mirror of
https://github.com/vyos/vyos-documentation.git
synced 2025-10-26 08:41:46 +01:00
Merge pull request #1087 from Nephiaust/master
Fixed minor issues in documentation
This commit is contained in:
commit
b966542cf7
@ -16,7 +16,7 @@ Zone Based Firewall
|
|||||||
chapter. The examples in this section use the legacy firewall configuration
|
chapter. The examples in this section use the legacy firewall configuration
|
||||||
commands, since this feature has been removed in earlier releases.
|
commands, since this feature has been removed in earlier releases.
|
||||||
|
|
||||||
.. note:: For latest releases, refer the `firewall
|
.. note:: For latest releases, refer the `firewall (interface-groups)
|
||||||
<https://docs.vyos.io/en/latest/configuration/firewall/general.html#interface-groups>`_
|
<https://docs.vyos.io/en/latest/configuration/firewall/general.html#interface-groups>`_
|
||||||
main page to configure zone based rules. New syntax was introduced here
|
main page to configure zone based rules. New syntax was introduced here
|
||||||
:vytask:`T5160`
|
:vytask:`T5160`
|
||||||
|
|||||||
@ -148,6 +148,7 @@ Local Configuration:
|
|||||||
set interfaces openvpn vtun1 tls certificate 'openvpn-local' # The self-signed certificate
|
set interfaces openvpn vtun1 tls certificate 'openvpn-local' # The self-signed certificate
|
||||||
set interfaces openvpn vtun1 tls peer-fingerprint <remote cert fingerprint> # The output of 'run show pki certificate <name> fingerprint sha256
|
set interfaces openvpn vtun1 tls peer-fingerprint <remote cert fingerprint> # The output of 'run show pki certificate <name> fingerprint sha256
|
||||||
on the remote rout
|
on the remote rout
|
||||||
|
|
||||||
Remote Configuration:
|
Remote Configuration:
|
||||||
|
|
||||||
.. code-block:: none
|
.. code-block:: none
|
||||||
@ -163,6 +164,7 @@ Remote Configuration:
|
|||||||
set interfaces openvpn vtun1 tls certificate 'openvpn-remote' # The self-signed certificate
|
set interfaces openvpn vtun1 tls certificate 'openvpn-remote' # The self-signed certificate
|
||||||
set interfaces openvpn vtun1 tls peer-fingerprint <local cert fingerprint> # The output of 'run show pki certificate <name> fingerprint sha256
|
set interfaces openvpn vtun1 tls peer-fingerprint <local cert fingerprint> # The output of 'run show pki certificate <name> fingerprint sha256
|
||||||
on the local router
|
on the local router
|
||||||
|
|
||||||
Pre-shared keys
|
Pre-shared keys
|
||||||
---------------
|
---------------
|
||||||
|
|
||||||
@ -200,6 +202,7 @@ Then you need to install the key on the remote router:
|
|||||||
Then you need to set the key in your OpenVPN interface settings:
|
Then you need to set the key in your OpenVPN interface settings:
|
||||||
|
|
||||||
.. code-block:: none
|
.. code-block:: none
|
||||||
|
|
||||||
set interfaces openvpn vtun1 shared-secret-key s2s
|
set interfaces openvpn vtun1 shared-secret-key s2s
|
||||||
|
|
||||||
Firewall Exceptions
|
Firewall Exceptions
|
||||||
|
|||||||
@ -110,7 +110,7 @@ Sagitta (the Arrow) is the codename of the current development
|
|||||||
branch, so there's no VyOS 1.4 yet.
|
branch, so there's no VyOS 1.4 yet.
|
||||||
|
|
||||||
Circinus (1.5)
|
Circinus (1.5)
|
||||||
-------------
|
--------------
|
||||||
|
|
||||||
Circinus (the Compass) is the codename of the upcoming development
|
Circinus (the Compass) is the codename of the upcoming development
|
||||||
branch, so there's no VyOS 1.5 yet.
|
branch, so there's no VyOS 1.5 yet.
|
||||||
|
|||||||
@ -305,6 +305,7 @@ the DNS recursor we configured earlier, accepting traffic bound for port 53 from
|
|||||||
all hosts on the ``NET-INSIDE-v4`` network:
|
all hosts on the ``NET-INSIDE-v4`` network:
|
||||||
|
|
||||||
.. code-block:: none
|
.. code-block:: none
|
||||||
|
|
||||||
set firewall ipv4 input filter rule 30 action 'accept'
|
set firewall ipv4 input filter rule 30 action 'accept'
|
||||||
set firewall ipv4 input filter rule 30 icmp type-name 'echo-request'
|
set firewall ipv4 input filter rule 30 icmp type-name 'echo-request'
|
||||||
set firewall ipv4 input filter rule 30 protocol 'icmp'
|
set firewall ipv4 input filter rule 30 protocol 'icmp'
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user