summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--docs/configuration/firewall/zone.rst2
-rw-r--r--docs/configuration/interfaces/openvpn.rst3
-rw-r--r--docs/introducing/history.rst2
-rw-r--r--docs/quick-start.rst1
4 files changed, 6 insertions, 2 deletions
diff --git a/docs/configuration/firewall/zone.rst b/docs/configuration/firewall/zone.rst
index 70ad7b65..a2069e0d 100644
--- a/docs/configuration/firewall/zone.rst
+++ b/docs/configuration/firewall/zone.rst
@@ -16,7 +16,7 @@ Zone Based Firewall
chapter. The examples in this section use the legacy firewall configuration
commands, since this feature has been removed in earlier releases.
-.. note:: For latest releases, refer the `firewall
+.. note:: For latest releases, refer the `firewall (interface-groups)
<https://docs.vyos.io/en/latest/configuration/firewall/general.html#interface-groups>`_
main page to configure zone based rules. New syntax was introduced here
:vytask:`T5160`
diff --git a/docs/configuration/interfaces/openvpn.rst b/docs/configuration/interfaces/openvpn.rst
index 2160e781..70161e1e 100644
--- a/docs/configuration/interfaces/openvpn.rst
+++ b/docs/configuration/interfaces/openvpn.rst
@@ -148,6 +148,7 @@ Local Configuration:
set interfaces openvpn vtun1 tls certificate 'openvpn-local' # The self-signed certificate
set interfaces openvpn vtun1 tls peer-fingerprint <remote cert fingerprint> # The output of 'run show pki certificate <name> fingerprint sha256
on the remote rout
+
Remote Configuration:
.. code-block:: none
@@ -163,6 +164,7 @@ Remote Configuration:
set interfaces openvpn vtun1 tls certificate 'openvpn-remote' # The self-signed certificate
set interfaces openvpn vtun1 tls peer-fingerprint <local cert fingerprint> # The output of 'run show pki certificate <name> fingerprint sha256
on the local router
+
Pre-shared keys
---------------
@@ -200,6 +202,7 @@ Then you need to install the key on the remote router:
Then you need to set the key in your OpenVPN interface settings:
.. code-block:: none
+
set interfaces openvpn vtun1 shared-secret-key s2s
Firewall Exceptions
diff --git a/docs/introducing/history.rst b/docs/introducing/history.rst
index daf3e2a1..40b99b02 100644
--- a/docs/introducing/history.rst
+++ b/docs/introducing/history.rst
@@ -110,7 +110,7 @@ Sagitta (the Arrow) is the codename of the current development
branch, so there's no VyOS 1.4 yet.
Circinus (1.5)
--------------
+--------------
Circinus (the Compass) is the codename of the upcoming development
branch, so there's no VyOS 1.5 yet.
diff --git a/docs/quick-start.rst b/docs/quick-start.rst
index 5f7ebbe3..a3927560 100644
--- a/docs/quick-start.rst
+++ b/docs/quick-start.rst
@@ -305,6 +305,7 @@ the DNS recursor we configured earlier, accepting traffic bound for port 53 from
all hosts on the ``NET-INSIDE-v4`` network:
.. code-block:: none
+
set firewall ipv4 input filter rule 30 action 'accept'
set firewall ipv4 input filter rule 30 icmp type-name 'echo-request'
set firewall ipv4 input filter rule 30 protocol 'icmp'