:`IANA (Internet Assigned Numbers Authority)` for private "
|
||||
"addressing (see :rfc:`1918`). These reserved IP addresses are not in use on "
|
||||
"the Internet, so an external machine will not directly route to them. The "
|
||||
"following addresses are reserved for private use:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:38 5212ced1f56e4930828b32f7a923df69
|
||||
msgid "10.0.0.0 to 10.255.255.255 (CIDR: 10.0.0.0/8)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:39 2d5f2db6d18f41fb998d13f65e5dff38
|
||||
msgid "172.16.0.0 to 172.31.255.255 (CIDR: 172.16.0.0/12)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:40 f79fbe86407c4f9a82a3263e33ebe2e4
|
||||
msgid "192.168.0.0 to 192.168.255.255 (CIDR: 192.168.0.0/16)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:43 b533ec1201cc453ba199974450f9eae2
|
||||
msgid ""
|
||||
"If an ISP deploys a :abbr:`CGN (Carrier-grade NAT)`, and uses :rfc:`1918` "
|
||||
"address space to number customer gateways, the risk of address collision, "
|
||||
"and therefore routing failures, arises when the customer network already "
|
||||
"uses an :rfc:`1918` address space."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:48 9fddc1b315044164b59dcdd0630f936a
|
||||
msgid ""
|
||||
"This prompted some ISPs to develop a policy within the :abbr:`ARIN (American"
|
||||
" Registry for Internet Numbers)` to allocate new private address space for "
|
||||
"CGNs, but ARIN deferred to the IETF before implementing the policy "
|
||||
"indicating that the matter was not a typical allocation issue but a "
|
||||
"reservation of addresses for technical purposes (per :rfc:`2860`)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:55 5a353c42153f4dc28f86f3131c4db7f5
|
||||
msgid ""
|
||||
"IETF published :rfc:`6598`, detailing a shared address space for use in ISP "
|
||||
"CGN deployments that can handle the same network prefixes occurring both on "
|
||||
"inbound and outbound interfaces. ARIN returned address space to the "
|
||||
":abbr:`IANA (Internet Assigned Numbers Authority)` for this allocation."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:61 8c59eb89d7114922b651287c4b7af83a
|
||||
msgid "The allocated address block is 100.64.0.0/10."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:63 4f5eb70128a04ad6bb553fc3557955a2
|
||||
msgid ""
|
||||
"Devices evaluating whether an IPv4 address is public must be updated to "
|
||||
"recognize the new address space. Allocating more private IPv4 address space "
|
||||
"for NAT devices might prolong the transition to IPv6."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:68 acb039055c4744d2aae41638f29f8a09
|
||||
msgid "Overview"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:71 c9de3d82b79f48898cbe3419cefc9903
|
||||
msgid "Different NAT Types"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:76 df02ea558bf54985a36a5057147d9638
|
||||
msgid "SNAT"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:78 3e9b654e733b4fa89541b8e55f094efa
|
||||
msgid ""
|
||||
":abbr:`SNAT (Source Network Address Translation)` is the most common form of"
|
||||
" :abbr:`NAT (Network Address Translation)` and is typically referred to "
|
||||
"simply as NAT. To be more correct, what most people refer to as :abbr:`NAT "
|
||||
"(Network Address Translation)` is actually the process of :abbr:`PAT (Port "
|
||||
"Address Translation)`, or NAT overload. SNAT is typically used by internal "
|
||||
"users/private hosts to access the Internet - the source address is "
|
||||
"translated and thus kept private."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:89 7671c435d8824bd999ad75a2b0649525
|
||||
msgid "DNAT"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:91 526aabf0ca874bc7b303565df5da12ae
|
||||
msgid ""
|
||||
":abbr:`DNAT (Destination Network Address Translation)` changes the "
|
||||
"destination address of packets passing through the router, while "
|
||||
":ref:`source-nat` changes the source address of packets. DNAT is typically "
|
||||
"used when an external (public) host needs to initiate a session with an "
|
||||
"internal (private) host. A customer needs to access a private service behind"
|
||||
" the routers public IP. A connection is established with the routers public "
|
||||
"IP address on a well known port and thus all traffic for this port is "
|
||||
"rewritten to address the internal (private) host."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:104 1b3f7df53053452d88f4462293ba9931
|
||||
msgid "Bidirectional NAT"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:106 6711a061220b4b079980b90200904c6e
|
||||
msgid ""
|
||||
"This is a common scenario where both :ref:`source-nat` and "
|
||||
":ref:`destination-nat` are configured at the same time. It's commonly used "
|
||||
"when internal (private) hosts need to establish a connection with external "
|
||||
"resources and external systems need to access internal (private) resources."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:113 f27e3be2749344e4b82ce42d2243423a
|
||||
msgid "NAT, Routing, Firewall Interaction"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:115 472103bd3281489ebebf5993395e23e2
|
||||
msgid ""
|
||||
"There is a very nice picture/explanation in the Vyatta documentation which "
|
||||
"should be rewritten here."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:119 175327d574554d8992a0d30949c1a6de
|
||||
msgid "NAT Ruleset"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:121 e77c9d84746d49609c5193ec33db6a52
|
||||
msgid ""
|
||||
":abbr:`NAT (Network Address Translation)` is configured entirely on a series"
|
||||
" of so called `rules`. Rules are numbered and evaluated by the underlying OS"
|
||||
" in numerical order! The rule numbers can be changes by utilizing the "
|
||||
":cfgcmd:`rename` and :cfgcmd:`copy` commands."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:126 f326bffbc92f4fc1afde2e0e7f474150
|
||||
msgid ""
|
||||
"Changes to the NAT system only affect newly established connections. Already"
|
||||
" established connections are not affected."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:129 0fb7907e34104640925e6acca4b2633d
|
||||
msgid ""
|
||||
"When designing your NAT ruleset leave some space between consecutive rules "
|
||||
"for later extension. Your ruleset could start with numbers 10, 20, 30. You "
|
||||
"thus can later extend the ruleset and place new rules between existing ones."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:134 a6e7f2a9fee941e4bb4198a776cbae8a
|
||||
msgid ""
|
||||
"Rules will be created for both :ref:`source-nat` and :ref:`destination-nat`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:137 2618c8a2f101400480fb728fe4e73623
|
||||
msgid ""
|
||||
"For :ref:`bidirectional-nat` a rule for both :ref:`source-nat` and "
|
||||
":ref:`destination-nat` needs to be created."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:143 fda84449eaaf4d3c8ef8a8ad94087824
|
||||
msgid "Traffic Filters"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:145 9e5024862eb0413c94ff75269dcad7fb
|
||||
msgid ""
|
||||
"Traffic Filters are used to control which packets will have the defined NAT "
|
||||
"rules applied. Five different filters can be applied within a NAT rule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:149 c6e0d14c6a0f47c79c5ced6da3a6e1d1
|
||||
msgid ""
|
||||
"**outbound-interface** - applicable only to :ref:`source-nat`. It configures"
|
||||
" the interface which is used for the outside traffic that this translation "
|
||||
"rule applies to."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:153 ../../configuration/nat/nat44.rst:163
|
||||
#: ../../configuration/nat/nat44.rst:173 ../../configuration/nat/nat44.rst:187
|
||||
#: ../../configuration/nat/nat44.rst:208 ../../configuration/nat/nat44.rst:244
|
||||
#: ../../configuration/nat/nat44.rst:266 ../../configuration/nat/nat44.rst:375
|
||||
#: 8f7cca53294d42ca80b7561a000afe8b 5101ff4453ec4b7b832b5779c282f637
|
||||
#: b74a4cbbfcdb4a37a08e89a649660b99 6c8982cd275644bab2bd4862bc85d844
|
||||
#: 8df0bd9f87334b278010991e92e07ba3 84c53e0ab6654cd691db48fbbc9fc46c
|
||||
#: d97714cdd8d44100bb5adda2342c9ff4 6e7d91b21b9244918197b0e2bbe41b14
|
||||
msgid "Example:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:159 ad2e63e18df1494fab3373cbdc3a57de
|
||||
msgid ""
|
||||
"**inbound-interface** - applicable only to :ref:`destination-nat`. It "
|
||||
"configures the interface which is used for the inside traffic the "
|
||||
"translation rule applies to."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:169 a1f9ea8e22504b25a6b43e64b86feaf9
|
||||
msgid ""
|
||||
"**protocol** - specify which types of protocols this translation rule "
|
||||
"applies to. Only packets matching the specified protocol are NATed. By "
|
||||
"default this applies to `all` protocols."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:175 6070bf12804c4be8b35bd6b990f10d10
|
||||
msgid "Set SNAT rule 20 to only NAT TCP and UDP packets"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:176 ff73422eded64f289a8663d8c3ecb6e2
|
||||
msgid "Set DNAT rule 20 to only NAT UDP packets"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:183 57f9664483354005a3d0633b2a2d3597
|
||||
msgid ""
|
||||
"**source** - specifies which packets the NAT translation rule applies to "
|
||||
"based on the packets source IP address and/or source port. Only matching "
|
||||
"packets are considered for NAT."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:189 2d21e4d475444d1db82fda191a819af2
|
||||
msgid ""
|
||||
"Set SNAT rule 20 to only NAT packets arriving from the 192.0.2.0/24 network"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:191 36bcab08bd844a86937d6c5de6081457
|
||||
msgid ""
|
||||
"Set SNAT rule 30 to only NAT packets arriving from the 203.0.113.0/24 "
|
||||
"network with a source port of 80 and 443"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:201 e208f02ee30e435d8e55fc595add37a4
|
||||
msgid ""
|
||||
"**destination** - specify which packets the translation will be applied to, "
|
||||
"only based on the destination address and/or port number configured."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:205 cb4b20fe989b4e0e9d842914dbb6da02
|
||||
msgid ""
|
||||
"If no destination is specified the rule will match on any destination "
|
||||
"address and port."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:210 c5c6152ae64849b2a30413a5a233fa9b
|
||||
msgid ""
|
||||
"Configure SNAT rule (40) to only NAT packets with a destination address of "
|
||||
"192.0.2.1."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:219 4c044ee797ff4020b4b2cbb90e387868
|
||||
msgid "Address Conversion"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:221 8503a24655ee47ec98b883bb6bc3da79
|
||||
msgid ""
|
||||
"Every NAT rule has a translation command defined. The address defined for "
|
||||
"the translation is the address used when the address information in a packet"
|
||||
" is replaced."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:226 d219b4d17c4343de8debd4c622e3970c
|
||||
msgid "Source Address"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:228 12ce0e9e181d43bc830a57b5022077af
|
||||
msgid ""
|
||||
"For :ref:`source-nat` rules the packets source address will be replaced with"
|
||||
" the address specified in the translation command. A port translation can "
|
||||
"also be specified and is part of the translation address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:233 c1d4e83917dc48e6a66bf1ed630a10cb
|
||||
msgid ""
|
||||
"The translation address must be set to one of the available addresses on the"
|
||||
" configured `outbound-interface` or it must be set to `masquerade` which "
|
||||
"will use the primary IP address of the `outbound-interface` as its "
|
||||
"translation address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:238 ca4921a0d5394ae6830969fb334039d2
|
||||
msgid ""
|
||||
"When using NAT for a large number of host systems it recommended that a "
|
||||
"minimum of 1 IP address is used to NAT every 256 private host systems. This "
|
||||
"is due to the limit of 65,000 port numbers available for unique translations"
|
||||
" and a reserving an average of 200-300 sessions per host system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:246 bdd7ddee321f4842836c3fde41753a00
|
||||
msgid "Define a discrete source IP address of 100.64.0.1 for SNAT rule 20"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:247 156e1227679e4e1980a2ebdb358e0ddd
|
||||
msgid "Use address `masquerade` (the interfaces primary address) on rule 30"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:248 69ea3491918c4657aa8b29a4cbe32302
|
||||
msgid ""
|
||||
"For a large amount of private machines behind the NAT your address pool "
|
||||
"might to be bigger. Use any address in the range 100.64.0.10 - 100.64.0.20 "
|
||||
"on SNAT rule 40 when doing the translation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:261 c8620f18958f47d99f428deb5a097420
|
||||
msgid "Destination Address"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:263 f98288b5d7694ad4ada23abaa6c279e5
|
||||
msgid ""
|
||||
"For :ref:`destination-nat` rules the packets destination address will be "
|
||||
"replaced by the specified address in the `translation address` command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:268 d941c70eda8e4c3793070304e575457b
|
||||
msgid ""
|
||||
"DNAT rule 10 replaces the destination address of an inbound packet with "
|
||||
"192.0.2.10"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:277 ada6abab816c4f3bbaf3caf3f0cdf0f0
|
||||
msgid "Configuration Examples"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:279 457ccdc380b948c7808c402be33a51bc
|
||||
msgid "To setup SNAT, we need to know:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:281 1bccc3b7b7884376952fc1a34916726a
|
||||
msgid "The internal IP addresses we want to translate"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:282 e247747334974c36b5b5f7232f0cb10a
|
||||
msgid "The outgoing interface to perform the translation on"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:283 d94342b41388455abbcad1615c5d3754
|
||||
msgid "The external IP address to translate to"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:285 b5556ea34ced4762924ec603af4f6bda
|
||||
msgid ""
|
||||
"In the example used for the Quick Start configuration above, we demonstrate "
|
||||
"the following configuration:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:294 680d407c3e6d4e3aa57bacde5ded38ee
|
||||
msgid "Which generates the following configuration:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:308 954954df84144498b903a234ff57c751
|
||||
msgid ""
|
||||
"In this example, we use **masquerade** as the translation address instead of"
|
||||
" an IP address. The **masquerade** target is effectively an alias to say "
|
||||
"\"use whatever IP address is on the outgoing interface\", rather than a "
|
||||
"statically configured IP address. This is useful if you use DHCP for your "
|
||||
"outgoing interface and do not know what the external address will be."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:315 6c99bebd71e547e68609971eba3e2ba8
|
||||
msgid ""
|
||||
"When using NAT for a large number of host systems it recommended that a "
|
||||
"minimum of 1 IP address is used to NAT every 256 host systems. This is due "
|
||||
"to the limit of 65,000 port numbers available for unique translations and a "
|
||||
"reserving an average of 200-300 sessions per host system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:321 71beae2ecabd4d78816adbfb39f5124b
|
||||
msgid ""
|
||||
"Example: For an ~8,000 host network a source NAT pool of 32 IP addresses is "
|
||||
"recommended."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:324 6b60d46443454374affdb730ee4ea314
|
||||
msgid ""
|
||||
"A pool of addresses can be defined by using a hyphen between two IP "
|
||||
"addresses:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:334 8e8256b4ad1445a48e39d573c74a1a6a
|
||||
msgid "Avoiding \"leaky\" NAT"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:336 e2fdb9bfc2424776916452748e036fe8
|
||||
msgid ""
|
||||
"Linux netfilter will not NAT traffic marked as INVALID. This often confuses "
|
||||
"people into thinking that Linux (or specifically VyOS) has a broken NAT "
|
||||
"implementation because non-NATed traffic is seen leaving an external "
|
||||
"interface. This is actually working as intended, and a packet capture of the"
|
||||
" \"leaky\" traffic should reveal that the traffic is either an additional "
|
||||
"TCP \"RST\", \"FIN,ACK\", or \"RST,ACK\" sent by client systems after Linux "
|
||||
"netfilter considers the connection closed. The most common is the additional"
|
||||
" TCP RST some host implementations send after terminating a connection "
|
||||
"(which is implementation-specific)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:346 7cce3b9fddb54c1e9436c790e595538b
|
||||
msgid ""
|
||||
"In other words, connection tracking has already observed the connection be "
|
||||
"closed and has transition the flow to INVALID to prevent attacks from "
|
||||
"attempting to reuse the connection."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:350 feeea86cebe9474abddd9a79b67f022f
|
||||
msgid ""
|
||||
"You can avoid the \"leaky\" behavior by using a firewall policy that drops "
|
||||
"\"invalid\" state packets."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:353 aef01f16a83b4508815489ac62ce25de
|
||||
msgid ""
|
||||
"Having control over the matching of INVALID state traffic, e.g. the ability "
|
||||
"to selectively log, is an important troubleshooting tool for observing "
|
||||
"broken protocol behavior. For this reason, VyOS does not globally drop "
|
||||
"invalid state traffic, instead allowing the operator to make the "
|
||||
"determination on how the traffic is handled."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:362 8d471c879a444d639b27065c50db48ed
|
||||
msgid "Hairpin NAT/NAT Reflection"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:364 fb7d9d3e34df47b8b4e8506c66f9df08
|
||||
msgid ""
|
||||
"A typical problem with using NAT and hosting public servers is the ability "
|
||||
"for internal systems to reach an internal server using it's external IP "
|
||||
"address. The solution to this is usually the use of split-DNS to correctly "
|
||||
"point host systems to the internal address when requests are made "
|
||||
"internally. Because many smaller networks lack DNS infrastructure, a work-"
|
||||
"around is commonly deployed to facilitate the traffic by NATing the request "
|
||||
"from internal hosts to the source address of the internal interface on the "
|
||||
"firewall."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:373 7aee5b5a268b42cbbb2cd32139eb6c7b
|
||||
msgid ""
|
||||
"This technique is commonly referred to as NAT Reflection or Hairpin NAT."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:377 aaf04de912134e3a8ce45d70500f54b4
|
||||
msgid ""
|
||||
"Redirect Microsoft RDP traffic from the outside (WAN, external) world via "
|
||||
":ref:`destination-nat` in rule 100 to the internal, private host 192.0.2.40."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:381 b72b4bf6d7674f6d9c14aed354fc1476
|
||||
msgid ""
|
||||
"Redirect Microsoft RDP traffic from the internal (LAN, private) network via "
|
||||
":ref:`destination-nat` in rule 110 to the internal, private host 192.0.2.40."
|
||||
" We also need a :ref:`source-nat` rule 110 for the reverse path of the "
|
||||
"traffic. The internal network 192.0.2.0/24 is reachable via interface "
|
||||
"`eth0.10`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:408 754e7a0d6f634f10b55c714415a5dff5
|
||||
msgid "Which results in a configuration of:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:456 6cbf530eaa69427897a772c29ef7515d
|
||||
msgid "Destination NAT"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:458 fa9e5a5136f34f1099f3ee0849c197e7
|
||||
msgid ""
|
||||
"DNAT is typically referred to as a **Port Forward**. When using VyOS as a "
|
||||
"NAT router and firewall, a common configuration task is to redirect incoming"
|
||||
" traffic to a system behind the firewall."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:462 148264ccec934db09a6e9549400b0d75
|
||||
msgid ""
|
||||
"In this example, we will be using the example Quick Start configuration "
|
||||
"above as a starting point."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:465 d94c10098e634f3aa1973110e550246c
|
||||
msgid "To setup a destination NAT rule we need to gather:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:467 944530186ef448c094dc98d4251586f9
|
||||
msgid "The interface traffic will be coming in on;"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:468 455af1fdf0df464eb39988b3c488f8de
|
||||
msgid "The protocol and port we wish to forward;"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:469 89e2483d1eb742549d2e23edd4e7c6cf
|
||||
msgid "The IP address of the internal system we wish to forward traffic to."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:471 691a8792db7149d5baa741ac7adb3cfe
|
||||
msgid ""
|
||||
"In our example, we will be forwarding web server traffic to an internal web "
|
||||
"server on 192.168.0.100. HTTP traffic makes use of the TCP protocol on port "
|
||||
"80. For other common port numbers, see: "
|
||||
"https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:476 e000b785fb1c46f78d5c32d9203513ed
|
||||
msgid "Our configuration commands would be:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:486 539586cf299344a98612d61ce1a775c0
|
||||
msgid "Which would generate the following NAT destination configuration:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:506 d78722b504bc41f394f078e54b94c511
|
||||
msgid ""
|
||||
"If forwarding traffic to a different port than it is arriving on, you may "
|
||||
"also configure the translation port using `set nat destination rule [n] "
|
||||
"translation port`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:510 2932fbd4f1d743d98a16fb82490a8726
|
||||
msgid ""
|
||||
"This establishes our Port Forward rule, but if we created a firewall policy "
|
||||
"it will likely block the traffic."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:513 645e0cb73ba447b299902dfcdc6e1473
|
||||
msgid ""
|
||||
"It is important to note that when creating firewall rules that the DNAT "
|
||||
"translation occurs **before** traffic traverses the firewall. In other "
|
||||
"words, the destination address has already been translated to 192.168.0.100."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:518 f7e05afc9d9d492bbfe0c236ca282cf5
|
||||
msgid ""
|
||||
"So in our firewall policy, we want to allow traffic coming in on the outside"
|
||||
" interface, destined for TCP port 80 and the IP address of 192.168.0.100."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:530 4d9193f3c02f49be82543b7203ceee26
|
||||
msgid "This would generate the following configuration:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:548 82c91c25c1df48ce906090e5c15fb12d
|
||||
msgid ""
|
||||
"If you have configured the `INSIDE-OUT` policy, you will need to add "
|
||||
"additional rules to permit inbound NAT traffic."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:552 f28c6e32b07f47979b81955e1c8cf89e
|
||||
msgid "1-to-1 NAT"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:554 fca368be80544382a6c637fe9a2d30f7
|
||||
msgid ""
|
||||
"Another term often used for DNAT is **1-to-1 NAT**. For a 1-to-1 NAT "
|
||||
"configuration, both DNAT and SNAT are used to NAT all traffic from an "
|
||||
"external IP address to an internal IP address and vice-versa."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:558 805394fd501341eea4af52d84406e247
|
||||
msgid ""
|
||||
"Typically, a 1-to-1 NAT rule omits the destination port (all ports) and "
|
||||
"replaces the protocol with either **all** or **ip**."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:561 4283fadfebf847989b5100ff5a569ea1
|
||||
msgid ""
|
||||
"Then a corresponding SNAT rule is created to NAT outgoing traffic for the "
|
||||
"internal IP to a reserved external IP. This dedicates an external IP address"
|
||||
" to an internal IP address and is useful for protocols which don't have the "
|
||||
"notion of ports, such as GRE."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:566 2b05c98589c24734880407d0ef556297
|
||||
msgid ""
|
||||
"Here's an extract of a simple 1-to-1 NAT configuration with one internal and"
|
||||
" one external interface:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:584 df1c6a2d92ef459faa38a2d7dabb46f9
|
||||
msgid ""
|
||||
"Firewall rules are written as normal, using the internal IP address as the "
|
||||
"source of outbound rules and the destination of inbound rules."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:588 96829b0bf05c44ad97bfc28fdb91d203
|
||||
msgid "NAT before VPN"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:590 4cabb10ca60343f781e3d1354b222e2d
|
||||
msgid ""
|
||||
"Some application service providers (ASPs) operate a VPN gateway to provide "
|
||||
"access to their internal resources, and require that a connecting "
|
||||
"organisation translate all traffic to the service provider network to a "
|
||||
"source address provided by the ASP."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:596 acc44d1d74074a758329ebc05372f4a9
|
||||
msgid "Example Network"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:598 0824e6fad83244bca672f714e1e9a958
|
||||
msgid ""
|
||||
"Here's one example of a network environment for an ASP. The ASP requests "
|
||||
"that all connections from this company should come from 172.29.41.89 - an "
|
||||
"address that is assigned by the ASP and not in use at the customer site."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:607 ../../configuration/nat/nat44.rst:607
|
||||
#: 25f9729fb7bc462a9c37a6af6a3834cb 1cf4f6ec216b425fb4fec8263a583511
|
||||
msgid "NAT before VPN Topology"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:611 04627ca4d6bb440bb38ef5aa99a6d3b9
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:613 6c6a87f12b934f7eba01d03391cdf518
|
||||
msgid "The required configuration can be broken down into 4 major pieces:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:615 58671ff2b2494557ab2bda333ea89736
|
||||
msgid "A dummy interface for the provider-assigned IP;"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:616 dfa45185a3194a88a6ff9c1ea368ae49
|
||||
msgid "NAT (specifically, Source NAT);"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:617 598cf4b6f28b4b8a94dc1aa6b2c368e7
|
||||
msgid "IPSec IKE and ESP Groups;"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:618 653ab20b2fd248c987c90cf7bca183c1
|
||||
msgid "IPSec VPN tunnels."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:622 5bdd6be01a22423f8671b0135131eddc
|
||||
msgid "Dummy interface"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:624 520ce645867d43f7bcc0cc20d1654ec5
|
||||
msgid ""
|
||||
"The dummy interface allows us to have an equivalent of the Cisco IOS "
|
||||
"Loopback interface - a router-internal interface we can use for IP addresses"
|
||||
" the router must know about, but which are not actually assigned to a real "
|
||||
"network."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:629 f266510a8ca04bf1948d0676973c522e
|
||||
msgid "We only need a single step for this interface:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:636 0d6ca0e0ef2543cbb17d107c1005d578
|
||||
msgid "NAT Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:652 687002ad2f5b4e5798958dd1cc8db782
|
||||
msgid "IPSec IKE and ESP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:654 73105f46766743b099c330d399298987
|
||||
msgid "The ASP has documented their IPSec requirements:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:656 72b7839738374482ae1bfc8d11d7b128
|
||||
msgid "IKE Phase:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:658 ../../configuration/nat/nat44.rst:663
|
||||
#: 2ec91cf9c88946808f60ec1bc429ca30 3ebfaa7080754e529d5765e1389b892a
|
||||
msgid "aes256 Encryption"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:659 ../../configuration/nat/nat44.rst:664
|
||||
#: d5ec83da88db4d928df83d6a42822406 20f0a157e78b42b9baa977349facc5c5
|
||||
msgid "sha256 Hashes"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:661 6c9cd7920eb64d44a47641a298864454
|
||||
msgid "ESP Phase:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:665 4d0e7470113648b68b5ce3a0c0811c05
|
||||
msgid "DH Group 14"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:668 6e61c9be895148e9ac15bacab1bc3b4f
|
||||
msgid ""
|
||||
"Additionally, we want to use VPNs only on our eth1 interface (the external "
|
||||
"interface in the image above)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:690 387869f7511943cc83e9206c2a37b138
|
||||
msgid "IPSec VPN Tunnels"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:692 a9c5e360993041bb989e51669025a30a
|
||||
msgid ""
|
||||
"We'll use the IKE and ESP groups created above for this VPN. Because we need"
|
||||
" access to 2 different subnets on the far side, we will need two different "
|
||||
"tunnels. If you changed the names of the ESP group and IKE group in the "
|
||||
"previous step, make sure you use the correct names here too."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:713 8ff3f8957b604941a0b6badb6e319b8c
|
||||
msgid "Testing and Validation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:715 9f835037c2d841eeab59fa85e714dd4a
|
||||
msgid ""
|
||||
"If you've completed all the above steps you no doubt want to see if it's all"
|
||||
" working."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:718 7581fbb9bcd040b5853654740d01f752
|
||||
msgid "Start by checking for IPSec SAs (Security Associations) with:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat44.rst:733 4d4ceca9320b4ec2989ffe456b4fd0a9
|
||||
msgid ""
|
||||
"That looks good - we defined 2 tunnels and they're both up and running."
|
||||
msgstr ""
|
||||
@ -1,173 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:02+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:5 ca934164b89d4c82a409d55c28fd8dd6
|
||||
msgid "NAT66(NPTv6)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:7 4e2414905e4e4b06a6e46245d87314f0
|
||||
msgid ""
|
||||
":abbr:`NPTv6 (IPv6-to-IPv6 Network Prefix Translation)` is an address "
|
||||
"translation technology basedon IPv6 networks, used to convert an IPv6 "
|
||||
"address prefix in an IPv6 message into another IPv6address prefix. We call "
|
||||
"this address translation method NAT66. Devices that support the NAT66 "
|
||||
"function are called NAT66 devices, which can provide NAT66 source and "
|
||||
"destination address translation functions."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:15 5e46174927104a45bb1ad2917b27dae5
|
||||
msgid "Overview"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:18 fdece6d28cd64afdbea2a2461da0b911
|
||||
msgid "Different NAT Types"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:23 37b55989de1a4fda8155c0b0173e8416
|
||||
msgid "SNAT66"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:25 d7f452fa32164072bd1be883e919847c
|
||||
msgid ""
|
||||
":abbr:`SNPTv6 (Source IPv6-to-IPv6 Network Prefix Translation)` The "
|
||||
"conversion function is mainly used in the following scenarios:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:28 dc9b6db9a1294771a93cd9585e068bdf
|
||||
msgid ""
|
||||
"A single internal network and external network. Use the NAT66 device to "
|
||||
"connect a single internal network and public network, and the hosts in the "
|
||||
"internal network use IPv6 address prefixes that only support routing within "
|
||||
"the local range. When a host in the internal network accesses the external "
|
||||
"network, the source IPv6 address prefix in the message will be converted "
|
||||
"into a global unicast IPv6 address prefix by the NAT66 device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:35 aa97d8707d044f35b12f70843edaf49e
|
||||
msgid ""
|
||||
"Redundancy and load sharing. There are multiple NAT66 devices at the edge of"
|
||||
" an IPv6 network to another IPv6 network. The path through the NAT66 device "
|
||||
"to another IPv6 network forms an equivalent route, and traffic can be load-"
|
||||
"shared on these NAT66 devices. In this case, you can configure the same "
|
||||
"source address translation rules on these NAT66 devices, so that any NAT66 "
|
||||
"device can handle IPv6 traffic between different sites."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:42 19c552356f874c6e9a56980ef5bca864
|
||||
msgid ""
|
||||
"Multi-homed. In a multi-homed network environment, the NAT66 device connects"
|
||||
" to an internal network and simultaneously connects to different external "
|
||||
"networks. Address translation can be configured on each external network "
|
||||
"side interface of the NAT66 device to convert the same internal network "
|
||||
"address into different external network addresses, and realize the mapping "
|
||||
"of the same internal address to multiple external addresses."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:53 951f59b27eb942ccb4f7245775b90c04
|
||||
msgid "DNAT66"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:55 6b91ae30d11042269e93b9d1bd40f099
|
||||
msgid ""
|
||||
"The :abbr:`DNPTv6 (Destination IPv6-to-IPv6 Network Prefix Translation)` "
|
||||
"destination address translation function is used in scenarios where the "
|
||||
"server in the internal network provides services to the external network, "
|
||||
"such as providing Web services or FTP services to the external network. By "
|
||||
"configuring the mapping relationship between the internal server address and"
|
||||
" the external network address on the external network side interface of the "
|
||||
"NAT66 device, external network users can access the internal network server "
|
||||
"through the designated external network address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:66 354d68259cab482096cbf018e91dbbad
|
||||
msgid "Prefix Conversion"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:69 0a61dbaeac704e96a17021863013b36b
|
||||
msgid "Source Prefix"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:71 e50390dc638a477c9312fbfc79065e37
|
||||
msgid ""
|
||||
"Every SNAT66 rule has a translation command defined. The prefix defined for "
|
||||
"the translation is the prefix used when the address information in a packet "
|
||||
"is replaced.、"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:75 2987cee585564527ab449678ea7b8b1a
|
||||
msgid ""
|
||||
"The :ref:`source-nat66` rule replaces the source address of the packet and "
|
||||
"calculates the converted address using the prefix specified in the rule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:78 ../../configuration/nat/nat66.rst:96
|
||||
#: 3445a1dea2244401a1d2521e4f6d1f66 91dca61fac3f4db1ad685016b5304b7c
|
||||
msgid "Example:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:80 cd858083b5044f44a9777d5988124c87
|
||||
msgid ""
|
||||
"Convert the address prefix of a single `fc01::/64` network to `fc00::/64`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:81 da347f39e1fd41d6a043cf92b580aed7
|
||||
msgid "Output from `eth0` network interface"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:90 7ae1af8cd3f244d5b0cf4c68dd919362
|
||||
msgid "Destination Prefix"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:92 84d1d27cd0144f32b5190cb5dd7ce1ea
|
||||
msgid ""
|
||||
"For the :ref:`destination-nat66` rule, the destination address of the packet"
|
||||
" isreplaced by the address calculated from the specified address or prefix "
|
||||
"in the `translation address` command"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:98 442f390a7e754e8fa514eb1b354c835e
|
||||
msgid ""
|
||||
"Convert the address prefix of a single `fc00::/64` network to `fc01::/64`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:100 c958a94c8d8543f2aaae440f4c3ef62a
|
||||
msgid "Input from `eth0` network interface"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:109 472507579cef4bdf85268aedcfcbf1e7
|
||||
msgid "Configuration Examples"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:111 68e29a1099e34939a93f53c42c5c0ff3
|
||||
msgid ""
|
||||
"Use the following topology to build a nat66 based isolated network between "
|
||||
"internal and external networks (dynamic prefix is not supported):"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rstNone 9579e46e32b84f0ba07c75d9747cf078
|
||||
msgid "VyOS NAT66 Simple Configure"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:118 3ec19efd1e7a4d60934658d55d5cb28d
|
||||
msgid "R1:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/nat/nat66.rst:131 ac9bbe06804e4f588d25df97dd0ce32d
|
||||
msgid "R2:"
|
||||
msgstr ""
|
||||
@ -1,344 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:04+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../_include/need_improvement.txt:11 d0332a79660c4150afb4402f262900a7
|
||||
msgid "This section needs improvements, examples and explanations."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/need_improvement.txt:13 9dfc4c15b7e44e8984dcdad15c47b498
|
||||
msgid ""
|
||||
"Please take a look at the Contributing Guide for our :ref:`documentation`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:7 58089a5ee58b4324926b8bd24b5ff911
|
||||
msgid "PKI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:9 d0b85cf4dfbb4d2ba51e707a187dc818
|
||||
msgid ""
|
||||
"VyOS 1.4 changed the way in how encrytion keys or certificates are stored on"
|
||||
" the system. In the pre VyOS 1.4 era, certificates got stored under /config "
|
||||
"and every service referenced a file. That made copying a running "
|
||||
"configuration from system A to system B a bit harder, as you had to copy the"
|
||||
" files and their permissions by hand."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:15 b0a7c64a5bf34aab8950b7298b7d92f1
|
||||
msgid ""
|
||||
":vytask:`T3642` describes a new CLI subsystem that serves as a \"certstore\""
|
||||
" to all services requiring any kind of encryption key(s). In short, public "
|
||||
"and private certificates are now stored in PKCS#8 format in the regular VyOS"
|
||||
" CLI. Keys can now be added, edited, and deleted using the regular "
|
||||
"set/edit/delete CLI commands."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:21 eef1d7f0ff6d4767917d06224fc7728e
|
||||
msgid ""
|
||||
"VyOS not only can now manage certificates issued by 3rd party Certificate "
|
||||
"Authorities, it can also act as a CA on its own. You can create your own "
|
||||
"root CA and sign keys with it by making use of some simple op-mode commands."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:25 025670e87e634f08b5a9f41a2af37e18
|
||||
msgid ""
|
||||
"Don't be afraid that you need to re-do your configuration. Key "
|
||||
"transformation is handled, as always, by our migration scripts, so this will"
|
||||
" be a smooth transition for you!"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:30 d0f578b0203e438290794df00b28fe61
|
||||
msgid "Key Generation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:33 e299cfd97020429b926a835ed10e0bea
|
||||
msgid "Certificate Authority (CA)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:35 32f5f0736d0c441dbf6795d6d8d54e31
|
||||
msgid ""
|
||||
"VyOS now also has the ability to create CAs, keys, Diffie-Hellman and other "
|
||||
"keypairs from an easy to access operational level command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:40 ../../configuration/pki/index.rst:45
|
||||
#: b9b023d4836841338b13189b8d0b7a79 2af4158dc4d948a8ae034b6eaf7e21d8
|
||||
msgid ""
|
||||
"Create a new :abbr:`CA (Certificate Authority)` and output the CAs public "
|
||||
"and private key on the console."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/pki_cli_import_help.txt:1
|
||||
#: ../../configuration/pki/pki_cli_import_help.txt:1
|
||||
#: ../../configuration/pki/pki_cli_import_help.txt:1
|
||||
#: ../../configuration/pki/pki_cli_import_help.txt:1
|
||||
#: ../../configuration/pki/pki_cli_import_help.txt:1
|
||||
#: ../../configuration/pki/pki_cli_import_help.txt:1
|
||||
#: ../../configuration/pki/pki_cli_import_help.txt:1
|
||||
#: ../../configuration/pki/index.rst:144 ../../configuration/pki/index.rst:159
|
||||
#: a1e969071930495898a24711d52e6055 ef94468c16044b00994bcb18945ca541
|
||||
#: 422af7562b05460f876d46e4319dd824 a2f9760b5a6e4ee881fc30e2df681724
|
||||
#: cdff35cdb25940959648c2cfffaa193a e9e5c94e0cc344c2a3003441d81a10f0
|
||||
#: 72de69f6ab6c48c8ba0c207e1f1e0b56 a3ed3faad7ae47c8a7071ecd7628a399
|
||||
#: 18e7c4de5d1e46989c8704cc6b9ea47c
|
||||
msgid ""
|
||||
"In addition to the command above, the output is in a format which can be "
|
||||
"used to directly import the key into the VyOS CLI by simply copy-pasting the"
|
||||
" output from op-mode into configuration mode."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/pki_cli_import_help.txt:5
|
||||
#: ../../configuration/pki/pki_cli_import_help.txt:5
|
||||
#: ../../configuration/pki/pki_cli_import_help.txt:5
|
||||
#: ../../configuration/pki/pki_cli_import_help.txt:5
|
||||
#: ../../configuration/pki/pki_cli_import_help.txt:5
|
||||
#: ../../configuration/pki/pki_cli_import_help.txt:5
|
||||
#: ../../configuration/pki/pki_cli_import_help.txt:5
|
||||
#: 7bd63cdab2b643878223df8ddc67c134 9b40e981ee934348918897f4d35e5d5b
|
||||
#: 052785e5c3d54a4ca20718f3ee0c003a 53cfdafe80b94c6fb8ca182804c93a4c
|
||||
#: b6bbb6c735cf44fa956e361f74a1b9d3 2d2b16d33cc041b08134705823af343d
|
||||
#: 45f9ec5324e54cac972831aa3aca8e15
|
||||
msgid ""
|
||||
"``name`` is used for the VyOS CLI command to identify this key. This key "
|
||||
"``name`` is then used in the CLI configuration to reference the key "
|
||||
"instance."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:52 0edadd6197464d729bd6d9594f8c9ee4
|
||||
msgid ""
|
||||
"Create a new subordinate :abbr:`CA (Certificate Authority)` and sign it "
|
||||
"using the private key referenced by `ca-name`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:57 e5a6fb74f0e54295858157bfa9671ad5
|
||||
msgid ""
|
||||
"Create a new subordinate :abbr:`CA (Certificate Authority)` and sign it "
|
||||
"using the private key referenced by `name`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:63 de9390e7a30c46c5b9a9e0e1f5d359ad
|
||||
msgid "Certificates"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:67 ../../configuration/pki/index.rst:71
|
||||
#: 9b9586ce09d94e03ab5f4a7ed4436a69 84c9f6fdff794b11ad02cd8fbb45c617
|
||||
msgid ""
|
||||
"Create a new public/private keypair and output the certificate on the "
|
||||
"console."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:77 ../../configuration/pki/index.rst:82
|
||||
#: 9b39d3bcff154f7291dcb77f8d7d215a 176a891d00084bb3bbdb222edfb4713c
|
||||
msgid ""
|
||||
"Create a new self-signed certificate. The public/private is then shown on "
|
||||
"the console."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:89 ../../configuration/pki/index.rst:94
|
||||
#: adc233cfead6434c90bd93c120881184 93f69a80dbfe4db58d2458c3e7ea6d96
|
||||
msgid ""
|
||||
"Create a new public/private keypair which is signed by the CA referenced by "
|
||||
"`ca-name`. The signed certificate is then output to the console."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:100 c7409b34fbdc42768f0f9e14abfad57c
|
||||
msgid "Diffie-Hellman parameters"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:104 ../../configuration/pki/index.rst:111
|
||||
#: 4c326571fa8b4cc5b19fd035942f687f 60a0519f0f4640e4a436c118138364ac
|
||||
msgid ""
|
||||
"Generate a new set of :abbr:`DH (Diffie-Hellman)` parameters. The key size "
|
||||
"is requested by the CLI and defaults to 2048 bit."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:107 872bd715596f4d2487c85ab89e3c7b20
|
||||
msgid "The generated parameters are then output to the console."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:117 b7068f0a5c0044d2b84586de95a352fa
|
||||
msgid "OpenVPN"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:121 ../../configuration/pki/index.rst:126
|
||||
#: cb00c6ce7a224e3a97b5c9d0e1cbb161 b209ff7be86646fb924d53d9cd8dbc6f
|
||||
msgid ""
|
||||
"Genearate a new OpenVPN shared secret. The generated secred is the output to"
|
||||
" the console."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:132 c96236236705496793eb9c00fa34236f
|
||||
msgid "WireGuard"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:136 ../../configuration/pki/index.rst:141
|
||||
#: 7f5e6c564f214a159f1dba0cd285051f 50afb755802a42c880815f69faa88234
|
||||
msgid ""
|
||||
"Generate a new WireGuard public/private key portion and output the result to"
|
||||
" the console."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:148 47d34653b49740ed8dbbcd853b7e9128
|
||||
msgid ""
|
||||
"``interface`` is used for the VyOS CLI command to identify the WireGuard "
|
||||
"interface where this private key is to be used."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:153 ../../configuration/pki/index.rst:157
|
||||
#: 5a74fd4cd0c445ef9d092cb055a74587 82eb01b20bac49df927a397f1fcd5fd1
|
||||
msgid "Generate a WireGuard pre-shared secret used for peers to communicate."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:163 9d3f174f86564528ab1eed7b9181e228
|
||||
msgid ""
|
||||
"``peer`` is used for the VyOS CLI command to identify the WireGuard peer "
|
||||
"where this secred is to be used."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:167 516304c049c346d9a6a1dccbdb8874d2
|
||||
msgid "Key usage (CLI)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:170 9bedb909ae1a45a0a13129835f7398e5
|
||||
msgid "CA (Certificate Authority)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:174 ff3e925e98474928a7d17726a39147cc
|
||||
msgid "Add the public CA certificate for the CA named `name` to the VyOS CLI."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:176 ../../configuration/pki/index.rst:219
|
||||
#: 911b233ac4814ad1b2283c1988ab7c1d e9ce9e77d16d4017a52caedd19eee31d
|
||||
msgid ""
|
||||
"When loading the certificate you need to manually strip the ``-----BEGIN "
|
||||
"CERTIFICATE-----`` and ``-----END CERTIFICATE-----`` tags. Also, the "
|
||||
"certificate/key needs to be presented in a single line without line breaks "
|
||||
"(``\\n``), this can be done using the following shell command:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:181 aa32708878c146c0b88e466cd71ed744
|
||||
msgid "``$ tail -n +2 ca.pem | head -n -1 | tr -d '\\n'``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:185 0da7c11604174e6daf3d753dea1896ce
|
||||
msgid "Certificate revocation list in PEM format."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:189 286b10ab627e4d2392bdd6ac4ff59354
|
||||
msgid "A human readable description what this CA is about."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:193 4d9267b61e82406eb4101fe18343f364
|
||||
msgid ""
|
||||
"Add the CAs private key to the VyOS CLI. This should never leave the system,"
|
||||
" and is only required if you use VyOS as your certificate generator as "
|
||||
"mentioned above."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:197 ../../configuration/pki/index.rst:235
|
||||
#: 23d3719f7be54a4f93ec3b35b14b11f3 e16474413c02441ea680419546196aea
|
||||
msgid ""
|
||||
"When loading the certificate you need to manually strip the ``-----BEGIN "
|
||||
"KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate/key needs "
|
||||
"to be presented in a single line without line breaks (``\\n``), this can be "
|
||||
"done using the following shell command:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:202 34119b41afde4ce1a4336ebf083b64d1
|
||||
msgid "``$ tail -n +2 ca.key | head -n -1 | tr -d '\\n'``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:206 5983b11095fe4c849a0f0c1eb2ba4acd
|
||||
msgid ""
|
||||
"Mark the CAs private key as password protected. User is asked for the "
|
||||
"password when the key is referenced."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:210 4d3078c5c52b4beb85581847a788bb79
|
||||
msgid "Server Certificate"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:212 942b65454b1b42188547e9b6d01a45a3
|
||||
msgid ""
|
||||
"After we have imported the CA certificate(s) we can now import and add "
|
||||
"certificates used by services on this router."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:217 3adc1d39ccb24bc38b81bee75b32689c
|
||||
msgid ""
|
||||
"Add public key portion for the certificate named `name` to the VyOS CLI."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:224 5a4ea3340cce4f4fb04f0bac6d190e63
|
||||
msgid "``$ tail -n +2 cert.pem | head -n -1 | tr -d '\\n'``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:228 075178c064634b7287bb18836609d0f2
|
||||
msgid "A human readable description what this certificate is about."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:232 f5ea7285a18945da81673688042c4cd4
|
||||
msgid ""
|
||||
"Add the private key portion of this certificate to the CLI. This should "
|
||||
"never leave the system as it is used to decrypt the data."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:240 9f9d6db54e72405da82063565cea2cf7
|
||||
msgid "``$ tail -n +2 cert.key | head -n -1 | tr -d '\\n'``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:244 84a9bd12ef7a45d480c65a1ac527d824
|
||||
msgid ""
|
||||
"Mark the private key as password protected. User is asked for the password "
|
||||
"when the key is referenced."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:249 22b30725d2e24cc383090337d22521f3
|
||||
msgid "If CA is present, this certificate will be included in generated CRLs"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:252 159617d83a264c549e09e7309e8618b4
|
||||
msgid "Operation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:254 be9c4115484a42e997e0daa52057c718
|
||||
msgid ""
|
||||
"VyOS operational mode commands are not only available for generating keys "
|
||||
"but also to display them."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:259 f9e5cb6847b247cdb680b6179bc56873
|
||||
msgid ""
|
||||
"Show a list of installed :abbr:`CA (Certificate Authority)` certificates."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:273 6a0e9fe0f16942168fdcbac485e8a90d
|
||||
msgid "Show only information for specified Certificate Authority."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:277 8eaff6ce373241cb83fca30ec6ad9651
|
||||
msgid "Show a list of installed certificates"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:290 3ae771ed47f84509882ae5fb4eb9e2ce
|
||||
msgid "Show only information for specified certificate."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/pki/index.rst:294 34c59f8cae974d68a00f0ae556403c5e
|
||||
msgid "Show a list of installed :abbr:`CRLs (Certificate Revocation List)`."
|
||||
msgstr ""
|
||||
@ -1,142 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/policy/access-list.rst:3
|
||||
#: e479568cc6894f98a1efae90378d3500
|
||||
msgid "Access List Policy"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/access-list.rst:5
|
||||
#: 3eb6473f2ed54c31a3c816a412d84f68
|
||||
msgid ""
|
||||
"Filtering is used for both input and output of the routing information. Once"
|
||||
" filtering is defined, it can be applied in any direction. VyOS makes "
|
||||
"filtering possible using acls and prefix lists."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/access-list.rst:9
|
||||
#: e33c2de462be4f539c61d24a4a41b524
|
||||
msgid "Basic filtering can be done using access-list and access-list6."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/access-list.rst:13
|
||||
#: 08f3d34471c447e186d35551229b9e7b
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/access-list.rst:16
|
||||
#: 9f4ed8d952854a0f813f3ef7e4490396
|
||||
msgid "Access Lists"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/access-list.rst:20
|
||||
#: a709dd7898554ee5847187e481419baa
|
||||
msgid ""
|
||||
"This command creates the new access list policy, where <acl_number> must be "
|
||||
"a number from 1 to 2699."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/access-list.rst:25
|
||||
#: c7fb74648417449682ce300ef3846c3a
|
||||
msgid "Set description for the access list."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/access-list.rst:30
|
||||
#: 568339af5e0143199dbd5ab6711e91ef
|
||||
msgid ""
|
||||
"This command creates a new rule in the access list and defines an action."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/access-list.rst:35
|
||||
#: bcf37d6edf8f47118ea1543410674273
|
||||
msgid ""
|
||||
"This command defines matching parameters for access list rule. Matching "
|
||||
"criteria could be applied to destination or source parameters:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/access-list.rst:38
|
||||
#: 87caf8ea2d08472a958cf950f5529ea1
|
||||
msgid "any: any IP address to match."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/access-list.rst:39
|
||||
#: 806627a8147a42ac9aa5bdd4d1e91093
|
||||
msgid "host: single host IP address to match."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/access-list.rst:40
|
||||
#: 9c5e969c7a5244ab89ffd55212de0b3b
|
||||
msgid "inverse-match: network/netmask to match (requires network be defined)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/access-list.rst:41
|
||||
#: f130437d04e24bfd97ce12460d53073f
|
||||
msgid "network: network/netmask to match (requires inverse-match be defined)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/access-list.rst:44
|
||||
#: 74fbd8b4573645bdb98daaa8106dd902
|
||||
msgid "IPv6 Access List"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/access-list.rst:46
|
||||
#: 84feff9b902d494b865574fcbff707e7
|
||||
msgid "Basic filtering could also be applied to IPv6 traffic."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/access-list.rst:50
|
||||
#: b19e9022123348cc8a50e7e7bc471d71
|
||||
msgid "This command creates the new IPv6 access list, identified by <text>"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/access-list.rst:54
|
||||
#: 9e0689e76b32438dbf550a3bf88823b1
|
||||
msgid "Set description for the IPv6 access list."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/access-list.rst:58
|
||||
#: 1b2a549eeaba430e9be0268ce26413a3
|
||||
msgid ""
|
||||
"This command creates a new rule in the IPv6 access list and defines an "
|
||||
"action."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/access-list.rst:64
|
||||
#: faac3e4b9abb42c8bfe577c070671be9
|
||||
msgid ""
|
||||
"This command defines matching parameters for IPv6 access list rule. Matching"
|
||||
" criteria could be applied to source parameters:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/access-list.rst:67
|
||||
#: 186a9394be3f4dcd88da16bd60370dc4
|
||||
msgid "any: any IPv6 address to match."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/access-list.rst:68
|
||||
#: 10229d7a7c664e3888f27c9e67eac897
|
||||
msgid "exact-match: exact match of the network prefixes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/access-list.rst:69
|
||||
#: 788b92b7aecd45abb41a8cea35ccf21c
|
||||
msgid ""
|
||||
"network: network/netmask to match (requires inverse-match be defined) BUG, "
|
||||
"NO invert-match option in access-list6"
|
||||
msgstr ""
|
||||
@ -1,66 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/policy/as-path-list.rst:3
|
||||
#: 36f668e2a2294f829c13016096e01cf3
|
||||
msgid "BGP - AS Path Policy"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/as-path-list.rst:5
|
||||
#: 4c64ea2860f6416abec78bd394190bb2
|
||||
msgid ""
|
||||
"VyOS provides policies commands exclusively for BGP traffic filtering and "
|
||||
"manipulation: **as-path-list** is one of them."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/as-path-list.rst:10
|
||||
#: 2c03d0fbe35c42deab0dcf3f58b499c0
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/as-path-list.rst:13
|
||||
#: 9e713da3bf3e4838a5d49410c0ee3b50
|
||||
msgid "policy as-path-list"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/as-path-list.rst:17
|
||||
#: ccec9bad9987459d8bdc3a51c2590936
|
||||
msgid "Create as-path-policy identified by name <text>."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/as-path-list.rst:21
|
||||
#: b35f646a389b46f4bf5305dddc969783
|
||||
msgid "Set description for as-path-list policy."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/as-path-list.rst:25
|
||||
#: 9fa6662dee864acfa389ff0869361529
|
||||
msgid "Set action to take on entries matching this rule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/as-path-list.rst:29
|
||||
#: 1e58538f91694b799c5b365343e8d3b7
|
||||
msgid "Set description for rule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/as-path-list.rst:33
|
||||
#: 3a0bf49be6184060b30148c89f64a127
|
||||
msgid ""
|
||||
"Regular expression to match against an AS path. For example \"64501 64502\"."
|
||||
msgstr ""
|
||||
@ -1,65 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/policy/community-list.rst:3
|
||||
#: 99faa93400034781812a3c7e51406eb2
|
||||
msgid "BGP - Community List"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/community-list.rst:5
|
||||
#: 4e39feb0c06e4ebf827fd77714776680
|
||||
msgid ""
|
||||
"VyOS provides policies commands exclusively for BGP traffic filtering and "
|
||||
"manipulation: **community-list** is one of them."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/community-list.rst:10
|
||||
#: bc29289230ce49008e7e60343b4ecdcb
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/community-list.rst:13
|
||||
#: 35093ecf03b04987a9933fdc5111ddce
|
||||
msgid "policy community-list"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/community-list.rst:17
|
||||
#: f015388656fb490b814d3dd52d0940b5
|
||||
msgid "Creat community-list policy identified by name <text>."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/community-list.rst:21
|
||||
#: b7b5e959d76e4d18bcc3f477087ec3bb
|
||||
msgid "Set description for community-list policy."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/community-list.rst:26
|
||||
#: 8e150776ee1a4c078a1d8f8536fe9f80
|
||||
msgid "Set action to take on entries matching this rule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/community-list.rst:30
|
||||
#: cbce67720e674843aba80de00dd91446
|
||||
msgid "Set description for rule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/community-list.rst:35
|
||||
#: 7fdeda325a9a42b69ce5b9d468afadde
|
||||
msgid "Regular expression to match against a community-list."
|
||||
msgstr ""
|
||||
@ -1,188 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/policy/examples.rst:3 9e55f6ad75a24bcba4b441264559e633
|
||||
msgid "BGP Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:5 10034e88d81f49989271f9282aa4d8a8
|
||||
msgid "**Policy definition:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:18 ee93fa0f387b429ab3f3e4876822eb16
|
||||
msgid ""
|
||||
"Using 'soft-reconfiguration' we get the policy update without bouncing the "
|
||||
"neighbor."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:21 e163f255b4fd4113bcf2a9c5f9be5e2d
|
||||
msgid "**Routes learned before routing policy applied:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:36 d3295b12ba8440d3bdee51e32060e34f
|
||||
msgid "**Routes learned after routing policy applied:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:52 237c690d313c4f2ba372efaf3fbe74bf
|
||||
msgid "You now see the longer AS path."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:56 e92e85398fdf4b49a01a4f22e36b2abe
|
||||
msgid "Transparent Proxy"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:58 2077c9ee3d244b7684ad910ce0fd49cb
|
||||
msgid ""
|
||||
"The following example will show how VyOS can be used to redirect web traffic"
|
||||
" to an external transparent proxy:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:67 96b8b9a9f4d4473c965286c1f33816a0
|
||||
msgid ""
|
||||
"This creates a route policy called FILTER-WEB with one rule to set the "
|
||||
"routing table for matching traffic (TCP port 80) to table ID 100 instead of "
|
||||
"the default routing table."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:71 eff8c2f21f7c495a9e2bb91b2b9878da
|
||||
msgid ""
|
||||
"To create routing table 100 and add a new default gateway to be used by "
|
||||
"traffic matching our route policy:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:78 37739e639d1041ad8c803f3f25fd1810
|
||||
msgid ""
|
||||
"This can be confirmed using the ``show ip route table 100`` operational "
|
||||
"command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:81 5ad4e670582041db8678bac64a470622
|
||||
msgid ""
|
||||
"Finally, to apply the policy route to ingress traffic on our LAN interface, "
|
||||
"we use:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:90 0cae56ecd4b24377b9af0e0bc8a77b3a
|
||||
msgid "Multiple Uplinks"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:92 253b0a5e11e840d399c490ffca8c0a2b
|
||||
msgid ""
|
||||
"VyOS Policy-Based Routing (PBR) works by matching source IP address ranges "
|
||||
"and forwarding the traffic using different routing tables."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:95 42a14c329d224477908507c501703c12
|
||||
msgid "Routing tables that will be used in this example are:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:97 3d093a961fbb44a1938479e6cff1dda8
|
||||
msgid "``table 10`` Routing table used for VLAN 10 (192.168.188.0/24)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:98 9712766ea94a4b1eb0a48effcb60436c
|
||||
msgid "``table 11`` Routing table used for VLAN 11 (192.168.189.0/24)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:99 7ab026dba85f41cdbc1ba0db436a850c
|
||||
msgid ""
|
||||
"``main`` Routing table used by VyOS and other interfaces not participating "
|
||||
"in PBR"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:106
|
||||
#: 8f2646189a294da580e14d0bb6c8da1b
|
||||
msgid "PBR multiple uplinks"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:106
|
||||
#: 3a38f3e12c9d4797abbbd27a096808b9
|
||||
msgid ""
|
||||
"Policy-Based Routing with multiple ISP uplinks (source "
|
||||
"./draw.io/pbr_example_1.drawio)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:109
|
||||
#: b4a4da7aed5c44c1899c1e6a16b94fbc
|
||||
msgid "Add default routes for routing ``table 10`` and ``table 11``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:116
|
||||
#: 306522d6ff8141dfbd7d21e0f99a0827
|
||||
msgid "Add policy route matching VLAN source addresses"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:128
|
||||
#: 8a47de500c564a928af6e813543fd679
|
||||
msgid "Apply routing policy to **inbound** direction of out VLAN interfaces"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:136
|
||||
#: 72234245462c49f7bed17c72f90c0030
|
||||
msgid ""
|
||||
"**OPTIONAL:** Exclude Inter-VLAN traffic (between VLAN10 and VLAN11) from "
|
||||
"PBR"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:149
|
||||
#: 56cc24934d1240f985376d3171292e7a
|
||||
msgid ""
|
||||
"These commands allow the VLAN10 and VLAN11 hosts to communicate with each "
|
||||
"other using the main routing table."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:153
|
||||
#: 8a697645d6704106ab22fddd87629afd
|
||||
msgid "Local route"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:155
|
||||
#: 141d084f705c4347b110285e00baf490
|
||||
msgid ""
|
||||
"The following example allows VyOS to use :abbr:`PBR (Policy-Based Routing)` "
|
||||
"for traffic, which originated from the router itself. That solution for "
|
||||
"multiple ISP's and VyOS router will respond from the same interface that the"
|
||||
" packet was received. Also, it used, if we want that one VPN tunnel to be "
|
||||
"through one provider, and the second through another."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:161
|
||||
#: e6f1de3a0b0646c8bc0ff942ce523e7b
|
||||
msgid "``203.0.113.254`` IP addreess on VyOS eth1 from ISP1"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:162
|
||||
#: db0c4509ae90489fa53d6c2b9c8a0133
|
||||
msgid "``192.168.2.254`` IP addreess on VyOS eth2 from ISP2"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:163
|
||||
#: f3bda5e8641f4f21945e71ce8e702e8e
|
||||
msgid "``table 10`` Routing table used for ISP1"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:164
|
||||
#: 1c888a1f93db4158a5bf86084729ad19
|
||||
msgid "``table 11`` Routing table used for ISP2"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/examples.rst:176
|
||||
#: 7e71d4669a864c4789fa4b2544ca0f46
|
||||
msgid "Add multiple source IP in one rule with same priority"
|
||||
msgstr ""
|
||||
@ -1,82 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:04+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/policy/extcommunity-list.rst:3
|
||||
#: 99df285e945b455aac74baeebdfa19b8
|
||||
msgid "BGP - Extended Community List"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/extcommunity-list.rst:5
|
||||
#: a78474bbedf74189be44930fff3cf440
|
||||
msgid ""
|
||||
"VyOS provides policies commands exclusively for BGP traffic filtering and "
|
||||
"manipulation: **extcommunity-list** is one of them."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/extcommunity-list.rst:10
|
||||
#: fb55866a8e674419bfaf1d452f76da69
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/extcommunity-list.rst:13
|
||||
#: bac7e289b12a42f88b4943491bfcc21f
|
||||
msgid "policy extcommunity-list"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/extcommunity-list.rst:17
|
||||
#: 85cd37c30b044ada853b46d283644265
|
||||
msgid "Creat extcommunity-list policy identified by name <text>."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/extcommunity-list.rst:21
|
||||
#: 6a8eeb36e7984816b4cfdf11404cfdcc
|
||||
msgid "Set description for extcommunity-list policy."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/extcommunity-list.rst:26
|
||||
#: df6922df7a2f4e279f147cd45841fa34
|
||||
msgid "Set action to take on entries matching this rule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/extcommunity-list.rst:31
|
||||
#: c4b71253eef843cfae190abfbca3eee0
|
||||
msgid "Set description for rule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/extcommunity-list.rst:35
|
||||
#: c282f229ca1f4b1fb681af9e4ca4c258
|
||||
msgid ""
|
||||
"Regular expression to match against an extended community list, where text "
|
||||
"could be:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/extcommunity-list.rst:38
|
||||
#: 0122cf06059748dcbb11ae8128739d88
|
||||
msgid "<aa:nn:nn>: Extended community list regular expression."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/extcommunity-list.rst:39
|
||||
#: 260ea696362845449118b395771701c4
|
||||
msgid "<rt aa:nn:nn>: Route Target regular expression."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/extcommunity-list.rst:40
|
||||
#: 02595e6d80324bb3ba5349a3abb6467a
|
||||
msgid "<soo aa:nn:nn>: Site of Origin regular expression."
|
||||
msgstr ""
|
||||
@ -1,86 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:04+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/policy/index.rst:1 17f98f7caf94465491eab10595330f72
|
||||
msgid ":lastproofread:2021-07-12"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/need_improvement.txt:11 83c778f38e2947abb7040b5c3dbf130f
|
||||
msgid "This section needs improvements, examples and explanations."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/need_improvement.txt:13 c3a92eaa553b41f38ca2bb64795d451e
|
||||
msgid ""
|
||||
"Please take a look at the Contributing Guide for our :ref:`documentation`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/index.rst:7 098008c6e2a344e7aeb4d03fd4b0a5f2
|
||||
msgid "Policy"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/index.rst:9 4dad89f4b549474a9eb02657595da63c
|
||||
msgid ""
|
||||
"Policies are used for filtering and traffic management. With policies, "
|
||||
"network administrators could filter and treat traffic according to their "
|
||||
"needs."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/index.rst:13 3d810a54116d4aafb3e2226b607b1925
|
||||
msgid ""
|
||||
"There could be a wide range of routing policies. Some examples are listed "
|
||||
"below:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/index.rst:16 bf7fe34299fb422a8754fba1ddc4066c
|
||||
msgid "Filter traffic based on source/destination address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/index.rst:17 70e812e0943a4aa5b65cca2d215e8440
|
||||
msgid "Set some metric to routes learned from a particular neighbor."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/index.rst:18 12e2e58b170a4865ac30ce259a00eff4
|
||||
msgid ""
|
||||
"Set some attributes (like AS PATH or Community value) to advertised routes "
|
||||
"to neighbors."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/index.rst:20 f5fcd246e018486491e976df48e3fa80
|
||||
msgid ""
|
||||
"Prefer a specific routing protocol routes over another routing protocol "
|
||||
"running on the same router."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/index.rst:23 ae1ee5062c6f4bacbe066dd705abf59f
|
||||
msgid ""
|
||||
"Policies, in VyOS, are implemented using FRR filtering and route maps. "
|
||||
"Detailed information of FRR could be found in http://docs.frrouting.org/"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/index.rst:28 a1d5b218b3634f95a7112b2cb610e5ce
|
||||
msgid "Policy Sections"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/index.rst:46 9b28c406e8e0409a85a724396ae31b1d
|
||||
msgid "Examples"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/index.rst:48 e3f737fbcc284fb69b30ee14ce1d6a23
|
||||
msgid "Examples of policies usage:"
|
||||
msgstr ""
|
||||
@ -1,65 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:04+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/policy/large-community-list.rst:3
|
||||
#: e3ebb86dd16b4b129721f5625b96ed7d
|
||||
msgid "BGP - Large Community List"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/large-community-list.rst:5
|
||||
#: d464ef9bc8854a7b9ea2774bebca71e4
|
||||
msgid ""
|
||||
"VyOS provides policies commands exclusively for BGP traffic filtering and "
|
||||
"manipulation: **large-community-list** is one of them."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/large-community-list.rst:10
|
||||
#: b3552191def9491fa4f19ed9754e1a3c
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/large-community-list.rst:13
|
||||
#: 631c60d44c1342088c4a5664e8bf2bb0
|
||||
msgid "policy large-community-list"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/large-community-list.rst:17
|
||||
#: 5b062cd118f244d1bc62febee094f896
|
||||
msgid "Creat large-community-list policy identified by name <text>."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/large-community-list.rst:21
|
||||
#: 1182e0e96f0b4ad6b91a9d1810fdb27c
|
||||
msgid "Set description for large-community-list policy."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/large-community-list.rst:26
|
||||
#: ec96e0a86ee840739aa57dbfe0fcf0ac
|
||||
msgid "Set action to take on entries matching this rule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/large-community-list.rst:31
|
||||
#: 9c626939aa0144f7b4d5d8649a1ba4b6
|
||||
msgid "Set description for rule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/large-community-list.rst:36
|
||||
#: 247eacd4c7314c7ea9004bf5164b35ff
|
||||
msgid "Regular expression to match against a large community list."
|
||||
msgstr ""
|
||||
@ -1,67 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:04+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/policy/local-route.rst:3
|
||||
#: 21c3fc85e567490986c42ebf6f54110a
|
||||
msgid "Local Route Policy"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/local-route.rst:5
|
||||
#: 92ef96f80f4e47bca2cc30669d5be010
|
||||
msgid "Policies for local traffic are defined in this section."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/local-route.rst:9
|
||||
#: e2fc476c2a05442faf693988b4ffeb82
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/local-route.rst:12
|
||||
#: d7ecfa9e58a442f998cd4a96b1b83802
|
||||
msgid "Local Route IPv4"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/local-route.rst:16
|
||||
#: ../../configuration/policy/local-route.rst:35
|
||||
#: 1da519996f084f2d9d69aa99377bab7f de5dc035a805463296738f3200cc6fec
|
||||
msgid "Set routing table to forward packet to."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/local-route.rst:20
|
||||
#: ../../configuration/policy/local-route.rst:39
|
||||
#: 236093fdd50c4fb0bffc7c6bb8148253 a428322a127e4c8bbcc49ebe7988ef67
|
||||
msgid "Set source address or prefix to match."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/local-route.rst:24
|
||||
#: ../../configuration/policy/local-route.rst:43
|
||||
#: 5d93a66089c14d08a38188239802b098 c38c5e3071564082be0e927f4bddf286
|
||||
msgid "Set destination address or prefix to match."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/local-route.rst:28
|
||||
#: ../../configuration/policy/local-route.rst:47
|
||||
#: 2f3012242a81428db86dd84d9230f939 34b19715fec74d1d8c833a0af2c21d3b
|
||||
msgid "Set inbound interface to match."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/local-route.rst:31
|
||||
#: 56a1eee20b314aa0b5d773d392a9e2e6
|
||||
msgid "Local Route IPv6"
|
||||
msgstr ""
|
||||
@ -1,124 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:04+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/policy/prefix-list.rst:3
|
||||
#: bf1d03a4d5904d4d8a154dffd11dc672
|
||||
msgid "Prefix List Policy"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/prefix-list.rst:5
|
||||
#: 5055b1b5d5124c229b6c43a397e65a10
|
||||
msgid ""
|
||||
"Prefix lists provides the most powerful prefix based filtering mechanism. In"
|
||||
" addition to access-list functionality, ip prefix-list has prefix length "
|
||||
"range specification."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/prefix-list.rst:9
|
||||
#: 6b5d1c856e98414594830bcd449d1289
|
||||
msgid ""
|
||||
"If no ip prefix list is specified, it acts as permit. If ip prefix list is "
|
||||
"defined, and no match is found, default deny is applied."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/prefix-list.rst:12
|
||||
#: f21eb18ab90143dabea5810d68a43103
|
||||
msgid "Prefix filtering can be done using prefix-list and prefix-list6."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/prefix-list.rst:16
|
||||
#: f8ee72dd7d4042dda9c9a1c055b3f183
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/prefix-list.rst:19
|
||||
#: 6c8d5ddf7dc0455fad8be8c0da75856f
|
||||
msgid "Prefix Lists"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/prefix-list.rst:23
|
||||
#: cbac6314f17c463688c687b249b3615c
|
||||
msgid "This command creates the new prefix-list policy, identified by <text>."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/prefix-list.rst:27
|
||||
#: 3f03397cf2ab4755ac4faab65e640353
|
||||
msgid "Set description for the prefix-list policy."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/prefix-list.rst:31
|
||||
#: b87af5dc5f5940808d2161737b1ca662
|
||||
msgid ""
|
||||
"This command creates a new rule in the prefix-list and defines an action."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/prefix-list.rst:35
|
||||
#: be668267871f40a4821120d166c03ff8
|
||||
msgid "Set description for rule in the prefix-list."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/prefix-list.rst:39
|
||||
#: c14a905a54a04166b0fc4e48f12a91ff
|
||||
msgid "Prefix to match against."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/prefix-list.rst:43
|
||||
#: ../../configuration/policy/prefix-list.rst:76
|
||||
#: 7f4bad0d40bb45518763845fb7514232 b359bed7b3c94cfe9ca98a6fe553d340
|
||||
msgid "Netmask greater than length."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/prefix-list.rst:47
|
||||
#: ../../configuration/policy/prefix-list.rst:80
|
||||
#: ad1253ea637740bdad2b76c90dd823ef 4f751525b0f94457856df83f196f6a8c
|
||||
msgid "Netmask less than length"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/prefix-list.rst:50
|
||||
#: a71dce0da0e14cdf8586b5b255a8f35c
|
||||
msgid "IPv6 Prefix Lists"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/prefix-list.rst:54
|
||||
#: 0ea46f3b7462457f878811cf8281a6ac
|
||||
msgid ""
|
||||
"This command creates the new IPv6 prefix-list policy, identified by <text>."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/prefix-list.rst:58
|
||||
#: a2d8561db68a42ad9a21f78fde24e230
|
||||
msgid "Set description for the IPv6 prefix-list policy."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/prefix-list.rst:62
|
||||
#: 1a6641f5eb2b4e40872ab0c020aeb01e
|
||||
msgid ""
|
||||
"This command creates a new rule in the IPv6 prefix-list and defines an "
|
||||
"action."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/prefix-list.rst:67
|
||||
#: 7af03ac7d8534053aee14cca7bd2734b
|
||||
msgid "Set description for rule in IPv6 prefix-list."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/prefix-list.rst:72
|
||||
#: 39fed85fecc942018c7a678c47ed1534
|
||||
msgid "IPv6 prefix."
|
||||
msgstr ""
|
||||
@ -1,500 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:04+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:3 ad8de71ad70c4767bd5091981a05210a
|
||||
msgid "Route Map Policy"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:5 6e0fd980a96140b890a21739a1366bb8
|
||||
msgid ""
|
||||
"Route map is a powerfull command, that gives network administrators a very "
|
||||
"useful and flexible tool for traffic manipulation."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:10
|
||||
#: 3e125c07b2cb4904b47b517d29544a52
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:13
|
||||
#: 3a2e805f3ec9489593b5334d44e250a1
|
||||
msgid "Route Map"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:17
|
||||
#: 88361b9a7bcf461fb7bdb6dfd7c691f9
|
||||
msgid "This command creates a new route-map policy, identified by <text>."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:21
|
||||
#: c44abec868104cc1b490f976f92a0469
|
||||
msgid "Set description for the route-map policy."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:25
|
||||
#: ebb8a2368e0f4591a4cd72ea3ab4573d
|
||||
msgid "Set action for the route-map policy."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:29
|
||||
#: ecfb876cbec9416393f3484638c831db
|
||||
msgid "Call another route-map policy on match."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:33
|
||||
#: 0ecf5b437d0342538a3e2cf47ff6dd63
|
||||
msgid "Jump to a different rule in this route-map on a match."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:37
|
||||
#: 54fc7badf5ff415f889b2c1d96d6b03d
|
||||
msgid "Set description for the rule in the route-map policy."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:41
|
||||
#: 77fbe45a41f64cd3ab67df8aaa7c78d5
|
||||
msgid "BGP as-path list to match."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:46
|
||||
#: a00cd57cd8f84ed48847f4f026486ef9
|
||||
msgid "BGP community-list to match."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:51
|
||||
#: cb86ad8630e3406fb4ecb2aefc3f0b53
|
||||
msgid "Set BGP community-list to exactly match."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:56
|
||||
#: bba7c54fa9dd4f6396b5c0c40528a04c
|
||||
msgid "BGP extended community to match."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:60
|
||||
#: 4d23f6cd8da44a77b1eb9a70cc221273
|
||||
msgid "First hop interface of a route to match."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:65
|
||||
#: 90823c49a8b447f4a8a6a96152ca606d
|
||||
msgid "IP address of route to match, based on access-list."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:70
|
||||
#: 4e12498a04dc445287236d0ce86b9466
|
||||
msgid "IP address of route to match, based on prefix-list."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:75
|
||||
#: 56a05d3597f44fd48284a2222b5bd433
|
||||
msgid ""
|
||||
"IP address of route to match, based on specified prefix-length. Note that "
|
||||
"this can be used for kernel routes only. Do not apply to the routes of "
|
||||
"dynamic routing protocols (e.g. BGP, RIP, OSFP), as this can lead to "
|
||||
"unexpected results.."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:83
|
||||
#: 69f2811da6d143d08033ae7dce8b681e
|
||||
msgid "IP next-hop of route to match, based on access-list."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:88
|
||||
#: 050d01a045ec42fb962a6fe309b8592d
|
||||
msgid "IP next-hop of route to match, based on ip address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:93
|
||||
#: 98715f0333784647b283d7f02a522bca
|
||||
msgid "IP next-hop of route to match, based on prefix length."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:98
|
||||
#: 10637b9a96534fc784975c0de2b27f68
|
||||
msgid "IP next-hop of route to match, based on prefix-list."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:103
|
||||
#: 345508b0df1d4d3a800d89e7be2e9ca3
|
||||
msgid "IP next-hop of route to match, based on type."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:108
|
||||
#: 44898638091d44bab5bf8aea621627fe
|
||||
msgid "IP route source of route to match, based on access-list."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:113
|
||||
#: af05939d992f4c12a1e206175f5b674b
|
||||
msgid "IP route source of route to match, based on prefix-list."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:118
|
||||
#: 8e233903bb7a4804b9699ad807c1b64d
|
||||
msgid "IPv6 address of route to match, based on IPv6 access-list."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:123
|
||||
#: 063a8e15bdb94c2fb94c99bdac3c3f60
|
||||
msgid "IPv6 address of route to match, based on IPv6 prefix-list."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:128
|
||||
#: 76a46f60854b4e2f8b903566e463209c
|
||||
msgid ""
|
||||
"IPv6 address of route to match, based on specified prefix-length. Note that "
|
||||
"this can be used for kernel routes only. Do not apply to the routes of "
|
||||
"dynamic routing protocols (e.g. BGP, RIP, OSFP), as this can lead to "
|
||||
"unexpected results.."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:136
|
||||
#: 7ef33aa36217404dacdc0f11e8c61c01
|
||||
msgid "Nexthop IPv6 address to match."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:141
|
||||
#: 425cc1c3e5b84387ad0792fc680742fa
|
||||
msgid "Match BGP large communities."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:146
|
||||
#: 553c19c921c04156b68dd114847db64b
|
||||
msgid "Match local preference."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:150
|
||||
#: d2ca7f516f7f4c4185dc76a54a780c88
|
||||
msgid "Match route metric."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:155
|
||||
#: d35025115b3245f7be4de6e12e61fd61
|
||||
msgid "Boarder Gateway Protocol (BGP) origin code to match."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:159
|
||||
#: 5a9ddb8ac98d42ed8ddbc95e97872857
|
||||
msgid "Peer IP address to match."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:164
|
||||
#: 57058c1439b140368522c4e0b45d4ac0
|
||||
msgid "Match RPKI validation result."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:168
|
||||
#: 4fc418e9ae6f4f1da5798f42d843415a
|
||||
msgid "Route tag to match."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:172
|
||||
#: a326612d4b5a43a9b2a0c919110841ef
|
||||
msgid "Exit policy on match: go to rule <1-65535>"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:176
|
||||
#: fdbf494dcdaf4dbfaa143b1077522ac7
|
||||
msgid "Exit policy on match: go to next sequence number."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:181
|
||||
#: 491cd5f456c04edf8275b06cb5d70d64
|
||||
msgid "BGP aggregator attribute: AS number or IP address of an aggregation."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:186
|
||||
#: 5661cc0c3b6d4e3092a6131a9ba78f2e
|
||||
msgid "Drop AS-NUMBER from the BGP AS path."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:191
|
||||
#: 697f2d4dd1b24584b04bbbc3d5099e84
|
||||
msgid ""
|
||||
"Prepend the given string of AS numbers to the AS_PATH of the BGP path's "
|
||||
"NLRI."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:196
|
||||
#: c115807127bf4dd986ae87b4b2d4f25d
|
||||
msgid "Prepend the existing last AS number (the leftmost ASN) to the AS_PATH."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:200
|
||||
#: 598971dab68f4775b7d87ec19634d957
|
||||
msgid "BGP atomic aggregate attribute."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:205
|
||||
#: 7352b97327e64d53ab6053c9c782f96c
|
||||
msgid ""
|
||||
"Add or replace BGP community attribute in format ``<0-65535:0-65535>`` or "
|
||||
"from well-known community list"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:210
|
||||
#: f9c54239101146629a5dfc06b2df0c08
|
||||
msgid "Delete all BGP communities"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:215
|
||||
#: eeeed011b3fc45aba070d4bec8209a8d
|
||||
msgid "Delete BGP communities matching the community-list."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:220
|
||||
#: 01206d3e7e984539acb20edfa87c7ee2
|
||||
msgid ""
|
||||
"Add or replace BGP large-community attribute in format "
|
||||
"``<0-4294967295:0-4294967295:0-4294967295>``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:225
|
||||
#: 16d21f6ca1b549a4ba6c8798ed1685c2
|
||||
msgid "Delete all BGP large-communities"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:230
|
||||
#: 97acc871eef54d3d9dd24a2a27c44692
|
||||
msgid "Delete BGP communities matching the large-community-list."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:235
|
||||
#: a7169b39be1649dbb1f0230f33380477
|
||||
msgid "Set extcommunity bandwidth"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:239
|
||||
#: f6f99edbaf094c278ca922346f5d22eb
|
||||
msgid "The link bandwidth extended community is encoded as non-transitive"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:244
|
||||
#: c916624137bb4b78a2de526a34c14151
|
||||
msgid ""
|
||||
"Set route target value in format ``<0-65535:0-4294967295>`` or "
|
||||
"``<IP:0-65535>``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:249
|
||||
#: 39da491c49684039a8d2769477d6bb74
|
||||
msgid ""
|
||||
"Set site of origin value in format ``<0-65535:0-4294967295>`` or "
|
||||
"``<IP:0-65535>``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:253
|
||||
#: 72a38857eadb43ca86ae8c268288ccd6
|
||||
msgid "Clear all BGP extcommunities."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:257
|
||||
#: fd87fb7ad1134046beb08c88f4399183
|
||||
msgid "Locally significant administrative distance."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:263
|
||||
#: fe58cb11124c400b8f4a0cf2eb9512f2
|
||||
msgid "Nexthop IP address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:268
|
||||
#: 164f440be5e94bfeab85f9e58431c933
|
||||
msgid ""
|
||||
"Set the next-hop as unchanged. Pass through the route-map without changing "
|
||||
"its value"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:274
|
||||
#: ../../configuration/policy/route-map.rst:287
|
||||
#: f89e46e41c744c4b9f9cb428c14da0e9 0e029bc9573f49e0973199a4e21b7a74
|
||||
msgid ""
|
||||
"Set the BGP nexthop address to the address of the peer. For an incoming "
|
||||
"route-map this means the ip address of our peer is used. For an outgoing "
|
||||
"route-map this means the ip address of our self is used to establish the "
|
||||
"peering with our neighbor."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:282
|
||||
#: 365b613d221f412cb0abcd6188aee49e
|
||||
msgid "Nexthop IPv6 address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:295
|
||||
#: 2cafdea846e74809bbbacdcbf7bef7c8
|
||||
msgid ""
|
||||
"For Incoming and Import Route-maps if we receive a v6 global and v6 LL "
|
||||
"address for the route, then prefer to use the global address as the nexthop."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:302
|
||||
#: 2f22206c85d94e95bcf532210d7139c3
|
||||
msgid "Set BGP local preference attribute."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:307
|
||||
#: 3a8ec4f778f54940a6ed3e59baea0df7
|
||||
msgid ""
|
||||
"Set destination routing protocol metric. Add or subtract metric, or set "
|
||||
"metric value."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:313
|
||||
#: 5cecfa842e32446fa15764205cbf02ea
|
||||
msgid "Set OSPF external metric-type."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:318
|
||||
#: b2eec2092fba414984ce8a8d76ed5d7b
|
||||
msgid "Set BGP origin code."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:323
|
||||
#: 1ab5d5c7abe14825aa6ac3e8e6b3faed
|
||||
msgid "Set BGP originator ID attribute."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:328
|
||||
#: dd6d80b575484c9cb00d36b64537f1f1
|
||||
msgid "Set source IP/IPv6 address for route."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:332
|
||||
#: d6aa91d50064485f96d965e968fa46ac
|
||||
msgid "Set prefixes to table."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:336
|
||||
#: d15bac11c5b84e6b9a99158ddc0589e8
|
||||
msgid "Set tag value for routing protocol."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:341
|
||||
#: 01b9621f3e58428eb72a26ef4fc953d6
|
||||
msgid "Set BGP weight attribute"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:344
|
||||
#: 5061ab6655204af8b75cd91eb1ab96fa
|
||||
msgid "List of well-known communities"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:345
|
||||
#: 1fbacbb54f33450b9ab947441c373020
|
||||
msgid ""
|
||||
"``local-as`` - Well-known communities value "
|
||||
"NO_EXPORT_SUBCONFED 0xFFFFFF03"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:346
|
||||
#: ea6405de4ca24e71a191e15bd0b84d52
|
||||
msgid ""
|
||||
"``no-advertise`` - Well-known communities value NO_ADVERTISE"
|
||||
" 0xFFFFFF02"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:347
|
||||
#: ac042b35579a4fb5a8bf8e903143dee1
|
||||
msgid ""
|
||||
"``no-export`` - Well-known communities value NO_EXPORT "
|
||||
"0xFFFFFF01"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:348
|
||||
#: 64481c109e2e44a7b2ea10e921b3d8ce
|
||||
msgid "``internet`` - Well-known communities value 0"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:349
|
||||
#: fbdd43ebad2b4271989f8c425b37b781
|
||||
msgid ""
|
||||
"``graceful-shutdown`` - Well-known communities value "
|
||||
"GRACEFUL_SHUTDOWN 0xFFFF0000"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:350
|
||||
#: 922e1d57e8c044ac88bdd37af1d75e28
|
||||
msgid ""
|
||||
"``accept-own`` - Well-known communities value ACCEPT_OWN "
|
||||
"0xFFFF0001"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:351
|
||||
#: a30a597379364f43a614e0d306b95354
|
||||
msgid ""
|
||||
"``route-filter-translated-v4`` - Well-known communities value "
|
||||
"ROUTE_FILTER_TRANSLATED_v4 0xFFFF0002"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:352
|
||||
#: aa1ee74520b24f8abb276b342eb991f5
|
||||
msgid ""
|
||||
"``route-filter-v4`` - Well-known communities value "
|
||||
"ROUTE_FILTER_v4 0xFFFF0003"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:353
|
||||
#: bb742583460c4db5952b8620246c1d43
|
||||
msgid ""
|
||||
"``route-filter-translated-v6`` - Well-known communities value "
|
||||
"ROUTE_FILTER_TRANSLATED_v6 0xFFFF0004"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:354
|
||||
#: d4a7f7d47d5e47a58eec4ebdabf8cb02
|
||||
msgid ""
|
||||
"``route-filter-v6`` - Well-known communities value "
|
||||
"ROUTE_FILTER_v6 0xFFFF0005"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:355
|
||||
#: 05d742d29bf148b58fb0b428722eb65f
|
||||
msgid ""
|
||||
"``llgr-stale`` - Well-known communities value LLGR_STALE "
|
||||
"0xFFFF0006"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:356
|
||||
#: e13dcb9a9a4e493c8aa8608f8f571c78
|
||||
msgid ""
|
||||
"``no-llgr`` - Well-known communities value NO_LLGR "
|
||||
"0xFFFF0007"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:357
|
||||
#: 982a4e97bd1d41a0b5e99685b38263fc
|
||||
msgid ""
|
||||
"``accept-own-nexthop`` - Well-known communities value accept-own-"
|
||||
"nexthop 0xFFFF0008"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:358
|
||||
#: 88ae257c871949cea5f32bbb085d9e3d
|
||||
msgid ""
|
||||
"``blackhole`` - Well-known communities value BLACKHOLE "
|
||||
"0xFFFF029A"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route-map.rst:359
|
||||
#: 4a687147491e40f6b79504c4e25dfb4b
|
||||
msgid ""
|
||||
"``no-peer`` - Well-known communities value NOPEER "
|
||||
"0xFFFFFF04"
|
||||
msgstr ""
|
||||
@ -1,294 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/policy/route.rst:3 12046565db894d5cb54f86e2ebd9a46f
|
||||
msgid "Route and Route6 Policy"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:5 e7a778fb6c6f4d8ba8c2e2c6e5e10411
|
||||
msgid ""
|
||||
"IPv4 route and IPv6 route policies are defined in this section. These route "
|
||||
"policies can then be associated to interfaces."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:10 fe3fa542c34a4f40a52444e38b226c7d
|
||||
msgid "Rule-Sets"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:12 7683b908cc034ce99282d6adfb51b123
|
||||
msgid ""
|
||||
"A rule-set is a named collection of rules that can be applied to an "
|
||||
"interface. Each rule is numbered, has an action to apply if the rule is "
|
||||
"matched, and the ability to specify the criteria to match. Data packets go "
|
||||
"through the rules from 1 - 999999, at the first match the action of the rule"
|
||||
" will be executed."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:20 2fadb9b8d5704f709886ce1b1c68906c
|
||||
msgid "Provide a rule-set description."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:25 8c0142822f52485faa39848d43512437
|
||||
msgid "Option to log packets hitting default-action."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:30 64141a6b13134149a71e1953b89e3065
|
||||
msgid "Provide a description for each rule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:35 7fb95788f3d84267891f5b1e4b7d2071
|
||||
msgid "Option to enable or disable log matching rule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:38 cffc28a3465448e9be8b69172573f71e
|
||||
msgid "Matching criteria"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:40 c4c2728c251344838f143a4454a89677
|
||||
msgid ""
|
||||
"There are a lot of matching criteria options available, both for ``policy "
|
||||
"route`` and ``policy route6``. These options are listed in this section."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:53 1ed5668436044c39b85a140cbc7761e0
|
||||
msgid ""
|
||||
"Set match criteria based on source or destination ipv4|ipv6 address, where "
|
||||
"<match_criteria> could be:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:62 eb650d146a7744308ac80f552415c95d
|
||||
msgid "For ipv4:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:57 c6e621216a4b40daaff88a7fde897966
|
||||
msgid "<x.x.x.x>: IP address to match."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:58 98375a3bba554be59930baf646f3729e
|
||||
msgid "<x.x.x.x/x>: Subnet to match."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:59 92acdd0900204fa29d7032ae233e9d54
|
||||
msgid "<x.x.x.x>-<x.x.x.x>: IP range to match."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:60 686b5704d39e41718d31bba4cee9fbba
|
||||
msgid "!<x.x.x.x>: Match everything except the specified address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:61 0f8cd4fac8d64b7a80a36c82131bc67f
|
||||
msgid "!<x.x.x.x/x>: Match everything except the specified subnet."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:62 bfdb04726e5645289174498e2a62e790
|
||||
msgid "!<x.x.x.x>-<x.x.x.x>: Match everything except the specified range."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:71 4507a71f626741f5971311da1d5d0f1c
|
||||
msgid "And for ipv6:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:65 3e5626dbef4c4b258977251031228707
|
||||
msgid "<h:h:h:h:h:h:h:h>: IPv6 address to match."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:66 5fc7a4cf419b4f6699b6d600e094ca08
|
||||
msgid "<h:h:h:h:h:h:h:h/x>: IPv6 prefix to match."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:67 4e5e57d424ed4d2582ad933e03d5cf10
|
||||
msgid "<h:h:h:h:h:h:h:h>-<h:h:h:h:h:h:h:h>: IPv6 range to match."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:68 aa06921e939448b291c2cb14023c17ea
|
||||
msgid "!<h:h:h:h:h:h:h:h>: Match everything except the specified address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:69 4bfb4b8efc3d4874815eb19134d5b2d8
|
||||
msgid "!<h:h:h:h:h:h:h:h/x>: Match everything except the specified prefix."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:70 bc0b878829924ed18aa321f9f13d91ef
|
||||
msgid ""
|
||||
"!<h:h:h:h:h:h:h:h>-<h:h:h:h:h:h:h:h>: Match everything except the specified "
|
||||
"range."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:82 b05ef17b6b7e4e1998134c800991e37f
|
||||
msgid ""
|
||||
"Set match criteria based on source or destination groups, where <text> would"
|
||||
" be the group name/identifier. Prepend character '!' for inverted matching "
|
||||
"criteria."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:89 d6b58b851d5247ae8911adefd70beecc
|
||||
msgid ""
|
||||
"Set match criteria based on destination port, where <match_criteria> could "
|
||||
"be:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:92 9a6cd463c3774f8aa53aa2f050899d57
|
||||
msgid "<port name>: Named port (any name in /etc/services, e.g., http)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:93 d830786ca2784f22b920f86b8aee90ba
|
||||
msgid "<1-65535>: Numbered port."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:94 a87aee014b2b44e18924070d20d5eac5
|
||||
msgid "<start>-<end>: Numbered port range (e.g., 1001-1005)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:96 06f2f1d47e194c00bd3d91edeb3c9d93
|
||||
msgid ""
|
||||
"Multiple destination ports can be specified as a comma-separated list. The "
|
||||
"whole list can also be \"negated\" using '!'. For example: "
|
||||
"'!22,telnet,http,123,1001-1005'"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:103 8e9e32c80ad0480482e7935563d2ec0a
|
||||
msgid "Option to disable rule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:110 dfe8b9e968364e728f8603ef0ba88923
|
||||
msgid ""
|
||||
"Match based on dscp value criteria. Multiple values from 0 to 63 and ranges "
|
||||
"are supported."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:118 dfb2a15e9da84a8cb2709354fc301993
|
||||
msgid "Set IP fragment match, where:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:120 89262846895f4c3a9f97f2883a425796
|
||||
msgid "match-frag: Second and further fragments of fragmented packets."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:121 9b2bcec1ce7a4724b4dea926a3a916b6
|
||||
msgid "match-non-frag: Head fragments or unfragmented packets."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:126 516d8e1137834731bde4ad51ec30219f
|
||||
msgid "Match based on icmp|icmpv6 code and type."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:131 469b60b6819b4c15a3125a889d742178
|
||||
msgid ""
|
||||
"Match based on icmp|icmpv6 type-name criteria. Use tab for information about"
|
||||
" what type-name criteria are supported."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:139 8c0680de716b4c7d9f72ead12638e2b3
|
||||
msgid "Set IPSec inbound match criterias, where:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:141 6df96925bad1492c8fe7fcfe41c41156
|
||||
msgid "match-ipsec: match inbound IPsec packets."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:142 3f16b8ae02824909b69431a30accd86f
|
||||
msgid "match-none: match inbound non-IPsec packets."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:147 715651ff1aaa469abef0b8a8c3db485a
|
||||
msgid "Set maximum number of packets to alow in excess of rate."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:152 02aca6c48ebb4f388f0e5070d3dd63c0
|
||||
msgid ""
|
||||
"Set maximum average matching rate. Format for rate: integer/time_unit, where"
|
||||
" time_unit could be any one of second, minute, hour or day.For example "
|
||||
"1/second implies rule to be matched at an average of once per second."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:161 7e49ea28828244cbac07cb55b408e2a3
|
||||
msgid ""
|
||||
"Match a protocol criteria. A protocol number or a name which is defined in: "
|
||||
"``/etc/protocols``. Special names are ``all`` for all protocols and "
|
||||
"``tcp_udp`` for tcp and udp based packets. The ``!`` negates the selected "
|
||||
"protocol."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:171 81296c39572e4c079bfafc2f1cbae4f0
|
||||
msgid ""
|
||||
"Set parameters for matching recently seen sources. This match could be used "
|
||||
"by seeting count (source address seen more than <1-255> times) and/or time "
|
||||
"(source address seen in the last <0-4294967295> seconds)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:180 10a07af3155b40b496564c06623495ee
|
||||
msgid "Set match criteria based on session state."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:185 7dce446cf9104cc3b08b9fa06398e9bd
|
||||
msgid ""
|
||||
"Set match criteria based on tcp flags. Allowed values for TCP flags: SYN ACK"
|
||||
" FIN RST URG PSH ALL. When specifying more than one flag, flags should be "
|
||||
"comma-separated. For example : value of 'SYN,!ACK,!FIN,!RST' will only match"
|
||||
" packets with the SYN flag set, and the ACK, FIN and RST flags unset."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:205 5f6efb8f27c54cf8951b7c6ccaf664f9
|
||||
msgid "Time to match the defined rule."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:209 40e408be46854491ba0e1746a712a8c1
|
||||
msgid ""
|
||||
"Match time to live parameter, where 'eq' stands for 'equal'; 'gt' stands for"
|
||||
" 'greater than', and 'lt' stands for 'less than'."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:214 1d8e701d2da44af290b91322303203e1
|
||||
msgid ""
|
||||
"Match hop-limit parameter, where 'eq' stands for 'equal'; 'gt' stands for "
|
||||
"'greater than', and 'lt' stands for 'less than'."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:218 6ae39e910670474fb08a549fc24a24dd
|
||||
msgid "Actions"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:220 443c8888d1754d1fb5a336624176eded
|
||||
msgid ""
|
||||
"When mathcing all patterns defined in a rule, then different actions can be "
|
||||
"made. This includes droping the packet, modifying certain data, or setting a"
|
||||
" different routing table."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:227 0d8aa41b2b5f46778a17a651731a1bd3
|
||||
msgid "Set rule action to drop."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:232 782f6f4e767f45f8b7787968c4a917ec
|
||||
msgid ""
|
||||
"Set packet modifications: Packet Differentiated Services Codepoint (DSCP)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:237 cddc7036de154ee78cbb807465e3b87b
|
||||
msgid "Set packet modifications: Packet marking"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:242 f03b3093e7444648adcd66758ca8d80d
|
||||
msgid "Set packet modifications: Routing table to forward packet with."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/policy/route.rst:247 7109221ecb5f463aadc1d9e558efea48
|
||||
msgid ""
|
||||
"Set packet modifications: Explicitly set TCP Maximum segment size value."
|
||||
msgstr ""
|
||||
@ -1,133 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../_include/need_improvement.txt:11 0680c6dee54d45fb85166f76158e3f1f
|
||||
msgid "This section needs improvements, examples and explanations."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/need_improvement.txt:13 5b49805092c44344b6084a780cd9eae0
|
||||
msgid ""
|
||||
"Please take a look at the Contributing Guide for our :ref:`documentation`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/bfd.rst:9 9ea4b3f19ddf43dea109135a6e380f14
|
||||
msgid "BFD"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/bfd.rst:11 d2eeb3f2bea4455ca3fbd534010efdf4
|
||||
msgid ""
|
||||
":abbr:`BFD (Bidirectional Forwarding Detection)` is described and extended "
|
||||
"by the following RFCs: :rfc:`5880`, :rfc:`5881` and :rfc:`5883`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/bfd.rst:14 07c0c0c903f84b59825bd4796c1aa9fc
|
||||
msgid ""
|
||||
"In the age of very fast networks, a second of unreachability may equal "
|
||||
"millions of lost packets. The idea behind BFD is to detect very quickly when"
|
||||
" a peer is down and take action extremely fast."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/bfd.rst:17 2d350fa76fd6418fb8b0996e12362f8d
|
||||
msgid ""
|
||||
"BFD sends lots of small UDP packets very quickly to ensures that the peer is"
|
||||
" still alive."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/bfd.rst:19 33bd042555b44e4aa6c720878d6e09cb
|
||||
msgid ""
|
||||
"This allows avoiding the timers defined in BGP and OSPF protocol to expires."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/bfd.rst:22 03b027d8407348deb63871c0fa121fa6
|
||||
msgid "Configure BFD"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/bfd.rst:26 8d0a9190d77145bfa0eefbe3e633c1de
|
||||
msgid "Set BFD peer IPv4 address or IPv6 address"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/bfd.rst:30 47acd42b01834f69b778fb65bad6715c
|
||||
msgid "Enables the echo transmission mode"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/bfd.rst:34 d01a4031a50b43b387c76f26853e5754
|
||||
msgid "Allow this BFD peer to not be directly connected"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/bfd.rst:39 bc060d12f1f848948aa2203a26f7c19f
|
||||
msgid "Bind listener to specific interface/address, mandatory for IPv6"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/bfd.rst:43 12c3caa0be764921a13a1baec6a908b9
|
||||
msgid ""
|
||||
"The minimal echo receive transmission interval that this system is capable "
|
||||
"of handling"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/bfd.rst:48 78e82e9dc53544048d7aebcc97bcb64f
|
||||
msgid "Remote transmission interval will be multiplied by this value"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/bfd.rst:53 f42865681b684474bfdbc7e254153e80
|
||||
msgid "Interval in milliseconds"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/bfd.rst:57 89eaa85556dd496e8f170b9481407441
|
||||
msgid "Disable a BFD peer"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/bfd.rst:61 eb155e9bf58f47a0bc78079b46918941
|
||||
msgid "Enable BFD in BGP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/bfd.rst:65 16eaf833c7a14716bfb10adba25fdc3a
|
||||
msgid "Enable BFD on a single BGP neighbor"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/bfd.rst:69 1d82b7fb84054999b700d79318c162af
|
||||
msgid "Enable BFD on a BGP peer group"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/bfd.rst:73 35485a2a543e469f9b5129caac64b5b4
|
||||
msgid "Enable BFD in OSPF"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/bfd.rst:77 6d34bef8daf04d04bae90090b03b6eeb
|
||||
msgid "Enable BFD for OSPF on an interface"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/bfd.rst:81 1d3710e8111c4564a571a4d47c4b83a2
|
||||
msgid "Enable BFD for OSPFv3 on an interface"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/bfd.rst:85 1b9ffa03ca7346d8be976c6cdf0a5e34
|
||||
msgid "Enable BFD in ISIS"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/bfd.rst:89 cedccbe5c8f74dbcb29e510f3612741e
|
||||
msgid "Enable BFD for ISIS on an interface"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/bfd.rst:94 0d0b77819d034f41a8caa9210113a36d
|
||||
msgid "Operational Commands"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/bfd.rst:98 78a5725cd8ed4dfe8d4dbf11ef777276
|
||||
msgid "Show all BFD peers"
|
||||
msgstr ""
|
||||
File diff suppressed because it is too large
Load Diff
@ -1,259 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:7 73170b0524e84e909efd5d193436e306
|
||||
msgid "Multicast"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:9 f96ce9ad4fe84d10ad5e7eff17ff4e3b
|
||||
msgid ""
|
||||
"VyOS facilitates IP Multicast by supporting **PIM Sparse Mode**, **IGMP** "
|
||||
"and **IGMP-Proxy**."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:14 0fdd2bf63a8343ae9a5a0d72a9cc3c63
|
||||
msgid "PIM and IGMP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:16 4ea16075d11c4e4db86a05694ca6fc82
|
||||
msgid ""
|
||||
"PIM (Protocol Independent Multicast) must be configured in every interface "
|
||||
"of every participating router. Every router must also have the location of "
|
||||
"the Rendevouz Point manually configured. Then, unidirectional shared trees "
|
||||
"rooted at the Rendevouz Point will automatically be built for multicast "
|
||||
"distribution."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:22 aef5c28fd1a54905b814d9d70dd6b60c
|
||||
msgid ""
|
||||
"Traffic from multicast sources will go to the Rendezvous Point, and "
|
||||
"receivers will pull it from a shared tree using IGMP (Internet Group "
|
||||
"Management Protocol)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:26 60422c65d7be4e7bb930547e55500c35
|
||||
msgid ""
|
||||
"Multicast receivers will talk IGMP to their local router, so, besides having"
|
||||
" PIM configured in every router, IGMP must also be configured in any router "
|
||||
"where there could be a multicast receiver locally connected."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:30 6ec1b3c2b56240c7aad3f1660166d90c
|
||||
msgid ""
|
||||
"VyOS supports both IGMP version 2 and version 3 (which allows source-"
|
||||
"specific multicast)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:35
|
||||
#: ../../configuration/protocols/igmp.rst:233 056585cb054f40fab1676ef96518255f
|
||||
#: d9b9278ab3554f69b10646766da4153a
|
||||
msgid "Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:37 1d03bafd27e2451e969aad97e3d10187
|
||||
msgid "In the following example we can see a basic multicast setup:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rstNone a01fe8a799ff4dd7ad87f6b049acfdbd
|
||||
msgid "Network Topology Diagram"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:46 cb0856f0a32b4bf193eaecff7ec0d821
|
||||
msgid "**Router 1**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:59 979e527ff5b0426b912a237a6c0ccc25
|
||||
msgid "**Router 3**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:74 2b47ec89cbd84c2794958adf2f7f2dbc
|
||||
msgid "**Router 2**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:91 02b04aded9f746e5a8c00452d76056ec
|
||||
msgid "Basic commands"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:93 e44a018c63c246d7a679109a8e875665
|
||||
msgid "These are the commands for a basic setup."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:97 f85930e3ed584348ada9abf3e02abd17
|
||||
msgid ""
|
||||
"Use this command to enable PIM in the selected interface so that it can "
|
||||
"communicate with PIM neighbors."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:104 930d2957bbc845a491ef0d7d7c06ff94
|
||||
msgid ""
|
||||
"Use this command to manually configure a Rendezvous Point for PIM so that "
|
||||
"join messages can be sent there. Set the Rendevouz Point address and the "
|
||||
"matching prefix of group ranges covered. These values must be shared with "
|
||||
"every router participating in the PIM network."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:112 08e1160f8f3d40ae8845f6cb0f720c9c
|
||||
msgid ""
|
||||
"Use this command to configure an interface with IGMP so that PIM can receive"
|
||||
" IGMP reports and query on the selected interface. By default IGMP version 3"
|
||||
" will be used."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:119 466b080ac0e4450492cae297012b1fcc
|
||||
msgid "Tuning commands"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:121 1585de73aa944260a2b7c22b540ffba3
|
||||
msgid "You can also tune multicast with the following commands."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:125 051f73cb374843a9a5c3bf72998dae20
|
||||
msgid ""
|
||||
"Use this PIM command in the selected interface to set the priority "
|
||||
"(1-4294967295) you want to influence in the election of a node to become the"
|
||||
" Designated Router for a LAN segment. The default priority is 1, set a "
|
||||
"higher value to give the router more preference in the DR election process."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:134 7053461d00b6473f873cf45081236976
|
||||
msgid ""
|
||||
"Use this command to configure the PIM hello interval in seconds (1-180) for "
|
||||
"the selected interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:140 6f62dd225ef642fa893868afc9cb5b44
|
||||
msgid ""
|
||||
"Use this PIM command to modify the time out value (31-60000 seconds) for an "
|
||||
"`(S,G) <https://tools.ietf.org/html/rfc7761#section-4.1>`_ flow. 31 seconds "
|
||||
"is chosen for a lower bound as some hardware platforms cannot see data "
|
||||
"flowing in better than 30 seconds chunks."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:149 9541bf37e9654d35ac179d280927120d
|
||||
msgid ""
|
||||
"Use this command to allow the selected interface to join a multicast group "
|
||||
"defining the multicast address you want to join and the source IP address "
|
||||
"too."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:156 62a1eb5df1194d0f9c1aa107b274d588
|
||||
msgid ""
|
||||
"Use this command to configure in the selected interface the IGMP host query "
|
||||
"interval (1-1800) in seconds that PIM will use."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:163 f719c69f858341b4be984a74c1a1b48b
|
||||
msgid ""
|
||||
"Use this command to configure in the selected interface the IGMP query "
|
||||
"response timeout value (10-250) in deciseconds. If a report is not returned "
|
||||
"in the specified time, it will be assumed the `(S,G) or (*,G) state "
|
||||
"<https://tools.ietf.org/html/rfc7761#section-4.1>`_ has timed out."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:172 62eb3f5c3734455dab46145b85d8be7c
|
||||
msgid ""
|
||||
"Use this command to define in the selected interface whether you choose IGMP"
|
||||
" version 2 or 3. The default value is 3."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:179 4c819df06e6c499cb3e8a9bba197b37c
|
||||
msgid "IGMP Proxy"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:181 f90796cb941b47528f931affc3989d8c
|
||||
msgid ""
|
||||
":abbr:`IGMP (Internet Group Management Protocol)` proxy sends IGMP host "
|
||||
"messages on behalf of a connected client. The configuration must define one,"
|
||||
" and only one upstream interface, and one or more downstream interfaces."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:186 d5cc85b57d8b400e861707597f6225e9
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:191 de064b4174854df482039e09b59e8cc3
|
||||
msgid ""
|
||||
"**upstream:** The upstream network interface is the outgoing interface which"
|
||||
" is responsible for communicating to available multicast data sources. There"
|
||||
" can only be one upstream interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:195 9e94544404fd4a55a2dad363c335e4c4
|
||||
msgid ""
|
||||
"**downstream:** Downstream network interfaces are the distribution "
|
||||
"interfaces to the destination networks, where multicast clients can join "
|
||||
"groups and receive multicast data. One or more downstream interfaces must be"
|
||||
" configured."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:202 5869fcca67ae4ac4ae0841b192acafe1
|
||||
msgid ""
|
||||
"Defines alternate sources for multicasting and IGMP data. The network "
|
||||
"address must be on the following format 'a.b.c.d/n'. By default, the router "
|
||||
"will accept data from sources on the same network as configured on an "
|
||||
"interface. If the multicast source lies on a remote network, one must define"
|
||||
" from where traffic should be accepted."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:208 cffbb03d247a4b57856e5a6d60330691
|
||||
msgid ""
|
||||
"This is especially useful for the upstream interface, since the source for "
|
||||
"multicast traffic is often from a remote location."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:211 74aeef7f75e74b2ba59c9b590f090c16
|
||||
msgid "This option can be supplied multiple times."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:215 16a2dc59682f4f9694955dbe22c2664c
|
||||
msgid ""
|
||||
"Disables quickleave mode. In this mode the daemon will not send a Leave IGMP"
|
||||
" message upstream as soon as it receives a Leave message for any downstream "
|
||||
"interface. The daemon will not ask for Membership reports on the downstream "
|
||||
"interfaces, and if a report is received the group is not joined again the "
|
||||
"upstream."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:221 ffc46e1ae57f4cdc871aa352a623d9f5
|
||||
msgid ""
|
||||
"If it's vital that the daemon should act exactly like a real multicast "
|
||||
"client on the upstream interface, this function should be enabled."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:224 cedb77b217b54e02893243d7452e1d9c
|
||||
msgid "Enabling this function increases the risk of bandwidth saturation."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:228 622cb2d280c1450fb2d2bb196a0f4f92
|
||||
msgid "Disable this service."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:235 49f590bac93b42a0ba96457016d9bd87
|
||||
msgid ""
|
||||
"Interface `eth1` LAN is behind NAT. In order to subscribe `10.0.0.0/23` "
|
||||
"subnet multicast which is in `eth0` WAN we need to configure igmp-proxy."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:245 7f937de509164566a36c120ac99ebce8
|
||||
msgid "Operation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/igmp.rst:249 2d344d86d4934459bb5bbe631f2034b7
|
||||
msgid "Restart the IGMP proxy process."
|
||||
msgstr ""
|
||||
@ -1,22 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/protocols/index.rst:3 e0d55099b582444faaddcd2a2709ea20
|
||||
msgid "Protocols"
|
||||
msgstr ""
|
||||
@ -1,338 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../_include/need_improvement.txt:11 25be2429befb4076a9297e2bea64b5e8
|
||||
msgid "This section needs improvements, examples and explanations."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/need_improvement.txt:13 95810b9d23a94b699fcf91c00f27cdf4
|
||||
msgid ""
|
||||
"Please take a look at the Contributing Guide for our :ref:`documentation`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:7 ce1df8d9d31345b3913cc008754e0080
|
||||
msgid "IS-IS"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:9 2a50bb040af3403b8e90f0b284795ee2
|
||||
msgid ""
|
||||
":abbr:`IS-IS (Intermediate System to Intermediate System)` is a link-state "
|
||||
"interior gateway routing protocol which is described in ISO10589, "
|
||||
":rfc:`1195`, :rfc:`5308`. Like OSPF, IS-IS runs the Dijkstra shortest-path "
|
||||
"first (SPF) algorithm to create a database of the network’s topology and, "
|
||||
"from that database, to determine the best (that is, shortest) path to a "
|
||||
"destination. The routers exchange topology information with their nearest "
|
||||
"neighbors. IS-IS runs directly on the data link layer (Layer 2). IS-IS "
|
||||
"addresses are called :abbr:`NETs (Network Entity Titles)` and can be 8 to 20"
|
||||
" bytes long, but are generally 10 bytes long."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:21 15d4da431bfd4c50b04b2a0977cf878e
|
||||
msgid "General"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:24 64721c775c4b4e039b2e61e1fbdd45eb
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:27 8846222fab694564ae24ba27d811c4df
|
||||
msgid "Mandatory Settings"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:31 995badb93bd24eb0a55c79791018cb4c
|
||||
msgid ""
|
||||
"This commad also sets network entity title (NET) provided in ISO format."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:33 661d296504494f9a8a30f4ba31fc4609
|
||||
msgid "For example :abbr:`NET (Network Entity Title)`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:39 af651ea25b2f4c0a8fd4080fb8520435
|
||||
msgid "The IS-IS address consists of the following parts:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:41 08b4e7ac72484d32b4afc23e18340eac
|
||||
msgid ""
|
||||
":abbr:`AFI (Address family authority identifier)` - ``49`` The AFI value 49 "
|
||||
"is what IS-IS uses for private addressing."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:44 89cd3285e6ad4f43be4bac6d0375d184
|
||||
msgid "Area identifier: ``0001`` IS-IS area number (Area1)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:46 41f025b9cfe54ccb95e086285bbc0574
|
||||
msgid ""
|
||||
"System identifier: ``1921.6800.1002`` - for system idetifiers we recommend "
|
||||
"to use IP address or MAC address of the router itself."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:49 a4e5e01e06494acb9be4b3877e36d3be
|
||||
msgid "NET selector: ``00`` Must always be 00, to indicate \"this system\"."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:53 0bae8b56cfcd4b15922eeffff785f3b7
|
||||
msgid ""
|
||||
"This command activates ISIS adjacency on this interface. Note that the name "
|
||||
"of ISIS instance must be the same as the one used to configure the ISIS "
|
||||
"process."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:59 1a02bbf02fd1453f89e108e145c1eb95
|
||||
msgid ""
|
||||
"This command enables support for dynamic hostname. Dynamic hostname mapping "
|
||||
"determined as described in :rfc:`2763`, Dynamic Hostname Exchange Mechanism "
|
||||
"for IS-IS."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:65 39747e42f1bb4c098cb38675cbc32cf0
|
||||
msgid "This command defines the ISIS router behavior:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:67 b05f7aac1d3045c8a9bc85455c3e0609
|
||||
msgid ""
|
||||
"**level-1** Act as a station router only. **level-1-2** Act as both a "
|
||||
"station router and an area router. **level-2-only** Act as an area router "
|
||||
"only."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:73 9ec3d8145e5b40d7a2e61aaf8da3c43b
|
||||
msgid ""
|
||||
"This command configures the maximum size of generated LSPs, in bytes. The "
|
||||
"size range is 128 to 4352."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:78 4842250b02af4e7b8c4af3bc5a7c1884
|
||||
msgid "This command sets old-style (ISO 10589) or new-style packet formats:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:80 1acb3cff4d65498888f7a56834af2c29
|
||||
msgid ""
|
||||
"**narrow** Use old style of TLVs with narrow metric. **transition** Send and"
|
||||
" accept both styles of TLVs during transition. **wide** Use new style of "
|
||||
"TLVs to carry wider metric."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:86 ea58c836ea7f4ea4a539cf208feb630c
|
||||
msgid ""
|
||||
"This command enables :rfc:`6232` purge originator identification. Enable "
|
||||
"purge originator identification (POI) by adding the type, length and value "
|
||||
"(TLV) with the Intermediate System (IS) identification to the LSPs that do "
|
||||
"not contain POI information. If an IS generates a purge, VyOS adds this TLV "
|
||||
"with the system ID of the IS to the purge."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:94 d066f41614884b16a229b99bf880e708
|
||||
msgid ""
|
||||
"This command sets ATT bit to 1 in Level1 LSPs. It is described in "
|
||||
":rfc:`3787`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:98 3ceb67d4da784f068cc557f1c02a4e80
|
||||
msgid ""
|
||||
"This command sets overload bit to avoid any transit traffic through this "
|
||||
"router. It is described in :rfc:`3787`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:104 b3cb08934c4a4c37a14fca43d7f6e96a
|
||||
msgid "This command will generate a default-route in L1 database."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:109 9e46f39bb2094664aeee3035dac9d83b
|
||||
msgid "This command will generate a default-route in L2 database."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:113 b3ba02a1f2fa48338d7660fc1f938861
|
||||
msgid "Interface Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:118 46359d83cee64c8ba0e089246e9a5343
|
||||
msgid "This command specifies circuit type for interface:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:120 a5b222eb7f64415596e72587eed3f761
|
||||
msgid "**level-1** Level-1 only adjacencies are formed."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:121 42a50dbba4224ef996bf1d5a1b6fa05a
|
||||
msgid "**level-1-2** Level-1-2 adjacencies are formed"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:122 ca1b7f5659864bfab83f282cd29825e8
|
||||
msgid "**level-2-only** Level-2 only adjacencies are formed"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:127 e7af8645a39747f4974e1838a0d7f7f5
|
||||
msgid ""
|
||||
"This command sets hello interval in seconds on a given interface. The range "
|
||||
"is 1 to 600."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:133 de4cead92ce6404aaded28f81b055f7a
|
||||
msgid ""
|
||||
"This command sets multiplier for hello holding time on a given interface. "
|
||||
"The range is 2 to 100."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:138 44bd1903e60e48ceb960d92c5a4ee140
|
||||
msgid ""
|
||||
"This command configures padding on hello packets to accommodate asymmetrical"
|
||||
" maximum transfer units (MTUs) from different hosts as described in "
|
||||
":rfc:`3719`. This helps to prevent a premature adjacency Up state when one "
|
||||
"routing devices MTU does not meet the requirements to establish the "
|
||||
"adjacency."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:145 b7e9677f226a46658fe7c5feb6a89da0
|
||||
msgid "This command set default metric for circuit."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:147 ebc7128a9ad1418297b1237d1bbb852e
|
||||
msgid ""
|
||||
"The metric range is 1 to 16777215 (Max value depend if metric support narrow"
|
||||
" or wide value)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:153 d5f0fd3388f04102932b8cec243916f7
|
||||
msgid ""
|
||||
"This command specifies network type to Point-to-Point. The default network "
|
||||
"type is broadcast."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:158 41d0f4766b194b3bba11329069f9a3e6
|
||||
msgid "This command configures the passive mode for this interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:163 c97299de9670478abc4cc7d4ed5e502e
|
||||
msgid "This command configures the authentication password for the interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:167 2360dab3d738425da25c02e35d7d4bae
|
||||
msgid ""
|
||||
"This command sets priority for the interface for :abbr:`DIS (Designated "
|
||||
"Intermediate System)` election. The priority range is 0 to 127."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:174 9b9272f8f8904ff1a8d03510d1cfca8c
|
||||
msgid ""
|
||||
"This command sets PSNP interval in seconds. The interval range is 0 to 127."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:180 0a404b0341a647659d182dbd56ec04b8
|
||||
msgid ""
|
||||
"This command disables Three-Way Handshake for P2P adjacencies which "
|
||||
"described in :rfc:`5303`. Three-Way Handshake is enabled by default."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:185 5d1a331dd5b8492d99c2e159ed1b747d
|
||||
msgid "Route Redistribution"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:189 7365777855374a8aa34753f7bd7bd6a4
|
||||
msgid ""
|
||||
"This command redistributes routing information from the given route source "
|
||||
"into the ISIS database as Level-1. There are six modes available for route "
|
||||
"source: bgp, connected, kernel, ospf, rip, static."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:195 ca42504d69d54eb6823f946ffe2404bd
|
||||
msgid ""
|
||||
"This command redistributes routing information from the given route source "
|
||||
"into the ISIS database as Level-2. There are six modes available for route "
|
||||
"source: bgp, connected, kernel, ospf, rip, static."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:202 a6f21f4746cc4cfd919e2637ad8fe221
|
||||
msgid ""
|
||||
"This command specifies metric for redistributed routes from the given route "
|
||||
"source. There are six modes available for route source: bgp, connected, "
|
||||
"kernel, ospf, rip, static. The metric range is 1 to 16777215."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:209 af99ee98c2484429be1b9caf32170706
|
||||
msgid ""
|
||||
"This command allows to use route map to filter redistributed routes from the"
|
||||
" given route source. There are six modes available for route source: bgp, "
|
||||
"connected, kernel, ospf, rip, static."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:215 9f0656f696214654baf286cbcdb3d69d
|
||||
msgid "Timers"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:219 97692bdcaeb3409e91c9ed9b78c28b32
|
||||
msgid ""
|
||||
"This command sets minimum interval in seconds between regenerating same LSP."
|
||||
" The interval range is 1 to 120."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:224 39530b8f812843f59b606c8ea2ae46cc
|
||||
msgid ""
|
||||
"This command sets LSP refresh interval in seconds. IS-IS generates LSPs when"
|
||||
" the state of a link changes. However, to ensure that routing databases on "
|
||||
"all routers remain converged, LSPs in stable networks are generated on a "
|
||||
"regular basis even though there has been no change to the state of the "
|
||||
"links. The interval range is 1 to 65235. The default value is 900 seconds."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:233 d2eaaef9028346118e34486041c7e789
|
||||
msgid ""
|
||||
"This command sets LSP maximum LSP lifetime in seconds. The interval range is"
|
||||
" 350 to 65535. LSPs remain in a database for 1200 seconds by default. If "
|
||||
"they are not refreshed by that time, they are deleted. You can change the "
|
||||
"LSP refresh interval or the LSP lifetime. The LSP refresh interval should be"
|
||||
" less than the LSP lifetime or else LSPs will time out before they are "
|
||||
"refreshed."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:242 3cb73ce94a5e4377af6d406d9cf7412d
|
||||
msgid ""
|
||||
"This command sets minimum interval between consecutive SPF calculations in "
|
||||
"seconds.The interval range is 1 to 120."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:259 5ff2c0bb6f0245f08c083c567c2d168c
|
||||
msgid ""
|
||||
"This commands specifies the Finite State Machine (FSM) intended to control "
|
||||
"the timing of the execution of SPF calculations in response to IGP events. "
|
||||
"The process described in :rfc:`8405`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:266 3247ec7aba244689ba964160fb2c51fb
|
||||
msgid "Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:268 ea47fe2759054a2d83f75cfbc7a54df5
|
||||
msgid ""
|
||||
"Simple IS-IS configuration using 2 nodes and redistributing connected "
|
||||
"interfaces."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:271 dbaadd1e5aa2420e98a910debb6a47b8
|
||||
msgid "**Node 1:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:287 125c429537924a8c8a0b99d40eaf97b1
|
||||
msgid "**Node 2:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/isis.rst:296 cb94cb180fc14aab85f32949240fb50c
|
||||
msgid "Show ip routes on Node2:"
|
||||
msgstr ""
|
||||
@ -1,283 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:5 319f4ed093e842b1a4863b28b0118061
|
||||
msgid "MPLS"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:7 b442a9cba1624d00bc1eaaa5b52168ce
|
||||
msgid ""
|
||||
":abbr:`MPLS (Multi-Protocol Label Switching)` is a packet forwarding "
|
||||
"paradigm which differs from regular IP forwarding. Instead of IP addresses "
|
||||
"being used to make the decision on finding the exit interface, a router will"
|
||||
" instead use an exact match on a 32 bit/4 byte header called the MPLS label."
|
||||
" This label is inserted between the ethernet (layer 2) header and the IP "
|
||||
"(layer 3) header. One can statically or dynamically assign label "
|
||||
"allocations, but we will focus on dynamic allocation of labels using some "
|
||||
"sort of label distribution protocol (such as the aptly named Label "
|
||||
"Distribution Protocol / LDP, Resource Reservation Protocol / RSVP, or "
|
||||
"Segment Routing through OSPF/ISIS). These protocols allow for the creation "
|
||||
"of a unidirectional/unicast path called a labeled switched path (initialized"
|
||||
" as LSP) throughout the network that operates very much like a tunnel "
|
||||
"through the network. An easy way of thinking about how an MPLS LSP actually "
|
||||
"forwards traffic throughout a network is to think of a GRE tunnel. They are "
|
||||
"not the same in how they operate, but they are the same in how they handle "
|
||||
"the tunneled packet. It would be good to think of MPLS as a tunneling "
|
||||
"technology that can be used to transport many different types of packets, to"
|
||||
" aid in traffic engineering by allowing one to specify paths throughout the "
|
||||
"network (using RSVP or SR), and to generally allow for easier intra/inter "
|
||||
"network transport of data packets."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:27 f8f4a5215a3f45f6a4a77f529aef6d6a
|
||||
msgid ""
|
||||
"For more information on how MPLS label switching works, please go visit "
|
||||
"`Wikipedia (MPLS)`_."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:30 4c0dadedc2cd448ebe40f433b538b82a
|
||||
msgid ""
|
||||
"MPLS support in VyOS is not finished yet, and therefore its functionality is"
|
||||
" limited. Currently there is no support for MPLS enabled VPN services such "
|
||||
"as L2VPNs and mVPNs. RSVP support is also not present as the underlying "
|
||||
"routing stack (FRR) does not implement it. Currently VyOS implements LDP as "
|
||||
"described in RFC 5036; other LDP standard are the following ones: RFC 6720, "
|
||||
"RFC 6667, RFC 5919, RFC 5561, RFC 7552, RFC 4447. Because MPLS is already "
|
||||
"available (FRR also supports RFC 3031)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:40 30f7d70b0c6d4062b84042fb63b190e1
|
||||
msgid "Label Distribution Protocol"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:42 690cebb33f2543ea808b90a14c5eb42b
|
||||
msgid ""
|
||||
"The :abbr:`MPLS (Multi-Protocol Label Switching)` architecture does not "
|
||||
"assume a single protocol to create MPLS paths. VyOS supports the Label "
|
||||
"Distribution Protocol (LDP) as implemented by FRR, based on :rfc:`5036`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:46 a37724aac9c44f96bdc7dfde7b50d220
|
||||
msgid ""
|
||||
":abbr:`LDP (Label Distribution Protocol)` is a TCP based MPLS signaling "
|
||||
"protocol that distributes labels creating MPLS label switched paths in a "
|
||||
"dynamic manner. LDP is not a routing protocol, as it relies on other routing"
|
||||
" protocols for forwarding decisions. LDP cannot bootstrap itself, and "
|
||||
"therefore relies on said routing protocols for communication with other "
|
||||
"routers that use LDP."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:52 ec5eaa5e950b4f6980d040445ea11c4c
|
||||
msgid ""
|
||||
"In order to allow for LDP on the local router to exchange label "
|
||||
"advertisements with other routers, a TCP session will be established between"
|
||||
" automatically discovered and statically assigned routers. LDP will try to "
|
||||
"establish a TCP session to the **transport address** of other routers. "
|
||||
"Therefore for LDP to function properly please make sure the transport "
|
||||
"address is shown in the routing table and reachable to traffic at all times."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:59 c19c9c3294cf4cf2be368e67510c87b9
|
||||
msgid ""
|
||||
"It is highly recommended to use the same address for both the LDP router-id "
|
||||
"and the discovery transport address, but for VyOS MPLS LDP to work both "
|
||||
"parameters must be explicitly set in the configuration."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:63 66adf3b72958442c8c00b32eba6cf45e
|
||||
msgid ""
|
||||
"Another thing to keep in mind with LDP is that much like BGP, it is a "
|
||||
"protocol that runs on top of TCP. It however does not have an ability to do "
|
||||
"something like a refresh capability like BGPs route refresh capability. "
|
||||
"Therefore one might have to reset the neighbor for a capability change or a "
|
||||
"configuration change to work."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:70 887e2356d4684638bcea4082c72c5806
|
||||
msgid "Configuration Options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:74 27d991948ccd4e69a3e89494377755bf
|
||||
msgid ""
|
||||
"Use this command to enable MPLS processing on the interface you define."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:78 e564f28f32c54bd89109ca54f5af78d0
|
||||
msgid "Use this command to enable LDP on the interface you define."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:82 7e09356be27844c1ae0a879301a63db8
|
||||
msgid ""
|
||||
"Use this command to configure the IP address used as the LDP router-id of "
|
||||
"the local device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:88 66f387c89cc346cf9f8f1af2d8f13f5d
|
||||
msgid ""
|
||||
"Use this command to set the IPv4 or IPv6 transport-address used by LDP."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:92 4f964f94611c45efb376052b3164335a
|
||||
msgid ""
|
||||
"Use this command to configure authentication for LDP peers. Set the IP "
|
||||
"address of the LDP peer and a password that should be shared in order to "
|
||||
"become neighbors."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:98 e8751c8945cd4697aa10dcc93761c124
|
||||
msgid ""
|
||||
"Use this command to configure a specific session hold time for LDP peers. "
|
||||
"Set the IP address of the LDP peer and a session hold time that should be "
|
||||
"configured for it. You may have to reset the neighbor for this to work."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:105 4b437814a3c941ccb32d958fd487f32f
|
||||
msgid ""
|
||||
"Use this command to enable, disable, or specify hop count for TTL security "
|
||||
"for LDP peers. By default the value is set to 255 (or max TTL)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:113 26e7be864fc34d7595d6d17b8be55d97
|
||||
msgid ""
|
||||
"Use these commands if you would like to set the discovery hello and hold "
|
||||
"time parameters."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:119 34db60e606af4a358fbe6ecedd88afb2
|
||||
msgid ""
|
||||
"Use this command if you would like to set the TCP session hold time "
|
||||
"intervals."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:126 9a897e652844497d9c132fcd8f50f192
|
||||
msgid ""
|
||||
"Use these commands to control the importing of forwarding equivalence "
|
||||
"classes (FECs) for LDP from neighbors. This would be useful for example on "
|
||||
"only accepting the labeled routes that are needed and not ones that are not "
|
||||
"needed, such as accepting loopback interfaces and rejecting all others."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:136 b3547febc49148c2be2a3325ed0bc52c
|
||||
msgid ""
|
||||
"Use these commands to control the exporting of forwarding equivalence "
|
||||
"classes (FECs) for LDP to neighbors. This would be useful for example on "
|
||||
"only announcing the labeled routes that are needed and not ones that are not"
|
||||
" needed, such as announcing loopback interfaces and no others."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:144 d3e93c308b464b3abedfb4419b897dd3
|
||||
msgid ""
|
||||
"Use this command if you would like for the router to advertise FECs with a "
|
||||
"label of 0 for explicit null operations."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:152 129c4ca317364be986c91893276edac9
|
||||
msgid ""
|
||||
"Use this command if you would like to control the local FEC allocations for "
|
||||
"LDP. A good example would be for your local router to not allocate a label "
|
||||
"for everything. Just a label for what it's useful. A good example would be "
|
||||
"just a loopback label."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:159 eaeb0129ebca49baa962a36232632b6c
|
||||
msgid ""
|
||||
"Use this command to use a Cisco non-compliant format to send and interpret "
|
||||
"the Dual-Stack capability TLV for IPv6 LDP communications. This is related "
|
||||
"to :rfc:`7552`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:165 44290a815d6049d287717b2b7f4ee252
|
||||
msgid ""
|
||||
"Use this command to use ordered label distribution control mode. FRR by "
|
||||
"default uses independent label distribution control mode for label "
|
||||
"distribution. This is related to :rfc:`5036`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:171 629dcd86363142d29c851557a5d923aa
|
||||
msgid ""
|
||||
"Use this command to prefer IPv4 for TCP peer transport connection for LDP "
|
||||
"when both an IPv4 and IPv6 LDP address are configured on the same interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:177 81b3cb8314db46b6b3cc335eb63b09aa
|
||||
msgid ""
|
||||
"Use this command to enable targeted LDP sessions to the local router. The "
|
||||
"router will then respond to any sessions that are trying to connect to it "
|
||||
"that are not a link local type of TCP connection."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:184 11a22c4e5f5a411b8996f48891e864f4
|
||||
msgid ""
|
||||
"Use this command to enable the local router to try and connect with a "
|
||||
"targeted LDP session to another router."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:196 fabf2e7092274fa2811e7baf67268acc
|
||||
msgid ""
|
||||
"Use these commands if you would like to set the discovery hello and hold "
|
||||
"time parameters for the targeted LDP neighbors."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:201 f14cd271d42b4587a2e0aaee6c758f7b
|
||||
msgid "Sample configuration to setup LDP on VyOS"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:218 3e3387b2d45b437d813d0791a1359b0a
|
||||
msgid "Operational Mode Commands"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:220 40005f33d4db4eb5b238d9588e609ca6
|
||||
msgid ""
|
||||
"When LDP is working, you will be able to see label information in the "
|
||||
"outcome of ``show ip route``. Besides that information, there are also "
|
||||
"specific *show* commands for LDP:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:225 ee274d5bb9d14eedb26a8515dd1c91e8
|
||||
msgid "Show"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:229 2d3af2d78a694e898d1e10113fc9b7e8
|
||||
msgid "Use this command to see the Label Information Base."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:233 a655b7a4d1f146ef852f0ede0f0c213c
|
||||
msgid "Use this command to see discovery hello information"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:237 d20e34bc03ff434dacb9875b902865c1
|
||||
msgid "Use this command to see LDP interface information"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:241 ea32f6f53bae47618fcce3cab3628080
|
||||
msgid "Use this command to see LDP neighbor information"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:245 d1a837bc74c844db9867fd21794b2ef7
|
||||
msgid "Use this command to see detailed LDP neighbor information"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:248 505087f8aa1b4ac8b437e56fdfcb1475
|
||||
msgid "Reset"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/mpls.rst:252 bcda5b208d564debb7876e865d11eea9
|
||||
msgid ""
|
||||
"Use this command to reset an LDP neighbor/TCP session that is established"
|
||||
msgstr ""
|
||||
@ -1,909 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:5 be61d874b7254c34941ab334d53c560a
|
||||
msgid "OSPF"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:7 404fca00e5c44ac1be74b92b958a21e9
|
||||
msgid ""
|
||||
":abbr:`OSPF (Open Shortest Path First)` is a routing protocol for Internet "
|
||||
"Protocol (IP) networks. It uses a link state routing (LSR) algorithm and "
|
||||
"falls into the group of interior gateway protocols (IGPs), operating within "
|
||||
"a single autonomous system (AS). It is defined as OSPF Version 2 in "
|
||||
":rfc:`2328` (1998) for IPv4. Updates for IPv6 are specified as OSPF Version "
|
||||
"3 in :rfc:`5340` (2008). OSPF supports the :abbr:`CIDR (Classless Inter-"
|
||||
"Domain Routing)` addressing model."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:15 e5a8a36ba4f34e49b89e240cfec15ea9
|
||||
msgid "OSPF is a widely used IGP in large enterprise networks."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:19 2a3290f75c6a4f13915cda6261719d97
|
||||
msgid "OSPFv2 (IPv4)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:22
|
||||
#: ../../configuration/protocols/ospf.rst:784 9b9e9cc283334d198f4734b1d1601bc6
|
||||
#: 7c2fb58e39aa43f0a5744f8238c10831
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:25
|
||||
#: ../../configuration/protocols/ospf.rst:789 1de454bde74d40eea02f6de610bca85b
|
||||
#: e8edc51c75a84edf85ee48c9fcd26bfd
|
||||
msgid "General"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:27 0de20cb46f3d4c3cb145922486369fe6
|
||||
msgid ""
|
||||
"VyOS does not have a special command to start the OSPF process. The OSPF "
|
||||
"process starts when the first ospf enabled interface is configured."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:32 b2b8e657fc8c4ef4abf96b63ada8d860
|
||||
msgid ""
|
||||
"This command specifies the OSPF enabled interface(s). If the interface has "
|
||||
"an address from defined range then the command enables OSPF on this "
|
||||
"interface so router can provide network information to the other ospf "
|
||||
"routers via this interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:37 10eeebe0b2a546229a358daed76aded9
|
||||
msgid ""
|
||||
"This command is also used to enable the OSPF process. The area number can be"
|
||||
" specified in decimal notation in the range from 0 to 4294967295. Or it can "
|
||||
"be specified in dotted decimal notation similar to ip address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:41 38313e472cd14c11a60466a216e675d2
|
||||
msgid ""
|
||||
"Prefix length in interface must be equal or bigger (i.e. smaller network) "
|
||||
"than prefix length in network statement. For example statement above doesn't"
|
||||
" enable ospf on interface with address 192.168.1.1/23, but it does on "
|
||||
"interface with address 192.168.1.129/25."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:46 0b8d56d4ccec4bb5aa58f581b6d9b50e
|
||||
msgid ""
|
||||
"In some cases it may be more convenient to enable OSPF on a per "
|
||||
"interface/subnet basis :cfgcmd:`set protocols ospf interface <interface> "
|
||||
"area <x.x.x.x | x>`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:52 453b886df9ec4fd5ae755bdcac3b54f3
|
||||
msgid ""
|
||||
"This command sets the reference bandwidth for cost calculations, where "
|
||||
"bandwidth can be in range from 1 to 4294967, specified in Mbits/s. The "
|
||||
"default is 100Mbit/s (i.e. a link of bandwidth 100Mbit/s or higher will have"
|
||||
" a cost of 1. Cost of lower bandwidth links will be scaled with reference to"
|
||||
" this cost)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:60 5a6560bf4ae241c490b84b64ad95f1d4
|
||||
msgid ""
|
||||
"This command sets the router-ID of the OSPF process. The router-ID may be an"
|
||||
" IP address of the router, but need not be – it can be any arbitrary 32bit "
|
||||
"number. However it MUST be unique within the entire OSPF domain to the OSPF "
|
||||
"speaker – bad things will happen if multiple OSPF speakers are configured "
|
||||
"with the same router-ID!"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:68
|
||||
#: ../../configuration/protocols/ospf.rst:813 33a62e78b3c4426fa0e5b9e74de78f88
|
||||
#: e0f7af48e29b491895b103c8d941bdf0
|
||||
msgid "Optional"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:73 e80d9334003942e6b91b945dda476851
|
||||
msgid ""
|
||||
"Originate an AS-External (type-5) LSA describing a default route into all "
|
||||
"external-routing capable areas, of the specified metric and metric type. If "
|
||||
"the :cfgcmd:`always` keyword is given then the default is always advertised,"
|
||||
" even when there is no default present in the routing table. The argument "
|
||||
":cfgcmd:`route-map` specifies to advertise the default route if the route "
|
||||
"map is satisfied."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:82 6ed61a06807b4d828f6835bc0f35eec3
|
||||
msgid ""
|
||||
"This command change distance value of OSPF globally. The distance range is 1"
|
||||
" to 255."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:88 8d80beb2a9c94ce69e8efef98673148b
|
||||
msgid ""
|
||||
"This command change distance value of OSPF. The arguments are the distance "
|
||||
"values for external routes, inter-area routes and intra-area routes "
|
||||
"respectively. The distance range is 1 to 255."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:92 926c049a726b4151880a3ee7a335ae7b
|
||||
msgid ""
|
||||
"Routes with a distance of 255 are effectively disabled and not installed "
|
||||
"into the kernel."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:97 2f6aed6842b249f9a4afd897d885930f
|
||||
msgid ""
|
||||
"This command allows to log changes in adjacency. With the optional "
|
||||
":cfgcmd:`detail` argument, all changes in adjacency status are shown. "
|
||||
"Without :cfgcmd:`detail`, only changes to full or regressions are shown."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:104 a53e57f559774eb0844264877be5a12f
|
||||
msgid ""
|
||||
"This enables :rfc:`3137` support, where the OSPF process describes its "
|
||||
"transit links in its router-LSA as having infinite distance so that other "
|
||||
"routers will avoid calculating transit paths through the router while still "
|
||||
"being able to reach networks through the router."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:109 b3e8ab36152d4b9d8df89e740c60589c
|
||||
msgid ""
|
||||
"This support may be enabled administratively (and indefinitely) with the "
|
||||
":cfgcmd:`administrative` command. It may also be enabled conditionally. "
|
||||
"Conditional enabling of max-metric router-lsas can be for a period of "
|
||||
"seconds after startup with the :cfgcmd:`on-startup <seconds>` command and/or"
|
||||
" for a period of seconds prior to shutdown with the :cfgcmd:`on-shutdown "
|
||||
"<seconds>` command. The time range is 5 to 86400."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:119 741dd4ab7f2b48cd80b8e16d88bc5609
|
||||
msgid "This command selects ABR model. OSPF router supports four ABR models:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:121 b8d54022629a4da582d20679edbc90b4
|
||||
msgid ""
|
||||
"**cisco** – a router will be considered as ABR if it has several configured "
|
||||
"links to the networks in different areas one of which is a backbone area. "
|
||||
"Moreover, the link to the backbone area should be active (working). **ibm** "
|
||||
"– identical to \"cisco\" model but in this case a backbone area link may not"
|
||||
" be active. **standard** – router has several active links to different "
|
||||
"areas. **shortcut** – identical to \"standard\" but in this model a router "
|
||||
"is allowed to use a connected areas topology without involving a backbone "
|
||||
"area for inter-area connections."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:131 5a7d9e90d899439f9712802152f21f54
|
||||
msgid ""
|
||||
"Detailed information about \"cisco\" and \"ibm\" models differences can be "
|
||||
"found in :rfc:`3509`. A \"shortcut\" model allows ABR to create routes "
|
||||
"between areas based on the topology of the areas connected to this router "
|
||||
"but not using a backbone area in case if non-backbone route will be cheaper."
|
||||
" For more information about \"shortcut\" model, see :t:`ospf-shortcut-"
|
||||
"abr-02.txt`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:140 bd7972910e124507ba7b6cefc78781af
|
||||
msgid ""
|
||||
":rfc:`2328`, the successor to :rfc:`1583`, suggests according to section G.2"
|
||||
" (changes) in section 16.4.1 a change to the path preference algorithm that "
|
||||
"prevents possible routing loops that were possible in the old version of "
|
||||
"OSPFv2. More specifically it demands that inter-area paths and intra-area "
|
||||
"backbone path are now of equal preference but still both preferred to "
|
||||
"external paths."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:147 95b0240454004ab4baf5c13d8f5ab8ad
|
||||
msgid "This command should NOT be set normally."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:151
|
||||
#: ../../configuration/protocols/ospf.rst:895 44ecb673aeef4dc4a73a2a2a4e4dea85
|
||||
#: 518fd8170b8240a9b26331afeab20046
|
||||
msgid ""
|
||||
"This command specifies interface as passive. Passive interface advertises "
|
||||
"its address, but does not run the OSPF protocol (adjacencies are not formed "
|
||||
"and hello packets are not generated)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:155 960c7023fcac447fb3b2f7423392d252
|
||||
msgid ""
|
||||
"The optional `disable` option allows to exclude interface from passive "
|
||||
"state. This command is used if the command :cfgcmd:`passive-interface "
|
||||
"default` was configured."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:161 0fc3781eb7714085ab677f82ba0dbdf7
|
||||
msgid ""
|
||||
"This command specifies all interfaces as passive by default. Because this "
|
||||
"command changes the configuration logic to a default passive; therefore, "
|
||||
"interfaces where router adjacencies are expected need to be configured with "
|
||||
"the :cfgcmd:`passive-interface-exclude` command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:168 81f2da9c99ce48da8eb7db4675edf20b
|
||||
msgid ""
|
||||
"Use this command to control the maximum number of equal cost paths to reach "
|
||||
"a specific destination. The upper limit may differ if you change the value "
|
||||
"of MULTIPATH_NUM during compilation. The default is MULTIPATH_NUM (64)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:174 a6d13f781e4546f5812bf52ce8d14a07
|
||||
msgid ""
|
||||
"The router automatically updates link-state information with its neighbors. "
|
||||
"Only an obsolete information is updated which age has exceeded a specific "
|
||||
"threshold. This parameter changes a threshold value, which by default is "
|
||||
"1800 seconds (half an hour). The value is applied to the whole OSPF router. "
|
||||
"The timer range is 10 to 1800."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:183 794c8efd6a4a412da7c2943f6c6531eb
|
||||
msgid ""
|
||||
"This command sets the initial delay, the initial-holdtime and the maximum-"
|
||||
"holdtime between when SPF is calculated and the event which triggered the "
|
||||
"calculation. The times are specified in milliseconds and must be in the "
|
||||
"range of 0 to 600000 milliseconds. :cfgcmd:`delay` sets the initial SPF "
|
||||
"schedule delay in milliseconds. The default value is 200 ms. "
|
||||
":cfgcmd:`initial-holdtime` sets the minimum hold time between two "
|
||||
"consecutive SPF calculations. The default value is 1000 ms. :cfgcmd:`max-"
|
||||
"holdtime` sets the maximum wait time between two consecutive SPF "
|
||||
"calculations. The default value is 10000 ms."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:195
|
||||
#: ../../configuration/protocols/ospf.rst:830 e4a3a6ee09e84df78e3c537cebd1a472
|
||||
#: 859f5f1c72f74edda64a0a87c496063f
|
||||
msgid "Area Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:199 2a73fc25e04e423f98f6e33deff238f3
|
||||
msgid ""
|
||||
"This command specifies the area to be a Stub Area. That is, an area where no"
|
||||
" router originates routes external to OSPF and hence an area where all "
|
||||
"external routes are via the ABR(s). Hence, ABRs for such an area do not need"
|
||||
" to pass AS-External LSAs (type-5) or ASBR-Summary LSAs (type-4) into the "
|
||||
"area. They need only pass Network-Summary (type-3) LSAs into such an area, "
|
||||
"along with a default-route summary."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:208 5528b6622dff42bf8489ff955359057b
|
||||
msgid ""
|
||||
"This command specifies the area to be a Totally Stub Area. In addition to "
|
||||
"stub area limitations this area type prevents an ABR from injecting Network-"
|
||||
"Summary (type-3) LSAs into the specified stub area. Only default summary "
|
||||
"route is allowed."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:216 dc30de78fd9045bba5d2775dafec0989
|
||||
msgid ""
|
||||
"This command sets the cost of default-summary LSAs announced to stubby "
|
||||
"areas. The cost range is 0 to 16777215."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:221 be246b56211845a19e17da26a7451f9c
|
||||
msgid ""
|
||||
"This command specifies the area to be a Not So Stubby Area. External routing"
|
||||
" information is imported into an NSSA in Type-7 LSAs. Type-7 LSAs are "
|
||||
"similar to Type-5 AS-external LSAs, except that they can only be flooded "
|
||||
"into the NSSA. In order to further propagate the NSSA external information, "
|
||||
"the Type-7 LSA must be translated to a Type-5 AS-external-LSA by the NSSA "
|
||||
"ABR."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:230 e124b837078c4d49acbd1941ee7bd875
|
||||
msgid ""
|
||||
"This command specifies the area to be a NSSA Totally Stub Area. ABRs for "
|
||||
"such an area do not need to pass Network-Summary (type-3) LSAs (except the "
|
||||
"default summary route), ASBR-Summary LSAs (type-4) and AS-External LSAs "
|
||||
"(type-5) into the area. But Type-7 LSAs that convert to Type-5 at the NSSA "
|
||||
"ABR are allowed."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:239 6e57515bcfa84057b4bdd15490a60a76
|
||||
msgid ""
|
||||
"This command sets the default cost of LSAs announced to NSSA areas. The cost"
|
||||
" range is 0 to 16777215."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:245 55f19b3d1d9c49b3aa9a500b4b2d3790
|
||||
msgid ""
|
||||
"Specifies whether this NSSA border router will unconditionally translate "
|
||||
"Type-7 LSAs into Type-5 LSAs. When role is Always, Type-7 LSAs are "
|
||||
"translated into Type-5 LSAs regardless of the translator state of other NSSA"
|
||||
" border routers. When role is Candidate, this router participates in the "
|
||||
"translator election to determine if it will perform the translations duties."
|
||||
" When role is Never, this router will never translate Type-7 LSAs into "
|
||||
"Type-5 LSAs."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:255 ba4c8ab2af5d4a6b9353c1c619663ef8
|
||||
msgid ""
|
||||
"This command specifies that simple password authentication should be used "
|
||||
"for the given area. The password must also be configured on a per-interface "
|
||||
"basis."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:261 0ee207fa134149baa945aaabeb1c9404
|
||||
msgid ""
|
||||
"This command specify that OSPF packets must be authenticated with MD5 HMACs "
|
||||
"within the given area. Keying material must also be configured on a per-"
|
||||
"interface basis."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:267 a29e63b95a4e4bd39e5db5a03ba871d1
|
||||
msgid ""
|
||||
"This command summarizes intra area paths from specified area into one "
|
||||
"summary-LSA (Type-3) announced to other areas. This command can be used only"
|
||||
" in ABR and ONLY router-LSAs (Type-1) and network-LSAs (Type-2) (i.e. LSAs "
|
||||
"with scope area) can be summarized. AS-external-LSAs (Type-5) can’t be "
|
||||
"summarized - their scope is AS. The optional argument :cfgcmd:`cost` "
|
||||
"specifies the aggregated link metric. The metric range is 0 to 16777215."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:277
|
||||
#: ../../configuration/protocols/ospf.rst:840 6bafba4ec8ef48298bbebf74719ab1db
|
||||
#: ba22b65b4635427381dd2c138e7ceca2
|
||||
msgid ""
|
||||
"This command instead of summarizing intra area paths filter them - i.e. "
|
||||
"intra area paths from this range are not advertised into other areas. This "
|
||||
"command makes sense in ABR only."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:283 96ee74fa7fa441bdb48b2731944845d4
|
||||
msgid ""
|
||||
"Filter Type-3 summary-LSAs announced to other areas originated from intra- "
|
||||
"area paths from specified area. This command makes sense in ABR only."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:289 0666d353b27e472eabc844cedf9aa3dc
|
||||
msgid ""
|
||||
"Same as export-list, but it applies to paths announced into specified area "
|
||||
"as Type-3 summary-LSAs. This command makes sense in ABR only."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:296 542a3c11f01441af98607a8d4e68d0ef
|
||||
msgid ""
|
||||
"One Type-3 summary-LSA with routing info <E.F.G.H/M> is announced into "
|
||||
"backbone area if defined area contains at least one intra-area network (i.e."
|
||||
" described with router-LSA or network-LSA) from range <A.B.C.D/M>. This "
|
||||
"command makes sense in ABR only."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:303 f3b5a7b1baaf4fd5acf86d85330f9d29
|
||||
msgid ""
|
||||
"This parameter allows to \"shortcut\" routes (non-backbone) for inter-area "
|
||||
"routes. There are three modes available for routes shortcutting:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:306 d00248dbf3f7495f9bb6cc2231d7a649
|
||||
msgid ""
|
||||
"**default** – this area will be used for shortcutting only if ABR does not "
|
||||
"have a link to the backbone area or this link was lost. **enable** – the "
|
||||
"area will be used for shortcutting every time the route that goes through it"
|
||||
" is cheaper. **disable** – this area is never used by ABR for routes "
|
||||
"shortcutting."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:314 e9ee79855d4d44cf89cfa834ebe8a79d
|
||||
msgid "Provides a backbone area coherence by virtual link establishment."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:316 1aa391335ca8421db7ac2c15fcf8b129
|
||||
msgid ""
|
||||
"In general, OSPF protocol requires a backbone area (area 0) to be coherent "
|
||||
"and fully connected. I.e. any backbone area router must have a route to any "
|
||||
"other backbone area router. Moreover, every ABR must have a link to backbone"
|
||||
" area. However, it is not always possible to have a physical link to a "
|
||||
"backbone area. In this case between two ABR (one of them has a link to the "
|
||||
"backbone area) in the area (not stub area) a virtual link is organized."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:323 9a1276600de94a769032c8ca706829ef
|
||||
msgid ""
|
||||
"<number> – area identifier through which a virtual link goes. <A.B.C.D> – "
|
||||
"ABR router-id with which a virtual link is established. Virtual link must be"
|
||||
" configured on both routers."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:327 bb9edaa3d59643bca24f800e2b9feb21
|
||||
msgid ""
|
||||
"Formally, a virtual link looks like a point-to-point network connecting two "
|
||||
"ABR from one area one of which physically connected to a backbone area. This"
|
||||
" pseudo-network is considered to belong to a backbone area."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:333
|
||||
#: ../../configuration/protocols/ospf.rst:847 a726f9fa108f4b8d8d52fd1161bfb5fe
|
||||
#: 4f9a3f440cb7458bb5293e70c1058d7c
|
||||
msgid "Interface Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:337 a7e322fabc1e450bb43ad6fe55fe79f5
|
||||
msgid "Enable ospf on an interface and set associated area."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:339 8492b58a427a4127b4b64f249b80f1c3
|
||||
msgid ""
|
||||
"If you have a lot of interfaces, and/or a lot of subnets, then enabling OSPF"
|
||||
" via this command may result in a slight performance improvement."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:345 f791acb2614549bea724b77ee4f5756e
|
||||
msgid ""
|
||||
"This command sets OSPF authentication key to a simple password. After "
|
||||
"setting, all OSPF packets are authenticated. Key has length up to 8 chars."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:348 f79d9a7b679245ffb25f5dce05665a3f
|
||||
msgid ""
|
||||
"Simple text password authentication is insecure and deprecated in favour of "
|
||||
"MD5 HMAC authentication."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:354 49ac8ee2b26c486f8b85bea0ce6477a0
|
||||
msgid ""
|
||||
"This command specifys that MD5 HMAC authentication must be used on this "
|
||||
"interface. It sets OSPF authentication key to a cryptographic password. Key-"
|
||||
"id identifies secret key used to create the message digest. This ID is part "
|
||||
"of the protocol and must be consistent across routers on a link. The key can"
|
||||
" be long up to 16 chars (larger strings will be truncated), and is "
|
||||
"associated with the given key-id."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:363 81827eb422ce4a74919776b7e7c9c238
|
||||
msgid ""
|
||||
"This command sets the interface bandwidth for cost calculations, where "
|
||||
"bandwidth can be in range from 1 to 100000, specified in Mbits/s."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:368
|
||||
#: ../../configuration/protocols/ospf.rst:851 1eb5df790b8b411cad7d031ce16ac429
|
||||
#: 0d06f8ac47de4ad090347841638ab23c
|
||||
msgid ""
|
||||
"This command sets link cost for the specified interface. The cost value is "
|
||||
"set to router-LSA’s metric field and used for SPF calculation. The cost "
|
||||
"range is 1 to 65535."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:374
|
||||
#: ../../configuration/protocols/ospf.rst:857 5271b5e5f52345cb863ea00e1b1cc148
|
||||
#: 1831257a6c2f491abb75677d0b55fdca
|
||||
msgid ""
|
||||
"Set number of seconds for router Dead Interval timer value used for Wait "
|
||||
"Timer and Inactivity Timer. This value must be the same for all routers "
|
||||
"attached to a common network. The default value is 40 seconds. The interval "
|
||||
"range is 1 to 65535."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:381 98e1d855c68f48ccad1d3b16995599ca
|
||||
msgid ""
|
||||
"The hello-multiplier specifies how many Hellos to send per second, from 1 "
|
||||
"(every second) to 10 (every 100ms). Thus one can have 1s convergence time "
|
||||
"for OSPF. If this form is specified, then the hello-interval advertised in "
|
||||
"Hello packets is set to 0 and the hello-interval on received Hello packets "
|
||||
"is not checked, thus the hello-multiplier need NOT be the same across "
|
||||
"multiple routers on a common link."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:390
|
||||
#: ../../configuration/protocols/ospf.rst:865 4938ebbf6fce435c9af610cb1e419986
|
||||
#: 4f07a66d0bee43f7afeda7ae6edc9554
|
||||
msgid ""
|
||||
"Set number of seconds for Hello Interval timer value. Setting this value, "
|
||||
"Hello packet will be sent every timer value seconds on the specified "
|
||||
"interface. This value must be the same for all routers attached to a common "
|
||||
"network. The default value is 10 seconds. The interval range is 1 to 65535."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:398 abc1c6297d934f1bb434f1646c511db3
|
||||
msgid ""
|
||||
"This command enables :abbr:`BFD (Bidirectional Forwarding Detection)` on "
|
||||
"this OSPF link interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:403
|
||||
#: ../../configuration/protocols/ospf.rst:873 8127a95f861f4363a7cffada1e500aa3
|
||||
#: 07728f0c4b5b4f85b691fe2f86034bfa
|
||||
msgid ""
|
||||
"This command disables check of the MTU value in the OSPF DBD packets. Thus, "
|
||||
"use of this command allows the OSPF adjacency to reach the FULL state even "
|
||||
"though there is an interface MTU mismatch between two OSPF routers."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:409
|
||||
#: ../../configuration/protocols/ospf.rst:880 290b08ed0f034a6086c7640cea77308e
|
||||
#: 137fa4a39e104a058eccddcfe65c4644
|
||||
msgid ""
|
||||
"This command allows to specify the distribution type for the network "
|
||||
"connected to this interface:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:412 14401f0ad44c4031b665f3f3d263564f
|
||||
msgid ""
|
||||
"**broadcast** – broadcast IP addresses distribution. **non-broadcast** – "
|
||||
"address distribution in NBMA networks topology. **point-to-multipoint** – "
|
||||
"address distribution in point-to-multipoint networks. **point-to-point** – "
|
||||
"address distribution in point-to-point networks."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:420
|
||||
#: ../../configuration/protocols/ospf.rst:888 69ab8c0628a44729bd657fd3d49df480
|
||||
#: abb6df45d8c445b78f7c726eedf10191
|
||||
msgid ""
|
||||
"This command sets Router Priority integer value. The router with the highest"
|
||||
" priority will be more eligible to become Designated Router. Setting the "
|
||||
"value to 0, makes the router ineligible to become Designated Router. The "
|
||||
"default value is 1. The interval range is 0 to 255."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:428
|
||||
#: ../../configuration/protocols/ospf.rst:902 597e90c33e5e429ba1dbc89f50437c2d
|
||||
#: d85932af73844481a7771e1fa6de9857
|
||||
msgid ""
|
||||
"This command sets number of seconds for RxmtInterval timer value. This value"
|
||||
" is used when retransmitting Database Description and Link State Request "
|
||||
"packets if acknowledge was not received. The default value is 5 seconds. The"
|
||||
" interval range is 3 to 65535."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:435
|
||||
#: ../../configuration/protocols/ospf.rst:910 8f4f220a1ccd4b82b4b8fbb327dbcd24
|
||||
#: da2975ef22ec49118511b1e29f07b72a
|
||||
msgid ""
|
||||
"This command sets number of seconds for InfTransDelay value. It allows to "
|
||||
"set and adjust for each interface the delay interval before starting the "
|
||||
"synchronizing process of the router's database with all neighbors. The "
|
||||
"default value is 1 seconds. The interval range is 3 to 65535."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:442 c67cfc76f5a74a9e862121967f413254
|
||||
msgid "Manual Neighbor Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:444 0577dc47024f491f9b608af640251918
|
||||
msgid ""
|
||||
"OSPF routing devices normally discover their neighbors dynamically by "
|
||||
"listening to the broadcast or multicast hello packets on the network. "
|
||||
"Because an NBMA network does not support broadcast (or multicast), the "
|
||||
"device cannot discover its neighbors dynamically, so you must configure all "
|
||||
"the neighbors statically."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:452 5da2bda408274b6dbb0871ddbc4290cf
|
||||
msgid "This command specifies the IP address of the neighboring device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:456 614a663f1ae544d8bec1bf832029d75f
|
||||
msgid ""
|
||||
"This command specifies the length of time, in seconds, before the routing "
|
||||
"device sends hello packets out of the interface before it establishes "
|
||||
"adjacency with a neighbor. The range is 1 to 65535 seconds. The default "
|
||||
"value is 60 seconds."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:463 fab22e795bc14f679941ee55921c4866
|
||||
msgid ""
|
||||
"This command specifies the router priority value of the nonbroadcast "
|
||||
"neighbor associated with the IP address specified. The default is 0. This "
|
||||
"keyword does not apply to point-to-multipoint interfaces."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:469
|
||||
#: ../../configuration/protocols/ospf.rst:918 bf291f71a29949439ef7ab2c384383bf
|
||||
#: ddef832b89e24d76a0c584f8a05a5d56
|
||||
msgid "Redistribution Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:473 fd557cfd1b0347c7b8d89dbf66535d8a
|
||||
msgid ""
|
||||
"This command redistributes routing information from the given route source "
|
||||
"to the OSPF process. There are five modes available for route source: bgp, "
|
||||
"connected, kernel, rip, static."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:479 f92d857774b14836aa6b2368fca14df8
|
||||
msgid ""
|
||||
"This command specifies the default metric value of redistributed routes. The"
|
||||
" metric range is 0 to 16777214."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:484 5da5b07313054f38b053554209fed43f
|
||||
msgid ""
|
||||
"This command specifies metric for redistributed routes from the given route "
|
||||
"source. There are five modes available for route source: bgp, connected, "
|
||||
"kernel, rip, static. The metric range is 1 to 16777214."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:490 1b43a6f618f642d3b554246712bdb0a6
|
||||
msgid ""
|
||||
"This command specifies metric type for redistributed routes. Difference "
|
||||
"between two metric types that metric type 1 is a metric which is "
|
||||
"\"commensurable\" with inner OSPF links. When calculating a metric to the "
|
||||
"external destination, the full path metric is calculated as a metric sum "
|
||||
"path of a router which had advertised this link plus the link metric. Thus, "
|
||||
"a route with the least summary metric will be selected. If external link is "
|
||||
"advertised with metric type 2 the path is selected which lies through the "
|
||||
"router which advertised this link with the least metric despite of the fact "
|
||||
"that internal path to this router is longer (with more cost). However, if "
|
||||
"two routers advertised an external link and with metric type 2 the "
|
||||
"preference is given to the path which lies through the router with a shorter"
|
||||
" internal path. If two different routers advertised two links to the same "
|
||||
"external destimation but with different metric type, metric type 1 is "
|
||||
"preferred. If type of a metric left undefined the router will consider these"
|
||||
" external links to have a default metric type 2."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:508 c9e4402b19ce4d3399f2b0e49243d90b
|
||||
msgid ""
|
||||
"This command allows to use route map to filter redistributed routes from the"
|
||||
" given route source. There are five modes available for route source: bgp, "
|
||||
"connected, kernel, rip, static."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:514
|
||||
#: ../../configuration/protocols/ospf.rst:935 e7b88b6e44724740abc1921f397397a9
|
||||
#: d9e5c2dda98f4a12b1f41fae0f67f8dd
|
||||
msgid "Operational Mode Commands"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:518
|
||||
#: ../../configuration/protocols/ospf.rst:939 42f9057acde047d79212aae12b522d87
|
||||
#: ffb613dbfdfb449dae733f692e54fd5d
|
||||
msgid "This command displays the neighbors status."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:528
|
||||
#: ../../configuration/protocols/ospf.rst:943 941e24d2170c45b0996bb417d3642781
|
||||
#: 8f5e59fc82bc4e1a8c51b98e2e45c88f
|
||||
msgid ""
|
||||
"This command displays the neighbors information in a detailed form, not just"
|
||||
" a summary table."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:567 4e9ba9116c604c9bb293440930819345
|
||||
msgid ""
|
||||
"This command displays the neighbors information in a detailed form for a "
|
||||
"neighbor whose IP address is specified."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:572 81335795f2e344b6bf503429098cbf6b
|
||||
msgid ""
|
||||
"This command displays the neighbors status for a neighbor on the specified "
|
||||
"interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:577 061d2b04bc8a41a5a89323d4ceb6f71b
|
||||
msgid ""
|
||||
"This command displays state and configuration of OSPF the specified "
|
||||
"interface, or all interfaces if no interface is given."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:608
|
||||
#: ../../configuration/protocols/ospf.rst:958 a06d4b330b4e4f34925941a7ba7685a5
|
||||
#: 8501269415eb493c97e4e10032eae5e5
|
||||
msgid ""
|
||||
"This command displays the OSPF routing table, as determined by the most "
|
||||
"recent SPF calculation."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:633 b45055e53f114b96a3905e2a11b5edfa
|
||||
msgid "The table consists of following data:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:635 b429c057a65a49ed822f43c91c2f2c18
|
||||
msgid ""
|
||||
"**OSPF network routing table** – includes a list of acquired routes for all "
|
||||
"accessible networks (or aggregated area ranges) of OSPF system. \"IA\" flag "
|
||||
"means that route destination is in the area to which the router is not "
|
||||
"connected, i.e. it’s an inter-area path. In square brackets a summary metric"
|
||||
" for all links through which a path lies to this network is specified. "
|
||||
"\"via\" prefix defines a router-gateway, i.e. the first router on the way to"
|
||||
" the destination (next hop). **OSPF router routing table** – includes a list"
|
||||
" of acquired routes to all accessible ABRs and ASBRs. **OSPF external "
|
||||
"routing table** – includes a list of acquired routes that are external to "
|
||||
"the OSPF process. \"E\" flag points to the external link metric type (E1 – "
|
||||
"metric type 1, E2 – metric type 2). External link metric is printed in the "
|
||||
"\"<metric of the router which advertised the link>/<link metric>\" format."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:651
|
||||
#: ../../configuration/protocols/ospf.rst:963 a9e91565bcf14a648b55aee8e75f9b6c
|
||||
#: a09419bb77c34a4e9dbeebbf8cb45316
|
||||
msgid ""
|
||||
"This command displays a table of paths to area boundary and autonomous "
|
||||
"system boundary routers."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:656
|
||||
#: ../../configuration/protocols/ospf.rst:968 503dbe7a048e4550ab93551fa07a79d5
|
||||
#: 592df99c8b8c4e20ae4502c00160b09a
|
||||
msgid "This command displays a summary table with a database contents (LSA)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:689
|
||||
#: ../../configuration/protocols/ospf.rst:973 de52a2f0d2c54f7a967eec57b3633978
|
||||
#: 1a3e6f9274b147e695b659b648a034f7
|
||||
msgid ""
|
||||
"This command displays a database contents for a specific link advertisement "
|
||||
"type."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:692 16e7d6d0bb814021bac9328baa528553
|
||||
msgid ""
|
||||
"The type can be the following: asbr-summary, external, network, nssa-"
|
||||
"external, opaque-area, opaque-as, opaque-link, router, summary."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:696 f979d8fed0db48a980a58e95a20766c5
|
||||
msgid ""
|
||||
"[A.B.C.D] – link-state-id. With this specified the command displays portion "
|
||||
"of the network environment that is being described by the advertisement. The"
|
||||
" value entered depends on the advertisement’s LS type. It must be entered in"
|
||||
" the form of an IP address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:701 aa3aac4f91ff49d9b738c29ce3f1bb5d
|
||||
msgid ""
|
||||
":cfgcmd:`adv-router <A.B.C.D>` – router id, which link advertisements need "
|
||||
"to be reviewed."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:704 4604b0c467d74d4e8e25358a1d2e6f44
|
||||
msgid ""
|
||||
":cfgcmd:`self-originate` displays only self-originated LSAs from the local "
|
||||
"router."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:734 2761e59df2974824bdcf42ef0e90abaa
|
||||
msgid "This command displays LSAs in MaxAge list."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:738
|
||||
#: ../../configuration/protocols/ospf.rst:983 f3bd5bfe30e04359a51f8c703120fb6f
|
||||
#: 962c304de3e24d4fba3c75e917364b30
|
||||
msgid "Configuration Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:740 1d10496abb9044c280388864817bc3a2
|
||||
msgid ""
|
||||
"Below you can see a typical configuration using 2 nodes, redistribute "
|
||||
"loopback address and the node 1 sending the default route:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:743
|
||||
#: ../../configuration/protocols/ospf.rst:1017
|
||||
#: f1ecaf7d6f0b4166a628c12401508db4 43e607f4e0b243f0a2b93ace3558dcf1
|
||||
msgid "**Node 1**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:760
|
||||
#: ../../configuration/protocols/ospf.rst:1032
|
||||
#: 4467de1e6af640b28f4e72d0d14ae1ec 53fde67f06874c5fb01c630a43baa1a4
|
||||
msgid "**Node 2**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:779 9d89f72103424330b534385fc35eade5
|
||||
msgid "OSPFv3 (IPv6)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:791 5f9a19053c6b465fad3165d8ba2b1fde
|
||||
msgid ""
|
||||
"VyOS does not have a special command to start the OSPFv3 process. The OSPFv3"
|
||||
" process starts when the first ospf enabled interface is configured."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:796 c34a749fd1e6469f90ff13e568aa18de
|
||||
msgid ""
|
||||
"This command specifies the OSPFv3 enabled interface. This command is also "
|
||||
"used to enable the OSPF process. The area number can be specified in decimal"
|
||||
" notation in the range from 0 to 4294967295. Or it can be specified in "
|
||||
"dotted decimal notation similar to ip address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:803 9b7ac4b5690644c0b0f733783aa3da09
|
||||
msgid ""
|
||||
"This command sets the router-ID of the OSPFv3 process. The router-ID may be "
|
||||
"an IP address of the router, but need not be – it can be any arbitrary 32bit"
|
||||
" number. However it MUST be unique within the entire OSPFv3 domain to the "
|
||||
"OSPFv3 speaker – bad things will happen if multiple OSPFv3 speakers are "
|
||||
"configured with the same router-ID!"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:817 07551c5f39414186a63c37e1eaccd508
|
||||
msgid ""
|
||||
"This command change distance value of OSPFv3 globally. The distance range is"
|
||||
" 1 to 255."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:823 7d5d4c8bbdda484ba796621a5f122e7f
|
||||
msgid ""
|
||||
"This command change distance value of OSPFv3. The arguments are the distance"
|
||||
" values for external routes, inter-area routes and intra-area routes "
|
||||
"respectively. The distance range is 1 to 255."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:834 8960447dc53f43b5b101424569061057
|
||||
msgid ""
|
||||
"This command summarizes intra area paths from specified area into one Type-3"
|
||||
" Inter-Area Prefix LSA announced to other areas. This command can be used "
|
||||
"only in ABR."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:883 9258d14858ba46bebc7287146143e7a3
|
||||
msgid ""
|
||||
"**broadcast** – broadcast IP addresses distribution. **point-to-point** – "
|
||||
"address distribution in point-to-point networks."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:922 4e72c75a20cf46c5a59831085e3b401b
|
||||
msgid ""
|
||||
"This command redistributes routing information from the given route source "
|
||||
"to the OSPFv3 process. There are five modes available for route source: bgp,"
|
||||
" connected, kernel, ripng, static."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:928 f3ac8120abbf45249dd5afcf16e9402e
|
||||
msgid ""
|
||||
"This command allows to use route map to filter redistributed routes from "
|
||||
"given route source. There are five modes available for route source: bgp, "
|
||||
"connected, kernel, ripng, static."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:948 6eed6dad78474f369976b9b8e7f4fe46
|
||||
msgid "This command displays the neighbor DR choice information."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:952 a4674b2df8c04722b64399c42b7a1a04
|
||||
msgid ""
|
||||
"This command displays state and configuration of OSPF the specified "
|
||||
"interface, or all interfaces if no interface is given. Whith the argument "
|
||||
":cfgcmd:`prefix` this command shows connected prefixes to advertise."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:978 f8433124b8e448b9afba90cbce9970cc
|
||||
msgid "This command displays external information redistributed into OSPFv3"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:985 31c3373f27a4458d93b048e21abcceef
|
||||
msgid "A typical configuration using 2 nodes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:987 8c3f79a41fef4adfa9745c2d268dfeab
|
||||
msgid "**Node 1:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:996 8546efdeddcf495daa8192a49465c09b
|
||||
msgid "**Node 2:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:1005
|
||||
#: 26ed2550753b41e2b67abbbe5dcf3e5a
|
||||
msgid "**To see the redistributed routes:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:1011
|
||||
#: 086762874a6b4f128ea2b526ceb26a64
|
||||
msgid ""
|
||||
"You cannot easily redistribute IPv6 routes via OSPFv3 on a WireGuard "
|
||||
"interface link. This requires you to configure link-local addresses manually"
|
||||
" on the WireGuard interfaces, see :vytask:`T1483`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:1015
|
||||
#: 4dc1e885308b4ad1b73894a7484b20de
|
||||
msgid "Example configuration for WireGuard interfaces:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/ospf.rst:1047
|
||||
#: 6286c008c90a4a67b8fe53bc75c4b54a
|
||||
msgid "**Status**"
|
||||
msgstr ""
|
||||
@ -1,273 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:7 6fc3ec7cfd8244af80453d0ce1c149bc
|
||||
msgid "RIP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:9 490d09119f394fd094892b23bc134bf6
|
||||
msgid ""
|
||||
":abbr:`RIP (Routing Information Protocol)` is a widely deployed interior "
|
||||
"gateway protocol. RIP was developed in the 1970s at Xerox Labs as part of "
|
||||
"the XNS routing protocol. RIP is a distance-vector protocol and is based on "
|
||||
"the Bellman-Ford algorithms. As a distance-vector protocol, RIP router send "
|
||||
"updates to its neighbors periodically, thus allowing the convergence to a "
|
||||
"known topology. In each update, the distance to any given network will be "
|
||||
"broadcast to its neighboring router."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:17 d7689f5e7bdd4210aa8caf674de45011
|
||||
msgid "Supported versions of RIP are:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:19 121160551d824146b2e563da197c9dcd
|
||||
msgid "RIPv1 as described in :rfc:`1058`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:20 7ba8f1c0445d438db51ecd501bf9daf8
|
||||
msgid "RIPv2 as described in :rfc:`2453`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:23 97569bf6cb72418d87057d223a2b39b1
|
||||
msgid "General Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:27 c15f20a1296f48c6ba68f5bc7673a436
|
||||
msgid ""
|
||||
"This command enables RIP and sets the RIP enable interface by NETWORK. The "
|
||||
"interfaces which have addresses matching with NETWORK are enabled."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:32 1fd1a58d1c194b8985d9fc87aac45004
|
||||
msgid ""
|
||||
"This command specifies a RIP enabled interface by interface name. Both the "
|
||||
"sending and receiving of RIP packets will be enabled on the port specified "
|
||||
"in this command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:38 a66a38bdcd8141338a5e4537d3babed0
|
||||
msgid ""
|
||||
"This command specifies a RIP neighbor. When a neighbor doesn’t understand "
|
||||
"multicast, this command is used to specify neighbors. In some cases, not all"
|
||||
" routers will be able to understand multicasting, where packets are sent to "
|
||||
"a network or a group of addresses. In a situation where a neighbor cannot "
|
||||
"process multicast packets, it is necessary to establish a direct link "
|
||||
"between routers."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:47 a833ba7f4ec2446f982c96d78272c759
|
||||
msgid ""
|
||||
"This command sets the specified interface to passive mode. On passive mode "
|
||||
"interface, all receiving packets are processed as normal and VyOS does not "
|
||||
"send either multicast or unicast RIP packets except to RIP neighbors "
|
||||
"specified with neighbor command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:54 7c8048872d5d41c6800f6722f5dfa7b0
|
||||
msgid "This command specifies all interfaces to passive mode."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:58 4b96caa173d5489784986af2d6b9bcfc
|
||||
msgid "Optional Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:62 200a30f7858d4e249541739165ea5845
|
||||
msgid ""
|
||||
"This command change the distance value of RIP. The distance range is 1 to "
|
||||
"255."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:64 6eed7871ee544c8bb1c81733ea908915
|
||||
msgid ""
|
||||
"Routes with a distance of 255 are effectively disabled and not installed "
|
||||
"into the kernel."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:69 1cfd091fdd4f4d0e80f21fa8875c03e6
|
||||
msgid ""
|
||||
"This command sets default RIP distance to a specified value when the routes "
|
||||
"source IP address matches the specified prefix."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:74 77be12b78a7148b3b178e1df0ec93dff
|
||||
msgid ""
|
||||
"This command can be used with previous command to sets default RIP distance "
|
||||
"to specified value when the route source IP address matches the specified "
|
||||
"prefix and the specified access-list."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:80 2a2d50047439469d8f1a5cc16bf5b799
|
||||
msgid "This command generate a default route into the RIP."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:84 14ed4259523c44dc901791a15b581a2c
|
||||
msgid ""
|
||||
"This command can be used to filter the RIP path using access lists. "
|
||||
":cfgcmd:`in` and :cfgcmd:`out` this is the direction in which the access "
|
||||
"lists are applied."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:90 4931f8d427ab464083c519b7ba70e215
|
||||
msgid ""
|
||||
"This command allows you apply access lists to a chosen interface to filter "
|
||||
"the RIP path."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:95 377096f1558a41ee9c2683509437bd8b
|
||||
msgid ""
|
||||
"This command can be used to filter the RIP path using prefix lists. "
|
||||
":cfgcmd:`in` and :cfgcmd:`out` this is the direction in which the prefix "
|
||||
"lists are applied."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:101 042f3256736c4d0385fbb31fbf348cfa
|
||||
msgid ""
|
||||
"This command allows you apply prefix lists to a chosen interface to filter "
|
||||
"the RIP path."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:106 7f17446d2d4b48c6befc84c9b7d9ce8a
|
||||
msgid ""
|
||||
"This command is specific to FRR and VyOS. The route command makes a static "
|
||||
"route only inside RIP. This command should be used only by advanced users "
|
||||
"who are particularly knowledgeable about the RIP protocol. In most cases, we"
|
||||
" recommend creating a static route in VyOS and redistributing it in RIP "
|
||||
"using :cfgcmd:`redistribute static`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:114 cc343d380079428c8c2c93c5d4324d9b
|
||||
msgid ""
|
||||
"This command specifies the update timer. Every update timer seconds, the RIP"
|
||||
" process is awakened to send an unsolicited response message containing the "
|
||||
"complete routing table to all neighboring RIP routers. The time range is 5 "
|
||||
"to 2147483647. The default value is 30 seconds."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:121 cf443300941c4a80ba298391e1153612
|
||||
msgid ""
|
||||
"This command specifies the timeout timer. Upon expiration of the timeout, "
|
||||
"the route is no longer valid; however, it is retained in the routing table "
|
||||
"for a short time so that neighbors can be notified that the route has been "
|
||||
"dropped. The time range is 5 to 2147483647. The default value is 180 "
|
||||
"seconds."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:129 9b24944e56604032bf0511d4091dfcf5
|
||||
msgid ""
|
||||
"This command specifies the garbage-collection timer. Upon expiration of the "
|
||||
"garbage-collection timer, the route is finally removed from the routing "
|
||||
"table. The time range is 5 to 2147483647. The default value is 120 seconds."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:136 83c1d23512bd4127b4a8dfb18461fa0c
|
||||
msgid "Redistribution Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:140 5cc9716f7b5547b1a6a069e27b6e6445
|
||||
msgid ""
|
||||
"This command redistributes routing information from the given route source "
|
||||
"into the RIP tables. There are five modes available for route source: bgp, "
|
||||
"connected, kernel, ospf, static."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:146 4afb87d13fef4cb59e09389070b62dd7
|
||||
msgid ""
|
||||
"This command specifies metric for redistributed routes from the given route "
|
||||
"source. There are five modes available for route source: bgp, connected, "
|
||||
"kernel, ospf, static. The metric range is 1 to 16."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:152 0a24c8166b3145179671e0664ffc198b
|
||||
msgid ""
|
||||
"This command allows to use route map to filter redistributed routes from the"
|
||||
" given route source. There are five modes available for route source: bgp, "
|
||||
"connected, kernel, ospf, static."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:158 c4e70084aab8480498f92206231c48d8
|
||||
msgid ""
|
||||
"This command modifies the default metric (hop count) value for redistributed"
|
||||
" routes. The metric range is 1 to 16. The default value is 1. This command "
|
||||
"does not affect connected route even if it is redistributed by "
|
||||
":cfgcmd:`redistribute connected`. To modify connected routes metric value, "
|
||||
"please use :cfgcmd:`redistribute connected metric`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:166 a71e036258d14c9da8903e58f87272d6
|
||||
msgid "Interfaces Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:170 e39a84e079cb4ab9a900f77d92304314
|
||||
msgid ""
|
||||
"This command sets the interface with RIP simple password authentication. "
|
||||
"This command also sets authentication string. The string must be shorter "
|
||||
"than 16 characters."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:176 12146310bd0b43fc8f62ede687ded20f
|
||||
msgid ""
|
||||
"This command sets the interface with RIP MD5 authentication. This command "
|
||||
"also sets MD5 Key. The key must be shorter than 16 characters."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:181 b0c2a7bd88f040b0876d560800d66f95
|
||||
msgid ""
|
||||
"This command disables split-horizon on the interface. By default, VyOS does "
|
||||
"not advertise RIP routes out the interface over which they were learned "
|
||||
"(split horizon).3"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:187 8fbf68d36815489d8666b99fbbeafc87
|
||||
msgid ""
|
||||
"This command enables poison-reverse on the interface. If both poison reverse"
|
||||
" and split horizon are enabled, then VyOS advertises the learned routes as "
|
||||
"unreachable over the interface on which the route was learned."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:193 a74c50027f0c46ccb4403efdfb22b323
|
||||
msgid "Operational Mode Commands"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:197 ef65acbe5c534876b42dd1a3df3e2bd8
|
||||
msgid "This command displays RIP routes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:213 89b074f310a8409aa4233b79d3e5ca28
|
||||
msgid ""
|
||||
"The command displays current RIP status. It includes RIP timer, filtering, "
|
||||
"version, RIP enabled interface and RIP peer information."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:239 e7486e3160b54ee6b534c078fd691894
|
||||
msgid "Configuration Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:241 d04899a06f2047569290b32f6391ccbf
|
||||
msgid ""
|
||||
"Simple RIP configuration using 2 nodes and redistributing connected "
|
||||
"interfaces."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:243 4329e2b585d4417b8e9d8ed6e5d31142
|
||||
msgid "**Node 1:**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rip.rst:251 45f088e27cbb47408058063bcc63df7e
|
||||
msgid "**Node 2:**"
|
||||
msgstr ""
|
||||
@ -1,267 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:5 1bd61b4c15664efdbca3b9b4df271aca
|
||||
msgid "RPKI"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:9 e6cfd8941dec4bceb55ae5121148b571
|
||||
msgid ""
|
||||
"There are two types of Network Admins who deal with BGP, those who have "
|
||||
"created an international incident and/or outage, and those who are lying"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:16 220f227c43f1419fb5c051e721c70d08
|
||||
msgid "`tweet by EvilMog`_, 2020-02-21"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:14 44119109520d462d86a9d6fc6ccd97b1
|
||||
msgid ""
|
||||
":abbr:`RPKI (Resource Public Key Infrastructure)` is a framework :abbr:`PKI "
|
||||
"(Public Key Infrastructure)` designed to secure the Internet routing "
|
||||
"infrastructure. It associates BGP route announcements with the correct "
|
||||
"originating :abbr:`ASN (Autonomus System Number)` which BGP routers can then"
|
||||
" use to check each route against the corresponding :abbr:`ROA (Route Origin "
|
||||
"Authorisation)` for validity. RPKI is described in :rfc:`6480`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:21 6ad01fd0e5bb48a887151f3178e9d08e
|
||||
msgid ""
|
||||
"A BGP-speaking router like VyOS can retrieve ROA information from RPKI "
|
||||
"\"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI "
|
||||
"validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are "
|
||||
"several open source implementations to choose from, such as NLNetLabs' "
|
||||
"Routinator_ (written in Rust), Cloudflare's GoRTR_ and OctoRPKI_ (written in"
|
||||
" Go), and RIPE NCC's RPKI Validator_ (written in Java). The RTR protocol is "
|
||||
"described in :rfc:`8210`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:30 d954e8652e7544d9bd395c4c794daf58
|
||||
msgid ""
|
||||
"If you are new to these routing security technologies then there is an "
|
||||
"`excellent guide to RPKI`_ by NLnet Labs which will get you up to speed very"
|
||||
" quickly. Their documentation explains everything from what RPKI is to "
|
||||
"deploying it in production. It also has some `help and operational "
|
||||
"guidance`_ including \"What can I do about my route having an Invalid "
|
||||
"state?\""
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:39 1cf071e50cfb42289176729dbe394f7a
|
||||
msgid "Getting started"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:41 ad74482bc987491b9eaa4621315fc46e
|
||||
msgid ""
|
||||
"First you will need to deploy an RPKI validator for your routers to use. The"
|
||||
" RIPE NCC helpfully provide `some instructions`_ to get you started with "
|
||||
"several different options. Once your server is running you can start "
|
||||
"validating announcements."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:46 9f395bc595e14b29ad5e25732eef541d
|
||||
msgid "Imported prefixes during the validation may have values:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:50 77da08266569477f8938c275d180d8b4
|
||||
msgid "valid"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:49 cd9d9e6e8d864e1ebf72445b693a6525
|
||||
msgid ""
|
||||
"The prefix and ASN that originated it match a signed ROA. These are probably"
|
||||
" trustworthy route announcements."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:56 fc73537ac7b740018df729dc62c99176
|
||||
msgid "invalid"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:53 e51152de42cd45d8a8c4444c541f7a1f
|
||||
msgid ""
|
||||
"The prefix or prefix length and ASN that originated it doesn't match any "
|
||||
"existing ROA. This could be the result of a prefix hijack, or merely a "
|
||||
"misconfiguration, but should probably be treated as untrustworthy route "
|
||||
"announcements."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:61 393184b5732947f3924f8711c5eb16f7
|
||||
msgid "notfound"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:59 0d7810f523da4aaa8ff3af02cdf509b3
|
||||
msgid ""
|
||||
"No ROA exists which covers that prefix. Unfortunately this is the case for "
|
||||
"about 80% of the IPv4 prefixes which were announced to the :abbr:`DFZ "
|
||||
"(default-free zone)` at the start of 2020"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:64 ca90c7c8c5d748eab9029abcdcfc9f33
|
||||
msgid ""
|
||||
"If you are responsible for the global addresses assigned to your network, "
|
||||
"please make sure that your prefixes have ROAs associated with them to avoid "
|
||||
"being `notfound` by RPKI. For most ASNs this will involve publishing ROAs "
|
||||
"via your :abbr:`RIR (Regional Internet Registry)` (RIPE NCC, APNIC, ARIN, "
|
||||
"LACNIC or AFRINIC), and is something you are encouraged to do whenever you "
|
||||
"plan to announce addresses into the DFZ."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:71 f2f8bc07e9d44ebe9bebb09c45913941
|
||||
msgid ""
|
||||
"Particularly large networks may wish to run their own RPKI certificate "
|
||||
"authority and publication server instead of publishing ROAs via their RIR. "
|
||||
"This is a subject far beyond the scope of VyOS' documentation. Consider "
|
||||
"reading about Krill_ if this is a rabbit hole you need or especially want to"
|
||||
" dive down."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:78 76089628d8ce402ab91e0adde43a2898
|
||||
msgid "Features of the Current Implementation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:80 f8ad2f7d942643beab4327271108a05d
|
||||
msgid ""
|
||||
"In a nutshell, the current implementation provides the following features:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:82 19b31ea1b4e74aa79f078b32117ebd89
|
||||
msgid ""
|
||||
"The BGP router can connect to one or more RPKI cache servers to receive "
|
||||
"validated prefix to origin AS mappings. Advanced failover can be implemented"
|
||||
" by server sockets with different preference values."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:86 b445b9b18f054e288d8b56cb962a43b5
|
||||
msgid ""
|
||||
"If no connection to an RPKI cache server can be established after a pre-"
|
||||
"defined timeout, the router will process routes without prefix origin "
|
||||
"validation. It still will try to establish a connection to an RPKI cache "
|
||||
"server in the background."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:91 b9c92a88e7914870ae611a9db500a84b
|
||||
msgid ""
|
||||
"By default, enabling RPKI does not change best path selection. In "
|
||||
"particular, invalid prefixes will still be considered during best path "
|
||||
"selection. However, the router can be configured to ignore all invalid "
|
||||
"prefixes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:95 26514a15701044b095230a997dce447d
|
||||
msgid ""
|
||||
"Route maps can be configured to match a specific RPKI validation state. This"
|
||||
" allows the creation of local policies, which handle BGP routes based on the"
|
||||
" outcome of the Prefix Origin Validation."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:99 45e342fa456940a4b3b4e5d4b5cea3f9
|
||||
msgid ""
|
||||
"Updates from the RPKI cache servers are directly applied and path selection "
|
||||
"is updated accordingly. (Soft reconfiguration must be enabled for this to "
|
||||
"work)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:104 a7ba2bf755da42f48595901da621cf6e
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:108 03511dc3a83d4e408ade97a500c65232
|
||||
msgid "Define the time interval to update the local cache"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:110 9b0b1087ef1846d9996c4e891958b27c
|
||||
msgid "The default value is 300 seconds."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:114 e2aef470087c476aab20592744a01950
|
||||
msgid ""
|
||||
"Defined the IPv4, IPv6 or FQDN and port number of the caching RPKI caching "
|
||||
"instance which is used."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:117
|
||||
#: ../../configuration/protocols/rpki.rst:124 6c88944bb61342e2883ed1d3566d7db5
|
||||
#: 44de7c2448ed40b09a66e47cb98e52f9
|
||||
msgid "This is a mandatory setting."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:121 65de0f2c2dfe4d7d8d1bbec0e0592f49
|
||||
msgid ""
|
||||
"Multiple RPKI caching instances can be supplied and they need a preference "
|
||||
"in which their result sets are used."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:127 b6e433899a3a4a4098b5e36c17a864d6
|
||||
msgid "SSH"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:129 756c3bee52fe4f42877799de5947d2f3
|
||||
msgid ""
|
||||
"Connections to the RPKI caching server can not only be established by "
|
||||
"HTTP/TLS but you can also rely on a secure SSH session to the server. To "
|
||||
"enable SSH you first need to create yoursels an SSH client keypair using "
|
||||
"``generate ssh client-key /config/auth/id_rsa_rpki``. Once your key is "
|
||||
"created you can setup the connection."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:137 de30b47273e74d7595377eddcab3d1d7
|
||||
msgid "SSH username to establish an SSH connection to the cache server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:141 ca9167aa471a461084c2c9b36d6923a6
|
||||
msgid "Local path that includes the known hosts file."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:145 3c75b30efdf14b5fbd98db779033eac4
|
||||
msgid "Local path that includes the private key file of the router."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:149 6abc754d30f140b18a58198690f2afd6
|
||||
msgid "Local path that includes the public key file of the router."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:151 0f33a93c3f6c4beda15cb4d9246de6e9
|
||||
msgid ""
|
||||
"When using SSH, known-hosts-file, private-key-file and public-key-file are "
|
||||
"mandatory options."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:156 b2100d8f6db146a1bec22156c151cc1c
|
||||
msgid "Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:158 71524aff9c254b919fe68224ac362f95
|
||||
msgid ""
|
||||
"We can build route-maps for import based on these states. Here is a simple "
|
||||
"RPKI configuration, where `routinator` is the RPKI-validating \"cache\" "
|
||||
"server with ip `192.0.2.1`:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:167 0ab8a8f3af1344f88143d6000036a12e
|
||||
msgid ""
|
||||
"Here is an example route-map to apply to routes learned at import. In this "
|
||||
"filter we reject prefixes with the state `invalid`, and set a higher `local-"
|
||||
"preference` if the prefix is RPKI `valid` rather than merely `notfound`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/rpki.rst:183 ed77a709999b4ab2bf29c2b7dc4b7fae
|
||||
msgid ""
|
||||
"Once your routers are configured to reject RPKI-invalid prefixes, you can "
|
||||
"test whether the configuration is working correctly using the `RIPE Labs "
|
||||
"RPKI Test`_ experimental tool."
|
||||
msgstr ""
|
||||
@ -1,228 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/protocols/static.rst:5 c0cb379796b64da09d909445513dbb23
|
||||
msgid "Static"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:7 9397865f01834f51b32dc6bf166c90ef
|
||||
msgid ""
|
||||
"Static routes are manually configured routes, which, in general, cannot be "
|
||||
"updated dynamically from information VyOS learns about the network topology "
|
||||
"from other routing protocols. However, if a link fails, the router will "
|
||||
"remove routes, including static routes, from the :abbr:`RIPB (Routing "
|
||||
"Information Base)` that used this interface to reach the next hop. In "
|
||||
"general, static routes should only be used for very simple network "
|
||||
"topologies, or to override the behavior of a dynamic routing protocol for a "
|
||||
"small number of routes. The collection of all routes the router has learned "
|
||||
"from its configuration or from its dynamic routing protocols is stored in "
|
||||
"the RIB. Unicast routes are directly used to determine the forwarding table "
|
||||
"used for unicast packet forwarding."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:20
|
||||
#: 7e54c2806f784bce8702ba9bf918daeb
|
||||
msgid "Static Routes"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:24
|
||||
#: 74194551ea974d78aa1930e3f92c63b0
|
||||
msgid ""
|
||||
"Configure next-hop `<address>` for an IPv4 static route. Multiple static "
|
||||
"routes can be created."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:29
|
||||
#: 4de92aa024ba47f98be3b28c3550b59b
|
||||
msgid "Disable this IPv4 static route entry."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:34
|
||||
#: ../../configuration/protocols/static.rst:54
|
||||
#: ../../configuration/protocols/static.rst:81
|
||||
#: ../../configuration/protocols/static.rst:101
|
||||
#: de3dcd8d037a4722947c55c7dca08cb6 d940c682efbf4400b5b05282ddd16dfd
|
||||
#: 1ebd04e13bae4957879eb336d730efe3 b55efa2034704fbe9068731a13062dcd
|
||||
msgid ""
|
||||
"Defines next-hop distance for this route, routes with smaller administrative"
|
||||
" distance are elected prior to those with a higher distance."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:37
|
||||
#: ../../configuration/protocols/static.rst:57
|
||||
#: ../../configuration/protocols/static.rst:84
|
||||
#: ../../configuration/protocols/static.rst:104
|
||||
#: df38cf753ead4159be24d569208a22e1 5412f2a930d547abaf720e6f8ba34d37
|
||||
#: 9ae33139993741f993eb3b69ef4aefc0 bba243592204415f86b74f749a3d4839
|
||||
msgid "Range is 1 to 255, default is 1."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:39
|
||||
#: ../../configuration/protocols/static.rst:59
|
||||
#: 3a918f9350ce4ab0a35bac77f58687a0 b37387c281524e14a557ab2fa4a992a4
|
||||
msgid ""
|
||||
"Routes with a distance of 255 are effectively disabled and not installed "
|
||||
"into the kernel."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:44
|
||||
#: ab34fd19195a40c490404b01eea7e8b5
|
||||
msgid ""
|
||||
"Configure next-hop `<address>` for an IPv6 static route. Multiple static "
|
||||
"routes can be created."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:49
|
||||
#: 385bf28e072646578215634793ff5921
|
||||
msgid "Disable this IPv6 static route entry."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:64
|
||||
#: 0c24f2c280694622a549834d2f292ae5
|
||||
msgid "Interface Routes"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:69
|
||||
#: 327b3640dac443c387e855c8360e865f
|
||||
msgid ""
|
||||
"Allows you to configure the next-hop interface for an interface-based IPv4 "
|
||||
"static route. `<interface>` will be the next-hop interface where traffic is "
|
||||
"routed for the given `<subnet>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:76
|
||||
#: 26459a66c77740dca41310cc42e5b2a9
|
||||
msgid "Disables interface-based IPv4 static route."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:89
|
||||
#: 2e5099a5c1b14a5caf1b1f800ef6c056
|
||||
msgid ""
|
||||
"Allows you to configure the next-hop interface for an interface-based IPv6 "
|
||||
"static route. `<interface>` will be the next-hop interface where traffic is "
|
||||
"routed for the given `<subnet>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:96
|
||||
#: b82151038e6945038adf5b3d177e9ac2
|
||||
msgid "Disables interface-based IPv6 static route."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:108
|
||||
#: 0b2bf8847be046099b2b3927d6674290
|
||||
msgid "Blackhole"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:112
|
||||
#: ../../configuration/protocols/static.rst:125
|
||||
#: 2cb4e9e8c23b4cbfb09773a444734be6 2d3034f954c34aeb9eeb121199edc204
|
||||
msgid ""
|
||||
"Use this command to configure a \"black-hole\" route on the router. A black-"
|
||||
"hole route is a route for which the system silently discard packets that are"
|
||||
" matched. This prevents networks leaking out public interfaces, but it does "
|
||||
"not prevent them from being used as a more specific route inside your "
|
||||
"network."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:120
|
||||
#: ../../configuration/protocols/static.rst:133
|
||||
#: eb8de21c92f64e278b75017600c5116f 5666a897614c4a41b0821971f8896652
|
||||
msgid ""
|
||||
"Defines blackhole distance for this route, routes with smaller "
|
||||
"administrative distance are elected prior to those with a higher distance."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:138
|
||||
#: fb24a302e8b8450495203a2ed8ba9fd9
|
||||
msgid "Alternate Routing Tables"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:140
|
||||
#: 1c2f51ca845a407ea980c11f9ba365c9
|
||||
msgid "TBD"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:142
|
||||
#: 5be8780519e74384983703b6b4043ef9
|
||||
msgid ""
|
||||
"Alternate routing tables are used with policy based routing by utilizing "
|
||||
":ref:`vrf`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:150
|
||||
#: 575365e22aaf4eb181b646368ae0aa49
|
||||
msgid "ARP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:152
|
||||
#: a35fda4343a9400db4e82ebb30eec4e8
|
||||
msgid ""
|
||||
":abbr:`ARP (Address Resolution Protocol)` is a communication protocol used "
|
||||
"for discovering the link layer address, such as a MAC address, associated "
|
||||
"with a given internet layer address, typically an IPv4 address. This mapping"
|
||||
" is a critical function in the Internet protocol suite. ARP was defined in "
|
||||
"1982 by :rfc:`826` which is Internet Standard STD 37."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:158
|
||||
#: c495ed9891414ce2909e9b55ba165ec6
|
||||
msgid ""
|
||||
"In Internet Protocol Version 6 (IPv6) networks, the functionality of ARP is "
|
||||
"provided by the Neighbor Discovery Protocol (NDP)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:161
|
||||
#: b08fa2b6512d4d16bf16dc7c867a8c84
|
||||
msgid ""
|
||||
"To manipulate or display ARP_ table entries, the following commands are "
|
||||
"implemented."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:166
|
||||
#: 57475f6a944a4ea5abdd07f0497fed0f
|
||||
msgid "Configure"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:171
|
||||
#: baf8357ceffa44398630d29490cff4f1
|
||||
msgid ""
|
||||
"This will configure a static ARP entry always resolving `<address>` to "
|
||||
"`<mac>` for interface `<interface>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:174
|
||||
#: 890ef69425f64428a60e756bdf8813f6
|
||||
msgid "Example:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:183
|
||||
#: cd3bd9363aba4cc78bfd7e0fe58a07dc
|
||||
msgid "Operation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:188
|
||||
#: 7b892819f8ec497199e728778db5345f
|
||||
msgid "Display all known ARP table entries spanning across all interfaces"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/protocols/static.rst:200
|
||||
#: 34580da66a7c432194f33cae45de4734
|
||||
msgid ""
|
||||
"Display all known ARP table entries on a given interface only (`eth1`):"
|
||||
msgstr ""
|
||||
@ -1,112 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/service/broadcast-relay.rst:5
|
||||
#: 9f06b22b56ce4807a8e313f22df58bdb
|
||||
msgid "UDP Broadcast Relay"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/broadcast-relay.rst:7
|
||||
#: 1631755745c943578b053fddaaf1e714
|
||||
msgid ""
|
||||
"Certain vendors use broadcasts to identify their equipment within one "
|
||||
"ethernet segment. Unfortunately if you split your network with multiple "
|
||||
"VLANs you loose the ability of identifying your equipment."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/broadcast-relay.rst:11
|
||||
#: 63312ea281104fcaac7d39b3b90c52a3
|
||||
msgid ""
|
||||
"This is where \"UDP broadcast relay\" comes into play! It will forward "
|
||||
"received broadcasts to other configured networks."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/broadcast-relay.rst:14
|
||||
#: a1f1a6022bab47fba2e8e13bf6791c14
|
||||
msgid ""
|
||||
"Every UDP port which will be forward requires one unique ID. Currently we "
|
||||
"support 99 IDs!"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/broadcast-relay.rst:18
|
||||
#: f38a03b32557452091c28bbb859db352
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/broadcast-relay.rst:22
|
||||
#: e82639efc84b4282adff04f352dbf147
|
||||
msgid ""
|
||||
"A description can be added for each and every unique relay ID. This is "
|
||||
"useful to distinguish between multiple different ports/appliactions."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/broadcast-relay.rst:27
|
||||
#: 7092920df24f4224907df1d5e383c663
|
||||
msgid ""
|
||||
"The interface used to receive and relay individual broadcast packets. If you"
|
||||
" want to receive/relay packets on both `eth1` and `eth2` both interfaces "
|
||||
"need to be added."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/broadcast-relay.rst:33
|
||||
#: 4f69c5bb026640cdb0470e0610b245bd
|
||||
msgid ""
|
||||
"Set the source IP of forwarded packets, otherwise original senders address "
|
||||
"is used."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/broadcast-relay.rst:38
|
||||
#: a7d648f85d454fd7b66b4ba586487851
|
||||
msgid ""
|
||||
"The UDP port number used by your apllication. It is mandatory for this kind "
|
||||
"of operation."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/broadcast-relay.rst:43
|
||||
#: 45a8cdfb71784ea69027fc5439c41335
|
||||
msgid ""
|
||||
"Each broadcast relay instance can be individually disabled without deleting "
|
||||
"the configured node by using the following command:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/broadcast-relay.rst:48
|
||||
#: 7e5ebed6ce424eb5aa33dede00857afa
|
||||
msgid ""
|
||||
"In addition you can also disable the whole service without the need to "
|
||||
"remove it from the current configuration."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/broadcast-relay.rst:51
|
||||
#: 5ac7029ed7d94b50ac814147f7f63ee8
|
||||
msgid ""
|
||||
"You can run the UDP broadcast relay service on multiple routers connected to"
|
||||
" a subnet. There is **NO** UDP broadcast relay packet storm!"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/broadcast-relay.rst:55
|
||||
#: 6c4bb0dd723d4556b03c43078ad207d7
|
||||
msgid "Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/broadcast-relay.rst:57
|
||||
#: e6f77f5519d4448197a90ec3bf701fae
|
||||
msgid ""
|
||||
"To forward all broadcast packets received on `UDP port 1900` on `eth3`, "
|
||||
"`eth4` or `eth5` to all other interfaces in this configuration."
|
||||
msgstr ""
|
||||
@ -1,230 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:5
|
||||
#: b551a0606c1d407889b7ec88a15a1205
|
||||
msgid "Conntrack Sync"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:7
|
||||
#: d1c86a591ee44a79ac077ef030d566a1
|
||||
msgid ""
|
||||
"One of the important features built on top of the Netfilter framework is "
|
||||
"connection tracking. Connection tracking allows the kernel to keep track of "
|
||||
"all logical network connections or sessions, and thereby relate all of the "
|
||||
"packets which may make up that connection. NAT relies on this information to"
|
||||
" translate all related packets in the same way, and iptables can use this "
|
||||
"information to act as a stateful firewall."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:14
|
||||
#: 627509ed87934f4a8c080172673383bf
|
||||
msgid ""
|
||||
"The connection state however is completely independent of any upper-level "
|
||||
"state, such as TCP's or SCTP's state. Part of the reason for this is that "
|
||||
"when merely forwarding packets, i.e. no local delivery, the TCP engine may "
|
||||
"not necessarily be invoked at all. Even connectionless-mode transmissions "
|
||||
"such as UDP, IPsec (AH/ESP), GRE and other tunneling protocols have, at "
|
||||
"least, a pseudo connection state. The heuristic for such protocols is often "
|
||||
"based upon a preset timeout value for inactivity, after whose expiration a "
|
||||
"Netfilter connection is dropped."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:23
|
||||
#: 3224e71801764714b195a539bb4c0b20
|
||||
msgid ""
|
||||
"Each Netfilter connection is uniquely identified by a (layer-3 protocol, "
|
||||
"source address, destination address, layer-4 protocol, layer-4 key) tuple. "
|
||||
"The layer-4 key depends on the transport protocol; for TCP/UDP it is the "
|
||||
"port numbers, for tunnels it can be their tunnel ID, but otherwise is just "
|
||||
"zero, as if it were not part of the tuple. To be able to inspect the TCP "
|
||||
"port in all cases, packets will be mandatorily defragmented."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:30
|
||||
#: 0b13a06f7c414ce2a2c68f8751a8ace4
|
||||
msgid ""
|
||||
"It is possible to use either Multicast or Unicast to sync conntrack traffic."
|
||||
" Most examples below show Multicast, but unicast can be specified by using "
|
||||
"the \"peer\" keywork after the specificed interface, as in the following "
|
||||
"example:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:34
|
||||
#: c3982c7a20194ae79688835df39ec83f
|
||||
msgid ":cfgcmd:`set service conntrack-sync interface eth0 peer 192.168.0.250`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:38
|
||||
#: 6b6091ece83a41dfa5ba57da3c33a2a7
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:42
|
||||
#: adf2df21c38e454eb47da121a5ab5275
|
||||
msgid ""
|
||||
"Accept only certain protocols: You may want to replicate the state of flows "
|
||||
"depending on their layer 4 protocol."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:45
|
||||
#: 70c8ed63b11c4001b54cc990dbe72937
|
||||
msgid "Protocols are: tcp, sctp, dccp, udp, icmp and ipv6-icmp."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:49
|
||||
#: 246df012a5934d0bbd2034e459074d90
|
||||
msgid ""
|
||||
"The daemon doubles the size of the netlink event socket buffer size if it "
|
||||
"detects netlink event message dropping. This clause sets the maximum buffer "
|
||||
"size growth that can be reached."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:53
|
||||
#: 8fdae35a1e394bd396ae5a07981e699f
|
||||
msgid "Queue size for listening to local conntrack events in MB."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:57
|
||||
#: dbce76d4d3ee4c27801669852e8fa258
|
||||
msgid "Protocol for which expect entries need to be synchronized."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:61
|
||||
#: ed965d99e22f4c808d7ca4f8d5daea9f
|
||||
msgid "Failover mechanism to use for conntrack-sync."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:63
|
||||
#: b03daa03c13b4f7f954d555c7441b29a
|
||||
msgid "Only VRRP is supported. Required option."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:67
|
||||
#: 8f43977bf6be42f5b0c16dd9ae8502b7
|
||||
msgid ""
|
||||
"IP addresses or networks for which local conntrack entries will not be "
|
||||
"synced"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:71
|
||||
#: 7b59ffd55fb24f928d4570b3f7193ed5
|
||||
msgid "Interface to use for syncing conntrack entries."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:75
|
||||
#: cd859e4d46ff4d2a922d65595a93e107
|
||||
msgid "Multicast group to use for syncing conntrack entries."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:77
|
||||
#: 28e7cb0eedec4389bf42ed20f29adacd
|
||||
msgid "Defaults to 225.0.0.50."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:81
|
||||
#: 8b1aa1b96fa144ea940624b6792ca887
|
||||
msgid ""
|
||||
"Peer to send unicast UDP conntrack sync entires to, if not using Multicast "
|
||||
"configuration from above above."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:86
|
||||
#: fe8e336555fc46dba2e39b1946d3bbfd
|
||||
msgid "Queue size for syncing conntrack entries in MB."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:90
|
||||
#: f3a3f3560bfe4bf59f376f5e391db132
|
||||
msgid "Operation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:94
|
||||
#: bf3cea7e40da4b2c916e5aeb53723899
|
||||
msgid ""
|
||||
"Make sure conntrack is enabled by running and show connection tracking "
|
||||
"table."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:113
|
||||
#: 549c166e52174028b0e7688e9d935f03
|
||||
msgid ""
|
||||
"If the table is empty and you have a warning message, it means conntrack is "
|
||||
"not enabled. To enable conntrack, just create a NAT or a firewall rule. "
|
||||
":cfgcmd:`set firewall state-policy established action accept`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:119
|
||||
#: 9b4071949af8420cb6f97a441c40cb22
|
||||
msgid "Show connection syncing external cache entries"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:123
|
||||
#: 50e4bcd6bdb448afaddd472ec99ac8c5
|
||||
msgid "Show connection syncing internal cache entries"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:127
|
||||
#: 4cbfe24578054eb6b1aad18f133436aa
|
||||
msgid "Retrieve current statistics of connection tracking subsystem."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:160
|
||||
#: 9b76977048174b938f584053597b6b00
|
||||
msgid "Retrieve current status of connection tracking subsystem."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:173
|
||||
#: d9070014d8df43eb8977836b83ef6124
|
||||
msgid "Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:175
|
||||
#: bd616f885bbc4972b5ded6eba21e8207
|
||||
msgid "The next example is a simple configuration of conntrack-sync."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rstNone
|
||||
#: d1c3eecec50a49b391bc71ef78ef814a
|
||||
msgid "Conntrack Sync Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:181
|
||||
#: ec26b7452705478baca5db6df25d1c6b
|
||||
msgid ""
|
||||
"Now configure conntrack-sync service on ``router1`` **and** ``router2``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:194
|
||||
#: 43cfe86bbf074bcdbda86d087382a328
|
||||
msgid ""
|
||||
"On the active router, you should have information in the internal-cache of "
|
||||
"conntrack-sync. The same current active connections number should be shown "
|
||||
"in the external-cache of the standby router"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:198
|
||||
#: 480b10160187432c84138a3b57cb84f3
|
||||
msgid "On active router run:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/conntrack-sync.rst:229
|
||||
#: a96dece49d1541c89370df7d07950252
|
||||
msgid "On standby router run:"
|
||||
msgstr ""
|
||||
@ -1,171 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/service/console-server.rst:5
|
||||
#: 66958977a3fe400884df1779c331a5c9
|
||||
msgid "Console Server"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/console-server.rst:7
|
||||
#: 9e5dccb09c5f483e8e50eccd7d4dc683
|
||||
msgid ""
|
||||
"Starting of with VyOS 1.3 (equuleus) we added support for running VyOS as an"
|
||||
" Out-of-Band Management device which provides remote access by means of SSH "
|
||||
"to directly attached serial interfaces."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/console-server.rst:11
|
||||
#: 2f6b6545841344acb0d7f67cf5336281
|
||||
msgid ""
|
||||
"Serial interfaces can be any interface which is directly connected to the "
|
||||
"CPU or chipset (mostly known as a ttyS interface in Linux) or any other USB "
|
||||
"to serial converter (Prolific PL2303 or FTDI FT232/FT4232 based chips)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/console-server.rst:15
|
||||
#: b7de17ba5d0b461984e8164bcc14a710
|
||||
msgid ""
|
||||
"If you happened to use a Cisco NM-16A - Sixteen Port Async Network Module or"
|
||||
" NM-32A - Thirty-two Port Async Network Module - this is your VyOS "
|
||||
"replacement."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/console-server.rst:18
|
||||
#: bee7e9f6f0204ac38b3dbf28f3d52ce8
|
||||
msgid "For USB port information please refor to: :ref:`hardware_usb`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/console-server.rst:21
|
||||
#: 85c1704215394e6fbcac15b1ac9b6067
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/console-server.rst:23
|
||||
#: bf2b48e0b1e542e5a9e3f795df26671b
|
||||
msgid ""
|
||||
"Between computers, the most common configuration used was \"8N1\": eight bit"
|
||||
" characters, with one start bit, one stop bit, and no parity bit. Thus 10 "
|
||||
"Baud times are used to send a single character, and so dividing the "
|
||||
"signalling bit-rate by ten results in the overall transmission speed in "
|
||||
"characters per second. This is also the default setting if none of those "
|
||||
"options are defined."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/console-server.rst:31
|
||||
#: 3c9eefac12584bef92f35983f7e26b27
|
||||
msgid ""
|
||||
"Configure either seven or eight data bits. This defaults to eight data bits "
|
||||
"if left unconfigured."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/console-server.rst:36
|
||||
#: 4bc4080195fe4198b62dd15f1e92e7b8
|
||||
msgid "A user friendly description identifying the connected peripheral."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/console-server.rst:40
|
||||
#: f8b76e6c25d94fa6b99bf054fd6a64a1
|
||||
msgid ""
|
||||
"A user friendly alias for this connection. Can be used instead of the device"
|
||||
" name when connecting."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/console-server.rst:45
|
||||
#: ce6e4824ca234716956bb07f186860a9
|
||||
msgid ""
|
||||
"Set the parity option for the console. If unset this will default to none."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/console-server.rst:49
|
||||
#: a3c6b8c796924c4a8957da33afe7e421
|
||||
msgid ""
|
||||
"Configure either one or two stop bits. This defaults to one stop bits if "
|
||||
"left unconfigured."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/console-server.rst:55
|
||||
#: 6091add146dc4d2da8e16e1e664ba776
|
||||
msgid ""
|
||||
"USB to serial converters will handle most of their work in software so you "
|
||||
"should be carefull with the selected baudrate as some times they can't cope "
|
||||
"with the expected speed."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/console-server.rst:60
|
||||
#: 6839496499034d5c8387b4105328bbad
|
||||
msgid "Remote Access"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/console-server.rst:62
|
||||
#: ad15143b2cfc4f3a96ae3ecf46a16329
|
||||
msgid ""
|
||||
"Each individual configured console-server device can be directly exposed to "
|
||||
"the outside world. A user can directly connect via SSH to the configured "
|
||||
"port."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/console-server.rst:68
|
||||
#: 6bc9390f14d445e8b0af658ba71335c8
|
||||
msgid ""
|
||||
"Accept SSH connections for the given `<device>` on TCP port `<port>`. After "
|
||||
"successfull authentication the user will be directly dropped to the "
|
||||
"connected serial device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/console-server.rst:72
|
||||
#: ../../configuration/service/console-server.rst:109
|
||||
#: 9b7487a2a0e9488e98a7b5a5cad5f78a 1bb6ee7193c141878d6b44992e5fe5e5
|
||||
msgid ""
|
||||
"Multiple users can connect to the same serial device but only one is allowed"
|
||||
" to write to the console port."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/console-server.rst:76
|
||||
#: 02d3718b9d28488cbe5019be37db56a2
|
||||
msgid "Operation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/console-server.rst:80
|
||||
#: 06d34493fdd84493b825cac92f5e4c37
|
||||
msgid ""
|
||||
"Show configured serial ports and their respective interface configuration."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/console-server.rst:89
|
||||
#: ef7a6665e19c434d844ae5bbc3108bd8
|
||||
msgid "Show currently connected users."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/console-server.rst:99
|
||||
#: 48c4721d92444afca9494f00483dc3f8
|
||||
msgid "Locally connect to serial port identified by `<device>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/console-server.rst:112
|
||||
#: 11377462f7f34d6786ed3fcee77a99b1
|
||||
msgid ""
|
||||
"The sequence ``^Ec?`` translates to: ``Ctrl+E c ?``. To quit the session "
|
||||
"use: ``Ctrl+E c .``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/console-server.rst:115
|
||||
#: 9940b442a8914c6b83241c4d1b68d5ed
|
||||
msgid ""
|
||||
"If ``alias`` is set, it can be used instead of the device when connecting."
|
||||
msgstr ""
|
||||
@ -1,232 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:5
|
||||
#: f1d972af0c464a4d8d7ab9addf3f0873
|
||||
msgid "DHCP Relay"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:7
|
||||
#: 664fc9fda46845de9fa1bb7fd6ffffaf
|
||||
msgid ""
|
||||
"If you want your router to forward DHCP requests to an external DHCP server "
|
||||
"you can configure the system to act as a DHCP relay agent. The DHCP relay "
|
||||
"agent works with IPv4 and IPv6 addresses."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:11
|
||||
#: 9fc422f5bd2842289a1fe35a056650ac
|
||||
msgid ""
|
||||
"All interfaces used for the DHCP relay must be configured. This includes the"
|
||||
" uplink to the DHCP server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:16
|
||||
#: 5bbb2770332f4f75b9bc97ed19040a25
|
||||
msgid "IPv4 relay"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:19
|
||||
#: ../../configuration/service/dhcp-relay.rst:108
|
||||
#: 0d65f4ea66d140558b51ef83b14e57a8 c093e1a4406c4199a8bcc07f6439f708
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:23
|
||||
#: 9b751c216735430f931ad8488e635b8e
|
||||
msgid ""
|
||||
"Interfaces that participate in the DHCP relay process, including the uplink "
|
||||
"to the DHCP server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:28
|
||||
#: 6323b632ebc044659052973e17a3e7f3
|
||||
msgid ""
|
||||
"Configure IP address of the DHCP `<server>` which will handle the relayed "
|
||||
"packets."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:33
|
||||
#: 84459656951e4653b11acb29a439dd91
|
||||
msgid ""
|
||||
"The router should discard DHCP packages already containing relay agent "
|
||||
"information to ensure that only requests from DHCP clients are forwarded."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:37
|
||||
#: ../../configuration/service/dhcp-relay.rst:125
|
||||
#: 4f1d8d4c44db4749aa94e08316ed3a15 6a39af659a6f4af2baddf2700be1d354
|
||||
msgid "Options"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:41
|
||||
#: e203f00118d24dab93160283589644e3
|
||||
msgid ""
|
||||
"Set the maximum hop `<count>` before packets are discarded. Range 0...255, "
|
||||
"default 10."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:46
|
||||
#: ebc842ddcff74e04807bc7964a169469
|
||||
msgid ""
|
||||
"Set maximum `<size>` of DHCP packets including relay agent information. If a"
|
||||
" DHCP packet size surpasses this value it will be forwarded without "
|
||||
"appending relay agent information. Range 64...1400, default 576."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:53
|
||||
#: 07663448743a48c2ace5054d4fdbb8b4
|
||||
msgid "Four policies for reforwarding DHCP packets exist:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:55
|
||||
#: 7a7d4251e20e44699d96f772e5092c7d
|
||||
msgid ""
|
||||
"**append:** The relay agent is allowed to append its own relay information "
|
||||
"to a received DHCP packet, disregarding relay information already present in"
|
||||
" the packet."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:59
|
||||
#: e39dda42cfcc4c1db0aed505e3229ba8
|
||||
msgid ""
|
||||
"**discard:** Received packets which already contain relay information will "
|
||||
"be discarded."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:62
|
||||
#: 14bbfab01f0c49fda364955265b1f0f0
|
||||
msgid ""
|
||||
"**forward:** All packets are forwarded, relay information already present "
|
||||
"will be ignored."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:65
|
||||
#: efaf576817d44fc7bebaf197f8515d4b
|
||||
msgid ""
|
||||
"**replace:** Relay information already present in a packet is stripped and "
|
||||
"replaced with the router's own relay information set."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:69
|
||||
#: ../../configuration/service/dhcp-relay.rst:139
|
||||
#: 7a2e5867b9774ea69bb73406c2dfe25c c0c3930fdfc74bc29d07c2d36336eefd
|
||||
msgid "Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:71
|
||||
#: ceffa332db6547d08ee1107730c5dd02
|
||||
msgid "Listen for DHCP requests on interface ``eth1``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:72
|
||||
#: 0a4a0caf59574158a3e70abd585a20db
|
||||
msgid "DHCP server is located at IPv4 address 10.0.1.4 on ``eth2``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:73
|
||||
#: 4020eb50e8284514b2c1a61cdd8ba724
|
||||
msgid ""
|
||||
"Router receives DHCP client requests on ``eth1`` and relays them to the "
|
||||
"server at 10.0.1.4 on ``eth2``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:80
|
||||
#: ../../configuration/service/dhcp-relay.rst:80
|
||||
#: 6b0dfdb207b34724b174336d1177f8b3 74267855e3a24057876279ea593dfca6
|
||||
msgid "DHCP relay example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:82
|
||||
#: ../../configuration/service/dhcp-relay.rst:151
|
||||
#: 07c07a511b634a9f9205d2e0acd84594 20d2f4ce58344115a9bbc3ad2238916a
|
||||
msgid "The generated configuration will look like:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:95
|
||||
#: ../../configuration/service/dhcp-relay.rst:166
|
||||
#: 675e0b25fc1344dbbf7f24ef4639e51f 4618aea51748404e832e883f0068d502
|
||||
msgid "Operation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:99
|
||||
#: bb8a2c3cfcc6437e883088a0d18c355f
|
||||
msgid "Restart DHCP relay service"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:103
|
||||
#: fa181c5724f448f2aa6554e33b1a25ab
|
||||
msgid "IPv6 relay"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:112
|
||||
#: b69fae6516a54d1b803d0691ba1ee25f
|
||||
msgid "Set eth1 to be the listening interface for the DHCPv6 relay."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:114
|
||||
#: ab33f5ab7a6d4a0ca985639f00d4cba3
|
||||
msgid "Multiple interfaces may be specified."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:119
|
||||
#: 532b702bd50742daa49839ad53c4e748
|
||||
msgid ""
|
||||
"Specifies an upstream network `<interface>` from which replies from "
|
||||
"`<server>` and other relay agents will be accepted."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:129
|
||||
#: 6649ac8820aa492da3f58cc2a2c99bbd
|
||||
msgid "Set maximum hop count before packets are discarded, default: 10"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:133
|
||||
#: 3b63645067ad4e9cb1eb51d6b86160b8
|
||||
msgid ""
|
||||
"If this is set the relay agent will insert the interface ID. This option is "
|
||||
"set automatically if more than one listening interfaces are in use."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:141
|
||||
#: f8e63021779e4ba2ad4b1d780b5f9228
|
||||
msgid ""
|
||||
"DHCPv6 requests are received by the router on `listening interface` ``eth1``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:142
|
||||
#: 28abea8369a0485180a40a9cf65b362e
|
||||
msgid "Requests are forwarded through ``eth2`` as the `upstream interface`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:143
|
||||
#: a36d2237ec744efcabaf3475aef738ad
|
||||
msgid "External DHCPv6 server is at 2001:db8::4"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:149
|
||||
#: ../../configuration/service/dhcp-relay.rst:149
|
||||
#: 8d853fe3edbe47eea6da44c9399fb8d1 e138778511f541cfafe828f039c73760
|
||||
msgid "DHCPv6 relay example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dhcp-relay.rst:170
|
||||
#: 1a07b1d064fe424fb48791a0440f7775
|
||||
msgid "Restart DHCPv6 relay agent immediately."
|
||||
msgstr ""
|
||||
File diff suppressed because it is too large
Load Diff
@ -1,442 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/service/dns.rst:5 be0eccf16c3e4744beef004bbf6066ab
|
||||
msgid "DNS Forwarding"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:8
|
||||
#: ../../configuration/service/dns.rst:198 c3d1290f85a146b18b9fd6ab8513c24b
|
||||
#: e90845d6dcd14e20bba245cf44a8ed65
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:10 c1ba3fb5b0de47e091e555c3c59faea6
|
||||
msgid ""
|
||||
"VyOS provides DNS infrastructure for small networks. It is designed to be "
|
||||
"lightweight and have a small footprint, suitable for resource constrained "
|
||||
"routers and firewalls. For this we utilize PowerDNS recursor."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:14 ea7fb66c11cb49968d1b11288089abdd
|
||||
msgid ""
|
||||
"The VyOS DNS forwarder does not require an upstream DNS server. It can serve"
|
||||
" as a full recursive DNS server - but it can also forward queries to "
|
||||
"configurable upstream DNS servers. By not configuring any upstream DNS "
|
||||
"servers you also avoid being tracked by the provider of your upstream DNS "
|
||||
"server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:21 0ff64d30f92a492d96609709622a4dc1
|
||||
msgid ""
|
||||
"Forward incoming DNS queries to the DNS servers configured under the "
|
||||
"``system name-server`` nodes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:26 87c71c49e60f442ab14fd2a108415c5e
|
||||
msgid ""
|
||||
"Send all DNS queries to the IPv4/IPv6 DNS server specified under "
|
||||
"`<address>`. You can configure multiple nameservers here."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:31 d82ce4936b5a4076bd4193d1c9995cb3
|
||||
msgid ""
|
||||
"Forward received queries for a particular domain (specified via `domain-"
|
||||
"name`) to a given nameserver. Multiple nameservers can be specified. You can"
|
||||
" use this feature for a DNS split-horizon configuration."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:36 81c277220d654aa5bc6230e75eca6413
|
||||
msgid "This also works for reverse-lookup zones (``18.172.in-addr.arpa``)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:40 a84fecf9c7b34628b2fe851f21c6353b
|
||||
msgid ""
|
||||
"Given the fact that open DNS recursors could be used on DDoS amplification "
|
||||
"attacks, you must configure the networks which are allowed to use this "
|
||||
"recursor. A network of ``0.0.0.0/0`` or ``::/0`` would allow all IPv4 and "
|
||||
"IPv6 networks to query this server. This is generally a bad idea."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:48 17494ac035324244983b6cee7001784d
|
||||
msgid ""
|
||||
"The PowerDNS recursor has 5 different levels of DNSSEC processing, which can"
|
||||
" be set with the dnssec setting. In order from least to most processing, "
|
||||
"these are:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:52 66636a78b5c943b78fd7c88054828797
|
||||
msgid ""
|
||||
"**off** In this mode, no DNSSEC processing takes place. The recursor will "
|
||||
"not set the DNSSEC OK (DO) bit in the outgoing queries and will ignore the "
|
||||
"DO and AD bits in queries."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:56 2e51660c883c472c9e94b03a4f91e837
|
||||
msgid ""
|
||||
"**process-no-validate** In this mode the recursor acts as a \"security "
|
||||
"aware, non-validating\" nameserver, meaning it will set the DO-bit on "
|
||||
"outgoing queries and will provide DNSSEC related RRsets (NSEC, RRSIG) to "
|
||||
"clients that ask for them (by means of a DO-bit in the query), except for "
|
||||
"zones provided through the auth-zones setting. It will not do any validation"
|
||||
" in this mode, not even when requested by the client."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:63 086dce77e4be401887e3ca38fdb91236
|
||||
msgid ""
|
||||
"**process** When dnssec is set to process the behavior is similar to "
|
||||
"process-no-validate. However, the recursor will try to validate the data if "
|
||||
"at least one of the DO or AD bits is set in the query; in that case, it will"
|
||||
" set the AD-bit in the response when the data is validated successfully, or "
|
||||
"send SERVFAIL when the validation comes up bogus."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:69 4b7e5a1ded8c4c00ac5260cab7a9f087
|
||||
msgid ""
|
||||
"**log-fail** In this mode, the recursor will attempt to validate all data it"
|
||||
" retrieves from authoritative servers, regardless of the client's DNSSEC "
|
||||
"desires, and will log the validation result. This mode can be used to "
|
||||
"determine the extra load and amount of possibly bogus answers before turning"
|
||||
" on full-blown validation. Responses to client queries are the same as with "
|
||||
"process."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:76 f69f068934044a058c059243af30b7e1
|
||||
msgid ""
|
||||
"**validate** The highest mode of DNSSEC processing. In this mode, all "
|
||||
"queries will be validated and will be answered with a SERVFAIL in case of "
|
||||
"bogus data, regardless of the client's request."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:80 701f22b454ba403e8117ac693f793279
|
||||
msgid ""
|
||||
"The popular Unix/Linux ``dig`` tool sets the AD-bit in the query. This might"
|
||||
" lead to unexpected query results when testing. Set ``+noad`` on the ``dig``"
|
||||
" command line when this is the case."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:84 427795b5dc2d48ffbd30cf747d0662cc
|
||||
msgid ""
|
||||
"The ``CD``-bit is honored correctly for process and validate. For log-fail, "
|
||||
"failures will be logged too."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:89 8a5cce7228ff4a01b9ebe080d09b3358
|
||||
msgid ""
|
||||
"Do not use the local ``/etc/hosts`` file in name resolution. VyOS DHCP "
|
||||
"server will use this file to add resolvers to assigned addresses."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:94 132f8475ff504a5484d67e003722b96c
|
||||
msgid ""
|
||||
"Maximum number of DNS cache entries. 1 million per CPU core will generally "
|
||||
"suffice for most installations."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:97 5cad4345461c4b63ab0c1b4c614a3673
|
||||
msgid "This defaults to 10000."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:101 e995cca58c6344f69f9387c288eff0f0
|
||||
msgid ""
|
||||
"A query for which there is authoritatively no answer is cached to quickly "
|
||||
"deny a record's existence later on, without putting a heavy load on the "
|
||||
"remote server. In practice, caches can become saturated with hundreds of "
|
||||
"thousands of hosts which are tried only once."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:106 2a2adc3cfd5947e4adb0e90a579b1e25
|
||||
msgid ""
|
||||
"This setting, which defaults to 3600 seconds, puts a maximum on the amount "
|
||||
"of time negative entries are cached."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:111 5c7b57b10b0041d0937ec30cae1b3ed0
|
||||
msgid ""
|
||||
"The number of milliseconds to wait for a remote authoritative server to "
|
||||
"respond before timing out and responding with SERVFAIL."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:114 a54b3cb2b3164d95ac4d56d0f1df5837
|
||||
msgid "This setting defaults to 1500 and is valid between 10 and 60000."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:118 276ffb6dd4364b5b93cd944a438ab2e7
|
||||
msgid ""
|
||||
"The local IPv4 or IPv6 addresses to bind the DNS forwarder to. The forwarder"
|
||||
" will listen on this address for incoming connections."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:123 3bf5aa9483ad40f789a2edd621eaa318
|
||||
msgid ""
|
||||
"The local IPv4 or IPv6 addresses to use as a source address for sending "
|
||||
"queries. The forwarder will send forwarded outbound DNS requests from this "
|
||||
"address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:128 24dc8673dab0466f8a2b359ee3dfeb6a
|
||||
msgid ""
|
||||
"This makes the server authoritatively not aware of: 10.in-addr.arpa, "
|
||||
"168.192.in-addr.arpa, 16-31.172.in-addr.arpa, which enabling upstream DNS "
|
||||
"server(s) to be used for reverse lookups of these zones."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:133
|
||||
#: ../../configuration/service/dns.rst:241 8a465b2de4e3439fb39c6ee29d0c67ca
|
||||
#: 54967759465148769f69a36795804bab
|
||||
msgid "Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:135 d6029af4910c4ea7b3716931cfd6475d
|
||||
msgid ""
|
||||
"A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required "
|
||||
"to implement a split-horizon DNS configuration for example.com."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:138 afc692c11c38469bafc20efe4b623ece
|
||||
msgid "In this scenario:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:140 81cc16add0a944a4a760c1e9a4ae8fba
|
||||
msgid ""
|
||||
"All DNS requests for example.com must be forwarded to a DNS server at "
|
||||
"192.0.2.254 and 2001:db8:cafe::1"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:142 2c8239d1ac3146b2a1ea1a5f4c3c169b
|
||||
msgid ""
|
||||
"All other DNS requests will be forwarded to a different set of DNS servers "
|
||||
"at 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:144 1fa1ae10d0974f59840c4401ac60fe9f
|
||||
msgid ""
|
||||
"The VyOS DNS forwarder will only listen for requests on the eth1 (LAN) "
|
||||
"interface addresses - 192.168.1.254 for IPv4 and 2001:db8::ffff for IPv6"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:146 ccb222184c96479fb436d1673e318cb5
|
||||
msgid ""
|
||||
"The VyOS DNS forwarder will only accept lookup requests from the LAN subnets"
|
||||
" - 192.168.1.0/24 and 2001:db8::/64"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:148 5f0224105a344c6882e7317eae29f696
|
||||
msgid ""
|
||||
"The VyOS DNS forwarder will pass reverse lookups for 10.in-addr.arpa, "
|
||||
"168.192.in-addr.arpa, 16-31.172.in-addr.arpa zones to upstream server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:166 4c19d32a1cc94749852143556d10ef69
|
||||
msgid "Operation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:170 f9fc8cbce0ba4f5283cf683b6b0e6636
|
||||
msgid ""
|
||||
"Resets the local DNS forwarding cache database. You can reset the cache for "
|
||||
"all entries or only for entries to a specific domain."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:175 7769c597a8b04ee19bdda039a9a0f6f5
|
||||
msgid ""
|
||||
"Restarts the DNS recursor process. This also invalidates the local DNS "
|
||||
"forwarding cache."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:183 b7d2faafe04e42c5b88c7a8213c3570e
|
||||
msgid "Dynamic DNS"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:185 3dd121adbeba4147957d0affee0993f1
|
||||
msgid ""
|
||||
"VyOS is able to update a remote DNS record when an interface gets a new IP "
|
||||
"address. In order to do so, VyOS includes ddclient_, a Perl script written "
|
||||
"for this only one purpose."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:189 12bac9daf5484d728534e7b653f2ed13
|
||||
msgid ""
|
||||
"ddclient_ uses two methods to update a DNS record. The first one will send "
|
||||
"updates directly to the DNS daemon, in compliance with :rfc:`2136`. The "
|
||||
"second one involves a third party service, like DynDNS.com or any other "
|
||||
"similar website. This method uses HTTP requests to transmit the new IP "
|
||||
"address. You can configure both in VyOS."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:201 beef4ce428cd41f1bc0fae615f3f26d3
|
||||
msgid ":rfc:`2136` Based"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:205 0185af3d408846608e45ec22c9c74b90
|
||||
msgid ""
|
||||
"Create new :rfc:`2136` DNS update configuration which will update the IP "
|
||||
"address assigned to `<interface>` on the service you configured under "
|
||||
"`<service-name>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:212 00dfe4a3fddb4e98aae958d219e8fdfd
|
||||
msgid ""
|
||||
"File identified by `<keyfile>` containing the secret RNDC key shared with "
|
||||
"remote DNS server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:218 075300679d594348a07dd38cbd39964b
|
||||
msgid ""
|
||||
"Configure the DNS `<server>` IP/FQDN used when updating this dynamic "
|
||||
"assignment."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:224 2e52bc4fff424997a8b709646f46529b
|
||||
msgid "Configure DNS `<zone>` to be updated."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:229 d1d04cf94032406890a9a3b1e5d36c30
|
||||
msgid ""
|
||||
"Configure DNS `<record>` which should be updated. This can be set multiple "
|
||||
"times."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:235 471a9111d60e488ba34b8aeb5537ffdf
|
||||
msgid ""
|
||||
"Configure optional TTL value on the given resource record. This defaults to "
|
||||
"600 seconds."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:243 df5e0158331d4ac88d9c58417d474c5e
|
||||
msgid "Register DNS record ``example.vyos.io`` on DNS server ``ns1.vyos.io``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:244 8ae003c2e37f4e728ca6a65c9ec41cb0
|
||||
msgid "Use auth key file at ``/config/auth/my.key``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:245 2f01cbf85387415492dffdbe6688046f
|
||||
msgid "Set TTL to 300 seconds"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:260 166b6d697d3349919a25740eb94f37ed
|
||||
msgid "This will render the following ddclient_ configuration entry:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:277 040885ae0dec4529b7d5d90e7de39470
|
||||
msgid ""
|
||||
"You can also keep different DNS zone updated. Just create a new config node:"
|
||||
" ``set service dns dynamic interface <interface> rfc2136 <other-service-"
|
||||
"name>``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:282 ebf98747db064c8492f7d677c78f6929
|
||||
msgid "HTTP based services"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:284 c67d37cc72744b8b9f058e5413707edb
|
||||
msgid ""
|
||||
"VyOS is also able to use any service relying on protocols supported by "
|
||||
"ddclient."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:286 a8468184edef4dfc8bd68523b342eaf4
|
||||
msgid ""
|
||||
"To use such a service, one must define a login, password, one or multiple "
|
||||
"hostnames, protocol and server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:292 da38549569e44fca90e1e2e8d71a9396
|
||||
msgid ""
|
||||
"Setup the dynamic DNS hostname `<hostname>` associated with the DynDNS "
|
||||
"provider identified by `<service>` when the IP address on interface "
|
||||
"`<interface>` changes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:299 531f541a9bb34ecc9f7db81fe4b7ee02
|
||||
msgid ""
|
||||
"Configure `<username>` used when authenticating the update request for "
|
||||
"DynDNS service identified by `<service>`. For Namecheap, set the <domain> "
|
||||
"you wish to update."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:306 0dad594d75284193a92bfbd3c89184a5
|
||||
msgid ""
|
||||
"Configure `<password>` used when authenticating the update request for "
|
||||
"DynDNS service identified by `<service>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:312 112f3acfe28f47cebafd0e625fa7122a
|
||||
msgid ""
|
||||
"When a ``custom`` DynDNS provider is used the protocol used for "
|
||||
"communicating to the provider must be specified under `<protocol>`. See the "
|
||||
"embedded completion helper for available protocols."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:319 f55b99280f6b4eba9889a6fd4ae4233c
|
||||
msgid ""
|
||||
"When a ``custom`` DynDNS provider is used the `<server>` where update "
|
||||
"requests are being sent to must be specified."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:324 68fac9ba0f3b4f53be712ae9cf855ccf
|
||||
msgid "Allow explicit IPv6 address for the interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:328 33a460af02ec472f946e09806b27f461
|
||||
msgid "Example:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:330 4b007fab9b8a4012985f03f86145ffcf
|
||||
msgid "Use DynDNS as your preferred provider:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:339 84cdbb65e6dc4a85a4118bc232b5a2ea
|
||||
msgid ""
|
||||
"Multiple services can be used per interface. Just specify as many services "
|
||||
"per interface as you like!"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:343 5052224efcbf4bfd8a69f7c2db923f1c
|
||||
msgid "Example IPv6 only:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:356 2f80ddda6c5a4e8aa2a0bc2826160948
|
||||
msgid "Running Behind NAT"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:358 38fc44bb48d64fa49b91f819500f8411
|
||||
msgid ""
|
||||
"By default, ddclient_ will update a dynamic dns record using the IP address "
|
||||
"directly attached to the interface. If your VyOS instance is behind NAT, "
|
||||
"your record will be updated to point to your internal IP."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:362 33a4b35a1468486184426de88b8662cb
|
||||
msgid ""
|
||||
"ddclient_ has another way to determine the WAN IP address. This is "
|
||||
"controlled by:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:367 9096e4ab42264ba5b6216b5f8fe2db23
|
||||
msgid ""
|
||||
"Use configured `<url>` to determine your IP address. ddclient_ will load "
|
||||
"`<url>` and tries to extract your IP address from the response."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/dns.rst:372 786fc7bbabd1405bb33028a77a4bb148
|
||||
msgid ""
|
||||
"ddclient_ will skip any address located before the string set in "
|
||||
"`<pattern>`."
|
||||
msgstr ""
|
||||
@ -1,165 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:5
|
||||
#: d2144e6a1eb24783a4118338afff1d2f
|
||||
msgid "Event Handler"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:9
|
||||
#: 979573eacaab46ba83f06a4908a214e8
|
||||
msgid "Event Handler Technology Overview"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:11
|
||||
#: 6970ce32aad54a07935ce20ac3971d00
|
||||
msgid ""
|
||||
"Event handler allows you to execute scripts when a string that matches a "
|
||||
"regex or a regex with a service name appears in journald logs. You can pass "
|
||||
"variables, arguments, and a full matching string to the script."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:17
|
||||
#: 7f593868fab047028eb13b1a498cb2c9
|
||||
msgid "How to configure Event Handler"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:19
|
||||
#: fcbb47f848994a879a9676acf45fe90f
|
||||
msgid "`1. Create an event handler`_"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:21
|
||||
#: 4f27c363c42d4def88f33c7425e0be83
|
||||
msgid "`2. Add regex to the script`_"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:23
|
||||
#: 484cc3d92219402b8402924350658762
|
||||
msgid "`3. Add a full path to the script`_"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:25
|
||||
#: 014aed73eeb747bab332bf551cce2a95
|
||||
msgid "`4. Add optional parameters`_"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:29
|
||||
#: b51d8f8b56c249ab8d1502e997a8cb1d
|
||||
msgid "Event Handler Configuration Steps"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:32
|
||||
#: e7b303d8fa434dccb27f4026bcda1f66
|
||||
msgid "1. Create an event handler"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:36
|
||||
#: 3c0f3a0ccebf4c6786f1a410ae008f93
|
||||
msgid ""
|
||||
"This is an optional command because the event handler will be automatically "
|
||||
"created after any of the next commands."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:40
|
||||
#: 47b2f6e1e8cd4d8b85c7570fdd8b9326
|
||||
msgid "2. Add regex to the script"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:44
|
||||
#: 7ff6fcee218446488fe3ddc71cf9fd64
|
||||
msgid ""
|
||||
"This is a mandatory command. Sets regular expression to match against log "
|
||||
"string message."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:46
|
||||
#: 98be815d60404249a925a77e47294aa5
|
||||
msgid ""
|
||||
"The regular expression matches if and only if the entire string matches the "
|
||||
"pattern."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:51
|
||||
#: e07b0382161d4d08afdd3ed26c23ffd1
|
||||
msgid "3. Add a full path to the script"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:55
|
||||
#: 89698b6769ce446aa5bc296e302d048e
|
||||
msgid ""
|
||||
"This is a mandatory command. Sets the full path to the script. The script "
|
||||
"file must be executable."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:60
|
||||
#: 0ade4da86ca345b19377fb62edda4df2
|
||||
msgid "4. Add optional parameters"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:64
|
||||
#: bdb4921f90d74fba9a7d7839208c7c3d
|
||||
msgid ""
|
||||
"This is an optional command. Filters log messages by syslog-identifier."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:68
|
||||
#: e3980d34d386476fa74a4a5dce3ddb79
|
||||
msgid ""
|
||||
"This is an optional command. Adds environment and its value to the script. "
|
||||
"Use separate commands for each environment."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:70
|
||||
#: dad9affa614246c3af3c9924febb0a9a
|
||||
msgid "One implicit environment exists."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:72
|
||||
#: 833768ef67264f23902e3481fc3695a0
|
||||
msgid "``message``: Full message that has triggered the script."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:76
|
||||
#: 76523eafdd644d6ebec41aa58164da17
|
||||
msgid ""
|
||||
"This is an optional command. Adds arguments to the script. Arguments must be"
|
||||
" separated by spaces."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:78
|
||||
#: b913e33cf397425bb879ae10c5a4b2d1
|
||||
msgid ""
|
||||
"We don't recomend to use arguments. Using environments is more preffereble."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:83
|
||||
#: 00ec965cf5574110909e47d79675c910
|
||||
msgid "Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:85
|
||||
#: f6d6849c042d4e118193b3db04e818cb
|
||||
msgid "Event handler that monitors the state of interface eth0."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/eventhandler.rst:95
|
||||
#: c7ce652b2f6748b5aa8888ba31b74554
|
||||
msgid "Event handler script"
|
||||
msgstr ""
|
||||
@ -1,108 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/service/https.rst:5 6eb9ab75144b4244a9bc9a0153d710b9
|
||||
msgid "HTTP-API"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/https.rst:7 4aed16aabc2943d3aa001087589cd324
|
||||
msgid ""
|
||||
"VyOS provide an HTTP API. You can use it to execute op-mode commands, update"
|
||||
" VyOS, set or delete config."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/https.rst:10 23a386981be74e158019d492fe4c2712
|
||||
msgid "Please take a look at the :ref:`vyosapi` page for an detailed how-to."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/https.rst:14 fd48243e3cd04d9591ab4d2c06eace3d
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/https.rst:18 b46f423b568742b582ed2c5255ecd3e1
|
||||
msgid ""
|
||||
"Set a named api key. Every key has the same, full permissions on the system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/https.rst:23 8045fca770c04af4b68e2b301d52ef18
|
||||
msgid ""
|
||||
"To enable debug messages. Available via :opcmd:`show log` or :opcmd:`monitor"
|
||||
" log`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/https.rst:28 ff468101dcd048eda92c63a3a67cb86c
|
||||
msgid ""
|
||||
"Set the listen port of the local API, this has no effect on the webserver. "
|
||||
"The default is port 8080"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/https.rst:33 ba56034a469141e99d28b1ed23dc7473
|
||||
msgid "Use local socket for API"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/https.rst:37 a0bc5d08eb484d269ddafbad4e374733
|
||||
msgid "Enforce strict path checking"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/https.rst:42 6c7faa808c054a14a7326095a3ce2adc
|
||||
msgid "Address to listen for HTTPS requests"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/https.rst:46 20b318a1c3da40e1a65b8bb0d5dfa101
|
||||
msgid "Port to listen for HTTPS requests; default 443"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/https.rst:50 ac21ead2e06c4516b178ab121a52bf90
|
||||
msgid "Server names for virtual hosts it can be exact, wildcard or regex."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/https.rst:54 96e4c14fde8e483897a44682e26174c3
|
||||
msgid ""
|
||||
"By default, nginx exposes the local API on all virtual servers. Use this to "
|
||||
"restrict nginx to one or more virtual hosts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/https.rst:59 0e1b082bb57e4c279ef9359c95419bfa
|
||||
msgid "Domain name(s) for which to obtain certificate"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/https.rst:63 1be030c1f4604be8a7fb7ffae1d7113c
|
||||
msgid "Email address to associate with certificate"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/https.rst:67 5f41c2c1ce804065bb25e08227e01296
|
||||
msgid "Use an automatically generated self-signed certificate"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/https.rst:72 e75aef2259d545a8bd27ee318b3c9a41
|
||||
msgid "Lifetime in days; default is 365"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/https.rst:77 6992a5a7b7ad4dd6adb9fe28f2516492
|
||||
msgid "Example Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/https.rst:79 c988f3ba4e7746b2874ea771682811fc
|
||||
msgid ""
|
||||
"Set an API-KEY is the minimal configuration to get a working API Endpoint."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/https.rst:86 5a9df4d2dd7744ed91aaa368e13d465b
|
||||
msgid "To use this full configuration we asume a public accessible hostname."
|
||||
msgstr ""
|
||||
@ -1,22 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/service/index.rst:3 00c32a14ce5e43d3b3403f90a3ae4e18
|
||||
msgid "Service"
|
||||
msgstr ""
|
||||
@ -1,171 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../_include/need_improvement.txt:11 8348fbf901bb4aa2a6c7da5bdf209b7b
|
||||
msgid "This section needs improvements, examples and explanations."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/need_improvement.txt:13 a300079c41c940848963b547888f40ba
|
||||
msgid ""
|
||||
"Please take a look at the Contributing Guide for our :ref:`documentation`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ipoe-server.rst:7
|
||||
#: 086088e28acb4a2b98974a5605d33897
|
||||
msgid "IPoE Server"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ipoe-server.rst:9
|
||||
#: 64cae27b1ad94e19b77b795448aafecc
|
||||
msgid ""
|
||||
"VyOS utilizes `accel-ppp`_ to provide :abbr:`IPoE (Internet Protocol over "
|
||||
"Ethernet)` server functionality. It can be used with local authentication "
|
||||
"(mac-address) or a connected RADIUS server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ipoe-server.rst:13
|
||||
#: 54cd75d957d643899b54eeaf83393401
|
||||
msgid ""
|
||||
"IPoE is a method of delivering an IP payload over an Ethernet-based access "
|
||||
"network or an access network using bridged Ethernet over Asynchronous "
|
||||
"Transfer Mode (ATM) without using PPPoE. It directly encapsulates the IP "
|
||||
"datagrams in Ethernet frames, using the standard :rfc:`894` encapsulation."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ipoe-server.rst:18
|
||||
#: 2b94604b3daa4b5db90c5479f373855e
|
||||
msgid ""
|
||||
"The use of IPoE addresses the disadvantage that PPP is unsuited for "
|
||||
"multicast delivery to multiple users. Typically, IPoE uses Dynamic Host "
|
||||
"Configuration Protocol and Extensible Authentication Protocol to provide the"
|
||||
" same functionality as PPPoE, but in a less robust manner."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ipoe-server.rst:23
|
||||
#: 4cb6e537be16442dbcad8f52798734ac
|
||||
msgid ""
|
||||
"Please be aware, due to an upstream bug, config changes/commits will restart"
|
||||
" the ppp daemon and will reset existing IPoE sessions, in order to become "
|
||||
"effective."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ipoe-server.rst:28
|
||||
#: f166f77cdbb64b2685742f4fca6c9d4f
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ipoe-server.rst:30
|
||||
#: 4085f66aa4ac4b048480b5e316685d85
|
||||
msgid ""
|
||||
"IPoE can be configure on different interfaces, it will depend on each "
|
||||
"specific situation which interface will provide IPoE to clients. The clients"
|
||||
" mac address and the incoming interface is being used as control parameter, "
|
||||
"to authenticate a client."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ipoe-server.rst:35
|
||||
#: 947c9232295b463b8071714d62638d68
|
||||
msgid ""
|
||||
"The example configuration below will assign an IP to the client on the "
|
||||
"incoming interface eth2 with the client mac address 08:00:27:2f:d8:06. Other"
|
||||
" DHCP discovery requests will be ignored, unless the client mac has been "
|
||||
"enabled in the configuration."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ipoe-server.rst:49
|
||||
#: cc1541e15d514ca8a4eba781a990731a
|
||||
msgid ""
|
||||
"The first address of the parameter ``client-subnet``, will be used as the "
|
||||
"default gateway. Connected sessions can be checked via the ``show ipoe-"
|
||||
"server sessions`` command."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ipoe-server.rst:63
|
||||
#: 262441ec84624c52af1b0e553876055b
|
||||
msgid "IPv6 SLAAC and IA-PD"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ipoe-server.rst:65
|
||||
#: 476e3aafcfc3445f90b123f57c668860
|
||||
msgid ""
|
||||
"To configure IPv6 assignments for clients, two options need to be "
|
||||
"configured. A global prefix which is terminated on the clients cpe and a "
|
||||
"delegated prefix, the client can use for devices routed via the clients cpe."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ipoe-server.rst:69
|
||||
#: a1390332b48649e0af25c379d3123a51
|
||||
msgid "IPv6 DNS addresses are optional."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ipoe-server.rst:90
|
||||
#: f12341dcb01e4ee1aebc335099d09062
|
||||
msgid ""
|
||||
"The clients :abbr:`CPE (Customer Premises Equipment)` can now communicate "
|
||||
"via IPv4 or IPv6. All devices behind ``2001:db8::a00:27ff:fe2f:d806/64`` can"
|
||||
" use addresses from ``2001:db8:1::/56`` and can globally communicate without"
|
||||
" the need of any NAT rules."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ipoe-server.rst:96
|
||||
#: 3dd3e5e99a3a429fbb14a39ed1b408b1
|
||||
msgid "Automatic VLAN creation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ipoe-server.rst:98
|
||||
#: 95e304ab498a48be968945d0b1473556
|
||||
msgid ""
|
||||
"To create VLANs per user during runtime, the following settings are required"
|
||||
" on a per interface basis. VLAN ID and VLAN range can be present in the "
|
||||
"configuration at the same time."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ipoe-server.rst:111
|
||||
#: 24fca7b795f745639ec2548d0a2a5f25
|
||||
msgid "RADIUS Setup"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ipoe-server.rst:113
|
||||
#: aef6b9d9916c4789b55104cc3f0de005
|
||||
msgid ""
|
||||
"To use a RADIUS server for authentication and bandwidth-shaping, the "
|
||||
"following example configuration can be used."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ipoe-server.rst:122
|
||||
#: d48bfc6944404961bc625fb8620e5b1b
|
||||
msgid "Bandwidth Shaping"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ipoe-server.rst:124
|
||||
#: a5c9eacd12ac43a18016de4b05bf4f8c
|
||||
msgid ""
|
||||
"Bandwidth rate limits can be set for local users within the configuration or"
|
||||
" via RADIUS based attributes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ipoe-server.rst:128
|
||||
#: f4a5664de23a4767819063a351f04edc
|
||||
msgid "Bandwidth Shaping for local users"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ipoe-server.rst:130
|
||||
#: b6aa0fdbfce5419191228b1c725623a2
|
||||
msgid "The rate-limit is set in kbit/sec."
|
||||
msgstr ""
|
||||
@ -1,153 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/service/lldp.rst:5 6f7052bec41f4735894ab71472565992
|
||||
msgid "LLDP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:7 ab82eb7134f84f359bfeb3d75d29547c
|
||||
msgid ""
|
||||
":abbr:`LLDP (Link Layer Discovery Protocol)` is a vendor-neutral link layer "
|
||||
"protocol in the Internet Protocol Suite used by network devices for "
|
||||
"advertising their identity, capabilities, and neighbors on an IEEE 802 local"
|
||||
" area network, principally wired Ethernet. The protocol is formally referred"
|
||||
" to by the IEEE as Station and Media Access Control Connectivity Discovery "
|
||||
"specified in IEEE 802.1AB and IEEE 802.3-2012 section 6 clause 79."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:14 7b66e09f651e4ba09cd0d30b182d6cd8
|
||||
msgid ""
|
||||
"LLDP performs functions similar to several proprietary protocols, such as "
|
||||
":abbr:`CDP (Cisco Discovery Protocol)`, :abbr:`FDP (Foundry Discovery "
|
||||
"Protocol)`, :abbr:`NDP (Nortel Discovery Protocol)` and :abbr:`LLTD (Link "
|
||||
"Layer Topology Discovery)`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:20 5b85b0f7807041d8ad435b3fb0ee21ba
|
||||
msgid ""
|
||||
"Information gathered with LLDP is stored in the device as a :abbr:`MIB "
|
||||
"(Management Information Database)` and can be queried with :abbr:`SNMP "
|
||||
"(Simple Network Management Protocol)` as specified in :rfc:`2922`. The "
|
||||
"topology of an LLDP-enabled network can be discovered by crawling the hosts "
|
||||
"and querying this database. Information that may be retrieved include:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:26 81b10f8d665d4665ba2147597b9755a1
|
||||
msgid "System Name and Description"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:27 f12327059af34dab97f315144c5597f5
|
||||
msgid "Port name and description"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:28 de721962e67b42fca18648b6afa28499
|
||||
msgid "VLAN name"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:29 3651d289a73c4f889eab514a076a891c
|
||||
msgid "IP management address"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:30 93b55fcddccd4e36881fc89e4e705fa8
|
||||
msgid "System capabilities (switching, routing, etc.)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:31 ec2c5125c2eb4bfe9c8322afdf8b6028
|
||||
msgid "MAC/PHY information"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:32 56495c461df3456298f3a83d0a2d90ca
|
||||
msgid "MDI power"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:33 1032a065d6444d3caac841d2893c4e1e
|
||||
msgid "Link aggregation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:36 5fe22852d4c849ae9ebd59bde7ba0dd5
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:40 e4765fd56b5544c2883f7783f6b32456
|
||||
msgid "Enable LLDP service"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:44 2043e229c59445fdb4ef9f2cbe8d0111
|
||||
msgid ""
|
||||
"Define IPv4/IPv6 management address transmitted via LLDP. Multiple addresses"
|
||||
" can be defined. Only addresses connected to the system will be transmitted."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:49 35aa51dad35345d49ce9ceae391ab182
|
||||
msgid ""
|
||||
"Enable transmission of LLDP information on given `<interface>`. You can also"
|
||||
" say ``all`` here so LLDP is turned on on every interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:54 72802aadfc444347b85e43bf68390488
|
||||
msgid ""
|
||||
"Disable transmit of LLDP frames on given `<interface>`. Useful to exclude "
|
||||
"certain interfaces from LLDP when ``all`` have been enabled."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:59 4a7f7e1d26b743b0a4c7eab899884e84
|
||||
msgid "Enable SNMP queries of the LLDP database"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:63 eeb07d0a54ba462aadf47a5c315b4056
|
||||
msgid ""
|
||||
"Enable given legacy protocol on this LLDP instance. Legacy protocols "
|
||||
"include:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:65 3e362554a74741d3b1e4cddaad2e737f
|
||||
msgid "``cdp`` - Listen for CDP for Cisco routers/switches"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:66 20fec6625c2c4e669d156a990845b652
|
||||
msgid "``edp`` - Listen for EDP for Extreme routers/switches"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:67 e5e5ab325e194cc3b7aaf905c78cda39
|
||||
msgid "``fdp`` - Listen for FDP for Foundry routers/switches"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:68 77b00bb648c14fc9b58cad7718d18554
|
||||
msgid "``sonmp`` - Listen for SONMP for Nortel routers/switches"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:71 d7ccb8993a1d43b3b80d0855b927a0b7
|
||||
msgid "Operation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:75 9c22ec2ef62f4ac3a201492073b7d2c5
|
||||
msgid "Displays information about all neighbors discovered via LLDP."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:91 d4dc7e4ecb874635803dd84dff2bfcac
|
||||
msgid "Get detailed information about LLDP neighbors."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:138 5de155e2ed5449ffa60185ed491c15b2
|
||||
msgid "Show LLDP neighbors connected via interface `<interface>`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/lldp.rst:142 d1857d308804459d8006d15245604980
|
||||
msgid "Used for troubleshooting."
|
||||
msgstr ""
|
||||
@ -1,76 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/service/mdns.rst:2 4bf3433679154e129eae42ac905a5d41
|
||||
msgid "mDNS Repeater"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/mdns.rst:4 c991751ed8be473dbb1c0665979edec8
|
||||
msgid ""
|
||||
"Starting with VyOS 1.2 a :abbr:`mDNS (Multicast DNS)` repeater functionality"
|
||||
" is provided. Additional information can be obtained from "
|
||||
"https://en.wikipedia.org/wiki/Multicast_DNS."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/mdns.rst:8 45c2a878be114df08e9e3fddb6c864e6
|
||||
msgid ""
|
||||
"Multicast DNS uses the 224.0.0.251 address, which is \"administratively "
|
||||
"scoped\" and does not leave the subnet. It retransmits mDNS packets from one"
|
||||
" interface to other interfaces. This enables support for e.g. Apple Airplay "
|
||||
"devices across multiple VLANs."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/mdns.rst:13 28390662706549e5a1c8a77a32e65453
|
||||
msgid ""
|
||||
"Since the mDNS protocol sends the AA records in the packet itself, the "
|
||||
"repeater does not need to forge the source address. Instead, the source "
|
||||
"address is of the interface that repeats the packet."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/mdns.rst:18 e92b0830be3f44d0b0fe2348d90ffa44
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/mdns.rst:22 321a9b123ab04c10b556addd6794da0a
|
||||
msgid ""
|
||||
"To enable mDNS repeater you need to configure at least two interfaces. To "
|
||||
"re-broadcast all incoming mDNS packets from any interface configured here to"
|
||||
" any other interface configured under this section."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/mdns.rst:28 9ea15eca40e5457792e23c59c5986804
|
||||
msgid ""
|
||||
"mDNS repeater can be temporarily disabled without deleting the service using"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/mdns.rst:30 38bfe80bba8a4f6abf2a07218e3b69ad
|
||||
msgid ""
|
||||
"You can not run this in a VRRP setup, if multiple mDNS repeaters are "
|
||||
"launched in a subnet you will experience the mDNS packet storm death!"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/mdns.rst:34 31e7121ee7f74015939c3193479429a2
|
||||
msgid "Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/mdns.rst:36 a3291b8ceaab42eeadb149752462904e
|
||||
msgid ""
|
||||
"To listen on both `eth0` and `eth1` mDNS packets and also repeat packets "
|
||||
"received on `eth0` to `eth1` (and vice-versa) use the following commands:"
|
||||
msgstr ""
|
||||
@ -1,192 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:2
|
||||
#: e706be124c4c4483ada8599d6c4cf60e
|
||||
msgid "Monitoring"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:5
|
||||
#: eb4901eb98004eb3a432e7ad902ea55f
|
||||
msgid "Azure-data-explorer"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:6
|
||||
#: fce461d1dc94438cb3748a66f2051cb6
|
||||
msgid "Telegraf output plugin azure-data-explorer_"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:10
|
||||
#: 79621ee0f9f945e49219bc940d93b94d
|
||||
msgid "Authentication application client-id."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:14
|
||||
#: 36416eda01e440509a26216ab9c41aef
|
||||
msgid "Authentication application client-secret."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:18
|
||||
#: 7270ccf8ffbd462e95e6c13a00591a9a
|
||||
msgid "Authentication application tenant-id"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:22
|
||||
#: d9d6587d5eb94ca9903be0920a8c0c68
|
||||
msgid "Remote databe name."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:26
|
||||
#: 341f908216374250aa56bb28347b5390
|
||||
msgid ""
|
||||
"Type of metrics grouping when push to Azure Data Explorer. The default is "
|
||||
"``table-per-metric``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:31
|
||||
#: 69c2405379af42a4b2a07f87f74f73a5
|
||||
msgid "Name of the single table Only if set group-metrics single-table."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:35
|
||||
#: 5a986befad944338b6b8ce9821424a4e
|
||||
msgid "Remote URL."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:38
|
||||
#: 5ee4b2b2eb8448b797c2d85c76316853
|
||||
msgid "Prometheus-client"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:39
|
||||
#: 6a5626e76c39416f9929b7e95e385baf
|
||||
msgid "Telegraf output plugin prometheus-client_"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:43
|
||||
#: e93429a097f0446bb0c07cadc9e060a3
|
||||
msgid "Output plugin Prometheus client"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:47
|
||||
#: 011f9b3bd5ae462a996e6292e6cf0c60
|
||||
msgid "Networks allowed to query this server"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:51
|
||||
#: ../../configuration/service/monitoring.rst:55
|
||||
#: f3083afa501b434495a28716ad69f8e3 b4c92d14498940e29ae4e670e7f135ae
|
||||
msgid "HTTP basic authentication username"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:59
|
||||
#: cc6f647640b745beb1f8520a77117f90
|
||||
msgid "Local IP addresses to listen on"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:63
|
||||
#: c2387ebb9b1147e8a536b1fe482b8823
|
||||
msgid "Metris version, the default is ``2``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:67
|
||||
#: 95eccd41ce4745d0807504e2966d6afa
|
||||
msgid "Port number used by connection, default is ``9273``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:69
|
||||
#: ../../configuration/service/monitoring.rst:98
|
||||
#: a9d8051100aa4daaaf7c1c09f599b503 55db67a44caa4767b8b0f91b28e5ea96
|
||||
msgid "Example:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:83
|
||||
#: f67780d57da64454b2967a02126fe990
|
||||
msgid "Splunk"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:84
|
||||
#: 60ddd8df2a1742e59f98549832bc0472
|
||||
msgid "Telegraf output plugin splunk_. HTTP Event Collector."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:88
|
||||
#: 5483fc179e7245b5986f76079ff5be90
|
||||
msgid "Use TLS but skip host validation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:92
|
||||
#: 64615075895942a0b7f2f653a68724cf
|
||||
msgid "Authorization token"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:96
|
||||
#: fa795a95b5284fd1a92c4db332d08cb0
|
||||
msgid "Remote URL to Splunk collector"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:107
|
||||
#: 290015ea98774e45a50982fdd5fbff6f
|
||||
msgid "Telegraf"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:108
|
||||
#: cac5d195b00c4bfbac74a8d9df4f3922
|
||||
msgid ""
|
||||
"Monitoring functionality with ``telegraf`` and ``InfluxDB 2`` is provided. "
|
||||
"Telegraf is the open source server agent to help you collect metrics, events"
|
||||
" and logs from your routers."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:114
|
||||
#: aad0e7c2a001484987a8e2d30ba87cdf
|
||||
msgid "Authentication organization name"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:118
|
||||
#: cabddf8317dc459eabd522a66a74959d
|
||||
msgid "Authentication token"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:122
|
||||
#: fcc9aaf52c284b618a05113d946f792b
|
||||
msgid "Remote ``InfluxDB`` bucket name"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:126
|
||||
#: 4f607da7d42d49e0b470f2f1c5ba5a80
|
||||
msgid "Remote port"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:130
|
||||
#: 4ba704b2d889441f9daaaf8bd927abdd
|
||||
msgid "Remote URL"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:134
|
||||
#: 17b3a7558ea144b693e60c7b53d3d688
|
||||
msgid "Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/monitoring.rst:136
|
||||
#: 4ab7d707bea44ad89b6db89d453925ea
|
||||
msgid ""
|
||||
"An example of a configuration that sends ``telegraf`` metrics to remote "
|
||||
"``InfluxDB 2``"
|
||||
msgstr ""
|
||||
@ -1,426 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:7
|
||||
#: bd4d7b254e25420f9567a85b10201bbc
|
||||
msgid "PPPoE Server"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:9
|
||||
#: 1f096fee1c05483cac964daa162c1add
|
||||
msgid ""
|
||||
"VyOS utilizes `accel-ppp`_ to provide PPPoE server functionality. It can be "
|
||||
"used with local authentication or a connected RADIUS server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:12
|
||||
#: ddf4a22b51d647c2877278be23425465
|
||||
msgid ""
|
||||
"Please be aware, due to an upstream bug, config changes/commits will restart"
|
||||
" the ppp daemon and will reset existing PPPoE connections from connected "
|
||||
"users, in order to become effective."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:17
|
||||
#: 51ccdf86226347e9938cdd96a39e5e59
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:21
|
||||
#: f6727c28711c4fb8b2be338b3366c867
|
||||
msgid "First steps"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:26
|
||||
#: 37d80555046c48dfbdc4a2d33c2fe867
|
||||
msgid ""
|
||||
"Use this command to set a name for this PPPoE-server access concentrator."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:31
|
||||
#: 431a1767e38a4a44851a0b002f35c612
|
||||
msgid ""
|
||||
"Use this command to define whether your PPPoE clients will locally "
|
||||
"authenticate in your VyOS system or in RADIUS server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:37
|
||||
#: 4618826179a64a689456e3a849c84da5
|
||||
msgid ""
|
||||
"Use this command to configure the username and the password of a locally "
|
||||
"configured user."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:42
|
||||
#: 54df79824215465b97a3587f20796dda
|
||||
msgid ""
|
||||
"Use this command to define the interface the PPPoE server will use to listen"
|
||||
" for PPPoE clients."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:47
|
||||
#: 627621d12d00412ea71a5b609c8f5906
|
||||
msgid "Use this command to configure the local gateway IP address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:51
|
||||
#: b1aa679466b34516b69eeb8f6693f93b
|
||||
msgid ""
|
||||
"Use this command to set the IPv4 or IPv6 address of every Doman Name Server "
|
||||
"you want to configure. They will be propagated to PPPoE clients."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:57
|
||||
#: b7a7d34a7b12485abd464df5d8e40a22
|
||||
msgid "Client Address Pools"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:59
|
||||
#: 9c18211f7b294f3a9da14afaf91341b4
|
||||
msgid ""
|
||||
"To automatically assign the client an IP address as tunnel endpoint, a "
|
||||
"client IP pool is needed. The source can be either RADIUS or a local subnet "
|
||||
"or IP range definition."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:63
|
||||
#: c891fe4f565942eeaf8c3398b7ae77ea
|
||||
msgid ""
|
||||
"Once the local tunnel endpoint ``set service pppoe-server gateway-address "
|
||||
"'10.1.1.2'`` has been defined, the client IP pool can be either defined as a"
|
||||
" range or as subnet using CIDR notation. If the CIDR notation is used, "
|
||||
"multiple subnets can be setup which are used sequentially."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:69
|
||||
#: 9cff7e48cc5d44c8afce5f00d9a73e97
|
||||
msgid "**Client IP address via IP range definition**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:73
|
||||
#: 4125b5060b2c42a99857774d2db48da5
|
||||
msgid ""
|
||||
"Use this command to define the first IP address of a pool of addresses to be"
|
||||
" given to PPPoE clients. It must be within a /24 subnet."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:79
|
||||
#: 0bf22b2beeaf46d48b4aab1cebc0cb2c
|
||||
msgid ""
|
||||
"Use this command to define the last IP address of a pool of addresses to be "
|
||||
"given to PPPoE clients. It must be within a /24 subnet."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:89
|
||||
#: 8b963fd4f6be44d9ac638d163f9ab6fe
|
||||
msgid "**Client IP subnets via CIDR notation**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:93
|
||||
#: e68c92a7ade342c7aa336f3732171593
|
||||
msgid ""
|
||||
"Use this command for every pool of client IP addresses you want to define. "
|
||||
"The addresses of this pool will be given to PPPoE clients. You must use CIDR"
|
||||
" notation and it must be within a /24 subnet."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:104
|
||||
#: 6a43b9085cbb4e1a844d31cfca055247
|
||||
msgid "**RADIUS based IP pools (Framed-IP-Address)**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:106
|
||||
#: e936dfd7560c4f00b9cf25eec7f3a893
|
||||
msgid ""
|
||||
"To use a radius server, you need to switch to authentication mode RADIUS and"
|
||||
" then configure it."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:112
|
||||
#: 3c70d01251604aff85a7a5568bb4d593
|
||||
msgid ""
|
||||
"Use this command to configure the IP address and the shared secret key of "
|
||||
"your RADIUS server. You can have multiple RADIUS servers configured if you "
|
||||
"wish to achieve redundancy."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:125
|
||||
#: bc1f5baea6464236ba1bfac2fb1ee793
|
||||
msgid ""
|
||||
"RADIUS provides the IP addresses in the example above via Framed-IP-Address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:128
|
||||
#: 522802d9dbcd4472a4cb45fb843af1cf
|
||||
msgid "**RADIUS sessions management DM/CoA**"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:133
|
||||
#: 3b170c81c0284d7eae376486835cbb51
|
||||
msgid ""
|
||||
"Use this command to configure Dynamic Authorization Extensions to RADIUS so "
|
||||
"that you can remotely disconnect sessions and change some authentication "
|
||||
"parameters."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:144
|
||||
#: 212be848deb747488fbee0437ed911d5
|
||||
msgid ""
|
||||
"Example, from radius-server send command for disconnect client with username"
|
||||
" test"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:152
|
||||
#: c3a78625fb6b4ca08e89e45f260e3cc6
|
||||
msgid ""
|
||||
"You can also use another attributes for identify client for disconnect, like"
|
||||
" Framed-IP-Address, Acct-Session-Id, etc. Result commands appears in log."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:160
|
||||
#: 58b2c7a3541b42bc8abe05c7c23531b3
|
||||
msgid "Example for changing rate-limit via RADIUS CoA."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:167
|
||||
#: 7746ca8b40b74517a8578392ba751302
|
||||
msgid ""
|
||||
"Filter-Id=5000/4000 (means 5000Kbit down-stream rate and 4000Kbit up-stream "
|
||||
"rate) If attribute Filter-Id redefined, replace it in RADIUS CoA request."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:172
|
||||
#: 8fb25cb773b94ffe8d5d7eb042112abb
|
||||
msgid "Automatic VLAN Creation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:176
|
||||
#: f8531ffe21cc494ead3a89922b4cf226
|
||||
msgid ""
|
||||
"VLAN's can be created by Accel-ppp on the fly via the use of a Kernel module"
|
||||
" named `vlan_mon`, which is monitoring incoming vlans and creates the "
|
||||
"necessary VLAN if required and allowed. VyOS supports the use of either VLAN"
|
||||
" ID's or entire ranges, both values can be defined at the same time for an "
|
||||
"interface."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:182
|
||||
#: 2fd0552f629249aab1d76750c2a26ad2
|
||||
msgid ""
|
||||
"When configured, PPPoE will create the necessary VLANs when required. Once "
|
||||
"the user session has been cancelled and the VLAN is not needed anymore, VyOS"
|
||||
" will remove it again."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:195
|
||||
#: ea28c6401e6648a2950277ab51090d15
|
||||
msgid "Bandwidth Shaping"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:197
|
||||
#: 6837b6af85094aefb8acf3ba8dfaad5e
|
||||
msgid ""
|
||||
"Bandwidth rate limits can be set for local users or RADIUS based attributes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:201
|
||||
#: 4bac457147f24185897daa120a4e9857
|
||||
msgid "For Local Users"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:206
|
||||
#: 1735c3ab4e504450916a807c4cd777be
|
||||
msgid ""
|
||||
"Use this command to configure a data-rate limit to PPPOoE clients for "
|
||||
"traffic download or upload. The rate-limit is set in kbit/sec."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:224
|
||||
#: 0a054c60aa404ddda536bd30694a15fb
|
||||
msgid ""
|
||||
"Once the user is connected, the user session is using the set limits and can"
|
||||
" be displayed via 'show pppoe-server sessions'."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:236
|
||||
#: a7098570e5fa440bb94fe42a94bf09a1
|
||||
msgid "For RADIUS users"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:238
|
||||
#: 202f9e5a8ad14a00af54b0ac1648e6a0
|
||||
msgid ""
|
||||
"The current attribute 'Filter-Id' is being used as default and can be setup "
|
||||
"within RADIUS:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:241
|
||||
#: d4723ab73e23403b8e16f9a5ea28ba3c
|
||||
msgid ""
|
||||
"Filter-Id=2000/3000 (means 2000Kbit down-stream rate and 3000Kbit up-stream "
|
||||
"rate)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:244
|
||||
#: e0dc050deee849bca619c7aacc819c96
|
||||
msgid ""
|
||||
"The command below enables it, assuming the RADIUS connection has been setup "
|
||||
"and is working."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:249
|
||||
#: 8a1e75df596f49c1a7a5c011a8668496
|
||||
msgid "Use this command to enable bandwidth shaping via RADIUS."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:251
|
||||
#: a71ecadbcb2e497f90cf7f5af7a74b80
|
||||
msgid ""
|
||||
"Other attributes can be used, but they have to be in one of the dictionaries"
|
||||
" in */usr/share/accel-ppp/radius*."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:256
|
||||
#: fff40866a2ca4541bf0fa129faee9bab
|
||||
msgid "Load Balancing"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:262
|
||||
#: 4e6f9a5bdb1343569753489ab0d9cbd0
|
||||
msgid ""
|
||||
"Use this command to enable the delay of PADO (PPPoE Active Discovery Offer) "
|
||||
"packets, which can be used as a session balancing mechanism with other PPPoE"
|
||||
" servers."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:272
|
||||
#: 603e61889f264b18a42b74d411084fba
|
||||
msgid ""
|
||||
"In the example above, the first 499 sessions connect without delay. PADO "
|
||||
"packets will be delayed 50 ms for connection from 500 to 999, this trick "
|
||||
"allows other PPPoE servers send PADO faster and clients will connect to "
|
||||
"other servers. Last command says that this PPPoE server can serve only 3000 "
|
||||
"clients."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:280
|
||||
#: 984c71bb30c7441ab6db36527350a0b9
|
||||
msgid "IPv6"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:283
|
||||
#: b76b7c61b3594f8abe76e148b610c954
|
||||
msgid "IPv6 client's prefix assignment"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:288
|
||||
#: f627f07ffdee48a3839e5462350b4773
|
||||
msgid ""
|
||||
"Use this comand to set the IPv6 address pool from which a PPPoE client will "
|
||||
"get an IPv6 prefix of your defined length (mask) to terminate the PPPoE "
|
||||
"endpoint at their side. The mask length can be set from 48 to 128 bit long, "
|
||||
"the default value is 64."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:295
|
||||
#: b3a78b30ca4543309f3ed5b18c6d2951
|
||||
msgid "IPv6 Prefix Delegation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:300
|
||||
#: 913a8e925c09468c80f891ef734e75d9
|
||||
msgid ""
|
||||
"Use this command to configure DHCPv6 Prefix Delegation (RFC3633). You will "
|
||||
"have to set your IPv6 pool and the length of the delegation prefix. From the"
|
||||
" defined IPv6 pool you will be handing out networks of the defined length "
|
||||
"(delegation-prefix). The length of the delegation prefix can be set from 32 "
|
||||
"to 64 bit long."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:308
|
||||
#: a73c4a1a586040cfbe09db70ba1f771d
|
||||
msgid "Maintenance mode"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:312
|
||||
#: 8743944ebe7b4c37b6b96da01099fd70
|
||||
msgid ""
|
||||
"For network maintenance, it's a good idea to direct users to a backup server"
|
||||
" so that the primary server can be safely taken out of service. It's "
|
||||
"possible to switch your PPPoE server to maintenance mode where it maintains "
|
||||
"already established connections, but refuses new connection attempts."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:320
|
||||
#: c16449111f2b4d06bbcd1a8c36edfb7c
|
||||
msgid "Checking connections"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:324
|
||||
#: 40bc5c5dcad944f68f8646a4308fb0c4
|
||||
msgid ""
|
||||
"Use this command to locally check the active sessions in the PPPoE server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:336
|
||||
#: e5a3d9a6fbb445ecad5c6301eb3e1cef
|
||||
msgid ""
|
||||
"Per default the user session is being replaced if a second authentication "
|
||||
"request succeeds. Such session requests can be either denied or allowed "
|
||||
"entirely, which would allow multiple sessions for a user in the latter case."
|
||||
" If it is denied, the second session is being rejected even if the "
|
||||
"authentication succeeds, the user has to terminate its first session and can"
|
||||
" then authentication again."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:356
|
||||
#: e2e19e088a2842718d649001d4fa28a0
|
||||
msgid "Examples"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:359
|
||||
#: 15eb830cb11144e38b3c5a2206f1bc85
|
||||
msgid "IPv4"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:361
|
||||
#: 97b7e11702eb496dbce0a5bfbc3912cb
|
||||
msgid ""
|
||||
"The example below uses ACN as access-concentrator name, assigns an address "
|
||||
"from the pool 10.1.1.100-111, terminates at the local endpoint 10.1.1.1 and "
|
||||
"serves requests only on eth1."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:380
|
||||
#: 1d1ed906d69f4652acde698114bf79ac
|
||||
msgid "Dual-Stack IPv4/IPv6 provisioning with Prefix Delegation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:382
|
||||
#: 33ef5d0b929d4d4c8f248315434a11ee
|
||||
msgid "The example below covers a dual-stack configuration via pppoe-server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/pppoe-server.rst:398
|
||||
#: 033c50652faf48468775948d77cda94e
|
||||
msgid ""
|
||||
"The client, once successfully authenticated, will receive an IPv4 and an "
|
||||
"IPv6 /64 address to terminate the pppoe endpoint on the client side and a "
|
||||
"/56 subnet for the clients internal use."
|
||||
msgstr ""
|
||||
@ -1,374 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:5
|
||||
#: 0ef10b50d09649b1934411939bead5bc
|
||||
msgid "Router Advertisements"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:7
|
||||
#: 6d817f4e5274468198036dc88aeac613
|
||||
msgid ""
|
||||
":abbr:`RAs (Router advertisements)` are described in "
|
||||
":rfc:`4861#section-4.6.2`. They are part of what is known as :abbr:`SLAAC "
|
||||
"(Stateless Address Autoconfiguration)`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:12
|
||||
#: abb664f2296249179965db376ed3875f
|
||||
msgid "Supported interface types:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:14
|
||||
#: 2802543c48d84cc58c0f5bd4e6f09d91
|
||||
msgid "bonding"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:15
|
||||
#: b15ce921054a42ab8c05dd73c95def90
|
||||
msgid "bridge"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:16
|
||||
#: 18e723d8e6ae4744b47d2f068d797120
|
||||
msgid "ethernet"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:17
|
||||
#: 34427b78a47440d4b2afb06dcb0ec8af
|
||||
msgid "l2tpv3"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:18
|
||||
#: 9fed4fcf05e149d8a18b09d69d029fab
|
||||
msgid "openvpn"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:19
|
||||
#: d649cbc695254308b76e51f9c36e142d
|
||||
msgid "pseudo-ethernet"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:20
|
||||
#: 8677df4e0d04491e83dbff2c7dd2c15f
|
||||
msgid "tunnel"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:21
|
||||
#: 34f3ee33128f47848db9887d5fd82e32
|
||||
msgid "vxlan"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:22
|
||||
#: 100ab9bf56a5450392c96579c8ba32f6
|
||||
msgid "wireguard"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:23
|
||||
#: f7729a45cf2d4b3384673322e6b6b99f
|
||||
msgid "wireless"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:24
|
||||
#: 58f96528ba7246b4ae40066874f2fdfd
|
||||
msgid "wirelessmodem"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:28
|
||||
#: 1b381e306213427c97ed933698a0ff71
|
||||
msgid "Enabling Advertisments"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: ae6ce5a72cd64b4eaae167f07afb4411
|
||||
msgid "Field"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 796a8b8306f744f48140ada3a170bf64
|
||||
msgid "VyOS Option"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: c4e2bcf7db9d4ba5a300cef420c701b4 d0bce4b9ba3a45b1872c55e96189819f
|
||||
msgid "Description"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: fd5a460187d64bf1aac160d677c007cd
|
||||
msgid "Cur Hop Limit"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 5d7bc99e32ac45f0b4db10ad1758da3d
|
||||
msgid "hop-limit"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: ccb83a8b9d78437b8346a6816b5ae6a5
|
||||
msgid "Hop count field of the outgoing RA packets"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 2633269240424422a961694fa873556e
|
||||
msgid "\"Managed address configuration\" flag"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 2a819e2e708c499aadef365ecab9c2fa
|
||||
msgid "managed-flag"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: d9ca9730db5c411dbf6c82ab19bef1b3
|
||||
msgid ""
|
||||
"Tell hosts to use the administered stateful protocol (i.e. DHCP) for "
|
||||
"autoconfiguration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 5fef1ac872504f13891b93ccfbbf987f
|
||||
msgid "\"Other configuration\" flag"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 7626bc314b754ca49863745e63c8d414
|
||||
msgid "other-config-flag"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: ed54dca08d364165963afc9606a87359
|
||||
msgid ""
|
||||
"Tell hosts to use the administered (stateful) protocol (i.e. DHCP) for "
|
||||
"autoconfiguration of other (non-address) information"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 0d4b743283914aa08eda7d934ce410b6
|
||||
msgid "MTU"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 87a1908f3a134bd2b3d5714a103b2252
|
||||
msgid "link-mtu"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 62c2cfb54c4341bf88d70943877f1ad3
|
||||
msgid "Link MTU value placed in RAs, exluded in RAs if unset"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 3a90e648c9bd4776bd02690f025faf6d
|
||||
msgid "Router Lifetime"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: d9369c5fe0744dc68f65bef4b87a6ef3
|
||||
msgid "default-lifetime"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 7f23860e61594c4c834805e8fc02f41e
|
||||
msgid "Lifetime associated with the default router in units of seconds"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: dff33d83b2614d449c9597fd51157681
|
||||
msgid "Reachable Time"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: b32bcad949cb471899ac7402773fb9f1
|
||||
msgid "reachable-time"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 827818796b98440584fad1f44ced8421
|
||||
msgid ""
|
||||
"Time, in milliseconds, that a node assumes a neighbor is reachable after "
|
||||
"having received a reachability confirmation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 6646f7a9009e4bd8b7dcbd41a1d8ff8f
|
||||
msgid "Retransmit Timer"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 90484658449e480e966c38cd42fe70aa
|
||||
msgid "retrans-timer"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 0fea090e73f241c59b5550d44efc1edf
|
||||
msgid ""
|
||||
"Time in milliseconds between retransmitted Neighbor Solicitation messages"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 3080e74da17c410bab107789910cc42c
|
||||
msgid "Default Router Preference"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: adf24795662643eb855dd8b61976bef7
|
||||
msgid "default-preference"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 221f6121d5e941569752b56dcc5105e9
|
||||
msgid "Preference associated with the default router"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: f6e52feb9b574e448c3f8463d8664d9d
|
||||
msgid "Interval"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: b970bfd7f34740cfad8c148f5db1da02
|
||||
msgid "interval"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 864137937cb44aaea74d2b1aecb59d94
|
||||
msgid "Min and max intervals between unsolicited multicast RAs"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 71b2b409722745e7a8275a841b3f835f
|
||||
msgid "DNSSL"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 50e9beba53234d41a140feff81631749
|
||||
msgid "dnssl"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 27f0315f43224fe690c20f5f1dc000ba
|
||||
msgid "DNS search list to advertise"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: c507b73f0db64be086a05c08f0933870
|
||||
msgid "Name Server"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: e89e74e81c844feea7f9743e5d77769a
|
||||
msgid "name-server"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: d48befc4a0e54de58570c3302202dee2
|
||||
msgid "Advertise DNS server per https://tools.ietf.org/html/rfc6106"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:54
|
||||
#: bd9131f8f85c4e8fb68b1c1f5cedbd81
|
||||
msgid "Advertising a Prefix"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 46005a0517e74a0a8fa2571089364d43
|
||||
msgid "VyOS Field"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 6cb98638000b42658591fc43d33495ba
|
||||
msgid "decrement-lifetime"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 4847cdb53a6a4dabbb7749c2f2278ff8
|
||||
msgid ""
|
||||
"Lifetime is decremented by the number of seconds since the last RA - use in "
|
||||
"conjunction with a DHCPv6-PD prefix"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: a9fb81bea8d4473fb7a6b49eafd13712
|
||||
msgid "deprecate-prefix"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 20503fd5fb7a4d4b9b5b71cdad4f1b7c
|
||||
msgid ""
|
||||
"Upon shutdown, this option will deprecate the prefix by announcing it in the"
|
||||
" shutdown RA"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: db903fb0a47947a0a8d5e75e5bdfa0ff
|
||||
msgid "no-autonomous-flag"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: c80ed9c76c93418d877d4933113c6739
|
||||
msgid "Prefix can not be used for stateless address auto-configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 1f2e0121b3c74487ba15bb347716a2c3
|
||||
msgid "no-on-link-flag"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 64e1124b0f014efc9fbf038a3af0b632
|
||||
msgid "Prefix can not be used for on-link determination"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 1ce3440969634606abb1791c4d328075
|
||||
msgid "preferred-lifetime"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 83079f15719e4b30bc0ab4a640f9321d
|
||||
msgid ""
|
||||
"Time in seconds that the prefix will remain preferred (default 4 hours)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 7920dcc8b5894884bd5e2be8dba4144e
|
||||
msgid "valid-lifetime"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:1
|
||||
#: 37ca37f336e74f85b35c318397bfab50
|
||||
msgid "Time in seconds that the prefix will remain valid (default: 30 days)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:74
|
||||
#: 87e3cc0a5be04315973cdb981df8f658
|
||||
msgid "Disabling Advertisements"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:76
|
||||
#: fbc1406cdc674ffbabd1704465c33591
|
||||
msgid "To disable advertisements without deleting the configuration:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/router-advert.rst:81
|
||||
#: cfe0367334a74a5da873b8b17f8793dc
|
||||
msgid "Example Configuration"
|
||||
msgstr ""
|
||||
@ -1,83 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/service/salt-minion.rst:5
|
||||
#: eedd2382b28f445499c48f7418f67c7a
|
||||
msgid "Salt-Minion"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/salt-minion.rst:7
|
||||
#: 97995c49ac2a461396473c93061a5715
|
||||
msgid ""
|
||||
"SaltStack_ is Python-based, open-source software for event-driven IT "
|
||||
"automation, remote task execution, and configuration management. Supporting "
|
||||
"the \"infrastructure as code\" approach to data center system and network "
|
||||
"deployment and management, configuration automation, SecOps orchestration, "
|
||||
"vulnerability remediation, and hybrid cloud control."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/salt-minion.rst:17
|
||||
#: d183564286024ed28739c1c9f54132b3
|
||||
msgid "Requirements"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/salt-minion.rst:19
|
||||
#: c922c5890c134199b5e17973c489a3d7
|
||||
msgid ""
|
||||
"To use the Salt-Minion, a running Salt-Master is required. You can find more"
|
||||
" in the `Salt Poject Documentaion "
|
||||
"<https://docs.saltproject.io/en/latest/contents.html>`_"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/salt-minion.rst:25
|
||||
#: e681f6ccad92466c9965b111af45f50d
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/salt-minion.rst:29
|
||||
#: 4f9d7de795a54dd49bc4600f055df36a
|
||||
msgid ""
|
||||
"The hash type used when discovering file on master server (default: sha256)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/salt-minion.rst:33
|
||||
#: ff61173c04c846999a3120f30849dba6
|
||||
msgid "Explicitly declare ID for this minion to use (default: hostname)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/salt-minion.rst:37
|
||||
#: 841d7b7883bf45299419f7e6fea28d2d
|
||||
msgid "Interval in minutes between updates (default: 60)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/salt-minion.rst:41
|
||||
#: 68ff5dcab36d4d49813f37e2970f5220
|
||||
msgid "The hostname or IP address of the master"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/salt-minion.rst:45
|
||||
#: 96099dbb99e84e1f90e46db4fd6b7ee6
|
||||
msgid "URL with signature of master for auth reply verification"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/salt-minion.rst:48
|
||||
#: e249605e6ee44cf6be099cb13b7c9698
|
||||
msgid ""
|
||||
"Please take a look in the Automation section to find some usefull Examples."
|
||||
msgstr ""
|
||||
@ -1,281 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/service/snmp.rst:5 673b54ae8a7644f99cbdf9a75c39d61f
|
||||
msgid "SNMP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:7 e32ce30fcbbf445cae73cf66d09160bc
|
||||
msgid ""
|
||||
":abbr:`SNMP (Simple Network Management Protocol)` is an Internet Standard "
|
||||
"protocol for collecting and organizing information about managed devices on "
|
||||
"IP networks and for modifying that information to change device behavior. "
|
||||
"Devices that typically support SNMP include cable modems, routers, switches,"
|
||||
" servers, workstations, printers, and more."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:13 1b4c23bde7684649be0e499f766c8263
|
||||
msgid ""
|
||||
"SNMP is widely used in network management for network monitoring. SNMP "
|
||||
"exposes management data in the form of variables on the managed systems "
|
||||
"organized in a management information base (MIB_) which describe the system "
|
||||
"status and configuration. These variables can then be remotely queried (and,"
|
||||
" in some circumstances, manipulated) by managing applications."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:19 85b90a44324e4a76b93874eb83500c89
|
||||
msgid ""
|
||||
"Three significant versions of SNMP have been developed and deployed. SNMPv1 "
|
||||
"is the original version of the protocol. More recent versions, SNMPv2c and "
|
||||
"SNMPv3, feature improvements in performance, flexibility and security."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:23 7636576a08484fa890f6b2168dab90e7
|
||||
msgid ""
|
||||
"SNMP is a component of the Internet Protocol Suite as defined by the "
|
||||
"Internet Engineering Task Force (IETF). It consists of a set of standards "
|
||||
"for network management, including an application layer protocol, a database "
|
||||
"schema, and a set of data objects."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:29 672f5c1096754a669e9ffcba1308abe4
|
||||
msgid "Overview and basic concepts"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:31 508ce66678cc4bfda08705280fb22c9f
|
||||
msgid ""
|
||||
"In typical uses of SNMP, one or more administrative computers called "
|
||||
"managers have the task of monitoring or managing a group of hosts or devices"
|
||||
" on a computer network. Each managed system executes a software component "
|
||||
"called an agent which reports information via SNMP to the manager."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:36 fc75eec6b530433583ad04a00081ded1
|
||||
msgid "An SNMP-managed network consists of three key components:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:38 952f85c2f06041609f4fe159edabbfdc
|
||||
msgid "Managed devices"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:39 8f82592033cf40429089b6d258ee268b
|
||||
msgid "Agent - software which runs on managed devices"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:40 4a7ef3c5b5654fbb8c7149dafdabb1c5
|
||||
msgid "Network management station (NMS) - software which runs on the manager"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:42 e962b6aff998468db3e9e8bf67592032
|
||||
msgid ""
|
||||
"A managed device is a network node that implements an SNMP interface that "
|
||||
"allows unidirectional (read-only) or bidirectional (read and write) access "
|
||||
"to node-specific information. Managed devices exchange node-specific "
|
||||
"information with the NMSs. Sometimes called network elements, the managed "
|
||||
"devices can be any type of device, including, but not limited to, routers, "
|
||||
"access servers, switches, cable modems, bridges, hubs, IP telephones, IP "
|
||||
"video cameras, computer hosts, and printers."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:50 5b38f53565cf4caf90acace13d163b70
|
||||
msgid ""
|
||||
"An agent is a network-management software module that resides on a managed "
|
||||
"device. An agent has local knowledge of management information and "
|
||||
"translates that information to or from an SNMP-specific form."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:54 f6aa9aff15b44d0ca707245a1c6387a1
|
||||
msgid ""
|
||||
"A network management station executes applications that monitor and control "
|
||||
"managed devices. NMSs provide the bulk of the processing and memory "
|
||||
"resources required for network management. One or more NMSs may exist on any"
|
||||
" managed network."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:63 f5d46f82a1294fde9a99cc30a7018719
|
||||
msgid "Principle of SNMP Communication"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:63 b42009da969f461d964ac71d49364114
|
||||
msgid ""
|
||||
"Image thankfully borrowed from "
|
||||
"https://en.wikipedia.org/wiki/File:SNMP_communication_principles_diagram.PNG"
|
||||
" which is under the GNU Free Documentation License"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:67 5cd54137885742b08aa89e12894391e4
|
||||
msgid "VyOS SNMP supports both IPv4 and IPv6."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:70 c35469efc46440a0931e138a4709a560
|
||||
msgid "SNMP Protocol Versions"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:72 a18328781b6749c2a5340ed69c4de073
|
||||
msgid ""
|
||||
"VyOS itself supports SNMPv2_ (version 2) and SNMPv3_ (version 3) where the "
|
||||
"later is recommended because of improved security (optional authentication "
|
||||
"and encryption)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:77 f859015da9814c6595022563749b438f
|
||||
msgid "SNMPv2"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:79 e39778b1ba06412dbe73ef5779cf2a9e
|
||||
msgid ""
|
||||
"SNMPv2 is the original and most commonly used version. For authorizing "
|
||||
"clients, SNMP uses the concept of communities. Communities may have "
|
||||
"authorization set to read only (this is most common) or to read and write "
|
||||
"(this option is not actively used in VyOS)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:84 607f7800ab7649229ee1215ab4647d68
|
||||
msgid ""
|
||||
"SNMP can work synchronously or asynchronously. In synchronous communication,"
|
||||
" the monitoring system queries the router periodically. In asynchronous, the"
|
||||
" router sends notification to the \"trap\" (the monitoring host)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:88 e1d7831bee1d4becab797729175d9549
|
||||
msgid ""
|
||||
"SNMPv2 does not support any authentication mechanisms, other than client "
|
||||
"source address, so you should specify addresses of clients allowed to "
|
||||
"monitor the router. Note that SNMPv2 also supports no encryption and always "
|
||||
"sends data in plain text."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:94
|
||||
#: ../../configuration/service/snmp.rst:145 507ef696ec524a189d8e1f4c888c97cb
|
||||
#: 7285140432824b5eac1701fd996a6276
|
||||
msgid "Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:122 9ff9a44b54134b05a3ce6fac4afeb02c
|
||||
msgid "SNMPv3"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:124 44ab9c93f4c44b6c88a2d7e7351761d4
|
||||
msgid ""
|
||||
"SNMPv3 (version 3 of the SNMP protocol) introduced a whole slew of new "
|
||||
"security related features that have been missing from the previous versions."
|
||||
" Security was one of the biggest weakness of SNMP until v3. Authentication "
|
||||
"in SNMP Versions 1 and 2 amounts to nothing more than a password (community "
|
||||
"string) sent in clear text between a manager and agent. Each SNMPv3 message "
|
||||
"contains security parameters which are encoded as an octet string. The "
|
||||
"meaning of these security parameters depends on the security model being "
|
||||
"used."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:132 fd9a6074a397488ca7e4d5a963896fae
|
||||
msgid "The security approach in SNMPv3 targets:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:134 071d203c90114ab4bd8208f5c55eb729
|
||||
msgid ""
|
||||
"Confidentiality – Encryption of packets to prevent snooping by an "
|
||||
"unauthorized source."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:137 816c745d250e4560b04fd058fd563f3a
|
||||
msgid ""
|
||||
"Integrity – Message integrity to ensure that a packet has not been tampered "
|
||||
"while in transit including an optional packet replay protection mechanism."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:140 ad27f29b46f34ed4bb7709f054682071
|
||||
msgid "Authentication – to verify that the message is from a valid source."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:147 f11d6eb73e1e4d7bb77203b7757bf6cc
|
||||
msgid "Let SNMP daemon listen only on IP address 192.0.2.1"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:148 938627e7264c42459261c00c73e9b148
|
||||
msgid "Configure new SNMP user named \"vyos\" with password \"vyos12345678\""
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:149 2b6bc6679e3849ff811779224466483e
|
||||
msgid "New user will use SHA/AES for authentication and privacy"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:165 f1625b2d48ba4916894f0753ae9d975a
|
||||
msgid ""
|
||||
"After commit the plaintext passwords will be hashed and stored in your "
|
||||
"configuration. The resulting CLI config will look like:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:197 b97b7c55ee66439eafea0db02600ee63
|
||||
msgid ""
|
||||
"You can test the SNMPv3 functionality from any linux based system, just run "
|
||||
"the following command: ``snmpwalk -v 3 -u vyos -a SHA -A vyos12345678 -x AES"
|
||||
" -X vyos12345678 -l authPriv 192.0.2.1 .1``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:202 0dc0e70e9678473da4b30df269bb98ea
|
||||
msgid "VyOS MIBs"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:204 0e1a8de3fac144eeb2391e46928095e5
|
||||
msgid ""
|
||||
"All SNMP MIBs are located in each image of VyOS here: "
|
||||
"``/usr/share/snmp/mibs/``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:206 d34fa75e55704b6db6576cadb7e92edd
|
||||
msgid ""
|
||||
"You are be able to download the files using SCP, once the SSH service has "
|
||||
"been activated like so"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:214 b98ddd1ead1c4cc8ad955b3d5e614591
|
||||
msgid "SNMP Extensions"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:216 dba386315d364f90b4c8392736d35c84
|
||||
msgid ""
|
||||
"To extend SNMP agent functionality, custom scripts can be executed every "
|
||||
"time the agent is being called. This can be achieved by using ``arbitrary "
|
||||
"extensioncommands``. The first step is to create a functional script of "
|
||||
"course, then upload it to your VyOS instance via the command ``scp "
|
||||
"your_script.sh vyos@your_router:/config/user-data``. Once the script is "
|
||||
"uploaded, it needs to be configured via the command below."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:231 1da0746f60014560b4d550769f356afe
|
||||
msgid ""
|
||||
"The OID ``.1.3.6.1.4.1.8072.1.3.2.3.1.1.4.116.101.115.116``, once called, "
|
||||
"will contain the output of the extension."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:245 2309ee4f72f04ec99c1c7bdad02b9669
|
||||
msgid "SolarWinds"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:247 bde288684d2e45e3bbd1f5688d6ad7d4
|
||||
msgid ""
|
||||
"If you happen to use SolarWinds Orion as NMS you can also use the Device "
|
||||
"Templates Management. A template for VyOS can be easily imported."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/snmp.rst:252 bcb2fed7220142fdb524aad933d9f745
|
||||
msgid ""
|
||||
"Create a file named ``VyOS-1.3.6.1.4.1.44641.ConfigMgmt-Commands`` using the"
|
||||
" following content:"
|
||||
msgstr ""
|
||||
@ -1,254 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/service/ssh.rst:5 fab12a30042344f2aed0bb2927bf95b8
|
||||
msgid "SSH"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:7 7abb8613c7734008a0472737b5269796
|
||||
msgid ""
|
||||
":abbr:`SSH (Secure Shell)` is a cryptographic network protocol for operating"
|
||||
" network services securely over an unsecured network. The standard TCP port "
|
||||
"for SSH is 22. The best known example application is for remote login to "
|
||||
"computer systems by users."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:12 dad607f902c5476cbb25927f4e9bac1f
|
||||
msgid ""
|
||||
"SSH provides a secure channel over an unsecured network in a client-server "
|
||||
"architecture, connecting an SSH client application with an SSH server. "
|
||||
"Common applications include remote command-line login and remote command "
|
||||
"execution, but any network service can be secured with SSH. The protocol "
|
||||
"specification distinguishes between two major versions, referred to as SSH-1"
|
||||
" and SSH-2."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:18 71d4da888ed24a408bda4e8dbc7a614e
|
||||
msgid ""
|
||||
"The most visible application of the protocol is for access to shell accounts"
|
||||
" on Unix-like operating systems, but it sees some limited use on Windows as "
|
||||
"well. In 2015, Microsoft announced that they would include native support "
|
||||
"for SSH in a future release."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:23 9b765f6c14004a4bacda60ecd6078e50
|
||||
msgid ""
|
||||
"SSH was designed as a replacement for Telnet and for unsecured remote shell "
|
||||
"protocols such as the Berkeley rlogin, rsh, and rexec protocols. Those "
|
||||
"protocols send information, notably passwords, in plaintext, rendering them "
|
||||
"susceptible to interception and disclosure using packet analysis. The "
|
||||
"encryption used by SSH is intended to provide confidentiality and integrity "
|
||||
"of data over an unsecured network, such as the Internet."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:30 7c6c65b7a9d1457989890f99d0212084
|
||||
msgid ""
|
||||
"VyOS 1.1 supported login as user ``root``. This has been removed due to "
|
||||
"tighter security in VyOS 1.2."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:33 d8dccf2a289d40a0a6e57ff1145f9538
|
||||
msgid "SSH :ref:`ssh_key_based_authentication`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:36 6e39da5ae0ca4c118b9986abea83e66f
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:40 c2be9219cb1f4382817419a9d02c83d6
|
||||
msgid ""
|
||||
"Enabling SSH only requires you to specify the port ``<port>`` you want SSH "
|
||||
"to listen on. By default, SSH runs on port 22."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:45 8e12c00d53a24c488196b13f6731bc85
|
||||
msgid ""
|
||||
"Specify IPv4/IPv6 listen address of SSH server. Multiple addresses can be "
|
||||
"defined."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:50 6b9d60576b1b4be89f1063de0909be37
|
||||
msgid ""
|
||||
"Define allowed ciphers used for the SSH connection. A number of allowed "
|
||||
"ciphers can be specified, use multiple occurrences to allow multiple "
|
||||
"ciphers."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:53 2053f5d20be24339a08b6eb06b9e4f95
|
||||
msgid ""
|
||||
"List of supported ciphers: ``3des-cbc``, ``aes128-cbc``, ``aes192-cbc``, "
|
||||
"``aes256-cbc``, ``aes128-ctr``, ``aes192-ctr``, ``aes256-ctr``, "
|
||||
"``arcfour128``, ``arcfour256``, ``arcfour``, ``blowfish-cbc``, "
|
||||
"``cast128-cbc``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:59 7e34e9182d234e93b436bc394fcc3ac8
|
||||
msgid ""
|
||||
"Disable password based authentication. Login via SSH keys only. This hardens"
|
||||
" security!"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:64 856316e7319a4f2ab0eeb18437f4d563
|
||||
msgid ""
|
||||
"Disable the host validation through reverse DNS lookups - can speedup login "
|
||||
"time when reverse lookup is not possible."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:69 67c8bcab57654ee892ab366c20adc3ce
|
||||
msgid ""
|
||||
"Specifies the available :abbr:`MAC (Message Authentication Code)` "
|
||||
"algorithms. The MAC algorithm is used in protocol version 2 for data "
|
||||
"integrity protection. Multiple algorithms can be provided."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:73 633357d5f10849e39bb22f8720260716
|
||||
msgid ""
|
||||
"List of supported MACs: ``hmac-md5``, ``hmac-md5-96``, ``hmac-ripemd160``, "
|
||||
"``hmac-sha1``, ``hmac-sha1-96``, ``hmac-sha2-256``, ``hmac-sha2-512``, "
|
||||
"``umac-64@openssh.com``, ``umac-128@openssh.com``, ``hmac-"
|
||||
"md5-etm@openssh.com``, ``hmac-md5-96-etm@openssh.com``, ``hmac-"
|
||||
"ripemd160-etm@openssh.com``, ``hmac-sha1-etm@openssh.com``, ``hmac-"
|
||||
"sha1-96-etm@openssh.com``, ``hmac-sha2-256-etm@openssh.com``, ``hmac-"
|
||||
"sha2-512-etm@openssh.com``, ``umac-64-etm@openssh.com``, "
|
||||
"``umac-128-etm@openssh.com``"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:84 68b1e555abb74c3bb8ed1f76980f6ad9
|
||||
msgid ""
|
||||
"Add access-control directive to allow or deny users and groups. Directives "
|
||||
"are processed in the following order of precedence: ``deny-users``, ``allow-"
|
||||
"users``, ``deny-groups`` and ``allow-groups``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:90 2c17c4c762bc46ada922db6284971c97
|
||||
msgid "Specify timeout interval for keepalive message in seconds."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:94 fa69712b894541f58ab5402262758a2d
|
||||
msgid "Specify allowed :abbr:`KEX (Key Exchange)` algorithms."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:96 b9af96b551ca408498c03952ad80ac55
|
||||
msgid ""
|
||||
"List of supported algorithms: ``diffie-hellman-group1-sha1``, ``diffie-"
|
||||
"hellman-group14-sha1``, ``diffie-hellman-group14-sha256``, ``diffie-hellman-"
|
||||
"group16-sha512``, ``diffie-hellman-group18-sha512``, ``diffie-hellman-group-"
|
||||
"exchange-sha1``, ``diffie-hellman-group-exchange-sha256``, ``ecdh-"
|
||||
"sha2-nistp256``, ``ecdh-sha2-nistp384``, ``ecdh-sha2-nistp521``, "
|
||||
"``curve25519-sha256`` and ``curve25519-sha256@libssh.org``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:106 a8e69ca756fa410a8265fbd9994c3d82
|
||||
msgid "Set the ``sshd`` log level. The default is ``info``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:110 f96e71685cab4768918f251afb5e4b44
|
||||
msgid ""
|
||||
"Specify name of the :abbr:`VRF (Virtual Routing and Forwarding)` instance."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:113 33921a83af8d4c92babfe7a4c8c3e673
|
||||
msgid "Dynamic-protection"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:114 b2ac0add88994fa3a87a3eee898ebe23
|
||||
msgid ""
|
||||
"Protects host from brute-force attacks against SSH. Log messages are parsed,"
|
||||
" line-by-line, for recognized patterns. If an attack, such as several login "
|
||||
"failures within a few seconds, is detected, the offending IP is blocked. "
|
||||
"Offenders are unblocked after a set interval."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:121 b441c882e2f24de3b38bdd9f8e93019d
|
||||
msgid "Allow ``ssh`` dynamic-protection."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:125 7a53d3dd4876492499391f781d8228aa
|
||||
msgid ""
|
||||
"Whitelist of addresses and networks. Always allow inbound connections from "
|
||||
"these systems."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:130 71404cfc03b94a74aa62ed0b8f5ac1bb
|
||||
msgid ""
|
||||
"Block source IP in seconds. Subsequent blocks increase by a factor of 1.5 "
|
||||
"The default is 120."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:135 a6384bbfdd9f4834b6159c84872a43cf
|
||||
msgid ""
|
||||
"Remember source IP in seconds before reset their score. The default is 1800."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:139 f5229921a8394633bf74412e5b214bee
|
||||
msgid ""
|
||||
"Block source IP when their cumulative attack score exceeds threshold. The "
|
||||
"default is 30."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:143 b13a85e598bb414fa3aa5690ac7edfba
|
||||
msgid "Operation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:147 d80496915497406cb818cbfbfab02d25
|
||||
msgid ""
|
||||
"Restart the SSH daemon process, the current session is not affected, only "
|
||||
"the background daemon is restarted."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:152 3451e104bd784342aced2b91730f0111
|
||||
msgid ""
|
||||
"Re-generated the public/private keyportion which SSH uses to secure "
|
||||
"connections."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:155 79e13472464647a4aab223fd8a1d744f
|
||||
msgid ""
|
||||
"Already learned known_hosts files of clients need an update as the public "
|
||||
"key will change."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:160 377ebda07bd543e4a6e174ccecf632f8
|
||||
msgid ""
|
||||
"Re-generated a known pub/private keyfile which can be used to connect to "
|
||||
"other services (e.g. RPKI cache)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:163
|
||||
#: ../../configuration/service/ssh.rst:198 640a2f6196594e148280f19bd14d48ee
|
||||
#: eaf008d38eff422188f33feba5792f12
|
||||
msgid "Example:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:186 1509b88ec9454619bc622b8b27487aff
|
||||
msgid ""
|
||||
"Two new files ``/config/auth/id_rsa_rpki`` and "
|
||||
"``/config/auth/id_rsa_rpki.pub`` will be created."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:192 fc470d24be7e4e1eb5fbd4bf84ece1b1
|
||||
msgid ""
|
||||
"Generate the configuration mode commands to add a public key for "
|
||||
":ref:`ssh_key_based_authentication`. ``<location>`` can be a local path or a"
|
||||
" URL pointing at a remote file."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/ssh.rst:196 b9efad6b1e24470e9c252126e43fa3ec
|
||||
msgid "Supported remote protocols are FTP, HTTP, HTTPS, SCP/SFTP and TFTP."
|
||||
msgstr ""
|
||||
@ -1,113 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/service/tftp-server.rst:5
|
||||
#: c4296b54522549b3bab0063f866da9bf
|
||||
msgid "TFTP Server"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/tftp-server.rst:7
|
||||
#: 0ed7be753884413cb08d72de9c9a1d71
|
||||
msgid ""
|
||||
":abbr:`TFTP (Trivial File Transfer Protocol)` is a simple, lockstep file "
|
||||
"transfer protocol which allows a client to get a file from or put a file "
|
||||
"onto a remote host. One of its primary uses is in the early stages of nodes "
|
||||
"booting from a local area network. TFTP has been used for this application "
|
||||
"because it is very simple to implement."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/tftp-server.rst:14
|
||||
#: c6e88c3efac54d68b9ee9d3b60679643
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/tftp-server.rst:18
|
||||
#: 4b6aadab8c6b43da9e3846e112ef1a03
|
||||
msgid ""
|
||||
"Enable TFTP service by specifying the `<directory>` which will be used to "
|
||||
"serve files."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/tftp-server.rst:21
|
||||
#: 7b91672354f44687b0c8779f1f922a38
|
||||
msgid ""
|
||||
"Choose your ``directory`` location carefully or you will loose the content "
|
||||
"on image upgrades. Any directory under ``/config`` is save at this will be "
|
||||
"migrated."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/tftp-server.rst:27
|
||||
#: ac29a2687de8440abcb0c2195511d899
|
||||
msgid ""
|
||||
"Configure the IPv4 or IPv6 listen address of the TFTP server. Multiple IPv4 "
|
||||
"and IPv6 addresses can be given. There will be one TFTP server instances "
|
||||
"listening on each IP address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/tftp-server.rst:35
|
||||
#: 7defff1c22914ad8a87c1d7416ca40ff
|
||||
msgid ""
|
||||
"Additional option to run TFTP server in the :abbr:`VRF (Virtual Routing and "
|
||||
"Forwarding)` context"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/tftp-server.rst:39
|
||||
#: c8297270cf6e482e8de81b9143fee97e
|
||||
msgid "Configuring a listen-address is essential for the service to work."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/tftp-server.rst:43
|
||||
#: 3e2823a645514066a2242046d6b8007e
|
||||
msgid ""
|
||||
"Optional, if you want to enable uploads, else TFTP server will act as a "
|
||||
"read-only server."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/tftp-server.rst:47
|
||||
#: 9b57f95ff7344edfa52d806293694077
|
||||
msgid "Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/tftp-server.rst:49
|
||||
#: d49d63b3ea1b4ab09f422d0da872cc49
|
||||
msgid ""
|
||||
"Provide TFTP server listening on both IPv4 and IPv6 addresses ``192.0.2.1`` "
|
||||
"and ``2001:db8::1`` serving the content from ``/config/tftpboot``. Uploading"
|
||||
" via TFTP to this server is disabled."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/tftp-server.rst:53
|
||||
#: b55c58f646c548188beeea943337eef0
|
||||
msgid "The resulting configuration will look like:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/tftp-server.rst:65
|
||||
#: e4d9f2b09594484cbda496ddef330a7c
|
||||
msgid "Verification"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/tftp-server.rst:67
|
||||
#: bd7af248b54a43aba84184c1cbb7d8af
|
||||
msgid "Client:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/tftp-server.rst:74
|
||||
#: 43bbca045d1f4b54903c79eca0bfbbb1
|
||||
msgid "Server:"
|
||||
msgstr ""
|
||||
@ -1,483 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:5 69fdee8863264000a88313d8fd75f6fd
|
||||
msgid "Webproxy"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:7 2ecb7d48688b46c2badfa67dc3c2935e
|
||||
msgid "The proxy service in VyOS is based on Squid_ and some related modules."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:9 5e7bea2133b946cead309dcad705d812
|
||||
msgid ""
|
||||
"Squid_ is a caching and forwarding HTTP web proxy. It has a wide variety of "
|
||||
"uses, including speeding up a web server by caching repeated requests, "
|
||||
"caching web, DNS and other computer network lookups for a group of people "
|
||||
"sharing network resources, and aiding security by filtering traffic. "
|
||||
"Although primarily used for HTTP and FTP, Squid includes limited support for"
|
||||
" several other protocols including Internet Gopher, SSL,[6] TLS and HTTPS. "
|
||||
"Squid does not support the SOCKS protocol."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:17
|
||||
#: 0404a62051e44d20ad54a16b7d591abe
|
||||
msgid "URL Filtering is provided by SquidGuard_."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:21
|
||||
#: 11a43c155a6e45eabdbc64f6cf3b7c03
|
||||
msgid "Configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:25
|
||||
#: 538de92f8cda4d54a24aa845e29bebb3
|
||||
msgid ""
|
||||
"Use this command to specify a domain name to be appended to domain-names "
|
||||
"within URLs that do not include a dot ``.`` the domain is appended."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:28
|
||||
#: 008cef5b96844d2989efab58e110af45
|
||||
msgid ""
|
||||
"Example: to be appended is set to ``vyos.net`` and the URL received is "
|
||||
"``www/foo.html``, the system will use the generated, final URL of "
|
||||
"``www.vyos.net/foo.html``."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:38
|
||||
#: 933ef6eabfc54ca5a22e65fb65a21307
|
||||
msgid ""
|
||||
"The size of the on-disk Proxy cache is user configurable. The Proxies "
|
||||
"default cache-size is configured to 100 MB."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:41
|
||||
#: a4ce00087686479eb25f6eabc20c819c
|
||||
msgid "Unit of this command is MB."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:49
|
||||
#: 23e11cde1f8c4ffe9978c5aecb2f8351
|
||||
msgid ""
|
||||
"Specify the port used on which the proxy service is listening for requests. "
|
||||
"This port is the default port used for the specified listen-address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:52
|
||||
#: 64ec67f5a9c74ad49e03e74c5b4185b7
|
||||
msgid "Default port is 3128."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:60
|
||||
#: 6692ea15c0a0446eb81a04b32c59d047
|
||||
msgid ""
|
||||
"Used to block specific domains by the Proxy. Specifying \"vyos.net\" will "
|
||||
"block all access to vyos.net, and specifying \".xxx\" will block all access "
|
||||
"to URLs having an URL ending on .xxx."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:70
|
||||
#: ef436427acd84b569dbb2470843fbbaf
|
||||
msgid ""
|
||||
"Allow access to sites in a domain without retrieving them from the Proxy "
|
||||
"cache. Specifying \"vyos.net\" will allow access to vyos.net but the pages "
|
||||
"accessed will not be cached. It useful for working around problems with "
|
||||
"\"If-Modified-Since\" checking at certain sites."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:81
|
||||
#: 3d40791b0175498e8a92329abaa7cc15
|
||||
msgid ""
|
||||
"Specifies proxy service listening address. The listen address is the IP "
|
||||
"address on which the web proxy service listens for client requests."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:84
|
||||
#: 9fa25683713d4ab8a71fb1bdfe1cd4fa
|
||||
msgid ""
|
||||
"For security, the listen address should only be used on internal/trusted "
|
||||
"networks!"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:93
|
||||
#: 50a2aaab0b7a435e8dcad332db909d9e
|
||||
msgid "Disables web proxy transparent mode at a listening address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:95
|
||||
#: 767fafde12b4451abd51078e02e034c8
|
||||
msgid ""
|
||||
"In transparent proxy mode, all traffic arriving on port 80 and destined for "
|
||||
"the Internet is automatically forwarded through the proxy. This allows "
|
||||
"immediate proxy forwarding without configuring client browsers."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:99
|
||||
#: cb85f1db56664838bc5a84cda2fab9f2
|
||||
msgid ""
|
||||
"Non-transparent proxying requires that the client browsers be configured "
|
||||
"with the proxy settings before requests are redirected. The advantage of "
|
||||
"this is that the client web browser can detect that a proxy is in use and "
|
||||
"can behave accordingly. In addition, web-transmitted malware can sometimes "
|
||||
"be blocked by a non-transparent web proxy, since they are not aware of the "
|
||||
"proxy settings."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:111
|
||||
#: 5a9ceddce0eb4c03aeb54c02ac529e88
|
||||
msgid ""
|
||||
"Sets the listening port for a listening address. This overrides the default "
|
||||
"port of 3128 on the specific listen address."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:121
|
||||
#: 930057be20964eae8a4a1e6a5dd79fe1
|
||||
msgid "Used to block a specific mime-type."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:131
|
||||
#: 73d7aea74901472b85163b228f616b08
|
||||
msgid ""
|
||||
"Specifies the maximum size of a reply body in KB, used to limit the reply "
|
||||
"size."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:134
|
||||
#: cfe873ebb6c5462597fd7ed9c2a1f79a
|
||||
msgid "All reply sizes are accepted by default."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:142
|
||||
#: 128f4223a5cb455082966f09bc31b8de
|
||||
msgid ""
|
||||
"Add new port to Safe-ports acl. Ports included by default in Safe-ports acl:"
|
||||
" 21, 70, 80, 210, 280, 443, 488, 591, 777, 873, 1025-65535"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:147
|
||||
#: d809f26229244b62b9b68e0a57398927
|
||||
msgid ""
|
||||
"Add new port to SSL-ports acl. Ports included by default in SSL-ports acl: "
|
||||
"443"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:152
|
||||
#: 999a7db2ee664ffbbd091de8bc0b7e63
|
||||
msgid "Authentication"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:154
|
||||
#: 40626486edef4f739addeef49e9ffada
|
||||
msgid ""
|
||||
"The embedded Squid proxy can use LDAP to authenticate users against a "
|
||||
"company wide directory. The following configuration is an example of how to "
|
||||
"use Active Directory as authentication backend. Queries are done via LDAP."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:160
|
||||
#: ca29bc16039843558774ccc783a7be8e
|
||||
msgid ""
|
||||
"Maximum number of authenticator processes to spawn. If you start too few "
|
||||
"Squid will have to wait for them to process a backlog of credential "
|
||||
"verifications, slowing it down. When password verifications are done via a "
|
||||
"(slow) network you are likely to need lots of authenticator processes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:165
|
||||
#: 7aefcb04a09748648dcfdca982d82c5e
|
||||
msgid "This defaults to 5."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:173
|
||||
#: ae1c75474794419490345a7513e3261f
|
||||
msgid ""
|
||||
"Specifies how long squid assumes an externally validated username:password "
|
||||
"pair is valid for - in other words how often the helper program is called "
|
||||
"for that user. Set this low to force revalidation with short lived "
|
||||
"passwords."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:177
|
||||
#: 6c6f6390dd08483a8d31a1e52d58a439
|
||||
msgid "Time is in minutes and defaults to 60."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:186
|
||||
#: a4c00af4f7a8454fba076b7dd24ac873
|
||||
msgid "Proxy authentication method, currently only LDAP is supported."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:194
|
||||
#: 8c02a1ce915d419f82050d136971bcdf
|
||||
msgid ""
|
||||
"Specifies the protection scope (aka realm name) which is to be reported to "
|
||||
"the client for the authentication scheme. It is commonly part of the text "
|
||||
"the user will see when prompted for their username and password."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:203
|
||||
#: 018419ead11e48ffa29a3f80d280c32e
|
||||
msgid "LDAP"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:207
|
||||
#: 376a4eb7086f43ac84b4e3d863e38cf0
|
||||
msgid "Specifies the base DN under which the users are located."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:216
|
||||
#: da28a43e344f4870ac3635846e74c143
|
||||
msgid "The DN and password to bind as while performing searches."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:224
|
||||
#: 751d42ed19ea4b94a9e8b6860ec0cdd8
|
||||
msgid ""
|
||||
"LDAP search filter to locate the user DN. Required if the users are in a "
|
||||
"hierarchy below the base DN, or if the login name is not what builds the "
|
||||
"user specific part of the users DN."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:228
|
||||
#: d6e52dae4f0d4c439d63b2b0f336f527
|
||||
msgid ""
|
||||
"The search filter can contain up to 15 occurrences of %s which will be "
|
||||
"replaced by the username, as in \"uid=%s\" for :rfc:`2037` directories. For "
|
||||
"a detailed description of LDAP search filter syntax see :rfc:`2254`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:238
|
||||
#: 9017f65599804794b7319c69c903d941
|
||||
msgid ""
|
||||
"The DN and password to bind as while performing searches. As the password "
|
||||
"needs to be printed in plain text in your Squid configuration it is strongly"
|
||||
" recommended to use a account with minimal associated privileges. This to "
|
||||
"limit the damage in case someone could get hold of a copy of your Squid "
|
||||
"configuration file."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:250
|
||||
#: eb937ab1e8244f069c6ddc32fbc6339a
|
||||
msgid ""
|
||||
"Use a persistent LDAP connection. Normally the LDAP connection is only open "
|
||||
"while validating a username to preserve resources at the LDAP server. This "
|
||||
"option causes the LDAP connection to be kept open, allowing it to be reused "
|
||||
"for further user validations."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:255
|
||||
#: 9ceafaf48a484a65857eb4638af99f1e
|
||||
msgid "Recommended for larger installations."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:263
|
||||
#: bbd3263d168446d4be03ad4af841e1be
|
||||
msgid ""
|
||||
"Specify an alternate TCP port where the ldap server is listening if other "
|
||||
"than the default LDAP port 389."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:272
|
||||
#: 9d74d3e2b9b74b45b1a09d8bb121d3af
|
||||
msgid "Specify the LDAP server to connect to."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:281
|
||||
#: 6763d958d61b46aa9c6c4248560a8e46
|
||||
msgid "Use TLS encryption."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:290
|
||||
#: 457b5b77ff4e463cbb13f535b24a7743
|
||||
msgid ""
|
||||
"Specifies the name of the DN attribute that contains the username/login. "
|
||||
"Combined with the base DN to construct the users DN when no search filter is"
|
||||
" specified (`filter-expression`)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:294
|
||||
#: 1dbb8c6c5ac64d63ae6015007f4fe68f
|
||||
msgid "Defaults to 'uid'"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:296
|
||||
#: 678364aaeac34065a42ce428e0eb02c0
|
||||
msgid ""
|
||||
"This can only be done if all your users are located directly under the same "
|
||||
"position in the LDAP tree and the login name is used for naming each user "
|
||||
"object. If your LDAP tree does not match these criterias or if you want to "
|
||||
"filter who are valid users then you need to use a search filter to search "
|
||||
"for your users DN (`filter-expression`)."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:308
|
||||
#: 166850e762e64808a1af34766b91aa25
|
||||
msgid "LDAP protocol version. Defaults to 3 if not specified."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:315
|
||||
#: 1cab4ca8905a4ab79bea13eb38b5d30d
|
||||
msgid "URL filtering"
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/need_improvement.txt:11
|
||||
#: ../../_include/need_improvement.txt:11
|
||||
#: ../../_include/need_improvement.txt:11 2e6a6178362048ce803573ce1dc1a148
|
||||
#: 4d989f72f00e4240a3a8ee900b3b3765 e305f33888d947e3a07c9ef4a6642b8c
|
||||
msgid "This section needs improvements, examples and explanations."
|
||||
msgstr ""
|
||||
|
||||
#: ../../_include/need_improvement.txt:13
|
||||
#: ../../_include/need_improvement.txt:13
|
||||
#: ../../_include/need_improvement.txt:13 9f148aab5d644e5a89571a1a217b32cf
|
||||
#: d2dc8159d993442ba88bbce98010a464 52d30e7a13c44a179de6f7b2ae6fc03f
|
||||
msgid ""
|
||||
"Please take a look at the Contributing Guide for our :ref:`documentation`."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:322
|
||||
#: 253b836088b04211a386af03191e0bf4
|
||||
msgid "Disables web filtering without discarding configuration."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:330
|
||||
#: 72fbadeda83040fcb7c281501d1e07ed
|
||||
msgid "Operation"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:335
|
||||
#: 4d5c9a2e6ae54dda9cefd9bc5eb14889
|
||||
msgid "Filtering"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:338
|
||||
#: dbf0eb4880cc46b39cdf0287631bec1f
|
||||
msgid "Update"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:340
|
||||
#: 252e167bcfb14c7da73cce65adc65748
|
||||
msgid ""
|
||||
"If you want to use existing blacklists you have to create/download a "
|
||||
"database first. Otherwise you will not be able to commit the config changes."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:346
|
||||
#: 2360dec7a1f34b0ea3938bb3ee5b6e66
|
||||
msgid "Download/Update complete blacklist"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:377
|
||||
#: 02b17c7b9c68425fb1b4540824f86870
|
||||
msgid "Download/Update partial blacklist."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:379
|
||||
#: ffaade6edd3849058871ed600c583f64
|
||||
msgid "Use tab completion to get a list of categories."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:381
|
||||
#: 3f95aaf66e404964b0e9273eeebf7f7c
|
||||
msgid "To auto update the blacklist files"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:383
|
||||
#: 1cd52f4051ad48529db82ac72a9fd0f3
|
||||
msgid ""
|
||||
":code:`set service webproxy url-filtering squidguard auto-update update-hour"
|
||||
" 23`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:386
|
||||
#: 5d6f042eba4341bbac7ac87a14af7a16
|
||||
msgid "To configure blocking add the following to the configuration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:388
|
||||
#: 87b4e85b230a48dd87256a876ae3aa92
|
||||
msgid ""
|
||||
":code:`set service webproxy url-filtering squidguard block-category ads`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:390
|
||||
#: 5c35bf2900d3452d924c3ddc66a778b2
|
||||
msgid ""
|
||||
":code:`set service webproxy url-filtering squidguard block-category malware`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:393
|
||||
#: 47cc3779c6004383b64fe2e56913cea0
|
||||
msgid "Bypassing the webproxy"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:397
|
||||
#: 93e6e04d489e4766a499251856710dd7
|
||||
msgid ""
|
||||
"Some services don't work correctly when being handled via a web proxy. So "
|
||||
"sometimes it is useful to bypass a transparent proxy:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:400
|
||||
#: eb403290f6524f5d8a55495e09529dc3
|
||||
msgid ""
|
||||
"To bypass the proxy for every request that is directed to a specific "
|
||||
"destination:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:403
|
||||
#: fa20896664284b5d958a27eb72a3485e
|
||||
msgid ""
|
||||
":code:`set service webproxy whitelist destination-address 198.51.100.33`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:405
|
||||
#: 429099b711e54df4812b9a230bcdf7a5
|
||||
msgid ""
|
||||
":code:`set service webproxy whitelist destination-address 192.0.2.0/24`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:408
|
||||
#: d8e55d5f16cb443eadc13d0a7c51c8c7
|
||||
msgid ""
|
||||
"To bypass the proxy for every request that is coming from a specific source:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:410
|
||||
#: 01ca9b67f2384032a1debc8a183d6218
|
||||
msgid ":code:`set service webproxy whitelist source-address 192.168.1.2`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:412
|
||||
#: 4f56491d176746cb9cbb3bf22104acbb
|
||||
msgid ":code:`set service webproxy whitelist source-address 192.168.2.0/24`"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:414
|
||||
#: e2688db21cd14b2a86823399c499ac76
|
||||
msgid ""
|
||||
"(This can be useful when a called service has many and/or often changing "
|
||||
"destination addresses - e.g. Netflix.)"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/service/webproxy.rst:419
|
||||
#: 2617becbf29e45b0a475728b9f78083b
|
||||
msgid "Examples"
|
||||
msgstr ""
|
||||
@ -1,109 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/system/acceleration.rst:5
|
||||
#: 821f098e97ac42178fce2d1d87697f85
|
||||
msgid "Acceleration"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/system/acceleration.rst:7
|
||||
#: 1d213449b6694993944862f72fcbbde8
|
||||
msgid ""
|
||||
"In this command tree, all hardware acceleration options will be handled. At "
|
||||
"the moment only `Intel® QAT`_ is supported"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/system/acceleration.rst:12
|
||||
#: ef7f658417ec41ba98e541510944379c
|
||||
msgid "Intel® QAT"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/system/acceleration.rst:16
|
||||
#: e3d1480460b2482ca31ee123fd351265
|
||||
msgid ""
|
||||
"use this command to check if there is an Intel® QAT supported Processor in "
|
||||
"your system."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/system/acceleration.rst:24
|
||||
#: 907f542a3245459aadda77377308fc53
|
||||
msgid "if there is non device the command will show ```No QAT device found```"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/system/acceleration.rst:28
|
||||
#: b6cd70058eec49f4bdab1670c40799de
|
||||
msgid "if there is a supported device, enable Intel® QAT"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/system/acceleration.rst:32
|
||||
#: ff39e7bf3bbc40968f1f16003607b506
|
||||
msgid "Check if the Intel® QAT device is up and ready to do the job."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/system/acceleration.rst:42
|
||||
#: d3427a1e78f14ca6af21919f36b7fd9a
|
||||
msgid "Operation Mode"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/system/acceleration.rst:46
|
||||
#: 7cfa3edf9615495c94f808bc158d47da
|
||||
msgid "Show the full config uploaded to the QAT device."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/system/acceleration.rst:50
|
||||
#: eb359a2c7fc445fdac4edc54bd502aec
|
||||
msgid "Get an overview over the encryption counters."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/system/acceleration.rst:54
|
||||
#: 8f890562fd734c4eabe7a823000a0c21
|
||||
msgid "Show binded qat device interrupts to certain core."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/system/acceleration.rst:58
|
||||
#: 3811a9bf7bd34212a197873637e979e4
|
||||
msgid "Example"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/system/acceleration.rst:60
|
||||
#: 52abe2f1cd6c4398ad4a1eca77d9f7a9
|
||||
msgid "Let's build a simple VPN between 2 Intel® QAT ready devices."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/system/acceleration.rst:62
|
||||
#: 11e0d6128fa74778a14f95fa737ceb99
|
||||
msgid "Side A:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/system/acceleration.rst:81
|
||||
#: ddeb4d4ef9254382b1808b25e99c5844
|
||||
msgid "Side B:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/system/acceleration.rst:100
|
||||
#: 7dfe2d8f3cd94c77a1a24ebbd487716e
|
||||
msgid "a bandwidth test over the VPN got these results:"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/system/acceleration.rst:122
|
||||
#: 9afaedaa0e94477da1e54ea3f13b1e7b
|
||||
msgid ""
|
||||
"with :cfgcmd:`set system acceleration qat` on both systems the bandwidth "
|
||||
"increases."
|
||||
msgstr ""
|
||||
@ -1,47 +0,0 @@
|
||||
# SOME DESCRIPTIVE TITLE.
|
||||
# Copyright (C) 2021, VyOS maintainers and contributors
|
||||
# This file is distributed under the same license as the VyOS package.
|
||||
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
|
||||
#
|
||||
#, fuzzy
|
||||
msgid ""
|
||||
msgstr ""
|
||||
"Project-Id-Version: VyOS 1.4\n"
|
||||
"Report-Msgid-Bugs-To: \n"
|
||||
"POT-Creation-Date: 2022-10-21 12:01+0200\n"
|
||||
"PO-Revision-Date: 2022-10-21 10:03+0000\n"
|
||||
"Language-Team: German (Germany) (https://www.transifex.com/vyos/teams/155110/de_DE/)\n"
|
||||
"MIME-Version: 1.0\n"
|
||||
"Content-Type: text/plain; charset=UTF-8\n"
|
||||
"Content-Transfer-Encoding: 8bit\n"
|
||||
"Language: de_DE\n"
|
||||
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
|
||||
|
||||
#: ../../configuration/system/conntrack.rst:3 00592094fdcc4840aa515ed9206b170f
|
||||
msgid "Connection tracking"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/system/conntrack.rst:6 1b3b94e0296241f791b2c73b6fb576f4
|
||||
msgid "Modules"
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/system/conntrack.rst:22
|
||||
#: 8e49e9ba31a449899efa9ff0fa534a05
|
||||
msgid ""
|
||||
"Enables ``conntrack`` modules. All modules are now disabled by default, "
|
||||
"while they used to be enabled in previous versions. Enabling the modules "
|
||||
"ensures backwards compatibility — keeping the previous behavior."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/system/conntrack.rst:26
|
||||
#: bc264b665fae40c595e4ac7dbb3541e9
|
||||
msgid ""
|
||||
"In most cases they can be disabled by removing the block of configuration."
|
||||
msgstr ""
|
||||
|
||||
#: ../../configuration/system/conntrack.rst:32
|
||||
#: 19bba7dcbe60459e934c51567a5333b8
|
||||
msgid ""
|
||||
"For some scenarios it is in fact recommended, like in this example: "
|
||||
":ref:`example-high-availability`."
|
||||
msgstr ""
|
||||
Some files were not shown because too many files have changed in this diff Show More
Loading…
x
Reference in New Issue
Block a user