diff options
Diffstat (limited to 'docs/configuration')
-rw-r--r-- | docs/configuration/nat/nat66.rst | 12 | ||||
-rw-r--r-- | docs/configuration/service/ntp.rst | 3 | ||||
-rw-r--r-- | docs/configuration/service/router-advert.rst | 7 | ||||
-rw-r--r-- | docs/configuration/service/ssh.rst | 5 | ||||
-rw-r--r-- | docs/configuration/vrf/index.rst | 8 |
5 files changed, 26 insertions, 9 deletions
diff --git a/docs/configuration/nat/nat66.rst b/docs/configuration/nat/nat66.rst index 9345e708..42f63fc9 100644 --- a/docs/configuration/nat/nat66.rst +++ b/docs/configuration/nat/nat66.rst @@ -105,6 +105,18 @@ Example: set nat66 destination rule 1 destination address 'fc00::/64' set nat66 destination rule 1 translation address 'fc01::/64' +For the destination, groups can also be used instead of an address. + +Example: + +.. code-block:: none + + set firewall group ipv6-address-group ADR-INSIDE-v6 address fc00::1 + + set nat66 destination rule 1 inbound-interface name 'eth0' + set nat66 destination rule 1 destination group address-group ADR-INSIDE-v6 + set nat66 destination rule 1 translation address 'fc01::/64' + Configuration Examples ====================== diff --git a/docs/configuration/service/ntp.rst b/docs/configuration/service/ntp.rst index 266376cf..f82baa34 100644 --- a/docs/configuration/service/ntp.rst +++ b/docs/configuration/service/ntp.rst @@ -71,7 +71,8 @@ Configuration NTP process will only listen on the specified IP address. You must specify the `<address>` and optionally the permitted clients. Multiple listen - addresses can be configured. + addresses for same IP family is no longer supported. Only one IPv4 and one + IPv6 address can be configured, using separate commands for each. .. cfgcmd:: set service ntp allow-client address <address> diff --git a/docs/configuration/service/router-advert.rst b/docs/configuration/service/router-advert.rst index 8f984b10..365017dd 100644 --- a/docs/configuration/service/router-advert.rst +++ b/docs/configuration/service/router-advert.rst @@ -102,6 +102,13 @@ To disable advertisements without deleting the configuration: .. cfgcmd:: set service router-advert interface <interface> no-send-advert + If set, the router will no longer send periodic router advertisements and + will not respond to router solicitations. + +.. cfgcmd:: set service router-advert interface <interface> no-send-interval + + Advertisement Interval Option (specified by Mobile IPv6) is always included in + Router Advertisements unless this option is set. ******* Example diff --git a/docs/configuration/service/ssh.rst b/docs/configuration/service/ssh.rst index d3ca51b5..e7642433 100644 --- a/docs/configuration/service/ssh.rst +++ b/docs/configuration/service/ssh.rst @@ -64,11 +64,12 @@ Configuration Disable the host validation through reverse DNS lookups - can speedup login time when reverse lookup is not possible. -.. cfgcmd:: set service ssh macs <mac> +.. cfgcmd:: set service ssh mac <mac> Specifies the available :abbr:`MAC (Message Authentication Code)` algorithms. The MAC algorithm is used in protocol version 2 for data integrity protection. - Multiple algorithms can be provided. + Multiple algorithms can be provided by using multiple commands, defining + one algorithm per command. List of supported MACs: ``hmac-md5``, ``hmac-md5-96``, ``hmac-ripemd160``, ``hmac-sha1``, ``hmac-sha1-96``, ``hmac-sha2-256``, ``hmac-sha2-512``, diff --git a/docs/configuration/vrf/index.rst b/docs/configuration/vrf/index.rst index 0d6b895f..e9115458 100644 --- a/docs/configuration/vrf/index.rst +++ b/docs/configuration/vrf/index.rst @@ -18,14 +18,10 @@ Configuration A VRF device is created with an associated route table. Network interfaces are then enslaved to a VRF device. -.. cfgcmd:: set vrf name <name> - - Create new VRF instance with `<name>`. The name is used when placing - individual interfaces into the VRF. - .. cfgcmd:: set vrf name <name> table <id> - Configured routing table `<id>` is used by VRF `<name>`. + Create a new VRF instance with `<name>` and `<id>`. The name is used when placing + individual interfaces into the VRF. .. note:: A routing table ID can not be modified once it is assigned. It can only be changed by deleting and re-adding the VRF instance. |