summaryrefslogtreecommitdiff
path: root/docs/configexamples/ha.rst
diff options
context:
space:
mode:
authorerkin <e.altunbas@vyos.io>2021-08-12 15:44:48 +0300
committererkin <e.altunbas@vyos.io>2021-08-12 15:44:48 +0300
commite8d44578261c4efb59a333e68fd861ecb354d477 (patch)
tree877260d0758a6d666c09f6bb64eadba9a06b3414 /docs/configexamples/ha.rst
parentfcdb0ddd199afcc8420d852b95b5a08babbbf079 (diff)
downloadvyos-documentation-e8d44578261c4efb59a333e68fd861ecb354d477.tar.gz
vyos-documentation-e8d44578261c4efb59a333e68fd861ecb354d477.zip
New conntrack syntax for Sagitta requires explicit enabling
Diffstat (limited to 'docs/configexamples/ha.rst')
-rw-r--r--docs/configexamples/ha.rst16
1 files changed, 6 insertions, 10 deletions
diff --git a/docs/configexamples/ha.rst b/docs/configexamples/ha.rst
index 12c431f0..4f3583e2 100644
--- a/docs/configexamples/ha.rst
+++ b/docs/configexamples/ha.rst
@@ -306,21 +306,17 @@ public interface.
set nat source rule 10 translation address '203.0.113.1'
-Configure conntrack-sync and disable helpers
+Configure conntrack-sync and enable helpers
--------------------------------------------
-Most conntrack modules cause more problems than they're worth, especially in a
-complex network. Turn them off by default, and if you need to turn them on
-later, you can do so.
+Conntrack modules are disabled by default because they cause more problems
+than they're worth, especially in a complex network. You can enable them
+manually if you wish.
.. code-block:: none
- set system conntrack modules ftp disable
- set system conntrack modules gre disable
- set system conntrack modules nfs disable
- set system conntrack modules pptp disable
- set system conntrack modules sip disable
- set system conntrack modules tftp disable
+ set system conntrack modules ftp enable
+ set system conntrack modules gre enable
Now enable replication between nodes. Replace eth0.201 with bond0.201 on the
hardware router.