diff options
Diffstat (limited to 'docs/configuration')
-rw-r--r-- | docs/configuration/policy/local-route.rst | 31 | ||||
-rw-r--r-- | docs/configuration/protocols/bfd.rst | 8 | ||||
-rw-r--r-- | docs/configuration/service/dhcp-server.rst | 10 | ||||
-rw-r--r-- | docs/configuration/vpn/ipsec.rst | 14 |
4 files changed, 50 insertions, 13 deletions
diff --git a/docs/configuration/policy/local-route.rst b/docs/configuration/policy/local-route.rst index 0b0122ab..e938f3cc 100644 --- a/docs/configuration/policy/local-route.rst +++ b/docs/configuration/policy/local-route.rst @@ -8,8 +8,8 @@ Policies for local traffic are defined in this section. Configuration ************* -Local Route -=========== +Local Route IPv4 +================ .. cfgcmd:: set policy local-route rule <1-32765> set table <1-200|main> @@ -18,3 +18,30 @@ Local Route .. cfgcmd:: set policy local-route rule <1-32765> source <x.x.x.x|x.x.x.x/x> Set source address or prefix to match. + +.. cfgcmd:: set policy local-route rule <1-32765> destination <x.x.x.x|x.x.x.x/x> + + Set destination address or prefix to match. + +.. cfgcmd:: set policy local-route rule <1-32765> inbound-interface <interface> + + Set inbound interface to match. + +Local Route IPv6 +================ + +.. cfgcmd:: set policy local-route6 rule <1-32765> set table <1-200|main> + + Set routing table to forward packet to. + +.. cfgcmd:: set policy local-route6 rule <1-32765> source <h:h:h:h:h:h:h:h|<h:h:h:h:h:h:h:h/x> + + Set source address or prefix to match. + +.. cfgcmd:: set policy local-route6 rule <1-32765> destination <h:h:h:h:h:h:h:h|<h:h:h:h:h:h:h:h/x> + + Set destination address or prefix to match. + +.. cfgcmd:: set policy local-route6 rule <1-32765> inbound-interface <interface> + + Set inbound interface to match.
\ No newline at end of file diff --git a/docs/configuration/protocols/bfd.rst b/docs/configuration/protocols/bfd.rst index 60f9ffd0..dac1bf0f 100644 --- a/docs/configuration/protocols/bfd.rst +++ b/docs/configuration/protocols/bfd.rst @@ -1,4 +1,4 @@ -:lastproofread: 2021-09-28 +:lastproofread: 2022-02-05 .. include:: /_include/need_improvement.txt @@ -72,11 +72,11 @@ Enable BFD in BGP Enable BFD in OSPF ------------------ -.. cfgcmd:: set interfaces ethernet <interface> ip ospf bfd +.. cfgcmd:: set protocols ospf interface <interface> bfd Enable BFD for OSPF on an interface -.. cfgcmd:: set interfaces ethernet <interface> ipv6 ospfv3 bfd +.. cfgcmd:: set protocols ospfv3 interface <interface> bfd Enable BFD for OSPFv3 on an interface @@ -93,7 +93,7 @@ Enable BFD in ISIS Operational Commands ==================== -.. opcmd:: show protocols bfd peer +.. opcmd:: show bfd peers Show all BFD peers diff --git a/docs/configuration/service/dhcp-server.rst b/docs/configuration/service/dhcp-server.rst index 9d0e0855..357203fd 100644 --- a/docs/configuration/service/dhcp-server.rst +++ b/docs/configuration/service/dhcp-server.rst @@ -21,6 +21,16 @@ address. Configuration ============= +.. cfgcmd:: set service dhcp-server hostfile-update + + Create DNS record per client lease, by adding clients to /etc/hosts file. + Entry will have format: `<shared-network-name>_<hostname>.<domain-name>` + +.. cfgcmd:: set service dhcp-server host-decl-name + + Will drop `<shared-network-name>_` from client DNS record, using only the + host declaration name and domain: `<hostname>.<domain-name>` + .. cfgcmd:: set service dhcp-server shared-network-name <name> domain-name <domain-name> The domain-name parameter should be the domain name that will be appended to diff --git a/docs/configuration/vpn/ipsec.rst b/docs/configuration/vpn/ipsec.rst index 590f6023..7194057d 100644 --- a/docs/configuration/vpn/ipsec.rst +++ b/docs/configuration/vpn/ipsec.rst @@ -174,8 +174,8 @@ On the LEFT: # GRE tunnel set interfaces tunnel tun0 encapsulation gre - set interfaces tunnel tun0 local-ip 192.0.2.10 - set interfaces tunnel tun0 remote-ip 203.0.113.45 + set interfaces tunnel tun0 source-address 192.0.2.10 + set interfaces tunnel tun0 remote 203.0.113.45 set interfaces tunnel tun0 address 10.10.10.1/30 ## IPsec @@ -226,8 +226,8 @@ On the LEFT: set interfaces tunnel tun0 encapsulation gre set interfaces tunnel tun0 address 10.10.10.1/30 - set interfaces tunnel tun0 local-ip 192.168.99.1 - set interfaces tunnel tun0 remote-ip 192.168.99.2 + set interfaces tunnel tun0 source-address 192.168.99.1 + set interfaces tunnel tun0 remote 192.168.99.2 On the RIGHT: @@ -237,8 +237,8 @@ On the RIGHT: set interfaces tunnel tun0 encapsulation gre set interfaces tunnel tun0 address 10.10.10.2/30 - set interfaces tunnel tun0 local-ip 192.168.99.2 - set interfaces tunnel tun0 remote-ip 192.168.99.1 + set interfaces tunnel tun0 source-address 192.168.99.2 + set interfaces tunnel tun0 remote 192.168.99.1 **Setting up IPSec** @@ -247,7 +247,7 @@ tricky part is that pre-shared secret authentication doesn't work with dynamic address, so we'll have to use RSA keys. First, on both routers run the operational command "generate pki key-pair -install <key-pair nam>>". You may choose different length than 2048 of course. +install <key-pair name>". You may choose different length than 2048 of course. .. code-block:: none |