summaryrefslogtreecommitdiff
path: root/docs/configuration
diff options
context:
space:
mode:
Diffstat (limited to 'docs/configuration')
-rw-r--r--docs/configuration/nat/nat66.rst12
-rw-r--r--docs/configuration/service/ntp.rst3
-rw-r--r--docs/configuration/service/router-advert.rst7
-rw-r--r--docs/configuration/service/ssh.rst5
-rw-r--r--docs/configuration/vrf/index.rst8
5 files changed, 26 insertions, 9 deletions
diff --git a/docs/configuration/nat/nat66.rst b/docs/configuration/nat/nat66.rst
index 9345e708..42f63fc9 100644
--- a/docs/configuration/nat/nat66.rst
+++ b/docs/configuration/nat/nat66.rst
@@ -105,6 +105,18 @@ Example:
set nat66 destination rule 1 destination address 'fc00::/64'
set nat66 destination rule 1 translation address 'fc01::/64'
+For the destination, groups can also be used instead of an address.
+
+Example:
+
+.. code-block:: none
+
+ set firewall group ipv6-address-group ADR-INSIDE-v6 address fc00::1
+
+ set nat66 destination rule 1 inbound-interface name 'eth0'
+ set nat66 destination rule 1 destination group address-group ADR-INSIDE-v6
+ set nat66 destination rule 1 translation address 'fc01::/64'
+
Configuration Examples
======================
diff --git a/docs/configuration/service/ntp.rst b/docs/configuration/service/ntp.rst
index 266376cf..f82baa34 100644
--- a/docs/configuration/service/ntp.rst
+++ b/docs/configuration/service/ntp.rst
@@ -71,7 +71,8 @@ Configuration
NTP process will only listen on the specified IP address. You must specify
the `<address>` and optionally the permitted clients. Multiple listen
- addresses can be configured.
+ addresses for same IP family is no longer supported. Only one IPv4 and one
+ IPv6 address can be configured, using separate commands for each.
.. cfgcmd:: set service ntp allow-client address <address>
diff --git a/docs/configuration/service/router-advert.rst b/docs/configuration/service/router-advert.rst
index 8f984b10..365017dd 100644
--- a/docs/configuration/service/router-advert.rst
+++ b/docs/configuration/service/router-advert.rst
@@ -102,6 +102,13 @@ To disable advertisements without deleting the configuration:
.. cfgcmd:: set service router-advert interface <interface> no-send-advert
+ If set, the router will no longer send periodic router advertisements and
+ will not respond to router solicitations.
+
+.. cfgcmd:: set service router-advert interface <interface> no-send-interval
+
+ Advertisement Interval Option (specified by Mobile IPv6) is always included in
+ Router Advertisements unless this option is set.
*******
Example
diff --git a/docs/configuration/service/ssh.rst b/docs/configuration/service/ssh.rst
index d3ca51b5..e7642433 100644
--- a/docs/configuration/service/ssh.rst
+++ b/docs/configuration/service/ssh.rst
@@ -64,11 +64,12 @@ Configuration
Disable the host validation through reverse DNS lookups - can speedup login
time when reverse lookup is not possible.
-.. cfgcmd:: set service ssh macs <mac>
+.. cfgcmd:: set service ssh mac <mac>
Specifies the available :abbr:`MAC (Message Authentication Code)` algorithms.
The MAC algorithm is used in protocol version 2 for data integrity protection.
- Multiple algorithms can be provided.
+ Multiple algorithms can be provided by using multiple commands, defining
+ one algorithm per command.
List of supported MACs: ``hmac-md5``, ``hmac-md5-96``, ``hmac-ripemd160``,
``hmac-sha1``, ``hmac-sha1-96``, ``hmac-sha2-256``, ``hmac-sha2-512``,
diff --git a/docs/configuration/vrf/index.rst b/docs/configuration/vrf/index.rst
index 0d6b895f..e9115458 100644
--- a/docs/configuration/vrf/index.rst
+++ b/docs/configuration/vrf/index.rst
@@ -18,14 +18,10 @@ Configuration
A VRF device is created with an associated route table. Network interfaces are
then enslaved to a VRF device.
-.. cfgcmd:: set vrf name <name>
-
- Create new VRF instance with `<name>`. The name is used when placing
- individual interfaces into the VRF.
-
.. cfgcmd:: set vrf name <name> table <id>
- Configured routing table `<id>` is used by VRF `<name>`.
+ Create a new VRF instance with `<name>` and `<id>`. The name is used when placing
+ individual interfaces into the VRF.
.. note:: A routing table ID can not be modified once it is assigned. It can
only be changed by deleting and re-adding the VRF instance.