From f1d53340b2634c8fbed7f63586f4b172f6c0c678 Mon Sep 17 00:00:00 2001 From: rebortg Date: Mon, 18 Sep 2023 05:42:25 +0000 Subject: Github: update translations --- docs/_locale/de/LC_MESSAGES/configexamples.mo | Bin 119351 -> 123543 bytes docs/_locale/de/LC_MESSAGES/configuration.mo | Bin 1043295 -> 1051533 bytes docs/_locale/de/LC_MESSAGES/contributing.mo | Bin 109085 -> 109457 bytes docs/_locale/de/configexamples.pot | 225 +- docs/_locale/de/configuration.pot | 459 +- docs/_locale/de/contributing.pot | 177 +- docs/_locale/en/LC_MESSAGES/configexamples.mo | Bin 119340 -> 123532 bytes docs/_locale/en/LC_MESSAGES/configuration.mo | Bin 1043256 -> 1051494 bytes docs/_locale/en/LC_MESSAGES/contributing.mo | Bin 106746 -> 107118 bytes docs/_locale/en/LC_MESSAGES/quick-start.mo | Bin 7914 -> 19890 bytes docs/_locale/es/404.pot | 29 + docs/_locale/es/LC_MESSAGES/404.mo | Bin 0 -> 979 bytes docs/_locale/es/LC_MESSAGES/automation.mo | Bin 0 -> 38270 bytes docs/_locale/es/LC_MESSAGES/cli.mo | Bin 0 -> 31126 bytes docs/_locale/es/LC_MESSAGES/configexamples.mo | Bin 0 -> 131348 bytes docs/_locale/es/LC_MESSAGES/configuration.mo | Bin 0 -> 1131863 bytes docs/_locale/es/LC_MESSAGES/contributing.mo | Bin 0 -> 114847 bytes docs/_locale/es/LC_MESSAGES/copyright.mo | Bin 0 -> 1875 bytes docs/_locale/es/LC_MESSAGES/documentation.mo | Bin 0 -> 24830 bytes docs/_locale/es/LC_MESSAGES/index.mo | Bin 0 -> 3960 bytes docs/_locale/es/LC_MESSAGES/installation.mo | Bin 0 -> 108820 bytes docs/_locale/es/LC_MESSAGES/introducing.mo | Bin 0 -> 15031 bytes docs/_locale/es/LC_MESSAGES/operation.mo | Bin 0 -> 21067 bytes docs/_locale/es/LC_MESSAGES/quick-start.mo | Bin 0 -> 20335 bytes docs/_locale/es/LC_MESSAGES/troubleshooting.mo | Bin 0 -> 13174 bytes docs/_locale/es/automation.pot | 817 + docs/_locale/es/cli.pot | 437 + docs/_locale/es/configexamples.pot | 2773 +++ docs/_locale/es/configuration.pot | 20654 +++++++++++++++++++++++ docs/_locale/es/contributing.pot | 1727 ++ docs/_locale/es/copyright.pot | 29 + docs/_locale/es/documentation.pot | 417 + docs/_locale/es/index.pot | 89 + docs/_locale/es/installation.pot | 1960 +++ docs/_locale/es/introducing.pot | 161 + docs/_locale/es/operation.pot | 326 + docs/_locale/es/quick-start.pot | 305 + docs/_locale/es/troubleshooting.pot | 290 + 38 files changed, 30539 insertions(+), 336 deletions(-) create mode 100644 docs/_locale/es/404.pot create mode 100644 docs/_locale/es/LC_MESSAGES/404.mo create mode 100644 docs/_locale/es/LC_MESSAGES/automation.mo create mode 100644 docs/_locale/es/LC_MESSAGES/cli.mo create mode 100644 docs/_locale/es/LC_MESSAGES/configexamples.mo create mode 100644 docs/_locale/es/LC_MESSAGES/configuration.mo create mode 100644 docs/_locale/es/LC_MESSAGES/contributing.mo create mode 100644 docs/_locale/es/LC_MESSAGES/copyright.mo create mode 100644 docs/_locale/es/LC_MESSAGES/documentation.mo create mode 100644 docs/_locale/es/LC_MESSAGES/index.mo create mode 100644 docs/_locale/es/LC_MESSAGES/installation.mo create mode 100644 docs/_locale/es/LC_MESSAGES/introducing.mo create mode 100644 docs/_locale/es/LC_MESSAGES/operation.mo create mode 100644 docs/_locale/es/LC_MESSAGES/quick-start.mo create mode 100644 docs/_locale/es/LC_MESSAGES/troubleshooting.mo create mode 100644 docs/_locale/es/automation.pot create mode 100644 docs/_locale/es/cli.pot create mode 100644 docs/_locale/es/configexamples.pot create mode 100644 docs/_locale/es/configuration.pot create mode 100644 docs/_locale/es/contributing.pot create mode 100644 docs/_locale/es/copyright.pot create mode 100644 docs/_locale/es/documentation.pot create mode 100644 docs/_locale/es/index.pot create mode 100644 docs/_locale/es/installation.pot create mode 100644 docs/_locale/es/introducing.pot create mode 100644 docs/_locale/es/operation.pot create mode 100644 docs/_locale/es/quick-start.pot create mode 100644 docs/_locale/es/troubleshooting.pot diff --git a/docs/_locale/de/LC_MESSAGES/configexamples.mo b/docs/_locale/de/LC_MESSAGES/configexamples.mo index b576ae18..44d8467f 100644 Binary files a/docs/_locale/de/LC_MESSAGES/configexamples.mo and b/docs/_locale/de/LC_MESSAGES/configexamples.mo differ diff --git a/docs/_locale/de/LC_MESSAGES/configuration.mo b/docs/_locale/de/LC_MESSAGES/configuration.mo index 77349729..2214ada7 100644 Binary files a/docs/_locale/de/LC_MESSAGES/configuration.mo and b/docs/_locale/de/LC_MESSAGES/configuration.mo differ diff --git a/docs/_locale/de/LC_MESSAGES/contributing.mo b/docs/_locale/de/LC_MESSAGES/contributing.mo index da94bd77..98e048cc 100644 Binary files a/docs/_locale/de/LC_MESSAGES/contributing.mo and b/docs/_locale/de/LC_MESSAGES/contributing.mo differ diff --git a/docs/_locale/de/configexamples.pot b/docs/_locale/de/configexamples.pot index 877d0a5f..22c08587 100644 --- a/docs/_locale/de/configexamples.pot +++ b/docs/_locale/de/configexamples.pot @@ -8,7 +8,7 @@ msgstr "" "Language: de\n" "Plural-Forms: nplurals=2; plural=(n==1) ? 0 : 1;\n" -#: ../../configexamples/zone-policy.rst:152 +#: ../../configexamples/zone-policy.rst:162 msgid "''It is important to note, that you do not want to add logging to the established state rule as you will be logging both the inbound and outbound packets for each session instead of just the initiation of the session. Your logs will be massive in a very short period of time.''" msgstr "''It is important to note, that you do not want to add logging to the established state rule as you will be logging both the inbound and outbound packets for each session instead of just the initiation of the session. Your logs will be massive in a very short period of time.''" @@ -36,7 +36,7 @@ msgstr "**NOTE:** VyOS Router (tested with VyOS 1.4-rolling-202110310317) – T msgid "**Note:** At the moment, trace mpls doesn’t show labels/paths. So we’ll see * * * for the transit routers of the mpls backbone." msgstr "**Note:** At the moment, trace mpls doesn’t show labels/paths. So we’ll see * * * for the transit routers of the mpls backbone." -#: ../../configexamples/zone-policy.rst:24 +#: ../../configexamples/zone-policy.rst:34 msgid "**This specific example is for a router on a stick, but is very easily adapted for however many NICs you have**:" msgstr "**This specific example is for a router on a stick, but is very easily adapted for however many NICs you have**:" @@ -140,11 +140,11 @@ msgstr "172.17.1.40 CS0 by default" msgid "172.17.1.4 CS0 -> CS6" msgstr "172.17.1.4 CS0 -> CS6" -#: ../../configexamples/zone-policy.rst:35 +#: ../../configexamples/zone-policy.rst:45 msgid "192.168.100.10/2001:0DB8:0:AAAA::10 is the administrator's console. It can SSH to VyOS." msgstr "192.168.100.10/2001:0DB8:0:AAAA::10 is the administrator's console. It can SSH to VyOS." -#: ../../configexamples/zone-policy.rst:33 +#: ../../configexamples/zone-policy.rst:43 msgid "192.168.200.200/2001:0DB8:0:BBBB::200 is an internal/external DNS, web and mail (SMTP/IMAP) server." msgstr "192.168.200.200/2001:0DB8:0:BBBB::200 is an internal/external DNS, web and mail (SMTP/IMAP) server." @@ -186,6 +186,10 @@ msgstr "203.0.113.2" msgid "203.0.113.3" msgstr "203.0.113.3" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:20 +msgid "2 private subnets on each site." +msgstr "2 private subnets on each site." + #: ../../configexamples/l3vpn-hub-and-spoke.rst:35 msgid "2 x Route reflectors (VyOS-RRx)" msgstr "2 x Route reflectors (VyOS-RRx)" @@ -272,7 +276,7 @@ msgstr "A brief excursion into VRFs: This has been one of the longest-standing f msgid "A connection resource deployed in Azure linking the Azure VNet gateway and the local network gateway representing the Vyos device." msgstr "A connection resource deployed in Azure linking the Azure VNet gateway and the local network gateway representing the Vyos device." -#: ../../configexamples/index.rst:34 +#: ../../configexamples/index.rst:35 msgid "A host ``vyos-oobm`` will use as a ssh proxy. This host is just necessary for the Lab test." msgstr "A host ``vyos-oobm`` will use as a ssh proxy. This host is just necessary for the Lab test." @@ -338,6 +342,10 @@ msgstr "After all is done and commit, let's take a look if the Wireguard interfa msgid "After configured all the VRFs involved in this topology we take a deeper look at both BGP and Routing table for the VRF LAN1" msgstr "After configured all the VRFs involved in this topology we take a deeper look at both BGP and Routing table for the VRF LAN1" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:206 +msgid "After some testing, we can check ipsec status, and counter on every tunnel:" +msgstr "After some testing, we can check ipsec status, and counter on every tunnel:" + #: ../../configexamples/qos.rst:81 msgid "After the interface eth0 on router VyOS3" msgstr "After the interface eth0 on router VyOS3" @@ -362,6 +370,10 @@ msgstr "All traffic coming in through eth2 is balanced between eth0 and eth1 on msgid "Allow DHCPv6 packets for router" msgstr "Allow DHCPv6 packets for router" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:32 +msgid "Allow access to the router only from trusted networks." +msgstr "Allow access to the router only from trusted networks." + #: ../../configexamples/pppoe-ipv6-basic.rst:86 msgid "Allow all established and related traffic for router and LAN" msgstr "Allow all established and related traffic for router and LAN" @@ -370,6 +382,26 @@ msgstr "Allow all established and related traffic for router and LAN" msgid "Allow all icmpv6 packets for router and LAN" msgstr "Allow all icmpv6 packets for router and LAN" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:38 +msgid "Allow all new connections from local subnets." +msgstr "Allow all new connections from local subnets." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:40 +msgid "Allow connections from LANs to LANs throught the tunnel." +msgstr "Allow connections from LANs to LANs throught the tunnel." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:34 +msgid "Allow dns requests only only for local networks." +msgstr "Allow dns requests only only for local networks." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:36 +msgid "Allow icmp on all interfaces." +msgstr "Allow icmp on all interfaces." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:220 +msgid "Also, we can check firewall counters:" +msgstr "Also, we can check firewall counters:" + #: ../../configexamples/l3vpn-hub-and-spoke.rst:716 msgid "Also we can verify how PE devices receives VPNv4 networks from the RRs and installing them to the specific customer VRFs:" msgstr "Also we can verify how PE devices receives VPNv4 networks from the RRs and installing them to the specific customer VRFs:" @@ -378,6 +410,10 @@ msgstr "Also we can verify how PE devices receives VPNv4 networks from the RRs a msgid "An L3VPN consists of multiple access links, multiple VPN routing and forwarding (VRF) tables, and multiple MPLS paths or multiple P2MP LSPs. An L3VPN can be configured to connect two or more customer sites. In hub-and-spoke MPLS L3VPN environments, the spoke routers need to have unique Route Distinguishers (RDs). In order to use the hub site as a transit point for connectivity in such an environment, the spoke sites export their routes to the hub. Spokes can talk to hubs, but never have direct paths to other spokes. All traffic between spokes is controlled and delivered over the hub site." msgstr "An L3VPN consists of multiple access links, multiple VPN routing and forwarding (VRF) tables, and multiple MPLS paths or multiple P2MP LSPs. An L3VPN can be configured to connect two or more customer sites. In hub-and-spoke MPLS L3VPN environments, the spoke routers need to have unique Route Distinguishers (RDs). In order to use the hub site as a transit point for connectivity in such an environment, the spoke sites export their routes to the hub. Spokes can talk to hubs, but never have direct paths to other spokes. All traffic between spokes is controlled and delivered over the hub site." +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:191 +msgid "And NAT Configuration:" +msgstr "And NAT Configuration:" + #: ../../configexamples/autotest/Wireguard/Wireguard.rst:99 msgid "And ping the Branch PC from your central router to check the response." msgstr "And ping the Branch PC from your central router to check the response." @@ -541,7 +577,7 @@ msgstr "Both LANs have to be able to route between each other, both will have ma msgid "Branch" msgstr "Branch" -#: ../../configexamples/zone-policy.rst:141 +#: ../../configexamples/zone-policy.rst:151 msgid "By default, iptables does not allow traffic for established sessions to return, so you must explicitly allow this. I do this by adding two rules to every ruleset. 1 allows established and related state packets through and rule 2 drops and logs invalid state packets. We place the established/related rule at the top because the vast majority of traffic on a network is established and the invalid rule to prevent invalid state packets from mistakenly being matched against other rules. Having the most matched rule listed first reduces CPU load in high volume environments. Note: I have filed a bug to have this added as a default action as well." msgstr "By default, iptables does not allow traffic for established sessions to return, so you must explicitly allow this. I do this by adding two rules to every ruleset. 1 allows established and related state packets through and rule 2 drops and logs invalid state packets. We place the established/related rule at the top because the vast majority of traffic on a network is established and the invalid rule to prevent invalid state packets from mistakenly being matched against other rules. Having the most matched rule listed first reduces CPU load in high volume environments. Note: I have filed a bug to have this added as a default action as well." @@ -579,6 +615,10 @@ msgstr "Check the result." msgid "Checking the routing table of the VRF should reveal both static and connected entries active. A PING test between the Core and remote router is a way to validate connectivity within the VRF." msgstr "Checking the routing table of the VRF should reveal both static and connected entries active. A PING test between the Core and remote router is a way to validate connectivity within the VRF." +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:204 +msgid "Checking through op-mode commands" +msgstr "Checking through op-mode commands" + #: ../../configexamples/ha.rst:90 msgid "Cisco VPC Crossconnect - Ports 39 and 40 bonded between each switch" msgstr "Cisco VPC Crossconnect - Ports 39 and 40 bonded between each switch" @@ -592,6 +632,10 @@ msgstr "Clamp the VTI's MSS to 1350 to avoid PMTU blackholes." msgid "Client configuration" msgstr "Client configuration" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:24 +msgid "Communication between private subnets should be done through ipsec tunnel without nat." +msgstr "Communication between private subnets should be done through ipsec tunnel without nat." + #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:601 msgid "Conclusions" msgstr "Conclusions" @@ -606,6 +650,7 @@ msgstr "Conclusions" #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:774 #: ../../configexamples/l3vpn-hub-and-spoke.rst:100 #: ../../configexamples/ospf-unnumbered.rst:12 +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:47 #: ../../configexamples/segment-routing-isis.rst:24 msgid "Configuration" msgstr "Configuration" @@ -630,7 +675,7 @@ msgstr "Configuration 'dcsp' and shaper using QoS" msgid "Configuration Blueprints" msgstr "Configuration Blueprints" -#: ../../configexamples/index.rst:27 +#: ../../configexamples/index.rst:28 msgid "Configuration Blueprints (autotest)" msgstr "Configuration Blueprints (autotest)" @@ -638,6 +683,10 @@ msgstr "Configuration Blueprints (autotest)" msgid "Configuration VyOS as OpenVPN Server" msgstr "Configuration VyOS as OpenVPN Server" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:27 +msgid "Configuration of basic firewall in one site, in order to:" +msgstr "Configuration of basic firewall in one site, in order to:" + #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:113 #: ../../configexamples/pppoe-ipv6-basic.rst:26 msgid "Configurations" @@ -771,11 +820,11 @@ msgstr "DHCP Relay trough GRE-Bridge" msgid "DHCPv6-PD Setup" msgstr "DHCPv6-PD Setup" -#: ../../configexamples/zone-policy.rst:364 +#: ../../configexamples/zone-policy.rst:374 msgid "DMZ-LAN policy is LAN-DMZ. You can get a rhythm to it when you build out a bunch at one time." msgstr "DMZ-LAN policy is LAN-DMZ. You can get a rhythm to it when you build out a bunch at one time." -#: ../../configexamples/zone-policy.rst:39 +#: ../../configexamples/zone-policy.rst:49 msgid "DMZ cannot access LAN resources." msgstr "DMZ cannot access LAN resources." @@ -803,11 +852,11 @@ msgstr "During address configuration, in addition to assigning an address to the msgid "Dynamic routing used between CE and PE nodes and eBGP peering established for the route exchanging between them. All routes received by PEs are then exported to L3VPN and delivered from Spoke sites to Hub and vise-versa based on previously configured L3VPN parameters." msgstr "Dynamic routing used between CE and PE nodes and eBGP peering established for the route exchanging between them. All routes received by PEs are then exported to L3VPN and delivered from Spoke sites to Hub and vise-versa based on previously configured L3VPN parameters." -#: ../../configexamples/zone-policy.rst:81 +#: ../../configexamples/zone-policy.rst:91 msgid "Each interface is assigned to a zone. The interface can be physical or virtual such as tunnels (VPN, PPTP, GRE, etc) and are treated exactly the same." msgstr "Each interface is assigned to a zone. The interface can be physical or virtual such as tunnels (VPN, PPTP, GRE, etc) and are treated exactly the same." -#: ../../configexamples/index.rst:31 +#: ../../configexamples/index.rst:32 msgid "Each lab will build an test from an external script. The page content will generate, so changes will not take an effect." msgstr "Each lab will build an test from an external script. The page content will generate, so changes will not take an effect." @@ -832,7 +881,7 @@ msgstr "Enable SSH so you can now SSH into the routers, rather than using the co msgid "Enables router advertisements. This is an IPv6 alternative for DHCP (though DHCPv6 can still be used). With RAs, Your devices will automatically find the information they need for routing and DNS." msgstr "Enables router advertisements. This is an IPv6 alternative for DHCP (though DHCPv6 can still be used). With RAs, Your devices will automatically find the information they need for routing and DNS." -#: ../../configexamples/zone-policy.rst:243 +#: ../../configexamples/zone-policy.rst:253 msgid "Even if the two zones will never communicate, it is a good idea to create the zone-pair-direction rulesets and set enable-default-log. This will allow you to log attempts to access the networks. Without it, you will never see the connection attempts." msgstr "Even if the two zones will never communicate, it is a good idea to create the zone-pair-direction rulesets and set enable-default-log. This will allow you to log attempts to access the networks. Without it, you will never see the connection attempts." @@ -893,6 +942,10 @@ msgstr "Finally, let’s check the reachability between CEs:" msgid "Firewall" msgstr "Firewall" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:123 +msgid "Firewall Configuration:" +msgstr "Firewall Configuration:" + #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:39 msgid "First, we configure the ``vyos-wan`` interface to get a DHCP address." msgstr "First, we configure the ``vyos-wan`` interface to get a DHCP address." @@ -921,6 +974,10 @@ msgstr "For home network users, most of time ISP only provides /64 prefix, hence msgid "For redundant / active-active configurations see :ref:`examples-azure-vpn-dual-bgp`" msgstr "For redundant / active-active configurations see :ref:`examples-azure-vpn-dual-bgp`" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:10 +msgid "For simplicity, configuration and tests are done only using ipv4, and firewall configuration in done only on one router." +msgstr "For simplicity, configuration and tests are done only using ipv4, and firewall configuration in done only on one router." + #: ../../configexamples/ha.rst:146 msgid "For the hardware router, replace ``eth0`` with ``bond0``. As (almost) every command is identical, this will not be specified unless different things need to be performed on different hosts." msgstr "For the hardware router, replace ``eth0`` with ``bond0``. As (almost) every command is identical, this will not be specified unless different things need to be performed on different hosts." @@ -965,7 +1022,7 @@ msgstr "Hardware" msgid "Hardware Router - Port 8 of each switch" msgstr "Hardware Router - Port 8 of each switch" -#: ../../configexamples/zone-policy.rst:272 +#: ../../configexamples/zone-policy.rst:282 msgid "Here is an example of an IPv6 DMZ-WAN ruleset." msgstr "Here is an example of an IPv6 DMZ-WAN ruleset." @@ -997,6 +1054,10 @@ msgstr "Hub" msgid "IP/MPLS technology is widely used by various service providers and large enterprises in order to achieve better network scalability, manageability and flexibility. It also provides the possibility to deliver different services for the customers in a seamless manner. Layer 3 VPN (L3VPN) is a type of VPN mode that is built and delivered through OSI layer 3 networking technologies. Often the border gateway protocol (BGP) is used to send and receive VPN-related data that is responsible for the control plane. L3VPN utilizes virtual routing and forwarding (VRF) techniques to receive and deliver user data as well as separate data planes of the end-users. It is built using a combination of IP- and MPLS-based information. Generally, L3VPNs are used to send data on back-end VPN infrastructures, such as for VPN connections between data centres, HQs and branches." msgstr "IP/MPLS technology is widely used by various service providers and large enterprises in order to achieve better network scalability, manageability and flexibility. It also provides the possibility to deliver different services for the customers in a seamless manner. Layer 3 VPN (L3VPN) is a type of VPN mode that is built and delivered through OSI layer 3 networking technologies. Often the border gateway protocol (BGP) is used to send and receive VPN-related data that is responsible for the control plane. L3VPN utilizes virtual routing and forwarding (VRF) techniques to receive and deliver user data as well as separate data planes of the end-users. It is built using a combination of IP- and MPLS-based information. Generally, L3VPNs are used to send data on back-end VPN infrastructures, such as for VPN connections between data centres, HQs and branches." +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:65 +msgid "IPSec configuration:" +msgstr "IPSec configuration:" + #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:82 msgid "IP Schema" msgstr "IP Schema" @@ -1009,7 +1070,7 @@ msgstr "IPv4 Network" msgid "IPv6 Network" msgstr "IPv6 Network" -#: ../../configexamples/zone-policy.rst:373 +#: ../../configexamples/zone-policy.rst:383 msgid "IPv6 Tunnel" msgstr "IPv6 Tunnel" @@ -1030,11 +1091,11 @@ msgstr "ISP" msgid "I chose to run OSPF as the IGP (Interior Gateway Protocol). All required BGP sessions are established via a dummy interfaces (similar to the loopback, but in Linux you can have only one loopback, while there can be many dummy interfaces) on the PE routers. In case of a link failure, traffic is diverted in the other direction in this triangle setup and BGP sessions will not go down. One could even enable BFD (Bidirectional Forwarding Detection) on the links for a faster failover and resilience in the network." msgstr "I chose to run OSPF as the IGP (Interior Gateway Protocol). All required BGP sessions are established via a dummy interfaces (similar to the loopback, but in Linux you can have only one loopback, while there can be many dummy interfaces) on the PE routers. In case of a link failure, traffic is diverted in the other direction in this triangle setup and BGP sessions will not go down. One could even enable BFD (Bidirectional Forwarding Detection) on the links for a faster failover and resilience in the network." -#: ../../configexamples/zone-policy.rst:161 +#: ../../configexamples/zone-policy.rst:171 msgid "I create/configure the interfaces first. Build out the rulesets for each zone-pair-direction which includes at least the three state rules. Then I setup the zone-policies." msgstr "I create/configure the interfaces first. Build out the rulesets for each zone-pair-direction which includes at least the three state rules. Then I setup the zone-policies." -#: ../../configexamples/zone-policy.rst:90 +#: ../../configexamples/zone-policy.rst:100 msgid "I name rule sets to indicate which zone-pair-direction they represent. eg. ZoneA-ZoneB or ZoneB-ZoneA. LAN-DMZ, DMZ-LAN." msgstr "I name rule sets to indicate which zone-pair-direction they represent. eg. ZoneA-ZoneB or ZoneB-ZoneA. LAN-DMZ, DMZ-LAN." @@ -1058,7 +1119,7 @@ msgstr "If we need to retrieve information about a specific host/network inside msgid "If you are following through this document, it is strongly suggested you complete the entire document, ONLY doing the virtual router1 steps, and then come back and walk through it AGAIN on the backup hardware router." msgstr "If you are following through this document, it is strongly suggested you complete the entire document, ONLY doing the virtual router1 steps, and then come back and walk through it AGAIN on the backup hardware router." -#: ../../configexamples/zone-policy.rst:375 +#: ../../configexamples/zone-policy.rst:385 msgid "If you are using a IPv6 tunnel from HE.net or someone else, the basis is the same except you have two WAN interfaces. One for v4 and one for v6." msgstr "If you are using a IPv6 tunnel from HE.net or someone else, the basis is the same except you have two WAN interfaces. One for v4 and one for v6." @@ -1066,7 +1127,7 @@ msgstr "If you are using a IPv6 tunnel from HE.net or someone else, the basis is msgid "If you use a routing protocol itself, you solve two problems at once. This is only a basic example, and is provided as a starting point." msgstr "If you use a routing protocol itself, you solve two problems at once. This is only a basic example, and is provided as a starting point." -#: ../../configexamples/zone-policy.rst:100 +#: ../../configexamples/zone-policy.rst:110 msgid "If your computer is on the LAN and you need to SSH into your VyOS box, you would need a rule to allow it in the LAN-Local ruleset. If you want to access a webpage from your VyOS box, you need a rule to allow it in the Local-LAN ruleset." msgstr "If your computer is on the LAN and you need to SSH into your VyOS box, you would need a rule to allow it in the LAN-Local ruleset. If you want to access a webpage from your VyOS box, you need a rule to allow it in the Local-LAN ruleset." @@ -1074,19 +1135,19 @@ msgstr "If your computer is on the LAN and you need to SSH into your VyOS box, y msgid "Image name: vyos-1.4-rolling-202110310317-amd64.iso" msgstr "Image name: vyos-1.4-rolling-202110310317-amd64.iso" -#: ../../configexamples/zone-policy.rst:93 +#: ../../configexamples/zone-policy.rst:103 msgid "In VyOS, you have to have unique Ruleset names. In the event of overlap, I add a \"-6\" to the end of v6 rulesets. eg. LAN-DMZ, LAN-DMZ-6. This allows for each auto-completion and uniqueness." msgstr "In VyOS, you have to have unique Ruleset names. In the event of overlap, I add a \"-6\" to the end of v6 rulesets. eg. LAN-DMZ, LAN-DMZ-6. This allows for each auto-completion and uniqueness." -#: ../../configexamples/zone-policy.rst:157 +#: ../../configexamples/zone-policy.rst:167 msgid "In VyOS you must have the interfaces created before you can apply it to the zone and the rulesets must be created prior to applying it to a zone-policy." msgstr "In VyOS you must have the interfaces created before you can apply it to the zone and the rulesets must be created prior to applying it to a zone-policy." -#: ../../configexamples/zone-policy.rst:8 +#: ../../configexamples/zone-policy.rst:18 msgid "In :vytask:`T2199` the syntax of the zone configuration was changed. The zone configuration moved from ``zone-policy zone `` to ``firewall zone ``." msgstr "In :vytask:`T2199` the syntax of the zone configuration was changed. The zone configuration moved from ``zone-policy zone `` to ``firewall zone ``." -#: ../../configexamples/zone-policy.rst:105 +#: ../../configexamples/zone-policy.rst:115 msgid "In rules, it is good to keep them named consistently. As the number of rules you have grows, the more consistency you have, the easier your life will be." msgstr "In rules, it is good to keep them named consistently. As the number of rules you have grows, the more consistency you have, the easier your life will be." @@ -1106,7 +1167,7 @@ msgstr "In the end, we will configure the traffic shaper using QoS mechanisms on msgid "In the end, you'll get a powerful instrument for monitoring the VyOS systems." msgstr "In the end, you'll get a powerful instrument for monitoring the VyOS systems." -#: ../../configexamples/zone-policy.rst:367 +#: ../../configexamples/zone-policy.rst:377 msgid "In the end, you will end up with something like this config. I took out everything but the Firewall, Interfaces, and zone-policy sections. It is long enough as is." msgstr "In the end, you will end up with something like this config. I took out everything but the Firewall, Interfaces, and zone-policy sections. It is long enough as is." @@ -1118,7 +1179,7 @@ msgstr "In this case, the hardware router has a different IP, so it would be" msgid "In this case, we'll try to make a simple lab using QoS and the general ability of the VyOS system. We recommend you to go through the main article about `QoS `_ first." msgstr "In this case, we'll try to make a simple lab using QoS and the general ability of the VyOS system. We recommend you to go through the main article about `QoS `_ first." -#: ../../configexamples/zone-policy.rst:355 +#: ../../configexamples/zone-policy.rst:365 msgid "In this case, we are setting the v6 ruleset that represents traffic sourced from the LAN, destined for the DMZ. Because the zone-policy firewall syntax is a little awkward, I keep it straight by thinking of it backwards." msgstr "In this case, we are setting the v6 ruleset that represents traffic sourced from the LAN, destined for the DMZ. Because the zone-policy firewall syntax is a little awkward, I keep it straight by thinking of it backwards." @@ -1138,11 +1199,11 @@ msgstr "In this example OpenVPN will be setup with a client certificate and user msgid "In this example two LAN interfaces exist in different subnets instead of one like in the previous examples:" msgstr "In this example two LAN interfaces exist in different subnets instead of one like in the previous examples:" -#: ../../configexamples/zone-policy.rst:97 +#: ../../configexamples/zone-policy.rst:107 msgid "In this example we have 4 zones. LAN, WAN, DMZ, Local. The local zone is the firewall itself." msgstr "In this example we have 4 zones. LAN, WAN, DMZ, Local. The local zone is the firewall itself." -#: ../../configexamples/zone-policy.rst:40 +#: ../../configexamples/zone-policy.rst:50 msgid "Inbound WAN connect to DMZ host." msgstr "Inbound WAN connect to DMZ host." @@ -1162,6 +1223,10 @@ msgstr "Inter-VRF Routing over VRF Lite" msgid "Inter-VRF routing is a well-known solution to address complex routing scenarios that enable -in a dynamic way- to leak routes between VRFs. Is recommended to take special consideration while designing route-targets and its application as it can minimize future interventions while creating a new VRF will automatically take the desired effect in its propagation." msgstr "Inter-VRF routing is a well-known solution to address complex routing scenarios that enable -in a dynamic way- to leak routes between VRFs. Is recommended to take special consideration while designing route-targets and its application as it can minimize future interventions while creating a new VRF will automatically take the desired effect in its propagation." +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:49 +msgid "Interface and routing configuration:" +msgstr "Interface and routing configuration:" + #: ../../configexamples/ha.rst:195 msgid "Internal Network" msgstr "Internal Network" @@ -1171,19 +1236,19 @@ msgstr "Internal Network" msgid "Internet" msgstr "Internet" -#: ../../configexamples/zone-policy.rst:30 +#: ../../configexamples/zone-policy.rst:40 msgid "Internet - 192.168.200.100 - TCP/25" msgstr "Internet - 192.168.200.100 - TCP/25" -#: ../../configexamples/zone-policy.rst:29 +#: ../../configexamples/zone-policy.rst:39 msgid "Internet - 192.168.200.100 - TCP/443" msgstr "Internet - 192.168.200.100 - TCP/443" -#: ../../configexamples/zone-policy.rst:31 +#: ../../configexamples/zone-policy.rst:41 msgid "Internet - 192.168.200.100 - TCP/53" msgstr "Internet - 192.168.200.100 - TCP/53" -#: ../../configexamples/zone-policy.rst:28 +#: ../../configexamples/zone-policy.rst:38 msgid "Internet - 192.168.200.100 - TCP/80" msgstr "Internet - 192.168.200.100 - TCP/80" @@ -1195,11 +1260,11 @@ msgstr "It's important to note that all your existing configurations will be mig msgid "It is assumed that the routers provided by upstream are capable of acting as a default router, add that as a static route." msgstr "It is assumed that the routers provided by upstream are capable of acting as a default router, add that as a static route." -#: ../../configexamples/zone-policy.rst:130 +#: ../../configexamples/zone-policy.rst:140 msgid "It is good practice to log both accepted and denied traffic. It can save you significant headaches when trying to troubleshoot a connectivity issue." msgstr "It is good practice to log both accepted and denied traffic. It can save you significant headaches when trying to troubleshoot a connectivity issue." -#: ../../configexamples/zone-policy.rst:50 +#: ../../configexamples/zone-policy.rst:60 msgid "It will look something like this:" msgstr "It will look something like this:" @@ -1223,7 +1288,7 @@ msgstr "L3VPN configuration parameters table:" msgid "L3VPN for Hub-and-Spoke connectivity with VyOS" msgstr "L3VPN for Hub-and-Spoke connectivity with VyOS" -#: ../../configexamples/zone-policy.rst:382 +#: ../../configexamples/zone-policy.rst:392 msgid "LAN, WAN, DMZ, local and TUN (tunnel)" msgstr "LAN, WAN, DMZ, local and TUN (tunnel)" @@ -1259,11 +1324,11 @@ msgstr "LAN 2" msgid "LAN Configuration" msgstr "LAN Configuration" -#: ../../configexamples/zone-policy.rst:37 +#: ../../configexamples/zone-policy.rst:47 msgid "LAN and DMZ hosts have basic outbound access: Web, FTP, SSH." msgstr "LAN and DMZ hosts have basic outbound access: Web, FTP, SSH." -#: ../../configexamples/zone-policy.rst:38 +#: ../../configexamples/zone-policy.rst:48 msgid "LAN can access DMZ resources." msgstr "LAN can access DMZ resources." @@ -1275,6 +1340,10 @@ msgstr "Let’s check IPv4 routing and MPLS information on provider nodes (same msgid "Let’s say we have a requirement to have multiple networks." msgstr "Let’s say we have a requirement to have multiple networks." +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:22 +msgid "Local subnets should be able to reach internet using source nat." +msgstr "Local subnets should be able to reach internet using source nat." + #: ../../configexamples/inter-vrf-routing-vrf-lite.rst:58 msgid "MP-BGP or MultiProtocol BGP introduces two main concepts to solve this limitation: - Route Distinguisher (RD): Is used to distinguish between different VRFs –called VPNs- inside the BGP Process. The RD is appended to each IPv4 Network that is advertised into BGP for that VPN making it a unique VPNv4 route. - Route Target (RT): This is an extended BGP community append to the VPNv4 route in the Import/Export process. When a route passes from the VRF routing table into the BGP process it will add the configured export extended community(ies) for that VPN. When that route needs to go from BGP into the VRF routing table will only pass if that given VPN import policy matches any of the appended community(ies) into that prefix." msgstr "MP-BGP or MultiProtocol BGP introduces two main concepts to solve this limitation: - Route Distinguisher (RD): Is used to distinguish between different VRFs –called VPNs- inside the BGP Process. The RD is appended to each IPv4 Network that is advertised into BGP for that VPN making it a unique VPNv4 route. - Route Target (RT): This is an extended BGP community append to the VPNv4 route in the Import/Export process. When a route passes from the VRF routing table into the BGP process it will add the configured export extended community(ies) for that VPN. When that route needs to go from BGP into the VRF routing table will only pass if that given VPN import policy matches any of the appended community(ies) into that prefix." @@ -1322,7 +1391,7 @@ msgstr "NAT and conntrack-sync" msgid "NMP example" msgstr "NMP example" -#: ../../configexamples/zone-policy.rst:13 +#: ../../configexamples/zone-policy.rst:23 msgid "Native IPv4 and IPv6" msgstr "Native IPv4 and IPv6" @@ -1360,6 +1429,10 @@ msgstr "Network Topology" msgid "Network Topology Diagram" msgstr "Network Topology Diagram" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:14 +msgid "Network Topology and requirements" +msgstr "Network Topology and requirements" + #: ../../configexamples/qos.rst:31 msgid "Next, we will replace only all CS4 labels on the “VyOS2” router." msgstr "Next, we will replace only all CS4 labels on the “VyOS2” router." @@ -1388,7 +1461,7 @@ msgstr "Note that router1 is a VM that runs on one of the compute nodes." msgid "Note to allow the router to receive DHCPv6 response from ISP. We need to allow packets with source port 547 (server) and destination port 546 (client)." msgstr "Note to allow the router to receive DHCPv6 response from ISP. We need to allow packets with source port 547 (server) and destination port 546 (client)." -#: ../../configexamples/zone-policy.rst:401 +#: ../../configexamples/zone-policy.rst:411 msgid "Notice, none go to WAN since WAN wouldn't have a v6 address on it." msgstr "Notice, none go to WAN since WAN wouldn't have a v6 address on it." @@ -1449,7 +1522,7 @@ msgstr "Once all routers can be safely remotely managed and the core network is msgid "Once all the required certificates and keys are installed, the remaining OpenVPN Server configuration can be carried out." msgstr "Once all the required certificates and keys are installed, the remaining OpenVPN Server configuration can be carried out." -#: ../../configexamples/zone-policy.rst:345 +#: ../../configexamples/zone-policy.rst:355 msgid "Once you have all of your rulesets built, then you need to create your zone-policy." msgstr "Once you have all of your rulesets built, then you need to create your zone-policy." @@ -1557,6 +1630,10 @@ msgstr "Pings will be sent to four targets for health testing (33.44.55.66, 44.5 msgid "Please note, 'autonomous-flag' and 'on-link-flag' are enabled by default, 'valid-lifetime' and 'preferred-lifetime' are set to default values of 30 days and 4 hours respectively." msgstr "Please note, 'autonomous-flag' and 'on-link-flag' are enabled by default, 'valid-lifetime' and 'preferred-lifetime' are set to default values of 30 days and 4 hours respectively." +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:5 +msgid "Policy-Based Site-to-Site VPN and Firewall Configuration" +msgstr "Policy-Based Site-to-Site VPN and Firewall Configuration" + #: ../../configexamples/azure-vpn-bgp.rst:48 #: ../../configexamples/azure-vpn-dual-bgp.rst:47 msgid "Pre-shared key" @@ -1572,6 +1649,10 @@ msgstr "Prerequisites" msgid "Priorities" msgstr "Priorities" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:29 +msgid "Protect the router on 'WAN' interface, allowing only ipsec connections and ssh access from trusted ips." +msgstr "Protect the router on 'WAN' interface, allowing only ipsec connections and ssh access from trusted ips." + #: ../../configexamples/ha.rst:230 msgid "Public Network" msgstr "Public Network" @@ -1668,7 +1749,7 @@ msgstr "Router B:" msgid "Router id's must be unique." msgstr "Router id's must be unique." -#: ../../configexamples/zone-policy.rst:88 +#: ../../configexamples/zone-policy.rst:98 msgid "Ruleset are created per zone-pair-direction." msgstr "Ruleset are created per zone-pair-direction." @@ -1728,7 +1809,7 @@ msgstr "Similarly, to attach the firewall, you would use `set interfaces etherne msgid "Since some ISPs disconnects continuous connection for every 2~3 days, we set ``valid-lifetime`` to 2 days to allow PC for phasing out old address." msgstr "Since some ISPs disconnects continuous connection for every 2~3 days, we set ``valid-lifetime`` to 2 days to allow PC for phasing out old address." -#: ../../configexamples/zone-policy.rst:226 +#: ../../configexamples/zone-policy.rst:236 msgid "Since we have 4 zones, we need to setup the following rulesets." msgstr "Since we have 4 zones, we need to setup the following rulesets." @@ -1744,7 +1825,7 @@ msgstr "Single LAN setup where eth2 is your LAN interface. Use the Tunnelbroker msgid "So, when your LAN is eth1, your DMZ is eth2, your cameras are on eth3, etc:" msgstr "So, when your LAN is eth1, your DMZ is eth2, your cameras are on eth3, etc:" -#: ../../configexamples/zone-policy.rst:406 +#: ../../configexamples/zone-policy.rst:416 msgid "Something like:" msgstr "Something like:" @@ -1753,10 +1834,14 @@ msgstr "Something like:" msgid "Spoke" msgstr "Spoke" -#: ../../configexamples/zone-policy.rst:348 +#: ../../configexamples/zone-policy.rst:358 msgid "Start by setting the interface and default action for each zone." msgstr "Start by setting the interface and default action for each zone." +#: ../../configexamples/zone-policy.rst:8 +msgid "Starting from VyOS 1.4-rolling-202308040557, a new firewall structure can be found on all vyos instalations, and zone based firewall is no longer supported. Documentation for most of the new firewall CLI can be found in the `firewall `_ chapter. The legacy firewall is still available for versions before 1.4-rolling-202308040557 and can be found in the :ref:`firewall-legacy` chapter. The examples in this section use the legacy firewall configuration commands, since this feature has been removed in earlier releases." +msgstr "Starting from VyOS 1.4-rolling-202308040557, a new firewall structure can be found on all vyos instalations, and zone based firewall is no longer supported. Documentation for most of the new firewall CLI can be found in the `firewall `_ chapter. The legacy firewall is still available for versions before 1.4-rolling-202308040557 and can be found in the :ref:`firewall-legacy` chapter. The examples in this section use the legacy firewall configuration commands, since this feature has been removed in earlier releases." + #: ../../configexamples/l3vpn-hub-and-spoke.rst:105 msgid "Step-1: Configuring IGP and enabling MPLS LDP" msgstr "Step-1: Configuring IGP and enabling MPLS LDP" @@ -1846,7 +1931,7 @@ msgstr "The Lab asume a full running Active Directory on the Windows Server. Her msgid "The Topology are consists of:" msgstr "The Topology are consists of:" -#: ../../configexamples/zone-policy.rst:47 +#: ../../configexamples/zone-policy.rst:57 msgid "The VyOS interface is assigned the .1/:1 address of their respective networks. WAN is on VLAN 10, LAN on VLAN 20, and DMZ on VLAN 30." msgstr "The VyOS interface is assigned the .1/:1 address of their respective networks. WAN is on VLAN 10, LAN on VLAN 20, and DMZ on VLAN 30." @@ -1870,11 +1955,11 @@ msgstr "The configuration steps are the same as in the previous example, except msgid "The example topology has 2 VyOS routers. One as The WAN Router and on as a Client, to test a single LAN setup" msgstr "The example topology has 2 VyOS routers. One as The WAN Router and on as a Client, to test a single LAN setup" -#: ../../configexamples/zone-policy.rst:123 +#: ../../configexamples/zone-policy.rst:133 msgid "The first two rules are to deal with the idiosyncrasies of VyOS and iptables." msgstr "The first two rules are to deal with the idiosyncrasies of VyOS and iptables." -#: ../../configexamples/zone-policy.rst:172 +#: ../../configexamples/zone-policy.rst:182 msgid "The following are the rules that were created for this example (may not be complete), both in IPv4 and IPv6. If there is no IP specified, then the source/destination address is not explicit." msgstr "The following are the rules that were created for this example (may not be complete), both in IPv4 and IPv6. If there is no IP specified, then the source/destination address is not explicit." @@ -1894,7 +1979,7 @@ msgstr "The format of these addresses:" msgid "The lab I built is using a VRF (called **mgmt**) to provide out-of-band SSH access to the PE (Provider Edge) routers." msgstr "The lab I built is using a VRF (called **mgmt**) to provide out-of-band SSH access to the PE (Provider Edge) routers." -#: ../../configexamples/index.rst:29 +#: ../../configexamples/index.rst:30 msgid "The next pages contains automatic full tested configuration examples." msgstr "The next pages contains automatic full tested configuration examples." @@ -1902,7 +1987,7 @@ msgstr "The next pages contains automatic full tested configuration examples." msgid "The previous example used the failover command to send traffic through eth1 if eth0 fails. In this example, failover functionality is provided by rule order." msgstr "The previous example used the failover command to send traffic through eth1 if eth0 fails. In this example, failover functionality is provided by rule order." -#: ../../configexamples/index.rst:37 +#: ../../configexamples/index.rst:38 msgid "The process will do the following steps:" msgstr "The process will do the following steps:" @@ -1966,6 +2051,10 @@ msgstr "This accomplishes a few things:" msgid "This chapter contains various configuration examples:" msgstr "This chapter contains various configuration examples:" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:16 +msgid "This configuration example and the requirments consists on:" +msgstr "This configuration example and the requirments consists on:" + #: ../../configexamples/ha.rst:13 msgid "This document aims to walk you through setting everything up, so at a point where you can reboot any machine and not lose more than a few seconds worth of connectivity." msgstr "This document aims to walk you through setting everything up, so at a point where you can reboot any machine and not lose more than a few seconds worth of connectivity." @@ -1998,6 +2087,10 @@ msgstr "This guide shows an example of a redundant (active-active) route-based I msgid "This guide shows an example of a route-based IKEv2 site-to-site VPN to Azure using VTI and BGP for dynamic routing updates." msgstr "This guide shows an example of a route-based IKEv2 site-to-site VPN to Azure using VTI and BGP for dynamic routing updates." +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:7 +msgid "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configiuration." +msgstr "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configiuration." + #: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:10 msgid "This guide walks through the setup of https://www.tunnelbroker.net/ for an IPv6 Tunnel." msgstr "This guide walks through the setup of https://www.tunnelbroker.net/ for an IPv6 Tunnel." @@ -2010,7 +2103,7 @@ msgstr "This has a floating IP address of 10.200.201.1/24, using virtual router msgid "This has a floating IP address of 203.0.113.1/24, using virtual router ID 113. The virtual router ID is just a random number between 1 and 254, and can be set to whatever you want. Best practices suggest you try to keep them unique enterprise-wide." msgstr "This has a floating IP address of 203.0.113.1/24, using virtual router ID 113. The virtual router ID is just a random number between 1 and 254, and can be set to whatever you want. Best practices suggest you try to keep them unique enterprise-wide." -#: ../../configexamples/zone-policy.rst:248 +#: ../../configexamples/zone-policy.rst:258 msgid "This is an example of the three base rules." msgstr "This is an example of the three base rules." @@ -2062,7 +2155,7 @@ msgstr "Thus you can easily match it to one of the devices/networks below." msgid "To achieve this, your ISP is required to support DHCPv6-PD. If you're not sure, please contact your ISP for more information." msgstr "To achieve this, your ISP is required to support DHCPv6-PD. If you're not sure, please contact your ISP for more information." -#: ../../configexamples/zone-policy.rst:134 +#: ../../configexamples/zone-policy.rst:144 msgid "To add logging to the default rule, do:" msgstr "To add logging to the default rule, do:" @@ -2091,7 +2184,7 @@ msgstr "To reach the network, a route must be set on each VyOS host. In this str msgid "Topology" msgstr "Topology" -#: ../../configexamples/zone-policy.rst:85 +#: ../../configexamples/zone-policy.rst:95 msgid "Traffic flows from zone A to zone B. That flow is what I refer to as a zone-pair-direction. eg. A->B and B->A are two zone-pair-destinations." msgstr "Traffic flows from zone A to zone B. That flow is what I refer to as a zone-pair-direction. eg. A->B and B->A are two zone-pair-destinations." @@ -2107,6 +2200,10 @@ msgstr "Tunnelbroker.net (IPv6)" msgid "Tunnelbroker topology image" msgstr "Tunnelbroker topology image" +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:18 +msgid "Two VyOS routers with public IP address." +msgstr "Two VyOS routers with public IP address." + #: ../../configexamples/wan-load-balancing.rst:105 msgid "Two rules will be created, the first rule directs traffic coming in from eth2 to eth0 and the second rule directs the traffic to eth1. If eth0 fails the first rule is bypassed and the second rule matches, directing traffic to eth1." msgstr "Two rules will be created, the first rule directs traffic coming in from eth2 to eth0 and the second rule directs the traffic to eth1. If eth0 fails the first rule is bypassed and the second rule matches, directing traffic to eth1." @@ -2264,7 +2361,7 @@ msgstr "VyOS-RR2:" msgid "VyOS 1.3 added initial support for VRFs (including IPv4/IPv6 static routing) and VyOS 1.4 now enables full dynamic routing protocol support for OSPF, IS-IS, and BGP for individual VRFs." msgstr "VyOS 1.3 added initial support for VRFs (including IPv4/IPv6 static routing) and VyOS 1.4 now enables full dynamic routing protocol support for OSPF, IS-IS, and BGP for individual VRFs." -#: ../../configexamples/zone-policy.rst:32 +#: ../../configexamples/zone-policy.rst:42 msgid "VyOS acts as DHCP, DNS forwarder, NAT, router and firewall." msgstr "VyOS acts as DHCP, DNS forwarder, NAT, router and firewall." @@ -2337,7 +2434,7 @@ msgstr "We explicitly exclude the primary upstream network so that BGP or OSPF t msgid "We have four hosts on the local network 172.17.1.0/24. All hosts are labeled CS0 by default. We need to replace labels on all hosts except vpc8. We will replace the labels on the nearest router “VyOS3” using the IP addresses of the sources." msgstr "We have four hosts on the local network 172.17.1.0/24. All hosts are labeled CS0 by default. We need to replace labels on all hosts except vpc8. We will replace the labels on the nearest router “VyOS3” using the IP addresses of the sources." -#: ../../configexamples/zone-policy.rst:15 +#: ../../configexamples/zone-policy.rst:25 msgid "We have three networks." msgstr "We have three networks." @@ -2437,11 +2534,11 @@ msgstr "You should now be able to ping something by IPv6 DNS name:" msgid "You should now be able to see the advertised network on the other host." msgstr "You should now be able to see the advertised network on the other host." -#: ../../configexamples/zone-policy.rst:378 +#: ../../configexamples/zone-policy.rst:388 msgid "You would have 5 zones instead of just 4 and you would configure your v6 ruleset between your tunnel interface and your LAN/DMZ zones instead of to the WAN." msgstr "You would have 5 zones instead of just 4 and you would configure your v6 ruleset between your tunnel interface and your LAN/DMZ zones instead of to the WAN." -#: ../../configexamples/zone-policy.rst:403 +#: ../../configexamples/zone-policy.rst:413 msgid "You would have to add a couple of rules on your wan-local ruleset to allow protocol 41 in." msgstr "You would have to add a couple of rules on your wan-local ruleset to allow protocol 41 in." @@ -2449,15 +2546,15 @@ msgstr "You would have to add a couple of rules on your wan-local ruleset to all msgid "Zone-Policy example" msgstr "Zone-Policy example" -#: ../../configexamples/zone-policy.rst:79 +#: ../../configexamples/zone-policy.rst:89 msgid "Zones Basics" msgstr "Zones Basics" -#: ../../configexamples/zone-policy.rst:126 +#: ../../configexamples/zone-policy.rst:136 msgid "Zones and Rulesets both have a default action statement. When using Zone-Policies, the default action is set by the zone-policy statement and is represented by rule 10000." msgstr "Zones and Rulesets both have a default action statement. When using Zone-Policies, the default action is set by the zone-policy statement and is represented by rule 10000." -#: ../../configexamples/zone-policy.rst:165 +#: ../../configexamples/zone-policy.rst:175 msgid "Zones do not allow for a default action of accept; either drop or reject. It is important to remember this because if you apply an interface to a zone and commit, any active connections will be dropped. Specifically, if you are SSH’d into VyOS and add local or the interface you are connecting through to a zone and do not have rulesets in place to allow SSH and established sessions, you will not be able to connect." msgstr "Zones do not allow for a default action of accept; either drop or reject. It is important to remember this because if you apply an interface to a zone and commit, any active connections will be dropped. Specifically, if you are SSH’d into VyOS and add local or the interface you are connecting through to a zone and do not have rulesets in place to allow SSH and established sessions, you will not be able to connect." @@ -2526,15 +2623,15 @@ msgstr "compute3 - Port 11 of each switch" msgid "compute3 (VMware ESXi 6.5)" msgstr "compute3 (VMware ESXi 6.5)" -#: ../../configexamples/index.rst:40 +#: ../../configexamples/index.rst:41 msgid "configure each host in the lab" msgstr "configure each host in the lab" -#: ../../configexamples/index.rst:39 +#: ../../configexamples/index.rst:40 msgid "create the lab on a eve-ng server" msgstr "create the lab on a eve-ng server" -#: ../../configexamples/index.rst:41 +#: ../../configexamples/index.rst:42 msgid "do some defined tests" msgstr "do some defined tests" @@ -2555,7 +2652,7 @@ msgstr "extended community and remote label of specific destination" msgid "first the PCA" msgstr "first the PCA" -#: ../../configexamples/index.rst:43 +#: ../../configexamples/index.rst:44 msgid "generate the documentation and include files" msgstr "generate the documentation and include files" @@ -2567,7 +2664,7 @@ msgstr "green uses local routing table id and VNI 4000" msgid "information between PE and CE:" msgstr "information between PE and CE:" -#: ../../configexamples/index.rst:42 +#: ../../configexamples/index.rst:43 msgid "optional do an upgrade to a higher version and do step 3 again." msgstr "optional do an upgrade to a higher version and do step 3 again." @@ -2583,7 +2680,7 @@ msgstr "router2 (Random 1RU machine with 4 NICs)" msgid "save the output to a file and import it in nearly all openvpn clients." msgstr "save the output to a file and import it in nearly all openvpn clients." -#: ../../configexamples/index.rst:44 +#: ../../configexamples/index.rst:45 msgid "shutdown and destroy the lab, if there is no error" msgstr "shutdown and destroy the lab, if there is no error" @@ -2599,7 +2696,7 @@ msgstr "switch1 (Nexus 10gb Switch)" msgid "switch2 (Nexus 10gb Switch)" msgstr "switch2 (Nexus 10gb Switch)" -#: ../../configexamples/zone-policy.rst:384 +#: ../../configexamples/zone-policy.rst:394 msgid "v6 pairs would be:" msgstr "v6 pairs would be:" diff --git a/docs/_locale/de/configuration.pot b/docs/_locale/de/configuration.pot index 4e898103..ae73e71e 100644 --- a/docs/_locale/de/configuration.pot +++ b/docs/_locale/de/configuration.pot @@ -193,6 +193,10 @@ msgstr "**IPv6 (DSCP value, maximum payload length, protocol, source address,** msgid "**If you are looking for a policy for your outbound traffic** but you don't know which one you need and you don't want to go through every possible policy shown here, **our bet is that highly likely you are looking for a** Shaper_ **policy and you want to** :ref:`set its queues ` **as FQ-CoDel**." msgstr "**If you are looking for a policy for your outbound traffic** but you don't know which one you need and you don't want to go through every possible policy shown here, **our bet is that highly likely you are looking for a** Shaper_ **policy and you want to** :ref:`set its queues ` **as FQ-CoDel**." +#: ../../configuration/firewall/general-legacy.rst:9 +msgid "**Important note:** This documentation is valid only for VyOS Sagitta prior to 1.4-rolling-202308040557" +msgstr "**Important note:** This documentation is valid only for VyOS Sagitta prior to 1.4-rolling-202308040557" + #: ../../configuration/firewall/general-legacy.rst:9 msgid "**Important note:** This documentation is valid only for VyOS Sagitta prior to 1.4-rolling-YYYYMMDDHHmm" msgstr "**Wichtiger Hinweis: ** Diese Dokumentation ist nur für VyOS Sagitta vor 1.4-Rolling-YYYYMMDDHHMM gültig" @@ -1340,7 +1344,7 @@ msgstr "A Bridge is a way to connect two Ethernet segments together in a protoco msgid "A GRE tunnel operates at layer 3 of the OSI model and is represented by IP protocol 47. The main benefit of a GRE tunnel is that you are able to carry multiple protocols inside the same tunnel. GRE also supports multicast traffic and supports routing protocols that leverage multicast to form neighbor adjacencies." msgstr "A GRE tunnel operates at layer 3 of the OSI model and is represented by IP protocol 47. The main benefit of a GRE tunnel is that you are able to carry multiple protocols inside the same tunnel. GRE also supports multicast traffic and supports routing protocols that leverage multicast to form neighbor adjacencies." -#: ../../configuration/firewall/general-legacy.rst:746 +#: ../../configuration/firewall/general-legacy.rst:749 msgid "A Rule-Set can be applied to every interface:" msgstr "A Rule-Set can be applied to every interface:" @@ -1368,7 +1372,7 @@ msgstr "A :abbr:`NIS (Network Information Service)` domain can be set to be used msgid "A basic configuration requires a tunnel source (source-address), a tunnel destination (remote), an encapsulation type (gre), and an address (ipv4/ipv6). Below is a basic IPv4 only configuration example taken from a VyOS router and a Cisco IOS router. The main difference between these two configurations is that VyOS requires you explicitly configure the encapsulation type. The Cisco router defaults to GRE IP otherwise it would have to be configured as well." msgstr "A basic configuration requires a tunnel source (source-address), a tunnel destination (remote), an encapsulation type (gre), and an address (ipv4/ipv6). Below is a basic IPv4 only configuration example taken from a VyOS router and a Cisco IOS router. The main difference between these two configurations is that VyOS requires you explicitly configure the encapsulation type. The Cisco router defaults to GRE IP otherwise it would have to be configured as well." -#: ../../configuration/firewall/zone.rst:44 +#: ../../configuration/firewall/zone.rst:54 msgid "A basic introduction to zone-based firewalls can be found `here `_, and an example at :ref:`examples-zone-policy`." msgstr "A basic introduction to zone-based firewalls can be found `here `_, and an example at :ref:`examples-zone-policy`." @@ -1385,7 +1389,7 @@ msgstr "A class can have multiple match filters:" msgid "A common example is the case of some policies which, in order to be effective, they need to be applied to an interface that is directly connected where the bottleneck is. If your router is not directly connected to the bottleneck, but some hop before it, you can emulate the bottleneck by embedding your non-shaping policy into a classful shaping one so that it takes effect." msgstr "A common example is the case of some policies which, in order to be effective, they need to be applied to an interface that is directly connected where the bottleneck is. If your router is not directly connected to the bottleneck, but some hop before it, you can emulate the bottleneck by embedding your non-shaping policy into a classful shaping one so that it takes effect." -#: ../../configuration/interfaces/openvpn.rst:486 +#: ../../configuration/interfaces/openvpn.rst:538 msgid "A complete LDAP auth OpenVPN configuration could look like the following example:" msgstr "A complete LDAP auth OpenVPN configuration could look like the following example:" @@ -1478,7 +1482,7 @@ msgid "A pool of addresses can be defined by using a hyphen between two IP addre msgstr "A pool of addresses can be defined by using a hyphen between two IP addresses:" #: ../../configuration/firewall/general.rst:766 -#: ../../configuration/firewall/general-legacy.rst:503 +#: ../../configuration/firewall/general-legacy.rst:506 msgid "A port can be set with a port number or a name which is here defined: ``/etc/services``." msgstr "A port can be set with a port number or a name which is here defined: ``/etc/services``." @@ -1584,7 +1588,7 @@ msgstr "A value of 0 disables ARP monitoring. The default value is 0." msgid "A very small buffer will soon start dropping packets." msgstr "A very small buffer will soon start dropping packets." -#: ../../configuration/firewall/zone.rst:23 +#: ../../configuration/firewall/zone.rst:33 msgid "A zone must be configured before an interface is assigned to it and an interface can be assigned to only a single zone." msgstr "A zone must be configured before an interface is assigned to it and an interface can be assigned to only a single zone." @@ -1713,7 +1717,7 @@ msgstr "Additional global parameters are set, including the maximum number conne msgid "Additional option to run TFTP server in the :abbr:`VRF (Virtual Routing and Forwarding)` context" msgstr "Additional option to run TFTP server in the :abbr:`VRF (Virtual Routing and Forwarding)` context" -#: ../../configuration/interfaces/openvpn.rst:363 +#: ../../configuration/interfaces/openvpn.rst:415 msgid "Additionally, each client needs a copy of ca cert and its own client key and cert files. The files are plaintext so they may be copied either manually from the CLI. Client key and cert files should be signed with the proper ca cert and generated on the server side." msgstr "Additionally, each client needs a copy of ca cert and its own client key and cert files. The files are plaintext so they may be copied either manually from the CLI. Client key and cert files should be signed with the proper ca cert and generated on the server side." @@ -1782,7 +1786,7 @@ msgstr "Advertising a Prefix" msgid "After commit the plaintext passwords will be hashed and stored in your configuration. The resulting CLI config will look like:" msgstr "After commit the plaintext passwords will be hashed and stored in your configuration. The resulting CLI config will look like:" -#: ../../configuration/vrf/index.rst:287 +#: ../../configuration/vrf/index.rst:323 msgid "After committing the configuration we can verify all leaked routes are installed, and try to ICMP ping PC1 from PC3." msgstr "After committing the configuration we can verify all leaked routes are installed, and try to ICMP ping PC1 from PC3." @@ -1854,11 +1858,11 @@ msgstr "All these rules with OTC will help to detect and mitigate route leaks an msgid "All those protocols are grouped under ``interfaces tunnel`` in VyOS. Let's take a closer look at the protocols and options currently supported by VyOS." msgstr "All those protocols are grouped under ``interfaces tunnel`` in VyOS. Let's take a closer look at the protocols and options currently supported by VyOS." -#: ../../configuration/firewall/zone.rst:26 +#: ../../configuration/firewall/zone.rst:36 msgid "All traffic between zones is affected by existing policies" msgstr "All traffic between zones is affected by existing policies" -#: ../../configuration/firewall/zone.rst:25 +#: ../../configuration/firewall/zone.rst:35 msgid "All traffic to and from an interface within a zone is permitted." msgstr "All traffic to and from an interface within a zone is permitted." @@ -1895,7 +1899,7 @@ msgid "Allow this BFD peer to not be directly connected" msgstr "Allow this BFD peer to not be directly connected" #: ../../configuration/firewall/general.rst:1142 -#: ../../configuration/firewall/general-legacy.rst:691 +#: ../../configuration/firewall/general-legacy.rst:694 msgid "Allowed values fpr TCP flags: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, ``PSH``, ``ALL`` When specifying more than one flag, flags should be comma separated. The ``!`` negate the selected protocol." msgstr "Allowed values fpr TCP flags: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, ``PSH``, ``ALL`` When specifying more than one flag, flags should be comma separated. The ``!`` negate the selected protocol." @@ -1999,6 +2003,10 @@ msgstr "An alternate command could be \"mpls-te on\" (Traffic Engineering)" msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 and a zone-based firewall as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)" msgstr "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 and a zone-based firewall as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)" +#: ../../configuration/firewall/general-legacy.rst:424 +msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 and a zone-based firewall as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)." +msgstr "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 and a zone-based firewall as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)." + #: ../../configuration/firewall/general.rst:624 msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)" msgstr "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)" @@ -2074,11 +2082,11 @@ msgstr "Apply a route-map filter to routes for the specified protocol. The follo msgid "Apply routing policy to **inbound** direction of out VLAN interfaces" msgstr "Apply routing policy to **inbound** direction of out VLAN interfaces" -#: ../../configuration/firewall/zone.rst:72 +#: ../../configuration/firewall/zone.rst:82 msgid "Applying a Rule-Set to a Zone" msgstr "Applying a Rule-Set to a Zone" -#: ../../configuration/firewall/general-legacy.rst:744 +#: ../../configuration/firewall/general-legacy.rst:747 msgid "Applying a Rule-Set to an Interface" msgstr "Applying a Rule-Set to an Interface" @@ -2173,11 +2181,11 @@ msgstr "As VyOS makes use of the QMI interface to connect to the WWAN modem card msgid "As a reference: for 10mbit/s on Intel, you might need at least 10kbyte buffer if you want to reach your configured rate." msgstr "As a reference: for 10mbit/s on Intel, you might need at least 10kbyte buffer if you want to reach your configured rate." -#: ../../configuration/interfaces/openvpn.rst:614 +#: ../../configuration/interfaces/openvpn.rst:666 msgid "As a result, the processing of each packet becomes more efficient, potentially leveraging hardware encryption offloading support available in the kernel." msgstr "As a result, the processing of each packet becomes more efficient, potentially leveraging hardware encryption offloading support available in the kernel." -#: ../../configuration/firewall/zone.rst:39 +#: ../../configuration/firewall/zone.rst:49 msgid "As an alternative to applying policy to an interface directly, a zone-based firewall can be created to simplify configuration when multiple interfaces belong to the same security zone. Instead of applying rule-sets to interfaces, they are applied to source zone-destination zone pairs." msgstr "As an alternative to applying policy to an interface directly, a zone-based firewall can be created to simplify configuration when multiple interfaces belong to the same security zone. Instead of applying rule-sets to interfaces, they are applied to source zone-destination zone pairs." @@ -2189,6 +2197,10 @@ msgstr "As more and more routers run on Hypervisors, expecially with a :abbr:`NO msgid "As network address translation modifies the IP address information in packets, NAT implementations may vary in their specific behavior in various addressing cases and their effect on network traffic. The specifics of NAT behavior are not commonly documented by vendors of equipment containing NAT implementations." msgstr "As network address translation modifies the IP address information in packets, NAT implementations may vary in their specific behavior in various addressing cases and their effect on network traffic. The specifics of NAT behavior are not commonly documented by vendors of equipment containing NAT implementations." +#: ../../configuration/interfaces/openvpn.rst:48 +msgid "As of VyOS 1.4, OpenVPN site-to-site mode can use either pre-shared keys or x.509 certificates." +msgstr "As of VyOS 1.4, OpenVPN site-to-site mode can use either pre-shared keys or x.509 certificates." + #: ../../configuration/vpn/pptp.rst:10 msgid "As per default and if not otherwise defined, mschap-v2 is being used for authentication and mppe 128-bit (stateless) for encryption. If no gateway-address is set within the configuration, the lowest IP out of the /24 client-ip-pool is being used. For instance, in the example below it would be 192.168.0.1." msgstr "As per default and if not otherwise defined, mschap-v2 is being used for authentication and mppe 128-bit (stateless) for encryption. If no gateway-address is set within the configuration, the lowest IP out of the /24 client-ip-pool is being used. For instance, in the example below it would be 192.168.0.1." @@ -2229,7 +2241,7 @@ msgstr "As with other policies, you can embed_ other policies into the classes ( msgid "As you can see, Leaf2 and Leaf3 configuration is almost identical. There are lots of commands above, I'll try to into more detail below, command descriptions are placed under the command boxes:" msgstr "As you can see, Leaf2 and Leaf3 configuration is almost identical. There are lots of commands above, I'll try to into more detail below, command descriptions are placed under the command boxes:" -#: ../../configuration/firewall/general-legacy.rst:767 +#: ../../configuration/firewall/general-legacy.rst:770 msgid "As you can see in the example here, you can assign the same rule-set to several interfaces. An interface can only have one rule-set per chain." msgstr "As you can see in the example here, you can assign the same rule-set to several interfaces. An interface can only have one rule-set per chain." @@ -2322,7 +2334,7 @@ msgid "At every round, the deficit counter adds the quantum so that even large p msgstr "At every round, the deficit counter adds the quantum so that even large packets will have their opportunity to be dequeued." #: ../../configuration/firewall/general.rst:1451 -#: ../../configuration/firewall/general-legacy.rst:969 +#: ../../configuration/firewall/general-legacy.rst:972 msgid "At the moment it not possible to look at the whole firewall log with VyOS operational commands. All logs will save to ``/var/logs/messages``. For example: ``grep '10.10.0.10' /var/log/messages``" msgstr "At the moment it not possible to look at the whole firewall log with VyOS operational commands. All logs will save to ``/var/logs/messages``. For example: ``grep '10.10.0.10' /var/log/messages``" @@ -2358,7 +2370,7 @@ msgstr "Authentication application client-secret." msgid "Authentication application tenant-id" msgstr "Authentication application tenant-id" -#: ../../configuration/interfaces/openvpn.rst:397 +#: ../../configuration/interfaces/openvpn.rst:449 msgid "Authentication is done by using the ``openvpn-auth-ldap.so`` plugin which is shipped with every VyOS installation. A dedicated configuration file is required. It is best practise to store it in ``/config`` to survive image updates" msgstr "Authentication is done by using the ``openvpn-auth-ldap.so`` plugin which is shipped with every VyOS installation. A dedicated configuration file is required. It is best practise to store it in ``/config`` to survive image updates" @@ -2474,7 +2486,7 @@ msgstr "BGP roles are defined in RFC :rfc:`9234` and provide an easy way to add msgid "BGP routers connected inside the same AS through BGP belong to an internal BGP session, or IBGP. In order to prevent routing table loops, IBGP speaker does not advertise IBGP-learned routes to other IBGP speaker (Split Horizon mechanism). As such, IBGP requires a full mesh of all peers. For large networks, this quickly becomes unscalable." msgstr "BGP routers connected inside the same AS through BGP belong to an internal BGP session, or IBGP. In order to prevent routing table loops, IBGP speaker does not advertise IBGP-learned routes to other IBGP speaker (Split Horizon mechanism). As such, IBGP requires a full mesh of all peers. For large networks, this quickly becomes unscalable." -#: ../../configuration/vrf/index.rst:375 +#: ../../configuration/vrf/index.rst:411 msgid "BGP routes may be leaked (i.e. copied) between a unicast VRF RIB and the VPN SAFI RIB of the default VRF for use in MPLS-based L3VPNs. Unicast routes may also be leaked between any VRFs (including the unicast RIB of the default BGP instance). A shortcut syntax is also available for specifying leaking from one VRF to another VRF using the default instance’s VPN RIB as the intemediary . A common application of the VRF-VRF feature is to connect a customer’s private routing domain to a provider’s VPN service. Leaking is configured from the point of view of an individual VRF: import refers to routes leaked from VPN to a unicast VRF, whereas export refers to routes leaked from a unicast VRF to VPN." msgstr "BGP routes may be leaked (i.e. copied) between a unicast VRF RIB and the VPN SAFI RIB of the default VRF for use in MPLS-based L3VPNs. Unicast routes may also be leaked between any VRFs (including the unicast RIB of the default BGP instance). A shortcut syntax is also available for specifying leaking from one VRF to another VRF using the default instance’s VPN RIB as the intemediary . A common application of the VRF-VRF feature is to connect a customer’s private routing domain to a provider’s VPN service. Leaking is configured from the point of view of an individual VRF: import refers to routes leaked from VPN to a unicast VRF, whereas export refers to routes leaked from a unicast VRF to VPN." @@ -2575,7 +2587,7 @@ msgstr "Because existing sessions do not automatically fail over to a new path, msgid "Before enabling any hardware segmentation offload a corresponding software offload is required in GSO. Otherwise it becomes possible for a frame to be re-routed between devices and end up being unable to be transmitted." msgstr "Before enabling any hardware segmentation offload a corresponding software offload is required in GSO. Otherwise it becomes possible for a frame to be re-routed between devices and end up being unable to be transmitted." -#: ../../configuration/firewall/zone.rst:74 +#: ../../configuration/firewall/zone.rst:84 msgid "Before you are able to apply a rule-set to a zone you have to create the zones first." msgstr "Before you are able to apply a rule-set to a zone you have to create the zones first." @@ -2678,7 +2690,7 @@ msgstr "Both local administered and remote administered :abbr:`RADIUS (Remote Au msgid "Both replies and requests type gratuitous arp will trigger the ARP table to be updated, if this setting is on." msgstr "Both replies and requests type gratuitous arp will trigger the ARP table to be updated, if this setting is on." -#: ../../configuration/interfaces/openvpn.rst:376 +#: ../../configuration/interfaces/openvpn.rst:428 msgid "Branch 1's router might have the following lines:" msgstr "Branch 1's router might have the following lines:" @@ -2820,7 +2832,7 @@ msgstr "Certificates" msgid "Change system keyboard layout to given language." msgstr "Change system keyboard layout to given language." -#: ../../configuration/firewall/zone.rst:65 +#: ../../configuration/firewall/zone.rst:75 msgid "Change the default-action with this setting." msgstr "Change the default-action with this setting." @@ -2844,7 +2856,7 @@ msgstr "Channel number (IEEE 802.11), for 2.4Ghz (802.11 b/g/n) channels range f msgid "Check if the Intel® QAT device is up and ready to do the job." msgstr "Check if the Intel® QAT device is up and ready to do the job." -#: ../../configuration/interfaces/openvpn.rst:654 +#: ../../configuration/interfaces/openvpn.rst:706 msgid "Check status" msgstr "Check status" @@ -2907,7 +2919,7 @@ msgstr "Classless static route" msgid "Clear all BGP extcommunities." msgstr "Clear all BGP extcommunities." -#: ../../configuration/interfaces/openvpn.rst:519 +#: ../../configuration/interfaces/openvpn.rst:571 msgid "Client" msgstr "Client" @@ -2927,7 +2939,7 @@ msgstr "Client Authentication" msgid "Client IP addresses will be provided from pool `192.0.2.0/25`" msgstr "Client IP addresses will be provided from pool `192.0.2.0/25`" -#: ../../configuration/interfaces/openvpn.rst:562 +#: ../../configuration/interfaces/openvpn.rst:614 msgid "Client Side" msgstr "Client Side" @@ -2947,7 +2959,7 @@ msgstr "Client domain search" msgid "Client isolation can be used to prevent low-level bridging of frames between associated stations in the BSS." msgstr "Client isolation can be used to prevent low-level bridging of frames between associated stations in the BSS." -#: ../../configuration/interfaces/openvpn.rst:347 +#: ../../configuration/interfaces/openvpn.rst:399 msgid "Clients are identified by the CN field of their x.509 certificates, in this example the CN is ``client0``:" msgstr "Clients are identified by the CN field of their x.509 certificates, in this example the CN is ``client0``:" @@ -2972,7 +2984,7 @@ msgid "Command should probably be extended to list also the real interfaces assi msgstr "Command should probably be extended to list also the real interfaces assigned to this one VRF to get a better overview." #: ../../configuration/firewall/general.rst:1506 -#: ../../configuration/firewall/general-legacy.rst:1051 +#: ../../configuration/firewall/general-legacy.rst:1054 msgid "Command used to update GeoIP database and firewall sets." msgstr "Command used to update GeoIP database and firewall sets." @@ -3012,7 +3024,7 @@ msgid "Confidentiality – Encryption of packets to prevent snooping by an unaut msgstr "Confidentiality – Encryption of packets to prevent snooping by an unauthorized source." #: ../../configuration/container/index.rst:12 -#: ../../configuration/firewall/zone.rst:37 +#: ../../configuration/firewall/zone.rst:47 #: ../../configuration/interfaces/bonding.rst:17 #: ../../configuration/interfaces/bridge.rst:21 #: ../../configuration/interfaces/dummy.rst:28 @@ -3021,7 +3033,6 @@ msgstr "Confidentiality – Encryption of packets to prevent snooping by an unau #: ../../configuration/interfaces/l2tpv3.rst:31 #: ../../configuration/interfaces/loopback.rst:26 #: ../../configuration/interfaces/macsec.rst:20 -#: ../../configuration/interfaces/openvpn.rst:533 #: ../../configuration/interfaces/pppoe.rst:59 #: ../../configuration/interfaces/pseudo-ethernet.rst:45 #: ../../configuration/interfaces/sstp-client.rst:20 @@ -3078,7 +3089,8 @@ msgstr "Confidentiality – Encryption of packets to prevent snooping by an unau #: ../../configuration/vpn/sstp.rst:65 #: ../../configuration/vrf/index.rst:16 #: ../../configuration/vrf/index.rst:253 -#: ../../configuration/vrf/index.rst:398 +#: ../../configuration/vrf/index.rst:286 +#: ../../configuration/vrf/index.rst:434 msgid "Configuration" msgstr "Configuration" @@ -3111,7 +3123,7 @@ msgstr "Configuration commands for the private and public key will be displayed msgid "Configuration commands will display. Note the command with the public key (set pki key-pair ipsec-LEFT public key 'MIIBIjANBgkqh...'). Then do the same on the opposite router:" msgstr "Configuration commands will display. Note the command with the public key (set pki key-pair ipsec-LEFT public key 'MIIBIjANBgkqh...'). Then do the same on the opposite router:" -#: ../../configuration/vrf/index.rst:392 +#: ../../configuration/vrf/index.rst:428 msgid "Configuration for these exported routes must, at a minimum, specify these two parameters." msgstr "Configuration for these exported routes must, at a minimum, specify these two parameters." @@ -3123,7 +3135,7 @@ msgstr "Configuration of :ref:`routing-static`" msgid "Configuration of a DHCP failover pair" msgstr "Configuration of a DHCP failover pair" -#: ../../configuration/vrf/index.rst:400 +#: ../../configuration/vrf/index.rst:436 msgid "Configuration of route leaking between a unicast VRF RIB and the VPN SAFI RIB of the default VRF is accomplished via commands in the context of a VRF address-family." msgstr "Configuration of route leaking between a unicast VRF RIB and the VPN SAFI RIB of the default VRF is accomplished via commands in the context of a VRF address-family." @@ -3744,11 +3756,11 @@ msgstr "Custom health-check script allows checking real-server availability" msgid "Customized ignore rules, based on a packet and flow selector." msgstr "Customized ignore rules, based on a packet and flow selector." -#: ../../configuration/interfaces/openvpn.rst:633 +#: ../../configuration/interfaces/openvpn.rst:685 msgid "DCO can be enabled for both new and existing tunnels,VyOS adds an option in each tunnel configuration where we can enable this function .The current best practice is to create a new tunnel with DCO to minimize the chance of problems with existing clients." msgstr "DCO can be enabled for both new and existing tunnels,VyOS adds an option in each tunnel configuration where we can enable this function .The current best practice is to create a new tunnel with DCO to minimize the chance of problems with existing clients." -#: ../../configuration/interfaces/openvpn.rst:629 +#: ../../configuration/interfaces/openvpn.rst:681 msgid "DCO support is a per-tunnel option and it is not automatically enabled by default for new or upgraded tunnels. Existing tunnels will continue to function as they have in the past." msgstr "DCO support is a per-tunnel option and it is not automatically enabled by default for new or upgraded tunnels. Existing tunnels will continue to function as they have in the past." @@ -3864,7 +3876,7 @@ msgid "DSSS/CCK Mode in 40 MHz, this sets ``[DSSS_CCK-40]``" msgstr "DSSS/CCK Mode in 40 MHz, this sets ``[DSSS_CCK-40]``" #: ../../configuration/firewall/general.rst:719 -#: ../../configuration/firewall/general-legacy.rst:477 +#: ../../configuration/firewall/general-legacy.rst:480 msgid "Data is provided by DB-IP.com under CC-BY-4.0 license. Attribution required, permits redistribution so we can include a database in images(~3MB compressed). Includes cron script (manually callable by op-mode update geoip) to keep database and rules updated." msgstr "Data is provided by DB-IP.com under CC-BY-4.0 license. Attribution required, permits redistribution so we can include a database in images(~3MB compressed). Includes cron script (manually callable by op-mode update geoip) to keep database and rules updated." @@ -3992,7 +4004,7 @@ msgstr "Define a IPv4 or IPv6 Network group." msgid "Define a IPv4 or a IPv6 address group" msgstr "Define a IPv4 or a IPv6 address group" -#: ../../configuration/firewall/zone.rst:49 +#: ../../configuration/firewall/zone.rst:59 msgid "Define a Zone" msgstr "Define a Zone" @@ -4139,7 +4151,7 @@ msgstr "Define number of packets to queue inside the kernel before sending them msgid "Define the time interval to update the local cache" msgstr "Define the time interval to update the local cache" -#: ../../configuration/firewall/zone.rst:60 +#: ../../configuration/firewall/zone.rst:70 msgid "Define the zone as a local zone. A local zone has no interfaces and will be applied to the router itself." msgstr "Define the zone as a local zone. A local zone has no interfaces and will be applied to the router itself." @@ -4231,7 +4243,7 @@ msgstr "Description" msgid "Despite the Drop-Tail policy does not slow down packets, if many packets are to be sent, they could get dropped when trying to get enqueued at the tail. This can happen if the queue has still not been able to release enough packets from its head." msgstr "Despite the Drop-Tail policy does not slow down packets, if many packets are to be sent, they could get dropped when trying to get enqueued at the tail. This can happen if the queue has still not been able to release enough packets from its head." -#: ../../configuration/interfaces/openvpn.rst:433 +#: ../../configuration/interfaces/openvpn.rst:485 msgid "Despite the fact that AD is a superset of LDAP" msgstr "Despite the fact that AD is a superset of LDAP" @@ -4355,7 +4367,7 @@ msgstr "Disable this service." msgid "Disable transmit of LLDP frames on given ``. Useful to exclude certain interfaces from LLDP when ``all`` have been enabled." msgstr "Disable transmit of LLDP frames on given ``. Useful to exclude certain interfaces from LLDP when ``all`` have been enabled." -#: ../../configuration/interfaces/openvpn.rst:643 +#: ../../configuration/interfaces/openvpn.rst:695 msgid "Disabled by default - no kernel module loaded." msgstr "Disabled by default - no kernel module loaded." @@ -4809,7 +4821,7 @@ msgstr "Enable OSPF with route redistribution of the loopback and default origin msgid "Enable OTP 2FA for user `username` with default settings, using the BASE32 encoded 2FA/MFA key specified by ``." msgstr "Enable OTP 2FA for user `username` with default settings, using the BASE32 encoded 2FA/MFA key specified by ``." -#: ../../configuration/interfaces/openvpn.rst:640 +#: ../../configuration/interfaces/openvpn.rst:692 msgid "Enable OpenVPN Data Channel Offload feature by loading the appropriate kernel module." msgstr "Enable OpenVPN Data Channel Offload feature by loading the appropriate kernel module." @@ -4920,7 +4932,7 @@ msgstr "Enable spanning tree protocol. STP is disabled by default." msgid "Enable the Opaque-LSA capability (rfc2370), necessary to transport label on IGP" msgstr "Enable the Opaque-LSA capability (rfc2370), necessary to transport label on IGP" -#: ../../configuration/interfaces/openvpn.rst:645 +#: ../../configuration/interfaces/openvpn.rst:697 msgid "Enable this feature causes an interface reset." msgstr "Enable this feature causes an interface reset." @@ -4936,7 +4948,7 @@ msgstr "Enabled on-demand PPPoE connections bring up the link only when traffic msgid "Enables Cisco style authentication on NHRP packets. This embeds the secret plaintext password to the outgoing NHRP packets. Incoming NHRP packets on this interface are discarded unless the secret password is present. Maximum length of the secret is 8 characters." msgstr "Enables Cisco style authentication on NHRP packets. This embeds the secret plaintext password to the outgoing NHRP packets. Incoming NHRP packets on this interface are discarded unless the secret password is present. Maximum length of the secret is 8 characters." -#: ../../configuration/vrf/index.rst:423 +#: ../../configuration/vrf/index.rst:459 msgid "Enables an MPLS label to be attached to a route exported from the current unicast VRF to VPN. If the value specified is auto, the label value is automatically assigned from a pool maintained." msgstr "Enables an MPLS label to be attached to a route exported from the current unicast VRF to VPN. If the value specified is auto, the label value is automatically assigned from a pool maintained." @@ -4944,7 +4956,7 @@ msgstr "Enables an MPLS label to be attached to a route exported from the curren msgid "Enables bandwidth shaping via RADIUS." msgstr "Enables bandwidth shaping via RADIUS." -#: ../../configuration/vrf/index.rst:445 +#: ../../configuration/vrf/index.rst:481 msgid "Enables import or export of routes between the current unicast VRF and VPN." msgstr "Enables import or export of routes between the current unicast VRF and VPN." @@ -4980,7 +4992,7 @@ msgstr "Enslave `` interface to bond ``." msgid "Ensure that when comparing routes where both are equal on most metrics, including local-pref, AS_PATH length, IGP cost, MED, that the tie is broken based on router-ID." msgstr "Ensure that when comparing routes where both are equal on most metrics, including local-pref, AS_PATH length, IGP cost, MED, that the tie is broken based on router-ID." -#: ../../configuration/interfaces/openvpn.rst:393 +#: ../../configuration/interfaces/openvpn.rst:445 msgid "Enterprise installations usually ship a kind of directory service which is used to have a single password store for all employees. VyOS and OpenVPN support using LDAP/AD as single user backend." msgstr "Enterprise installations usually ship a kind of directory service which is used to have a single password store for all employees. VyOS and OpenVPN support using LDAP/AD as single user backend." @@ -5708,7 +5720,7 @@ msgid "Example Network" msgstr "Example Network" #: ../../configuration/firewall/general.rst:1457 -#: ../../configuration/firewall/general-legacy.rst:976 +#: ../../configuration/firewall/general-legacy.rst:979 msgid "Example Partial Config" msgstr "Example Partial Config" @@ -5913,7 +5925,7 @@ msgstr "Firewall-Legacy" msgid "Firewall Description" msgstr "Firewall Description" -#: ../../configuration/interfaces/openvpn.rst:157 +#: ../../configuration/interfaces/openvpn.rst:209 #: ../../configuration/interfaces/wireguard.rst:207 msgid "Firewall Exceptions" msgstr "Firewall Exceptions" @@ -5938,7 +5950,7 @@ msgstr "Firewall groups represent collections of IP addresses, networks, ports, msgid "Firewall mark. It possible to loadbalancing traffic based on ``fwmark`` value" msgstr "Firewall mark. It possible to loadbalancing traffic based on ``fwmark`` value" -#: ../../configuration/interfaces/openvpn.rst:259 +#: ../../configuration/interfaces/openvpn.rst:311 msgid "Firewall policy can also be applied to the tunnel interface for `local`, `in`, and `out` directions and functions identically to ethernet interfaces." msgstr "Firewall policy can also be applied to the tunnel interface for `local`, `in`, and `out` directions and functions identically to ethernet interfaces." @@ -5962,6 +5974,10 @@ msgstr "First, on both routers run the operational command \"generate pki key-pa msgid "First, one of the systems generate the key using the :ref:`generate pki openvpn shared-secret` command. Once generated, you will need to install this key on the local system, then copy and install this key to the remote router." msgstr "First, one of the systems generate the key using the :ref:`generate pki openvpn shared-secret` command. Once generated, you will need to install this key on the local system, then copy and install this key to the remote router." +#: ../../configuration/interfaces/openvpn.rst:176 +msgid "First, you need to generate a key by running ``run generate pki openvpn shared-secret install `` from configuration mode. You can use any name, we will use ``s2s``." +msgstr "First, you need to generate a key by running ``run generate pki openvpn shared-secret install `` from configuration mode. You can use any name, we will use ``s2s``." + #: ../../configuration/policy/route-map.rst:60 msgid "First hop interface of a route to match." msgstr "First hop interface of a route to match." @@ -5982,7 +5998,7 @@ msgstr "First steps" msgid "First the OTP keys must be generated and sent to the user and to the configuration:" msgstr "First the OTP keys must be generated and sent to the user and to the configuration:" -#: ../../configuration/interfaces/openvpn.rst:290 +#: ../../configuration/interfaces/openvpn.rst:342 msgid "First we need to specify the basic settings. 1194/UDP is the default. The ``persistent-tunnel`` option is recommended, it prevents the TUN/TAP device from closing on connection resets or daemon reloads." msgstr "First we need to specify the basic settings. 1194/UDP is the default. The ``persistent-tunnel`` option is recommended, it prevents the TUN/TAP device from closing on connection resets or daemon reloads." @@ -6026,11 +6042,11 @@ msgstr "Follow the instructions to generate CA cert (in configuration mode):" msgid "Follow the instructions to generate server cert (in configuration mode):" msgstr "Follow the instructions to generate server cert (in configuration mode):" -#: ../../configuration/interfaces/openvpn.rst:206 +#: ../../configuration/interfaces/openvpn.rst:258 msgid "For Encryption:" msgstr "For Encryption:" -#: ../../configuration/interfaces/openvpn.rst:243 +#: ../../configuration/interfaces/openvpn.rst:295 msgid "For Hashing:" msgstr "For Hashing:" @@ -6126,6 +6142,10 @@ msgstr "For ipv4:" msgid "For latest releases, refer the `firewall `_ main page to configure zone based rules. New syntax was introduced here :vytask:`T5160`" msgstr "For latest releases, refer the `firewall `_ main page to configure zone based rules. New syntax was introduced here :vytask:`T5160`" +#: ../../configuration/firewall/zone.rst:19 +msgid "For latest releases, refer the `firewall (interface-groups) `_ main page to configure zone based rules. New syntax was introduced here :vytask:`T5160`" +msgstr "For latest releases, refer the `firewall (interface-groups) `_ main page to configure zone based rules. New syntax was introduced here :vytask:`T5160`" + #: ../../configuration/protocols/mpls.rst:27 msgid "For more information on how MPLS label switching works, please go visit `Wikipedia (MPLS)`_." msgstr "For more information on how MPLS label switching works, please go visit `Wikipedia (MPLS)`_." @@ -6158,7 +6178,7 @@ msgstr "For serial via USB port information please refor to: :ref:`hardware_usb` msgid "For simplicity we'll assume that the protocol is GRE, it's not hard to guess what needs to be changed to make it work with a different protocol. We assume that IPsec will use pre-shared secret authentication and will use AES128/SHA1 for the cipher and hash. Adjust this as necessary." msgstr "For simplicity we'll assume that the protocol is GRE, it's not hard to guess what needs to be changed to make it work with a different protocol. We assume that IPsec will use pre-shared secret authentication and will use AES128/SHA1 for the cipher and hash. Adjust this as necessary." -#: ../../configuration/interfaces/openvpn.rst:159 +#: ../../configuration/interfaces/openvpn.rst:211 msgid "For the OpenVPN traffic to pass through the WAN interface, you must create a firewall exception." msgstr "For the OpenVPN traffic to pass through the WAN interface, you must create a firewall exception." @@ -6339,7 +6359,7 @@ msgstr "Getting started" msgid "Given the fact that open DNS recursors could be used on DDoS amplification attacks, you must configure the networks which are allowed to use this recursor. A network of ``0.0.0.0/0`` or ``::/0`` would allow all IPv4 and IPv6 networks to query this server. This is generally a bad idea." msgstr "Given the fact that open DNS recursors could be used on DDoS amplification attacks, you must configure the networks which are allowed to use this recursor. A network of ``0.0.0.0/0`` or ``::/0`` would allow all IPv4 and IPv6 networks to query this server. This is generally a bad idea." -#: ../../configuration/interfaces/openvpn.rst:525 +#: ../../configuration/interfaces/openvpn.rst:577 msgid "Given the following example we have one VyOS router acting as OpenVPN server and another VyOS router acting as OpenVPN client. The server also pushes a static client IP address to the OpenVPN client. Remember, clients are identified using their CN attribute in the SSL certificate." msgstr "Given the following example we have one VyOS router acting as OpenVPN server and another VyOS router acting as OpenVPN client. The server also pushes a static client IP address to the OpenVPN client. Remember, clients are identified using their CN attribute in the SSL certificate." @@ -6381,7 +6401,7 @@ msgstr "Groups" msgid "Groups need to have unique names. Even though some contain IPv4 addresses and others contain IPv6 addresses, they still need to have unique names, so you may want to append \"-v4\" or \"-v6\" to your group names." msgstr "Groups need to have unique names. Even though some contain IPv4 addresses and others contain IPv6 addresses, they still need to have unique names, so you may want to append \"-v4\" or \"-v6\" to your group names." -#: ../../configuration/interfaces/openvpn.rst:368 +#: ../../configuration/interfaces/openvpn.rst:420 msgid "HQ's router requires the following steps to generate crypto materials for the Branch 1:" msgstr "HQ's router requires the following steps to generate crypto materials for the Branch 1:" @@ -6454,7 +6474,7 @@ msgstr "Here's the neighbors up:" msgid "Here's the routes:" msgstr "Here's the routes:" -#: ../../configuration/firewall/general-legacy.rst:756 +#: ../../configuration/firewall/general-legacy.rst:759 msgid "Here are some examples for applying a rule-set to an interface" msgstr "Here are some examples for applying a rule-set to an interface" @@ -6555,6 +6575,10 @@ msgstr "How to make it work" msgid "However, now you need to make IPsec work with dynamic address on one side. The tricky part is that pre-shared secret authentication doesn't work with dynamic address, so we'll have to use RSA keys." msgstr "However, now you need to make IPsec work with dynamic address on one side. The tricky part is that pre-shared secret authentication doesn't work with dynamic address, so we'll have to use RSA keys." +#: ../../configuration/interfaces/openvpn.rst:80 +msgid "However, since VyOS 1.4, it is possible to verify self-signed certificates using certificate fingerprints." +msgstr "However, since VyOS 1.4, it is possible to verify self-signed certificates using certificate fingerprints." + #: ../../configuration/interfaces/wireguard.rst:319 msgid "However, split-tunneling can be achieved by specifying the remote subnets. This ensures that only traffic destined for the remote site is sent over the tunnel. All other traffic is unaffected." msgstr "However, split-tunneling can be achieved by specifying the remote subnets. This ensures that only traffic destined for the remote site is sent over the tunnel. All other traffic is unaffected." @@ -7072,7 +7096,7 @@ msgstr "If guaranteed traffic for a class is met and there is room for more traf msgid "If it's vital that the daemon should act exactly like a real multicast client on the upstream interface, this function should be enabled." msgstr "If it's vital that the daemon should act exactly like a real multicast client on the upstream interface, this function should be enabled." -#: ../../configuration/interfaces/openvpn.rst:72 +#: ../../configuration/interfaces/openvpn.rst:69 msgid "If known, the IP of the remote router can be configured using the ``remote-host`` directive; if unknown, it can be omitted. We will assume a dynamic IP for our remote router." msgstr "If known, the IP of the remote router can be configured using the ``remote-host`` directive; if unknown, it can be omitted. We will assume a dynamic IP for our remote router." @@ -7080,7 +7104,7 @@ msgstr "If known, the IP of the remote router can be configured using the ``remo msgid "If logging to a local user account is configured, all defined log messages are display on the console if the local user is logged in, if the user is not logged in, no messages are being displayed. For an explanation on :ref:`syslog_facilities` keywords and :ref:`syslog_severity_level` keywords see tables below." msgstr "If logging to a local user account is configured, all defined log messages are display on the console if the local user is logged in, if the user is not logged in, no messages are being displayed. For an explanation on :ref:`syslog_facilities` keywords and :ref:`syslog_severity_level` keywords see tables below." -#: ../../configuration/interfaces/openvpn.rst:262 +#: ../../configuration/interfaces/openvpn.rst:314 msgid "If making use of multiple tunnels, OpenVPN must have a way to distinguish between different tunnels aside from the pre-shared-key. This is either by referencing IP address or port number. One option is to dedicate a public IP to each tunnel. Another option is to dedicate a port number to each tunnel (e.g. 1195,1196,1197...)." msgstr "If making use of multiple tunnels, OpenVPN must have a way to distinguish between different tunnels aside from the pre-shared-key. This is either by referencing IP address or port number. One option is to dedicate a public IP to each tunnel. Another option is to dedicate a port number to each tunnel (e.g. 1195,1196,1197...)." @@ -7329,7 +7353,7 @@ msgstr "If you've completed all the above steps you no doubt want to see if it's msgid "If you apply a parameter to an individual neighbor IP address, you override the action defined for a peer group that includes that IP address." msgstr "If you apply a parameter to an individual neighbor IP address, you override the action defined for a peer group that includes that IP address." -#: ../../configuration/interfaces/openvpn.rst:585 +#: ../../configuration/interfaces/openvpn.rst:637 msgid "If you are a hacker or want to try on your own we support passing raw OpenVPN options to OpenVPN." msgstr "If you are a hacker or want to try on your own we support passing raw OpenVPN options to OpenVPN." @@ -7353,7 +7377,7 @@ msgstr "If you are using FQ-CoDel embedded into Shaper_ and you have large rates msgid "If you are using OSPF as IGP, always the closest interface connected to the RADIUS server is used. With VyOS 1.2 you can bind all outgoing RADIUS requests to a single source IP e.g. the loopback interface." msgstr "If you are using OSPF as IGP, always the closest interface connected to the RADIUS server is used. With VyOS 1.2 you can bind all outgoing RADIUS requests to a single source IP e.g. the loopback interface." -#: ../../configuration/interfaces/openvpn.rst:254 +#: ../../configuration/interfaces/openvpn.rst:306 msgid "If you change the default encryption and hashing algorithms, be sure that the local and remote ends have matching configurations, otherwise the tunnel will not come up." msgstr "If you change the default encryption and hashing algorithms, be sure that the local and remote ends have matching configurations, otherwise the tunnel will not come up." @@ -7396,7 +7420,7 @@ msgstr "If you have configured the `INSIDE-OUT` policy, you will need to add add msgid "If you need to sample also egress traffic, you may want to configure egress flow-accounting:" msgstr "If you need to sample also egress traffic, you may want to configure egress flow-accounting:" -#: ../../configuration/interfaces/openvpn.rst:466 +#: ../../configuration/interfaces/openvpn.rst:518 msgid "If you only want to check if the user account is enabled and can authenticate (against the primary group) the following snipped is sufficient:" msgstr "If you only want to check if the user account is enabled and can authenticate (against the primary group) the following snipped is sufficient:" @@ -7501,7 +7525,7 @@ msgstr "In VyOS the terms ``vif-s`` and ``vif-c`` stand for the ethertype tags t msgid "In :rfc:`3069` it is called VLAN Aggregation" msgstr "In :rfc:`3069` it is called VLAN Aggregation" -#: ../../configuration/firewall/zone.rst:31 +#: ../../configuration/firewall/zone.rst:41 msgid "In :vytask:`T2199` the syntax of the zone configuration was changed. The zone configuration moved from ``zone-policy zone `` to ``firewall zone ``." msgstr "In :vytask:`T2199` the syntax of the zone configuration was changed. The zone configuration moved from ``zone-policy zone `` to ``firewall zone ``." @@ -7556,6 +7580,10 @@ msgstr "In addition you will specifiy the IP address or FQDN for the client wher msgid "In an **address group** a single IP address or IP address ranges are defined." msgstr "In an **address group** a single IP address or IP address ranges are defined." +#: ../../configuration/interfaces/openvpn.rst:57 +msgid "In both cases, we will use the following settings:" +msgstr "In both cases, we will use the following settings:" + #: ../../configuration/system/flow-accounting.rst:78 msgid "In case, if you need to catch some logs from flow-accounting daemon, you may configure logging facility:" msgstr "In case, if you need to catch some logs from flow-accounting daemon, you may configure logging facility:" @@ -7759,7 +7787,7 @@ msgstr "In this example, we will be using the example Quick Start configuration msgid "In this example all traffic destined to ports \"80, 2222, 8888\" protocol TCP marks to fwmark \"111\" and balanced between 2 real servers. Port \"0\" is required if multiple ports are used." msgstr "In this example all traffic destined to ports \"80, 2222, 8888\" protocol TCP marks to fwmark \"111\" and balanced between 2 real servers. Port \"0\" is required if multiple ports are used." -#: ../../configuration/interfaces/openvpn.rst:282 +#: ../../configuration/interfaces/openvpn.rst:334 msgid "In this example we will use the most complicated case: a setup where each client is a router that has its own subnet (think HQ and branch offices), since simpler setups are subsets of it." msgstr "In this example we will use the most complicated case: a setup where each client is a router that has its own subnet (think HQ and branch offices), since simpler setups are subsets of it." @@ -7783,7 +7811,7 @@ msgstr "In typical uses of SNMP, one or more administrative computers called man msgid "In zone-based policy, interfaces are assigned to zones, and inspection policy is applied to traffic moving between the zones and acted on according to firewall rules. A Zone is a group of interfaces that have similar functions or features. It establishes the security borders of a network. A zone defines a boundary where traffic is subjected to policy restrictions as it crosses to another region of a network." msgstr "In zone-based policy, interfaces are assigned to zones, and inspection policy is applied to traffic moving between the zones and acted on according to firewall rules. A Zone is a group of interfaces that have similar functions or features. It establishes the security borders of a network. A zone defines a boundary where traffic is subjected to policy restrictions as it crosses to another region of a network." -#: ../../configuration/firewall/zone.rst:14 +#: ../../configuration/firewall/zone.rst:24 msgid "In zone-based policy, interfaces are assigned to zones, and inspection policy is applied to traffic moving between the zones and acted on according to firewall rules. A zone is a group of interfaces that have similar functions or features. It establishes the security borders of a network. A zone defines a boundary where traffic is subjected to policy restrictions as it crosses to another region of a network." msgstr "In zone-based policy, interfaces are assigned to zones, and inspection policy is applied to traffic moving between the zones and acted on according to firewall rules. A zone is a group of interfaces that have similar functions or features. It establishes the security borders of a network. A zone defines a boundary where traffic is subjected to policy restrictions as it crosses to another region of a network." @@ -8033,7 +8061,7 @@ msgstr "It generates the keypair, which includes the public and private parts. T msgid "It helps to support as HELPER only for planned restarts." msgstr "It helps to support as HELPER only for planned restarts." -#: ../../configuration/firewall/zone.rst:77 +#: ../../configuration/firewall/zone.rst:87 msgid "It helps to think of the syntax as: (see below). The 'rule-set' should be written from the perspective of: *Source Zone*-to->*Destination Zone*" msgstr "It helps to think of the syntax as: (see below). The 'rule-set' should be written from the perspective of: *Source Zone*-to->*Destination Zone*" @@ -8057,7 +8085,7 @@ msgstr "It is highly recommended to use the same address for both the LDP router msgid "It is important to note that when creating firewall rules that the DNAT translation occurs **before** traffic traverses the firewall. In other words, the destination address has already been translated to 192.168.0.100." msgstr "It is important to note that when creating firewall rules that the DNAT translation occurs **before** traffic traverses the firewall. In other words, the destination address has already been translated to 192.168.0.100." -#: ../../configuration/vrf/index.rst:467 +#: ../../configuration/vrf/index.rst:503 msgid "It is not sufficient to only configure a L3VPN VRFs but L3VPN VRFs must be maintained, too.For L3VPN VRF maintenance the following operational commands are in place." msgstr "It is not sufficient to only configure a L3VPN VRFs but L3VPN VRFs must be maintained, too.For L3VPN VRF maintenance the following operational commands are in place." @@ -8073,7 +8101,7 @@ msgstr "It is not valid to use the `vif 1` option for VLAN aware bridges because msgid "It is possible to enhance authentication security by using the :abbr:`2FA (Two-factor authentication)`/:abbr:`MFA (Multi-factor authentication)` feature together with :abbr:`OTP (One-Time-Pad)` on VyOS. :abbr:`2FA (Two-factor authentication)`/:abbr:`MFA (Multi-factor authentication)` is configured independently per each user. If an OTP key is configured for a user, 2FA/MFA is automatically enabled for that particular user. If a user does not have an OTP key configured, there is no 2FA/MFA check for that user." msgstr "It is possible to enhance authentication security by using the :abbr:`2FA (Two-factor authentication)`/:abbr:`MFA (Multi-factor authentication)` feature together with :abbr:`OTP (One-Time-Pad)` on VyOS. :abbr:`2FA (Two-factor authentication)`/:abbr:`MFA (Multi-factor authentication)` is configured independently per each user. If an OTP key is configured for a user, 2FA/MFA is automatically enabled for that particular user. If a user does not have an OTP key configured, there is no 2FA/MFA check for that user." -#: ../../configuration/vrf/index.rst:458 +#: ../../configuration/vrf/index.rst:494 msgid "It is possible to permit BGP install VPN prefixes without transport labels. This configuration will install VPN prefixes originated from an e-bgp session, and with the next-hop directly connected." msgstr "It is possible to permit BGP install VPN prefixes without transport labels. This configuration will install VPN prefixes originated from an e-bgp session, and with the next-hop directly connected." @@ -8145,7 +8173,7 @@ msgstr "Key Management" msgid "Key Parameters:" msgstr "Key Parameters:" -#: ../../configuration/firewall/zone.rst:21 +#: ../../configuration/firewall/zone.rst:31 msgid "Key Points:" msgstr "Key Points:" @@ -8198,11 +8226,11 @@ msgstr "L2TPv3 is described in :rfc:`3931`." msgid "L2TPv3 options" msgstr "L2TPv3 options" -#: ../../configuration/vrf/index.rst:361 +#: ../../configuration/vrf/index.rst:397 msgid "L3VPN VRFs" msgstr "L3VPN VRFs" -#: ../../configuration/interfaces/openvpn.rst:391 +#: ../../configuration/interfaces/openvpn.rst:443 #: ../../configuration/service/webproxy.rst:203 msgid "LDAP" msgstr "LDAP" @@ -8395,8 +8423,8 @@ msgstr "Load the container image in op-mode." msgid "Local" msgstr "Local" -#: ../../configuration/interfaces/openvpn.rst:77 -#: ../../configuration/interfaces/openvpn.rst:189 +#: ../../configuration/interfaces/openvpn.rst:134 +#: ../../configuration/interfaces/openvpn.rst:241 msgid "Local Configuration:" msgstr "Local Configuration:" @@ -8681,7 +8709,7 @@ msgstr "Mark the private key as password protected. User is asked for the passwo msgid "Match BGP large communities." msgstr "Match BGP large communities." -#: ../../configuration/firewall/general-legacy.rst:471 +#: ../../configuration/firewall/general-legacy.rst:474 msgid "Match IP addresses based on its geolocation. More info: `geoip matching `_." msgstr "Match IP addresses based on its geolocation. More info: `geoip matching `_." @@ -8698,17 +8726,17 @@ msgid "Match a protocol criteria. A protocol number or a name which is defined i msgstr "Match a protocol criteria. A protocol number or a name which is defined in: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negates the selected protocol." #: ../../configuration/firewall/general.rst:1096 -#: ../../configuration/firewall/general-legacy.rst:668 +#: ../../configuration/firewall/general-legacy.rst:671 msgid "Match a protocol criteria. A protocol number or a name which is here defined: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negate the selected protocol." msgstr "Match a protocol criteria. A protocol number or a name which is here defined: ``/etc/protocols``. Special names are ``all`` for all protocols and ``tcp_udp`` for tcp and udp based packets. The ``!`` negate the selected protocol." #: ../../configuration/firewall/general.rst:1163 -#: ../../configuration/firewall/general-legacy.rst:706 +#: ../../configuration/firewall/general-legacy.rst:709 msgid "Match against the state of a packet." msgstr "Match against the state of a packet." #: ../../configuration/firewall/general.rst:929 -#: ../../configuration/firewall/general-legacy.rst:587 +#: ../../configuration/firewall/general-legacy.rst:590 msgid "Match based on dscp value." msgstr "Match based on dscp value." @@ -8717,18 +8745,18 @@ msgid "Match based on dscp value criteria. Multiple values from 0 to 63 and rang msgstr "Match based on dscp value criteria. Multiple values from 0 to 63 and ranges are supported." #: ../../configuration/firewall/general.rst:942 -#: ../../configuration/firewall/general-legacy.rst:594 +#: ../../configuration/firewall/general-legacy.rst:597 msgid "Match based on fragment criteria." msgstr "Match based on fragment criteria." #: ../../configuration/firewall/general.rst:961 -#: ../../configuration/firewall/general-legacy.rst:601 +#: ../../configuration/firewall/general-legacy.rst:604 #: ../../configuration/policy/route.rst:131 msgid "Match based on icmp|icmpv6 code and type." msgstr "Match based on icmp|icmpv6 code and type." #: ../../configuration/firewall/general.rst:980 -#: ../../configuration/firewall/general-legacy.rst:607 +#: ../../configuration/firewall/general-legacy.rst:610 msgid "Match based on icmp|icmpv6 type-name criteria. Use tab for information about what **type-name** criteria are supported." msgstr "Match based on icmp|icmpv6 type-name criteria. Use tab for information about what **type-name** criteria are supported." @@ -8736,7 +8764,7 @@ msgstr "Match based on icmp|icmpv6 type-name criteria. Use tab for information a msgid "Match based on icmp|icmpv6 type-name criteria. Use tab for information about what type-name criteria are supported." msgstr "Match based on icmp|icmpv6 type-name criteria. Use tab for information about what type-name criteria are supported." -#: ../../configuration/firewall/general-legacy.rst:619 +#: ../../configuration/firewall/general-legacy.rst:622 msgid "Match based on inbound/outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``" msgstr "Match based on inbound/outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``" @@ -8745,7 +8773,7 @@ msgid "Match based on inbound interface. Wilcard ``*`` can be used. For example: msgstr "Match based on inbound interface. Wilcard ``*`` can be used. For example: ``eth2*``" #: ../../configuration/firewall/general.rst:1018 -#: ../../configuration/firewall/general-legacy.rst:627 +#: ../../configuration/firewall/general-legacy.rst:630 msgid "Match based on ipsec criteria." msgstr "Match based on ipsec criteria." @@ -8754,29 +8782,29 @@ msgid "Match based on outbound interface. Wilcard ``*`` can be used. For example msgstr "Match based on outbound interface. Wilcard ``*`` can be used. For example: ``eth2*``" #: ../../configuration/firewall/general.rst:1069 -#: ../../configuration/firewall/general-legacy.rst:653 +#: ../../configuration/firewall/general-legacy.rst:656 #: ../../configuration/policy/route.rst:176 msgid "Match based on packet length criteria. Multiple values from 1 to 65535 and ranges are supported." msgstr "Match based on packet length criteria. Multiple values from 1 to 65535 and ranges are supported." #: ../../configuration/firewall/general.rst:1083 -#: ../../configuration/firewall/general-legacy.rst:661 +#: ../../configuration/firewall/general-legacy.rst:664 #: ../../configuration/policy/route.rst:184 msgid "Match based on packet type criteria." msgstr "Match based on packet type criteria." #: ../../configuration/firewall/general.rst:1044 -#: ../../configuration/firewall/general-legacy.rst:641 +#: ../../configuration/firewall/general-legacy.rst:644 msgid "Match based on the maximum average rate, specified as **integer/unit**. For example **5/minutes**" msgstr "Match based on the maximum average rate, specified as **integer/unit**. For example **5/minutes**" #: ../../configuration/firewall/general.rst:1031 -#: ../../configuration/firewall/general-legacy.rst:634 +#: ../../configuration/firewall/general-legacy.rst:637 msgid "Match based on the maximum number of packets to allow in excess of rate." msgstr "Match based on the maximum number of packets to allow in excess of rate." #: ../../configuration/firewall/general.rst:1129 -#: ../../configuration/firewall/general-legacy.rst:686 +#: ../../configuration/firewall/general-legacy.rst:689 msgid "Match bases on recently seen sources." msgstr "Match bases on recently seen sources." @@ -8799,7 +8827,7 @@ msgid "Match domain name" msgstr "Match domain name" #: ../../configuration/firewall/general.rst:1239 -#: ../../configuration/firewall/general-legacy.rst:729 +#: ../../configuration/firewall/general-legacy.rst:732 #: ../../configuration/policy/route.rst:234 msgid "Match hop-limit parameter, where 'eq' stands for 'equal'; 'gt' stands for 'greater than', and 'lt' stands for 'less than'." msgstr "Match hop-limit parameter, where 'eq' stands for 'equal'; 'gt' stands for 'greater than', and 'lt' stands for 'less than'." @@ -8813,13 +8841,13 @@ msgid "Match route metric." msgstr "Match route metric." #: ../../configuration/firewall/general.rst:1227 -#: ../../configuration/firewall/general-legacy.rst:723 +#: ../../configuration/firewall/general-legacy.rst:726 #: ../../configuration/policy/route.rst:229 msgid "Match time to live parameter, where 'eq' stands for 'equal'; 'gt' stands for 'greater than', and 'lt' stands for 'less than'." msgstr "Match time to live parameter, where 'eq' stands for 'equal'; 'gt' stands for 'greater than', and 'lt' stands for 'less than'." #: ../../configuration/firewall/general.rst:1264 -#: ../../configuration/firewall/general-legacy.rst:739 +#: ../../configuration/firewall/general-legacy.rst:742 msgid "Match when 'count' amount of connections are seen within 'time'. These matching criteria can be used to block brute-force attempts." msgstr "Match when 'count' amount of connections are seen within 'time'. These matching criteria can be used to block brute-force attempts." @@ -8909,7 +8937,7 @@ msgstr "Mount a volume into the container" msgid "Multi" msgstr "Multi" -#: ../../configuration/interfaces/openvpn.rst:275 +#: ../../configuration/interfaces/openvpn.rst:327 msgid "Multi-client server is the most popular OpenVPN mode on routers. It always uses x.509 authentication and therefore requires a PKI setup. Refer this topic :ref:`configuration/pki/index:pki` to generate a CA certificate, a server certificate and key, a certificate revocation list, a Diffie-Hellman key exchange parameters file. You do not need client certificates and keys for the server setup." msgstr "Multi-client server is the most popular OpenVPN mode on routers. It always uses x.509 authentication and therefore requires a PKI setup. Refer this topic :ref:`configuration/pki/index:pki` to generate a CA certificate, a server certificate and key, a certificate revocation list, a Diffie-Hellman key exchange parameters file. You do not need client certificates and keys for the server setup." @@ -9001,7 +9029,7 @@ msgid "Multiple services can be used per interface. Just specify as many service msgstr "Multiple services can be used per interface. Just specify as many services per interface as you like!" #: ../../configuration/firewall/general.rst:775 -#: ../../configuration/firewall/general-legacy.rst:512 +#: ../../configuration/firewall/general-legacy.rst:515 msgid "Multiple source ports can be specified as a comma-separated list. The whole list can also be \"negated\" using ``!``. For example:" msgstr "Multiple source ports can be specified as a comma-separated list. The whole list can also be \"negated\" using ``!``. For example:" @@ -9262,6 +9290,10 @@ msgstr "Normal but significant conditions - conditions that are not error condit msgid "Not all transmit policies may be 802.3ad compliant, particularly in regards to the packet misordering requirements of section 43.2.4 of the 802.3ad standard." msgstr "Not all transmit policies may be 802.3ad compliant, particularly in regards to the packet misordering requirements of section 43.2.4 of the 802.3ad standard." +#: ../../configuration/interfaces/openvpn.rst:127 +msgid "Note: certificate names don't matter, we use 'openvpn-local' and 'openvpn-remote' but they can be arbitrary." +msgstr "Note: certificate names don't matter, we use 'openvpn-local' and 'openvpn-remote' but they can be arbitrary." + #: ../../configuration/system/syslog.rst:246 msgid "Note that deleting the log file does not stop the system from logging events. If you use this command while the system is logging events, old log events will be deleted, but events after the delete operation will be recorded in the new file. To delete the file altogether, first delete logging to the file using system syslog :ref:`custom-file` command, and then delete the file." msgstr "Note that deleting the log file does not stop the system from logging events. If you use this command while the system is logging events, old log events will be deleted, but events after the delete operation will be recorded in the new file. To delete the file altogether, first delete logging to the file using system syslog :ref:`custom-file` command, and then delete the file." @@ -9287,7 +9319,7 @@ msgstr "Now the noted public keys should be entered on the opposite routers." msgid "Now we add the option to the scope, adapt to your setup" msgstr "Now we add the option to the scope, adapt to your setup" -#: ../../configuration/interfaces/openvpn.rst:333 +#: ../../configuration/interfaces/openvpn.rst:385 msgid "Now we need to specify the server network settings. In all cases we need to specify the subnet for client tunnel endpoints. Since we want clients to access a specific network behind our router, we will use a push-route option for installing that route on clients." msgstr "Now we need to specify the server network settings. In all cases we need to specify the subnet for client tunnel endpoints. Since we want clients to access a specific network behind our router, we will use a push-route option for installing that route on clients." @@ -9359,6 +9391,10 @@ msgstr "Often you will also have to configure your *default* traffic in the same msgid "On active router run:" msgstr "On active router run:" +#: ../../configuration/interfaces/openvpn.rst:83 +msgid "On both sides, you need to generate a self-signed certificate, preferrably using the \"ec\" (elliptic curve) type. You can generate them by executing command ``run generate pki certificate self-signed install `` in the configuration mode. Once the command is complete, it will add the certificate to the configuration session, to the ``pki`` subtree. You can then review the proposed changes and commit them." +msgstr "On both sides, you need to generate a self-signed certificate, preferrably using the \"ec\" (elliptic curve) type. You can generate them by executing command ``run generate pki certificate self-signed install `` in the configuration mode. Once the command is complete, it will add the certificate to the configuration session, to the ``pki`` subtree. You can then review the proposed changes and commit them." + #: ../../configuration/trafficpolicy/index.rst:487 msgid "On low rates (below 40Mbit) you may want to tune `quantum` down to something like 300 bytes." msgstr "On low rates (below 40Mbit) you may want to tune `quantum` down to something like 300 bytes." @@ -9519,7 +9555,7 @@ msgid "Only VRRP is supported. Required option." msgstr "Only VRRP is supported. Required option." #: ../../configuration/firewall/general.rst:736 -#: ../../configuration/firewall/general-legacy.rst:487 +#: ../../configuration/firewall/general-legacy.rst:490 msgid "Only in the source criteria, you can specify a mac-address." msgstr "Only in the source criteria, you can specify a mac-address." @@ -9587,19 +9623,19 @@ msgstr "OpenConnect supports a subset of it's configuration options to be applie msgid "OpenVPN" msgstr "OpenVPN" -#: ../../configuration/interfaces/openvpn.rst:355 +#: ../../configuration/interfaces/openvpn.rst:407 msgid "OpenVPN **will not** automatically create routes in the kernel for client subnets when they connect and will only use client-subnet association internally, so we need to create a route to the 10.23.0.0/20 network ourselves:" msgstr "OpenVPN **will not** automatically create routes in the kernel for client subnets when they connect and will only use client-subnet association internally, so we need to create a route to the 10.23.0.0/20 network ourselves:" -#: ../../configuration/interfaces/openvpn.rst:617 +#: ../../configuration/interfaces/openvpn.rst:669 msgid "OpenVPN DCO is not full OpenVPN features supported , is currently considered experimental. Furthermore, there are certain OpenVPN features and use cases that remain incompatible with DCO. To get a comprehensive understanding of the limitations associated with DCO, refer to the list of known limitations in the documentation." msgstr "OpenVPN DCO is not full OpenVPN features supported , is currently considered experimental. Furthermore, there are certain OpenVPN features and use cases that remain incompatible with DCO. To get a comprehensive understanding of the limitations associated with DCO, refer to the list of known limitations in the documentation." -#: ../../configuration/interfaces/openvpn.rst:606 +#: ../../configuration/interfaces/openvpn.rst:658 msgid "OpenVPN Data Channel Offload (DCO)" msgstr "OpenVPN Data Channel Offload (DCO)" -#: ../../configuration/interfaces/openvpn.rst:608 +#: ../../configuration/interfaces/openvpn.rst:660 msgid "OpenVPN Data Channel Offload (DCO) enables significant performance enhancement in encrypted OpenVPN data processing. By minimizing context switching for each packet, DCO effectively reduces overhead. This optimization is achieved by keeping most data handling tasks within the kernel, avoiding frequent switches between kernel and user space for encryption and packet handling." msgstr "OpenVPN Data Channel Offload (DCO) enables significant performance enhancement in encrypted OpenVPN data processing. By minimizing context switching for each packet, DCO effectively reduces overhead. This optimization is achieved by keeping most data handling tasks within the kernel, avoiding frequent switches between kernel and user space for encryption and packet handling." @@ -9607,7 +9643,11 @@ msgstr "OpenVPN Data Channel Offload (DCO) enables significant performance enhan msgid "OpenVPN allows for either TCP or UDP. UDP will provide the lowest latency, while TCP will work better for lossy connections; generally UDP is preferred when possible." msgstr "OpenVPN allows for either TCP or UDP. UDP will provide the lowest latency, while TCP will work better for lossy connections; generally UDP is preferred when possible." -#: ../../configuration/interfaces/openvpn.rst:268 +#: ../../configuration/interfaces/openvpn.rst:43 +msgid "OpenVPN is popular for client-server setups, but its site-to-site mode remains a relatively obscure feature, and many router appliances still don't support it. However, it's very useful for quickly setting up tunnels between routers." +msgstr "OpenVPN is popular for client-server setups, but its site-to-site mode remains a relatively obscure feature, and many router appliances still don't support it. However, it's very useful for quickly setting up tunnels between routers." + +#: ../../configuration/interfaces/openvpn.rst:320 msgid "OpenVPN status can be verified using the `show openvpn` operational commands. See the built-in help for a complete list of options." msgstr "OpenVPN status can be verified using the `show openvpn` operational commands. See the built-in help for a complete list of options." @@ -9643,13 +9683,13 @@ msgstr "Operating Modes" #: ../../configuration/system/default-route.rst:25 #: ../../configuration/system/flow-accounting.rst:175 #: ../../configuration/vrf/index.rst:111 -#: ../../configuration/vrf/index.rst:285 -#: ../../configuration/vrf/index.rst:465 +#: ../../configuration/vrf/index.rst:321 +#: ../../configuration/vrf/index.rst:501 msgid "Operation" msgstr "Operation" #: ../../configuration/firewall/general.rst:1269 -#: ../../configuration/firewall/general-legacy.rst:775 +#: ../../configuration/firewall/general-legacy.rst:778 msgid "Operation-mode Firewall" msgstr "Operation-mode Firewall" @@ -9741,7 +9781,7 @@ msgstr "Optional Configuration" msgid "Optionally set a specific static IPv4 or IPv6 address for the container. This address must be within the named network prefix." msgstr "Optionally set a specific static IPv4 or IPv6 address for the container. This address must be within the named network prefix." -#: ../../configuration/interfaces/openvpn.rst:579 +#: ../../configuration/interfaces/openvpn.rst:631 #: ../../configuration/service/dhcp-relay.rst:53 #: ../../configuration/service/dhcp-relay.rst:158 #: ../../configuration/service/dhcp-server.rst:257 @@ -9825,7 +9865,7 @@ msgid "Overview and basic concepts" msgstr "Overview and basic concepts" #: ../../configuration/firewall/general.rst:1423 -#: ../../configuration/firewall/general-legacy.rst:905 +#: ../../configuration/firewall/general-legacy.rst:908 msgid "Overview of defined groups. You see the type, the members, and where the group is used." msgstr "Overview of defined groups. You see the type, the members, and where the group is used." @@ -10125,6 +10165,10 @@ msgstr "Port to listen for HTTPS requests; default 443" msgid "Portions of the network which are VLAN-aware (i.e., IEEE 802.1q_ conformant) can include VLAN tags. When a frame enters the VLAN-aware portion of the network, a tag is added to represent the VLAN membership. Each frame must be distinguishable as being within exactly one VLAN. A frame in the VLAN-aware portion of the network that does not contain a VLAN tag is assumed to be flowing on the native VLAN." msgstr "Portions of the network which are VLAN-aware (i.e., IEEE 802.1q_ conformant) can include VLAN tags. When a frame enters the VLAN-aware portion of the network, a tag is added to represent the VLAN membership. Each frame must be distinguishable as being within exactly one VLAN. A frame in the VLAN-aware portion of the network that does not contain a VLAN tag is assumed to be flowing on the native VLAN." +#: ../../configuration/interfaces/openvpn.rst:169 +msgid "Pre-shared keys" +msgstr "Pre-shared keys" + #: ../../configuration/trafficpolicy/index.rst:787 #: ../../configuration/trafficpolicy/index.rst:862 msgid "Precedence" @@ -10234,11 +10278,11 @@ msgstr "Prepend the given string of AS numbers to the AS_PATH of the BGP path's msgid "Principle of SNMP Communication" msgstr "Principle of SNMP Communication" -#: ../../configuration/vrf/index.rst:494 +#: ../../configuration/vrf/index.rst:530 msgid "Print a summary of neighbor connections for the specified AFI/SAFI combination." msgstr "Print a summary of neighbor connections for the specified AFI/SAFI combination." -#: ../../configuration/vrf/index.rst:473 +#: ../../configuration/vrf/index.rst:509 msgid "Print active IPV4 or IPV6 routes advertised via the VPN SAFI." msgstr "Print active IPV4 or IPV6 routes advertised via the VPN SAFI." @@ -10672,8 +10716,8 @@ msgstr "Remote Access \"RoadWarrior\" Example" msgid "Remote Access \"RoadWarrior\" clients" msgstr "Remote Access \"RoadWarrior\" clients" -#: ../../configuration/interfaces/openvpn.rst:120 -#: ../../configuration/interfaces/openvpn.rst:195 +#: ../../configuration/interfaces/openvpn.rst:152 +#: ../../configuration/interfaces/openvpn.rst:247 msgid "Remote Configuration:" msgstr "Remote Configuration:" @@ -10721,6 +10765,10 @@ msgstr "Remote transmission interval will be multiplied by this value" msgid "Renaming clients interfaces by RADIUS" msgstr "Renaming clients interfaces by RADIUS" +#: ../../configuration/interfaces/openvpn.rst:129 +msgid "Repeat the procedure on the other router." +msgstr "Repeat the procedure on the other router." + #: ../../configuration/interfaces/macsec.rst:93 msgid "Replay protection" msgstr "Replay protection" @@ -10765,7 +10813,7 @@ msgstr "Requirements:" msgid "Reset" msgstr "Reset" -#: ../../configuration/interfaces/openvpn.rst:673 +#: ../../configuration/interfaces/openvpn.rst:725 msgid "Reset OpenVPN" msgstr "Reset OpenVPN" @@ -10923,7 +10971,7 @@ msgstr "Router Lifetime" msgid "Router receives DHCP client requests on ``eth1`` and relays them to the server at 10.0.1.4 on ``eth2``." msgstr "Router receives DHCP client requests on ``eth1`` and relays them to the server at 10.0.1.4 on ``eth2``." -#: ../../configuration/vrf/index.rst:387 +#: ../../configuration/vrf/index.rst:423 msgid "Routes exported from a unicast VRF to the VPN RIB must be augmented by two parameters:" msgstr "Routes exported from a unicast VRF to the VPN RIB must be augmented by two parameters:" @@ -10965,7 +11013,7 @@ msgid "Rule-Sets" msgstr "Rule-Sets" #: ../../configuration/firewall/general.rst:1272 -#: ../../configuration/firewall/general-legacy.rst:778 +#: ../../configuration/firewall/general-legacy.rst:781 msgid "Rule-set overview" msgstr "Rule-set overview" @@ -11214,7 +11262,7 @@ msgstr "Segment routing defines a control plane network architecture and can be msgid "Select cipher suite used for cryptographic operations. This setting is mandatory." msgstr "Select cipher suite used for cryptographic operations. This setting is mandatory." -#: ../../configuration/vrf/index.rst:430 +#: ../../configuration/vrf/index.rst:466 msgid "Select how labels are allocated in the given VRF. By default, the per-vrf mode is selected, and one label is used for all prefixes from the VRF. The per-nexthop will use a unique label for all prefixes that are reachable via the same nexthop." msgstr "Select how labels are allocated in the given VRF. By default, the per-vrf mode is selected, and one label is used for all prefixes from the VRF. The per-nexthop will use a unique label for all prefixes that are reachable via the same nexthop." @@ -11246,7 +11294,7 @@ msgstr "Serial Console" msgid "Serial interfaces can be any interface which is directly connected to the CPU or chipset (mostly known as a ttyS interface in Linux) or any other USB to serial converter (Prolific PL2303 or FTDI FT232/FT4232 based chips)." msgstr "Serial interfaces can be any interface which is directly connected to the CPU or chipset (mostly known as a ttyS interface in Linux) or any other USB to serial converter (Prolific PL2303 or FTDI FT232/FT4232 based chips)." -#: ../../configuration/interfaces/openvpn.rst:273 +#: ../../configuration/interfaces/openvpn.rst:325 #: ../../configuration/vpn/sstp.rst:199 msgid "Server" msgstr "Server" @@ -11263,7 +11311,7 @@ msgstr "Server Certificate" msgid "Server Configuration" msgstr "Server Configuration" -#: ../../configuration/interfaces/openvpn.rst:536 +#: ../../configuration/interfaces/openvpn.rst:588 msgid "Server Side" msgstr "Server Side" @@ -11388,7 +11436,7 @@ msgstr "Set a human readable, descriptive alias for this connection. Alias is us msgid "Set a limit on the maximum number of concurrent logged-in users on the system." msgstr "Set a limit on the maximum number of concurrent logged-in users on the system." -#: ../../configuration/firewall/zone.rst:69 +#: ../../configuration/firewall/zone.rst:79 msgid "Set a meaningful description." msgstr "Set a meaningful description." @@ -11528,7 +11576,7 @@ msgstr "Set if antenna pattern does not change during the lifetime of an associa msgid "Set inbound interface to match." msgstr "Set inbound interface to match." -#: ../../configuration/firewall/zone.rst:55 +#: ../../configuration/firewall/zone.rst:65 msgid "Set interfaces to a zone. A zone can have multiple interfaces. But an interface can only be a member in one zone." msgstr "Set interfaces to a zone. A zone can have multiple interfaces. But an interface can only be a member in one zone." @@ -11919,6 +11967,18 @@ msgstr "Setting name" msgid "Setting this up on AWS will require a \"Custom Protocol Rule\" for protocol number \"47\" (GRE) Allow Rule in TWO places. Firstly on the VPC Network ACL, and secondly on the security group network ACL attached to the EC2 instance. This has been tested as working for the official AMI image on the AWS Marketplace. (Locate the correct VPC and security group by navigating through the details pane below your EC2 instance in the AWS console)." msgstr "Setting this up on AWS will require a \"Custom Protocol Rule\" for protocol number \"47\" (GRE) Allow Rule in TWO places. Firstly on the VPC Network ACL, and secondly on the security group network ACL attached to the EC2 instance. This has been tested as working for the official AMI image on the AWS Marketplace. (Locate the correct VPC and security group by navigating through the details pane below your EC2 instance in the AWS console)." +#: ../../configuration/interfaces/openvpn.rst:132 +msgid "Setting up OpenVPN" +msgstr "Setting up OpenVPN" + +#: ../../configuration/interfaces/openvpn.rst:76 +msgid "Setting up a full-blown PKI with a CA certificate would arguably defeat the purpose of site-to-site OpenVPN, since its main goal is supposed to be configuration simplicity, compared to server setups that need to support multiple clients." +msgstr "Setting up a full-blown PKI with a CA certificate would arguably defeat the purpose of site-to-site OpenVPN, since its main goal is supposed to be configuration simplicity, compared to server setups that need to support multiple clients." + +#: ../../configuration/interfaces/openvpn.rst:74 +msgid "Setting up certificates" +msgstr "Setting up certificates" + #: ../../configuration/service/dhcp-server.rst:432 msgid "Setup DHCP failover for network 192.0.2.0/24" msgstr "Setup DHCP failover for network 192.0.2.0/24" @@ -11971,7 +12031,7 @@ msgstr "Short GI capabilities for 20 and 40 MHz" msgid "Short bursts can be allowed to exceed the limit. On creation, the Rate-Control traffic is stocked with tokens which correspond to the amount of traffic that can be burst in one go. Tokens arrive at a steady rate, until the bucket is full." msgstr "Short bursts can be allowed to exceed the limit. On creation, the Rate-Control traffic is stocked with tokens which correspond to the amount of traffic that can be burst in one go. Tokens arrive at a steady rate, until the bucket is full." -#: ../../configuration/vrf/index.rst:450 +#: ../../configuration/vrf/index.rst:486 msgid "Shortcut syntax for specifying automatic leaking from vrf VRFNAME to the current VRF using the VPN RIB as intermediary. The RD and RT are auto derived and should not be specified explicitly for either the source or destination VRF’s." msgstr "Shortcut syntax for specifying automatic leaking from vrf VRFNAME to the current VRF using the VPN RIB as intermediary. The RD and RT are auto derived and should not be specified explicitly for either the source or destination VRF’s." @@ -11989,7 +12049,7 @@ msgid "Show DHCPv6 server daemon log file" msgstr "Show DHCPv6 server daemon log file" #: ../../configuration/firewall/general.rst:1444 -#: ../../configuration/firewall/general-legacy.rst:962 +#: ../../configuration/firewall/general-legacy.rst:965 msgid "Show Firewall log" msgstr "Show Firewall log" @@ -12237,7 +12297,7 @@ msgid "Show the local container images." msgstr "Show the local container images." #: ../../configuration/firewall/general.rst:1448 -#: ../../configuration/firewall/general-legacy.rst:966 +#: ../../configuration/firewall/general-legacy.rst:969 msgid "Show the logs of a specific Rule-Set." msgstr "Show the logs of a specific Rule-Set." @@ -12306,7 +12366,7 @@ msgstr "Simple text password authentication is insecure and deprecated in favour msgid "Since both routers do not know their effective public addresses, we set the local-address of the peer to \"any\"." msgstr "Since both routers do not know their effective public addresses, we set the local-address of the peer to \"any\"." -#: ../../configuration/interfaces/openvpn.rst:343 +#: ../../configuration/interfaces/openvpn.rst:395 msgid "Since it's a HQ and branch offices setup, we will want all clients to have fixed addresses and we will route traffic to specific subnets through them. We need configuration for each client to achieve this." msgstr "Since it's a HQ and branch offices setup, we will want all clients to have fixed addresses and we will route traffic to specific subnets through them. We need configuration for each client to achieve this." @@ -12416,7 +12476,7 @@ msgstr "Some services don't work correctly when being handled via a web proxy. S msgid "Some users tend to connect their mobile devices using WireGuard to their VyOS router. To ease deployment one can generate a \"per mobile\" configuration from the VyOS CLI." msgstr "Some users tend to connect their mobile devices using WireGuard to their VyOS router. To ease deployment one can generate a \"per mobile\" configuration from the VyOS CLI." -#: ../../configuration/interfaces/openvpn.rst:599 +#: ../../configuration/interfaces/openvpn.rst:651 msgid "Sometimes option lines in the generated OpenVPN configuration require quotes. This is done through a hack on our config generator. You can pass quotes using the ``"`` statement." msgstr "Sometimes option lines in the generated OpenVPN configuration require quotes. This is done through a hack on our config generator. You can pass quotes using the ``"`` statement." @@ -12492,7 +12552,7 @@ msgstr "Specifies IP address for Dynamic Authorization Extension server (DM/CoA) msgid "Specifies :abbr:`MPPE (Microsoft Point-to-Point Encryption)` negotioation preference." msgstr "Specifies :abbr:`MPPE (Microsoft Point-to-Point Encryption)` negotioation preference." -#: ../../configuration/vrf/index.rst:439 +#: ../../configuration/vrf/index.rst:475 msgid "Specifies an optional route-map to be applied to routes imported or exported between the current unicast VRF and VPN." msgstr "Specifies an optional route-map to be applied to routes imported or exported between the current unicast VRF and VPN." @@ -12573,11 +12633,11 @@ msgstr "Specifies the port `` that the SSTP port will listen on (default 4 msgid "Specifies the protection scope (aka realm name) which is to be reported to the client for the authentication scheme. It is commonly part of the text the user will see when prompted for their username and password." msgstr "Specifies the protection scope (aka realm name) which is to be reported to the client for the authentication scheme. It is commonly part of the text the user will see when prompted for their username and password." -#: ../../configuration/vrf/index.rst:414 +#: ../../configuration/vrf/index.rst:450 msgid "Specifies the route-target list to be attached to a route (export) or the route-target list to match against (import) when exporting/importing between the current unicast VRF and VPN.The RTLIST is a space-separated list of route-targets, which are BGP extended community values as described in Extended Communities Attribute." msgstr "Specifies the route-target list to be attached to a route (export) or the route-target list to match against (import) when exporting/importing between the current unicast VRF and VPN.The RTLIST is a space-separated list of route-targets, which are BGP extended community values as described in Extended Communities Attribute." -#: ../../configuration/vrf/index.rst:407 +#: ../../configuration/vrf/index.rst:443 msgid "Specifies the route distinguisher to be added to a route exported from the current unicast VRF to VPN." msgstr "Specifies the route distinguisher to be added to a route exported from the current unicast VRF to VPN." @@ -12606,7 +12666,7 @@ msgid "Specify IPv4/IPv6 listen address of SSH server. Multiple addresses can be msgstr "Specify IPv4/IPv6 listen address of SSH server. Multiple addresses can be defined." #: ../../configuration/firewall/general.rst:668 -#: ../../configuration/firewall/general-legacy.rst:452 +#: ../../configuration/firewall/general-legacy.rst:455 msgid "Specify a Fully Qualified Domain Name as source/destination matcher. Ensure router is able to resolve such dns query." msgstr "Specify a Fully Qualified Domain Name as source/destination matcher. Ensure router is able to resolve such dns query." @@ -12756,6 +12816,10 @@ msgstr "Squid_ is a caching and forwarding HTTP web proxy. It has a wide variety msgid "Start by checking for IPSec SAs (Security Associations) with:" msgstr "Start by checking for IPSec SAs (Security Associations) with:" +#: ../../configuration/firewall/zone.rst:9 +msgid "Starting from VyOS 1.4-rolling-202308040557, a new firewall structure can be found on all vyos instalations, and zone based firewall is no longer supported. Documentation for most of the new firewall CLI can be found in the `firewall `_ chapter. The legacy firewall is still available for versions before 1.4-rolling-202308040557 and can be found in the :ref:`firewall-legacy` chapter. The examples in this section use the legacy firewall configuration commands, since this feature has been removed in earlier releases." +msgstr "Starting from VyOS 1.4-rolling-202308040557, a new firewall structure can be found on all vyos instalations, and zone based firewall is no longer supported. Documentation for most of the new firewall CLI can be found in the `firewall `_ chapter. The legacy firewall is still available for versions before 1.4-rolling-202308040557 and can be found in the :ref:`firewall-legacy` chapter. The examples in this section use the legacy firewall configuration commands, since this feature has been removed in earlier releases." + #: ../../configuration/firewall/index.rst:5 msgid "Starting from VyOS 1.4-rolling-202308040557, a new firewall structure can be found on all vyos installations. Documentation for most new firewall cli can be found here:" msgstr "Starting from VyOS 1.4-rolling-202308040557, a new firewall structure can be found on all vyos installations. Documentation for most new firewall cli can be found here:" @@ -12788,7 +12852,7 @@ msgstr "Static Keys" msgid "Static Routes" msgstr "Static Routes" -#: ../../configuration/interfaces/openvpn.rst:183 +#: ../../configuration/interfaces/openvpn.rst:235 msgid "Static Routing:" msgstr "Static Routing:" @@ -12814,7 +12878,7 @@ msgstr "Static mappings aren't shown. To show all states, use ``show dhcp server msgid "Static routes are manually configured routes, which, in general, cannot be updated dynamically from information VyOS learns about the network topology from other routing protocols. However, if a link fails, the router will remove routes, including static routes, from the :abbr:`RIPB (Routing Information Base)` that used this interface to reach the next hop. In general, static routes should only be used for very simple network topologies, or to override the behavior of a dynamic routing protocol for a small number of routes. The collection of all routes the router has learned from its configuration or from its dynamic routing protocols is stored in the RIB. Unicast routes are directly used to determine the forwarding table used for unicast packet forwarding." msgstr "Static routes are manually configured routes, which, in general, cannot be updated dynamically from information VyOS learns about the network topology from other routing protocols. However, if a link fails, the router will remove routes, including static routes, from the :abbr:`RIPB (Routing Information Base)` that used this interface to reach the next hop. In general, static routes should only be used for very simple network topologies, or to override the behavior of a dynamic routing protocol for a small number of routes. The collection of all routes the router has learned from its configuration or from its dynamic routing protocols is stored in the RIB. Unicast routes are directly used to determine the forwarding table used for unicast packet forwarding." -#: ../../configuration/interfaces/openvpn.rst:185 +#: ../../configuration/interfaces/openvpn.rst:237 msgid "Static routes can be configured referencing the tunnel interface; for example, the local router will use a network of 10.0.0.0/16, while the remote has a network of 10.1.0.0/16:" msgstr "Static routes can be configured referencing the tunnel interface; for example, the local router will use a network of 10.0.0.0/16, while the remote has a network of 10.1.0.0/16:" @@ -12871,7 +12935,7 @@ msgstr "Supports as HELPER for configured grace period." msgid "Suppose the LEFT router has external address 192.0.2.10 on its eth0 interface, and the RIGHT router is 203.0.113.45" msgstr "Suppose the LEFT router has external address 192.0.2.10 on its eth0 interface, and the RIGHT router is 203.0.113.45" -#: ../../configuration/interfaces/openvpn.rst:286 +#: ../../configuration/interfaces/openvpn.rst:338 msgid "Suppose you want to use 10.23.1.0/24 network for client tunnel endpoints and all client subnets belong to 10.23.0.0/20. All clients need access to the 192.168.0.0/16 network." msgstr "Suppose you want to use 10.23.1.0/24 network for client tunnel endpoints and all client subnets belong to 10.23.0.0/20. All clients need access to the 192.168.0.0/16 network." @@ -13233,7 +13297,7 @@ msgstr "The ``http`` service is lestens on port 80 and force redirects from HTTP msgid "The ``https`` service listens on port 443 with backend `bk-default` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." msgstr "The ``https`` service listens on port 443 with backend `bk-default` to handle HTTPS traffic. It uses certificate named ``cert`` for SSL termination." -#: ../../configuration/interfaces/openvpn.rst:69 +#: ../../configuration/interfaces/openvpn.rst:66 msgid "The ``persistent-tunnel`` directive will allow us to configure tunnel-related attributes, such as firewall policy as we would on any normal network interface." msgstr "The ``persistent-tunnel`` directive will allow us to configure tunnel-related attributes, such as firewall policy as we would on any normal network interface." @@ -13342,7 +13406,7 @@ msgstr "The computers on an internal network can use any of the addresses set as msgid "The configuration will look as follows:" msgstr "The configuration will look as follows:" -#: ../../configuration/interfaces/openvpn.rst:201 +#: ../../configuration/interfaces/openvpn.rst:253 msgid "The configurations above will default to using 256-bit AES in GCM mode for encryption (if both sides support NCP) and SHA-1 for HMAC authentication. SHA-1 is considered weak, but other hashing algorithms are available, as are encryption algorithms:" msgstr "The configurations above will default to using 256-bit AES in GCM mode for encryption (if both sides support NCP) and SHA-1 for HMAC authentication. SHA-1 is considered weak, but other hashing algorithms are available, as are encryption algorithms:" @@ -13529,11 +13593,11 @@ msgstr "The following PPP configuration tests MSCHAP-v2:" msgid "The following command can be used to generate the OTP key as well as the CLI commands to configure them:" msgstr "The following command can be used to generate the OTP key as well as the CLI commands to configure them:" -#: ../../configuration/interfaces/openvpn.rst:656 +#: ../../configuration/interfaces/openvpn.rst:708 msgid "The following commands let you check tunnel status." msgstr "The following commands let you check tunnel status." -#: ../../configuration/interfaces/openvpn.rst:675 +#: ../../configuration/interfaces/openvpn.rst:727 msgid "The following commands let you reset OpenVPN." msgstr "The following commands let you reset OpenVPN." @@ -13700,7 +13764,7 @@ msgstr "The local IPv4 or IPv6 addresses to bind the DNS forwarder to. The forwa msgid "The local IPv4 or IPv6 addresses to use as a source address for sending queries. The forwarder will send forwarded outbound DNS requests from this address." msgstr "The local IPv4 or IPv6 addresses to use as a source address for sending queries. The forwarder will send forwarded outbound DNS requests from this address." -#: ../../configuration/interfaces/openvpn.rst:61 +#: ../../configuration/interfaces/openvpn.rst:62 msgid "The local site will have a subnet of 10.0.0.0/16." msgstr "The local site will have a subnet of 10.0.0.0/16." @@ -13764,7 +13828,7 @@ msgstr "The number of milliseconds to wait for a remote authoritative server to msgid "The number parameter (1-10) configures the amount of accepted occurences of the system AS number in AS path." msgstr "The number parameter (1-10) configures the amount of accepted occurences of the system AS number in AS path." -#: ../../configuration/interfaces/openvpn.rst:67 +#: ../../configuration/interfaces/openvpn.rst:64 msgid "The official port for OpenVPN is 1194, which we reserve for client VPN; we will use 1195 for site-to-site VPN." msgstr "The official port for OpenVPN is 1194, which we reserve for client VPN; we will use 1195 for site-to-site VPN." @@ -13806,6 +13870,10 @@ msgstr "The ping command is used to test whether a network host is reachable or msgid "The popular Unix/Linux ``dig`` tool sets the AD-bit in the query. This might lead to unexpected query results when testing. Set ``+noad`` on the ``dig`` command line when this is the case." msgstr "The popular Unix/Linux ``dig`` tool sets the AD-bit in the query. This might lead to unexpected query results when testing. Set ``+noad`` on the ``dig`` command line when this is the case." +#: ../../configuration/interfaces/openvpn.rst:50 +msgid "The pre-shared key mode is deprecated and will be removed from future OpenVPN versions, so VyOS will have to remove support for that option as well. The reason is that using pre-shared keys is significantly less secure than using TLS." +msgstr "The pre-shared key mode is deprecated and will be removed from future OpenVPN versions, so VyOS will have to remove support for that option as well. The reason is that using pre-shared keys is significantly less secure than using TLS." + #: ../../configuration/protocols/rpki.rst:49 msgid "The prefix and ASN that originated it match a signed ROA. These are probably trustworthy route announcements." msgstr "The prefix and ASN that originated it match a signed ROA. These are probably trustworthy route announcements." @@ -13854,11 +13922,11 @@ msgstr "The protocol overhead of L2TPv3 is also significantly bigger than MPLS." msgid "The proxy service in VyOS is based on Squid_ and some related modules." msgstr "The proxy service in VyOS is based on Squid_ and some related modules." -#: ../../configuration/interfaces/openvpn.rst:58 +#: ../../configuration/interfaces/openvpn.rst:59 msgid "The public IP address of the local side of the VPN will be 198.51.100.10." msgstr "The public IP address of the local side of the VPN will be 198.51.100.10." -#: ../../configuration/interfaces/openvpn.rst:59 +#: ../../configuration/interfaces/openvpn.rst:60 msgid "The public IP address of the remote side of the VPN will be 203.0.113.11." msgstr "The public IP address of the remote side of the VPN will be 203.0.113.11." @@ -13875,7 +13943,7 @@ msgstr "The regular expression matches if and only if the entire string matches msgid "The remote peer `to-wg02` uses XMrlPykaxhdAAiSjhtPlvi30NVkvLQliQuKP7AI7CyI= as its public key portion" msgstr "The remote peer `to-wg02` uses XMrlPykaxhdAAiSjhtPlvi30NVkvLQliQuKP7AI7CyI= as its public key portion" -#: ../../configuration/interfaces/openvpn.rst:62 +#: ../../configuration/interfaces/openvpn.rst:63 msgid "The remote site will have a subnet of 10.1.0.0/16." msgstr "The remote site will have a subnet of 10.1.0.0/16." @@ -13883,7 +13951,7 @@ msgstr "The remote site will have a subnet of 10.1.0.0/16." msgid "The remote user will use the openconnect client to connect to the router and will receive an IP address from a VPN pool, allowing full access to the network." msgstr "The remote user will use the openconnect client to connect to the router and will receive an IP address from a VPN pool, allowing full access to the network." -#: ../../configuration/interfaces/openvpn.rst:406 +#: ../../configuration/interfaces/openvpn.rst:458 msgid "The required config file may look like this:" msgstr "The required config file may look like this:" @@ -13988,7 +14056,7 @@ msgstr "The task scheduler allows you to execute tasks on a given schedule. It m msgid "The translation address must be set to one of the available addresses on the configured `outbound-interface` or it must be set to `masquerade` which will use the primary IP address of the `outbound-interface` as its translation address." msgstr "The translation address must be set to one of the available addresses on the configured `outbound-interface` or it must be set to `masquerade` which will use the primary IP address of the `outbound-interface` as its translation address." -#: ../../configuration/interfaces/openvpn.rst:60 +#: ../../configuration/interfaces/openvpn.rst:61 msgid "The tunnel will use 10.255.1.1 for the local IP and 10.255.1.2 for the remote." msgstr "The tunnel will use 10.255.1.1 for the local IP and 10.255.1.2 for the remote." @@ -14043,10 +14111,18 @@ msgstr "The wireless client (supplicant) authenticates against the RADIUS server msgid "Then a corresponding SNAT rule is created to NAT outgoing traffic for the internal IP to a reserved external IP. This dedicates an external IP address to an internal IP address and is useful for protocols which don't have the notion of ports, such as GRE." msgstr "Then a corresponding SNAT rule is created to NAT outgoing traffic for the internal IP to a reserved external IP. This dedicates an external IP address to an internal IP address and is useful for protocols which don't have the notion of ports, such as GRE." -#: ../../configuration/interfaces/openvpn.rst:307 +#: ../../configuration/interfaces/openvpn.rst:359 msgid "Then we need to generate, add and specify the names of the cryptographic materials. Each of the install command should be applied to the configuration and commited before using under the openvpn interface configuration." msgstr "Then we need to generate, add and specify the names of the cryptographic materials. Each of the install command should be applied to the configuration and commited before using under the openvpn interface configuration." +#: ../../configuration/interfaces/openvpn.rst:196 +msgid "Then you need to install the key on the remote router:" +msgstr "Then you need to install the key on the remote router:" + +#: ../../configuration/interfaces/openvpn.rst:202 +msgid "Then you need to set the key in your OpenVPN interface settings:" +msgstr "Then you need to set the key in your OpenVPN interface settings:" + #: ../../configuration/interfaces/openvpn.rst:24 msgid "There's a variety of client GUI frontends for any platform" msgstr "There's a variety of client GUI frontends for any platform" @@ -15266,16 +15342,16 @@ msgid "This command will generate a default-route in L2 database." msgstr "This command will generate a default-route in L2 database." #: ../../configuration/firewall/general.rst:1419 -#: ../../configuration/firewall/general-legacy.rst:901 +#: ../../configuration/firewall/general-legacy.rst:904 msgid "This command will give an overview of a rule in a single rule-set" msgstr "This command will give an overview of a rule in a single rule-set" -#: ../../configuration/firewall/general-legacy.rst:937 +#: ../../configuration/firewall/general-legacy.rst:940 msgid "This command will give an overview of a rule in a single rule-set." msgstr "This command will give an overview of a rule in a single rule-set." #: ../../configuration/firewall/general.rst:1397 -#: ../../configuration/firewall/general-legacy.rst:929 +#: ../../configuration/firewall/general-legacy.rst:932 msgid "This command will give an overview of a single rule-set." msgstr "This command will give an overview of a single rule-set." @@ -15403,7 +15479,7 @@ msgid "This feature summarises originated external LSAs (Type-5 and Type-7). Sum msgstr "This feature summarises originated external LSAs (Type-5 and Type-7). Summary Route will be originated on-behalf of all matched external LSAs." #: ../../configuration/firewall/general.rst:631 -#: ../../configuration/firewall/general-legacy.rst:430 +#: ../../configuration/firewall/general-legacy.rst:431 msgid "This functions for both individual addresses and address groups." msgstr "This functions for both individual addresses and address groups." @@ -15693,11 +15769,11 @@ msgstr "This set the default action of the rule-set if no rule matched a packet msgid "This set the default action of the rule-set if no rule matched a packet criteria. If defacult-action is set to ``jump``, then ``default-jump-target`` is also needed. Note that for base chains, default action can only be set to ``accept`` or ``drop``, while on custom chain, more actions are available." msgstr "This set the default action of the rule-set if no rule matched a packet criteria. If defacult-action is set to ``jump``, then ``default-jump-target`` is also needed. Note that for base chains, default action can only be set to ``accept`` or ``drop``, while on custom chain, more actions are available." -#: ../../configuration/interfaces/openvpn.rst:226 +#: ../../configuration/interfaces/openvpn.rst:278 msgid "This sets the accepted ciphers to use when version => 2.4.0 and NCP is enabled (which is the default). Default NCP cipher for versions >= 2.4.0 is aes256gcm. The first cipher in this list is what server pushes to clients." msgstr "This sets the accepted ciphers to use when version => 2.4.0 and NCP is enabled (which is the default). Default NCP cipher for versions >= 2.4.0 is aes256gcm. The first cipher in this list is what server pushes to clients." -#: ../../configuration/interfaces/openvpn.rst:208 +#: ../../configuration/interfaces/openvpn.rst:260 msgid "This sets the cipher when NCP (Negotiable Crypto Parameters) is disabled or OpenVPN version < 2.4.0." msgstr "This sets the cipher when NCP (Negotiable Crypto Parameters) is disabled or OpenVPN version < 2.4.0." @@ -15798,21 +15874,21 @@ msgid "This will render the following ddclient_ configuration entry:" msgstr "This will render the following ddclient_ configuration entry:" #: ../../configuration/firewall/general.rst:1276 -#: ../../configuration/firewall/general-legacy.rst:782 +#: ../../configuration/firewall/general-legacy.rst:785 msgid "This will show you a basic firewall overview" msgstr "This will show you a basic firewall overview" -#: ../../configuration/firewall/general-legacy.rst:933 +#: ../../configuration/firewall/general-legacy.rst:936 msgid "This will show you a rule-set statistic since the last boot." msgstr "This will show you a rule-set statistic since the last boot." #: ../../configuration/firewall/general.rst:1441 -#: ../../configuration/firewall/general-legacy.rst:897 +#: ../../configuration/firewall/general-legacy.rst:900 msgid "This will show you a statistic of all rule-sets since the last boot." msgstr "This will show you a statistic of all rule-sets since the last boot." #: ../../configuration/firewall/general.rst:1339 -#: ../../configuration/firewall/general-legacy.rst:848 +#: ../../configuration/firewall/general-legacy.rst:851 msgid "This will show you a summary of rule-sets and groups" msgstr "This will show you a summary of rule-sets and groups" @@ -15857,7 +15933,7 @@ msgid "Time is in minutes and defaults to 60." msgstr "Time is in minutes and defaults to 60." #: ../../configuration/firewall/general.rst:1216 -#: ../../configuration/firewall/general-legacy.rst:719 +#: ../../configuration/firewall/general-legacy.rst:722 #: ../../configuration/policy/route.rst:225 msgid "Time to match the defined rule." msgstr "Time to match the defined rule." @@ -15960,7 +16036,7 @@ msgstr "To create more than one tunnel, use distinct UDP ports." msgid "To create routing table 100 and add a new default gateway to be used by traffic matching our route policy:" msgstr "To create routing table 100 and add a new default gateway to be used by traffic matching our route policy:" -#: ../../configuration/firewall/zone.rst:51 +#: ../../configuration/firewall/zone.rst:61 msgid "To define a zone setup either one with interfaces or a local zone." msgstr "To define a zone setup either one with interfaces or a local zone." @@ -16134,7 +16210,7 @@ msgstr "Traffic Filters are used to control which packets will have the defined msgid "Traffic Policy" msgstr "Traffic Policy" -#: ../../configuration/firewall/zone.rst:27 +#: ../../configuration/firewall/zone.rst:37 msgid "Traffic cannot flow between zone member interface and any interface that is not a zone member." msgstr "Traffic cannot flow between zone member interface and any interface that is not a zone member." @@ -16158,7 +16234,6 @@ msgstr "Transition scripts can help you implement various fixups, such as starti msgid "Transparent Proxy" msgstr "Transparent Proxy" -#: ../../configuration/interfaces/openvpn.rst:649 #: ../../configuration/interfaces/tunnel.rst:227 msgid "Troubleshooting" msgstr "Troubleshooting" @@ -16256,6 +16331,10 @@ msgstr "Unit of this command is MB." msgid "Units" msgstr "Units" +#: ../../configuration/interfaces/openvpn.rst:171 +msgid "Until VyOS 1.4, the only option for site-to-site OpenVPN without PKI was to use pre-shared keys. That option is still available but it is deprecated and will be removed in the future. However, if you need to set up a tunnel to an older VyOS version or a system with older OpenVPN, you need to still need to know how to use it." +msgstr "Until VyOS 1.4, the only option for site-to-site OpenVPN without PKI was to use pre-shared keys. That option is still available but it is deprecated and will be removed in the future. However, if you need to set up a tunnel to an older VyOS version or a system with older OpenVPN, you need to still need to know how to use it." + #: ../../configuration/trafficpolicy/index.rst:705 msgid "Up to seven queues -defined as classes_ with different priorities- can be configured. Packets are placed into queues based on associated match criteria. Packets are transmitted from the queues in priority order. If classes with a higher priority are being filled with packets continuously, packets from lower priority classes will only be transmitted after traffic volume from higher priority classes decreases." msgstr "Up to seven queues -defined as classes_ with different priorities- can be configured. Packets are placed into queues based on associated match criteria. Packets are transmitted from the queues in priority order. If classes with a higher priority are being filled with packets continuously, packets from lower priority classes will only be transmitted after traffic volume from higher priority classes decreases." @@ -16269,7 +16348,7 @@ msgid "Update container image" msgstr "Update container image" #: ../../configuration/firewall/general.rst:1502 -#: ../../configuration/firewall/general-legacy.rst:1047 +#: ../../configuration/firewall/general-legacy.rst:1050 msgid "Update geoip database" msgstr "Update geoip database" @@ -16323,27 +16402,27 @@ msgid "Use a persistent LDAP connection. Normally the LDAP connection is only op msgstr "Use a persistent LDAP connection. Normally the LDAP connection is only open while validating a username to preserve resources at the LDAP server. This option causes the LDAP connection to be kept open, allowing it to be reused for further user validations." #: ../../configuration/firewall/general.rst:804 -#: ../../configuration/firewall/general-legacy.rst:528 +#: ../../configuration/firewall/general-legacy.rst:531 msgid "Use a specific address-group. Prepend character ``!`` for inverted matching criteria." msgstr "Use a specific address-group. Prepend character ``!`` for inverted matching criteria." #: ../../configuration/firewall/general.rst:879 -#: ../../configuration/firewall/general-legacy.rst:564 +#: ../../configuration/firewall/general-legacy.rst:567 msgid "Use a specific domain-group. Prepend character ``!`` for inverted matching criteria." msgstr "Use a specific domain-group. Prepend character ``!`` for inverted matching criteria." #: ../../configuration/firewall/general.rst:904 -#: ../../configuration/firewall/general-legacy.rst:576 +#: ../../configuration/firewall/general-legacy.rst:579 msgid "Use a specific mac-group. Prepend character ``!`` for inverted matching criteria." msgstr "Use a specific mac-group. Prepend character ``!`` for inverted matching criteria." #: ../../configuration/firewall/general.rst:829 -#: ../../configuration/firewall/general-legacy.rst:540 +#: ../../configuration/firewall/general-legacy.rst:543 msgid "Use a specific network-group. Prepend character ``!`` for inverted matching criteria." msgstr "Use a specific network-group. Prepend character ``!`` for inverted matching criteria." #: ../../configuration/firewall/general.rst:854 -#: ../../configuration/firewall/general-legacy.rst:552 +#: ../../configuration/firewall/general-legacy.rst:555 msgid "Use a specific port-group. Prepend character ``!`` for inverted matching criteria." msgstr "Use a specific port-group. Prepend character ``!`` for inverted matching criteria." @@ -16386,7 +16465,7 @@ msgstr "Use auth key file at ``/config/auth/my.key``" msgid "Use configured `` to determine your IP address. ddclient_ will load `` and tries to extract your IP address from the response." msgstr "Use configured `` to determine your IP address. ddclient_ will load `` and tries to extract your IP address from the response." -#: ../../configuration/firewall/general-legacy.rst:475 +#: ../../configuration/firewall/general-legacy.rst:478 msgid "Use inverse-match to match anything except the given country-codes." msgstr "Use inverse-match to match anything except the given country-codes." @@ -16478,15 +16557,15 @@ msgstr "Use this command to allow the selected interface to join a multicast gro msgid "Use this command to allow the selected interface to join a source-specific multicast group." msgstr "Use this command to allow the selected interface to join a source-specific multicast group." -#: ../../configuration/interfaces/openvpn.rst:660 +#: ../../configuration/interfaces/openvpn.rst:712 msgid "Use this command to check the tunnel status for OpenVPN client interfaces." msgstr "Use this command to check the tunnel status for OpenVPN client interfaces." -#: ../../configuration/interfaces/openvpn.rst:664 +#: ../../configuration/interfaces/openvpn.rst:716 msgid "Use this command to check the tunnel status for OpenVPN server interfaces." msgstr "Use this command to check the tunnel status for OpenVPN server interfaces." -#: ../../configuration/interfaces/openvpn.rst:668 +#: ../../configuration/interfaces/openvpn.rst:720 msgid "Use this command to check the tunnel status for OpenVPN site-to-site interfaces." msgstr "Use this command to check the tunnel status for OpenVPN site-to-site interfaces." @@ -16886,7 +16965,7 @@ msgstr "Use this command to enable the logging of the default action on custom c msgid "Use this command to flush the kernel IPv6 route cache. An address can be added to flush it only for that route." msgstr "Use this command to flush the kernel IPv6 route cache. An address can be added to flush it only for that route." -#: ../../configuration/firewall/general-legacy.rst:945 +#: ../../configuration/firewall/general-legacy.rst:948 msgid "Use this command to get an overview of a zone." msgstr "Use this command to get an overview of a zone." @@ -16931,11 +17010,11 @@ msgstr "Use this command to reset IPv6 Neighbor Discovery Protocol cache for an msgid "Use this command to reset an LDP neighbor/TCP session that is established" msgstr "Use this command to reset an LDP neighbor/TCP session that is established" -#: ../../configuration/interfaces/openvpn.rst:683 +#: ../../configuration/interfaces/openvpn.rst:735 msgid "Use this command to reset the OpenVPN process on a specific interface." msgstr "Use this command to reset the OpenVPN process on a specific interface." -#: ../../configuration/interfaces/openvpn.rst:679 +#: ../../configuration/interfaces/openvpn.rst:731 msgid "Use this command to reset the specified OpenVPN client." msgstr "Use this command to reset the specified OpenVPN client." @@ -17095,7 +17174,7 @@ msgstr "User-level messages" msgid "Using 'soft-reconfiguration' we get the policy update without bouncing the neighbor." msgstr "Using 'soft-reconfiguration' we get the policy update without bouncing the neighbor." -#: ../../configuration/interfaces/openvpn.rst:294 +#: ../../configuration/interfaces/openvpn.rst:346 msgid "Using **openvpn-option -reneg-sec** can be tricky. This option is used to renegotiate data channel after n seconds. When used at both server and client, the lower value will trigger the renegotiation. If you set it to 0 on one side of the connection (to disable it), the chosen value on the other side will determine when the renegotiation will occur." msgstr "Using **openvpn-option -reneg-sec** can be tricky. This option is used to renegotiate data channel after n seconds. When used at both server and client, the lower value will trigger the renegotiation. If you set it to 0 on one side of the connection (to disable it), the chosen value on the other side will determine when the renegotiation will occur." @@ -17184,19 +17263,23 @@ msgstr "VPN-clients will request configuration parameters, optionally you can DN msgid "VRF" msgstr "VRF" -#: ../../configuration/vrf/index.rst:373 +#: ../../configuration/vrf/index.rst:409 msgid "VRF Route Leaking" msgstr "VRF Route Leaking" -#: ../../configuration/vrf/index.rst:342 +#: ../../configuration/vrf/index.rst:283 +msgid "VRF and NAT" +msgstr "VRF and NAT" + +#: ../../configuration/vrf/index.rst:378 msgid "VRF blue routing table" msgstr "VRF blue routing table" -#: ../../configuration/vrf/index.rst:309 +#: ../../configuration/vrf/index.rst:345 msgid "VRF default routing table" msgstr "VRF default routing table" -#: ../../configuration/vrf/index.rst:325 +#: ../../configuration/vrf/index.rst:361 msgid "VRF red routing table" msgstr "VRF red routing table" @@ -17391,7 +17474,7 @@ msgstr "VyOS can also run in DMVPN spoke mode." msgid "VyOS can be configured to track connections using the connection tracking subsystem. Connection tracking becomes operational once either stateful firewall or NAT is configured." msgstr "VyOS can be configured to track connections using the connection tracking subsystem. Connection tracking becomes operational once either stateful firewall or NAT is configured." -#: ../../configuration/interfaces/openvpn.rst:521 +#: ../../configuration/interfaces/openvpn.rst:573 msgid "VyOS can not only act as an OpenVPN site-to-site or server for multiple clients. You can indeed also configure any VyOS OpenVPN interface as an OpenVPN client connecting to a VyOS OpenVPN server or any other OpenVPN server." msgstr "VyOS can not only act as an OpenVPN site-to-site or server for multiple clients. You can indeed also configure any VyOS OpenVPN interface as an OpenVPN client connecting to a VyOS OpenVPN server or any other OpenVPN server." @@ -17481,7 +17564,7 @@ msgstr "VyOS provides policies commands exclusively for BGP traffic filtering an msgid "VyOS provides policies commands exclusively for BGP traffic filtering and manipulation: **large-community-list** is one of them." msgstr "VyOS provides policies commands exclusively for BGP traffic filtering and manipulation: **large-community-list** is one of them." -#: ../../configuration/interfaces/openvpn.rst:651 +#: ../../configuration/interfaces/openvpn.rst:703 msgid "VyOS provides some operational commands on OpenVPN." msgstr "VyOS provides some operational commands on OpenVPN." @@ -17584,6 +17667,10 @@ msgstr "Warning" msgid "Warning conditions" msgstr "Warning conditions" +#: ../../configuration/interfaces/openvpn.rst:54 +msgid "We'll configure OpenVPN using self-signed certificates, and then discuss the legacy pre-shared key mode." +msgstr "We'll configure OpenVPN using self-signed certificates, and then discuss the legacy pre-shared key mode." + #: ../../configuration/nat/nat44.rst:760 msgid "We'll use the IKE and ESP groups created above for this VPN. Because we need access to 2 different subnets on the far side, we will need two different tunnels. If you changed the names of the ESP group and IKE group in the previous step, make sure you use the correct names here too." msgstr "We'll use the IKE and ESP groups created above for this VPN. Because we need access to 2 different subnets on the far side, we will need two different tunnels. If you changed the names of the ESP group and IKE group in the previous step, make sure you use the correct names here too." @@ -17608,7 +17695,7 @@ msgstr "We can build route-maps for import based on these states. Here is a simp msgid "We could expand on this and also deny link local and multicast in the rule 20 action deny." msgstr "We could expand on this and also deny link local and multicast in the rule 20 action deny." -#: ../../configuration/interfaces/openvpn.rst:581 +#: ../../configuration/interfaces/openvpn.rst:633 msgid "We do not have CLI nodes for every single OpenVPN option. If an option is missing, a feature request should be opened at Phabricator_ so all users can benefit from it (see :ref:`issues_features`)." msgstr "We do not have CLI nodes for every single OpenVPN option. If an option is missing, a feature request should be opened at Phabricator_ so all users can benefit from it (see :ref:`issues_features`)." @@ -17931,11 +18018,11 @@ msgstr "While normal GRE is for layer 3, GRETAP is for layer 2. GRETAP can encap msgid "Whitelist of addresses and networks. Always allow inbound connections from these systems." msgstr "Whitelist of addresses and networks. Always allow inbound connections from these systems." -#: ../../configuration/interfaces/openvpn.rst:590 +#: ../../configuration/interfaces/openvpn.rst:642 msgid "Will add ``persistent-key`` at the end of the generated OpenVPN configuration. Please use this only as last resort - things might break and OpenVPN won't start if you pass invalid options/syntax." msgstr "Will add ``persistent-key`` at the end of the generated OpenVPN configuration. Please use this only as last resort - things might break and OpenVPN won't start if you pass invalid options/syntax." -#: ../../configuration/interfaces/openvpn.rst:597 +#: ../../configuration/interfaces/openvpn.rst:649 msgid "Will add ``push \"keepalive 1 10\"`` to the generated OpenVPN config file." msgstr "Will add ``push \"keepalive 1 10\"`` to the generated OpenVPN config file." @@ -18024,7 +18111,7 @@ msgstr "With this command, you can specify how the URL path should be matched ag msgid "Y" msgstr "Y" -#: ../../configuration/firewall/zone.rst:89 +#: ../../configuration/firewall/zone.rst:99 msgid "You apply a rule-set always to a zone from an other zone, it is recommended to create one rule-set for each zone pair." msgstr "You apply a rule-set always to a zone from an other zone, it is recommended to create one rule-set for each zone pair." @@ -18142,7 +18229,7 @@ msgstr "You can specify a static DHCP assignment on a per host basis. You will n msgid "You can test the SNMPv3 functionality from any linux based system, just run the following command: ``snmpwalk -v 3 -u vyos -a SHA -A vyos12345678 -x AES -X vyos12345678 -l authPriv 192.0.2.1 .1``" msgstr "You can test the SNMPv3 functionality from any linux based system, just run the following command: ``snmpwalk -v 3 -u vyos -a SHA -A vyos12345678 -x AES -X vyos12345678 -l authPriv 192.0.2.1 .1``" -#: ../../configuration/firewall/general-legacy.rst:771 +#: ../../configuration/firewall/general-legacy.rst:774 msgid "You can use wildcard ``*`` to match a group of interfaces." msgstr "You can use wildcard ``*`` to match a group of interfaces." @@ -18158,6 +18245,10 @@ msgstr "You can view that the policy is being correctly (or incorrectly) utilise msgid "You cannot easily redistribute IPv6 routes via OSPFv3 on a WireGuard interface link. This requires you to configure link-local addresses manually on the WireGuard interfaces, see :vytask:`T1483`." msgstr "You cannot easily redistribute IPv6 routes via OSPFv3 on a WireGuard interface link. This requires you to configure link-local addresses manually on the WireGuard interfaces, see :vytask:`T1483`." +#: ../../configuration/interfaces/openvpn.rst:119 +msgid "You do **not** need to copy the certificate to the other router. Instead, you need to retrieve its SHA-256 fingerprint. OpenVPN only supports SHA-256 fingerprints at the moment, so you need to use the following command:" +msgstr "You do **not** need to copy the certificate to the other router. Instead, you need to retrieve its SHA-256 fingerprint. OpenVPN only supports SHA-256 fingerprints at the moment, so you need to use the following command:" + #: ../../configuration/system/flow-accounting.rst:135 msgid "You may also additionally configure timeouts for different types of connections." msgstr "You may also additionally configure timeouts for different types of connections." @@ -18170,7 +18261,7 @@ msgstr "You may prefer locally configured capabilities more than the negotiated msgid "You may want to disable sending Capability Negotiation OPEN message optional parameter to the peer when remote peer does not implement Capability Negotiation. Please use :cfgcmd:`disable-capability-negotiation` command to disable the feature." msgstr "You may want to disable sending Capability Negotiation OPEN message optional parameter to the peer when remote peer does not implement Capability Negotiation. Please use :cfgcmd:`disable-capability-negotiation` command to disable the feature." -#: ../../configuration/firewall/zone.rst:29 +#: ../../configuration/firewall/zone.rst:39 msgid "You need 2 separate firewalls to define traffic: one for each direction." msgstr "You need 2 separate firewalls to define traffic: one for each direction." @@ -18190,7 +18281,7 @@ msgstr "You now see the longer AS path." msgid "You should add a firewall to your configuration above as well by assigning it to the pppoe0 itself as shown here:" msgstr "You should add a firewall to your configuration above as well by assigning it to the pppoe0 itself as shown here:" -#: ../../configuration/interfaces/openvpn.rst:175 +#: ../../configuration/interfaces/openvpn.rst:227 #: ../../configuration/interfaces/wireguard.rst:225 msgid "You should also ensure that the OUTISDE_LOCAL firewall group is applied to the WAN interface and a direction (local)." msgstr "You should also ensure that the OUTISDE_LOCAL firewall group is applied to the WAN interface and a direction (local)." @@ -18215,7 +18306,7 @@ msgstr "Zebra/Kernel route filtering" msgid "Zebra supports prefix-lists and Route Mapss to match routes received from other FRR components. The permit/deny facilities provided by these commands can be used to filter which routes zebra will install in the kernel." msgstr "Zebra supports prefix-lists and Route Mapss to match routes received from other FRR components. The permit/deny facilities provided by these commands can be used to filter which routes zebra will install in the kernel." -#: ../../configuration/firewall/general-legacy.rst:941 +#: ../../configuration/firewall/general-legacy.rst:944 msgid "Zone-Policy Overview" msgstr "Zone-Policy Overview" @@ -18314,7 +18405,7 @@ msgstr ":abbr:`IPSec (IP Security)` - too many RFCs to list, but start with :rfc msgid ":abbr:`IS-IS (Intermediate System to Intermediate System)` is a link-state interior gateway protocol (IGP) which is described in ISO10589, :rfc:`1195`, :rfc:`5308`. IS-IS runs the Dijkstra shortest-path first (SPF) algorithm to create a database of the network’s topology, and from that database to determine the best (that is, lowest cost) path to a destination. The intermediate systems (the name for routers) exchange topology information with their directly conencted neighbors. IS-IS runs directly on the data link layer (Layer 2). IS-IS addresses are called :abbr:`NETs (Network Entity Titles)` and can be 8 to 20 bytes long, but are generally 10 bytes long. The tree database that is created with IS-IS is similar to the one that is created with OSPF in that the paths chosen should be similar. Comparisons to OSPF are inevitable and often are reasonable ones to make in regards to the way a network will respond with either IGP." msgstr ":abbr:`IS-IS (Intermediate System to Intermediate System)` is a link-state interior gateway protocol (IGP) which is described in ISO10589, :rfc:`1195`, :rfc:`5308`. IS-IS runs the Dijkstra shortest-path first (SPF) algorithm to create a database of the network’s topology, and from that database to determine the best (that is, lowest cost) path to a destination. The intermediate systems (the name for routers) exchange topology information with their directly conencted neighbors. IS-IS runs directly on the data link layer (Layer 2). IS-IS addresses are called :abbr:`NETs (Network Entity Titles)` and can be 8 to 20 bytes long, but are generally 10 bytes long. The tree database that is created with IS-IS is similar to the one that is created with OSPF in that the paths chosen should be similar. Comparisons to OSPF are inevitable and often are reasonable ones to make in regards to the way a network will respond with either IGP." -#: ../../configuration/vrf/index.rst:363 +#: ../../configuration/vrf/index.rst:399 msgid ":abbr:`L3VPN VRFs ( Layer 3 Virtual Private Networks )` bgpd supports for IPv4 RFC 4364 and IPv6 RFC 4659. L3VPN routes, and their associated VRF MPLS labels, can be distributed to VPN SAFI neighbors in the default, i.e., non VRF, BGP instance. VRF MPLS labels are reached using core MPLS labels which are distributed using LDP or BGP labeled unicast. bgpd also supports inter-VRF route leaking." msgstr ":abbr:`L3VPN VRFs ( Layer 3 Virtual Private Networks )` bgpd supports for IPv4 RFC 4364 and IPv6 RFC 4659. L3VPN routes, and their associated VRF MPLS labels, can be distributed to VPN SAFI neighbors in the default, i.e., non VRF, BGP instance. VRF MPLS labels are reached using core MPLS labels which are distributed using LDP or BGP labeled unicast. bgpd also supports inter-VRF route leaking." @@ -19096,7 +19187,7 @@ msgstr "``ikev2-reauth`` whether rekeying of an IKE_SA should also reauthenticat msgid "``ikev2`` use IKEv2 for Key Exchange;" msgstr "``ikev2`` use IKEv2 for Key Exchange;" -#: ../../configuration/firewall/general-legacy.rst:748 +#: ../../configuration/firewall/general-legacy.rst:751 msgid "``in``: Ruleset for forwarded packets on an inbound interface" msgstr "``in``: Ruleset for forwarded packets on an inbound interface" @@ -19184,7 +19275,7 @@ msgstr "``local-as`` - Well-known communities value NO_EXPOR msgid "``local-id`` - ID for the local VyOS router. If defined, during the authentication it will be send to remote peer;" msgstr "``local-id`` - ID for the local VyOS router. If defined, during the authentication it will be send to remote peer;" -#: ../../configuration/firewall/general-legacy.rst:750 +#: ../../configuration/firewall/general-legacy.rst:753 msgid "``local``: Ruleset for packets destined for this router" msgstr "``local``: Ruleset for packets destined for this router" @@ -19352,7 +19443,7 @@ msgstr "``ospf`` - Open Shortest Path First (OSPFv2)" msgid "``ospfv3`` - Open Shortest Path First (IPv6) (OSPFv3)" msgstr "``ospfv3`` - Open Shortest Path First (IPv6) (OSPFv3)" -#: ../../configuration/firewall/general-legacy.rst:749 +#: ../../configuration/firewall/general-legacy.rst:752 msgid "``out``: Ruleset for forwarded packets on an outbound interface" msgstr "``out``: Ruleset for forwarded packets on an outbound interface" @@ -19693,7 +19784,7 @@ msgstr "alert" msgid "all" msgstr "all" -#: ../../configuration/vrf/index.rst:390 +#: ../../configuration/vrf/index.rst:426 msgid "an RD / RTLIST" msgstr "an RD / RTLIST" @@ -19963,7 +20054,7 @@ msgstr "host: single host IP address to match." msgid "https://access.redhat.com/sites/default/files/attachments/201501-perf-brief-low-latency-tuning-rhel7-v2.1.pdf" msgstr "https://access.redhat.com/sites/default/files/attachments/201501-perf-brief-low-latency-tuning-rhel7-v2.1.pdf" -#: ../../configuration/interfaces/openvpn.rst:623 +#: ../../configuration/interfaces/openvpn.rst:675 msgid "https://community.openvpn.net/openvpn/wiki/DataChannelOffload/Features" msgstr "https://community.openvpn.net/openvpn/wiki/DataChannelOffload/Features" diff --git a/docs/_locale/de/contributing.pot b/docs/_locale/de/contributing.pot index cc517b6e..f9195a6f 100644 --- a/docs/_locale/de/contributing.pot +++ b/docs/_locale/de/contributing.pot @@ -80,8 +80,8 @@ msgstr "Eine einzelne, kurze Zusammenfassung des Commits (empfohlen 50 Zeichen o msgid "Abbreviations and acronyms **must** be capitalized." msgstr "Abkürzungen und Akronyme **müssen** groß geschrieben werden." -#: ../../contributing/build-vyos.rst:407 -#: ../../contributing/build-vyos.rst:643 +#: ../../contributing/build-vyos.rst:403 +#: ../../contributing/build-vyos.rst:591 msgid "Accel-PPP" msgstr "Accel-PPP" @@ -101,14 +101,13 @@ msgstr "Eine oder mehrere IP-Adressen hinzufügen" msgid "Address" msgstr "Adresse" -#: ../../contributing/build-vyos.rst:852 +#: ../../contributing/build-vyos.rst:800 msgid "After a minute or two you will find the generated DEB packages next to the vyos-1x source directory:" msgstr "Nach ein oder zwei Minuten finden Sie die generierten DEB-Pakete neben dem vyos-1x Quellverzeichnis:" -#: ../../contributing/build-vyos.rst:638 -#: ../../contributing/build-vyos.rst:679 -#: ../../contributing/build-vyos.rst:708 -#: ../../contributing/build-vyos.rst:743 +#: ../../contributing/build-vyos.rst:627 +#: ../../contributing/build-vyos.rst:656 +#: ../../contributing/build-vyos.rst:691 msgid "After compiling the packages you will find yourself the newly generated `*.deb` binaries in ``vyos-build/packages/linux-kernel`` from which you can copy them to the ``vyos-build/packages`` folder for inclusion during the ISO build." msgstr "Nach dem Kompilieren der Pakete finden Sie die neu erzeugten `*.deb`-Binärdateien in ``vyos-build/packages/linux-kernel``, von wo aus sie in den ``vyos-build/packages``-Ordner kopiert werden können, um sie während der ISO-Erstellung einzubinden." @@ -148,11 +147,11 @@ msgstr "Verwenden Sie immer die Option ``-x`` für den Befehl ``git cherry-pick` msgid "Another advantage is testability of the code. Mocking the entire config subsystem is hard, while constructing an internal representation by hand is way simpler." msgstr "Ein weiterer Vorteil ist die Testbarkeit des Codes. Das Mocking des gesamten Konfigurations-Subsystems ist schwierig, während die Konstruktion einer internen Darstellung von Hand viel einfacher ist." -#: ../../contributing/build-vyos.rst:754 +#: ../../contributing/build-vyos.rst:702 msgid "Any \"modified\" package may refer to an altered version of e.g. vyos-1x package that you would like to test before filing a pull request on GitHub." msgstr "Jedes \"modifizierte\" Paket kann sich auf eine geänderte Version von z.B. des vyos-1x Pakets beziehen, das Sie testen möchten, bevor Sie einen Pull Request auf GitHub stellen." -#: ../../contributing/build-vyos.rst:883 +#: ../../contributing/build-vyos.rst:831 msgid "Any packages in the packages directory will be added to the iso during build, replacing the upstream ones. Make sure you delete them (both the source directories and built deb packages) if you want to build an iso from purely upstream packages." msgstr "Alle Pakete im Paketverzeichnis werden während des Builds zur iso hinzugefügt und ersetzen die Upstream-Pakete. Stellen Sie sicher, dass Sie diese löschen (sowohl die Quellverzeichnisse als auch die erstellten deb-Pakete), wenn Sie eine Iso aus reinen Upstream-Paketen erstellen wollen." @@ -164,7 +163,7 @@ msgstr "Da Smoketests die Systemkonfiguration ändern und Sie aus der Ferne eing msgid "As the VyOS documentation is not only for users but also for the developers - and we keep no secret documentation - this section describes how the automated testing works." msgstr "Da die VyOS-Dokumentation nicht nur für die Benutzer, sondern auch für die Entwickler gedacht ist - und wir keine geheime Dokumentation führen - wird in diesem Abschnitt beschrieben, wie das automatische Testen funktioniert." -#: ../../contributing/build-vyos.rst:829 +#: ../../contributing/build-vyos.rst:777 msgid "Assume we want to build the vyos-1x package on our own and modify it to our needs. We first need to clone the repository from GitHub." msgstr "Nehmen wir an, wir wollen das vyos-1x Paket selbst erstellen und es an unsere Bedürfnisse anpassen. Zuerst müssen wir das Repository von GitHub klonen." @@ -216,7 +215,7 @@ msgstr "Startzeitpunkt" msgid "Bug Report/Issue" msgstr "Fehlerbericht/Ereignis" -#: ../../contributing/build-vyos.rst:837 +#: ../../contributing/build-vyos.rst:785 msgid "Build" msgstr "Erstellen" @@ -224,7 +223,7 @@ msgstr "Erstellen" msgid "Build Container" msgstr "Container bauen" -#: ../../contributing/build-vyos.rst:180 +#: ../../contributing/build-vyos.rst:182 msgid "Build ISO" msgstr "ISO erstellen" @@ -232,31 +231,31 @@ msgstr "ISO erstellen" msgid "Build VyOS" msgstr "VyOS erstellen" -#: ../../contributing/build-vyos.rst:83 +#: ../../contributing/build-vyos.rst:85 msgid "Build from source" msgstr "Aus dem Quellcode erstellen" -#: ../../contributing/build-vyos.rst:586 +#: ../../contributing/build-vyos.rst:582 msgid "Building Out-Of-Tree Modules" msgstr "Erstellen von Out-Of-Tree-Modulen" -#: ../../contributing/build-vyos.rst:439 +#: ../../contributing/build-vyos.rst:435 msgid "Building The Kernel" msgstr "Den Kernel bauen" -#: ../../contributing/build-vyos.rst:244 +#: ../../contributing/build-vyos.rst:246 msgid "Building VyOS on Windows WSL2 with Docker integrated into WSL2 will work like a charm. No problems are known so far!" msgstr "Die Erstellung von VyOS auf Windows WSL2 mit Docker, das in WSL2 integriert ist, funktioniert problemlos. Bislang sind keine Probleme bekannt!" -#: ../../contributing/build-vyos.rst:757 +#: ../../contributing/build-vyos.rst:705 msgid "Building an ISO with any customized package is in no way different than building a regular (customized or not) ISO image. Simply place your modified `*.deb` package inside the `packages` folder within `vyos-build`. The build process will then pickup your custom package and integrate it into your ISO." msgstr "Die Erstellung eines ISO-Images mit einem angepassten Paket unterscheidet sich in keiner Weise von der Erstellung eines regulären ISO-Images (angepasst oder nicht). Legen Sie einfach Ihr modifiziertes `*.deb`-Paket in den Ordner `packages` innerhalb von `vyos-build`. Der Build-Prozess wird dann Ihr angepasstes Paket aufnehmen und in Ihr ISO integrieren." -#: ../../contributing/build-vyos.rst:588 +#: ../../contributing/build-vyos.rst:584 msgid "Building the kernel is one part, but now you also need to build the required out-of-tree modules so everything is lined up and the ABIs match. To do so, you can again take a look at ``vyos-build/packages/linux-kernel/Jenkinsfile`` to see all of the required modules and their selected versions. We will show you how to build all the current required modules." msgstr "Den Kernel zu bauen ist ein Teil, aber jetzt müssen Sie auch die benötigten Out-of-Tree-Module bauen, damit alles zusammenpasst und die ABIs übereinstimmen. Um dies zu tun, können Sie wieder einen Blick auf ``vyos-build/packages/linux-kernel/Jenkinsfile`` werfen, um alle benötigten Module und ihre ausgewählten Versionen zu sehen. Wir werden Ihnen zeigen, wie Sie alle aktuell benötigten Module bauen können." -#: ../../contributing/build-vyos.rst:479 +#: ../../contributing/build-vyos.rst:475 msgid "Building the kernel will take some time depending on the speed and quantity of your CPU/cores and disk speed. Expect 20 minutes (or even longer) on lower end hardware." msgstr "Die Erstellung des Kernels wird einige Zeit in Anspruch nehmen, abhängig von der Geschwindigkeit und Anzahl Ihrer CPU/Kerne und der Festplattengeschwindigkeit. Rechnen Sie mit 20 Minuten (oder sogar länger) auf weniger leistungsfähiger Hardware." @@ -276,7 +275,7 @@ msgstr "C++ Backend-Code" msgid "Capitalization and punctuation" msgstr "Großschreibung und Zeichensetzung" -#: ../../contributing/build-vyos.rst:452 +#: ../../contributing/build-vyos.rst:448 msgid "Check out the required kernel version - see ``vyos-build/data/defaults.json`` file (example uses kernel 4.19.146):" msgstr "Überprüfen Sie die benötigte Kernelversion - siehe ``vyos-build/data/defaults.json`` Datei (das Beispiel verwendet Kernel 4.19.146):" @@ -284,7 +283,7 @@ msgstr "Überprüfen Sie die benötigte Kernelversion - siehe ``vyos-build/data/ msgid "Clone: ``git clone https://github.com//vyos-1x.git``" msgstr "Klonen: ``git clone https://github.com//vyos-1x.git``" -#: ../../contributing/build-vyos.rst:445 +#: ../../contributing/build-vyos.rst:441 msgid "Clone the kernel source to `vyos-build/packages/linux-kernel/`:" msgstr "Klonen Sie den Kernel-Quellcode nach `vyos-build/packages/linux-kernel/`:" @@ -324,7 +323,7 @@ msgstr "Ziehen Sie die documentation_ zu Rate, um sicherzustellen, dass Sie Ihr msgid "Continuous Integration" msgstr "Continuous Integration" -#: ../../contributing/build-vyos.rst:253 +#: ../../contributing/build-vyos.rst:255 msgid "Customize" msgstr "Anpassen" @@ -336,19 +335,19 @@ msgstr "DHCP-Client und DHCPv6-Präfix-Delegation" msgid "DMVPN patches are added by this commit: https://github.com/vyos/vyos-strongswan/commit/1cf12b0f2f921bfc51affa3b81226" msgstr "DMVPN-Patches werden durch diesen Commit hinzugefügt: https://github.com/vyos/vyos-strongswan/commit/1cf12b0f2f921bfc51affa3b81226" -#: ../../contributing/build-vyos.rst:765 +#: ../../contributing/build-vyos.rst:713 msgid "Debian APT is not very verbose when it comes to errors. If your ISO build breaks for whatever reason and you suspect it's a problem with APT dependencies or installation you can add this small patch which increases the APT verbosity during ISO build." msgstr "Debian APT ist nicht sehr ausführlich, wenn es um Fehler geht. Wenn Ihre ISO-Erstellung aus irgendeinem Grund fehlschlägt und Sie vermuten, dass es ein Problem mit APT-Abhängigkeiten oder der Installation ist, können Sie diesen kleinen Patch hinzufügen, der die Ausführlichkeit von APT während der ISO-Erstellung erhöht." -#: ../../contributing/build-vyos.rst:152 +#: ../../contributing/build-vyos.rst:154 msgid "Debian Bullseye for VyOS 1.4 (sagitta, current) - aka the rolling release" msgstr "Debian Bullseye für VyOS 1.4 (sagitta, current) - auch bekannt als rolling release" -#: ../../contributing/build-vyos.rst:151 +#: ../../contributing/build-vyos.rst:153 msgid "Debian Buster for VyOS 1.3 (equuleus)" msgstr "Debian Buster für VyOS 1.3 (equuleus)" -#: ../../contributing/build-vyos.rst:150 +#: ../../contributing/build-vyos.rst:152 msgid "Debian Jessie for VyOS 1.2 (crux)" msgstr "Debian Jessie für VyOS 1.2 (Kernstück)" @@ -404,7 +403,7 @@ msgstr "Während der Migration und des umfangreichen Umschreibens von Funktional msgid "Each module is build on demand if a new commit on the branch in question is found. After a successful run the resulting Debian Package(s) will be deployed to our Debian repository which is used during build time. It is located here: http://dev.packages.vyos.net/repositories/." msgstr "Jedes Modul wird bei Bedarf gebaut, wenn ein neuer Commit für den betreffenden Zweig gefunden wird. Nach einem erfolgreichen Lauf werden die resultierenden Debian-Pakete in unserem Debian-Repository bereitgestellt, das während der Build-Zeit verwendet wird. Es befindet sich hier: http://dev.packages.vyos.net/repositories/." -#: ../../contributing/build-vyos.rst:411 +#: ../../contributing/build-vyos.rst:407 msgid "Each of those modules holds a dependency on the kernel version and if you are lucky enough to receive an ISO build error which sounds like:" msgstr "Jedes dieser Module ist von der Kernel-Version abhängig, und wenn Sie das Glück haben, einen ISO-Build-Fehler zu erhalten, der sich wie folgt anhört:" @@ -454,12 +453,11 @@ msgstr "FRR" msgid "Feature Request" msgstr "Feature Anfrage" -#: ../../contributing/build-vyos.rst:564 +#: ../../contributing/build-vyos.rst:560 msgid "Firmware" msgstr "Firmware" -#: ../../contributing/build-vyos.rst:597 -#: ../../contributing/build-vyos.rst:645 +#: ../../contributing/build-vyos.rst:593 msgid "First, clone the source code and check out the appropriate version by running:" msgstr "Klonen Sie zunächst den Quellcode und auschecken Sie die entsprechende Version aus:" @@ -487,7 +485,7 @@ msgstr "Zum Beispiel kann ``/tmp/vyos.ifconfig.debug`` erstellt werden, um das D msgid "For example running, ``export VYOS_IFCONFIG_DEBUG=\"\"`` on your vbash, will have the same effect as ``touch /tmp/vyos.ifconfig.debug``." msgstr "Wenn Sie zum Beispiel ``export VYOS_IFCONFIG_DEBUG=\"\"`` in Ihrer vbash ausführen, hat das den gleichen Effekt wie ``touch /tmp/vyos.ifconfig.debug``." -#: ../../contributing/build-vyos.rst:168 +#: ../../contributing/build-vyos.rst:170 msgid "For the packages required, you can refer to the ``docker/Dockerfile`` file in the repository_. The ``./build-vyos-image`` script will also warn you if any dependencies are missing." msgstr "Die erforderlichen Pakete finden Sie in der Datei ``docker/Dockerfile`` im repository_. Das Skript ``./build-vyos-image`` wird Sie auch warnen, wenn irgendwelche Abhängigkeiten fehlen." @@ -536,7 +534,7 @@ msgstr "Gut: PPPoE, IPsec" msgid "Good: RADIUS (as in remote authentication for dial-in user services)" msgstr "Gut: RADIUS (as in remote authentication for dial-in user services)" -#: ../../contributing/build-vyos.rst:242 +#: ../../contributing/build-vyos.rst:244 msgid "Good luck!" msgstr "Viel Glück!" @@ -568,7 +566,7 @@ msgstr "Wie können wir diesen Fehler reproduzieren?" msgid "IP and IPv6 options" msgstr "IP- und IPv6-Optionen" -#: ../../contributing/build-vyos.rst:306 +#: ../../contributing/build-vyos.rst:308 msgid "ISO Build Issues" msgstr "ISO Build-Probleme" @@ -592,11 +590,11 @@ msgstr "Falls zutreffend, sollte ein Verweis auf einen vorhergehenden Commit gem msgid "If there is no Phabricator_ reference in the commits of your pull request, we have to ask you to amend the commit message. Otherwise we will have to reject it." msgstr "Wenn in den Commits Ihres Pull-Requests keine Phabricator_ Referenz vorhanden ist, müssen wir Sie bitten, die Commit-Nachricht zu ändern. Andernfalls müssen wir sie ablehnen." -#: ../../contributing/build-vyos.rst:751 +#: ../../contributing/build-vyos.rst:699 msgid "If you are brave enough to build yourself an ISO image containing any modified package from our GitHub organisation - this is the place to be." msgstr "Wenn Sie mutig genug sind, sich ein ISO-Image zu erstellen, das ein beliebiges modifiziertes Paket aus unserer GitHub-Organisation enthält, sind Sie hier genau richtig." -#: ../../contributing/build-vyos.rst:566 +#: ../../contributing/build-vyos.rst:562 msgid "If you upgrade your kernel or include new drivers you may need new firmware. Build a new ``vyos-linux-firmware`` package with the included helper scripts." msgstr "Wenn Sie Ihren Kernel aktualisieren oder neue Treiber einbinden, benötigen Sie möglicherweise eine neue Firmware. Erstellen Sie ein neues ``vyos-linux-firmware`` Paket mit den enthaltenen Hilfsskripten." @@ -624,7 +622,7 @@ msgstr "In order to retrieve the debug output on the command-line you need to di msgid "In some contexts, the first line is treated as the subject of an email and the rest of the text as the body. The blank line separating the summary from the body is critical (unless you omit the body entirely); tools like rebase can get confused if you run the two together." msgstr "In some contexts, the first line is treated as the subject of an email and the rest of the text as the body. The blank line separating the summary from the body is critical (unless you omit the body entirely); tools like rebase can get confused if you run the two together." -#: ../../contributing/build-vyos.rst:558 +#: ../../contributing/build-vyos.rst:554 msgid "In the end you will be presented with the kernel binary packages which you can then use in your custom ISO build process, by placing all the `*.deb` files in the vyos-build/packages folder where they will be used automatically when building VyOS as documented above." msgstr "In the end you will be presented with the kernel binary packages which you can then use in your custom ISO build process, by placing all the `*.deb` files in the vyos-build/packages folder where they will be used automatically when building VyOS as documented above." @@ -640,7 +638,7 @@ msgstr "Ausgabe einbeziehen" msgid "Insert the following statement right before the section where you want to investigate a problem (e.g. a statement you see in a backtrace): ``import pdb; pdb.set_trace()`` Optionally you can surrounded this statement by an ``if`` which only triggers under the condition you are interested in." msgstr "Insert the following statement right before the section where you want to investigate a problem (e.g. a statement you see in a backtrace): ``import pdb; pdb.set_trace()`` Optionally you can surrounded this statement by an ``if`` which only triggers under the condition you are interested in." -#: ../../contributing/build-vyos.rst:862 +#: ../../contributing/build-vyos.rst:810 msgid "Install" msgstr "Installieren" @@ -656,19 +654,19 @@ msgstr "Installing Docker_ and prerequisites:" msgid "Instead of supplying all those XML nodes multiple times there are now include files with predefined features. Brief overview:" msgstr "Instead of supplying all those XML nodes multiple times there are now include files with predefined features. Brief overview:" -#: ../../contributing/build-vyos.rst:684 +#: ../../contributing/build-vyos.rst:632 msgid "Intel NIC" msgstr "Intel NIC" -#: ../../contributing/build-vyos.rst:408 +#: ../../contributing/build-vyos.rst:404 msgid "Intel NIC drivers" msgstr "Intel NIC drivers" -#: ../../contributing/build-vyos.rst:713 +#: ../../contributing/build-vyos.rst:661 msgid "Intel QAT" msgstr "Intel QAT" -#: ../../contributing/build-vyos.rst:409 +#: ../../contributing/build-vyos.rst:405 msgid "Inter QAT" msgstr "Inter QAT" @@ -696,7 +694,7 @@ msgstr "It is also possible to set up the debugging using environment variables. msgid "Jenkins CI" msgstr "Jenkins CI" -#: ../../contributing/build-vyos.rst:868 +#: ../../contributing/build-vyos.rst:816 msgid "Just install using the following commands:" msgstr "Just install using the following commands:" @@ -712,7 +710,7 @@ msgstr "Keepalived normally isn't updated to newer feature releases between Debi msgid "Kernel" msgstr "Kernel" -#: ../../contributing/build-vyos.rst:839 +#: ../../contributing/build-vyos.rst:787 msgid "Launch Docker container and build package" msgstr "Launch Docker container and build package" @@ -736,7 +734,7 @@ msgstr "Like any other project we have some small guidelines about our source co msgid "Limits:" msgstr "Limits:" -#: ../../contributing/build-vyos.rst:388 +#: ../../contributing/build-vyos.rst:390 msgid "Linux Kernel" msgstr "Linux Kernel" @@ -772,7 +770,7 @@ msgstr "Migrating old CLI" msgid "Move default values to scripts" msgstr "Move default values to scripts" -#: ../../contributing/build-vyos.rst:145 +#: ../../contributing/build-vyos.rst:147 msgid "Native Build" msgstr "Native Build" @@ -809,23 +807,23 @@ msgstr "None" msgid "Notes" msgstr "Notes" -#: ../../contributing/build-vyos.rst:197 +#: ../../contributing/build-vyos.rst:199 msgid "Now a fresh build of the VyOS ISO can begin. Change directory to the ``vyos-build`` directory and run:" msgstr "Now a fresh build of the VyOS ISO can begin. Change directory to the ``vyos-build`` directory and run:" -#: ../../contributing/build-vyos.rst:182 +#: ../../contributing/build-vyos.rst:184 msgid "Now as you are aware of the prerequisites we can continue and build our own ISO from source. For this we have to fetch the latest source code from GitHub. Please note as this will differ for both `current` and `crux`." msgstr "Now as you are aware of the prerequisites we can continue and build our own ISO from source. For this we have to fetch the latest source code from GitHub. Please note as this will differ for both `current` and `crux`." -#: ../../contributing/build-vyos.rst:382 +#: ../../contributing/build-vyos.rst:384 msgid "Now it's time to fix the package mirror and rerun the last step until the package installation succeeds again!" msgstr "Now it's time to fix the package mirror and rerun the last step until the package installation succeeds again!" -#: ../../contributing/build-vyos.rst:473 +#: ../../contributing/build-vyos.rst:469 msgid "Now we can use the helper script ``build-kernel.sh`` which does all the necessary voodoo by applying required patches from the `vyos-build/packages/linux-kernel/patches` folder, copying our kernel configuration ``x86_64_vyos_defconfig`` to the right location, and finally building the Debian packages." msgstr "Now we can use the helper script ``build-kernel.sh`` which does all the necessary voodoo by applying required patches from the `vyos-build/packages/linux-kernel/patches` folder, copying our kernel configuration ``x86_64_vyos_defconfig`` to the right location, and finally building the Debian packages." -#: ../../contributing/build-vyos.rst:131 +#: ../../contributing/build-vyos.rst:133 msgid "Now you are prepared with two new aliases ``vybld`` and ``vybld_crux`` to spawn your development containers in your current working directory." msgstr "Now you are prepared with two new aliases ``vybld`` and ``vybld_crux`` to spawn your development containers in your current working directory." @@ -837,7 +835,7 @@ msgstr "Old concept/syntax" msgid "On the other hand - as each test is contain in its own file - one can always execute a single Smoketest by hand by simply running the Python test scripts." msgstr "On the other hand - as each test is contain in its own file - one can always execute a single Smoketest by hand by simply running the Python test scripts." -#: ../../contributing/build-vyos.rst:172 +#: ../../contributing/build-vyos.rst:174 msgid "Once you have the required dependencies installed, you may proceed with the steps described in :ref:`build_iso`." msgstr "Once you have the required dependencies installed, you may proceed with the steps described in :ref:`build_iso`." @@ -881,8 +879,8 @@ msgstr "Our op mode scripts use the python-vici module, which is not included in msgid "Our smoketests not only test daemons and serives, but also check if what we configure for an interface works. Thus there is a common base classed named: ``base_interfaces_test.py`` which holds all the common code that an interface supports and is tested." msgstr "Our smoketests not only test daemons and serives, but also check if what we configure for an interface works. Thus there is a common base classed named: ``base_interfaces_test.py`` which holds all the common code that an interface supports and is tested." -#: ../../contributing/build-vyos.rst:749 -#: ../../contributing/build-vyos.rst:818 +#: ../../contributing/build-vyos.rst:697 +#: ../../contributing/build-vyos.rst:766 msgid "Packages" msgstr "Packages" @@ -954,7 +952,7 @@ msgstr "Python 3 **shall** be used. How long can we keep Python 2 alive anyway? msgid "Python (or any other language, for that matter) does not provide automatic protection from bad design, so we need to also devise design guidelines and follow them to keep the system extensible and maintainable." msgstr "Python (or any other language, for that matter) does not provide automatic protection from bad design, so we need to also devise design guidelines and follow them to keep the system extensible and maintainable." -#: ../../contributing/build-vyos.rst:797 +#: ../../contributing/build-vyos.rst:745 msgid "QEMU" msgstr "QEMU" @@ -970,20 +968,20 @@ msgstr "Recent versions use the ``vyos.frr`` framework. The Python class is loca msgid "Report a Bug" msgstr "Report a Bug" -#: ../../contributing/build-vyos.rst:799 +#: ../../contributing/build-vyos.rst:747 msgid "Run the following command after building the ISO image." msgstr "Run the following command after building the ISO image." -#: ../../contributing/build-vyos.rst:808 +#: ../../contributing/build-vyos.rst:756 msgid "Run the following command after building the QEMU image." msgstr "Run the following command after building the QEMU image." -#: ../../contributing/build-vyos.rst:689 -#: ../../contributing/build-vyos.rst:718 +#: ../../contributing/build-vyos.rst:637 +#: ../../contributing/build-vyos.rst:666 msgid "Simply use our wrapper script to build all of the driver modules." msgstr "Simply use our wrapper script to build all of the driver modules." -#: ../../contributing/build-vyos.rst:100 +#: ../../contributing/build-vyos.rst:102 msgid "Since VyOS has switched to Debian (11) Bullseye in its ``current`` branch, you will require individual container for `current`, `equuleus` and `crux` builds." msgstr "Since VyOS has switched to Debian (11) Bullseye in its ``current`` branch, you will require individual container for `current`, `equuleus` and `crux` builds." @@ -999,7 +997,7 @@ msgstr "Smoketests executes predefined VyOS CLI commands and checks if the desir msgid "So if you plan to build your own custom ISO image and wan't to make use of our smoketests, ensure that you have the `vyos-1x-smoketest` package installed." msgstr "So if you plan to build your own custom ISO image and wan't to make use of our smoketests, ensure that you have the `vyos-1x-smoketest` package installed." -#: ../../contributing/build-vyos.rst:134 +#: ../../contributing/build-vyos.rst:136 msgid "Some VyOS packages (namely vyos-1x) come with build-time tests which verify some of the internal library calls that they work as expected. Those tests are carried out through the Python Unittest module. If you want to build the ``vyos-1x`` package (which is our main development package) you need to start your Docker container using the following argument: ``--sysctl net.ipv6.conf.lo.disable_ipv6=0``, otherwise those tests will fail." msgstr "Some VyOS packages (namely vyos-1x) come with build-time tests which verify some of the internal library calls that they work as expected. Those tests are carried out through the Python Unittest module. If you want to build the ``vyos-1x`` package (which is our main development package) you need to start your Docker container using the following argument: ``--sysctl net.ipv6.conf.lo.disable_ipv6=0``, otherwise those tests will fail." @@ -1015,7 +1013,7 @@ msgstr "Some of the configurations have preconditions which need to be met. Thos msgid "Sometimes it might be useful to debug Python code interactively on the live system rather than a IDE. This can be achieved using pdb." msgstr "Sometimes it might be useful to debug Python code interactively on the live system rather than a IDE. This can be achieved using pdb." -#: ../../contributing/build-vyos.rst:227 +#: ../../contributing/build-vyos.rst:229 msgid "Start the build:" msgstr "Start the build:" @@ -1059,15 +1057,15 @@ msgstr "Text generation" msgid "The CLI parser used in VyOS is a mix of bash, bash-completion helper and the C++ backend library [vyatta-cfg](https://github.com/vyos/vyatta-cfg). This section is a reference of common CLI commands and the respective entry point in the C/C++ code." msgstr "The CLI parser used in VyOS is a mix of bash, bash-completion helper and the C++ backend library [vyatta-cfg](https://github.com/vyos/vyatta-cfg). This section is a reference of common CLI commands and the respective entry point in the C/C++ code." -#: ../../contributing/build-vyos.rst:686 +#: ../../contributing/build-vyos.rst:634 msgid "The Intel NIC drivers do not come from a Git repository, instead we just fetch the tarballs from our mirror and compile them." msgstr "The Intel NIC drivers do not come from a Git repository, instead we just fetch the tarballs from our mirror and compile them." -#: ../../contributing/build-vyos.rst:714 +#: ../../contributing/build-vyos.rst:662 msgid "The Intel QAT (Quick Assist Technology) drivers do not come from a Git repository, instead we just fetch the tarballs from 01.org, Intel's open-source website." msgstr "The Intel QAT (Quick Assist Technology) drivers do not come from a Git repository, instead we just fetch the tarballs from 01.org, Intel's open-source website." -#: ../../contributing/build-vyos.rst:390 +#: ../../contributing/build-vyos.rst:392 msgid "The Linux kernel used by VyOS is heavily tied to the ISO build process. The file ``data/defaults.json`` hosts a JSON definition of the kernel version used ``kernel_version`` and the ``kernel_flavor`` of the kernel which represents the kernel's LOCAL_VERSION. Both together form the kernel version variable in the system:" msgstr "The Linux kernel used by VyOS is heavily tied to the ISO build process. The file ``data/defaults.json`` hosts a JSON definition of the kernel version used ``kernel_version`` and the ``kernel_flavor`` of the kernel which represents the kernel's LOCAL_VERSION. Both together form the kernel version variable in the system:" @@ -1111,7 +1109,7 @@ msgstr "The build process needs to be built on a local file system, building on msgid "The configurations are all derived from production systems and can not only act as a testcase but also as reference if one wants to enable a certain feature. The configurations can be found here: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs" msgstr "The configurations are all derived from production systems and can not only act as a testcase but also as reference if one wants to enable a certain feature. The configurations can be found here: https://github.com/vyos/vyos-1x/tree/current/smoketest/configs" -#: ../../contributing/build-vyos.rst:85 +#: ../../contributing/build-vyos.rst:87 msgid "The container can also be built directly from source:" msgstr "The container can also be built directly from source:" @@ -1123,7 +1121,7 @@ msgstr "The container can be built by hand or by fetching the pre-built one from msgid "The default template processor for VyOS code is Jinja2_." msgstr "The default template processor for VyOS code is Jinja2_." -#: ../../contributing/build-vyos.rst:825 +#: ../../contributing/build-vyos.rst:773 msgid "The easiest way to compile your package is with the above mentioned :ref:`build_docker` container, it includes all required dependencies for all VyOS related packages." msgstr "The easiest way to compile your package is with the above mentioned :ref:`build_docker` container, it includes all required dependencies for all VyOS related packages." @@ -1151,11 +1149,11 @@ msgstr "The great thing about schemas is not only that people can know the compl msgid "The information is used in three ways:" msgstr "The information is used in three ways:" -#: ../../contributing/build-vyos.rst:441 +#: ../../contributing/build-vyos.rst:437 msgid "The kernel build is quite easy, most of the required steps can be found in the ``vyos-build/packages/linux-kernel/Jenkinsfile`` but we will walk you through it." msgstr "The kernel build is quite easy, most of the required steps can be found in the ``vyos-build/packages/linux-kernel/Jenkinsfile`` but we will walk you through it." -#: ../../contributing/build-vyos.rst:429 +#: ../../contributing/build-vyos.rst:425 msgid "The most obvious reasons could be:" msgstr "The most obvious reasons could be:" @@ -1207,7 +1205,7 @@ msgstr "The switch to the Python programming language for new code is not merely msgid "The system startup can be debugged (like loading in the configuration file from ``/config/config.boot``. This can be achieve by extending the Kernel command-line in the bootloader." msgstr "The system startup can be debugged (like loading in the configuration file from ``/config/config.boot``. This can be achieve by extending the Kernel command-line in the bootloader." -#: ../../contributing/build-vyos.rst:308 +#: ../../contributing/build-vyos.rst:310 msgid "There are (rare) situations where building an ISO image is not possible at all due to a broken package feed in the background. APT is not very good at reporting the root cause of the issue. Your ISO build will likely fail with a more or less similar looking error message:" msgstr "There are (rare) situations where building an ISO image is not possible at all due to a broken package feed in the background. APT is not very good at reporting the root cause of the issue. Your ISO build will likely fail with a more or less similar looking error message:" @@ -1223,7 +1221,7 @@ msgstr "There are extensions to e.g. VIM (xmllint) which will help you to get yo msgid "There are two flags available to aid in debugging configuration scripts. Since configuration loading issues will manifest during boot, the flags are passed as kernel boot parameters." msgstr "There are two flags available to aid in debugging configuration scripts. Since configuration loading issues will manifest during boot, the flags are passed as kernel boot parameters." -#: ../../contributing/build-vyos.rst:255 +#: ../../contributing/build-vyos.rst:257 msgid "This ISO can be customized with the following list of configure options. The full and current list can be generated with ``./build-vyos-image --help``:" msgstr "This ISO can be customized with the following list of configure options. The full and current list can be generated with ``./build-vyos-image --help``:" @@ -1251,7 +1249,7 @@ msgstr "This package doesn't exist in Debian. A debianized fork is kept at https msgid "This package doesn't exist in Debian. A debianized fork is kept at https://github.com/vyos/udp-broadcast-relay" msgstr "This package doesn't exist in Debian. A debianized fork is kept at https://github.com/vyos/udp-broadcast-relay" -#: ../../contributing/build-vyos.rst:576 +#: ../../contributing/build-vyos.rst:572 msgid "This tries to automatically detect which blobs are needed based on which drivers were built. If it fails to find the correct files you can add them manually to ``vyos-build/packages/linux-kernel/build-linux-firmware.sh``:" msgstr "This tries to automatically detect which blobs are needed based on which drivers were built. If it fails to find the correct files you can add them manually to ``vyos-build/packages/linux-kernel/build-linux-firmware.sh``:" @@ -1267,7 +1265,7 @@ msgstr "This will limit the `bond` interface test to only make use of `eth1` and msgid "Those common tests consists out of:" msgstr "Those common tests consists out of:" -#: ../../contributing/build-vyos.rst:105 +#: ../../contributing/build-vyos.rst:107 msgid "Tips and Tricks" msgstr "Tips and Tricks" @@ -1275,7 +1273,7 @@ msgstr "Tips and Tricks" msgid "To be able to use Docker_ without ``sudo``, the current non-root user must be added to the ``docker`` group by calling: ``sudo usermod -aG docker yourusername``." msgstr "To be able to use Docker_ without ``sudo``, the current non-root user must be added to the ``docker`` group by calling: ``sudo usermod -aG docker yourusername``." -#: ../../contributing/build-vyos.rst:147 +#: ../../contributing/build-vyos.rst:149 msgid "To build VyOS natively you require a properly configured build host with the following Debian versions installed:" msgstr "To build VyOS natively you require a properly configured build host with the following Debian versions installed:" @@ -1287,7 +1285,7 @@ msgstr "To build our modules we utilize a CI/CD Pipeline script. Each and every msgid "To debug issues in priorities or to see what's going on in the background you can use the ``/opt/vyatta/sbin/priority.pl`` script which lists to you the execution order of the scripts." msgstr "To debug issues in priorities or to see what's going on in the background you can use the ``/opt/vyatta/sbin/priority.pl`` script which lists to you the execution order of the scripts." -#: ../../contributing/build-vyos.rst:331 +#: ../../contributing/build-vyos.rst:333 msgid "To debug the build process and gain additional information of what could be the root cause, you need to use `chroot` to change into the build directry. This is explained in the following step by step procedure:" msgstr "To debug the build process and gain additional information of what could be the root cause, you need to use `chroot` to change into the build directry. This is explained in the following step by step procedure:" @@ -1311,15 +1309,15 @@ msgstr "To make this approach work, every change must be associated with a task msgid "To manually download the container from DockerHub, run:" msgstr "To manually download the container from DockerHub, run:" -#: ../../contributing/build-vyos.rst:154 +#: ../../contributing/build-vyos.rst:156 msgid "To start, clone the repository to your local machine:" msgstr "To start, clone the repository to your local machine:" -#: ../../contributing/build-vyos.rst:864 +#: ../../contributing/build-vyos.rst:812 msgid "To take your newly created package on a test drive you can simply SCP it to a running VyOS instance and install the new `*.deb` package over the current running one." msgstr "To take your newly created package on a test drive you can simply SCP it to a running VyOS instance and install the new `*.deb` package over the current running one." -#: ../../contributing/build-vyos.rst:763 +#: ../../contributing/build-vyos.rst:711 msgid "Troubleshooting" msgstr "Troubleshooting" @@ -1363,7 +1361,7 @@ msgstr "VIF (incl. VIF-S/VIF-C)" msgid "VLANs (QinQ and regular 802.1q)" msgstr "VLANs (QinQ and regular 802.1q)" -#: ../../contributing/build-vyos.rst:806 +#: ../../contributing/build-vyos.rst:754 msgid "VMware" msgstr "VMware" @@ -1375,7 +1373,7 @@ msgstr "Verbs, when they are necessary, **should** be in their infinitive form." msgid "Verbs **should** be avoided. If a verb can be omitted, omit it." msgstr "Verbs **should** be avoided. If a verb can be omitted, omit it." -#: ../../contributing/build-vyos.rst:794 +#: ../../contributing/build-vyos.rst:742 msgid "Virtualization Platforms" msgstr "Virtualization Platforms" @@ -1383,7 +1381,7 @@ msgstr "Virtualization Platforms" msgid "VyOS CLI is all about priorities. Every CLI node has a corresponding ``node.def`` file and possibly an attached script that is executed when the node is present. Nodes can have a priority, and on system bootup - or any other ``commit`` to the config all scripts are executed from lowest to higest priority. This is good as this gives a deterministic behavior." msgstr "VyOS CLI is all about priorities. Every CLI node has a corresponding ``node.def`` file and possibly an attached script that is executed when the node is present. Nodes can have a priority, and on system bootup - or any other ``commit`` to the config all scripts are executed from lowest to higest priority. This is good as this gives a deterministic behavior." -#: ../../contributing/build-vyos.rst:820 +#: ../../contributing/build-vyos.rst:768 msgid "VyOS itself comes with a bunch of packages that are specific to our system and thus cannot be found in any Debian mirror. Those packages can be found at the `VyOS GitHub project`_ in their source format can easily be compiled into a custom Debian (`*.deb`) package." msgstr "VyOS itself comes with a bunch of packages that are specific to our system and thus cannot be found in any Debian mirror. Those packages can be found at the `VyOS GitHub project`_ in their source format can easily be compiled into a custom Debian (`*.deb`) package." @@ -1391,8 +1389,7 @@ msgstr "VyOS itself comes with a bunch of packages that are specific to our syst msgid "VyOS makes use of Jenkins_ as our Continuous Integration (CI) service. Our `VyOS CI`_ server is publicly accessible here: https://ci.vyos.net. You can get a brief overview of all required components shipped in a VyOS ISO." msgstr "VyOS makes use of Jenkins_ as our Continuous Integration (CI) service. Our `VyOS CI`_ server is publicly accessible here: https://ci.vyos.net. You can get a brief overview of all required components shipped in a VyOS ISO." -#: ../../contributing/build-vyos.rst:606 -#: ../../contributing/build-vyos.rst:652 +#: ../../contributing/build-vyos.rst:600 msgid "We again make use of a helper script and some patches to make the build work. Just run the following command:" msgstr "We again make use of a helper script and some patches to make the build work. Just run the following command:" @@ -1400,11 +1397,11 @@ msgstr "We again make use of a helper script and some patches to make the build msgid "We differentiate in two independent tests, which are both run in parallel by two separate QEmu instances which are launched via ``make test`` and ``make testc`` from within the vyos-build_ repository." msgstr "We differentiate in two independent tests, which are both run in parallel by two separate QEmu instances which are launched via ``make test`` and ``make testc`` from within the vyos-build_ repository." -#: ../../contributing/build-vyos.rst:347 +#: ../../contributing/build-vyos.rst:349 msgid "We now are free to run any command we would like to use for debugging, e.g. re-installing the failed package after updating the repository." msgstr "We now are free to run any command we would like to use for debugging, e.g. re-installing the failed package after updating the repository." -#: ../../contributing/build-vyos.rst:339 +#: ../../contributing/build-vyos.rst:341 msgid "We now need to mount some required, volatile filesystems" msgstr "We now need to mount some required, volatile filesystems" @@ -1440,7 +1437,7 @@ msgstr "When having trouble compiling your own ISO image or debugging Jenkins is msgid "When modifying the source code, remember these rules of the legacy elimination campaign:" msgstr "When modifying the source code, remember these rules of the legacy elimination campaign:" -#: ../../contributing/build-vyos.rst:239 +#: ../../contributing/build-vyos.rst:241 msgid "When the build is successful, the resulting iso can be found inside the ``build`` directory as ``live-image-[architecture].hybrid.iso``." msgstr "When the build is successful, the resulting iso can be found inside the ``build`` directory as ``live-image-[architecture].hybrid.iso``." @@ -1493,11 +1490,11 @@ msgstr "XML interface definition files use the `xml.in` file extension which was msgid "XML interface definitions for VyOS come with a RelaxNG schema and are located in the vyos-1x_ module. This schema is a slightly modified schema from VyConf_ alias VyOS 2.0 So VyOS 1.2.x interface definitions will be reusable in Nextgen VyOS Versions with very minimal changes." msgstr "XML interface definitions for VyOS come with a RelaxNG schema and are located in the vyos-1x_ module. This schema is a slightly modified schema from VyConf_ alias VyOS 2.0 So VyOS 1.2.x interface definitions will be reusable in Nextgen VyOS Versions with very minimal changes." -#: ../../contributing/build-vyos.rst:879 +#: ../../contributing/build-vyos.rst:827 msgid "You can also place the generated `*.deb` into your ISO build environment to include it in a custom iso, see :ref:`build_custom_packages` for more information." msgstr "You can also place the generated `*.deb` into your ISO build environment to include it in a custom iso, see :ref:`build_custom_packages` for more information." -#: ../../contributing/build-vyos.rst:107 +#: ../../contributing/build-vyos.rst:109 msgid "You can create yourself some handy Bash aliases to always launch the latest - per release train (`current` or `crux`) - container. Add the following to your ``.bash_aliases`` file:" msgstr "You can create yourself some handy Bash aliases to always launch the latest - per release train (`current` or `crux`) - container. Add the following to your ``.bash_aliases`` file:" @@ -1509,6 +1506,10 @@ msgstr "You can type ``help`` to get an overview of the available commands, and msgid "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." msgstr "You have an idea of how to make VyOS better or you are in need of a specific feature which all users of VyOS would benefit from? To send a feature request please search Phabricator_ if there is already a request pending. You can enhance it or if you don't find one, create a new one by use the quick link in the left side under the specific project." +#: ../../contributing/build-vyos.rst:430 +msgid "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, Intel QAT or Intel NIC drivers" +msgstr "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, Intel QAT or Intel NIC drivers" + #: ../../contributing/build-vyos.rst:434 msgid "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, WireGuard, Intel QAT, Intel NIC" msgstr "You have your own custom kernel `*.deb` packages in the `packages` folder but neglected to create all required out-of tree modules like Accel-PPP, WireGuard, Intel QAT, Intel NIC" @@ -1581,7 +1582,7 @@ msgstr "``log`` - In some rare cases, it may be useful to see what the OS is doi msgid "``set``" msgstr "``set``" -#: ../../contributing/build-vyos.rst:431 +#: ../../contributing/build-vyos.rst:427 msgid "``vyos-build`` repo is outdated, please ``git pull`` to update to the latest release kernel version from us." msgstr "``vyos-build`` repo is outdated, please ``git pull`` to update to the latest release kernel version from us." diff --git a/docs/_locale/en/LC_MESSAGES/configexamples.mo b/docs/_locale/en/LC_MESSAGES/configexamples.mo index 377e3f1a..a63043f8 100644 Binary files a/docs/_locale/en/LC_MESSAGES/configexamples.mo and b/docs/_locale/en/LC_MESSAGES/configexamples.mo differ diff --git a/docs/_locale/en/LC_MESSAGES/configuration.mo b/docs/_locale/en/LC_MESSAGES/configuration.mo index bd25d9e4..76714055 100644 Binary files a/docs/_locale/en/LC_MESSAGES/configuration.mo and b/docs/_locale/en/LC_MESSAGES/configuration.mo differ diff --git a/docs/_locale/en/LC_MESSAGES/contributing.mo b/docs/_locale/en/LC_MESSAGES/contributing.mo index 5788cbf6..48081097 100644 Binary files a/docs/_locale/en/LC_MESSAGES/contributing.mo and b/docs/_locale/en/LC_MESSAGES/contributing.mo differ diff --git a/docs/_locale/en/LC_MESSAGES/quick-start.mo b/docs/_locale/en/LC_MESSAGES/quick-start.mo index dd60f1a1..c53f01e3 100644 Binary files a/docs/_locale/en/LC_MESSAGES/quick-start.mo and b/docs/_locale/en/LC_MESSAGES/quick-start.mo differ diff --git a/docs/_locale/es/404.pot b/docs/_locale/es/404.pot new file mode 100644 index 00000000..e56bbac4 --- /dev/null +++ b/docs/_locale/es/404.pot @@ -0,0 +1,29 @@ +msgid "" +msgstr "" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: Localazy (https://localazy.com)\n" +"Project-Id-Version: VyOS Documentation\n" +"Language: es\n" +"Plural-Forms: nplurals=2; plural=(n==1) ? 0 : 1;\n" + +#: ../../404.rst:4 +msgid "Page Not Found" +msgstr "Página no encontrada" + +#: ../../404.rst:6 +msgid "Sorry, We could not find a page. Try using the search box or go to the release homepage:" +msgstr "Lo sentimos, no pudimos encontrar una página. Intente usar el cuadro de búsqueda o vaya a la página de inicio del lanzamiento:" + +#: ../../404.rst:9 +msgid "`1.2.x (crux) `_" +msgstr "`1.2.x (cruz) `_" + +#: ../../404.rst:10 +msgid "`1.3.x (equuleus) `_" +msgstr "`1.3.x (igual) `_" + +#: ../../404.rst:11 +msgid "`rolling release (sagitta) `_" +msgstr "`liberación rodante (sagitta) `_" diff --git a/docs/_locale/es/LC_MESSAGES/404.mo b/docs/_locale/es/LC_MESSAGES/404.mo new file mode 100644 index 00000000..15c03136 Binary files /dev/null and b/docs/_locale/es/LC_MESSAGES/404.mo differ diff --git a/docs/_locale/es/LC_MESSAGES/automation.mo b/docs/_locale/es/LC_MESSAGES/automation.mo new file mode 100644 index 00000000..34db3d0b Binary files /dev/null and b/docs/_locale/es/LC_MESSAGES/automation.mo differ diff --git a/docs/_locale/es/LC_MESSAGES/cli.mo b/docs/_locale/es/LC_MESSAGES/cli.mo new file mode 100644 index 00000000..e3862560 Binary files /dev/null and b/docs/_locale/es/LC_MESSAGES/cli.mo differ diff --git a/docs/_locale/es/LC_MESSAGES/configexamples.mo b/docs/_locale/es/LC_MESSAGES/configexamples.mo new file mode 100644 index 00000000..faa4acee Binary files /dev/null and b/docs/_locale/es/LC_MESSAGES/configexamples.mo differ diff --git a/docs/_locale/es/LC_MESSAGES/configuration.mo b/docs/_locale/es/LC_MESSAGES/configuration.mo new file mode 100644 index 00000000..3bc77c66 Binary files /dev/null and b/docs/_locale/es/LC_MESSAGES/configuration.mo differ diff --git a/docs/_locale/es/LC_MESSAGES/contributing.mo b/docs/_locale/es/LC_MESSAGES/contributing.mo new file mode 100644 index 00000000..99b7207c Binary files /dev/null and b/docs/_locale/es/LC_MESSAGES/contributing.mo differ diff --git a/docs/_locale/es/LC_MESSAGES/copyright.mo b/docs/_locale/es/LC_MESSAGES/copyright.mo new file mode 100644 index 00000000..262368c4 Binary files /dev/null and b/docs/_locale/es/LC_MESSAGES/copyright.mo differ diff --git a/docs/_locale/es/LC_MESSAGES/documentation.mo b/docs/_locale/es/LC_MESSAGES/documentation.mo new file mode 100644 index 00000000..7c167f24 Binary files /dev/null and b/docs/_locale/es/LC_MESSAGES/documentation.mo differ diff --git a/docs/_locale/es/LC_MESSAGES/index.mo b/docs/_locale/es/LC_MESSAGES/index.mo new file mode 100644 index 00000000..426fc5c2 Binary files /dev/null and b/docs/_locale/es/LC_MESSAGES/index.mo differ diff --git a/docs/_locale/es/LC_MESSAGES/installation.mo b/docs/_locale/es/LC_MESSAGES/installation.mo new file mode 100644 index 00000000..99cad9d8 Binary files /dev/null and b/docs/_locale/es/LC_MESSAGES/installation.mo differ diff --git a/docs/_locale/es/LC_MESSAGES/introducing.mo b/docs/_locale/es/LC_MESSAGES/introducing.mo new file mode 100644 index 00000000..e8375c55 Binary files /dev/null and b/docs/_locale/es/LC_MESSAGES/introducing.mo differ diff --git a/docs/_locale/es/LC_MESSAGES/operation.mo b/docs/_locale/es/LC_MESSAGES/operation.mo new file mode 100644 index 00000000..d53489d6 Binary files /dev/null and b/docs/_locale/es/LC_MESSAGES/operation.mo differ diff --git a/docs/_locale/es/LC_MESSAGES/quick-start.mo b/docs/_locale/es/LC_MESSAGES/quick-start.mo new file mode 100644 index 00000000..bef277bc Binary files /dev/null and b/docs/_locale/es/LC_MESSAGES/quick-start.mo differ diff --git a/docs/_locale/es/LC_MESSAGES/troubleshooting.mo b/docs/_locale/es/LC_MESSAGES/troubleshooting.mo new file mode 100644 index 00000000..8258110a Binary files /dev/null and b/docs/_locale/es/LC_MESSAGES/troubleshooting.mo differ diff --git a/docs/_locale/es/automation.pot b/docs/_locale/es/automation.pot new file mode 100644 index 00000000..af99ea18 --- /dev/null +++ b/docs/_locale/es/automation.pot @@ -0,0 +1,817 @@ +msgid "" +msgstr "" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: Localazy (https://localazy.com)\n" +"Project-Id-Version: VyOS Documentation\n" +"Language: es\n" +"Plural-Forms: nplurals=2; plural=(n==1) ? 0 : 1;\n" + +#: ../../automation/cloud-init.rst:363 +msgid "**NOTE**: be carefull while copying and pasting previous commands. Doble quotes may need to be corrected." +msgstr "**NOTA**: tenga cuidado al copiar y pegar comandos anteriores. Es posible que sea necesario corregir las comillas dobles." + +#: ../../automation/cloud-init.rst:305 +msgid "**meta-data**: empty file (required)." +msgstr "**metadatos**: archivo vacío (obligatorio)." + +#: ../../automation/cloud-init.rst:300 +msgid "**network-config**: file that will indicate to avoid dhcp client on first interface." +msgstr "**network-config**: archivo que indicará evitar el cliente dhcp en la primera interfaz." + +#: ../../automation/cloud-init.rst:333 +msgid "**network-config** file only has configuration that disables the automatic dhcp client on first interface." +msgstr "El archivo **network-config** solo tiene una configuración que deshabilita el cliente dhcp automático en la primera interfaz." + +#: ../../automation/cloud-init.rst:303 +msgid "**user-data**: includes vyos-commands." +msgstr "**datos de usuario**: incluye comandos vyos." + +#: ../../automation/cloud-init.rst:314 +msgid "**user-data** file must start with ``#cloud-config`` and contains vyos-commands. For example:" +msgstr "El archivo **datos de usuario** debe comenzar con ``#cloud-config`` y contiene comandos vyos. Por ejemplo:" + +#: ../../automation/vyos-api.rst:285 +msgid "/config-file" +msgstr "/archivo de configuración" + +#: ../../automation/vyos-api.rst:228 +msgid "/configure" +msgstr "/configurar" + +#: ../../automation/vyos-api.rst:209 +msgid "/generate" +msgstr "/generar" + +#: ../../automation/vyos-api.rst:147 +msgid "/image" +msgstr "/imagen" + +#: ../../automation/vyos-api.rst:129 +msgid "/reset" +msgstr "/reiniciar" + +#: ../../automation/vyos-api.rst:44 +msgid "/retrieve" +msgstr "/recuperar" + +#: ../../automation/vyos-api.rst:185 +msgid "/show" +msgstr "/espectáculo" + +#: ../../automation/vyos-api.rst:41 +msgid "API Endpoints" +msgstr "Puntos finales de la API" + +#: ../../automation/cloud-init.rst:270 +msgid "A VyOS qcow image with cloud-init options is needed. This can be obtained using `vyos-vm-images`_ repo. After clonning the repo, edit the file **qemu.yml** and comment the **download-iso** role." +msgstr "Se necesita una imagen qcow de VyOS con opciones de inicialización en la nube. Esto se puede obtener usando `vyos-vm-images`_ repo. Después de clonar el repositorio, edite el archivo **qemu.yml** y comente el rol **download-iso**." + +#: ../../automation/cloud-init.rst:63 +msgid "A cloud-config document is written in YAML. The file must begin with ``#cloud-config`` line. The only supported top-level keys are ``vyos_config_commands`` and ``write_files``. The use of these keys is described in the following two sections." +msgstr "Un documento de configuración de la nube está escrito en YAML. El archivo debe comenzar con la línea ``#cloud-config``. Las únicas claves de nivel superior admitidas son ``vyos_config_commands`` y ``write_files``. El uso de estas teclas se describe en las dos secciones siguientes." + +#: ../../automation/command-scripting.rst:159 +msgid "A simple example is shown below, where the ops command executed in the post-hook script is \"show interfaces\"." +msgstr "A continuación se muestra un ejemplo simple, donde el comando ops ejecutado en el script posterior al enlace es "mostrar interfaces"." + +#: ../../automation/cloud-init.rst:82 +msgid "A single-quote symbol is not allowed inside command or value." +msgstr "No se permite un símbolo de comillas simples dentro de un comando o valor." + +#: ../../automation/vyos-salt.rst:32 +msgid "Accept minion key" +msgstr "Aceptar clave de minion" + +#: ../../automation/vyos-api.rst:15 +msgid "All endpoints only listen on HTTP POST requests and the API KEY must set as ``key`` in the formdata." +msgstr "Todos los puntos finales solo escuchan solicitudes HTTP POST y la CLAVE API debe establecerse como ``clave`` en los datos del formulario." + +#: ../../automation/cloud-init.rst:115 +msgid "All of these can be overridden using the configuration in user-data." +msgstr "Todos estos pueden anularse mediante la configuración en los datos de usuario." + +#: ../../automation/cloud-init.rst:256 +msgid "Also, this lab considers:" +msgstr "Además, este laboratorio considera:" + +#: ../../automation/vyos-ansible.rst:6 +msgid "Ansible" +msgstr "Ansible" + +#: ../../automation/command-scripting.rst:181 +#: ../../automation/command-scripting.rst:200 +msgid "Any modifications were done to work around unfixed bugs and implement enhancements that are not complete in the VyOS system can be placed here." +msgstr "Cualquier modificación que se haya realizado para evitar errores no corregidos e implementar mejoras que no estén completas en el sistema VyOS se puede colocar aquí." + +#: ../../automation/vyos-salt.rst:55 +msgid "At this step we can get some op-mode information from VyOS nodes:" +msgstr "En este paso, podemos obtener información del modo operativo de los nodos de VyOS:" + +#: ../../automation/vyos-api.rst:13 +msgid "Authentication" +msgstr "Autenticación" + +#: ../../automation/cloud-init.rst:241 +msgid "Before starting, please refer to cloud-init `network-config-docs`_ in order to know how to import user and network configurations." +msgstr "Antes de comenzar, consulte cloud-init `network-config-docs`_ para saber cómo importar configuraciones de usuario y de red." + +#: ../../automation/vyos-api.rst:18 +msgid "Below see one example for curl and one for python. The rest of the documentation is reduced to curl." +msgstr "A continuación, vea un ejemplo para curl y otro para python. El resto de la documentación se reduce a curl." + +#: ../../automation/vyos-salt.rst:20 +msgid "Check salt-keys on the salt master" +msgstr "Verifique las teclas de sal en el maestro de sal" + +#: ../../automation/vyos-salt.rst:161 +msgid "Check that proxy minion is alive:" +msgstr "Comprueba que el minion proxy está vivo:" + +#: ../../automation/vyos-salt.rst:45 +msgid "Check that salt master can communicate with minions" +msgstr "Comprueba que el maestro de la sal puede comunicarse con los minions" + +#: ../../automation/cloud-init.rst:47 +msgid "Cloud-config modules" +msgstr "Módulos de configuración en la nube" + +#: ../../automation/cloud-init.rst:420 +msgid "Cloud-init `network-config-docs`_." +msgstr "Cloud-init `red-config-docs`_." + +#: ../../automation/cloud-init.rst:239 +msgid "Cloud-init on Proxmox" +msgstr "Cloud-init en Proxmox" + +#: ../../automation/cloud-init.rst:9 +msgid "Cloud and virtualized instances of VyOS are initialized using the industry-standard cloud-init. Via cloud-init, the system performs tasks such as injecting SSH keys and configuring the network. In addition, the user can supply a custom configuration at the time of instance launch." +msgstr "Las instancias en la nube y virtualizadas de VyOS se inicializan mediante el estándar de la industria cloud-init. A través de cloud-init, el sistema realiza tareas como inyectar claves SSH y configurar la red. Además, el usuario puede proporcionar una configuración personalizada en el momento del lanzamiento de la instancia." + +#: ../../automation/cloud-init.rst:120 +msgid "Command Execution at Initial Boot" +msgstr "Ejecución de comandos en el arranque inicial" + +#: ../../automation/command-scripting.rst:6 +msgid "Command Scripting" +msgstr "Secuencias de comandos de comandos" + +#: ../../automation/cloud-init.rst:356 +msgid "Command for generating ``seed.iso``" +msgstr "Comando para generar ``seed.iso``" + +#: ../../automation/cloud-init.rst:78 +msgid "Commands requirements:" +msgstr "Requisitos de los comandos:" + +#: ../../automation/cloud-init.rst:16 +msgid "Config Sources" +msgstr "Fuentes de configuración" + +#: ../../automation/vyos-napalm.rst:85 +#: ../../automation/vyos-salt.rst:104 +msgid "Configuration" +msgstr "Configuración" + +#: ../../automation/command-scripting.rst:23 +msgid "Configuration commands are executed just like from a normal config session. For example, if you want to disable a BGP peer on VRRP transition to backup:" +msgstr "Los comandos de configuración se ejecutan como en una sesión de configuración normal. Por ejemplo, si desea deshabilitar un par BGP en la transición VRRP a la copia de seguridad:" + +#: ../../automation/vyos-napalm.rst:89 +msgid "Content of commands.conf" +msgstr "Contenido de comandos.conf" + +#: ../../automation/cloud-init.rst:337 +msgid "Content of network-config file:" +msgstr "Contenido del archivo de configuración de red:" + +#: ../../automation/cloud-init.rst:351 +msgid "Create seed.iso" +msgstr "Crear semilla.iso" + +#: ../../automation/cloud-init.rst:189 +msgid "Create text files named user-data and meta-data. On linux-based systems, the mkisofs utility can be used to create the seed ISO. The following syntax will add these files to the ISO 9660 file system." +msgstr "Cree archivos de texto llamados datos de usuario y metadatos. En los sistemas basados en Linux, la utilidad mkisofs se puede utilizar para crear la ISO inicial. La siguiente sintaxis agregará estos archivos al sistema de archivos ISO 9660." + +#: ../../automation/cloud-init.rst:368 +msgid "Creating the VM" +msgstr "Creación de la máquina virtual" + +#: ../../automation/command-scripting.rst:156 +msgid "Custom scripts are not executed with root privileges (Use sudo inside if this is necessary)." +msgstr "Los scripts personalizados no se ejecutan con privilegios de root (Use sudo inside si es necesario)." + +#: ../../automation/cloud-init.rst:113 +msgid "DHCP on first Ethernet interface if no network configuration is provided." +msgstr "DHCP en la primera interfaz Ethernet si no se proporciona ninguna configuración de red." + +#: ../../automation/vyos-netmiko.rst:12 +msgid "Example" +msgstr "Ejemplo" + +#: ../../automation/vyos-salt.rst:185 +msgid "Example of configuration:" +msgstr "Ejemplo de configuración:" + +#: ../../automation/vyos-salt.rst:199 +msgid "Example of configuration commands from the file \"/srv/salt/states/commands.txt\"" +msgstr "Ejemplo de comandos de configuración del archivo "/srv/salt/states/commands.txt"" + +#: ../../automation/vyos-salt.rst:173 +msgid "Example of op-mode:" +msgstr "Ejemplo de modo operativo:" + +#: ../../automation/vyos-salt.rst:171 +msgid "Examples" +msgstr "Ejemplos" + +#: ../../automation/command-scripting.rst:102 +msgid "Executing Configuration Scripts" +msgstr "Ejecución de scripts de configuración" + +#: ../../automation/command-scripting.rst:138 +msgid "Executing pre-hooks/post-hooks Scripts" +msgstr "Ejecución de secuencias de comandos pre-hooks/post-hooks" + +#: ../../automation/vyos-ansible.rst:24 +msgid "File contents" +msgstr "Contenido del archivo" + +#: ../../automation/cloud-init.rst:284 +msgid "File generated with previous command: ``/tmp/vyos-1.3.0-cloud-init-10G-qemu.qcow2``" +msgstr "Archivo generado con el comando anterior: ``/tmp/vyos-1.3.0-cloud-init-10G-qemu.qcow2``" + +#: ../../automation/cloud-init.rst:347 +msgid "Finaly, file **meta-data** has no content, but it's required." +msgstr "Finalmente, el archivo **metadatos** no tiene contenido, pero es obligatorio." + +#: ../../automation/command-scripting.rst:212 +msgid "For configuration/upgrade management issues, modification of this script should be the last option. Always try to find solutions based on CLI commands first." +msgstr "Para problemas de administración de configuración/actualización, la modificación de este script debe ser la última opción. Siempre intente encontrar primero soluciones basadas en los comandos CLI." + +#: ../../automation/vyos-api.rst:9 +msgid "For configuration and enabling the API see :ref:`http-api`" +msgstr "Para configurar y habilitar la API, consulte :ref:`http-api`" + +#: ../../automation/vyos-api.rst:109 +msgid "For example, get the addresses of a ``dum0`` interface." +msgstr "Por ejemplo, obtenga las direcciones de una interfaz ``dum0``." + +#: ../../automation/vyos-api.rst:189 +msgid "For example, show which images are installed." +msgstr "Por ejemplo, muestre qué imágenes están instaladas." + +#: ../../automation/cloud-init.rst:217 +msgid "For more information on the NoCloud data source, visit its `page `_ in the cloud-init documentation." +msgstr "Para obtener más información sobre la fuente de datos NoCloud, visite su `página `_ en la documentación de inicio de nube." + +#: ../../automation/cloud-init.rst:411 +msgid "From cli or GUI, power on VM, and after it boots, verify configuration" +msgstr "Desde cli o GUI, encienda la VM y, después de que arranque, verifique la configuración" + +#: ../../automation/cloud-init.rst:268 +msgid "Generate qcow image" +msgstr "Generar imagen qcow" + +#: ../../automation/command-scripting.rst:82 +msgid "Here is a simple example:" +msgstr "Aquí hay un ejemplo simple:" + +#: ../../automation/cloud-init.rst:91 +msgid "Here is an example cloud-config that appends configuration at the time of first boot." +msgstr "Aquí hay un ejemplo de configuración en la nube que agrega la configuración en el momento del primer arranque." + +#: ../../automation/cloud-init.rst:377 +msgid "ISO files storage: ``local`` volume is used for ``.iso`` file storage. In this scenario ``local`` volume type is set to **directory**, abd attached to ``/var/lib/vz``." +msgstr "Almacenamiento de archivos ISO: el volumen ``local`` se utiliza para el almacenamiento de archivos ``.iso``. En este escenario, el tipo de volumen ``local`` se establece en **directorio**, y se adjunta a ``/var/lib/vz``." + +#: ../../automation/cloud-init.rst:81 +msgid "If command ends in a value, it must be inside single quotes." +msgstr "Si el comando termina en un valor, debe estar entre comillas simples." + +#: ../../automation/cloud-init.rst:250 +msgid "If no networking configuration is provided, then dhcp client is going to be enabled on first interface. Bare in mind that this configuration will be inyected at an OS level, so don't expect to find dhcp client configuration on vyos cli. Because of this behavior, in next example lab we will disable dhcp-client configuration on eth0." +msgstr "Si no se proporciona una configuración de red, el cliente dhcp se habilitará en la primera interfaz. Tenga en cuenta que esta configuración se inyectará a nivel del sistema operativo, así que no espere encontrar la configuración del cliente dhcp en vyos cli. Debido a este comportamiento, en el siguiente laboratorio de ejemplo, deshabilitaremos la configuración de dhcp-client en eth0." + +#: ../../automation/cloud-init.rst:225 +msgid "If you encounter problems, verify that the cloud-config document contains valid YAML. Online resources such as https://www.yamllint.com/ provide a simple tool for validating YAML." +msgstr "Si encuentra problemas, verifique que el documento de configuración de la nube contenga YAML válido. Los recursos en línea como https://www.yamllint.com/ brindan una herramienta simple para validar YAML." + +#: ../../automation/cloud-init.rst:153 +msgid "If you need to gather information from linux commands to configure VyOS, you can execute commands and then configure VyOS in the same script." +msgstr "Si necesita recopilar información de los comandos de Linux para configurar VyOS, puede ejecutar los comandos y luego configurar VyOS en el mismo script." + +#: ../../automation/command-scripting.rst:79 +msgid "If you want to script the configs in a language other than bash you can have your script output commands and then source them in a bash script." +msgstr "Si desea programar las configuraciones en un idioma que no sea bash, puede tener los comandos de salida de su script y luego generarlos en un script bash." + +#: ../../automation/cloud-init.rst:298 +msgid "In Proxmox server three files are going to be used for this setup:" +msgstr "En el servidor Proxmox, se utilizarán tres archivos para esta configuración:" + +#: ../../automation/cloud-init.rst:49 +msgid "In VyOS, by default, enables only two modules:" +msgstr "En VyOS, por defecto, habilita solo dos módulos:" + +#: ../../automation/cloud-init.rst:307 +msgid "In this lab, all files are located in ``/tmp/``. So, before going on, lets move to that directory:" +msgstr "En esta práctica de laboratorio, todos los archivos se encuentran en ``/tmp/``. Entonces, antes de continuar, pasemos a ese directorio:" + +#: ../../automation/cloud-init.rst:274 +msgid "In this lab, we are using 1.3.0 VyOS version and setting a disk of 10G. Download VyOS .iso file and save it as ``/tmp/vyos.iso``. Command used for generating qcow image:" +msgstr "En esta práctica de laboratorio, usamos la versión 1.3.0 de VyOS y configuramos un disco de 10G. Descargue el archivo .iso de VyOS y guárdelo como ``/tmp/vyos.iso``. Comando utilizado para generar la imagen qcow:" + +#: ../../automation/cloud-init.rst:71 +msgid "Initial Configuration" +msgstr "Configuracion inicial" + +#: ../../automation/cloud-init.rst:180 +msgid "Injecting configuration data is not limited to cloud platforms. Users can employ the NoCloud data source to inject user-data and meta-data on virtualization platforms such as VMware, Hyper-V and KVM." +msgstr "La inyección de datos de configuración no se limita a las plataformas en la nube. Los usuarios pueden emplear la fuente de datos NoCloud para inyectar datos de usuario y metadatos en plataformas de virtualización como VMware, Hyper-V y KVM." + +#: ../../automation/vyos-napalm.rst:11 +msgid "Install ``napalm-vyos`` module" +msgstr "Instalar el módulo ``napalm-vyos''" + +#: ../../automation/vyos-salt.rst:98 +msgid "It is possible to configure VyOS via netmiko_ proxy module. It requires a minion with installed packet ``python3-netmiko`` module who has a connection to VyOS nodes. Salt-minion have to communicate with salt master" +msgstr "Es posible configurar VyOS a través del módulo proxy netmiko_. Requiere un minion con el paquete ``python3-netmiko`` instalado que tenga una conexión a los nodos VyOS. Salt-minion tiene que comunicarse con salt master" + +#: ../../automation/cloud-init.rst:36 +msgid "Major cloud providers offer a means of providing user-data at the time of instance launch. It can be provided as plain text or as base64-encoded text, depending on cloud provider. Also, it can be compressed using gzip, which makes sense with a long configuration commands list, because of the hard limit to ~16384 bytes for the whole user-data." +msgstr "Los principales proveedores de la nube ofrecen un medio para proporcionar datos de usuario en el momento del lanzamiento de la instancia. Se puede proporcionar como texto sin formato o como texto codificado en base64, según el proveedor de la nube. Además, se puede comprimir usando gzip, lo que tiene sentido con una larga lista de comandos de configuración, debido al límite estricto de ~16384 bytes para todos los datos del usuario." + +#: ../../automation/cloud-init.rst:20 +msgid "Metadata - Metadata is sourced by the cloud platform or hypervisor. In some clouds, there is implemented as an HTTP endpoint at ``http://169.254.169.254``." +msgstr "Metadatos: los metadatos provienen de la plataforma en la nube o el hipervisor. En algunas nubes, se implementa como punto final HTTP en ``http://169.254.169.254``." + +#: ../../automation/cloud-init.rst:244 +msgid "Most important keys that needs to be considered:" +msgstr "Claves más importantes a tener en cuenta:" + +#: ../../automation/vyos-napalm.rst:6 +msgid "Napalm" +msgstr "Napalm" + +#: ../../automation/vyos-netmiko.rst:6 +msgid "Netmiko" +msgstr "Netmiko" + +#: ../../automation/vyos-salt.rst:96 +msgid "Netmiko-proxy" +msgstr "Netmiko-proxy" + +#: ../../automation/cloud-init.rst:24 +msgid "Network configuration - This config source informs the system about the network settings like IP addresses, routes, DNS. Available only in several cloud and virtualization platforms." +msgstr "Configuración de red: esta fuente de configuración informa al sistema sobre la configuración de red, como direcciones IP, rutas, DNS. Disponible solo en varias plataformas de nube y virtualización." + +#: ../../automation/cloud-init.rst:248 +msgid "Networking configurations shouldn't be passed in user-data file." +msgstr "Las configuraciones de red no deben pasarse en el archivo de datos de usuario." + +#: ../../automation/cloud-init.rst:178 +msgid "NoCloud" +msgstr "Sin Nube" + +#: ../../automation/index.rst:6 +msgid "Nornir" +msgstr "brujas" + +#: ../../automation/cloud-init.rst:131 +msgid "Note that the /opt/vyatta/etc/config is used instead of the /config/scripts directory referenced in the :ref:`command-scripting` section of the documentation because the /config/script directory isn't mounted when the ``write_files`` module executes." +msgstr "Tenga en cuenta que /opt/vyatta/etc/config se usa en lugar del directorio /config/scripts al que se hace referencia en la sección :ref:`command-scripting` de la documentación porque el directorio /config/script no está montado cuando ` Se ejecuta el módulo `write_files``." + +#: ../../automation/cloud-init.rst:370 +msgid "Notes for this particular example, that may need to be modified in other setups:" +msgstr "Notas para este ejemplo en particular, que puede necesitar ser modificado en otras configuraciones:" + +#: ../../automation/cloud-init.rst:287 +msgid "Now, that file needs to be copied to proxmox server:" +msgstr "Ahora, ese archivo debe copiarse en el servidor proxmox:" + +#: ../../automation/command-scripting.rst:108 +msgid "On VyOS this will cause the following problem: After modifying the configuration via script like this once, it is not possible to manually modify the config anymore:" +msgstr "En VyOS, esto causará el siguiente problema: después de modificar la configuración a través de un script como este una vez, ya no es posible modificar manualmente la configuración:" + +#: ../../automation/cloud-init.rst:390 +msgid "On proxmox server:" +msgstr "En el servidor proxmox:" + +#: ../../automation/cloud-init.rst:353 +msgid "Once the three files were created, it's time to generate the ``seed.iso`` image, which needs to be mounted to the new VM as a cd." +msgstr "Una vez que se crearon los tres archivos, es hora de generar la imagen ``seed.iso``, que debe montarse en la nueva VM como un cd." + +#: ../../automation/cloud-init.rst:80 +msgid "One command per line." +msgstr "Un comando por línea." + +#: ../../automation/vyos-napalm.rst:21 +msgid "Op-mode" +msgstr "a la moda" + +#: ../../automation/command-scripting.rst:77 +msgid "Other script languages" +msgstr "Otros lenguajes de escritura" + +#: ../../automation/vyos-napalm.rst:129 +#: ../../automation/vyos-netmiko.rst:47 +msgid "Output" +msgstr "Producción" + +#: ../../automation/vyos-napalm.rst:48 +msgid "Output op-mode" +msgstr "Modo operativo de salida" + +#: ../../_include/need_improvement.txt:13 +msgid "Please take a look at the Contributing Guide for our :ref:`documentation`." +msgstr "Por favor, eche un vistazo a la Guía de contribución para nuestra :ref:`documentación`." + +#: ../../automation/command-scripting.rst:195 +msgid "Postconfig on boot" +msgstr "Postconfig en el arranque" + +#: ../../automation/cloud-init.rst:409 +msgid "Power on VM and verifications" +msgstr "Encendido de VM y verificaciones" + +#: ../../automation/command-scripting.rst:176 +msgid "Preconfig on boot" +msgstr "Preconfiguración en el arranque" + +#: ../../automation/cloud-init.rst:296 +msgid "Prepare cloud-init files" +msgstr "Preparar archivos de inicialización en la nube" + +#: ../../automation/cloud-init.rst:258 +msgid "Proxmox IP address: **192.168.0.253/24**" +msgstr "Dirección IP de proximidad: **192.168.0.253/24**" + +#: ../../automation/cloud-init.rst:422 +msgid "Proxmox `Cloud-init-Support`_." +msgstr "Proxmox `Cloud-init-Support`_." + +#: ../../automation/cloud-init.rst:416 +msgid "References" +msgstr "Referencias" + +#: ../../automation/cloud-init.rst:263 +msgid "Remove default dhcp client on first interface, and load other configuration during first boot, using cloud-init." +msgstr "Elimine el cliente dhcp predeterminado en la primera interfaz y cargue otra configuración durante el primer arranque, usando cloud-init." + +#: ../../automation/vyos-ansible.rst:80 +msgid "Run ansible" +msgstr "ejecutar ansible" + +#: ../../automation/command-scripting.rst:50 +msgid "Run commands remotely" +msgstr "Ejecutar comandos de forma remota" + +#: ../../automation/command-scripting.rst:21 +msgid "Run configuration commands" +msgstr "Ejecutar comandos de configuración" + +#: ../../automation/command-scripting.rst:37 +msgid "Run operational commands" +msgstr "Ejecutar comandos operativos" + +#: ../../automation/cloud-init.rst:111 +msgid "SSH is configured on port 22." +msgstr "SSH está configurado en el puerto 22." + +#: ../../automation/vyos-salt.rst:8 +msgid "Salt" +msgstr "Sal" + +#: ../../automation/vyos-salt.rst:106 +msgid "Salt master configuration:" +msgstr "Configuración maestra de sal:" + +#: ../../automation/vyos-api.rst:307 +msgid "Save a running configuration to a file." +msgstr "Guarde una configuración en ejecución en un archivo." + +#: ../../automation/vyos-api.rst:289 +msgid "Save a running configuration to the startup configuration. When you don't specify the file when saving, it saves to ``/config/config.boot``." +msgstr "Guarde una configuración en ejecución en la configuración de inicio. Cuando no especifica el archivo al guardar, se guarda en ``/config/config.boot``." + +#: ../../automation/vyos-napalm.rst:99 +msgid "Script vyos-napalm.py" +msgstr "Guión vyos-napalm.py" + +#: ../../automation/command-scripting.rst:152 +msgid "Scripts are run in alphabetical order. Their names must consist entirely of ASCII upper- and lower-case letters,ASCII digits, ASCII underscores, and ASCII minus-hyphens.No other characters are allowed." +msgstr "Los scripts se ejecutan en orden alfabético. Sus nombres deben consistir completamente en letras mayúsculas y minúsculas ASCII, dígitos ASCII, guiones bajos ASCII y guiones negativos ASCII. No se permiten otros caracteres." + +#: ../../automation/command-scripting.rst:52 +msgid "Sometimes you simply wan't to execute a bunch of op-mode commands via SSH on a remote VyOS system." +msgstr "A veces, simplemente no desea ejecutar un montón de comandos de modo operativo a través de SSH en un sistema VyOS remoto." + +#: ../../automation/cloud-init.rst:260 +msgid "Storaged used: volume local, which is mounted on directory **/var/lib/vz**, and contains all type of content, including snippets." +msgstr "Storaged used: volumen local, que está montado en el directorio **/var/lib/vz**, y contiene todo tipo de contenido, incluidos fragmentos." + +#: ../../automation/vyos-salt.rst:119 +msgid "Structure of /srv/salt:" +msgstr "Estructura de /srv/salt:" + +#: ../../automation/vyos-ansible.rst:11 +msgid "Structure of files" +msgstr "Estructura de archivos" + +#: ../../automation/cloud-init.rst:107 +msgid "System Defaults/Fallbacks" +msgstr "Valores predeterminados/alternativos del sistema" + +#: ../../automation/vyos-api.rst:264 +msgid "The API pushes every request to a session and commit it. But some of VyOS components like DHCP and PPPoE Servers, IPSec, VXLAN, and other tunnels require full configuration for commit. The endpoint will process multiple commands when you pass them as a list to the ``data`` field." +msgstr "La API envía cada solicitud a una sesión y la confirma. Pero algunos de los componentes de VyOS, como los servidores DHCP y PPPoE, IPSec, VXLAN y otros túneles, requieren una configuración completa para la confirmación. El punto final procesará múltiples comandos cuando los pase como una lista al campo ``datos``." + +#: ../../automation/command-scripting.rst:197 +msgid "The ``/config/scripts/vyos-postconfig-bootup.script`` script is called on boot after the VyOS configuration is fully applied." +msgstr "El script ``/config/scripts/vyos-postconfig-bootup.script`` se llama en el arranque después de que la configuración de VyOS se haya aplicado por completo." + +#: ../../automation/command-scripting.rst:178 +msgid "The ``/config/scripts/vyos-preconfig-bootup.script`` script is called on boot before the VyOS configuration during boot process." +msgstr "El script ``/config/scripts/vyos-preconfig-bootup.script`` se llama en el arranque antes de la configuración de VyOS durante el proceso de arranque." + +#: ../../automation/vyos-api.rst:187 +msgid "The ``/show`` endpoint is to show everything in the operational mode." +msgstr "El punto final ``/show`` es mostrar todo en el modo operativo." + +#: ../../automation/vyos-api.rst:211 +msgid "The ``generate`` endpoint run a ``generate`` command." +msgstr "El extremo ``generar`` ejecuta un comando ``generar``." + +#: ../../automation/vyos-api.rst:131 +msgid "The ``reset`` endpoint run a ``reset`` command." +msgstr "El extremo ``reset`` ejecuta un comando ``reset``." + +#: ../../automation/cloud-init.rst:84 +msgid "The commands list produced by the ``show configuration commands`` command on a VyOS router should comply with all the requirements, so it is easy to get a proper commands list by copying it from another router." +msgstr "La lista de comandos producida por el comando ``mostrar comandos de configuración`` en un enrutador VyOS debe cumplir con todos los requisitos, por lo que es fácil obtener una lista de comandos adecuada copiándola desde otro enrutador." + +#: ../../automation/cloud-init.rst:88 +msgid "The configuration specified in the cloud-config document overwrites default configuration values and values configured via Metadata." +msgstr "La configuración especificada en el documento de configuración de la nube sobrescribe los valores de configuración predeterminados y los valores configurados a través de metadatos." + +#: ../../automation/command-scripting.rst:142 +msgid "The default directories where your custom Scripts should be located are:" +msgstr "Los directorios predeterminados donde deben ubicarse sus Scripts personalizados son:" + +#: ../../automation/command-scripting.rst:184 +#: ../../automation/command-scripting.rst:203 +msgid "The default file looks like this:" +msgstr "El archivo predeterminado se ve así:" + +#: ../../automation/cloud-init.rst:42 +msgid "The easiest way to configure the system via user-data is the Cloud-config syntax described below." +msgstr "La forma más fácil de configurar el sistema a través de los datos del usuario es la sintaxis de configuración de la nube que se describe a continuación." + +#: ../../automation/vyos-api.rst:287 +msgid "The endpoint ``/config-file`` is to save or load a configuration." +msgstr "El punto final ``/config-file`` es para guardar o cargar una configuración." + +#: ../../automation/cloud-init.rst:156 +msgid "The following example sets the hostname based on the instance identifier obtained from the EC2 metadata service." +msgstr "El siguiente ejemplo establece el nombre de host en función del identificador de instancia obtenido del servicio de metadatos de EC2." + +#: ../../automation/cloud-init.rst:136 +msgid "The following example shows how to execute commands after the initial configuration." +msgstr "El siguiente ejemplo muestra cómo ejecutar comandos después de la configuración inicial." + +#: ../../automation/cloud-init.rst:74 +msgid "The key used to designate a VyOS configuration is ``vyos_config_commands``. What follows is VyOS configuration using the \"set-style\" syntax. Both \"set\" and \"delete\" commands are supported." +msgstr "La clave utilizada para designar una configuración de VyOS es ``vyos_config_commands``. Lo que sigue es la configuración de VyOS utilizando la sintaxis "set-style". Se admiten los comandos "establecer" y "eliminar"." + +#: ../../automation/cloud-init.rst:197 +msgid "The seed.iso file can be attached to the virtual machine. As an example, the method with KVM to attach the ISO as a CD drive follows." +msgstr "El archivo seed.iso se puede adjuntar a la máquina virtual. A modo de ejemplo, a continuación se muestra el método con KVM para adjuntar la ISO como una unidad de CD." + +#: ../../automation/command-scripting.rst:104 +msgid "There is a pitfall when working with configuration scripts. It is tempting to call configuration scripts with \"sudo\" (i.e., temporary root permissions), because that's the common way on most Linux platforms to call system commands." +msgstr "Hay una trampa cuando se trabaja con scripts de configuración. Es tentador llamar a los scripts de configuración con "sudo" (es decir, permisos temporales de raíz), porque esa es la forma común en la mayoría de las plataformas Linux de llamar a los comandos del sistema." + +#: ../../automation/cloud-init.rst:109 +msgid "These are the VyOS defaults and fallbacks." +msgstr "Estos son los valores predeterminados y alternativos de VyOS." + +#: ../../_include/need_improvement.txt:11 +msgid "This section needs improvements, examples and explanations." +msgstr "Esta sección necesita mejoras, ejemplos y explicaciones." + +#: ../../automation/command-scripting.rst:118 +msgid "This will result in the following error message: ``Set failed`` If this happens, a reboot is required to be able to edit the config manually again." +msgstr "Esto dará como resultado el siguiente mensaje de error: ``Establecimiento fallido`` Si esto sucede, se requiere reiniciar para poder editar la configuración manualmente nuevamente." + +#: ../../automation/vyos-api.rst:323 +msgid "To Load a configuration file." +msgstr "Para cargar un archivo de configuración." + +#: ../../automation/vyos-api.rst:149 +msgid "To add or delete an image, use the ``/image`` endpoint." +msgstr "Para agregar o eliminar una imagen, use el punto final ``/image``." + +#: ../../automation/command-scripting.rst:121 +msgid "To avoid these problems, the proper way is to call a script with the ``vyattacfg`` group, e.g., by using the ``sg`` (switch group) command:" +msgstr "Para evitar estos problemas, la forma adecuada es llamar a un script con el grupo ``vyattacfg``, por ejemplo, utilizando el comando ``sg`` (cambiar de grupo):" + +#: ../../automation/vyos-api.rst:48 +msgid "To get the whole configuration, pass an empty list to the ``path`` field" +msgstr "Para obtener la configuración completa, pase una lista vacía al campo ``ruta``" + +#: ../../automation/command-scripting.rst:11 +msgid "To include VyOS specific functions and aliases you need to ``source /opt/vyatta/etc/functions/script-template`` files at the top of your script." +msgstr "Para incluir funciones y alias específicos de VyOS, necesita archivos ``fuente /opt/vyatta/etc/functions/script-template`` en la parte superior de su secuencia de comandos." + +#: ../../automation/command-scripting.rst:128 +msgid "To make sure that a script is not accidentally called without the ``vyattacfg`` group, the script can be safeguarded like this:" +msgstr "Para asegurarse de que una secuencia de comandos no se llame accidentalmente sin el grupo ``vyattacfg``, la secuencia de comandos se puede proteger de esta manera:" + +#: ../../automation/vyos-api.rst:79 +msgid "To only get a part of the configuration, for example ``system syslog``." +msgstr "Para obtener solo una parte de la configuración, por ejemplo ``system syslog``." + +#: ../../automation/cloud-init.rst:223 +msgid "Troubleshooting" +msgstr "Solución de problemas" + +#: ../../automation/command-scripting.rst:39 +msgid "Unlike a normal configuration session, all operational commands must be prepended with ``run``, even if you haven't created a session with configure." +msgstr "A diferencia de una sesión de configuración normal, todos los comandos operativos deben ir precedidos de ``ejecutar``, incluso si no ha creado una sesión con configure." + +#: ../../automation/cloud-init.rst:34 +msgid "User-data" +msgstr "Datos del usuario" + +#: ../../automation/cloud-init.rst:28 +msgid "User-data - User-data is specified by the user. This config source offers the ability to insert any CLI configuration commands into the configuration before the first boot." +msgstr "Datos de usuario: los datos de usuario son especificados por el usuario. Esta fuente de configuración ofrece la posibilidad de insertar cualquier comando de configuración CLI en la configuración antes del primer arranque." + +#: ../../automation/cloud-init.rst:373 +msgid "VM ID: in this example, VM ID used is 555." +msgstr "ID de VM: en este ejemplo, el ID de VM utilizado es 555." + +#: ../../automation/cloud-init.rst:381 +msgid "VM Resources: these parameters can be modified as needed." +msgstr "Recursos de VM: estos parámetros se pueden modificar según sea necesario." + +#: ../../automation/cloud-init.rst:375 +msgid "VM Storage: ``local`` volume is used." +msgstr "Almacenamiento de VM: se utiliza el volumen ``local``." + +#: ../../automation/vyos-api.rst:7 +msgid "VyOS API" +msgstr "API de VyOS" + +#: ../../automation/index.rst:3 +msgid "VyOS Automation" +msgstr "Automatización VyOS" + +#: ../../automation/cloud-init.rst:418 +msgid "VyOS `cloud-init-docs`_." +msgstr "VyOS `nube-init-docs`_." + +#: ../../automation/cloud-init.rst:7 +msgid "VyOS cloud-init" +msgstr "Inicialización en la nube de VyOS" + +#: ../../automation/cloud-init.rst:246 +msgid "VyOS configuration commands are defined in user-data file." +msgstr "Los comandos de configuración de VyOS se definen en el archivo de datos de usuario." + +#: ../../automation/command-scripting.rst:140 +msgid "VyOS has the ability to run custom scripts before and after each commit" +msgstr "VyOS tiene la capacidad de ejecutar scripts personalizados antes y después de cada confirmación" + +#: ../../automation/cloud-init.rst:18 +msgid "VyOS support three types of config sources." +msgstr "VyOS admite tres tipos de fuentes de configuración." + +#: ../../automation/vyos-ansible.rst:8 +msgid "VyOS supports configuration via ansible. Need to install ``ansible`` and ``python3-paramiko`` module" +msgstr "VyOS admite la configuración a través de ansible. Necesita instalar el módulo ``ansible`` y ``python3-paramiko``" + +#: ../../automation/vyos-netmiko.rst:8 +msgid "VyOS supports configuration via netmiko_. It requires to install ``python3-netmiko`` module." +msgstr "VyOS admite la configuración a través de netmiko_. Requiere instalar el módulo ``python3-netmiko``." + +#: ../../automation/command-scripting.rst:8 +msgid "VyOS supports executing configuration and operational commands non-interactively from shell scripts." +msgstr "VyOS admite la ejecución de comandos operativos y de configuración de forma no interactiva desde scripts de shell." + +#: ../../automation/vyos-salt.rst:10 +msgid "VyOS supports op-mode and configuration via salt_." +msgstr "VyOS admite el modo operativo y la configuración a través de salt_." + +#: ../../automation/vyos-napalm.rst:8 +msgid "VyOS supports some napalm_ functions for configuration and op-mode. It requires more tests." +msgstr "VyOS admite algunas funciones de napalm_ para la configuración y el modo operativo. Requiere más pruebas." + +#: ../../automation/cloud-init.rst:122 +msgid "VyOS supports the execution of operational commands and linux commands at initial boot. This is accomplished using ``write_files`` to certain files in the /opt/vyatta/etc/config/scripts directory. Commands specified in opt/vyatta/etc/config/scripts/vyos-preconfig-bootup.script are executed prior to configuration. The /opt/vyatta/etc/config/scripts/vyos-postconfig-bootup.script file contains commands to be executed after configuration. In both cases, commands are executed as the root user." +msgstr "VyOS admite la ejecución de comandos operativos y comandos de Linux en el arranque inicial. Esto se logra usando ``write_files`` para ciertos archivos en el directorio /opt/vyatta/etc/config/scripts. Los comandos especificados en opt/vyatta/etc/config/scripts/vyos-preconfig-bootup.script se ejecutan antes de la configuración. El archivo /opt/vyatta/etc/config/scripts/vyos-postconfig-bootup.script contiene comandos que se ejecutarán después de la configuración. En ambos casos, los comandos se ejecutan como usuario root." + +#: ../../automation/vyos-napalm.rst:87 +msgid "We need 2 files, commands.conf and script itself." +msgstr "Necesitamos 2 archivos, commands.conf y el propio script." + +#: ../../automation/cloud-init.rst:184 +msgid "While other methods exist, the most straightforward method for using the NoCloud data source is creating a seed ISO and attaching it to the virtual machine as a CD drive. The volume must be formatted as a vfat or ISO 9660 file system with the label \"cidata\" or \"CIDATA\"." +msgstr "Si bien existen otros métodos, el método más sencillo para usar la fuente de datos de NoCloud es crear una semilla ISO y adjuntarla a la máquina virtual como una unidad de CD. El volumen debe estar formateado como un sistema de archivos vfat o ISO 9660 con la etiqueta "cidata" o "CIDATA"." + +#: ../../automation/command-scripting.rst:63 +msgid "Will return:" +msgstr "Volverá:" + +#: ../../automation/vyos-api.rst:46 +msgid "With the ``retrieve`` endpoint you get parts or the whole configuration." +msgstr "Con el punto final ``retrieve`` obtienes partes o la configuración completa." + +#: ../../automation/vyos-salt.rst:12 +msgid "Without proxy it requires VyOS minion configuration and support op-mode data:" +msgstr "Sin proxy, requiere configuración minion de VyOS y admite datos en modo operativo:" + +#: ../../automation/vyos-salt.rst:12 +msgid "Without proxy it requires VyOS minion configuration and supports op-mode data:" +msgstr "Sin proxy, requiere la configuración de minion de VyOS y admite datos en modo operativo:" + +#: ../../automation/vyos-api.rst:230 +msgid "You can pass a ``set``, ``delete`` or ``comment`` command to the ``/configure`` endpoint." +msgstr "Puede pasar un comando ``set``, ``delete`` o ``comment`` al extremo ``/configure``." + +#: ../../automation/vyos-api.rst:249 +msgid "``delete`` a single command" +msgstr "``borrar`` un solo comando" + +#: ../../automation/cloud-init.rst:383 +msgid "``seed.iso`` was previously created in directory ``/tmp/``. It's necessary to move it to ``/var/lib/vz/template/iso``" +msgstr "``seed.iso`` se creó previamente en el directorio ``/tmp/``. Es necesario moverlo a ``/var/lib/vz/template/iso``" + +#: ../../automation/vyos-api.rst:233 +msgid "``set`` a single command" +msgstr "``establecer`` un solo comando" + +#: ../../automation/cloud-init.rst:55 +msgid "``vyos_userdata`` - the module accepts a list of CLI configuration commands in a ``vyos_config_commands`` section, which gives an easy way to configure the system during deployment." +msgstr "``vyos_userdata``: el módulo acepta una lista de comandos de configuración de la CLI en una sección ``vyos_config_commands``, que brinda una forma fácil de configurar el sistema durante la implementación." + +#: ../../automation/cloud-init.rst:112 +msgid "``vyos``/``vyos`` credentials if no others specified by data source." +msgstr "Credenciales ``vyos''/``vyos'' si no hay otras especificadas por la fuente de datos." + +#: ../../automation/cloud-init.rst:51 +msgid "``write_files`` - this module allows to insert any files into the filesystem before the first boot, for example, pre-generated encryption keys, certificates, or even a whole ``config.boot`` file. The format is described in the cloudinit documentation `Cloud-init-write_files`_." +msgstr "``write_files``: este módulo permite insertar cualquier archivo en el sistema de archivos antes del primer arranque, por ejemplo, claves de cifrado generadas previamente, certificados o incluso un archivo ``config.boot`` completo. El formato se describe en la documentación de cloudinit `Cloud-init-write_files`_." + +#: ../../automation/vyos-api.rst:151 +msgid "add an image" +msgstr "Añadir una imagen" + +#: ../../automation/vyos-ansible.rst:26 +msgid "ansible.cfg" +msgstr "ansible.cfg" + +#: ../../automation/cloud-init.rst:61 +msgid "cloud-config file format" +msgstr "formato de archivo de configuración en la nube" + +#: ../../automation/cloud-init.rst:229 +msgid "cloud-init logs to /var/log/cloud-init.log. This file can be helpful in determining why the configuration varies from what you expect. You can fetch the most important data filtering output for ``vyos`` keyword:" +msgstr "cloud-init registra en /var/log/cloud-init.log. Este archivo puede ser útil para determinar por qué la configuración varía de lo esperado. Puede obtener la salida de filtrado de datos más importante para la palabra clave ``vyos``:" + +#: ../../automation/vyos-salt.rst:153 +msgid "commands.txt" +msgstr "comandos.txt" + +#: ../../automation/vyos-api.rst:168 +msgid "delete an image, for example ``1.3-rolling-202006070117``" +msgstr "borrar una imagen, por ejemplo ``1.3-rolling-202006070117``" + +#: ../../automation/vyos-ansible.rst:42 +msgid "hosts" +msgstr "Hospedadores" + +#: ../../automation/vyos-ansible.rst:35 +msgid "id_rsa_docker.pub. Needs to declare only public key exactly." +msgstr "id_rsa_docker.pub. Necesita declarar solo la clave pública exactamente." + +#: ../../automation/vyos-api.rst:106 +msgid "if you just want the Value of a multi-valued node, use the ``returnValues`` operation." +msgstr "si solo desea el valor de un nodo de varios valores, utilice la operación ``returnValues``." + +#: ../../automation/vyos-ansible.rst:56 +msgid "main.yml" +msgstr "principal.yml" + +#: ../../automation/vyos-salt.rst:141 +msgid "r11-proxy.sls Includes parameters for connecting to salt-proxy minion" +msgstr "r11-proxy.sls Incluye parámetros para conectarse a salt-proxy minion" + +#: ../../automation/index.rst:7 +msgid "startup scripts" +msgstr "guiones de inicio" + +#: ../../automation/vyos-salt.rst:131 +msgid "top.sls" +msgstr "top.sls" diff --git a/docs/_locale/es/cli.pot b/docs/_locale/es/cli.pot new file mode 100644 index 00000000..90a77a8f --- /dev/null +++ b/docs/_locale/es/cli.pot @@ -0,0 +1,437 @@ +msgid "" +msgstr "" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: Localazy (https://localazy.com)\n" +"Project-Id-Version: VyOS Documentation\n" +"Language: es\n" +"Plural-Forms: nplurals=2; plural=(n==1) ? 0 : 1;\n" + +#: ../../cli.rst:115 +msgid "**Active** or **running configuration** is the system configuration that is loaded and currently active (used by VyOS). Any change in the configuration will have to be committed to belong to the active/running configuration." +msgstr "**Configuración activa** o **en ejecución** es la configuración del sistema que está cargada y actualmente activa (utilizada por VyOS). Cualquier cambio en la configuración deberá confirmarse para pertenecer a la configuración activa/en ejecución." + +#: ../../cli.rst:382 +msgid "**Example:**" +msgstr "**Ejemplo:**" + +#: ../../cli.rst:126 +msgid "**Saved configuration** is the one saved to a file using the :cfgcmd:`save` command. It allows you to keep safe a configuration for future uses. There can be multiple configuration files. The default or \"boot\" configuration is saved and loaded from the file ``/config/config.boot``." +msgstr "**Configuración guardada** es la que se guarda en un archivo con el comando :cfgcmd:`save`. Le permite mantener segura una configuración para usos futuros. Puede haber varios archivos de configuración. La configuración predeterminada o de "arranque" se guarda y carga desde el archivo ``/config/config.boot``." + +#: ../../cli.rst:120 +msgid "**Working configuration** is the one that is currently being modified in configuration mode. Changes made to the working configuration do not go into effect until the changes are committed with the :cfgcmd:`commit` command. At which time the working configuration will become the active or running configuration." +msgstr "**Configuración de trabajo** es la que se está modificando actualmente en el modo de configuración. Los cambios realizados en la configuración de trabajo no entran en vigencia hasta que los cambios se confirman con el comando :cfgcmd:`commit`. En ese momento, la configuración de trabajo se convertirá en la configuración activa o en ejecución." + +#: ../../cli.rst:113 +msgid "A VyOS system has three major types of configurations:" +msgstr "Un sistema VyOS tiene tres tipos principales de configuraciones:" + +#: ../../cli.rst:576 +msgid "A reboot because you did not enter ``confirm`` will not take you necessarily to the *saved configuration*, but to the point before the unfortunate commit." +msgstr "Un reinicio porque no ingresaste ``confirm`` no te llevará necesariamente a la *configuración guardada*, sino al punto anterior a la desafortunada confirmación." + +#: ../../cli.rst:690 +msgid "Access opmode from config mode" +msgstr "Acceder al modo de operación desde el modo de configuración" + +#: ../../cli.rst:697 +msgid "Access to these commands are possible through the use of the ``run [command]`` command. From this command you will have access to everything accessible from operational mode." +msgstr "El acceso a estos comandos es posible mediante el uso del comando ``ejecutar [comando]``. Desde este mando tendrás acceso a todo lo accesible desde el modo operativo." + +#: ../../cli.rst:651 +msgid "Add comment as an annotation to a configuration node." +msgstr "Agregue un comentario como una anotación a un nodo de configuración." + +#: ../../cli.rst:539 +msgid "All changes in the working config will thus be lost." +msgstr "Todos los cambios en la configuración de trabajo se perderán." + +#: ../../cli.rst:355 +msgid "All commands executed here are relative to the configuration level you have entered. You can do everything from the top level, but commands will be quite lengthy when manually typing them." +msgstr "Todos los comandos ejecutados aquí son relativos al nivel de configuración que ha ingresado. Puede hacer todo desde el nivel superior, pero los comandos serán bastante largos al escribirlos manualmente." + +#: ../../cli.rst:676 +msgid "An important thing to note is that since the comment is added on top of the section, it will not appear if the ``show
`` command is used. With the above example, the `show firewall` command would return starting after the ``firewall {`` line, hiding the comment." +msgstr "Una cosa importante a tener en cuenta es que dado que el comentario se agrega en la parte superior de la sección, no aparecerá si el `` mostrar
Se utiliza el comando ``. Con el ejemplo anterior, el comando `show firewall` volvería comenzando después de la línea ``firewall {``, ocultando el comentario." + +#: ../../cli.rst:493 +msgid "Any change you do on the configuration, will not take effect until committed using the :cfgcmd:`commit` command in configuration mode." +msgstr "Cualquier cambio que haga en la configuración no tendrá efecto hasta que se confirme usando el comando :cfgcmd:`commit` en el modo de configuración." + +#: ../../cli.rst:221 +msgid "Both these ``show`` commands should be executed when in operational mode, they do not work directly in configuration mode. There is a special way on how to :ref:`run_opmode_from_config_mode`." +msgstr "Ambos comandos ``show`` deben ejecutarse en modo operativo, no funcionan directamente en modo de configuración. Hay una forma especial de cómo :ref:`run_opmode_from_config_mode`." + +#: ../../cli.rst:193 +msgid "By default, the configuration is displayed in a hierarchy like the above example, this is only one of the possible ways to display the configuration. When the configuration is generated and the device is configured, changes are added through a collection of :cfgcmd:`set` and :cfgcmd:`delete` commands." +msgstr "De forma predeterminada, la configuración se muestra en una jerarquía como la del ejemplo anterior, esta es solo una de las formas posibles de mostrar la configuración. Cuando se genera la configuración y se configura el dispositivo, los cambios se agregan a través de una colección de comandos :cfgcmd:`set` y :cfgcmd:`delete`." + +#: ../../cli.rst:5 +msgid "Command Line Interface" +msgstr "Interfaz de línea de comandos" + +#: ../../cli.rst:701 +msgid "Command completion and syntax help with ``?`` and ``[tab]`` will also work." +msgstr "La finalización de comandos y la ayuda de sintaxis con ``?`` y ``[tab]`` también funcionarán." + +#: ../../cli.rst:754 +msgid "Compare configurations" +msgstr "Comparar configuraciones" + +#: ../../cli.rst:75 +msgid "Configuration Mode" +msgstr "Modo de configuración" + +#: ../../cli.rst:102 +msgid "Configuration Overview" +msgstr "Descripción general de la configuración" + +#: ../../cli.rst:457 +msgid "Configuration commands are flattened from the tree into 'one-liner' commands shown in :opcmd:`show configuration commands` from operation mode. Commands are relative to the level where they are executed and all redundant information from the current level is removed from the command entered." +msgstr "Los comandos de configuración se aplanan del árbol en comandos de 'una sola línea' que se muestran en :opcmd:`mostrar comandos de configuración` desde el modo de operación. Los comandos son relativos al nivel en el que se ejecutan y toda la información redundante del nivel actual se elimina del comando ingresado." + +#: ../../cli.rst:535 +msgid "Configuration mode can not be exited while uncommitted changes exist. To exit configuration mode without applying changes, the :cfgcmd:`exit discard` command must be used." +msgstr "No se puede salir del modo de configuración mientras existan cambios no confirmados. Para salir del modo de configuración sin aplicar los cambios, se debe utilizar el comando :cfgcmd:`exit descartar`." + +#: ../../cli.rst:583 +msgid "Copy a configuration element." +msgstr "Copie un elemento de configuración." + +#: ../../cli.rst:447 +msgid "Editing the configuration" +msgstr "Editando la configuración" + +#: ../../cli.rst:662 +msgid "Example:" +msgstr "Ejemplo:" + +#: ../../cli.rst:30 +msgid "Example showing possible show commands:" +msgstr "Ejemplo que muestra posibles comandos show:" + +#: ../../cli.rst:433 +msgid "Exiting from the configuration mode is done via the :cfgcmd:`exit` command from the top level, executing :cfgcmd:`exit` from within a sub-level takes you back to the top level." +msgstr "La salida del modo de configuración se realiza mediante el comando :cfgcmd:`exit` desde el nivel superior; ejecutar :cfgcmd:`exit` desde un subnivel lo lleva de vuelta al nivel superior." + +#: ../../cli.rst:21 +msgid "For example typing ``sh`` followed by the ``TAB`` key will complete to ``show``. Pressing ``TAB`` a second time will display the possible sub-commands of the ``show`` command." +msgstr "Por ejemplo, al escribir ``sh`` seguido de la tecla ``TAB`` se completará ``show``. Al presionar ``TAB`` por segunda vez se mostrarán los posibles subcomandos del comando ``mostrar``." + +#: ../../cli.rst:201 +msgid "Get a collection of all the set commands required which led to the running configuration." +msgstr "Obtenga una colección de todos los comandos establecidos necesarios que condujeron a la configuración en ejecución." + +#: ../../cli.rst:930 +msgid "If you are remotely connected, you will lose your connection. You may want to copy first the config, edit it to ensure connectivity, and load the edited config." +msgstr "Si está conectado de forma remota, perderá su conexión. Es posible que desee copiar primero la configuración, editarla para garantizar la conectividad y cargar la configuración editada." + +#: ../../cli.rst:916 +msgid "In the case you want to completely delete your configuration and restore the default one, you can enter the following command in configuration mode:" +msgstr "En el caso de que desee eliminar completamente su configuración y restaurar la predeterminada, puede ingresar el siguiente comando en el modo de configuración:" + +#: ../../cli.rst:413 +msgid "It is also possible to display all `set` commands within configuration mode using :cfgcmd:`show | commands`" +msgstr "También es posible mostrar todos los comandos `set` dentro del modo de configuración usando :cfgcmd:`show | comandos`" + +#: ../../cli.rst:723 +msgid "Local Archive" +msgstr "Archivo local" + +#: ../../cli.rst:714 +msgid "Managing configurations" +msgstr "Administrar configuraciones" + +#: ../../cli.rst:627 +msgid "Note that ``show`` command respects your edit level and from this level you can view the modified firewall ruleset with just ``show`` with no parameters." +msgstr "Tenga en cuenta que el comando ``mostrar`` respeta su nivel de edición y desde este nivel puede ver el conjunto de reglas de firewall modificado con solo ``mostrar`` sin parámetros." + +#: ../../cli.rst:11 +msgid "Operational Mode" +msgstr "Modo operacional" + +#: ../../cli.rst:13 +msgid "Operational mode allows for commands to perform operational system tasks and view system and service status, while configuration mode allows for the modification of system configuration." +msgstr "El modo operativo permite que los comandos realicen tareas operativas del sistema y vean el estado del sistema y del servicio, mientras que el modo de configuración permite modificar la configuración del sistema." + +#: ../../cli.rst:85 +msgid "Prompt changes from ``$`` to ``#``. To exit configuration mode, type ``exit``." +msgstr "Cambios rápidos de ``$`` a ``#``. Para salir del modo de configuración, escriba ``exit``." + +#: ../../cli.rst:850 +msgid "Remote Archive" +msgstr "Archivo remoto" + +#: ../../cli.rst:616 +msgid "Rename a configuration element." +msgstr "Cambiar el nombre de un elemento de configuración." + +#: ../../cli.rst:914 +msgid "Restore Default" +msgstr "Restaurar predeterminado" + +#: ../../cli.rst:725 +msgid "Revisions are stored on disk. You can view, compare and rollback them to any previous revisions if something goes wrong." +msgstr "Las revisiones se almacenan en el disco. Puede verlos, compararlos y revertirlos a cualquier revisión anterior si algo sale mal." + +#: ../../cli.rst:828 +msgid "Rollback Changes" +msgstr "Cambios de reversión" + +#: ../../cli.rst:835 +msgid "Rollback to revision N (currently requires reboot)" +msgstr "Retroceder a la revisión N (actualmente requiere reiniciar)" + +#: ../../cli.rst:881 +msgid "Saving and loading manually" +msgstr "Guardar y cargar manualmente" + +#: ../../cli.rst:94 +msgid "See the configuration section of this document for more information on configuration mode." +msgstr "Consulte la sección de configuración de este documento para obtener más información sobre el modo de configuración." + +#: ../../cli.rst:133 +msgid "Seeing and navigating the configuration" +msgstr "Ver y navegar por la configuración" + +#: ../../cli.rst:810 +msgid "Show commit revision difference." +msgstr "Mostrar diferencia de revisión de confirmación." + +#: ../../cli.rst:861 +msgid "Specify remote location of commit archive as any of the below :abbr:`URI (Uniform Resource Identifier)`" +msgstr "Especifique la ubicación remota del archivo de confirmación como cualquiera de los siguientes :abbr:`URI (Identificador uniforme de recursos)`" + +#: ../../cli.rst:111 +msgid "Terminology" +msgstr "Terminología" + +#: ../../cli.rst:17 +msgid "The CLI provides a built-in help system. In the CLI the ``?`` key may be used to display available commands. The ``TAB`` key can be used to auto-complete commands and will present the help system upon a conflict or unknown value." +msgstr "La CLI proporciona un sistema de ayuda incorporado. En la CLI, la tecla ``?`` se puede usar para mostrar los comandos disponibles. La tecla ``TAB`` se puede usar para autocompletar comandos y presentará el sistema de ayuda ante un conflicto o valor desconocido." + +#: ../../cli.rst:7 +msgid "The VyOS :abbr:`CLI (Command-Line Interface)` comprises an operational and a configuration mode." +msgstr "La :abbr:`CLI (interfaz de línea de comandos)` de VyOS comprende un modo operativo y uno de configuración." + +#: ../../cli.rst:378 +msgid "The :cfgcmd:`show` command within configuration mode will show the working configuration indicating line changes with ``+`` for additions, ``>`` for replacements and ``-`` for deletions." +msgstr "El comando :cfgcmd:`show` dentro del modo de configuración mostrará la configuración de trabajo indicando cambios de línea con ``+`` para adiciones, ``>`` para reemplazos y ``-`` para eliminaciones." + +#: ../../cli.rst:653 +msgid "The ``comment`` command allows you to insert a comment above the ```` configuration section. When shown, comments are enclosed with ``/*`` and ``*/`` as open/close delimiters. Comments need to be commited, just like other config changes." +msgstr "El comando ``comentario`` le permite insertar un comentario encima del `` `` sección de configuración. Cuando se muestran, los comentarios se encierran con ``/*`` y ``*/`` como delimitadores de apertura/cierre. Los comentarios deben confirmarse, al igual que otros cambios de configuración." + +#: ../../cli.rst:784 +msgid "The command :cfgcmd:`compare` allows you to compare different type of configurations. It also lets you compare different revisions through the :cfgcmd:`compare N M` command, where N and M are revision numbers. The output will describe how the configuration N is when compared to M indicating with a plus sign (``+``) the additional parts N has when compared to M, and indicating with a minus sign (``-``) the lacking parts N misses when compared to M." +msgstr "El comando :cfgcmd:`compare` le permite comparar diferentes tipos de configuraciones. También le permite comparar diferentes revisiones a través del comando :cfgcmd:`compare NM`, donde N y M son números de revisión. La salida describirá cómo es la configuración N en comparación con M indicando con un signo más (``+``) las partes adicionales que tiene N en comparación con M, e indicando con un signo menos (``-``) las que faltan. las partes N fallan en comparación con M." + +#: ../../cli.rst:813 +msgid "The command above also lets you see the difference between two commits. By default the difference with the running config is shown." +msgstr "El comando anterior también te permite ver la diferencia entre dos confirmaciones. De forma predeterminada, se muestra la diferencia con la configuración en ejecución." + +#: ../../cli.rst:338 +msgid "The config mode" +msgstr "El modo de configuración" + +#: ../../cli.rst:449 +msgid "The configuration can be edited by the use of :cfgcmd:`set` and :cfgcmd:`delete` commands from within configuration mode." +msgstr "La configuración se puede editar mediante el uso de los comandos :cfgcmd:`set` y :cfgcmd:`delete` desde el modo de configuración." + +#: ../../cli.rst:359 +msgid "The current hierarchy level can be changed by the :cfgcmd:`edit` command." +msgstr "El nivel de jerarquía actual se puede cambiar con el comando :cfgcmd:`edit`." + +#: ../../cli.rst:869 +msgid "The number of revisions don't affect the commit-archive." +msgstr "El número de revisiones no afecta el archivo de confirmación." + +#: ../../cli.rst:927 +msgid "Then you may want to :cfgcmd:`save` in order to delete the saved configuration too." +msgstr "Entonces es posible que desee :cfgcmd:`save` para eliminar también la configuración guardada." + +#: ../../cli.rst:422 +msgid "These commands are also relative to the level you are inside and only relevant configuration blocks will be displayed when entering a sub-level." +msgstr "Estos comandos también son relativos al nivel en el que se encuentra y solo se mostrarán los bloques de configuración relevantes al ingresar a un subnivel." + +#: ../../cli.rst:475 +msgid "These two commands above are essentially the same, just executed from different levels in the hierarchy." +msgstr "Estos dos comandos anteriores son esencialmente los mismos, solo que se ejecutan desde diferentes niveles en la jerarquía." + +#: ../../cli.rst:824 +msgid "This means four commits ago we did ``set system ipv6 disable-forwarding``." +msgstr "Esto significa que hace cuatro confirmaciones hicimos ``set system ipv6 disabled-forwarding``." + +#: ../../cli.rst:480 +msgid "To delete a configuration entry use the :cfgcmd:`delete` command, this also deletes all sub-levels under the current level you've specified in the :cfgcmd:`delete` command. Deleting an entry will also result in the element reverting back to its default value if one exists." +msgstr "Para eliminar una entrada de configuración, use el comando :cfgcmd:`delete`, esto también elimina todos los subniveles bajo el nivel actual que ha especificado en el comando :cfgcmd:`delete`. Eliminar una entrada también hará que el elemento vuelva a su valor predeterminado, si existe." + +#: ../../cli.rst:77 +msgid "To enter configuration mode use the ``configure`` command:" +msgstr "Para ingresar al modo de configuración use el comando ``configure``:" + +#: ../../cli.rst:658 +msgid "To remove an existing comment from your current configuration, specify an empty string enclosed in double quote marks (``\"\"``) as the comment text." +msgstr "Para eliminar un comentario existente de su configuración actual, especifique una cadena vacía entre comillas dobles (``""``) como texto del comentario." + +#: ../../cli.rst:225 +msgid "Use the ``show configuration commands | strip-private`` command when you want to hide private data. You may want to do so if you want to share your configuration on the `forum`_." +msgstr "Use los comandos ``mostrar configuración | comando strip-private`` cuando desee ocultar datos privados. Es posible que desee hacerlo si desea compartir su configuración en el `foro`_." + +#: ../../cli.rst:892 +msgid "Use this command to load a configuration which will replace the running configuration. Define the location of the configuration file to be loaded. You can use a path to a local file, an SCP address, an SFTP address, an FTP address, an HTTP address, an HTTPS address or a TFTP address." +msgstr "Utilice este comando para cargar una configuración que reemplazará la configuración en ejecución. Defina la ubicación del archivo de configuración que se va a cargar. Puede utilizar una ruta a un archivo local, una dirección SCP, una dirección SFTP, una dirección FTP, una dirección HTTP, una dirección HTTPS o una dirección TFTP." + +#: ../../cli.rst:508 +msgid "Use this command to preserve configuration changes upon reboot. By default it is stored at */config/config.boot*. In the case you want to store the configuration file somewhere else, you can add a local path, a SCP address, a FTP address or a TFTP address." +msgstr "Utilice este comando para conservar los cambios de configuración al reiniciar. De forma predeterminada, se almacena en */config/config.boot*. En caso de que desee almacenar el archivo de configuración en otro lugar, puede agregar una ruta local, una dirección SCP, una dirección FTP o una dirección TFTP." + +#: ../../cli.rst:454 +msgid "Use this command to set the value of a parameter or to create a new element." +msgstr "Utilice este comando para establecer el valor de un parámetro o para crear un nuevo elemento." + +#: ../../cli.rst:760 +msgid "Use this command to spot what the differences are between different configurations." +msgstr "Use este comando para detectar cuáles son las diferencias entre las diferentes configuraciones." + +#: ../../cli.rst:552 +msgid "Use this command to temporarily commit your changes and set the number of minutes available for validation. ``confirm`` must be entered within those minutes, otherwise the system will reboot into the previous configuration. The default value is 10 minutes." +msgstr "Utilice este comando para confirmar temporalmente sus cambios y establecer la cantidad de minutos disponibles para la validación. Se debe ingresar ``confirmar`` dentro de esos minutos, de lo contrario, el sistema se reiniciará con la configuración anterior. El valor predeterminado es 10 minutos." + +#: ../../cli.rst:730 +msgid "View all existing revisions on the local system." +msgstr "Ver todas las revisiones existentes en el sistema local." + +#: ../../cli.rst:137 +msgid "View the current active configuration, also known as the running configuration, from the operational mode." +msgstr "Vea la configuración activa actual, también conocida como configuración en ejecución, desde el modo operativo." + +#: ../../cli.rst:233 +msgid "View the current active configuration in JSON format." +msgstr "Ver la configuración activa actual en formato JSON." + +#: ../../cli.rst:241 +msgid "View the current active configuration in readable JSON format." +msgstr "Vea la configuración activa actual en formato JSON legible." + +#: ../../cli.rst:852 +msgid "VyOS can upload the configuration to a remote location after each call to :cfgcmd:`commit`. You will have to set the commit-archive location. TFTP, FTP, SCP and SFTP servers are supported. Every time a :cfgcmd:`commit` is successfull the ``config.boot`` file will be copied to the defined destination(s). The filename used on the remote host will be ``config.boot-hostname.YYYYMMDD_HHMMSS``." +msgstr "VyOS puede cargar la configuración en una ubicación remota después de cada llamada a :cfgcmd:`commit`. Deberá establecer la ubicación del archivo de confirmación. Se admiten servidores TFTP, FTP, SCP y SFTP. Cada vez que un :cfgcmd:`commit` tiene éxito, el archivo ``config.boot`` se copiará en los destinos definidos. El nombre de archivo utilizado en el host remoto será ``config.boot-hostname.YYYYMMDD_HHMMSS``." + +#: ../../cli.rst:716 +msgid "VyOS comes with an integrated versioning system for the system configuration. It automatically maintains a backup of every previous configuration which has been committed to the system. The configurations are versioned locally for rollback but they can also be stored on a remote host for archiving/backup reasons." +msgstr "VyOS viene con un sistema de control de versiones integrado para la configuración del sistema. Mantiene automáticamente una copia de seguridad de todas las configuraciones anteriores que se han comprometido en el sistema. Las configuraciones se versionan localmente para revertirlas, pero también se pueden almacenar en un host remoto por razones de archivado/copia de seguridad." + +#: ../../cli.rst:756 +msgid "VyOS lets you compare different configurations." +msgstr "VyOS le permite comparar diferentes configuraciones." + +#: ../../cli.rst:104 +msgid "VyOS makes use of a unified configuration file for the entire system's configuration: ``/config/config.boot``. This allows easy template creation, backup, and replication of system configuration. A system can thus also be easily cloned by simply copying the required configuration files." +msgstr "VyOS utiliza un archivo de configuración unificado para la configuración de todo el sistema: ``/config/config.boot``. Esto permite una fácil creación de plantillas, copia de seguridad y replicación de la configuración del sistema. Por lo tanto, un sistema también se puede clonar fácilmente simplemente copiando los archivos de configuración necesarios." + +#: ../../cli.rst:558 +msgid "What if you are doing something dangerous? Suppose you want to setup a firewall, and you are not sure there are no mistakes that will lock you out of your system. You can use confirmed commit. If you issue the ``commit-confirm`` command, your changes will be commited, and if you don't issue the ``confirm`` command in 10 minutes, your system will reboot into previous config revision." +msgstr "¿Qué pasa si estás haciendo algo peligroso? Suponga que desea configurar un firewall y no está seguro de que no haya errores que lo bloqueen del sistema. Puede usar la confirmación confirmada. Si ejecuta el comando ``commit-confirm``, sus cambios se confirmarán, y si no ejecuta el comando ``confirm`` en 10 minutos, su sistema se reiniciará con la revisión de configuración anterior." + +#: ../../cli.rst:340 +msgid "When entering the configuration mode you are navigating inside a tree structure, to enter configuration mode enter the command :opcmd:`configure` when in operational mode." +msgstr "Al ingresar al modo de configuración, está navegando dentro de una estructura de árbol, para ingresar al modo de configuración, ingrese el comando :opcmd:`configure` cuando esté en modo operativo." + +#: ../../cli.rst:351 +msgid "When going into configuration mode, prompt changes from ``$`` to ``#``." +msgstr "Al ingresar al modo de configuración, el aviso cambia de ``$`` a ``#``." + +#: ../../cli.rst:692 +msgid "When inside configuration mode you are not directly able to execute operational commands." +msgstr "Cuando está dentro del modo de configuración, no puede ejecutar directamente los comandos operativos." + +#: ../../cli.rst:61 +msgid "When the output of a command results in more lines than can be displayed on the terminal screen the output is paginated as indicated by a ``:`` prompt." +msgstr "Cuando la salida de un comando da como resultado más líneas de las que se pueden mostrar en la pantalla de la terminal, la salida se pagina como lo indica un indicador ``:``." + +#: ../../cli.rst:886 +msgid "When using the save_ command, you can add a specific location where to store your configuration file. And, when needed it, you will be able to load it with the ``load`` command:" +msgstr "Al usar el comando save_, puede agregar una ubicación específica donde almacenar su archivo de configuración. Y, cuando lo necesites, podrás cargarlo con el comando ``load``:" + +#: ../../cli.rst:72 +msgid "When viewing in page mode the following commands are available:" +msgstr "Cuando se visualiza en modo página, están disponibles los siguientes comandos:" + +#: ../../cli.rst:370 +msgid "You are now in a sublevel relative to ``interfaces ethernet eth0``, all commands executed from this point on are relative to this sublevel. Use eithe the :cfgcmd:`top` or :cfgcmd:`exit` command to go back to the top of the hierarchy. You can also use the :cfgcmd:`up` command to move only one level up at a time." +msgstr "Ahora se encuentra en un subnivel relativo a ``interfaces ethernet eth0``, todos los comandos ejecutados a partir de este punto son relativos a este subnivel. Utilice el comando :cfgcmd:`top` o :cfgcmd:`exit` para volver a la parte superior de la jerarquía. También puede usar el comando :cfgcmd:`up` para subir solo un nivel a la vez." + +#: ../../cli.rst:618 +msgid "You can also rename config subtrees:" +msgstr "También puede cambiar el nombre de los subárboles de configuración:" + +#: ../../cli.rst:585 +msgid "You can copy and remove configuration subtrees. Suppose you set up a firewall ruleset ``FromWorld`` with one rule that allows traffic from specific subnet. Now you want to setup a similar rule, but for different subnet. Change your edit level to ``firewall name FromWorld`` and use ``copy rule 10 to rule 20``, then modify rule 20." +msgstr "Puede copiar y eliminar subárboles de configuración. Suponga que configura un conjunto de reglas de cortafuegos ``FromWorld`` con una regla que permite el tráfico desde una subred específica. Ahora desea configurar una regla similar, pero para una subred diferente. Cambie su nivel de edición a ``nombre de firewall FromWorld`` y use ``copie la regla 10 a la regla 20``, luego modifique la regla 20." + +#: ../../cli.rst:830 +msgid "You can rollback configuration changes using the rollback command. This will apply the selected revision and trigger a system reboot." +msgstr "Puede revertir los cambios de configuración mediante el comando de reversión. Esto aplicará la revisión seleccionada y activará un reinicio del sistema." + +#: ../../cli.rst:58 +msgid "You can scroll up with the keys ``[Shift]+[PageUp]`` and scroll down with ``[Shift]+[PageDown]``." +msgstr "Puedes desplazarte hacia arriba con las teclas ``[Shift]+[PageUp]`` y desplazarte hacia abajo con ``[Shift]+[PageDown]``." + +#: ../../cli.rst:747 +msgid "You can specify the number of revisions stored on disk. N can be in the range of 0 - 65535. When the number of revisions exceeds the configured value, the oldest revision is removed. The default setting for this value is to store 100 revisions locally." +msgstr "Puede especificar el número de revisiones almacenadas en el disco. N puede estar en el rango de 0 a 65535. Cuando el número de revisiones supera el valor configurado, se elimina la revisión más antigua. La configuración predeterminada para este valor es almacenar 100 revisiones localmente." + +#: ../../cli.rst:883 +msgid "You can use the ``save`` and ``load`` commands if you want to manually manage specific configuration files." +msgstr "Puede usar los comandos ``guardar`` y ``cargar`` si desea administrar manualmente archivos de configuración específicos." + +#: ../../cli.rst:871 +msgid "You may find VyOS not allowing the secure connection because it cannot verify the legitimacy of the remote server. You can use the workaround below to quickly add the remote host's SSH fingerprint to your ``~/.ssh/known_hosts`` file:" +msgstr "Es posible que VyOS no permita la conexión segura porque no puede verificar la legitimidad del servidor remoto. Puede usar la solución a continuación para agregar rápidamente la huella digital SSH del host remoto a su archivo ``~/.ssh/known_hosts``:" + +#: ../../cli.rst:924 +msgid "You will be asked if you want to continue. If you accept, you will have to use :cfgcmd:`commit` if you want to make the changes active." +msgstr "Se le preguntará si desea continuar. Si acepta, deberá usar :cfgcmd:`commit` si desea activar los cambios." + +#: ../../cli.rst:67 +msgid "``b`` will scroll back one page" +msgstr "``b`` retrocederá una página" + +#: ../../cli.rst:866 +msgid "``ftp://:@/``" +msgstr "``ftp:// : @ / ``" + +#: ../../cli.rst:71 +msgid "``left-arrow`` and ``right-arrow`` can be used to scroll left or right in the event that the output has lines which exceed the terminal size." +msgstr "La ``flecha izquierda`` y la ``flecha derecha`` se pueden usar para desplazarse hacia la izquierda o hacia la derecha en caso de que la salida tenga líneas que excedan el tamaño del terminal." + +#: ../../cli.rst:65 +msgid "``q`` key can be used to cancel output" +msgstr "La tecla ``q`` se puede utilizar para cancelar la salida" + +#: ../../cli.rst:68 +msgid "``return`` will scroll down one line" +msgstr "``return`` se desplazará una línea hacia abajo" + +#: ../../cli.rst:864 +msgid "``scp://:@:/``" +msgstr "``scp:// : @ :/ ``" + +#: ../../cli.rst:865 +msgid "``sftp://:@/``" +msgstr "``sftp:// : @ / ``" + +#: ../../cli.rst:66 +msgid "``space`` will scroll down one page" +msgstr "``espacio`` se desplazará hacia abajo una página" + +#: ../../cli.rst:867 +msgid "``tftp:///``" +msgstr "``tftp:// / ``" + +#: ../../cli.rst:69 +msgid "``up-arrow`` and ``down-arrow`` will scroll up or down one line at a time respectively" +msgstr "``flecha arriba`` y ``flecha abajo`` se desplazarán hacia arriba o hacia abajo una línea a la vez respectivamente" diff --git a/docs/_locale/es/configexamples.pot b/docs/_locale/es/configexamples.pot new file mode 100644 index 00000000..6eb69b51 --- /dev/null +++ b/docs/_locale/es/configexamples.pot @@ -0,0 +1,2773 @@ +msgid "" +msgstr "" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: Localazy (https://localazy.com)\n" +"Project-Id-Version: VyOS Documentation\n" +"Language: es\n" +"Plural-Forms: nplurals=2; plural=(n==1) ? 0 : 1;\n" + +#: ../../configexamples/zone-policy.rst:162 +msgid "''It is important to note, that you do not want to add logging to the established state rule as you will be logging both the inbound and outbound packets for each session instead of just the initiation of the session. Your logs will be massive in a very short period of time.''" +msgstr "''Es importante tener en cuenta que no desea agregar el registro a la regla de estado establecida, ya que registrará los paquetes entrantes y salientes para cada sesión en lugar de solo el inicio de la sesión. Sus registros serán masivos en un período de tiempo muy corto”." + +#: ../../configexamples/azure-vpn-bgp.rst:117 +msgid "**Important**: Add an interface route to reach Azure's BGP listener" +msgstr "**Importante**: agregue una ruta de interfaz para llegar al agente de escucha BGP de Azure" + +#: ../../configexamples/azure-vpn-dual-bgp.rst:134 +msgid "**Important**: Add an interface route to reach both Azure's BGP listeners" +msgstr "**Importante**: agregue una ruta de interfaz para llegar a ambos agentes de escucha BGP de Azure" + +#: ../../configexamples/azure-vpn-dual-bgp.rst:156 +msgid "**Important**: Disable connected check, otherwise the routes learned from Azure will not be imported into the routing table." +msgstr "**Importante**: deshabilite la comprobación de conexión; de lo contrario, las rutas aprendidas de Azure no se importarán a la tabla de enrutamiento." + +#: ../../configexamples/azure-vpn-bgp.rst:133 +msgid "**Important**: Disable connected check \\" +msgstr "**Importante**: deshabilite el cheque conectado \\" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:46 +msgid "**NOTE:** VyOS Router (tested with VyOS 1.4-rolling-202110310317) – The configurations below are specifically for VyOS 1.4.x." +msgstr "**NOTA:** Enrutador VyOS (probado con VyOS 1.4-rolling-202110310317): las configuraciones a continuación son específicas para VyOS 1.4.x." + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:1123 +msgid "**Note:** At the moment, trace mpls doesn’t show labels/paths. So we’ll see * * * for the transit routers of the mpls backbone." +msgstr "**Nota:** Por el momento, trace mpls no muestra etiquetas ni rutas. Así que veremos * * * para los enrutadores de tránsito de la red troncal mpls." + +#: ../../configexamples/zone-policy.rst:34 +msgid "**This specific example is for a router on a stick, but is very easily adapted for however many NICs you have**:" +msgstr "**Este ejemplo específico es para un enrutador en un dispositivo, pero se adapta muy fácilmente a la cantidad de NIC que tenga**:" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:5 +msgid "**Virtual Routing and Forwarding** is a technology that allow multiple instance of a routing table to exist within a single device. One of the key aspect of **VRFs** is that do not share the same routes or interfaces, therefore packets are forwarded between interfaces that belong to the same VRF only." +msgstr "**Enrutamiento y reenvío virtuales** es una tecnología que permite que existan múltiples instancias de una tabla de enrutamiento dentro de un solo dispositivo. Uno de los aspectos clave de los **VRF** es que no comparten las mismas rutas o interfaces, por lo tanto, los paquetes se reenvían entre interfaces que pertenecen únicamente al mismo VRF." + +#: ../../configexamples/ha.rst:389 +msgid "**offsite1**" +msgstr "**fuera del sitio1**" + +#: ../../configexamples/ha.rst:201 +#: ../../configexamples/ha.rst:237 +#: ../../configexamples/ha.rst:366 +#: ../../configexamples/ha.rst:540 +msgid "**router1**" +msgstr "**enrutador1**" + +#: ../../configexamples/ha.rst:215 +#: ../../configexamples/ha.rst:250 +#: ../../configexamples/ha.rst:581 +msgid "**router2**" +msgstr "**enrutador2**" + +#: ../../configexamples/ha.rst:70 +msgid "100: 'Public' network, using our 203.0.113.0/24 network." +msgstr "100: red 'Pública', utilizando nuestra red 203.0.113.0/24." + +#: ../../configexamples/azure-vpn-bgp.rst:38 +#: ../../configexamples/azure-vpn-dual-bgp.rst:35 +msgid "10.0.0.0/16" +msgstr "10.0.0.0/16" + +#: ../../configexamples/azure-vpn-bgp.rst:46 +msgid "10.0.0.4" +msgstr "10.0.0.4" + +#: ../../configexamples/azure-vpn-dual-bgp.rst:45 +msgid "10.0.0.4,10.0.0.5" +msgstr "10.0.0.4,10.0.0.5" + +#: ../../configexamples/azure-vpn-bgp.rst:36 +#: ../../configexamples/azure-vpn-dual-bgp.rst:33 +msgid "10.10.0.0/16" +msgstr "10.10.0.0/16" + +#: ../../configexamples/azure-vpn-bgp.rst:42 +#: ../../configexamples/azure-vpn-dual-bgp.rst:39 +msgid "10.10.0.5" +msgstr "10.10.0.5" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:87 +msgid "10.1.1.0/30" +msgstr "10.1.1.0/30" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:93 +msgid "10.2.2.0/30" +msgstr "10.2.2.0/30" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:91 +msgid "10.50.50.1:1011" +msgstr "10.50.50.1:1011" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:93 +msgid "10.60.60.1:1011" +msgstr "10.60.60.1:1011" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:88 +msgid "10.80.80.1:1011" +msgstr "10.80.80.1:1011" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:89 +msgid "172.16.2.0/30" +msgstr "172.16.2.0/30" + +#: ../../configexamples/qos.rst:136 +msgid "172.17.1.2/24 CS0" +msgstr "172.17.1.2/24 CS0" + +#: ../../configexamples/qos.rst:143 +msgid "172.17.1.2/24 CS0 - > CS4" +msgstr "172.17.1.2/24 CS0 -> CS4" + +#: ../../configexamples/qos.rst:150 +msgid "172.17.1.2/24 CS4 - > CS5" +msgstr "172.17.1.2/24 CS4 -> CS5" + +#: ../../configexamples/qos.rst:26 +msgid "172.17.1.2 CS0 -> CS4" +msgstr "172.17.1.2 CS0 -> CS4" + +#: ../../configexamples/qos.rst:27 +msgid "172.17.1.3 CS0 -> CS5" +msgstr "172.17.1.3 CS0 -> CS5" + +#: ../../configexamples/qos.rst:29 +msgid "172.17.1.40 CS0 by default" +msgstr "172.17.1.40 CS0 por defecto" + +#: ../../configexamples/qos.rst:28 +msgid "172.17.1.4 CS0 -> CS6" +msgstr "172.17.1.4 CS0 -> CS6" + +#: ../../configexamples/zone-policy.rst:45 +msgid "192.168.100.10/2001:0DB8:0:AAAA::10 is the administrator's console. It can SSH to VyOS." +msgstr "192.168.100.10/2001:0DB8:0:AAAA::10 es la consola del administrador. Puede SSH a VyOS." + +#: ../../configexamples/zone-policy.rst:43 +msgid "192.168.200.200/2001:0DB8:0:BBBB::200 is an internal/external DNS, web and mail (SMTP/IMAP) server." +msgstr "192.168.200.200/2001:0DB8:0:BBBB::200 es un servidor DNS, web y de correo (SMTP/IMAP) interno/externo." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:91 +msgid "192.168.3.0/30" +msgstr "192.168.3.0/30" + +#: ../../configexamples/azure-vpn-bgp.rst:40 +#: ../../configexamples/azure-vpn-dual-bgp.rst:37 +msgid "198.51.100.3" +msgstr "198.51.100.3" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:87 +msgid "2001:db8::/127" +msgstr "2001:db8::/127" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:89 +msgid "2001:db8::2/127" +msgstr "2001:db8::2/127" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:91 +msgid "2001:db8::4/127" +msgstr "2001:db8::4/127" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:93 +msgid "2001:db8::6/127" +msgstr "2001:db8::6/127" + +#: ../../configexamples/ha.rst:71 +msgid "201: 'Internal' network, using 10.200.201.0/24" +msgstr "201: red 'interna', usando 10.200.201.0/24" + +#: ../../configexamples/azure-vpn-bgp.rst:44 +#: ../../configexamples/azure-vpn-dual-bgp.rst:41 +msgid "203.0.113.2" +msgstr "203.0.113.2" + +#: ../../configexamples/azure-vpn-dual-bgp.rst:43 +msgid "203.0.113.3" +msgstr "203.0.113.3" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:20 +msgid "2 private subnets on each site." +msgstr "2 private subnets on each site." + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:35 +msgid "2 x Route reflectors (VyOS-RRx)" +msgstr "2 reflectores de ruta (VyOS-RRx)" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:38 +msgid "3 x Customer Edge (VyOS-CEx)" +msgstr "3 x borde del cliente (VyOS-CEx)" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:37 +msgid "3 x Provider Edge (VyOs-PEx)" +msgstr "3 x borde del proveedor (VyOs-PEx)" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:36 +msgid "4 x Provider routers (VyOS-Px)" +msgstr "4 enrutadores de proveedor (VyOS-Px)" + +#: ../../configexamples/ha.rst:69 +msgid "50: Upstream, using the 192.0.2.0/24 network allocated by them." +msgstr "50: Upstream, usando la red 192.0.2.0/24 asignada por ellos." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:102 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:102 +msgid "64496:1" +msgstr "64496:1" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:108 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:108 +msgid "64496:100" +msgstr "64496:100" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:104 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:104 +msgid "64496:2" +msgstr "64496:2" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:106 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:106 +msgid "64496:50" +msgstr "64496:50" + +#: ../../configexamples/azure-vpn-bgp.rst:50 +#: ../../configexamples/azure-vpn-dual-bgp.rst:49 +msgid "64499" +msgstr "64499" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:91 +#: ../../configexamples/l3vpn-hub-and-spoke.rst:93 +msgid "65035:1011" +msgstr "65035:1011" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:88 +msgid "65035:1011 65035:1030" +msgstr "65035:1011 65035:1030" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:88 +#: ../../configexamples/l3vpn-hub-and-spoke.rst:91 +#: ../../configexamples/l3vpn-hub-and-spoke.rst:93 +msgid "65035:1030" +msgstr "65035:1030" + +#: ../../configexamples/azure-vpn-bgp.rst:52 +#: ../../configexamples/azure-vpn-dual-bgp.rst:51 +msgid "65540" +msgstr "65540" + +#: ../../configexamples/qos.rst:62 +msgid "ADDRESS10 change CS0 -> CS4 source 172.17.1.2/32" +msgstr "DIRECCIÓN10 cambiar CS0 -> fuente CS4 172.17.1.2/32" + +#: ../../configexamples/qos.rst:63 +msgid "ADDRESS20 change CS0 -> CS5 source 172.17.1.3/32" +msgstr "DIRECCIÓN20 cambiar CS0 -> fuente CS5 172.17.1.3/32" + +#: ../../configexamples/qos.rst:64 +msgid "ADDRESS30 change CS0 -> CS6 source 172.17.1.4/32" +msgstr "DIRECCIÓN30 cambiar CS0 -> fuente CS6 172.17.1.4/32" + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:28 +msgid "A brief excursion into VRFs: This has been one of the longest-standing feature requests of VyOS (dating back to 2016) which can be described as \"a VLAN for layer 2 is what a VRF is for layer 3\". With VRFs, a router/system can hold multiple, isolated routing tables on the same system. If you wonder what's the difference between multiple tables that people used for policy-based routing since forever, it's that a VRF also isolates connected routes rather than just static and dynamically learned routes, so it allows NICs in different VRFs to use conflicting network ranges without issues." +msgstr "Una breve excursión a los VRF: esta ha sido una de las solicitudes de funciones más antiguas de VyOS (que se remonta a 2016), que se puede describir como "una VLAN para la capa 2 es lo que es un VRF para la capa 3". Con los VRF, un enrutador/sistema puede contener varias tablas de enrutamiento aisladas en el mismo sistema. Si se pregunta cuál es la diferencia entre varias tablas que las personas usaron para el enrutamiento basado en políticas desde siempre, es que un VRF también aísla las rutas conectadas en lugar de solo las rutas aprendidas estáticas y dinámicas, por lo que permite que las NIC en diferentes VRF usen rangos de red en conflicto sin asuntos." + +#: ../../configexamples/azure-vpn-bgp.rst:26 +#: ../../configexamples/azure-vpn-dual-bgp.rst:23 +msgid "A connection resource deployed in Azure linking the Azure VNet gateway and the local network gateway representing the Vyos device." +msgstr "Un recurso de conexión implementado en Azure que vincula la puerta de enlace de la red virtual de Azure y la puerta de enlace de la red local que representa el dispositivo Vyos." + +#: ../../configexamples/index.rst:35 +msgid "A host ``vyos-oobm`` will use as a ssh proxy. This host is just necessary for the Lab test." +msgstr "Se utilizará un host ``vyos-oobm`` como proxy ssh. Este host solo es necesario para la prueba de laboratorio." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:312 +msgid "A key point to understand is that if we need two VRFs to communicate between each other EXPORT rt from VRF1 has to be in the IMPORT rt list from VRF2. But this is only in ONE direction, to complete the communication the EXPORT rt from VRF2 has to be in the IMPORT rt list from VRF1." +msgstr "Un punto clave a entender es que si necesitamos dos VRF para comunicarse entre sí, EXPORTAR rt de VRF1 tiene que estar en la lista IMPORT rt de VRF2. Pero esto es solo en UNA dirección, para completar la comunicación, EXPORTAR rt de VRF2 tiene que estar en la lista IMPORT rt de VRF1." + +#: ../../configexamples/azure-vpn-bgp.rst:21 +#: ../../configexamples/azure-vpn-dual-bgp.rst:18 +msgid "A local network gateway deployed in Azure representing the Vyos device, matching the below Vyos settings except for address space, which only requires the Vyos private IP, in this example 10.10.0.5/32" +msgstr "Una puerta de enlace de red local implementada en Azure que representa el dispositivo Vyos, que coincide con la configuración de Vyos a continuación, excepto para el espacio de direcciones, que solo requiere la IP privada de Vyos, en este ejemplo 10.10.0.5/32" + +#: ../../configexamples/azure-vpn-dual-bgp.rst:15 +msgid "A pair of Azure VNet Gateways deployed in active-active configuration with BGP enabled." +msgstr "Un par de puertas de enlace de red virtual de Azure implementadas en una configuración activa-activa con BGP habilitado." + +#: ../../configexamples/azure-vpn-bgp.rst:18 +msgid "A pair of Azure VNet Gateways deployed in active-passive configuration with BGP enabled." +msgstr "Un par de puertas de enlace de red virtual de Azure implementadas en una configuración activa-pasiva con BGP habilitado." + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:16 +msgid "A public, routable IPv4 address. This does not necessarily need to be static, but you will need to update the tunnel endpoint when/if your IP address changes, which can be done with a script and a scheduled task." +msgstr "Una dirección IPv4 pública y enrutable. Esto no necesariamente tiene que ser estático, pero deberá actualizar el punto final del túnel cuando cambie su dirección IP, lo que se puede hacer con un script y una tarea programada." + +#: ../../configexamples/wan-load-balancing.rst:126 +#: ../../configexamples/wan-load-balancing.rst:136 +msgid "A rule order for prioritizing traffic is useful in scenarios where the secondary link has a lower speed and should only carry high priority traffic. It is assumed for this example that eth1 is connected to a slower connection than eth0 and should prioritize VoIP traffic." +msgstr "Un orden de reglas para priorizar el tráfico es útil en escenarios donde el enlace secundario tiene una velocidad más baja y solo debe transportar tráfico de alta prioridad. Se supone para este ejemplo que eth1 está conectado a una conexión más lenta que eth0 y debe priorizar el tráfico de VoIP." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:41 +msgid "A simple solution could be using different routing tables, or VRFs for all the networks so we can keep the routing restrictions. But for us to route between the different VRFs we would need a cable or a logical connection between each other:" +msgstr "Una solución simple podría ser usar diferentes tablas de enrutamiento o VRF para todas las redes para que podamos mantener las restricciones de enrutamiento. Pero para que podamos enrutar entre los diferentes VRFs necesitaríamos un cable o una conexión lógica entre ellos:" + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:19 +msgid "Account at https://www.tunnelbroker.net/" +msgstr "Cuenta en https://www.tunnelbroker.net/" + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:21 +msgid "Active Directory on Windows server" +msgstr "Directorio activo en el servidor de Windows" + +#: ../../configexamples/ha.rst:161 +msgid "Add (temporary) default route" +msgstr "Agregar ruta predeterminada (temporal)" + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:47 +msgid "Add the LDAP plugin configuration file `/config/auth/ldap-auth.config`" +msgstr "Agregue el archivo de configuración del complemento LDAP `/config/auth/ldap-auth.config`" + +#: ../../configexamples/wan-load-balancing.rst:167 +msgid "Adding a rule for the second interface" +msgstr "Agregar una regla para la segunda interfaz" + +#: ../../configexamples/ha.rst:498 +msgid "Advertise connected routes" +msgstr "Anunciar rutas conectadas" + +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:87 +msgid "After all is done and commit, let's take a look if the Wireguard interface is up and running." +msgstr "Después de que todo esté hecho y confirmado, echemos un vistazo si la interfaz de Wireguard está en funcionamiento." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:324 +msgid "After configured all the VRFs involved in this topology we take a deeper look at both BGP and Routing table for the VRF LAN1" +msgstr "Después de configurar todos los VRF involucrados en esta topología, echamos un vistazo más profundo tanto a BGP como a la tabla de enrutamiento para VRF LAN1." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:206 +msgid "After some testing, we can check ipsec status, and counter on every tunnel:" +msgstr "After some testing, we can check ipsec status, and counter on every tunnel:" + +#: ../../configexamples/qos.rst:81 +msgid "After the interface eth0 on router VyOS3" +msgstr "Después de la interfaz eth0 en el enrutador VyOS3" + +#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:51 +msgid "After this, we need the DHCP-Server and Relay configuration. To get a testable result, we just have one IP in the DHCP range. Expand it as you need it." +msgstr "Después de esto, necesitamos la configuración del servidor DHCP y el relé. Para obtener un resultado comprobable, solo tenemos una IP en el rango de DHCP. Expándelo como lo necesites." + +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:52 +msgid "After you have each public key. The wireguard interfaces can be setup." +msgstr "Después de tener cada clave pública. Las interfaces de protección de cables se pueden configurar." + +#: ../../configexamples/wan-load-balancing.rst:28 +msgid "All outgoing packets are assigned the source address of the assigned interface (SNAT)." +msgstr "A todos los paquetes salientes se les asigna la dirección de origen de la interfaz asignada (SNAT)." + +#: ../../configexamples/wan-load-balancing.rst:24 +msgid "All traffic coming in through eth2 is balanced between eth0 and eth1 on the router." +msgstr "Todo el tráfico que ingresa a través de eth2 se equilibra entre eth0 y eth1 en el enrutador." + +#: ../../configexamples/pppoe-ipv6-basic.rst:88 +msgid "Allow DHCPv6 packets for router" +msgstr "Permitir paquetes DHCPv6 para el enrutador" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:32 +msgid "Allow access to the router only from trusted networks." +msgstr "Allow access to the router only from trusted networks." + +#: ../../configexamples/pppoe-ipv6-basic.rst:86 +msgid "Allow all established and related traffic for router and LAN" +msgstr "Permitir todo el tráfico establecido y relacionado para el enrutador y la LAN" + +#: ../../configexamples/pppoe-ipv6-basic.rst:87 +msgid "Allow all icmpv6 packets for router and LAN" +msgstr "Permitir todos los paquetes icmpv6 para enrutador y LAN" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:38 +msgid "Allow all new connections from local subnets." +msgstr "Allow all new connections from local subnets." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:40 +msgid "Allow connections from LANs to LANs throught the tunnel." +msgstr "Allow connections from LANs to LANs throught the tunnel." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:34 +msgid "Allow dns requests only only for local networks." +msgstr "Allow dns requests only only for local networks." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:36 +msgid "Allow icmp on all interfaces." +msgstr "Allow icmp on all interfaces." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:220 +msgid "Also, we can check firewall counters:" +msgstr "Also, we can check firewall counters:" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:716 +msgid "Also we can verify how PE devices receives VPNv4 networks from the RRs and installing them to the specific customer VRFs:" +msgstr "También podemos verificar cómo los dispositivos PE reciben redes VPNv4 de los RR e instalarlas en los VRF específicos del cliente:" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:20 +msgid "An L3VPN consists of multiple access links, multiple VPN routing and forwarding (VRF) tables, and multiple MPLS paths or multiple P2MP LSPs. An L3VPN can be configured to connect two or more customer sites. In hub-and-spoke MPLS L3VPN environments, the spoke routers need to have unique Route Distinguishers (RDs). In order to use the hub site as a transit point for connectivity in such an environment, the spoke sites export their routes to the hub. Spokes can talk to hubs, but never have direct paths to other spokes. All traffic between spokes is controlled and delivered over the hub site." +msgstr "Una L3VPN consta de varios enlaces de acceso, varias tablas de enrutamiento y reenvío de VPN (VRF) y varias rutas MPLS o varios LSP P2MP. Se puede configurar un L3VPN para conectar dos o más sitios de clientes. En entornos MPLS L3VPN hub-and-spoke, los enrutadores radiales deben tener distintivos de ruta (RD) exclusivos. Para utilizar el sitio central como punto de tránsito para la conectividad en dicho entorno, los sitios radiales exportan sus rutas al centro. Los radios pueden hablar con los concentradores, pero nunca tienen caminos directos a otros radios. Todo el tráfico entre los radios se controla y se entrega a través del sitio central." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:191 +msgid "And NAT Configuration:" +msgstr "And NAT Configuration:" + +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:99 +msgid "And ping the Branch PC from your central router to check the response." +msgstr "Y haga ping a la PC de la sucursal desde su enrutador central para verificar la respuesta." + +#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:90 +msgid "And show all DHCP Leases" +msgstr "Y mostrar todas las concesiones de DHCP" + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:132 +msgid "And the ``client`` to receive an IPv6 address with stateless autoconfig." +msgstr "Y el ``cliente`` para recibir una dirección IPv6 con autoconfiguración sin estado." + +#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:None +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:None +msgid "Ansible Example topology image" +msgstr "Imagen de topología de ejemplo de Ansible" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:10 +msgid "Any information related to a VRF is not exchanged between devices -or in the same device- by default, this is a technique called **VRF-Lite**." +msgstr "Cualquier información relacionada con un VRF no se intercambia entre dispositivos -o en el mismo dispositivo- por defecto, esta es una técnica llamada **VRF-Lite**." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:611 +msgid "Appendix-A" +msgstr "Apéndice A" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:764 +msgid "Appendix-B" +msgstr "Apéndice B" + +#: ../../configexamples/ha.rst:500 +msgid "As a reminder, only advertise routes that you are the default router for. This is why we are NOT announcing the 192.0.2.0/24 network, because if that was announced into OSPF, the other routers would try to connect to that network over a tunnel that connects to that network!" +msgstr "Como recordatorio, solo anuncie las rutas para las que es el enrutador predeterminado. Es por eso que NO estamos anunciando la red 192.0.2.0/24, porque si eso se anunciara en OSPF, los otros enrutadores intentarían conectarse a esa red a través de un túnel que se conecta a esa red." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:853 +msgid "As we can see even if both VRF LAN1 and LAN2 has the same import RTs we are able to select which routes are effectively imported and installed." +msgstr "Como podemos ver, incluso si VRF LAN1 y LAN2 tienen los mismos RT de importación, podemos seleccionar qué rutas se importan e instalan efectivamente." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:417 +msgid "As we can see in the BGP table any imported route has been injected with a \"@\" followed by the VPN id; In the routing table of the VRF, if the route was installed, we can see -between round brackets- the exported VRF table." +msgstr "Como podemos ver en la tabla BGP, cualquier ruta importada se ha inyectado con una "@" seguida de la identificación de VPN; En la tabla de enrutamiento del VRF, si la ruta estaba instalada, podemos ver -entre corchetes- la tabla VRF exportada." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:52 +msgid "As we can see this is unpractical." +msgstr "Como podemos ver esto no es práctico." + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:67 +msgid "As we know the main assumption of L3VPN “Hub and Spoke” is, that the traffic between spokes have to pass via hub, in our scenario VyOS-PE2 is the Hub PE and the VyOS-CE1-HUB is the central customer office device that is responsible for controlling access between all spokes and announcing its network prefixes (10.0.0.100/32). VyOS-PE2 has the main VRF (its name is BLUE_HUB), its own Route-Distinguisher(RD) and route-target import/export lists. Multiprotocol-BGP(MP-BGP) delivers L3VPN related control-plane information to the nodes across network where PEs Spokes import the route-target 60535:1030 (this is export route-target of vrf BLUE_HUB) and export its own route-target 60535:1011(this is vrf BLUE_SPOKE export route-target). Therefore, the Customer edge nodes can only learn the network prefixes of the HUB site [10.0.0.100/32]. For this example VyOS-CE1 has network prefixes [10.0.0.80/32] / VyOS-CE2 has network prefixes [10.0.0.90/32]. Route-Reflector devices VyOS-RR1 and VyOS-RR2 are used to simplify network routes exchange and minimize iBGP peerings between devices." +msgstr "Como sabemos, la suposición principal de L3VPN "Hub and Spoke" es que el tráfico entre los radios debe pasar a través del hub, en nuestro escenario, VyOS-PE2 es el Hub PE y VyOS-CE1-HUB es el dispositivo de la oficina central del cliente que es responsable de controlar el acceso entre todos los radios y anunciar sus prefijos de red (10.0.0.100/32). VyOS-PE2 tiene el VRF principal (su nombre es BLUE_HUB), su propio Distinguidor de ruta (RD) y listas de importación/exportación de destino de ruta. Multiprotocolo-BGP (MP-BGP) entrega información del plano de control relacionada con L3VPN a los nodos a través de la red donde los PE Spokes importan el objetivo de ruta 60535: 1030 (este es el objetivo de ruta de exportación de vrf BLUE_HUB) y exportan su propio objetivo de ruta 60535 :1011(este es el objetivo de la ruta de exportación vrf BLUE_SPOKE). Por lo tanto, los nodos del borde del cliente solo pueden aprender los prefijos de red del sitio HUB [10.0.0.100/32]. Para este ejemplo, VyOS-CE1 tiene prefijos de red [10.0.0.80/32] / VyOS-CE2 tiene prefijos de red [10.0.0.90/32]. Los dispositivos Route-Reflector VyOS-RR1 y VyOS-RR2 se utilizan para simplificar el intercambio de rutas de red y minimizar los emparejamientos iBGP entre dispositivos." + +#: ../../configexamples/qos.rst:182 +msgid "As we see shaper is working and the traffic will not work over 5 Mbit/s." +msgstr "Como vemos, Shaper está funcionando y el tráfico no funcionará a más de 5 Mbit/s." + +#: ../../configexamples/ha.rst:141 +msgid "Assign external IP addresses" +msgstr "Asignar direcciones IP externas" + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:74 +msgid "Assuming the pings are successful, you need to add some DNS servers. Some options:" +msgstr "Suponiendo que los ping sean exitosos, debe agregar algunos servidores DNS. Algunas opciones:" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:107 +msgid "At the first step we need to configure the IP/MPLS backbone network using OSPF as IGP protocol and LDP as label-switching protocol for the base connectivity between **P** (rovider), **P** (rovider) **E** (dge) and **R** (oute) **R** (eflector) nodes:" +msgstr "En el primer paso, debemos configurar la red troncal IP/MPLS utilizando OSPF como protocolo IGP y LDP como protocolo de conmutación de etiquetas para la conectividad base entre **P** (proveedor), **P** (proveedor) ** Nodos E** (borde) y **R** (salida) **R** (efector):" + +#: ../../configexamples/ha.rst:516 +msgid "At this point, you now need to create the X link between all four routers. Use amdifferent /30 for each link." +msgstr "En este punto, ahora necesita crear el enlace X entre los cuatro enrutadores. Utilice un /30 diferente para cada enlace." + +#: ../../configexamples/ha.rst:184 +msgid "At this point, you should be able to SSH into both of them, and will no longer need access to the console (unless you break something!)" +msgstr "En este punto, debería poder acceder a ambos mediante SSH y ya no necesitará acceder a la consola (¡a menos que rompa algo!)" + +#: ../../configexamples/ha.rst:278 +msgid "At this point, you should be able to see both IP addresses when you run ``show interfaces``\\ , and ``show vrrp`` should show both interfaces in MASTER state (and SLAVE state on router2)." +msgstr "En este punto, debería poder ver ambas direcciones IP cuando ejecuta ``show interfaces``\\ , y ``show vrrp`` debería mostrar ambas interfaces en estado MAESTRO (y en estado ESCLAVO en el enrutador2)." + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:102 +msgid "At this point, your VyOS install should have full IPv6, but now your LAN devices need access." +msgstr "En este punto, su instalación de VyOS debería tener IPv6 completo, pero ahora sus dispositivos LAN necesitan acceso." + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:324 +msgid "At this step we are going to enable iBGP protocol on MPLS nodes and Route Reflectors (two routers for redundancy) that will deliver IPv4 VPN (L3VPN) routes between them:" +msgstr "En este paso, vamos a habilitar el protocolo iBGP en los nodos MPLS y los reflectores de ruta (dos enrutadores para redundancia) que entregarán rutas IPv4 VPN (L3VPN) entre ellos:" + +#: ../../configexamples/azure-vpn-bgp.rst:52 +#: ../../configexamples/azure-vpn-dual-bgp.rst:51 +msgid "Azure ASN" +msgstr "ASN azul" + +#: ../../configexamples/azure-vpn-dual-bgp.rst:41 +msgid "Azure VNet Gateway 1 public IP" +msgstr "IP pública de Azure VNet Gateway 1" + +#: ../../configexamples/azure-vpn-dual-bgp.rst:43 +msgid "Azure VNet Gateway 2 public IP" +msgstr "IP pública de Azure VNet Gateway 2" + +#: ../../configexamples/azure-vpn-bgp.rst:46 +#: ../../configexamples/azure-vpn-dual-bgp.rst:45 +msgid "Azure VNet Gateway BGP IP" +msgstr "IP de BGP de puerta de enlace de red virtual de Azure" + +#: ../../configexamples/azure-vpn-bgp.rst:44 +msgid "Azure VNet Gateway public IP" +msgstr "IP pública de puerta de enlace de red virtual de Azure" + +#: ../../configexamples/azure-vpn-bgp.rst:38 +#: ../../configexamples/azure-vpn-dual-bgp.rst:35 +msgid "Azure address space" +msgstr "Espacio de direcciones de Azure" + +#: ../../configexamples/ha.rst:534 +msgid "BGP" +msgstr "BGP" + +#: ../../configexamples/bgp-ipv6-unnumbered.rst:7 +msgid "BGP IPv6 unnumbered with extended nexthop" +msgstr "BGP IPv6 sin numerar con nexthop extendido" + +#: ../../configexamples/ha.rst:536 +msgid "BGP is an extremely complex network protocol. An example is provided here." +msgstr "BGP es un protocolo de red extremadamente complejo. Aquí se proporciona un ejemplo." + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:88 +msgid "BLUE_HUB" +msgstr "EJE_AZUL" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:91 +#: ../../configexamples/l3vpn-hub-and-spoke.rst:93 +msgid "BLUE_SPOKE" +msgstr "RADIO_AZUL" + +#: ../../configexamples/wan-load-balancing.rst:169 +msgid "Based on the previous example, another rule for traffic from the second interface eth3 can be added to the load balancer. However, traffic meant to flow between the LAN subnets will be sent to eth0 and eth1 as well. To prevent this, another rule is required. This rule excludes traffic between the local subnets from the load balancer. It also excludes locally-sources packets (required for web caching with load balancing). eth+ is used as an alias that refers to all ethernet interfaces:" +msgstr "Según el ejemplo anterior, se puede agregar al balanceador de carga otra regla para el tráfico desde la segunda interfaz eth3. Sin embargo, el tráfico destinado a fluir entre las subredes LAN también se enviará a eth0 y eth1. Para evitar esto, se requiere otra regla. Esta regla excluye el tráfico entre las subredes locales del balanceador de carga. También excluye los paquetes de origen local (requeridos para el almacenamiento en caché web con equilibrio de carga). eth+ se usa como un alias que se refiere a todas las interfaces de ethernet:" + +#: ../../configexamples/pppoe-ipv6-basic.rst:82 +msgid "Basic Firewall" +msgstr "Cortafuegos básico" + +#: ../../configexamples/ha.rst:108 +msgid "Basic Setup (via console)" +msgstr "Configuración básica (a través de la consola)" + +#: ../../configexamples/qos.rst:74 +msgid "Before the interface eth0 on router VyOS3" +msgstr "Antes de la interfaz eth0 en el enrutador VyOS3" + +#: ../../configexamples/ha.rst:125 +msgid "Bonding on Hardware Router" +msgstr "Vinculación en el enrutador de hardware" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:32 +msgid "Both LANs have to be able to route between each other, both will have managed devices through a dedicated management network and both will need Internet access yet the LAN2 will need access to some set of outside networks, not all. The management network will need access to both LANs but cannot have access to/from the outside." +msgstr "Ambas LAN deben poder enrutar entre sí, ambas tendrán dispositivos administrados a través de una red de administración dedicada y ambas necesitarán acceso a Internet, pero la LAN2 necesitará acceso a algún conjunto de redes externas, no a todas. La red de administración necesitará acceso a ambas LAN, pero no puede tener acceso hacia/desde el exterior." + +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:35 +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:61 +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:77 +msgid "Branch" +msgstr "Rama" + +#: ../../configexamples/zone-policy.rst:151 +msgid "By default, iptables does not allow traffic for established sessions to return, so you must explicitly allow this. I do this by adding two rules to every ruleset. 1 allows established and related state packets through and rule 2 drops and logs invalid state packets. We place the established/related rule at the top because the vast majority of traffic on a network is established and the invalid rule to prevent invalid state packets from mistakenly being matched against other rules. Having the most matched rule listed first reduces CPU load in high volume environments. Note: I have filed a bug to have this added as a default action as well." +msgstr "De forma predeterminada, iptables no permite que regrese el tráfico de las sesiones establecidas, por lo que debe permitirlo explícitamente. Hago esto agregando dos reglas a cada conjunto de reglas. 1 permite el paso de paquetes de estado establecidos y relacionados y la regla 2 elimina y registra paquetes de estado no válidos. Colocamos la regla establecida/relacionada en la parte superior porque la gran mayoría del tráfico en una red está establecida y la regla no válida para evitar que los paquetes de estado no válidos se comparen por error con otras reglas. Tener la regla más coincidente en la lista primero reduce la carga de la CPU en entornos de gran volumen. Nota: He presentado un error para que esto también se agregue como una acción predeterminada." + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:891 +msgid "CE Hub device" +msgstr "Dispositivo concentrador CE" + +#: ../../configexamples/qos.rst:33 +msgid "CS4 -> CS5" +msgstr "CS4 -> CS5" + +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:29 +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:55 +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:71 +msgid "Central" +msgstr "Central" + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:48 +msgid "Check all possible settings `here `_" +msgstr "Compruebe todas las configuraciones posibles `aquí `_" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:252 +msgid "Check the BGP VRF table and verify if the static routes are injected showing the correct next-hop information." +msgstr "Verifique la tabla BGP VRF y verifique si las rutas estáticas se inyectan y muestran la información correcta del siguiente salto." + +#: ../../configexamples/qos.rst:67 +msgid "Check the result" +msgstr "Comprueba el resultado" + +#: ../../configexamples/qos.rst:175 +msgid "Check the result." +msgstr "Compruebe el resultado." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:164 +msgid "Checking the routing table of the VRF should reveal both static and connected entries active. A PING test between the Core and remote router is a way to validate connectivity within the VRF." +msgstr "Verificar la tabla de enrutamiento del VRF debería revelar tanto las entradas estáticas como las conectadas activas. Una prueba PING entre el Core y el enrutador remoto es una forma de validar la conectividad dentro del VRF." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:204 +msgid "Checking through op-mode commands" +msgstr "Checking through op-mode commands" + +#: ../../configexamples/ha.rst:90 +msgid "Cisco VPC Crossconnect - Ports 39 and 40 bonded between each switch" +msgstr "Cisco VPC Crossconnect: puertos 39 y 40 enlazados entre cada switch" + +#: ../../configexamples/azure-vpn-bgp.rst:92 +#: ../../configexamples/azure-vpn-dual-bgp.rst:94 +msgid "Clamp the VTI's MSS to 1350 to avoid PMTU blackholes." +msgstr "Sujete el MSS de VTI a 1350 para evitar los agujeros negros de PMTU." + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:94 +msgid "Client configuration" +msgstr "Configuración del cliente" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:24 +msgid "Communication between private subnets should be done through ipsec tunnel without nat." +msgstr "Communication between private subnets should be done through ipsec tunnel without nat." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:601 +msgid "Conclusions" +msgstr "Conclusiones" + +#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:26 +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:25 +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:37 +#: ../../configexamples/bgp-ipv6-unnumbered.rst:12 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:139 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:231 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:290 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:774 +#: ../../configexamples/l3vpn-hub-and-spoke.rst:100 +#: ../../configexamples/ospf-unnumbered.rst:12 +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:47 +#: ../../configexamples/segment-routing-isis.rst:24 +msgid "Configuration" +msgstr "Configuración" + +#: ../../configexamples/qos.rst:38 +msgid "Configuration:" +msgstr "Configuración:" + +#: ../../configexamples/nmp.rst:26 +msgid "Configuration 'NMP'" +msgstr "Configuración 'NMP'" + +#: ../../configexamples/nmp.rst:13 +msgid "Configuration 'VyOS'" +msgstr "Configuración 'VyOS'" + +#: ../../configexamples/qos.rst:10 +msgid "Configuration 'dcsp' and shaper using QoS" +msgstr "Configuración 'dcsp' y modelador usando QoS" + +#: ../../configexamples/index.rst:4 +msgid "Configuration Blueprints" +msgstr "Planos de configuración" + +#: ../../configexamples/index.rst:28 +msgid "Configuration Blueprints (autotest)" +msgstr "Configuración de blueprints (autoprueba)" + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:40 +msgid "Configuration VyOS as OpenVPN Server" +msgstr "Configurar VyOS como servidor OpenVPN" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:27 +msgid "Configuration of basic firewall in one site, in order to:" +msgstr "Configuration of basic firewall in one site, in order to:" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:113 +#: ../../configexamples/pppoe-ipv6-basic.rst:26 +msgid "Configurations" +msgstr "Configuraciones" + +#: ../../configexamples/ha.rst:358 +msgid "Configure Wireguard" +msgstr "Configurar protección de cables" + +#: ../../configexamples/azure-vpn-bgp.rst:85 +msgid "Configure a VTI with a dummy IP address" +msgstr "Configurar un VTI con una dirección IP ficticia" + +#: ../../configexamples/ha.rst:312 +msgid "Configure conntrack-sync and enable helpers" +msgstr "Configurar conntrack-sync y habilitar ayudantes" + +#: ../../configexamples/azure-vpn-bgp.rst:58 +#: ../../configexamples/azure-vpn-dual-bgp.rst:57 +msgid "Configure the IKE and ESP settings to match a subset of those supported by Azure:" +msgstr "Configure los ajustes de IKE y ESP para que coincidan con un subconjunto de los admitidos por Azure:" + +#: ../../configexamples/azure-vpn-bgp.rst:98 +msgid "Configure the VPN tunnel" +msgstr "Configurar el túnel VPN" + +#: ../../configexamples/azure-vpn-dual-bgp.rst:101 +msgid "Configure the VPN tunnels" +msgstr "Configurar los túneles VPN" + +#: ../../configexamples/wan-load-balancing.rst:47 +msgid "Configure the WAN load balancer with the parameters described above:" +msgstr "Configure el balanceador de carga WAN con los parámetros descritos anteriormente:" + +#: ../../configexamples/wan-load-balancing.rst:46 +msgid "Configure the load balancer" +msgstr "Configurar el balanceador de carga" + +#: ../../configexamples/azure-vpn-dual-bgp.rst:84 +msgid "Configure two VTIs with a dummy IP address each" +msgstr "Configure dos VTI con una dirección IP ficticia cada uno" + +#: ../../configexamples/azure-vpn-bgp.rst:123 +#: ../../configexamples/azure-vpn-dual-bgp.rst:141 +msgid "Configure your BGP settings" +msgstr "Configure sus ajustes de BGP" + +#: ../../configexamples/ha.rst:314 +msgid "Conntrack helper modules are enabled by default, but they tend to cause more problems than they're worth in complex networks. You can disable all of them at one go." +msgstr "Los módulos auxiliares de Conntrack están habilitados de manera predeterminada, pero tienden a causar más problemas de los que valen en redes complejas. Puede deshabilitarlos todos a la vez." + +#: ../../configexamples/nmp.rst:9 +msgid "Consider how to quickly set up NMP and VyOS for monitoring. NMP is multi-vendor network monitoring from 'SolarWinds' built to scale and expand with the needs of your network." +msgstr "Considere cómo configurar rápidamente NMP y VyOS para el monitoreo. NMP es el monitoreo de red de múltiples proveedores de 'SolarWinds' creado para escalar y expandirse con las necesidades de su red." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:87 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:89 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:91 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:93 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:616 +msgid "Core" +msgstr "Centro" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:134 +msgid "Core Router" +msgstr "Enrutador central" + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:62 +msgid "Core network" +msgstr "Red de núcleo" + +#: ../../configexamples/ha.rst:417 +msgid "Create Export Filter" +msgstr "Crear filtro de exportación" + +#: ../../configexamples/ha.rst:448 +msgid "Create Import Filter" +msgstr "Crear filtro de importación" + +#: ../../configexamples/ha.rst:265 +msgid "Create VRRP sync-group" +msgstr "Crear grupo de sincronización VRRP" + +#: ../../configexamples/ha.rst:127 +msgid "Create a LACP bond on the hardware router. We are assuming that eth0 and eth1 are connected to port 8 on both switches, and that those ports are configured as a Port-Channel." +msgstr "Cree un enlace LACP en el enrutador de hardware. Suponemos que eth0 y eth1 están conectados al puerto 8 en ambos conmutadores y que esos puertos están configurados como Port-Channel." + +#: ../../configexamples/ha.rst:117 +msgid "Create an 'All VLANs' network group, that passes all trunked traffic through to the VM. Attach this network group to router1 as eth0." +msgstr "Cree un grupo de red "Todas las VLAN", que pase todo el tráfico troncalizado a través de la máquina virtual. Adjunte este grupo de red al router1 como eth0." + +#: ../../configexamples/wan-load-balancing.rst:81 +msgid "Create interface weight based configuration" +msgstr "Crear una configuración basada en el peso de la interfaz" + +#: ../../configexamples/wan-load-balancing.rst:111 +msgid "Create rule order based configuration" +msgstr "Crear una configuración basada en orden de reglas" + +#: ../../configexamples/wan-load-balancing.rst:142 +msgid "Create rule order based configuration with low speed secondary link" +msgstr "Cree una configuración basada en el orden de las reglas con un enlace secundario de baja velocidad" + +#: ../../configexamples/wan-load-balancing.rst:35 +msgid "Create static routes through the two ISPs towards the ping targets and commit the changes:" +msgstr "Cree rutas estáticas a través de los dos ISP hacia los objetivos de ping y confirme los cambios:" + +#: ../../configexamples/wan-load-balancing.rst:34 +msgid "Create static routes to ping targets" +msgstr "Crear rutas estáticas para hacer ping a objetivos" + +#: ../../configexamples/ha.rst:110 +msgid "Create your router1 VM. So it can withstand a VM Host failing or a network link failing. Using VMware, this is achieved by enabling vSphere DRS, vSphere Availability, and creating a Distributed Port Group that uses LACP." +msgstr "Cree su máquina virtual router1. Por lo tanto, puede soportar una falla de VM Host o una falla de enlace de red. Con VMware, esto se logra habilitando vSphere DRS, vSphere Availability y creando un grupo de puertos distribuidos que usa LACP." + +#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:44 +#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:62 +msgid "DHCP-Relay" +msgstr "Relé DHCP" + +#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:37 +#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:55 +msgid "DHCP-Server" +msgstr "Servidor DHCP" + +#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:3 +msgid "DHCP Relay trough GRE-Bridge" +msgstr "Retransmisión DHCP a través de GRE-Bridge" + +#: ../../configexamples/pppoe-ipv6-basic.rst:42 +msgid "DHCPv6-PD Setup" +msgstr "Configuración de DHCPv6-PD" + +#: ../../configexamples/zone-policy.rst:374 +msgid "DMZ-LAN policy is LAN-DMZ. You can get a rhythm to it when you build out a bunch at one time." +msgstr "La política de DMZ-LAN es LAN-DMZ. Puedes conseguir un ritmo cuando construyes un montón a la vez." + +#: ../../configexamples/zone-policy.rst:49 +msgid "DMZ cannot access LAN resources." +msgstr "DMZ no puede acceder a los recursos de LAN." + +#: ../../configexamples/ha.rst:18 +msgid "Design" +msgstr "Diseño" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:85 +msgid "Device-A" +msgstr "Dispositivo-A" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:85 +msgid "Device-B" +msgstr "Dispositivo-B" + +#: ../../configexamples/ha.rst:514 +msgid "Duplicate configuration" +msgstr "Configuración duplicada" + +#: ../../configexamples/pppoe-ipv6-basic.rst:44 +msgid "During address configuration, in addition to assigning an address to the WAN interface, ISP also provides a prefix to allow the router to configure addresses of LAN interface and other nodes connecting to LAN, which is called prefix delegation (PD)." +msgstr "Durante la configuración de la dirección, además de asignar una dirección a la interfaz WAN, el ISP también proporciona un prefijo para permitir que el enrutador configure las direcciones de la interfaz LAN y otros nodos que se conectan a la LAN, lo que se denomina delegación de prefijo (PD)." + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:484 +msgid "Dynamic routing used between CE and PE nodes and eBGP peering established for the route exchanging between them. All routes received by PEs are then exported to L3VPN and delivered from Spoke sites to Hub and vise-versa based on previously configured L3VPN parameters." +msgstr "Enrutamiento dinámico utilizado entre nodos CE y PE y peering eBGP establecido para el intercambio de rutas entre ellos. Todas las rutas recibidas por los PE se exportan a L3VPN y se entregan desde los sitios de Spoke a Hub y viceversa según los parámetros de L3VPN configurados previamente." + +#: ../../configexamples/zone-policy.rst:91 +msgid "Each interface is assigned to a zone. The interface can be physical or virtual such as tunnels (VPN, PPTP, GRE, etc) and are treated exactly the same." +msgstr "Cada interfaz está asignada a una zona. La interfaz puede ser física o virtual, como túneles (VPN, PPTP, GRE, etc.) y se tratan exactamente de la misma manera." + +#: ../../configexamples/index.rst:32 +msgid "Each lab will build an test from an external script. The page content will generate, so changes will not take an effect." +msgstr "Cada laboratorio creará una prueba a partir de un script externo. El contenido de la página se generará, por lo que los cambios no tendrán efecto." + +#: ../../configexamples/azure-vpn-bgp.rst:79 +#: ../../configexamples/azure-vpn-dual-bgp.rst:78 +msgid "Enable IPsec on eth0" +msgstr "Habilitar IPsec en eth0" + +#: ../../configexamples/ha.rst:470 +msgid "Enable OSPF" +msgstr "Habilitar OSPF" + +#: ../../configexamples/ha.rst:174 +msgid "Enable SSH" +msgstr "Habilitar SSH" + +#: ../../configexamples/ha.rst:176 +msgid "Enable SSH so you can now SSH into the routers, rather than using the console." +msgstr "Habilite SSH para que ahora pueda usar SSH en los enrutadores, en lugar de usar la consola." + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:140 +msgid "Enables router advertisements. This is an IPv6 alternative for DHCP (though DHCPv6 can still be used). With RAs, Your devices will automatically find the information they need for routing and DNS." +msgstr "Habilita los anuncios del enrutador. Esta es una alternativa de IPv6 para DHCP (aunque aún se puede usar DHCPv6). Con RA, sus dispositivos encontrarán automáticamente la información que necesitan para enrutamiento y DNS." + +#: ../../configexamples/zone-policy.rst:253 +msgid "Even if the two zones will never communicate, it is a good idea to create the zone-pair-direction rulesets and set enable-default-log. This will allow you to log attempts to access the networks. Without it, you will never see the connection attempts." +msgstr "Incluso si las dos zonas nunca se comunicarán, es una buena idea crear conjuntos de reglas de direcciones de pares de zonas y configurar enable-default-log. Esto le permitirá registrar los intentos de acceder a las redes. Sin él, nunca verá los intentos de conexión." + +#: ../../configexamples/ha.rst:472 +msgid "Every router **must** have a unique router-id. The 'reference-bandwidth' is used because when OSPF was originally designed, the idea of a link faster than 1gbit was unheard of, and it does not scale correctly." +msgstr "Cada enrutador **debe** tener una identificación de enrutador única. El 'ancho de banda de referencia' se usa porque cuando OSPF se diseñó originalmente, la idea de un enlace más rápido que 1 gbit no se conocía y no se escala correctamente." + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:114 +msgid "Every router that provides access to a customer network needs to have the customer network (VRF + VNI) configured. To make our own lives easier, we utilize the same VRF table id (local routing table number) and VNI (Virtual Network Identifier) per tenant on all our routers." +msgstr "Cada enrutador que proporciona acceso a la red de un cliente debe tener configurada la red del cliente (VRF + VNI). Para facilitarnos la vida, utilizamos la misma identificación de tabla VRF (número de tabla de enrutamiento local) y VNI (identificador de red virtual) por inquilino en todos nuestros enrutadores." + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:108 +msgid "Every tenant is assigned an individual VRF that would support overlapping address ranges for customers blue, red and green. In our example, we do not use overlapping ranges to make it easier when showing debug commands." +msgstr "A cada inquilino se le asigna un VRF individual que admitiría rangos de direcciones superpuestas para los clientes azul, rojo y verde. En nuestro ejemplo, no usamos rangos superpuestos para que sea más fácil mostrar los comandos de depuración." + +#: ../../configexamples/azure-vpn-bgp.rst:31 +#: ../../configexamples/azure-vpn-dual-bgp.rst:28 +msgid "Example" +msgstr "Ejemplo" + +#: ../../configexamples/wan-load-balancing.rst:12 +msgid "Example 1: Distributing load evenly" +msgstr "Ejemplo 1: Distribuir la carga uniformemente" + +#: ../../configexamples/wan-load-balancing.rst:68 +msgid "Example 2: Failover based on interface weights" +msgstr "Ejemplo 2: conmutación por error basada en pesos de interfaz" + +#: ../../configexamples/wan-load-balancing.rst:95 +msgid "Example 3: Failover based on rule order" +msgstr "Ejemplo 3: conmutación por error basada en el orden de las reglas" + +#: ../../configexamples/wan-load-balancing.rst:124 +msgid "Example 4: Failover based on rule order - priority traffic" +msgstr "Ejemplo 4: conmutación por error basada en el orden de las reglas: tráfico prioritario" + +#: ../../configexamples/wan-load-balancing.rst:156 +msgid "Example 5: Exclude traffic from load balancing" +msgstr "Ejemplo 5: Excluir el tráfico del equilibrio de carga" + +#: ../../configexamples/ha.rst:43 +msgid "Example Network" +msgstr "Red de ejemplo" + +#: ../../configexamples/pppoe-ipv6-basic.rst:38 +msgid "Fill ``password`` and ``user`` with the credential provided by your ISP." +msgstr "Rellene ``contraseña`` y ``usuario`` con la credencial proporcionada por su ISP." + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:202 +msgid "Finally, don't forget the :ref:`firewall`. The usage is identical, except for instead of `set firewall name NAME`, you would use `set firewall ipv6-name NAME`." +msgstr "Finalmente, no olvide el :ref:`firewall`. El uso es idéntico, excepto que en lugar de `establecer NOMBRE del nombre del cortafuegos`, usaría `establecer NOMBRE del nombre ipv6 del cortafuegos`." + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:985 +msgid "Finally, let’s check the reachability between CEs:" +msgstr "Finalmente, verifiquemos la accesibilidad entre los CE:" + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:200 +msgid "Firewall" +msgstr "cortafuegos" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:123 +msgid "Firewall Configuration:" +msgstr "Firewall Configuration:" + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:39 +msgid "First, we configure the ``vyos-wan`` interface to get a DHCP address." +msgstr "Primero, configuramos la interfaz ``vyos-wan`` para obtener una dirección DHCP." + +#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:28 +msgid "First, we configure the transport network and the Tunnel interface." +msgstr "Primero, configuramos la red de transporte y la interfaz del Túnel." + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:44 +msgid "First a CA, a signed server and client ceftificate and a Diffie-Hellman parameter musst be generated and installed. Please look :ref:`here ` for more information." +msgstr "Primero se debe generar e instalar una CA, un certificado de servidor y cliente firmado y un parámetro Diffie-Hellman. Por favor mire :ref:`aquí ` para más información." + +#: ../../configexamples/nmp.rst:15 +msgid "First prepare our VyOS router for connection to NMP. We have to set up the SNMP protocol and connectivity between the router and NMP." +msgstr "Primero prepare nuestro enrutador VyOS para la conexión a NMP. Tenemos que configurar el protocolo SNMP y la conectividad entre el enrutador y NMP." + +#: ../../configexamples/ha.rst:60 +msgid "For connection between sites, we are running a WireGuard link to two REMOTE routers and using OSPF over those links to distribute routes. That remote site is expected to send traffic from anything in 10.201.0.0/16" +msgstr "Para la conexión entre sitios, estamos ejecutando un enlace WireGuard a dos enrutadores REMOTOS y usando OSPF sobre esos enlaces para distribuir rutas. Se espera que ese sitio remoto envíe tráfico desde cualquier lugar en 10.201.0.0/16" + +#: ../../configexamples/pppoe-ipv6-basic.rst:56 +msgid "For home network users, most of time ISP only provides /64 prefix, hence there is no need to set SLA ID and prefix length. See :ref:`pppoe-interface` for more information." +msgstr "Para los usuarios de redes domésticas, la mayoría de las veces el ISP solo proporciona el prefijo /64, por lo tanto, no es necesario establecer la ID de SLA y la longitud del prefijo. Consulte :ref:`pppoe-interface` para obtener más información." + +#: ../../configexamples/azure-vpn-bgp.rst:11 +msgid "For redundant / active-active configurations see :ref:`examples-azure-vpn-dual-bgp`" +msgstr "Para configuraciones redundantes/activo-activo, consulte :ref:`examples-azure-vpn-dual-bgp`" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:10 +msgid "For simplicity, configuration and tests are done only using ipv4, and firewall configuration in done only on one router." +msgstr "For simplicity, configuration and tests are done only using ipv4, and firewall configuration in done only on one router." + +#: ../../configexamples/ha.rst:146 +msgid "For the hardware router, replace ``eth0`` with ``bond0``. As (almost) every command is identical, this will not be specified unless different things need to be performed on different hosts." +msgstr "Para el enrutador de hardware, reemplace ``eth0`` con ``bond0``. Como (casi) todos los comandos son idénticos, esto no se especificará a menos que se deban realizar cosas diferentes en diferentes hosts." + +#: ../../configexamples/ha.rst:88 +msgid "From Datacenter - This connects into port 1 on both switches, and is tagged as VLAN 50" +msgstr "Desde el centro de datos: se conecta al puerto 1 en ambos conmutadores y se etiqueta como VLAN 50" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:427 +msgid "From Management to LAN1/LAN2" +msgstr "De Gestión a LAN1/LAN2" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:469 +msgid "From Management to Outside (fails as intended)" +msgstr "De la gerencia al exterior (falla según lo previsto)" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:614 +msgid "Full configuration from all devices" +msgstr "Configuración completa desde todos los dispositivos" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:19 +msgid "General information about L3VPNs can be found in the :ref:`configuration/vrf/index:L3VPN VRFs` chapter." +msgstr "Puede encontrar información general sobre L3VPN en el capítulo :ref:`configuration/vrf/index:L3VPN VRFs`." + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:49 +msgid "General information can be found in the :ref:`configuration/vrf/index:L3VPN VRFs` chapter." +msgstr "Puede encontrar información general en el capítulo :ref:`configuration/vrf/index:L3VPN VRFs`." + +#: ../../configexamples/bgp-ipv6-unnumbered.rst:9 +msgid "General information can be found in the :ref:`routing-bgp` chapter." +msgstr "Puede encontrar información general en el capítulo :ref:`routing-bgp`." + +#: ../../configexamples/ospf-unnumbered.rst:9 +msgid "General information can be found in the :ref:`routing-ospf` chapter." +msgstr "Puede encontrar información general en el capítulo :ref:`routing-ospf`." + +#: ../../configexamples/ha.rst:74 +msgid "Hardware" +msgstr "Hardware" + +#: ../../configexamples/ha.rst:91 +msgid "Hardware Router - Port 8 of each switch" +msgstr "Enrutador de hardware: puerto 8 de cada conmutador" + +#: ../../configexamples/zone-policy.rst:282 +msgid "Here is an example of an IPv6 DMZ-WAN ruleset." +msgstr "Este es un ejemplo de un conjunto de reglas IPv6 DMZ-WAN." + +#: ../../configexamples/segment-routing-isis.rst:178 +msgid "Here is the routing tables showing the MPLS segment routing label operations:" +msgstr "Aquí están las tablas de enrutamiento que muestran las operaciones de la etiqueta de enrutamiento del segmento MPLS:" + +#: ../../configexamples/pppoe-ipv6-basic.rst:76 +msgid "Here we set the prefix to ``::/64`` to indicate advertising any /64 prefix the LAN interface is assigned." +msgstr "Aquí establecemos el prefijo en ``::/64`` para indicar la publicidad de cualquier prefijo /64 que se asigne a la interfaz LAN." + +#: ../../configexamples/pppoe-ipv6-basic.rst:54 +msgid "Here we use the prefix to configure the address of eth1 (LAN) to form ``::64``, where ``64`` is hexadecimal of address 100." +msgstr "Aquí usamos el prefijo para configurar la dirección de eth1 (LAN) para formar `` ::64``, donde ``64`` es el hexadecimal de la dirección 100." + +#: ../../configexamples/ha.rst:7 +msgid "High Availability Walkthrough" +msgstr "Tutorial de alta disponibilidad" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:65 +msgid "How does it work?" +msgstr "¿Como funciona?" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:88 +msgid "Hub" +msgstr "centro" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:6 +msgid "IP/MPLS technology is widely used by various service providers and large enterprises in order to achieve better network scalability, manageability and flexibility. It also provides the possibility to deliver different services for the customers in a seamless manner. Layer 3 VPN (L3VPN) is a type of VPN mode that is built and delivered through OSI layer 3 networking technologies. Often the border gateway protocol (BGP) is used to send and receive VPN-related data that is responsible for the control plane. L3VPN utilizes virtual routing and forwarding (VRF) techniques to receive and deliver user data as well as separate data planes of the end-users. It is built using a combination of IP- and MPLS-based information. Generally, L3VPNs are used to send data on back-end VPN infrastructures, such as for VPN connections between data centres, HQs and branches." +msgstr "La tecnología IP/MPLS es ampliamente utilizada por varios proveedores de servicios y grandes empresas para lograr una mejor escalabilidad, capacidad de administración y flexibilidad de la red. También brinda la posibilidad de brindar diferentes servicios para los clientes de manera transparente. La VPN de capa 3 (L3VPN) es un tipo de modo de VPN que se construye y entrega a través de tecnologías de red de capa 3 de OSI. A menudo, el protocolo de puerta de enlace fronteriza (BGP) se usa para enviar y recibir datos relacionados con VPN que son responsables del plano de control. L3VPN utiliza técnicas de enrutamiento y reenvío virtual (VRF) para recibir y entregar datos de usuario, así como planos de datos separados de los usuarios finales. Está construido utilizando una combinación de información basada en IP y MPLS. En general, las L3VPN se utilizan para enviar datos en infraestructuras VPN de back-end, como conexiones VPN entre centros de datos, oficinas centrales y sucursales." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:65 +msgid "IPSec configuration:" +msgstr "IPSec configuration:" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:82 +msgid "IP Schema" +msgstr "Esquema IP" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:85 +msgid "IPv4 Network" +msgstr "Red IPv4" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:85 +msgid "IPv6 Network" +msgstr "Red IPv6" + +#: ../../configexamples/zone-policy.rst:383 +msgid "IPv6 Tunnel" +msgstr "Túnel IPv6" + +#: ../../configexamples/segment-routing-isis.rst:17 +msgid "ISIS-SR example network" +msgstr "Red de ejemplo ISIS-SR" + +#: ../../configexamples/segment-routing-isis.rst:17 +msgid "ISIS-SR network" +msgstr "Red ISIS-SR" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:93 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:739 +msgid "ISP" +msgstr "ISP" + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:64 +msgid "I chose to run OSPF as the IGP (Interior Gateway Protocol). All required BGP sessions are established via a dummy interfaces (similar to the loopback, but in Linux you can have only one loopback, while there can be many dummy interfaces) on the PE routers. In case of a link failure, traffic is diverted in the other direction in this triangle setup and BGP sessions will not go down. One could even enable BFD (Bidirectional Forwarding Detection) on the links for a faster failover and resilience in the network." +msgstr "Elegí ejecutar OSPF como IGP (Protocolo de puerta de enlace interior). Todas las sesiones BGP requeridas se establecen a través de interfaces ficticias (similar al bucle invertido, pero en Linux solo puede tener un bucle invertido, mientras que puede haber muchas interfaces ficticias) en los enrutadores PE. En caso de falla de un enlace, el tráfico se desvía en la otra dirección en esta configuración de triángulo y las sesiones BGP no se interrumpen. Incluso se podría habilitar BFD (Detección de reenvío bidireccional) en los enlaces para una conmutación por error más rápida y resiliencia en la red." + +#: ../../configexamples/zone-policy.rst:171 +msgid "I create/configure the interfaces first. Build out the rulesets for each zone-pair-direction which includes at least the three state rules. Then I setup the zone-policies." +msgstr "Primero creo/configuro las interfaces. Cree los conjuntos de reglas para cada zona-par-dirección que incluya al menos las tres reglas estatales. Luego configuro las políticas de zona." + +#: ../../configexamples/zone-policy.rst:100 +msgid "I name rule sets to indicate which zone-pair-direction they represent. eg. ZoneA-ZoneB or ZoneB-ZoneA. LAN-DMZ, DMZ-LAN." +msgstr "Nombro conjuntos de reglas para indicar qué zona-par-dirección representan. p.ej. ZonaA-ZonaB o ZonaB-ZonaA. LAN-DMZ, DMZ-LAN." + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:14 +msgid "I named the customers blue, red and green which is common practice in VRF (Virtual Routing and Forwarding) documentation scenarios." +msgstr "Nombré a los clientes azul, rojo y verde, que es una práctica común en los escenarios de documentación VRF (enrutamiento y reenvío virtuales)." + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:9 +msgid "I spun up a new lab in EVE-NG, which represents this as the \"Foo Bar - Service Provider Inc.\" that has 3 points of presence (PoP) in random datacenters/sites named PE1, PE2, and PE3. Each PoP aggregates at least two customers." +msgstr "Creé un nuevo laboratorio en EVE-NG, que representa esto como "Foo Bar - Service Provider Inc". que tiene 3 puntos de presencia (PoP) en centros de datos/sitios aleatorios denominados PE1, PE2 y PE3. Cada PoP agrega al menos dos clientes." + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:256 +msgid "If the client is connect successfully you can check the output with" +msgstr "Si el cliente se conecta correctamente, puede verificar la salida con" + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:236 +msgid "If we need to retrieve information about a specific host/network inside the EVPN network we need to run" +msgstr "Si necesitamos recuperar información sobre un host/red específico dentro de la red EVPN, debemos ejecutar" + +#: ../../configexamples/ha.rst:34 +msgid "If you are following through this document, it is strongly suggested you complete the entire document, ONLY doing the virtual router1 steps, and then come back and walk through it AGAIN on the backup hardware router." +msgstr "Si está siguiendo este documento, se recomienda enfáticamente que complete todo el documento, SOLAMENTE siguiendo los pasos del enrutador virtual1, y luego regrese y revíselo OTRA VEZ en el enrutador de hardware de respaldo." + +#: ../../configexamples/zone-policy.rst:385 +msgid "If you are using a IPv6 tunnel from HE.net or someone else, the basis is the same except you have two WAN interfaces. One for v4 and one for v6." +msgstr "Si está utilizando un túnel IPv6 de HE.net o de otra persona, la base es la misma excepto que tiene dos interfaces WAN. Uno para v4 y otro para v6." + +#: ../../configexamples/ha.rst:354 +msgid "If you use a routing protocol itself, you solve two problems at once. This is only a basic example, and is provided as a starting point." +msgstr "Si usa un protocolo de enrutamiento en sí mismo, resuelve dos problemas a la vez. Este es solo un ejemplo básico y se proporciona como un punto de partida." + +#: ../../configexamples/zone-policy.rst:110 +msgid "If your computer is on the LAN and you need to SSH into your VyOS box, you would need a rule to allow it in the LAN-Local ruleset. If you want to access a webpage from your VyOS box, you need a rule to allow it in the Local-LAN ruleset." +msgstr "Si su computadora está en la LAN y necesita SSH en su caja VyOS, necesitará una regla para permitirlo en el conjunto de reglas LAN-Local. Si desea acceder a una página web desde su caja VyOS, necesita una regla para permitirlo en el conjunto de reglas de LAN local." + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:44 +msgid "Image name: vyos-1.4-rolling-202110310317-amd64.iso" +msgstr "Nombre de la imagen: vyos-1.4-rolling-202110310317-amd64.iso" + +#: ../../configexamples/zone-policy.rst:103 +msgid "In VyOS, you have to have unique Ruleset names. In the event of overlap, I add a \"-6\" to the end of v6 rulesets. eg. LAN-DMZ, LAN-DMZ-6. This allows for each auto-completion and uniqueness." +msgstr "En VyOS, debe tener nombres de conjuntos de reglas únicos. En caso de superposición, agrego un "-6" al final de los conjuntos de reglas v6. p.ej. LAN-DMZ, LAN-DMZ-6. Esto permite que cada autocompletado y singularidad." + +#: ../../configexamples/zone-policy.rst:167 +msgid "In VyOS you must have the interfaces created before you can apply it to the zone and the rulesets must be created prior to applying it to a zone-policy." +msgstr "En VyOS, debe tener las interfaces creadas antes de poder aplicarlas a la zona y los conjuntos de reglas deben crearse antes de aplicarlas a una política de zona." + +#: ../../configexamples/zone-policy.rst:18 +msgid "In :vytask:`T2199` the syntax of the zone configuration was changed. The zone configuration moved from ``zone-policy zone `` to ``firewall zone ``." +msgstr "En :vytask:`T2199` se cambió la sintaxis de la configuración de zona. La configuración de la zona se movió de ``zone-policy zone `` a `` zona de cortafuegos ``." + +#: ../../configexamples/zone-policy.rst:115 +msgid "In rules, it is good to keep them named consistently. As the number of rules you have grows, the more consistency you have, the easier your life will be." +msgstr "En las reglas, es bueno mantenerlas nombradas consistentemente. A medida que crezca el número de reglas que tenga, cuanta más consistencia tenga, más fácil será su vida." + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:176 +msgid "In the above examples, 1,2,ffff are all chosen by you. You can use 1-ffff (1-65535)." +msgstr "En los ejemplos anteriores, usted elige 1,2,ffff. Puede usar 1-ffff (1-65535)." + +#: ../../configexamples/qos.rst:157 +msgid "In the end, on the router “VyOS2” we will set outgoing bandwidth limits between the “VyOS3” and “VyOS1” routers. Let's set a limit for IP 10.1.1.100 = 5 Mbps(Tx). We will check the result of the work with the help of the “iPerf” utility." +msgstr "Al final, en el enrutador “VyOS2” estableceremos límites de ancho de banda saliente entre los enrutadores “VyOS3” y “VyOS1”. Establezcamos un límite para IP 10.1.1.100 = 5 Mbps (Tx). Verificaremos el resultado del trabajo con la ayuda de la utilidad "iPerf"." + +#: ../../configexamples/qos.rst:35 +msgid "In the end, we will configure the traffic shaper using QoS mechanisms on the “VYOS2” router." +msgstr "Al final, configuraremos el formador de tráfico utilizando mecanismos de QoS en el enrutador "VYOS2"." + +#: ../../configexamples/nmp.rst:66 +msgid "In the end, you'll get a powerful instrument for monitoring the VyOS systems." +msgstr "Al final, obtendrá un poderoso instrumento para monitorear los sistemas VyOS." + +#: ../../configexamples/zone-policy.rst:377 +msgid "In the end, you will end up with something like this config. I took out everything but the Firewall, Interfaces, and zone-policy sections. It is long enough as is." +msgstr "Al final, terminará con algo como esta configuración. Eliminé todo excepto las secciones Firewall, Interfaces y zone-policy. Es lo suficientemente largo como está." + +#: ../../configexamples/ha.rst:154 +msgid "In this case, the hardware router has a different IP, so it would be" +msgstr "En este caso, el enrutador de hardware tiene una IP diferente, por lo que sería" + +#: ../../configexamples/qos.rst:12 +msgid "In this case, we'll try to make a simple lab using QoS and the general ability of the VyOS system. We recommend you to go through the main article about `QoS `_ first." +msgstr "En este caso, intentaremos hacer un laboratorio simple usando QoS y la capacidad general del sistema VyOS. Le recomendamos leer el artículo principal sobre `QoS `_ primero." + +#: ../../configexamples/zone-policy.rst:365 +msgid "In this case, we are setting the v6 ruleset that represents traffic sourced from the LAN, destined for the DMZ. Because the zone-policy firewall syntax is a little awkward, I keep it straight by thinking of it backwards." +msgstr "En este caso, estamos configurando el conjunto de reglas v6 que representa el tráfico procedente de la LAN, destinado a la DMZ. Debido a que la sintaxis del cortafuegos de política de zona es un poco incómoda, la mantengo clara al pensar en ella al revés." + +#: ../../configexamples/ha.rst:45 +msgid "In this document, we have been allocated 203.0.113.0/24 by our upstream provider, which we are publishing on VLAN100." +msgstr "En este documento, nuestro proveedor ascendente nos ha asignado 203.0.113.0/24, que estamos publicando en VLAN100." + +#: ../../configexamples/wan-load-balancing.rst:76 +msgid "In this example, eth0 is the primary interface and eth1 is the secondary interface. To provide simple failover functionality. If eth0 fails, eth1 takes over." +msgstr "En este ejemplo, eth0 es la interfaz principal y eth1 es la interfaz secundaria. Para proporcionar una funcionalidad de conmutación por error simple. Si eth0 falla, eth1 se hace cargo." + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:42 +msgid "In this example OpenVPN will be setup with a client certificate and username / password authentication." +msgstr "En este ejemplo, OpenVPN se configurará con un certificado de cliente y autenticación de nombre de usuario/contraseña." + +#: ../../configexamples/wan-load-balancing.rst:158 +msgid "In this example two LAN interfaces exist in different subnets instead of one like in the previous examples:" +msgstr "En este ejemplo, existen dos interfaces LAN en diferentes subredes en lugar de una como en los ejemplos anteriores:" + +#: ../../configexamples/zone-policy.rst:107 +msgid "In this example we have 4 zones. LAN, WAN, DMZ, Local. The local zone is the firewall itself." +msgstr "En este ejemplo tenemos 4 zonas. LAN, WAN, DMZ, locales. La zona local es el propio cortafuegos." + +#: ../../configexamples/zone-policy.rst:50 +msgid "Inbound WAN connect to DMZ host." +msgstr "Conexión WAN entrante al host DMZ." + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:189 +msgid "Information about Ethernet Virtual Private Networks" +msgstr "Información sobre Redes Privadas Virtuales Ethernet" + +#: ../../configexamples/segment-routing-isis.rst:223 +msgid "Information about prefix-sid and label-operation from VyOS" +msgstr "Información sobre prefijo-sid y etiqueta-operación de VyOS" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:3 +msgid "Inter-VRF Routing over VRF Lite" +msgstr "Enrutamiento entre VRF sobre VRF Lite" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:603 +msgid "Inter-VRF routing is a well-known solution to address complex routing scenarios that enable -in a dynamic way- to leak routes between VRFs. Is recommended to take special consideration while designing route-targets and its application as it can minimize future interventions while creating a new VRF will automatically take the desired effect in its propagation." +msgstr "El enrutamiento entre VRF es una solución reconocida para abordar escenarios de enrutamiento complejos que permiten, de forma dinámica, filtrar rutas entre VRF. Se recomienda tener especial consideración al diseñar objetivos de ruta y su aplicación, ya que puede minimizar futuras intervenciones mientras que la creación de un nuevo VRF automáticamente tendrá el efecto deseado en su propagación." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:49 +msgid "Interface and routing configuration:" +msgstr "Interface and routing configuration:" + +#: ../../configexamples/ha.rst:195 +msgid "Internal Network" +msgstr "Red interna" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:30 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:108 +msgid "Internet" +msgstr "Internet" + +#: ../../configexamples/zone-policy.rst:40 +msgid "Internet - 192.168.200.100 - TCP/25" +msgstr "Internet - 192.168.200.100 - TCP/25" + +#: ../../configexamples/zone-policy.rst:39 +msgid "Internet - 192.168.200.100 - TCP/443" +msgstr "Internet - 192.168.200.100 - TCP/443" + +#: ../../configexamples/zone-policy.rst:41 +msgid "Internet - 192.168.200.100 - TCP/53" +msgstr "Internet - 192.168.200.100 - TCP/53" + +#: ../../configexamples/zone-policy.rst:38 +msgid "Internet - 192.168.200.100 - TCP/80" +msgstr "Internet - 192.168.200.100 - TCP/80" + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:79 +msgid "It's important to note that all your existing configurations will be migrated automatically on image upgrade. Nothing to do on your side." +msgstr "Es importante tener en cuenta que todas sus configuraciones existentes se migrarán automáticamente en la actualización de la imagen. Nada que hacer de tu lado." + +#: ../../configexamples/ha.rst:163 +msgid "It is assumed that the routers provided by upstream are capable of acting as a default router, add that as a static route." +msgstr "Se supone que los enrutadores proporcionados por upstream son capaces de actuar como un enrutador predeterminado, agregue eso como una ruta estática." + +#: ../../configexamples/zone-policy.rst:140 +msgid "It is good practice to log both accepted and denied traffic. It can save you significant headaches when trying to troubleshoot a connectivity issue." +msgstr "Es una buena práctica registrar tanto el tráfico aceptado como el denegado. Puede ahorrarle dolores de cabeza significativos cuando intente solucionar un problema de conectividad." + +#: ../../configexamples/zone-policy.rst:60 +msgid "It will look something like this:" +msgstr "Se verá algo como esto:" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:13 +msgid "Keep networks isolated is -in general- a good principle, but there are cases where you might need that some network can access other in a different VRF." +msgstr "Mantener las redes aisladas es, en general, un buen principio, pero hay casos en los que es posible que necesite que una red pueda acceder a otra en un VRF diferente." + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:4 +msgid "L3VPN EVPN with VyOS" +msgstr "L3VPN EVPN con VyOS" + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:None +msgid "L3VPN EVPN with VyOS topology image" +msgstr "Imagen de topología L3VPN EVPN con VyOS" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:83 +msgid "L3VPN configuration parameters table:" +msgstr "Tabla de parámetros de configuración de L3VPN:" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:4 +msgid "L3VPN for Hub-and-Spoke connectivity with VyOS" +msgstr "L3VPN para conectividad Hub-and-Spoke con VyOS" + +#: ../../configexamples/zone-policy.rst:392 +msgid "LAN, WAN, DMZ, local and TUN (tunnel)" +msgstr "LAN, WAN, DMZ, local y TUN (túnel)" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:87 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:102 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:701 +msgid "LAN1" +msgstr "LAN1" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:575 +msgid "LAN1 to LAN2" +msgstr "LAN1 a LAN2" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:520 +msgid "LAN1 to Outside" +msgstr "LAN1 al exterior" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:89 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:104 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:713 +msgid "LAN2" +msgstr "LAN2" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:27 +msgid "LAN 1" +msgstr "Y 1" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:28 +msgid "LAN 2" +msgstr "Y 2" + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:100 +msgid "LAN Configuration" +msgstr "Configuración LAN" + +#: ../../configexamples/zone-policy.rst:47 +msgid "LAN and DMZ hosts have basic outbound access: Web, FTP, SSH." +msgstr "Los hosts LAN y DMZ tienen acceso de salida básico: Web, FTP, SSH." + +#: ../../configexamples/zone-policy.rst:48 +msgid "LAN can access DMZ resources." +msgstr "La LAN puede acceder a los recursos de la DMZ." + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:551 +msgid "Let’s check IPv4 routing and MPLS information on provider nodes (same procedure for all P nodes):" +msgstr "Verifiquemos el enrutamiento IPv4 y la información de MPLS en los nodos del proveedor (el mismo procedimiento para todos los nodos P):" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:25 +msgid "Let’s say we have a requirement to have multiple networks." +msgstr "Digamos que tenemos un requisito para tener varias redes." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:22 +msgid "Local subnets should be able to reach internet using source nat." +msgstr "Local subnets should be able to reach internet using source nat." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:58 +msgid "MP-BGP or MultiProtocol BGP introduces two main concepts to solve this limitation: - Route Distinguisher (RD): Is used to distinguish between different VRFs –called VPNs- inside the BGP Process. The RD is appended to each IPv4 Network that is advertised into BGP for that VPN making it a unique VPNv4 route. - Route Target (RT): This is an extended BGP community append to the VPNv4 route in the Import/Export process. When a route passes from the VRF routing table into the BGP process it will add the configured export extended community(ies) for that VPN. When that route needs to go from BGP into the VRF routing table will only pass if that given VPN import policy matches any of the appended community(ies) into that prefix." +msgstr "MP-BGP o MultiProtocol BGP introduce dos conceptos principales para solucionar esta limitación: - Distinguidor de ruta (RD): se utiliza para distinguir entre diferentes VRF -llamados VPN- dentro del proceso BGP. El RD se agrega a cada red IPv4 que se anuncia en BGP para esa VPN, lo que la convierte en una ruta VPNv4 única. - Destino de ruta (RT): esta es una comunidad BGP extendida que se agrega a la ruta VPNv4 en el proceso de importación/exportación. Cuando una ruta pasa de la tabla de enrutamiento VRF al proceso BGP, agregará la(s) comunidad(es) extendida(s) de exportación configurada(s) para esa VPN. Cuando esa ruta necesita ir de BGP a la tabla de enrutamiento VRF solo pasará si esa política de importación de VPN dada coincide con cualquiera de las comunidades adjuntas en ese prefijo." + +#: ../../configexamples/qos.rst:60 +msgid "Main rules:" +msgstr "Reglas principales:" + +#: ../../configexamples/ha.rst:414 +msgid "Make sure you can ping 10.254.60.1 and .2 from both routers." +msgstr "Asegúrese de que puede hacer ping a 10.254.60.1 y .2 desde ambos enrutadores." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:29 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:91 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:106 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:727 +msgid "Management" +msgstr "Gestión" + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:26 +msgid "Management VRF" +msgstr "Gestión VRF" + +#: ../../configexamples/ha.rst:114 +msgid "Many other Hypervisors do this, and I'm hoping that this document will be expanded to document how to do this for others." +msgstr "Muchos otros hipervisores hacen esto, y espero que este documento se amplíe para documentar cómo hacer esto para otros." + +#: ../../configexamples/ha.rst:297 +msgid "Masquerade Traffic originating from 10.200.201.0/24 that is heading out the public interface." +msgstr "Tráfico de enmascaramiento que se origina en 10.200.201.0/24 que se dirige hacia la interfaz pública." + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:254 +msgid "Monitoring" +msgstr "Supervisión" + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:162 +msgid "Multiple LAN/DMZ Setup" +msgstr "Configuración de múltiples LAN/DMZ" + +#: ../../configexamples/ha.rst:295 +msgid "NAT and conntrack-sync" +msgstr "NAT y conntrack-sync" + +#: ../../configexamples/nmp.rst:7 +msgid "NMP example" +msgstr "ejemplo de NMP" + +#: ../../configexamples/zone-policy.rst:23 +msgid "Native IPv4 and IPv6" +msgstr "IPv4 e IPv6 nativos" + +#: ../../configexamples/ha.rst:86 +msgid "Network Cabling" +msgstr "Cableado de red" + +#: ../../configexamples/pppoe-ipv6-basic.rst:18 +msgid "Network Topology" +msgstr "Topología de la red" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:None +#: ../../configexamples/l3vpn-hub-and-spoke.rst:None +#: ../../configexamples/nmp.rst:None +#: ../../configexamples/nmp.rst:None +#: ../../configexamples/nmp.rst:None +#: ../../configexamples/nmp.rst:None +#: ../../configexamples/nmp.rst:None +#: ../../configexamples/nmp.rst:None +#: ../../configexamples/nmp.rst:None +#: ../../configexamples/pppoe-ipv6-basic.rst:None +#: ../../configexamples/qos.rst:None +#: ../../configexamples/qos.rst:None +#: ../../configexamples/qos.rst:None +#: ../../configexamples/qos.rst:None +#: ../../configexamples/qos.rst:None +#: ../../configexamples/qos.rst:None +#: ../../configexamples/qos.rst:None +#: ../../configexamples/qos.rst:None +#: ../../configexamples/qos.rst:None +#: ../../configexamples/qos.rst:None +#: ../../configexamples/wan-load-balancing.rst:None +#: ../../configexamples/wan-load-balancing.rst:None +#: ../../configexamples/zone-policy.rst:None +msgid "Network Topology Diagram" +msgstr "Diagrama de topología de red" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:14 +msgid "Network Topology and requirements" +msgstr "Network Topology and requirements" + +#: ../../configexamples/qos.rst:31 +msgid "Next, we will replace only all CS4 labels on the “VyOS2” router." +msgstr "A continuación, reemplazaremos solo todas las etiquetas CS4 en el enrutador "VyOS2"." + +#: ../../configexamples/nmp.rst:28 +msgid "Next, you just should follow the pictures:" +msgstr "A continuación, solo debes seguir las imágenes:" + +#: ../../configexamples/qos.rst:106 +msgid "Next on the router VyOS2 we will change labels on all incoming traffic only from CS4-> CS6" +msgstr "A continuación, en el enrutador VyOS2, cambiaremos las etiquetas en todo el tráfico entrante solo desde CS4-> CS6" + +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:42 +msgid "Next thing to do, is to create a wireguard keypair on each side. After this, the public key can be displayed, to save for later." +msgstr "Lo siguiente que debe hacer es crear un par de llaves de protección de cables en cada lado. Después de esto, se puede mostrar la clave pública para guardarla más tarde." + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:86 +msgid "Node" +msgstr "Nodo" + +#: ../../configexamples/ha.rst:83 +msgid "Note that router1 is a VM that runs on one of the compute nodes." +msgstr "Tenga en cuenta que el enrutador1 es una máquina virtual que se ejecuta en uno de los nodos de cómputo." + +#: ../../configexamples/pppoe-ipv6-basic.rst:111 +msgid "Note to allow the router to receive DHCPv6 response from ISP. We need to allow packets with source port 547 (server) and destination port 546 (client)." +msgstr "Tenga en cuenta que debe permitir que el enrutador reciba una respuesta DHCPv6 del ISP. Necesitamos permitir paquetes con el puerto de origen 547 (servidor) y el puerto de destino 546 (cliente)." + +#: ../../configexamples/zone-policy.rst:411 +msgid "Notice, none go to WAN since WAN wouldn't have a v6 address on it." +msgstr "Tenga en cuenta que ninguno va a WAN ya que WAN no tendría una dirección v6." + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:831 +msgid "Now, let’s check routing information on out Hub PE:" +msgstr "Ahora, verifiquemos la información de enrutamiento en nuestro Hub PE:" + +#: ../../configexamples/ha.rst:322 +msgid "Now enable replication between nodes. Replace eth0.201 with bond0.201 on the hardware router." +msgstr "Ahora habilite la replicación entre nodos. Reemplace eth0.201 con bond0.201 en el enrutador de hardware." + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:54 +msgid "Now generate all required certificates on the ovpn-server:" +msgstr "Ahora genere todos los certificados necesarios en el servidor ovpn:" + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:144 +msgid "Now the Client is able to ping a public IPv6 address" +msgstr "Ahora el Cliente puede hacer ping a una dirección IPv6 pública" + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:45 +msgid "Now we are able to setup the tunnel interface." +msgstr "Ahora podemos configurar la interfaz del túnel." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:425 +msgid "Now we perform some end-to-end testing" +msgstr "Ahora realizamos algunas pruebas de extremo a extremo" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:636 +msgid "Now we’re checking iBGP status and routes from route-reflector nodes to other devices:" +msgstr "Ahora estamos comprobando el estado iBGP y las rutas desde los nodos reflectores de ruta a otros dispositivos:" + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:57 +msgid "Now you should be able to ping a public IPv6 Address" +msgstr "Ahora debería poder hacer ping a una dirección IPv6 pública" + +#: ../../configexamples/ha.rst:348 +msgid "OSPF Over WireGuard" +msgstr "OSPF sobre WireGuard" + +#: ../../configexamples/ospf-unnumbered.rst:7 +msgid "OSPF unnumbered with ECMP" +msgstr "OSPF sin numerar con ECMP" + +#: ../../configexamples/azure-vpn-bgp.rst:36 +#: ../../configexamples/azure-vpn-dual-bgp.rst:33 +msgid "On-premises address space" +msgstr "Espacio de direcciones local" + +#: ../../configexamples/qos.rst:88 +msgid "On the router, VyOS4 set all traffic as CS4. We have to configure the default class and class for changing all labels from CS0 to CS4" +msgstr "En el enrutador, VyOS4 configuró todo el tráfico como CS4. Tenemos que configurar la clase y la clase predeterminadas para cambiar todas las etiquetas de CS0 a CS4" + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:105 +msgid "Once all routers can be safely remotely managed and the core network is operational, we can now setup the tenant networks." +msgstr "Una vez que todos los enrutadores se puedan administrar de forma remota de manera segura y la red central esté operativa, ahora podemos configurar las redes de inquilinos." + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:87 +msgid "Once all the required certificates and keys are installed, the remaining OpenVPN Server configuration can be carried out." +msgstr "Una vez que se instalan todos los certificados y claves necesarios, se puede llevar a cabo la configuración restante del servidor OpenVPN." + +#: ../../configexamples/zone-policy.rst:355 +msgid "Once you have all of your rulesets built, then you need to create your zone-policy." +msgstr "Una vez que haya creado todos sus conjuntos de reglas, debe crear su política de zona." + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:96 +msgid "One advantage of having the client certificate stored is the ability to create the client configuration." +msgstr "Una ventaja de tener el certificado del cliente almacenado es la capacidad de crear la configuración del cliente." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:47 +msgid "One cable/logical connection between LAN1 and Internet" +msgstr "Un cable/conexión lógica entre LAN1 e Internet" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:46 +msgid "One cable/logical connection between LAN1 and LAN2" +msgstr "Un cable/conexión lógica entre LAN1 y LAN2" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:49 +msgid "One cable/logical connection between LAN1 and Management" +msgstr "Un cable/conexión lógica entre LAN1 y Management" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:48 +msgid "One cable/logical connection between LAN2 and Internet" +msgstr "Un cable/conexión lógica entre LAN2 e Internet" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:50 +msgid "One cable/logical connection between LAN2 and Management" +msgstr "Un cable/conexión lógica entre LAN2 y Management" + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:5 +msgid "OpenVPN with LDAP" +msgstr "OpenVPN con LDAP" + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:None +msgid "OpenVPN with LDAP topology image" +msgstr "OpenVPN con imagen de topología LDAP" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:42 +msgid "Operating system: VyOS" +msgstr "Sistema operativo: VyOS" + +#: ../../configexamples/ha.rst:100 +msgid "Our implementation uses VMware's Distributed Port Groups, which allows VMware to use LACP. This is a part of the ENTERPRISE licence, and is not available on a free licence. If you are implementing this and do not have access to DPGs, you should not use VMware, and use some other virtualization platform instead." +msgstr "Nuestra implementación utiliza los grupos de puertos distribuidos de VMware, lo que permite que VMware use LACP. Esto es parte de la licencia ENTERPRISE y no está disponible en una licencia gratuita. Si está implementando esto y no tiene acceso a los DPG, no debe usar VMware y usar alguna otra plataforma de virtualización en su lugar." + +#: ../../configexamples/ha.rst:52 +msgid "Our routers are going to have a floating IP address of 203.0.113.1, and use .2 and .3 as their fixed IPs." +msgstr "Nuestros enrutadores tendrán una dirección IP flotante de 203.0.113.1 y usarán .2 y .3 como IP fijas." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:23 +#: ../../configexamples/wan-load-balancing.rst:23 +#: ../../configexamples/wan-load-balancing.rst:75 +#: ../../configexamples/wan-load-balancing.rst:104 +#: ../../configexamples/wan-load-balancing.rst:135 +msgid "Overview" +msgstr "Descripción general" + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:82 +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:123 +msgid "PE1" +msgstr "PE1" + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:17 +msgid "PE1 is located in an industrial area that holds multiple office buildings. All customers have a site in this area." +msgstr "PE1 está ubicado en una zona industrial que alberga varios edificios de oficinas. Todos los clientes tienen un sitio en esta área." + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:88 +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:129 +msgid "PE2" +msgstr "PE2" + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:19 +msgid "PE2 is located in a smaller area where by coincidence two customers (blue and red) share an office building." +msgstr "PE2 está ubicado en un área más pequeña donde por coincidencia dos clientes (azul y rojo) comparten un edificio de oficinas." + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:94 +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:135 +msgid "PE3" +msgstr "PE3" + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:21 +msgid "PE3 is located in a smaller area where by coincidence two customers (blue and green) are located." +msgstr "PE3 está ubicado en un área más pequeña donde por coincidencia se ubican dos clientes (azul y verde)." + +#: ../../configexamples/pppoe-ipv6-basic.rst:7 +msgid "PPPoE IPv6 Basic Setup for Home Network" +msgstr "Configuración básica de PPPoE IPv6 para la red doméstica" + +#: ../../configexamples/pppoe-ipv6-basic.rst:29 +msgid "PPPoE Setup" +msgstr "Configuración de PPPoE" + +#: ../../configexamples/segment-routing-isis.rst:255 +msgid "Ping between VyOS-P1 / VyOS-P2 to confirm reachability:" +msgstr "Haga ping entre VyOS-P1 / VyOS-P2 para confirmar la accesibilidad:" + +#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:73 +msgid "Ping the Client from the DHCP Server." +msgstr "Haga ping al cliente desde el servidor DHCP." + +#: ../../configexamples/wan-load-balancing.rst:26 +msgid "Pings will be sent to four targets for health testing (33.44.55.66, 44.55.66.77, 55.66.77.88 and 66.77.88.99)." +msgstr "Se enviarán pings a cuatro objetivos para realizar pruebas de salud (33.44.55.66, 44.55.66.77, 55.66.77.88 y 66.77.88.99)." + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:128 +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:195 +msgid "Please note, 'autonomous-flag' and 'on-link-flag' are enabled by default, 'valid-lifetime' and 'preferred-lifetime' are set to default values of 30 days and 4 hours respectively." +msgstr "Tenga en cuenta que 'autonomous-flag' y 'on-link-flag' están habilitados de forma predeterminada, 'valid-lifetime' y 'preferred-lifetime' tienen valores predeterminados de 30 días y 4 horas respectivamente." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:5 +msgid "Policy-Based Site-to-Site VPN and Firewall Configuration" +msgstr "Policy-Based Site-to-Site VPN and Firewall Configuration" + +#: ../../configexamples/azure-vpn-bgp.rst:48 +#: ../../configexamples/azure-vpn-dual-bgp.rst:47 +msgid "Pre-shared key" +msgstr "Clave precompartida" + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:14 +#: ../../configexamples/azure-vpn-bgp.rst:16 +#: ../../configexamples/azure-vpn-dual-bgp.rst:13 +msgid "Prerequisites" +msgstr "requisitos previos" + +#: ../../configexamples/ha.rst:520 +msgid "Priorities" +msgstr "Prioridades" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:29 +msgid "Protect the router on 'WAN' interface, allowing only ipsec connections and ssh access from trusted ips." +msgstr "Protect the router on 'WAN' interface, allowing only ipsec connections and ssh access from trusted ips." + +#: ../../configexamples/ha.rst:230 +msgid "Public Network" +msgstr "Red pública" + +#: ../../configexamples/qos.rst:7 +msgid "QoS example" +msgstr "Ejemplo de calidad del servicio" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:100 +#: ../../configexamples/l3vpn-hub-and-spoke.rst:86 +msgid "RD" +msgstr "rd" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:97 +msgid "RD & RT Schema" +msgstr "Esquema RD y RT" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:100 +msgid "RT" +msgstr "RT" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:86 +msgid "RT export" +msgstr "Exportación RT" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:86 +msgid "RT import" +msgstr "Importación de RT" + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:73 +msgid "Regular VyOS users will notice that the BGP syntax has changed in VyOS 1.4 from even the prior post about this subject. This is due to T1711, where it was finally decided to get rid of the redundant BGP ASN (Autonomous System Number) specification on the CLI and move it to a single leaf node (set protocols bgp local-as)." +msgstr "Los usuarios habituales de VyOS notarán que la sintaxis de BGP ha cambiado en VyOS 1.4 incluso desde la publicación anterior sobre este tema. Esto se debe a T1711, donde finalmente se decidió deshacerse de la especificación BGP ASN (Número de sistema autónomo) redundante en la CLI y moverla a un nodo de hoja única (establecer protocolos bgp local-as)." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:120 +msgid "Remote Networks" +msgstr "Redes remotas" + +#: ../../configexamples/ha.rst:368 +msgid "Replace the 203.0.113.3 with whatever the other router's IP address is." +msgstr "Reemplace 203.0.113.3 con la dirección IP del otro enrutador." + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:20 +msgid "Requested a \"Regular Tunnel\". You want to choose a location that is closest to your physical location for the best response time." +msgstr "Solicitó un "túnel regular". Desea elegir una ubicación que esté más cerca de su ubicación física para obtener el mejor tiempo de respuesta." + +#: ../../configexamples/bgp-ipv6-unnumbered.rst:55 +#: ../../configexamples/ospf-unnumbered.rst:50 +msgid "Results" +msgstr "Resultados" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:86 +msgid "Role" +msgstr "Rol" + +#: ../../configexamples/azure-vpn-dual-bgp.rst:6 +msgid "Route-Based Redundant Site-to-Site VPN to Azure (BGP over IKEv2/IPsec)" +msgstr "VPN de sitio a sitio redundante basada en rutas a Azure (BGP sobre IKEv2/IPsec)" + +#: ../../configexamples/azure-vpn-bgp.rst:6 +msgid "Route-Based Site-to-Site VPN to Azure (BGP over IKEv2/IPsec)" +msgstr "VPN de sitio a sitio basada en rutas a Azure (BGP sobre IKEv2/IPsec)" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:767 +msgid "Route-Filtering" +msgstr "Filtrado de rutas" + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:110 +msgid "Routed /48. This is something you can request by clicking the \"Assign /48\" link in the Tunnelbroker.net tunnel config. It allows you to have up to 65k" +msgstr "Enrutado /48. Esto es algo que puede solicitar haciendo clic en el enlace "Asignar /48" en la configuración del túnel Tunnelbroker.net. Te permite tener hasta 65k" + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:107 +msgid "Routed /64. This is the default assignment. In IPv6-land, it's good for a single \"LAN\", and is somewhat equivalent to a /24." +msgstr "Enrutado /64. Esta es la asignación predeterminada. En IPv6-land, es bueno para una sola "LAN" y es algo equivalente a /24." + +#: ../../configexamples/bgp-ipv6-unnumbered.rst:14 +#: ../../configexamples/bgp-ipv6-unnumbered.rst:57 +#: ../../configexamples/ospf-unnumbered.rst:14 +#: ../../configexamples/ospf-unnumbered.rst:52 +msgid "Router A:" +msgstr "Enrutador A:" + +#: ../../configexamples/pppoe-ipv6-basic.rst:61 +msgid "Router Advertisement" +msgstr "Anuncio de enrutador" + +#: ../../configexamples/bgp-ipv6-unnumbered.rst:34 +#: ../../configexamples/bgp-ipv6-unnumbered.rst:118 +#: ../../configexamples/ospf-unnumbered.rst:31 +#: ../../configexamples/ospf-unnumbered.rst:87 +msgid "Router B:" +msgstr "Enrutador B:" + +#: ../../configexamples/ha.rst:538 +msgid "Router id's must be unique." +msgstr "La identificación del enrutador debe ser única." + +#: ../../configexamples/zone-policy.rst:98 +msgid "Ruleset are created per zone-pair-direction." +msgstr "El conjunto de reglas se crea por zona-par-dirección." + +#: ../../configexamples/segment-routing-isis.rst:7 +msgid "Segment-routing IS-IS example" +msgstr "Ejemplo IS-IS de enrutamiento de segmento" + +#: ../../configexamples/pppoe-ipv6-basic.rst:73 +msgid "Set DNS server address in the advertisement so that clients can obtain it by using RDNSS option. Most operating systems (Windows, Linux, Mac) should already support it." +msgstr "Configure la dirección del servidor DNS en el anuncio para que los clientes puedan obtenerla mediante la opción RDNSS. La mayoría de los sistemas operativos (Windows, Linux, Mac) ya deberían admitirlo." + +#: ../../configexamples/qos.rst:40 +msgid "Set IP addresses on all VPCs and a default gateway 172.17.1.1. We'll use in this case only static routes. On the VyOS3 router, we need to change the 'dscp' labels for the VPCs. To do this, we use this configuration." +msgstr "Establezca direcciones IP en todas las VPC y una puerta de enlace predeterminada 172.17.1.1. Usaremos en este caso solo rutas estáticas. En el enrutador VyOS3, debemos cambiar las etiquetas 'dscp' para las VPC. Para hacer esto, usamos esta configuración." + +#: ../../configexamples/pppoe-ipv6-basic.rst:72 +msgid "Set MTU in advertisement to 1492 because of PPPoE header overhead." +msgstr "Establezca MTU en el anuncio en 1492 debido a la sobrecarga del encabezado PPPoE." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:143 +msgid "Set the VRF name and Table ID, set interface address and bind it to the VRF. Last add the static route to the remote network." +msgstr "Establezca el nombre de VRF y la ID de la tabla, establezca la dirección de la interfaz y vincúlela al VRF. Por último, agregue la ruta estática a la red remota." + +#: ../../configexamples/ha.rst:522 +msgid "Set the cost on the secondary links to be 200. This means that they will not be used unless the primary links are down." +msgstr "Establezca el costo de los enlaces secundarios en 200. Esto significa que no se utilizarán a menos que los enlaces principales estén caídos." + +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:27 +msgid "Set the local subnet on eth2 and the public ip address eth1 on each site." +msgstr "Configure la subred local en eth2 y la dirección IP pública eth1 en cada sitio." + +#: ../../configexamples/qos.rst:159 +msgid "Set up bandwidth limits on the eth2 interface of the router “VyOS2”." +msgstr "Configure límites de ancho de banda en la interfaz eth2 del enrutador "VyOS2"." + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:139 +msgid "Sets your LAN interface's IP address" +msgstr "Establece la dirección IP de su interfaz LAN" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:235 +msgid "Setting BGP global local-as as well inside the VRF. Redistribute static routes to inject configured networks into the BGP process but still inside the VRF." +msgstr "Configuración local global de BGP, también dentro del VRF. Redistribuya rutas estáticas para inyectar redes configuradas en el proceso BGP pero aún dentro del VRF." + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:51 +msgid "Setup the ipv6 default route to the tunnel interface" +msgstr "Configure la ruta predeterminada ipv6 a la interfaz del túnel" + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:148 +msgid "Show routes for all VRFs" +msgstr "Mostrar rutas para todos los VRF" + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:206 +msgid "Similarly, to attach the firewall, you would use `set interfaces ethernet eth0 firewall in ipv6-name` or `et firewall zone LOCAL from WAN firewall ipv6-name`." +msgstr "De manera similar, para conectar el firewall, usaría `set interfaces ethernet eth0 firewall in ipv6-name` o `et firewall zone LOCAL from WAN firewall ipv6-name`." + +#: ../../configexamples/pppoe-ipv6-basic.rst:78 +msgid "Since some ISPs disconnects continuous connection for every 2~3 days, we set ``valid-lifetime`` to 2 days to allow PC for phasing out old address." +msgstr "Dado que algunos ISP desconectan la conexión continua cada 2 o 3 días, configuramos la "vida útil válida" en 2 días para permitir que la PC elimine gradualmente la dirección anterior." + +#: ../../configexamples/zone-policy.rst:236 +msgid "Since we have 4 zones, we need to setup the following rulesets." +msgstr "Como tenemos 4 zonas, necesitamos configurar los siguientes conjuntos de reglas." + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:119 +msgid "Single LAN Setup" +msgstr "Configuración de LAN única" + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:121 +msgid "Single LAN setup where eth2 is your LAN interface. Use the Tunnelbroker Routed /64 prefix:" +msgstr "Configuración de LAN única donde eth2 es su interfaz LAN. Utilice el prefijo /64 enrutado de Tunnelbroker:" + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:179 +msgid "So, when your LAN is eth1, your DMZ is eth2, your cameras are on eth3, etc:" +msgstr "Entonces, cuando su LAN es eth1, su DMZ es eth2, sus cámaras están en eth3, etc.:" + +#: ../../configexamples/zone-policy.rst:416 +msgid "Something like:" +msgstr "Algo como:" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:91 +#: ../../configexamples/l3vpn-hub-and-spoke.rst:93 +msgid "Spoke" +msgstr "Habló" + +#: ../../configexamples/zone-policy.rst:358 +msgid "Start by setting the interface and default action for each zone." +msgstr "Comience configurando la interfaz y la acción predeterminada para cada zona." + +#: ../../configexamples/zone-policy.rst:8 +msgid "Starting from VyOS 1.4-rolling-202308040557, a new firewall structure can be found on all vyos instalations, and zone based firewall is no longer supported. Documentation for most of the new firewall CLI can be found in the `firewall `_ chapter. The legacy firewall is still available for versions before 1.4-rolling-202308040557 and can be found in the :ref:`firewall-legacy` chapter. The examples in this section use the legacy firewall configuration commands, since this feature has been removed in earlier releases." +msgstr "Starting from VyOS 1.4-rolling-202308040557, a new firewall structure can be found on all vyos instalations, and zone based firewall is no longer supported. Documentation for most of the new firewall CLI can be found in the `firewall `_ chapter. The legacy firewall is still available for versions before 1.4-rolling-202308040557 and can be found in the :ref:`firewall-legacy` chapter. The examples in this section use the legacy firewall configuration commands, since this feature has been removed in earlier releases." + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:105 +msgid "Step-1: Configuring IGP and enabling MPLS LDP" +msgstr "Paso 1: Configuración de IGP y habilitación de MPLS LDP" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:322 +msgid "Step-2: Configuring iBGP for L3VPN control-plane" +msgstr "Paso 2: Configuración de iBGP para el plano de control L3VPN" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:407 +msgid "Step-3: Configuring L3VPN VRFs on PE nodes" +msgstr "Paso 3: Configuración de L3VPN VRF en nodos PE" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:482 +msgid "Step-4: Configuring CE nodes" +msgstr "Paso 4: Configuración de nodos CE" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:545 +msgid "Step-5: Verification" +msgstr "Paso 5: Verificación" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:137 +msgid "Step 1: VRF and Configurations to remote networks" +msgstr "Paso 1: VRF y Configuraciones a redes remotas" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:228 +msgid "Step 2: BGP Configuration for VRF-Lite" +msgstr "Paso 2: Configuración de BGP para VRF-Lite" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:287 +msgid "Step 3: VPN Configuration" +msgstr "Paso 3: Configuración de VPN" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:422 +msgid "Step 4: End to End verification" +msgstr "Paso 4: verificación de extremo a extremo" + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:103 +msgid "Tenant networks (VRFs)" +msgstr "Redes de inquilinos (VRF)" + +#: ../../configexamples/ha.rst:489 +msgid "Test OSPF" +msgstr "Prueba OSPF" + +#: ../../configexamples/ha.rst:412 +msgid "Test WireGuard" +msgstr "Prueba WireGuard" + +#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:71 +msgid "Test the result" +msgstr "Prueba el resultado" + +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:6 +msgid "Testdate: 2023-02-24" +msgstr "Fecha de prueba: 2023-02-24" + +#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:6 +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:6 +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:7 +msgid "Testdate: 2023-05-11" +msgstr "Fecha de prueba: 2023-05-11" + +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:6 +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:7 +msgid "Testdate: 2023-08-31" +msgstr "Testdate: 2023-08-31" + +#: ../../configexamples/ha.rst:276 +#: ../../configexamples/ha.rst:337 +msgid "Testing" +msgstr "Pruebas" + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:143 +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:85 +msgid "Testing and debugging" +msgstr "Prueba y depuración" + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:164 +msgid "That's how you can expand the example above. Use the `Routed /48` information. This allows you to assign a different /64 to every interface, LAN, or even device. Or you could break your network into smaller chunks like /56 or /60." +msgstr "Así es como puedes ampliar el ejemplo anterior. Utilice la información `Routed /48`. Esto le permite asignar un /64 diferente a cada interfaz, LAN o incluso dispositivo. O podría dividir su red en partes más pequeñas como /56 o /60." + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:23 +msgid "The Lab asume a full running Active Directory on the Windows Server. Here are some PowerShell commands to quickly add a Test Active Directory." +msgstr "El laboratorio asume un Active Directory en pleno funcionamiento en el servidor de Windows. Estos son algunos comandos de PowerShell para agregar rápidamente una prueba de Active Directory." + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:15 +msgid "The Topology are consists of:" +msgstr "La topología consta de:" + +#: ../../configexamples/zone-policy.rst:57 +msgid "The VyOS interface is assigned the .1/:1 address of their respective networks. WAN is on VLAN 10, LAN on VLAN 20, and DMZ on VLAN 30." +msgstr "A la interfaz de VyOS se le asigna la dirección .1/:1 de sus respectivas redes. WAN está en VLAN 10, LAN en VLAN 20 y DMZ en VLAN 30." + +#: ../../configexamples/ha.rst:30 +msgid "The ``commit`` command is implied after every section. If you make an error, ``commit`` will warn you and you can fix it before getting too far into things. Please ensure you commit early and commit often." +msgstr "El comando ``commit`` está implícito después de cada sección. Si comete un error, ``commit`` le avisará y podrá corregirlo antes de profundizar demasiado en las cosas. Asegúrese de comprometerse temprano y con frecuencia." + +#: ../../configexamples/ha.rst:543 +msgid "The ``redistribute ospf`` command is there purely as an example of how this can be expanded. In this walkthrough, it will be filtered by BGPOUT rule 10000, as it is not 203.0.113.0/24." +msgstr "El comando ``redistribute ospf`` está ahí simplemente como un ejemplo de cómo se puede expandir esto. En este tutorial, se filtrará por la regla 10000 de BGPOUT, ya que no es 203.0.113.0/24." + +#: ../../configexamples/segment-routing-isis.rst:19 +msgid "The below configuration is used as example where we keep focus on VyOS-P1/VyOS-P2/XRv-P3 which we share the settings." +msgstr "La siguiente configuración se usa como ejemplo en el que nos enfocamos en VyOS-P1/VyOS-P2/XRv-P3, cuya configuración compartimos." + +#: ../../configexamples/wan-load-balancing.rst:82 +msgid "The configuration steps are the same as in the previous example, except rule 10. So we keep the configuration, remove rule 10 and add a new rule for the failover mode:" +msgstr "Los pasos de configuración son los mismos que en el ejemplo anterior, excepto la regla 10. Así que mantenemos la configuración, eliminamos la regla 10 y agregamos una nueva regla para el modo de conmutación por error:" + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:28 +msgid "The example topology has 2 VyOS routers. One as The WAN Router and on as a Client, to test a single LAN setup" +msgstr "La topología de ejemplo tiene 2 enrutadores VyOS. Uno como enrutador WAN y otro como cliente, para probar una única configuración de LAN" + +#: ../../configexamples/zone-policy.rst:133 +msgid "The first two rules are to deal with the idiosyncrasies of VyOS and iptables." +msgstr "Las dos primeras reglas tienen que ver con las idiosincrasias de VyOS e iptables." + +#: ../../configexamples/zone-policy.rst:182 +msgid "The following are the rules that were created for this example (may not be complete), both in IPv4 and IPv6. If there is no IP specified, then the source/destination address is not explicit." +msgstr "Las siguientes son las reglas que se crearon para este ejemplo (puede que no estén completas), tanto en IPv4 como en IPv6. Si no se especifica una IP, la dirección de origen/destino no es explícita." + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:40 +msgid "The following software was used in the creation of this document:" +msgstr "El siguiente software se utilizó en la creación de este documento:" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:122 +msgid "The following template configuration can be used in each remote router based in our topology." +msgstr "La siguiente configuración de plantilla se puede utilizar en cada enrutador remoto según nuestra topología." + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:169 +msgid "The format of these addresses:" +msgstr "El formato de estas direcciones:" + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:42 +msgid "The lab I built is using a VRF (called **mgmt**) to provide out-of-band SSH access to the PE (Provider Edge) routers." +msgstr "El laboratorio que construí usa un VRF (llamado **mgmt**) para proporcionar acceso SSH fuera de banda a los enrutadores PE (Provider Edge)." + +#: ../../configexamples/index.rst:30 +msgid "The next pages contains automatic full tested configuration examples." +msgstr "Las siguientes páginas contienen ejemplos de configuración probados completamente automáticos." + +#: ../../configexamples/wan-load-balancing.rst:97 +msgid "The previous example used the failover command to send traffic through eth1 if eth0 fails. In this example, failover functionality is provided by rule order." +msgstr "El ejemplo anterior usó el comando de conmutación por error para enviar tráfico a través de eth1 si falla eth0. En este ejemplo, el orden de las reglas proporciona la funcionalidad de conmutación por error." + +#: ../../configexamples/index.rst:38 +msgid "The process will do the following steps:" +msgstr "El proceso seguirá los siguientes pasos:" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:16 +msgid "The scope of this document is to cover such cases in a dynamic way without the use of MPLS-LDP." +msgstr "El alcance de este documento es cubrir tales casos de forma dinámica sin el uso de MPLS-LDP." + +#: ../../configexamples/wan-load-balancing.rst:14 +msgid "The setup used in this example is shown in the following diagram:" +msgstr "La configuración utilizada en este ejemplo se muestra en el siguiente diagrama:" + +#: ../../configexamples/ha.rst:339 +msgid "The simplest way to test is to look at the connection tracking stats on the standby hardware router with the command ``show conntrack-sync statistics``. The numbers should be very close to the numbers on the primary router." +msgstr "La forma más sencilla de probar es mirar las estadísticas de seguimiento de la conexión en el enrutador de hardware en espera con el comando "mostrar estadísticas de sincronización de conntrack". Los números deben estar muy cerca de los números del enrutador principal." + +#: ../../configexamples/ha.rst:267 +msgid "The sync group is used to replicate connection tracking. It needs to be assigned to a random VRRP group, and we are creating a sync group called ``sync`` using the vrrp group ``int``." +msgstr "El grupo de sincronización se utiliza para replicar el seguimiento de conexiones. Debe asignarse a un grupo VRRP aleatorio, y estamos creando un grupo de sincronización llamado ``sync`` utilizando el grupo vrrp ``int``." + +#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:17 +msgid "The topology has 3 VyOS routers and one client. Between the DHCP Server and the DHCP Relay is a GRE tunnel. The `transport` VyOS represent a large Network." +msgstr "La topología tiene 3 enrutadores VyOS y un cliente. Entre el servidor DHCP y el relé DHCP hay un túnel GRE. Los `transporte` VyOS representan una gran red." + +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:17 +msgid "The topology have a central and a branch VyOS router and one client, to test, in each site." +msgstr "La topología tiene un enrutador VyOS central y una sucursal y un cliente, para probar, en cada sitio." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:803 +msgid "Then add a route-map and reference to above prefix. Consider that the actions taken inside the prefix will MATCH the routes that will be affected by the actions inside the rules of the route-map." +msgstr "Luego agregue un mapa de ruta y una referencia al prefijo anterior. Considere que las acciones realizadas dentro del prefijo COINCIDIRÁN con las rutas que se verán afectadas por las acciones dentro de las reglas del mapa de ruta." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:820 +msgid "Then we need to attach the policy to the BGP process. This needs to be under the import statement in the vrf we need to filter." +msgstr "Luego, debemos adjuntar la política al proceso BGP. Esto debe estar debajo de la declaración de importación en el vrf que necesitamos filtrar." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:317 +msgid "There are some cases where this is not needed -for example, in some DDoS appliance- but most inter-vrf routing designs use the above configurations." +msgstr "Hay algunos casos en los que esto no es necesario, por ejemplo, en algunos dispositivos DDoS, pero la mayoría de los diseños de enrutamiento entre vrf utilizan las configuraciones anteriores." + +#: ../../configexamples/ha.rst:360 +msgid "There is plenty of instructions and documentation on setting up Wireguard. The only important thing you need to remember is to only use one WireGuard interface per OSPF connection." +msgstr "Hay muchas instrucciones y documentación sobre cómo configurar Wireguard. Lo único importante que debe recordar es usar solo una interfaz WireGuard por conexión OSPF." + +#: ../../configexamples/ha.rst:67 +msgid "These are the vlans we will be using:" +msgstr "Estas son las vlans que usaremos:" + +#: ../../configexamples/ha.rst:48 +msgid "They want us to establish a BGP session to their routers on 192.0.2.11 and 192.0.2.12 from our routers 192.0.2.21 and 192.0.2.22. They are AS 65550 and we are AS 65551." +msgstr "Quieren que establezcamos una sesión BGP en sus enrutadores en 192.0.2.11 y 192.0.2.12 desde nuestros enrutadores 192.0.2.21 y 192.0.2.22. Ellos son AS 65550 y nosotros AS 65551." + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:10 +msgid "This LAB show how to uwe OpenVPN with a Active Directory authentication backend." +msgstr "Este LAB muestra cómo utilizar OpenVPN con un backend de autenticación de Active Directory." + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:137 +msgid "This accomplishes a few things:" +msgstr "Esto logra algunas cosas:" + +#: ../../configexamples/index.rst:6 +msgid "This chapter contains various configuration examples:" +msgstr "Este capítulo contiene varios ejemplos de configuración:" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:16 +msgid "This configuration example and the requirments consists on:" +msgstr "This configuration example and the requirments consists on:" + +#: ../../configexamples/ha.rst:13 +msgid "This document aims to walk you through setting everything up, so at a point where you can reboot any machine and not lose more than a few seconds worth of connectivity." +msgstr "Este documento tiene como objetivo guiarlo a través de la configuración de todo, de modo que pueda reiniciar cualquier máquina y no perder más de unos segundos de conectividad." + +#: ../../configexamples/pppoe-ipv6-basic.rst:9 +msgid "This document is to describe a basic setup using PPPoE with DHCPv6-PD + SLAAC to construct a typical home network. The user can follow the steps described here to quickly setup a working network and use this as a starting point to further configure or fine-tune other settings." +msgstr "Este documento describe una configuración básica que utiliza PPPoE con DHCPv6-PD + SLAAC para construir una red doméstica típica. El usuario puede seguir los pasos que se describen aquí para configurar rápidamente una red que funcione y usar esto como punto de partida para configurar o ajustar otras configuraciones." + +#: ../../configexamples/ha.rst:9 +msgid "This document walks you through a complete HA setup of two VyOS machines. This design is based on a VM as the primary router and a physical machine as a backup, using VRRP, BGP, OSPF, and conntrack sharing." +msgstr "Este documento lo guía a través de una configuración HA completa de dos máquinas VyOS. Este diseño se basa en una máquina virtual como enrutador principal y una máquina física como respaldo, utilizando VRRP, BGP, OSPF y uso compartido de seguimiento de conexiones." + +#: ../../configexamples/ha.rst:38 +msgid "This ensures you don't go too fast or miss a step. However, it will make your life easier to configure the fixed IP address and default route now on the hardware router." +msgstr "Esto asegura que no vaya demasiado rápido o pierda un paso. Sin embargo, le facilitará la vida configurar la dirección IP fija y la ruta predeterminada ahora en el enrutador de hardware." + +#: ../../configexamples/wan-load-balancing.rst:70 +msgid "This example uses the failover mode." +msgstr "Este ejemplo utiliza el modo de conmutación por error." + +#: ../../configexamples/segment-routing-isis.rst:112 +msgid "This gives us MPLS segment routing enabled and labels forwarding :" +msgstr "Esto nos da el enrutamiento de segmento MPLS habilitado y el reenvío de etiquetas:" + +#: ../../configexamples/azure-vpn-dual-bgp.rst:8 +msgid "This guide shows an example of a redundant (active-active) route-based IKEv2 site-to-site VPN to Azure using VTI and BGP for dynamic routing updates." +msgstr "Esta guía muestra un ejemplo de una VPN de sitio a sitio IKEv2 basada en ruta redundante (activo-activo) a Azure que usa VTI y BGP para actualizaciones de enrutamiento dinámico." + +#: ../../configexamples/azure-vpn-bgp.rst:8 +msgid "This guide shows an example of a route-based IKEv2 site-to-site VPN to Azure using VTI and BGP for dynamic routing updates." +msgstr "Esta guía muestra un ejemplo de una VPN de sitio a sitio IKEv2 basada en rutas a Azure que usa VTI y BGP para actualizaciones de enrutamiento dinámico." + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:7 +msgid "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configiuration." +msgstr "This guide shows an example policy-based IKEv2 site-to-site VPN between two VyOS routers, and firewall configiuration." + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:10 +msgid "This guide walks through the setup of https://www.tunnelbroker.net/ for an IPv6 Tunnel." +msgstr "Esta guía recorre la configuración de https://www.tunnelbroker.net/ para un túnel IPv6." + +#: ../../configexamples/ha.rst:197 +msgid "This has a floating IP address of 10.200.201.1/24, using virtual router ID 201. The difference between them is the interface name, hello-source-address, and peer-address." +msgstr "Esto tiene una dirección IP flotante de 10.200.201.1/24, usando el ID de enrutador virtual 201. La diferencia entre ellos es el nombre de la interfaz, la dirección de origen de saludo y la dirección de pares." + +#: ../../configexamples/ha.rst:232 +msgid "This has a floating IP address of 203.0.113.1/24, using virtual router ID 113. The virtual router ID is just a random number between 1 and 254, and can be set to whatever you want. Best practices suggest you try to keep them unique enterprise-wide." +msgstr "Esto tiene una dirección IP flotante de 203.0.113.1/24, usando la ID de enrutador virtual 113. La ID de enrutador virtual es solo un número aleatorio entre 1 y 254, y se puede configurar como desee. Las mejores prácticas sugieren que trate de mantenerlas únicas en toda la empresa." + +#: ../../configexamples/zone-policy.rst:258 +msgid "This is an example of the three base rules." +msgstr "Este es un ejemplo de las tres reglas básicas." + +#: ../../configexamples/ha.rst:20 +msgid "This is based on a real-life production design. One of the complex issues is ensuring you have redundant data INTO your network. We do this with a pair of Cisco Nexus switches and using Virtual PortChannels that are spanned across them. As a bonus, this also allows for complete switch failure without an outage. How you achieve this yourself is left as an exercise to the reader. But our setup is documented here." +msgstr "Esto se basa en un diseño de producción de la vida real. Uno de los problemas complejos es garantizar que tenga datos redundantes EN su red. Hacemos esto con un par de conmutadores Cisco Nexus y usando Virtual PortChannels que se extienden a través de ellos. Como beneficio adicional, esto también permite una falla completa del interruptor sin interrupción. Cómo logra esto usted mismo se deja como un ejercicio para el lector. Pero nuestra configuración está documentada aquí." + +#: ../../configexamples/ha.rst:391 +msgid "This is connecting back to the STATIC IP of router1, not the floating." +msgstr "Esto se está conectando de nuevo a la IP ESTÁTICA del enrutador1, no a la flotante." + +#: ../../configexamples/ha.rst:583 +msgid "This is identical, but you use the BGPPREPENDOUT route-map to advertise the route with a longer path." +msgstr "Esto es idéntico, pero usa el mapa de ruta BGPPREPENDOUT para anunciar la ruta con una ruta más larga." + +#: ../../configexamples/ha.rst:96 +msgid "This is ignoring the extra Out-of-band management networking, which should be on totally different switches, and a different feed into the rack, and is out of scope of this." +msgstr "Esto ignora la red de administración fuera de banda adicional, que debería estar en conmutadores totalmente diferentes y una alimentación diferente al rack, y está fuera del alcance de esto." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:38 +msgid "This scenario could be a nightmare applying regular routing and might need filtering in multiple interfaces." +msgstr "Este escenario podría ser una pesadilla aplicando enrutamiento regular y podría necesitar filtrado en múltiples interfaces." + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:547 +msgid "This section describes verification commands for MPLS/BGP/LDP protocols and L3VPN related routes as well as diagnosis and reachability checks between CE nodes." +msgstr "Esta sección describe los comandos de verificación para los protocolos MPLS/BGP/LDP y las rutas relacionadas con L3VPN, así como las verificaciones de accesibilidad y diagnóstico entre nodos CE." + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:409 +msgid "This section provides configuration steps for setting up VRFs on our PE nodes including CE facing interfaces, BGP, rd and route-target import/export based on the pre-defined parameters." +msgstr "Esta sección proporciona pasos de configuración para establecer VRF en nuestros nodos PE, incluidas las interfaces orientadas a CE, BGP, rd e importación/exportación de destino de ruta en función de los parámetros predefinidos." + +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:10 +msgid "This simple structure show how to connect two offices. One remote branch and the central office." +msgstr "Esta estructura simple muestra cómo conectar dos oficinas. Una sucursal remota y la oficina central." + +#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:10 +msgid "This simple structure shows how to configure a DHCP Relay over a GRE Bridge interface." +msgstr "Esta estructura simple muestra cómo configurar un relé DHCP a través de una interfaz de puente GRE." + +#: ../../configexamples/ha.rst:531 +msgid "This will be visible in 'show ip route'." +msgstr "Esto será visible en 'show ip route'." + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:112 +msgid "Thus you can easily match it to one of the devices/networks below." +msgstr "Por lo tanto, puede combinarlo fácilmente con uno de los dispositivos/redes a continuación." + +#: ../../configexamples/pppoe-ipv6-basic.rst:14 +msgid "To achieve this, your ISP is required to support DHCPv6-PD. If you're not sure, please contact your ISP for more information." +msgstr "Para lograr esto, su ISP debe ser compatible con DHCPv6-PD. Si no está seguro, comuníquese con su ISP para obtener más información." + +#: ../../configexamples/zone-policy.rst:144 +msgid "To add logging to the default rule, do:" +msgstr "Para agregar el registro a la regla predeterminada, haga lo siguiente:" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:54 +msgid "To address this scenario we will use to our advantage an extension of the BGP routing protocol that will help us in the “Export” between VRFs without the need for MPLS." +msgstr "Para abordar este escenario utilizaremos a nuestro favor una extensión del protocolo de enrutamiento BGP que nos ayudará en la “Exportación” entre VRFs sin necesidad de MPLS." + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:31 +msgid "To deploy a Layer3 VPN with MPLS on VyOS, we should meet a couple requirements in order to properly implement the solution. We'll use the following nodes in our LAB environment:" +msgstr "Para implementar una VPN Layer3 con MPLS en VyOS, debemos cumplir con un par de requisitos para implementar correctamente la solución. Usaremos los siguientes nodos en nuestro entorno LAB:" + +#: ../../configexamples/pppoe-ipv6-basic.rst:84 +msgid "To have basic protection while keeping IPv6 network functional, we need to:" +msgstr "Para tener protección básica mientras mantenemos funcional la red IPv6, necesitamos:" + +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:68 +msgid "To reach the network, a route must be set on each VyOS host. In this structure, a static interface route will fit the requirements." +msgstr "Para llegar a la red, se debe establecer una ruta en cada host VyOS. En esta estructura, una ruta de interfaz estática se ajustará a los requisitos." + +#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:15 +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:52 +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:15 +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:26 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:72 +#: ../../configexamples/l3vpn-hub-and-spoke.rst:55 +msgid "Topology" +msgstr "Topología" + +#: ../../configexamples/zone-policy.rst:95 +msgid "Traffic flows from zone A to zone B. That flow is what I refer to as a zone-pair-direction. eg. A->B and B->A are two zone-pair-destinations." +msgstr "El tráfico fluye de la zona A a la zona B. Ese flujo es a lo que me refiero como una dirección de par de zona. p.ej. A->B y B->A son destinos de pares de dos zonas." + +#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:31 +msgid "Transport:" +msgstr "Transporte:" + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:5 +msgid "Tunnelbroker.net (IPv6)" +msgstr "Tunnelbroker.net (IPv6)" + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:None +msgid "Tunnelbroker topology image" +msgstr "Imagen de topología de Tunnelbroker" + +#: ../../configexamples/policy-based-ipsec-and-firewall.rst:18 +msgid "Two VyOS routers with public IP address." +msgstr "Two VyOS routers with public IP address." + +#: ../../configexamples/wan-load-balancing.rst:105 +msgid "Two rules will be created, the first rule directs traffic coming in from eth2 to eth0 and the second rule directs the traffic to eth1. If eth0 fails the first rule is bypassed and the second rule matches, directing traffic to eth1." +msgstr "Se crearán dos reglas, la primera regla dirige el tráfico proveniente de eth2 a eth0 y la segunda regla dirige el tráfico a eth1. Si eth0 falla, la primera regla se omite y la segunda regla coincide, dirigiendo el tráfico a eth1." + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:113 +msgid "Unlike IPv4, IPv6 is really not designed to be broken up smaller than /64. So if you ever want to have multiple LANs, VLANs, DMZ, etc, you'll want to ignore the assigned /64, and request the /48 and use that." +msgstr "A diferencia de IPv4, IPv6 realmente no está diseñado para dividirse en menos de /64. Entonces, si alguna vez desea tener múltiples LAN, VLAN, DMZ, etc., querrá ignorar el /64 asignado, solicitar el /48 y usarlo." + +#: ../../configexamples/qos.rst:16 +msgid "Using the general schema for example:" +msgstr "Usando el esquema general por ejemplo:" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:783 +msgid "Using this command we are also able to check the transport and customer label (inner/outer) for Hub network prefix (10.0.0.100/32):" +msgstr "Con este comando, también podemos verificar la etiqueta de transporte y del cliente (interna/externa) para el prefijo de red Hub (10.0.0.100/32):" + +#: ../../configexamples/ha.rst:143 +msgid "VLAN 100 and 201 will have floating IP addresses, but VLAN50 does not, as this is talking directly to upstream. Create our IP address on vlan50." +msgstr "VLAN 100 y 201 tendrán direcciones IP flotantes, pero VLAN50 no, ya que se comunica directamente con el flujo ascendente. Cree nuestra dirección IP en vlan50." + +#: ../../configexamples/ha.rst:65 +msgid "VLANs" +msgstr "VLAN" + +#: ../../configexamples/ha.rst:120 +msgid "VMware: You must DISABLE SECURITY on this Port group. Make sure that ``Promiscuous Mode``\\ , ``MAC address changes`` and ``Forged transmits`` are enabled. All of these will be done as part of failover." +msgstr "VMware: debe DESACTIVAR LA SEGURIDAD en este grupo de puertos. Asegúrese de que ``Modo promiscuo``\\ , ``Cambios de dirección MAC`` y ``Transmisiones falsificadas`` estén habilitados. Todo esto se realizará como parte de la conmutación por error." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:100 +#: ../../configexamples/l3vpn-hub-and-spoke.rst:86 +msgid "VRF" +msgstr "VRF" + +#: ../../configexamples/ha.rst:189 +msgid "VRRP Configuration" +msgstr "Configuración de VRRP" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:160 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:248 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:320 +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:829 +msgid "Verification" +msgstr "Verificación" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:43 +msgid "Version: 1.4-rolling-202110310317" +msgstr "Versión: 1.4-rodante-202110310317" + +#: ../../configexamples/autotest/DHCPRelay_through_GRE/DHCPRelay_through_GRE.rst:7 +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:7 +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:8 +msgid "Version: 1.4-rolling-202305100734" +msgstr "Versión: 1.4-rodante-202305100734" + +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:7 +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:8 +msgid "Version: 1.4-rolling-202308240020" +msgstr "Version: 1.4-rolling-202308240020" + +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:7 +msgid "Version: vyos-1.4-rolling-202302150317" +msgstr "Versión: vyos-1.4-rolling-202302150317" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:1025 +msgid "VyOS-CE-HUB -------> VyOS-CE1-SPOKE" +msgstr "VyOS-CE-HUB -------> VyOS-CE1-SPOKE" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:1026 +msgid "VyOS-CE-HUB -------> VyOS-CE2-SPOKE" +msgstr "VyOS-CE-HUB -------> VyOS-CE2-SPOKE" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:507 +msgid "VyOS-CE1-HUB:" +msgstr "VyOS-CE1-HUB:" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:490 +msgid "VyOS-CE1-SPOKE:" +msgstr "VyOS-CE1-HABLÓ:" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:987 +msgid "VyOS-CE1-SPOKE -----> VyOS-CE-HUB" +msgstr "VyOS-CE1-SPOKE -----> VyOS-CE-HUB" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:525 +msgid "VyOS-CE2-SPOKE:" +msgstr "VyOS-CE2-SPOKE:" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:1085 +msgid "VyOS-CE2-SPOKE -------> VyOS-CE-HUB" +msgstr "VyOS-CE2-SPOKE -------> VyOS-CE-HUB" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:112 +#: ../../configexamples/segment-routing-isis.rst:26 +msgid "VyOS-P1:" +msgstr "VyOS-P1:" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:142 +#: ../../configexamples/segment-routing-isis.rst:90 +msgid "VyOS-P2:" +msgstr "VyOS-P2:" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:168 +msgid "VyOS-P3:" +msgstr "VyOS-P3:" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:194 +msgid "VyOS-P4:" +msgstr "VyOS-P4:" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:91 +msgid "VyOS-PE1" +msgstr "VyOS-PE1" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:224 +#: ../../configexamples/l3vpn-hub-and-spoke.rst:362 +#: ../../configexamples/l3vpn-hub-and-spoke.rst:413 +msgid "VyOS-PE1:" +msgstr "VyOS-PE1:" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:88 +msgid "VyOS-PE2" +msgstr "VyOS-PE2" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:241 +#: ../../configexamples/l3vpn-hub-and-spoke.rst:376 +#: ../../configexamples/l3vpn-hub-and-spoke.rst:435 +msgid "VyOS-PE2:" +msgstr "VyOS-PE2:" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:93 +msgid "VyOS-PE3" +msgstr "VyOS-PE3" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:262 +#: ../../configexamples/l3vpn-hub-and-spoke.rst:390 +#: ../../configexamples/l3vpn-hub-and-spoke.rst:457 +msgid "VyOS-PE3:" +msgstr "VyOS-PE3:" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:834 +msgid "VyOS-RR1/RR2" +msgstr "VyOS-RR1/RR2" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:279 +#: ../../configexamples/l3vpn-hub-and-spoke.rst:328 +msgid "VyOS-RR1:" +msgstr "VyOS-RR1:" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:299 +#: ../../configexamples/l3vpn-hub-and-spoke.rst:345 +msgid "VyOS-RR2:" +msgstr "VyOS-RR2:" + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:38 +msgid "VyOS 1.3 added initial support for VRFs (including IPv4/IPv6 static routing) and VyOS 1.4 now enables full dynamic routing protocol support for OSPF, IS-IS, and BGP for individual VRFs." +msgstr "VyOS 1.3 agregó soporte inicial para VRF (incluido el enrutamiento estático IPv4/IPv6) y VyOS 1.4 ahora permite el soporte completo del protocolo de enrutamiento dinámico para OSPF, IS-IS y BGP para VRF individuales." + +#: ../../configexamples/zone-policy.rst:42 +msgid "VyOS acts as DHCP, DNS forwarder, NAT, router and firewall." +msgstr "VyOS actúa como DHCP, reenviador de DNS, NAT, enrutador y firewall." + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:15 +msgid "VyOS as Client" +msgstr "VyOS como cliente" + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:14 +msgid "VyOS as a OpenVPN Server" +msgstr "VyOS como servidor OpenVPN" + +#: ../../configexamples/segment-routing-isis.rst:148 +msgid "VyOS is able to check MSD per devices:" +msgstr "VyOS puede verificar MSD por dispositivo:" + +#: ../../configexamples/azure-vpn-bgp.rst:50 +#: ../../configexamples/azure-vpn-dual-bgp.rst:49 +msgid "Vyos ASN" +msgstr "Vyos ASN" + +#: ../../configexamples/azure-vpn-bgp.rst:56 +#: ../../configexamples/azure-vpn-dual-bgp.rst:55 +msgid "Vyos configuration" +msgstr "tu configuración" + +#: ../../configexamples/azure-vpn-bgp.rst:42 +#: ../../configexamples/azure-vpn-dual-bgp.rst:39 +msgid "Vyos private IP" +msgstr "IP privada de Vyos" + +#: ../../configexamples/azure-vpn-bgp.rst:40 +#: ../../configexamples/azure-vpn-dual-bgp.rst:37 +msgid "Vyos public IP" +msgstr "Tu IP pública" + +#: ../../configexamples/azure-vpn-bgp.rst:34 +#: ../../configexamples/azure-vpn-dual-bgp.rst:31 +msgid "WAN Interface" +msgstr "Interfaz WAN" + +#: ../../configexamples/wan-load-balancing.rst:8 +msgid "WAN Load Balancer examples" +msgstr "Ejemplos de balanceador de carga WAN" + +#: ../../configexamples/ha.rst:28 +msgid "Walkthrough suggestion" +msgstr "Sugerencia de tutorial" + +#: ../../configexamples/ha.rst:55 +msgid "We are going to use 10.200.201.0/24 for an 'internal' network on VLAN201." +msgstr "Vamos a utilizar 10.200.201.0/24 para una red 'interna' en VLAN201." + +#: ../../configexamples/ha.rst:191 +msgid "We are setting up VRRP so that it does NOT fail back when a machine returns into service, and it prioritizes router1 over router2." +msgstr "Estamos configurando VRRP para que NO falle cuando una máquina vuelve a estar en servicio, y prioriza el enrutador1 sobre el enrutador2." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:815 +msgid "We are using a \"white list\" approach by allowing only what is necessary. In case that need to implement a \"black list\" approach then you will need to change the action in the route-map for a deny BUT you need to add a rule that permits the rest due to the implicit deny in the route-map." +msgstr "Estamos utilizando un enfoque de "lista blanca" al permitir solo lo que es necesario. En caso de que necesite implementar un enfoque de "lista negra", deberá cambiar la acción en el mapa de ruta para una denegación PERO debe agregar una regla que permita el resto debido a la denegación implícita en el mapa de ruta." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:778 +msgid "We create a prefix-list first and add all the routes we need to." +msgstr "Primero creamos una lista de prefijos y agregamos todas las rutas que necesitamos." + +#: ../../configexamples/ha.rst:300 +msgid "We explicitly exclude the primary upstream network so that BGP or OSPF traffic doesn't accidentally get NAT'ed." +msgstr "Excluimos explícitamente la red ascendente principal para que el tráfico BGP u OSPF no se convierta en NAT accidentalmente." + +#: ../../configexamples/qos.rst:23 +msgid "We have four hosts on the local network 172.17.1.0/24. All hosts are labeled CS0 by default. We need to replace labels on all hosts except vpc8. We will replace the labels on the nearest router “VyOS3” using the IP addresses of the sources." +msgstr "Tenemos cuatro hosts en la red local 172.17.1.0/24. Todos los hosts están etiquetados como CS0 de forma predeterminada. Necesitamos reemplazar las etiquetas en todos los hosts excepto en vpc8. Reemplazaremos las etiquetas en el enrutador más cercano "VyOS3" usando las direcciones IP de las fuentes." + +#: ../../configexamples/zone-policy.rst:25 +msgid "We have three networks." +msgstr "Tenemos tres redes." + +#: ../../configexamples/wan-load-balancing.rst:112 +msgid "We keep the configuration from the previous example, delete rule 10 and create the two new rules as described:" +msgstr "Mantenemos la configuración del ejemplo anterior, eliminamos la regla 10 y creamos las dos nuevas reglas como se describe:" + +#: ../../configexamples/wan-load-balancing.rst:143 +msgid "We keep the configuration from the previous example, delete rule 20 and create a new rule as described:" +msgstr "Mantenemos la configuración del ejemplo anterior, eliminamos la regla 20 y creamos una nueva regla como se describe:" + +#: ../../configexamples/pppoe-ipv6-basic.rst:63 +msgid "We need to enable router advertisement for LAN network so that PC can receive the prefix and use SLAAC to configure the address automatically." +msgstr "Necesitamos habilitar el anuncio del enrutador para la red LAN para que la PC pueda recibir el prefijo y usar SLAAC para configurar la dirección automáticamente." + +#: ../../configexamples/ha.rst:419 +msgid "We only want to export the networks we know. Always do a whitelist on your route filters, both importing and exporting. A good rule of thumb is **'If you are not the default router for a network, don't advertise it'**. This means we explicitly do not want to advertise the 192.0.2.0/24 network (but do want to advertise 10.200.201.0 and 203.0.113.0, which we ARE the default route for). This filter is applied to ``redistribute connected``. If we WERE to advertise it, the remote machines would see 192.0.2.21 available via their default route, establish the connection, and then OSPF would say '192.0.2.0/24 is available via this tunnel', at which point the tunnel would break, OSPF would drop the routes, and then 192.0.2.0/24 would be reachable via default again. This is called 'flapping'." +msgstr "Solo queremos exportar las redes que conocemos. Haz siempre una lista blanca en tus filtros de ruta, tanto importando como exportando. Una buena regla general es **'Si no es el enrutador predeterminado para una red, no lo anuncie'**. Esto significa que explícitamente no queremos anunciar la red 192.0.2.0/24 (pero sí queremos anunciar 10.200.201.0 y 203.0.113.0, para los cuales SOMOS la ruta predeterminada). Este filtro se aplica a ``redistribuir conectado``. Si tuviéramos que anunciarlo, las máquinas remotas verían 192.0.2.21 disponible a través de su ruta predeterminada, establecerían la conexión y luego OSPF diría '192.0.2.0/24 está disponible a través de este túnel', momento en el cual el túnel se rompería. , OSPF descartaría las rutas, y luego 192.0.2.0/24 sería accesible nuevamente de forma predeterminada. Esto se llama 'aletear'." + +#: ../../configexamples/ha.rst:450 +msgid "We only want to import networks we know. Our OSPF peer should only be advertising networks in the 10.201.0.0/16 range. Note that this is an INVERSE MATCH. You deny in access-list 100 to accept the route." +msgstr "Solo queremos importar redes que conocemos. Nuestro par OSPF solo debe anunciar redes en el rango 10.201.0.0/16. Tenga en cuenta que este es un PARTIDO INVERSO. Usted niega en la lista de acceso 100 para aceptar la ruta." + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:115 +msgid "We use a static route configuration in between the Core and each LAN and Management router, and BGP between the Core router and the ISP router but any dynamic routing protocol can be used." +msgstr "Usamos una configuración de ruta estática entre el Core y cada LAN y enrutador de administración, y BGP entre el enrutador Core y el enrutador ISP, pero se puede usar cualquier protocolo de enrutamiento dinámico." + +#: ../../configexamples/ha.rst:364 +msgid "We use small /30's from 10.254.60/24 for the point-to-point links." +msgstr "Usamos /30 pequeños de 10.254.60/24 para los enlaces punto a punto." + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:54 +msgid "We use the following network topology in this example:" +msgstr "Usamos la siguiente topología de red en este ejemplo:" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:770 +msgid "When importing routes using MP-BGP it is possible to filter a subset of them before are injected in the BGP table. One of the most common case is to use a route-map with an prefix-list." +msgstr "Al importar rutas usando MP-BGP, es posible filtrar un subconjunto de ellas antes de que se inyecten en la tabla BGP. Uno de los casos más comunes es utilizar un mapa de rutas con una lista de prefijos." + +#: ../../configexamples/ha.rst:57 +msgid "When traffic is originated from the 10.200.201.0/24 network, it will be masqueraded to 203.0.113.1" +msgstr "Cuando el tráfico se origina en la red 10.200.201.0/24, se enmascarará a 203.0.113.1" + +#: ../../configexamples/segment-routing-isis.rst:9 +msgid "When utilizing VyOS in an environment with Cisco IOS-XR gear you can use this blue print as an initial setup to get MPLS ISIS-SR working between those two devices.The lab was build using :abbr:`EVE-NG (Emulated Virtual Environment NG)`." +msgstr "Cuando utilice VyOS en un entorno con equipo Cisco IOS-XR, puede usar este modelo como configuración inicial para que MPLS ISIS-SR funcione entre esos dos dispositivos. NG)`." + +#: ../../configexamples/ha.rst:343 +msgid "When you have both routers up, you should be able to establish a connection from a NAT'ed machine out to the internet, reboot the active machine, and that connection should be preserved, and will not drop out." +msgstr "Cuando tenga ambos enrutadores activos, debería poder establecer una conexión desde una máquina con NAT a Internet, reiniciar la máquina activa, y esa conexión debería conservarse y no se desconectará." + +#: ../../configexamples/ha.rst:491 +msgid "When you have enabled OSPF on both routers, you should be able to see each other with the command ``show ip ospf neighbour``. The state must be 'Full' or '2-Way'. If it is not, then there is a network connectivity issue between the hosts. This is often caused by NAT or MTU issues. You should not see any new routes (unless this is the second pass) in the output of ``show ip route``" +msgstr "Cuando haya habilitado OSPF en ambos enrutadores, debería poder verse con el comando ``show ip ospf neighbour``. El estado debe ser 'Completo' o '2 vías'. Si no es así, entonces hay un problema de conectividad de red entre los hosts. Esto suele deberse a problemas de NAT o MTU. No debería ver ninguna ruta nueva (a menos que esta sea la segunda pasada) en la salida de ``show ip route``" + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:13 +msgid "Windows Server 2019 with a running Active Directory" +msgstr "Windows Server 2019 con Active Directory en ejecución" + +#: ../../configexamples/autotest/Wireguard/Wireguard.rst:3 +msgid "Wireguard" +msgstr "Guardia de alambre" + +#: ../../configexamples/ha.rst:350 +msgid "Wireguard doesn't have the concept of an up or down link, due to its design. This complicates AND simplifies using it for network transport, as for reliable state detection you need to use SOMETHING to detect when the link is down." +msgstr "Debido a su diseño, Wireguard no tiene el concepto de enlace ascendente o descendente. Esto complica Y simplifica su uso para el transporte de red, ya que para una detección de estado confiable, debe usar ALGO para detectar cuándo el enlace está caído." + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:105 +msgid "With Tunnelbroker.net, you have two options:" +msgstr "Con Tunnelbroker.net, tiene dos opciones:" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:907 +msgid "With this command we are able to check the transport and customer label (inner/outer) for network spokes prefixes 10.0.0.80/32 - 10.0.0.90/32" +msgstr "Con este comando podemos verificar el transporte y la etiqueta del cliente (interior/exterior) para los prefijos de radios de red 10.0.0.80/32 - 10.0.0.90/32" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:293 +msgid "Within the VRF we set the Route-Distinguisher (RD) and Route-Targets (RT), then we enable the export/import VPN." +msgstr "Dentro del VRF, configuramos el Distinguidor de ruta (RD) y los Objetivos de ruta (RT), luego habilitamos la VPN de exportación/importación." + +#: ../../configexamples/segment-routing-isis.rst:48 +msgid "XRv-P3:" +msgstr "XRv-P3:" + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:145 +msgid "You managed to come this far, now we want to see the network and routing tables in action." +msgstr "Se las arregló para llegar hasta aquí, ahora queremos ver la red y las tablas de enrutamiento en acción." + +#: ../../configexamples/ha.rst:292 +msgid "You should be able to ping to and from all the IPs you have allocated." +msgstr "Debería poder hacer ping hacia y desde todas las direcciones IP que ha asignado." + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:81 +msgid "You should now be able to ping something by IPv6 DNS name:" +msgstr "Ahora debería poder hacer ping a algo por nombre de DNS IPv6:" + +#: ../../configexamples/ha.rst:511 +msgid "You should now be able to see the advertised network on the other host." +msgstr "Ahora debería poder ver la red anunciada en el otro host." + +#: ../../configexamples/zone-policy.rst:388 +msgid "You would have 5 zones instead of just 4 and you would configure your v6 ruleset between your tunnel interface and your LAN/DMZ zones instead of to the WAN." +msgstr "Tendría 5 zonas en lugar de solo 4 y configuraría su conjunto de reglas v6 entre su interfaz de túnel y sus zonas LAN/DMZ en lugar de la WAN." + +#: ../../configexamples/zone-policy.rst:413 +msgid "You would have to add a couple of rules on your wan-local ruleset to allow protocol 41 in." +msgstr "Tendría que agregar un par de reglas en su conjunto de reglas wan-local para permitir el protocolo 41 in." + +#: ../../configexamples/zone-policy.rst:6 +msgid "Zone-Policy example" +msgstr "Ejemplo de política de zona" + +#: ../../configexamples/zone-policy.rst:89 +msgid "Zones Basics" +msgstr "Conceptos básicos de las zonas" + +#: ../../configexamples/zone-policy.rst:136 +msgid "Zones and Rulesets both have a default action statement. When using Zone-Policies, the default action is set by the zone-policy statement and is represented by rule 10000." +msgstr "Tanto las zonas como los conjuntos de reglas tienen una declaración de acción predeterminada. Cuando se utilizan políticas de zona, la acción predeterminada se establece mediante la declaración de política de zona y se representa mediante la regla 10000." + +#: ../../configexamples/zone-policy.rst:175 +msgid "Zones do not allow for a default action of accept; either drop or reject. It is important to remember this because if you apply an interface to a zone and commit, any active connections will be dropped. Specifically, if you are SSH’d into VyOS and add local or the interface you are connecting through to a zone and do not have rulesets in place to allow SSH and established sessions, you will not be able to connect." +msgstr "Las zonas no permiten una acción predeterminada de aceptar; ya sea descartar o rechazar. Es importante recordar esto porque si aplica una interfaz a una zona y confirma, se eliminarán todas las conexiones activas. Específicamente, si tiene SSH en VyOS y agrega local o la interfaz a través de la cual se está conectando a una zona y no tiene conjuntos de reglas establecidos para permitir SSH y sesiones establecidas, no podrá conectarse." + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:172 +msgid "`2001:470:xxxx:1::/64`: A subnet suitable for a LAN" +msgstr "`2001:470:xxxx:1::/64`: una subred adecuada para una LAN" + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:173 +msgid "`2001:470:xxxx:2::/64`: Another subnet" +msgstr "`2001:470:xxxx:2::/64`: Otra subred" + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:171 +msgid "`2001:470:xxxx::/48`: The whole subnet. xxxx should come from Tunnelbroker." +msgstr "`2001:470:xxxx::/48`: toda la subred. xxxx debe provenir de Tunnelbroker." + +#: ../../configexamples/autotest/tunnelbroker/tunnelbroker.rst:174 +msgid "`2001:470:xxxx:ffff:/64`: The last usable /64 subnet." +msgstr "`2001:470:xxxx:ffff:/64`: la última subred /64 utilizable." + +#: ../../configexamples/pppoe-ipv6-basic.rst:39 +msgid "``service-name`` can be an arbitrary string." +msgstr "``service-name`` puede ser una cadena arbitraria." + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:75 +msgid "after all these steps the config look like this:" +msgstr "después de todos estos pasos, la configuración se ve así:" + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:62 +msgid "after this create a signed server and a client certificate" +msgstr "después de esto, cree un servidor firmado y un certificado de cliente" + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:69 +msgid "and last the DH Key" +msgstr "y por ultimo la llave DH" + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:119 +msgid "blue uses local routing table id and VNI 2000" +msgstr "blue usa la identificación de la tabla de enrutamiento local y VNI 2000" + +#: ../../configexamples/azure-vpn-bgp.rst:48 +#: ../../configexamples/azure-vpn-dual-bgp.rst:47 +msgid "ch00s3-4-s3cur3-psk" +msgstr "ch00s3-4-s3cur3-psk" + +#: ../../configexamples/ha.rst:92 +msgid "compute1 - Port 9 of each switch" +msgstr "compute1 - Puerto 9 de cada switch" + +#: ../../configexamples/ha.rst:78 +msgid "compute1 (VMware ESXi 6.5)" +msgstr "cómputo1 (VMware ESXi 6.5)" + +#: ../../configexamples/ha.rst:93 +msgid "compute2 - Port 10 of each switch" +msgstr "compute2 - Puerto 10 de cada switch" + +#: ../../configexamples/ha.rst:79 +msgid "compute2 (VMware ESXi 6.5)" +msgstr "cómputo2 (VMware ESXi 6.5)" + +#: ../../configexamples/ha.rst:94 +msgid "compute3 - Port 11 of each switch" +msgstr "compute3 - Puerto 11 de cada switch" + +#: ../../configexamples/ha.rst:80 +msgid "compute3 (VMware ESXi 6.5)" +msgstr "computar3 (VMware ESXi 6.5)" + +#: ../../configexamples/index.rst:41 +msgid "configure each host in the lab" +msgstr "configurar cada host en el laboratorio" + +#: ../../configexamples/index.rst:40 +msgid "create the lab on a eve-ng server" +msgstr "crear el laboratorio en un servidor eve-ng" + +#: ../../configexamples/index.rst:42 +msgid "do some defined tests" +msgstr "hacer algunas pruebas definidas" + +#: ../../configexamples/azure-vpn-bgp.rst:34 +#: ../../configexamples/azure-vpn-dual-bgp.rst:31 +msgid "eth0" +msgstr "eth0" + +#: ../../configexamples/wan-load-balancing.rst:30 +msgid "eth0 is set to be removed from the load balancer's interface pool after 5 ping failures, eth1 will be removed after 4 ping failures." +msgstr "eth0 está configurado para eliminarse del grupo de interfaz del equilibrador de carga después de 5 fallas de ping, eth1 se eliminará después de 4 fallas de ping." + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:941 +msgid "extended community and remote label of specific destination" +msgstr "comunidad extendida y etiqueta remota de destino específico" + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:56 +msgid "first the PCA" +msgstr "primero el PCA" + +#: ../../configexamples/index.rst:44 +msgid "generate the documentation and include files" +msgstr "generar la documentación e incluir archivos" + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:121 +msgid "green uses local routing table id and VNI 4000" +msgstr "verde usa la identificación de la tabla de enrutamiento local y VNI 4000" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:764 +msgid "information between PE and CE:" +msgstr "información entre PE y CE:" + +#: ../../configexamples/index.rst:43 +msgid "optional do an upgrade to a higher version and do step 3 again." +msgstr "opcional, actualice a una versión superior y vuelva a realizar el paso 3." + +#: ../../configexamples/autotest/L3VPN_EVPN/L3VPN_EVPN.rst:120 +msgid "red uses local routing table id and VNI 3000" +msgstr "red usa la identificación de la tabla de enrutamiento local y VNI 3000" + +#: ../../configexamples/ha.rst:81 +msgid "router2 (Random 1RU machine with 4 NICs)" +msgstr "router2 (máquina aleatoria de 1RU con 4 NIC)" + +#: ../../configexamples/autotest/OpenVPN_with_LDAP/OpenVPN_with_LDAP.rst:102 +msgid "save the output to a file and import it in nearly all openvpn clients." +msgstr "guarde el resultado en un archivo e impórtelo en casi todos los clientes de openvpn." + +#: ../../configexamples/index.rst:45 +msgid "shutdown and destroy the lab, if there is no error" +msgstr "apagar y destruir el laboratorio, si no hay ningún error" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:806 +msgid "specific VPNv4 destination including extended community and remotelabel information. This procedure is the same on all Spoke nodes:" +msgstr "destino VPNv4 específico que incluye comunidad extendida e información de etiqueta remota. Este procedimiento es el mismo en todos los nodos Spoke:" + +#: ../../configexamples/ha.rst:76 +msgid "switch1 (Nexus 10gb Switch)" +msgstr "conmutador 1 (conmutador Nexus de 10 gb)" + +#: ../../configexamples/ha.rst:77 +msgid "switch2 (Nexus 10gb Switch)" +msgstr "switch2 (Conmutador Nexus de 10 gb)" + +#: ../../configexamples/zone-policy.rst:394 +msgid "v6 pairs would be:" +msgstr "Los pares v6 serían:" + +#: ../../configexamples/inter-vrf-routing-vrf-lite.rst:571 +msgid "we are using \"source-address\" option cause we are not redistributing connected interfaces into BGP on the Core router hence there is no comeback route and ping will fail." +msgstr "estamos usando la opción "dirección de origen" porque no estamos redistribuyendo las interfaces conectadas a BGP en el enrutador Core, por lo tanto, no hay una ruta de regreso y el ping fallará." + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:736 +msgid "within VRFs:" +msgstr "dentro de los VRF:" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:639 +msgid "“show bgp ipv4 vpn summary” for checking BGP VPNv4 neighbors:" +msgstr ""Mostrar resumen de bgp ipv4 vpn" para comprobar los vecinos de BGP VPNv4:" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:834 +msgid "“show bgp ipv4 vpn summary” for checking iBGP neighbors again" +msgstr ""mostrar resumen bgp ipv4 vpn" para comprobar de nuevo los vecinos iBGP" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:719 +msgid "“show bgp ipv4 vpn summary” for checking iBGP neighbors against route-reflector devices:" +msgstr ""Mostrar resumen bgp ipv4 vpn" para comprobar los vecinos iBGP con los dispositivos reflectores de ruta:" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:941 +msgid "“show bgp ipv4 vpn x.x.x.x/32” for checking best-path," +msgstr "“mostrar bgp ipv4 vpn xxxx/32” para verificar la mejor ruta," + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:807 +msgid "“show bgp ipv4 vpn x.x.x.x/32” for checking the best-path to the" +msgstr "“mostrar bgp ipv4 vpn xxxx/32” para verificar la mejor ruta hacia el" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:698 +msgid "“show bgp ipv4 vpn x.x.x.x/x” for checking best path selected for specific VPNv4 destination" +msgstr "“mostrar bgp ipv4 vpn xxxx/x” para verificar la mejor ruta seleccionada para un destino VPNv4 específico" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:658 +msgid "“show bgp ipv4 vpn” for checking all VPNv4 prefixes information:" +msgstr "“show bgp ipv4 vpn” para verificar toda la información de los prefijos de VPNv4:" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:891 +msgid "“show bgp vrf BLUE_HUB summary” for checking EBGP neighbor" +msgstr ""mostrar resumen bgp vrf BLUE_HUB" para comprobar el vecino EBGP" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:764 +msgid "“show bgp vrf BLUE_SPOKE summary” for checking EBGP neighbor" +msgstr ""mostrar resumen de bgp vrf BLUE_SPOKE" para verificar el vecino EBGP" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:736 +msgid "“show bgp vrf all” for checking all the prefix learning on BGP" +msgstr ""Mostrar bgp vrf todo" para verificar todo el aprendizaje de prefijos en BGP" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:851 +msgid "“show bgp vrf all” for checking all the prefixes learning on BGP" +msgstr ""Mostrar bgp vrf todo" para verificar todos los prefijos que se aprenden en BGP" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:554 +msgid "“show ip ospf neighbor” for checking ospf relationship" +msgstr ""mostrar ip ospf vecino" para verificar la relación ospf" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:909 +msgid "“show ip route vrf BLUE_HUB” to view the RIB in our Hub PE." +msgstr "“show ip route vrf BLUE_HUB” para ver la RIB en nuestro Hub PE." + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:784 +msgid "“show ip route vrf BLUE_SPOKE” for viewing the RIB in our Spoke PE." +msgstr "“show ip route vrf BLUE_SPOKE” para ver el RIB en nuestro Spoke PE." + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:579 +msgid "“show mpls ldp binding” for checking mpls label assignment" +msgstr ""Mostrar enlace mpls ldp" para verificar la asignación de etiquetas mpls" + +#: ../../configexamples/l3vpn-hub-and-spoke.rst:567 +msgid "“show mpls ldp neighbor “ for checking ldp neighbors" +msgstr ""mostrar vecino mpls ldp" para verificar vecinos ldp" diff --git a/docs/_locale/es/configuration.pot b/docs/_locale/es/configuration.pot new file mode 100644 index 00000000..e365059b --- /dev/null +++ b/docs/_locale/es/configuration.pot @@ -0,0 +1,20654 @@ +msgid "" +msgstr "" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: Localazy (https://localazy.com)\n" +"Project-Id-Version: VyOS Documentation\n" +"Language: es\n" +"Plural-Forms: nplurals=2; plural=(n==1) ? 0 : 1;\n" + +#: ../../configuration/policy/route.rst:74 +msgid "!: Match everything except the specified prefix." +msgstr "! : Coincide con todo excepto el prefijo especificado." + +#: ../../configuration/policy/route.rst:75 +msgid "!-: Match everything except the specified range." +msgstr "! - : Coincide con todo excepto el rango especificado." + +#: ../../configuration/policy/route.rst:73 +msgid "!: Match everything except the specified address." +msgstr "! : Coincide con todo excepto la dirección especificada." + +#: ../../configuration/policy/route.rst:66 +msgid "!: Match everything except the specified subnet." +msgstr "! : coincide con todo excepto la subred especificada." + +#: ../../configuration/policy/route.rst:67 +msgid "!-: Match everything except the specified range." +msgstr "! - : Coincide con todo excepto el rango especificado." + +#: ../../configuration/policy/route.rst:65 +msgid "!: Match everything except the specified address." +msgstr "! : Coincide con todo excepto la dirección especificada." + +#: ../../configuration/service/router-advert.rst:1 +msgid "\"Managed address configuration\" flag" +msgstr "Indicador "Configuración de dirección administrada"" + +#: ../../configuration/service/router-advert.rst:1 +msgid "\"Other configuration\" flag" +msgstr "Indicador "Otra configuración"" + +#: ../../configuration/protocols/babel.rst:146 +msgid "**1-254** – interfaces with a channel number interfere with interfering interfaces and interfaces with the same channel number. **interfering** – interfering interfaces are assumed to interfere with all other channels except noninterfering channels. **noninterfering** – noninterfering interfaces are assumed to only interfere with themselves." +msgstr "**1-254**: las interfaces con un número de canal interfieren con las interfaces que interfieren y las interfaces con el mismo número de canal. **interferente**: se supone que las interfaces que interfieren interfieren con todos los demás canales, excepto los canales que no interfieren. **sin interferencia**: se supone que las interfaces sin interferencia solo interfieren consigo mismas." + +#: ../../configuration/system/flow-accounting.rst:102 +msgid "**10** - :abbr:`IPFIX (IP Flow Information Export)` as per :rfc:`3917`" +msgstr "**10** - :abbr:`IPFIX (Exportación de información de flujo IP)` según :rfc:`3917`" + +#: ../../configuration/interfaces/tunnel.rst:235 +msgid "**1. Confirm IP connectivity between tunnel source-address and remote:**" +msgstr "**1. Confirme la conectividad IP entre la dirección de origen del túnel y el control remoto:**" + +#: ../../configuration/interfaces/tunnel.rst:250 +msgid "**2. Confirm the link type has been set to GRE:**" +msgstr "**2. Confirme que el tipo de enlace se ha establecido en GRE:**" + +#: ../../configuration/interfaces/tunnel.rst:267 +msgid "**3. Confirm IP connectivity across the tunnel:**" +msgstr "**3. Confirme la conectividad IP a través del túnel:**" + +#: ../../configuration/system/flow-accounting.rst:100 +msgid "**5** - Most common version, but restricted to IPv4 flows only" +msgstr "**5** - Versión más común, pero restringida solo a flujos IPv4" + +#: ../../configuration/system/flow-accounting.rst:101 +msgid "**9** - NetFlow version 9 (default)" +msgstr "**9** - NetFlow versión 9 (predeterminado)" + +#: ../../configuration/protocols/bgp.rst:75 +msgid "**AS path length check**" +msgstr "**Comprobación de longitud de ruta AS**" + +#: ../../configuration/protocols/bgp.rst:106 +msgid "**Already-selected external check**" +msgstr "**Comprobación externa ya seleccionada**" + +#: ../../configuration/trafficpolicy/index.rst:547 +#: ../../configuration/trafficpolicy/index.rst:1181 +msgid "**Applies to:** Inbound traffic." +msgstr "**Se aplica a:** Tráfico entrante." + +#: ../../configuration/trafficpolicy/index.rst:444 +msgid "**Applies to:** Outbound Traffic." +msgstr "**Se aplica a:** Tráfico saliente." + +#: ../../configuration/trafficpolicy/index.rst:355 +#: ../../configuration/trafficpolicy/index.rst:387 +#: ../../configuration/trafficpolicy/index.rst:622 +#: ../../configuration/trafficpolicy/index.rst:691 +#: ../../configuration/trafficpolicy/index.rst:767 +#: ../../configuration/trafficpolicy/index.rst:916 +#: ../../configuration/trafficpolicy/index.rst:961 +#: ../../configuration/trafficpolicy/index.rst:1020 +msgid "**Applies to:** Outbound traffic." +msgstr "**Se aplica a:** Tráfico saliente." + +#: ../../configuration/trafficpolicy/index.rst:32 +msgid "**Apply the traffic policy to an interface ingress or egress**." +msgstr "**Aplique la política de tráfico a la entrada o salida de una interfaz**." + +#: ../../configuration/interfaces/tunnel.rst:137 +msgid "**Cisco IOS Router:**" +msgstr "**Enrutador Cisco IOS:**" + +#: ../../configuration/service/pppoe-server.rst:69 +msgid "**Client IP address via IP range definition**" +msgstr "**Dirección IP del cliente a través de la definición de rango de IP**" + +#: ../../configuration/service/pppoe-server.rst:89 +msgid "**Client IP subnets via CIDR notation**" +msgstr "**Subredes de IP de cliente mediante notación CIDR**" + +#: ../../configuration/protocols/bgp.rst:120 +msgid "**Cluster-List length check**" +msgstr "**Comprobación de la longitud de la lista de clústeres**" + +#: ../../configuration/trafficpolicy/index.rst:30 +msgid "**Create a traffic policy**." +msgstr "**Cree una política de tráfico**." + +#: ../../_include/interface-common-with-dhcp.txt:9 +#: ../../_include/interface-vlan-8021q.txt:97 +#: ../../_include/interface-common-with-dhcp.txt:9 +#: ../../_include/interface-vlan-8021q.txt:97 +#: ../../_include/interface-common-with-dhcp.txt:9 +#: ../../_include/interface-vlan-8021q.txt:97 +#: ../../_include/interface-vlan-8021ad.txt:121 +#: ../../_include/interface-common-with-dhcp.txt:9 +#: ../../_include/interface-common-with-dhcp.txt:9 +#: ../../_include/interface-vlan-8021q.txt:97 +#: ../../_include/interface-vlan-8021q.txt:97 +#: ../../_include/interface-vlan-8021ad.txt:121 +#: ../../_include/interface-common-with-dhcp.txt:9 +#: ../../_include/interface-vlan-8021q.txt:97 +#: ../../_include/interface-vlan-8021ad.txt:121 +#: ../../configuration/interfaces/wwan.rst:53 +msgid "**DHCP(v6)**" +msgstr "**DHCP(v6)**" + +#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 +#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 +#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 +#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 +#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 +#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 +#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 +#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 +#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 +#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 +#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 +#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 +#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 +#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 +#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 +#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 +#: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 +msgid "**DHCPv6 Prefix Delegation (PD)**" +msgstr "**Delegación de prefijo DHCPv6 (PD)**" + +#: ../../configuration/trafficpolicy/index.rst:169 +msgid "**Ethernet (protocol, destination address or source address)**" +msgstr "**Ethernet (protocolo, dirección de destino o dirección de origen)**" + +#: ../../configuration/service/dhcp-server.rst:235 +#: ../../configuration/service/dhcp-server.rst:657 +#: ../../configuration/service/dhcp-server.rst:694 +msgid "**Example:**" +msgstr "**Ejemplo:**" + +#: ../../configuration/protocols/bgp.rst:89 +msgid "**External check**" +msgstr "**Comprobación externa**" + +#: ../../configuration/trafficpolicy/index.rst:175 +msgid "**Firewall mark**" +msgstr "**Marca de cortafuegos**" + +#: ../../configuration/protocols/bgp.rst:94 +msgid "**IGP cost check**" +msgstr "**Consulta de costos IGP**" + +#: ../../configuration/trafficpolicy/index.rst:171 +msgid "**IPv4 (DSCP value, maximum packet length, protocol, source address,** **destination address, source port, destination port or TCP flags)**" +msgstr "**IPv4 (valor DSCP, longitud máxima del paquete, protocolo, dirección de origen,** **dirección de destino, puerto de origen, puerto de destino o indicadores TCP)**" + +#: ../../configuration/trafficpolicy/index.rst:173 +msgid "**IPv6 (DSCP value, maximum payload length, protocol, source address,** **destination address, source port, destination port or TCP flags)**" +msgstr "**IPv6 (valor DSCP, longitud máxima de carga útil, protocolo, dirección de origen,** **dirección de destino, puerto de origen, puerto de destino o indicadores TCP)**" + +#: ../../configuration/trafficpolicy/index.rst:345 +msgid "**If you are looking for a policy for your outbound traffic** but you don't know which one you need and you don't want to go through every possible policy shown here, **our bet is that highly likely you are looking for a** Shaper_ **policy and you want to** :ref:`set its queues ` **as FQ-CoDel**." +msgstr "**Si está buscando una política para su tráfico saliente** pero no sabe cuál necesita y no quiere pasar por todas las políticas posibles que se muestran aquí, **nuestra apuesta es que es muy probable que la tenga. buscando una** Shaper_ **política y desea** :ref:`establecer sus colas ` **como FQ-CoDel**." + +#: ../../configuration/firewall/general-legacy.rst:9 +msgid "**Important note:** This documentation is valid only for VyOS Sagitta prior to 1.4-rolling-202308040557" +msgstr "**Important note:** This documentation is valid only for VyOS Sagitta prior to 1.4-rolling-202308040557" + +#: ../../configuration/firewall/general-legacy.rst:9 +msgid "**Important note:** This documentation is valid only for VyOS Sagitta prior to 1.4-rolling-YYYYMMDDHHmm" +msgstr "**Important note:** This documentation is valid only for VyOS Sagitta prior to 1.4-rolling-YYYYMMDDHHmm" + +#: ../../configuration/firewall/general.rst:79 +msgid "**Important note about default-actions:** If default action for any chain is not defined, then the default action is set to **accept** for that chain. Only for custom chains, the default action is set to **drop**." +msgstr "**Important note about default-actions:** If default action for any chain is not defined, then the default action is set to **accept** for that chain. Only for custom chains, the default action is set to **drop**." + +#: ../../configuration/firewall/general.rst:409 +msgid "**Important note about default-actions:** If default action for any chain is not defined, then the default action is set to **drop** for that chain." +msgstr "**Important note about default-actions:** If default action for any chain is not defined, then the default action is set to **drop** for that chain." + +#: ../../configuration/firewall/general.rst:20 +msgid "**Important note on usage of terms:** The firewall makes use of the terms `forward`, `input`, and `output` for firewall policy. More information of Netfilter hooks and Linux networking packet flows can be found in `Netfilter-Hooks `_" +msgstr "**Important note on usage of terms:** The firewall makes use of the terms `forward`, `input`, and `output` for firewall policy. More information of Netfilter hooks and Linux networking packet flows can be found in `Netfilter-Hooks `_" + +#: ../../configuration/firewall/general-legacy.rst:24 +msgid "**Important note on usage of terms:** The firewall makes use of the terms `in`, `out`, and `local` for firewall policy. Users experienced with netfilter often confuse `in` to be a reference to the `INPUT` chain, and `out` the `OUTPUT` chain from netfilter. This is not the case. These instead indicate the use of the `FORWARD` chain and either the input or output interface. The `INPUT` chain, which is used for local traffic to the OS, is a reference to as `local` with respect to its input interface." +msgstr "**Nota importante sobre el uso de términos:** El cortafuegos utiliza los términos "entrada", "salida" y "local" para la política de cortafuegos. Los usuarios experimentados con netfilter a menudo confunden `in` con una referencia a la cadena `INPUT` y `out` con la cadena `OUTPUT` de netfilter. Este no es el caso. En cambio, estos indican el uso de la cadena `FORWARD` y la interfaz de entrada o salida. La cadena 'INPUT', que se utiliza para el tráfico local al sistema operativo, es una referencia a 'local' con respecto a su interfaz de entrada." + +#: ../../configuration/trafficpolicy/index.rst:170 +msgid "**Interface name**" +msgstr "**Nombre de interfaz**" + +#: ../../configuration/interfaces/vxlan.rst:214 +msgid "**Leaf2 configuration:**" +msgstr "**Configuración hoja2:**" + +#: ../../configuration/interfaces/vxlan.rst:239 +msgid "**Leaf3 configuration:**" +msgstr "**Configuración Leaf3:**" + +#: ../../configuration/interfaces/tunnel.rst:159 +msgid "**Linux systemd-networkd:**" +msgstr "**Linux systemd-networkd:**" + +#: ../../configuration/protocols/bgp.rst:67 +msgid "**Local preference check**" +msgstr "**Comprobación de preferencias locales**" + +#: ../../configuration/protocols/bgp.rst:71 +msgid "**Local route check**" +msgstr "**Comprobación de rutas locales**" + +#: ../../configuration/protocols/bgp.rst:84 +msgid "**MED check**" +msgstr "**CON cheque**" + +#: ../../configuration/protocols/bgp.rst:98 +msgid "**Multi-path check**" +msgstr "**Comprobación de rutas múltiples**" + +#: ../../configuration/protocols/bgp.rst:1192 +msgid "**Node1:**" +msgstr "**Nodo1:**" + +#: ../../configuration/protocols/bgp.rst:1220 +msgid "**Node2:**" +msgstr "**Nodo2:**" + +#: ../../configuration/protocols/ospf.rst:840 +#: ../../configuration/protocols/ospf.rst:913 +#: ../../configuration/protocols/ospf.rst:985 +#: ../../configuration/protocols/ospf.rst:1348 +#: ../../configuration/protocols/segment-routing.rst:281 +msgid "**Node 1**" +msgstr "**Nodo 1**" + +#: ../../configuration/protocols/babel.rst:192 +#: ../../configuration/protocols/bgp.rst:1102 +#: ../../configuration/protocols/bgp.rst:1129 +#: ../../configuration/protocols/bgp.rst:1147 +#: ../../configuration/protocols/bgp.rst:1175 +#: ../../configuration/protocols/isis.rst:313 +#: ../../configuration/protocols/isis.rst:388 +#: ../../configuration/protocols/isis.rst:429 +#: ../../configuration/protocols/isis.rst:467 +#: ../../configuration/protocols/ospf.rst:948 +#: ../../configuration/protocols/ospf.rst:1318 +#: ../../configuration/protocols/rip.rst:243 +#: ../../configuration/protocols/segment-routing.rst:195 +msgid "**Node 1:**" +msgstr "**Nodo 1:**" + +#: ../../configuration/protocols/ospf.rst:850 +#: ../../configuration/protocols/ospf.rst:930 +#: ../../configuration/protocols/ospf.rst:1001 +#: ../../configuration/protocols/ospf.rst:1363 +#: ../../configuration/protocols/segment-routing.rst:296 +msgid "**Node 2**" +msgstr "**Nodo 2**" + +#: ../../configuration/protocols/babel.rst:202 +#: ../../configuration/protocols/bgp.rst:1113 +#: ../../configuration/protocols/bgp.rst:1135 +#: ../../configuration/protocols/bgp.rst:1159 +#: ../../configuration/protocols/bgp.rst:1181 +#: ../../configuration/protocols/isis.rst:324 +#: ../../configuration/protocols/isis.rst:404 +#: ../../configuration/protocols/isis.rst:483 +#: ../../configuration/protocols/ospf.rst:1327 +#: ../../configuration/protocols/rip.rst:251 +#: ../../configuration/protocols/segment-routing.rst:211 +msgid "**Node 2:**" +msgstr "**Nodo 2:**" + +#: ../../configuration/policy/examples.rst:136 +msgid "**OPTIONAL:** Exclude Inter-VLAN traffic (between VLAN10 and VLAN11) from PBR" +msgstr "**OPCIONAL:** Excluya el tráfico entre VLAN (entre VLAN10 y VLAN11) de PBR" + +#: ../../configuration/protocols/ospf.rst:731 +msgid "**OSPF network routing table** – includes a list of acquired routes for all accessible networks (or aggregated area ranges) of OSPF system. \"IA\" flag means that route destination is in the area to which the router is not connected, i.e. it’s an inter-area path. In square brackets a summary metric for all links through which a path lies to this network is specified. \"via\" prefix defines a router-gateway, i.e. the first router on the way to the destination (next hop). **OSPF router routing table** – includes a list of acquired routes to all accessible ABRs and ASBRs. **OSPF external routing table** – includes a list of acquired routes that are external to the OSPF process. \"E\" flag points to the external link metric type (E1 – metric type 1, E2 – metric type 2). External link metric is printed in the \"/\" format." +msgstr "**Tabla de enrutamiento de red OSPF**: incluye una lista de rutas adquiridas para todas las redes accesibles (o rangos de área agregados) del sistema OSPF. El indicador "IA" significa que el destino de la ruta está en el área a la que el enrutador no está conectado, es decir, es una ruta entre áreas. Entre corchetes se especifica una métrica de resumen para todos los enlaces a través de los cuales se encuentra una ruta a esta red. El prefijo "vía" define un enrutador-puerta de enlace, es decir, el primer enrutador en el camino hacia el destino (siguiente salto). **Tabla de enrutamiento del enrutador OSPF**: incluye una lista de rutas adquiridas a todos los ABR y ASBR accesibles. **Tabla de enrutamiento externo OSPF**: incluye una lista de rutas adquiridas que son externas al proceso OSPF. El indicador "E" apunta al tipo de métrica del enlace externo (E1: tipo de métrica 1, E2: tipo de métrica 2). La métrica de enlace externo se imprime en el " / " formato." + +#: ../../configuration/protocols/failover.rst:65 +msgid "**One gateway:**" +msgstr "**Una puerta de enlace:**" + +#: ../../configuration/protocols/bgp.rst:79 +msgid "**Origin check**" +msgstr "**Comprobación de origen**" + +#: ../../configuration/protocols/bgp.rst:125 +msgid "**Peer address**" +msgstr "**Dirección de pares**" + +#: ../../configuration/policy/examples.rst:5 +msgid "**Policy definition:**" +msgstr "**Definición de la política:**" + +#: ../../configuration/service/dhcp-server.rst:450 +msgid "**Primary**" +msgstr "**Primario**" + +#: ../../configuration/trafficpolicy/index.rst:443 +msgid "**Queueing discipline** Fair/Flow Queue CoDel." +msgstr "**Disciplina de colas** Fair/Flow Queue CoDel." + +#: ../../configuration/trafficpolicy/index.rst:960 +msgid "**Queueing discipline:** Deficit Round Robin." +msgstr "**Disciplina de colas:** Déficit Round Robin." + +#: ../../configuration/trafficpolicy/index.rst:766 +msgid "**Queueing discipline:** Generalized Random Early Drop." +msgstr "**Disciplina de colas:** Descenso anticipado aleatorio generalizado." + +#: ../../configuration/trafficpolicy/index.rst:1019 +msgid "**Queueing discipline:** Hierarchical Token Bucket." +msgstr "**Disciplina de colas:** Cubo de fichas jerárquico." + +#: ../../configuration/trafficpolicy/index.rst:546 +msgid "**Queueing discipline:** Ingress policer." +msgstr "**Disciplina de colas:** Policía de ingreso." + +#: ../../configuration/trafficpolicy/index.rst:354 +msgid "**Queueing discipline:** PFIFO (Packet First In First Out)." +msgstr "**Disciplina de colas:** PFIFO (Packet First In First Out)." + +#: ../../configuration/trafficpolicy/index.rst:690 +msgid "**Queueing discipline:** PRIO." +msgstr "**Disciplina en las colas:** PRIO." + +#: ../../configuration/trafficpolicy/index.rst:386 +msgid "**Queueing discipline:** SFQ (Stochastic Fairness Queuing)." +msgstr "**Disciplina de colas:** SFQ (Stochastic Fairness Queuing)." + +#: ../../configuration/trafficpolicy/index.rst:915 +msgid "**Queueing discipline:** Tocken Bucket Filter." +msgstr "**Disciplina en las colas:** Filtro de depósito de fichas." + +#: ../../configuration/trafficpolicy/index.rst:621 +msgid "**Queueing discipline:** netem (Network Emulator) + TBF (Token Bucket Filter)." +msgstr "**Disciplina de colas:** netem (Emulador de red) + TBF (Filtro de depósito de fichas)." + +#: ../../configuration/interfaces/bonding.rst:407 +#: ../../configuration/interfaces/macsec.rst:159 +msgid "**R1**" +msgstr "**R1**" + +#: ../../configuration/interfaces/macsec.rst:215 +msgid "**R1 Static Key**" +msgstr "**R1 Static Key**" + +#: ../../configuration/interfaces/bonding.rst:425 +#: ../../configuration/interfaces/macsec.rst:171 +msgid "**R2**" +msgstr "**R2**" + +#: ../../configuration/interfaces/macsec.rst:228 +msgid "**R2 Static Key**" +msgstr "**R2 Static Key**" + +#: ../../configuration/service/pppoe-server.rst:104 +msgid "**RADIUS based IP pools (Framed-IP-Address)**" +msgstr "**Grupos de IP basados en RADIUS (dirección IP enmarcada)**" + +#: ../../configuration/service/pppoe-server.rst:128 +msgid "**RADIUS sessions management DM/CoA**" +msgstr "**Administración de sesiones RADIUS DM/CoA**" + +#: ../../configuration/protocols/bgp.rst:113 +msgid "**Router-ID check**" +msgstr "** Verificación de ID de enrutador **" + +#: ../../configuration/protocols/igmp.rst:46 +msgid "**Router 1**" +msgstr "**Enrutador 1**" + +#: ../../configuration/protocols/igmp.rst:74 +msgid "**Router 2**" +msgstr "**Enrutador 2**" + +#: ../../configuration/protocols/igmp.rst:59 +msgid "**Router 3**" +msgstr "**Enrutador 3**" + +#: ../../configuration/policy/examples.rst:36 +msgid "**Routes learned after routing policy applied:**" +msgstr "**Rutas aprendidas después de aplicar la política de enrutamiento:**" + +#: ../../configuration/policy/examples.rst:21 +msgid "**Routes learned before routing policy applied:**" +msgstr "**Rutas aprendidas antes de aplicar la política de enrutamiento:**" + +#: ../../configuration/interfaces/bonding.rst:443 +msgid "**SW1**" +msgstr "**SW1**" + +#: ../../configuration/interfaces/bonding.rst:474 +msgid "**SW2**" +msgstr "**SW2**" + +#: ../../configuration/service/dhcp-server.rst:459 +msgid "**Secondary**" +msgstr "**Secundario**" + +#: ../../configuration/vpn/ipsec.rst:261 +msgid "**Setting up IPSec**" +msgstr "**Configuración de IPSec**" + +#: ../../configuration/vpn/ipsec.rst:237 +msgid "**Setting up the GRE tunnel**" +msgstr "**Configuración del túnel GRE**" + +#: ../../configuration/interfaces/vxlan.rst:191 +msgid "**Spine1 Configuration:**" +msgstr "**Configuración de Columna Vertebral 1:**" + +#: ../../configuration/protocols/ospf.rst:1378 +msgid "**Status**" +msgstr "**Estado**" + +#: ../../configuration/protocols/ospf.rst:1336 +msgid "**To see the redistributed routes:**" +msgstr "**Para ver las rutas redistribuidas:**" + +#: ../../configuration/protocols/failover.rst:85 +msgid "**Two gateways and different metrics:**" +msgstr "**Dos puertas de enlace y diferentes métricas:**" + +#: ../../configuration/trafficpolicy/index.rst:176 +msgid "**VLAN ID**" +msgstr "**ID de VLAN**" + +#: ../../configuration/interfaces/tunnel.rst:128 +#: ../../configuration/interfaces/tunnel.rst:149 +msgid "**VyOS Router:**" +msgstr "**Enrutador VyOS:**" + +#: ../../configuration/protocols/bgp.rst:63 +msgid "**Weight check**" +msgstr "**Comprobación de peso**" + +#: ../../_include/interface-dhcp-options.txt:69 +#: ../../_include/interface-dhcp-options.txt:69 +#: ../../_include/interface-dhcp-options.txt:69 +#: ../../_include/interface-dhcp-options.txt:69 +#: ../../_include/interface-dhcp-options.txt:69 +#: ../../_include/interface-dhcp-options.txt:69 +#: ../../_include/interface-dhcp-options.txt:69 +#: ../../_include/interface-dhcp-options.txt:69 +#: ../../_include/interface-dhcp-options.txt:69 +#: ../../_include/interface-dhcp-options.txt:69 +#: ../../_include/interface-dhcp-options.txt:69 +#: ../../_include/interface-dhcp-options.txt:69 +#: ../../_include/interface-dhcp-options.txt:69 +#: ../../_include/interface-dhcp-options.txt:69 +#: ../../_include/interface-dhcp-options.txt:69 +#: ../../_include/interface-dhcp-options.txt:69 +msgid "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24" +msgstr "**dirección** se puede especificar varias veces, por ejemplo, 192.168.100.1 y/o 192.168.100.0/24" + +#: ../../_include/interface-address-with-dhcp.txt:7 +#: ../../_include/interface-address-with-dhcp.txt:7 +#: ../../_include/interface-address-with-dhcp.txt:7 +#: ../../_include/interface-address-with-dhcp.txt:7 +#: ../../_include/interface-address.txt:6 +#: ../../_include/interface-address-with-dhcp.txt:7 +#: ../../_include/interface-address-with-dhcp.txt:7 +#: ../../_include/interface-address-with-dhcp.txt:7 +#: ../../_include/interface-address.txt:6 +#: ../../_include/interface-address.txt:6 +#: ../../_include/interface-address.txt:6 +#: ../../_include/interface-address-with-dhcp.txt:7 +#: ../../_include/interface-address-with-dhcp.txt:7 +#: ../../_include/interface-address-with-dhcp.txt:7 +#: ../../_include/interface-address.txt:6 +#: ../../_include/interface-address-with-dhcp.txt:7 +#: ../../_include/interface-address-with-dhcp.txt:7 +#: ../../_include/interface-address-with-dhcp.txt:7 +#: ../../_include/interface-address.txt:6 +#: ../../_include/interface-address-with-dhcp.txt:7 +#: ../../_include/interface-address-with-dhcp.txt:7 +#: ../../_include/interface-address-with-dhcp.txt:7 +#: ../../_include/interface-address-with-dhcp.txt:7 +msgid "**address** can be specified multiple times as IPv4 and/or IPv6 address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64" +msgstr "**dirección** se puede especificar varias veces como dirección IPv4 y/o IPv6, por ejemplo, 192.0.2.1/24 y/o 2001:db8::1/64" + +#: ../../configuration/container/index.rst:38 +msgid "**allow-host-networks** cannot be used with **network**" +msgstr "**allow-host-networks** no se puede usar con **red**" + +#: ../../configuration/container/index.rst:102 +msgid "**always**: Restart containers when they exit, regardless of status, retrying indefinitely" +msgstr "**siempre**: reinicia los contenedores cuando salen, independientemente del estado, reintentando indefinidamente" + +#: ../../configuration/service/dhcp-relay.rst:71 +msgid "**append:** The relay agent is allowed to append its own relay information to a received DHCP packet, disregarding relay information already present in the packet." +msgstr "**agregar:** El agente de retransmisión puede agregar su propia información de retransmisión a un paquete DHCP recibido, sin tener en cuenta la información de retransmisión que ya está presente en el paquete." + +#: ../../configuration/system/flow-accounting.rst:32 +msgid "**application**: analyzes received flow data in the context of intrusion detection or traffic profiling, for example" +msgstr "**aplicación**: analiza los datos de flujo recibidos en el contexto de la detección de intrusos o perfiles de tráfico, por ejemplo" + +#: ../../configuration/protocols/babel.rst:69 +msgid "**auto** – automatically determines the interface type. **wired** – enables optimisations for wired interfaces. **wireless** – disables a number of optimisations that are only correct on wired interfaces. Specifying wireless is always correct, but may cause slower convergence and extra routing traffic." +msgstr "**auto**: determina automáticamente el tipo de interfaz. **cableado**: permite optimizaciones para interfaces cableadas. **inalámbrico**: desactiva una serie de optimizaciones que solo son correctas en las interfaces con cable. La especificación inalámbrica siempre es correcta, pero puede provocar una convergencia más lenta y un tráfico de enrutamiento adicional." + +#: ../../configuration/protocols/ospf.rst:435 +msgid "**broadcast** – broadcast IP addresses distribution. **non-broadcast** – address distribution in NBMA networks topology. **point-to-multipoint** – address distribution in point-to-multipoint networks. **point-to-point** – address distribution in point-to-point networks." +msgstr "**difusión**: distribución de direcciones IP de difusión. **sin transmisión**: distribución de direcciones en topología de redes NBMA. **punto a multipunto**: distribución de direcciones en redes punto a multipunto. **punto a punto**: distribución de direcciones en redes punto a punto." + +#: ../../configuration/protocols/ospf.rst:1175 +msgid "**broadcast** – broadcast IP addresses distribution. **point-to-point** – address distribution in point-to-point networks." +msgstr "**difusión**: distribución de direcciones IP de difusión. **punto a punto**: distribución de direcciones en redes punto a punto." + +#: ../../configuration/protocols/ospf.rst:121 +msgid "**cisco** – a router will be considered as ABR if it has several configured links to the networks in different areas one of which is a backbone area. Moreover, the link to the backbone area should be active (working). **ibm** – identical to \"cisco\" model but in this case a backbone area link may not be active. **standard** – router has several active links to different areas. **shortcut** – identical to \"standard\" but in this model a router is allowed to use a connected areas topology without involving a backbone area for inter-area connections." +msgstr "**cisco**: un enrutador se considerará como ABR si tiene varios enlaces configurados a las redes en diferentes áreas, una de las cuales es un área de red troncal. Además, el enlace al área de la red troncal debe estar activo (funcionando). **ibm**: idéntico al modelo "cisco", pero en este caso es posible que no esté activo un enlace de área troncal. **estándar**: el enrutador tiene varios enlaces activos a diferentes áreas. **atajo**: idéntico al "estándar", pero en este modelo se permite que un enrutador use una topología de áreas conectadas sin involucrar un área de red troncal para conexiones entre áreas." + +#: ../../configuration/system/flow-accounting.rst:30 +msgid "**collector**: responsible for reception, storage and pre-processing of flow data received from a flow exporter" +msgstr "**recolector**: responsable de la recepción, el almacenamiento y el procesamiento previo de los datos de flujo recibidos de un exportador de flujo" + +#: ../../configuration/protocols/ospf.rst:329 +msgid "**default** – this area will be used for shortcutting only if ABR does not have a link to the backbone area or this link was lost. **enable** – the area will be used for shortcutting every time the route that goes through it is cheaper. **disable** – this area is never used by ABR for routes shortcutting." +msgstr "**predeterminado**: esta área se usará para atajos solo si ABR no tiene un enlace al área de red troncal o este enlace se perdió. **habilitar**: el área se utilizará para atajos cada vez que la ruta que lo atraviesa sea más barata. **deshabilitar**: ABR nunca utiliza esta área para atajos de rutas." + +#: ../../configuration/protocols/babel.rst:82 +msgid "**default** – enable split-horizon on wired interfaces, and disable split-horizon on wireless interfaces. **enable** – enable split-horizon on this interfaces. **disable** – disable split-horizon on this interfaces." +msgstr "**predeterminado**: habilite el horizonte dividido en las interfaces cableadas y deshabilite el horizonte dividido en las interfaces inalámbricas. **habilitar**: habilitar el horizonte dividido en estas interfaces. **deshabilitar**: deshabilitar el horizonte dividido en estas interfaces." + +#: ../../configuration/vpn/sstp.rst:188 +msgid "**deny** - deny mppe" +msgstr "**negar** - negar mppe" + +#: ../../configuration/nat/nat44.rst:201 +msgid "**destination** - specify which packets the translation will be applied to, only based on the destination address and/or port number configured." +msgstr "**destino**: especifique a qué paquetes se aplicará la traducción, solo en función de la dirección de destino y/o el número de puerto configurado." + +#: ../../_include/interface-address-with-dhcp.txt:9 +#: ../../_include/interface-address-with-dhcp.txt:9 +#: ../../_include/interface-address-with-dhcp.txt:9 +#: ../../_include/interface-address-with-dhcp.txt:9 +#: ../../_include/interface-address-with-dhcp.txt:9 +#: ../../_include/interface-address-with-dhcp.txt:9 +#: ../../_include/interface-address-with-dhcp.txt:9 +#: ../../_include/interface-address-with-dhcp.txt:9 +#: ../../_include/interface-address-with-dhcp.txt:9 +#: ../../_include/interface-address-with-dhcp.txt:9 +#: ../../_include/interface-address-with-dhcp.txt:9 +#: ../../_include/interface-address-with-dhcp.txt:9 +#: ../../_include/interface-address-with-dhcp.txt:9 +#: ../../_include/interface-address-with-dhcp.txt:9 +#: ../../_include/interface-address-with-dhcp.txt:9 +#: ../../_include/interface-address-with-dhcp.txt:9 +#: ../../_include/interface-address-with-dhcp.txt:9 +msgid "**dhcp** interface address is received by DHCP from a DHCP server on this segment." +msgstr "La dirección de la interfaz **dhcp** es recibida por DHCP desde un servidor DHCP en este segmento." + +#: ../../_include/interface-address-with-dhcp.txt:11 +#: ../../_include/interface-address-with-dhcp.txt:11 +#: ../../_include/interface-address-with-dhcp.txt:11 +#: ../../_include/interface-address-with-dhcp.txt:11 +#: ../../_include/interface-address-with-dhcp.txt:11 +#: ../../_include/interface-address-with-dhcp.txt:11 +#: ../../_include/interface-address-with-dhcp.txt:11 +#: ../../_include/interface-address-with-dhcp.txt:11 +#: ../../_include/interface-address-with-dhcp.txt:11 +#: ../../_include/interface-address-with-dhcp.txt:11 +#: ../../_include/interface-address-with-dhcp.txt:11 +#: ../../_include/interface-address-with-dhcp.txt:11 +#: ../../_include/interface-address-with-dhcp.txt:11 +#: ../../_include/interface-address-with-dhcp.txt:11 +#: ../../_include/interface-address-with-dhcp.txt:11 +#: ../../_include/interface-address-with-dhcp.txt:11 +#: ../../_include/interface-address-with-dhcp.txt:11 +msgid "**dhcpv6** interface address is received by DHCPv6 from a DHCPv6 server on this segment." +msgstr "DHCPv6 recibe la dirección de la interfaz **dhcpv6** desde un servidor DHCPv6 en este segmento." + +#: ../../configuration/service/dhcp-relay.rst:75 +msgid "**discard:** Received packets which already contain relay information will be discarded." +msgstr "**descartar:** Se descartarán los paquetes recibidos que ya contengan información de retransmisión." + +#: ../../configuration/protocols/igmp.rst:195 +msgid "**downstream:** Downstream network interfaces are the distribution interfaces to the destination networks, where multicast clients can join groups and receive multicast data. One or more downstream interfaces must be configured." +msgstr "**descendente:** Las interfaces de red descendentes son las interfaces de distribución a las redes de destino, donde los clientes de multidifusión pueden unirse a grupos y recibir datos de multidifusión. Se deben configurar una o más interfaces descendentes." + +#: ../../configuration/system/flow-accounting.rst:28 +msgid "**exporter**: aggregates packets into flows and exports flow records towards one or more flow collectors" +msgstr "**exportador**: agrega paquetes en flujos y exporta registros de flujo hacia uno o más recopiladores de flujo" + +#: ../../configuration/firewall/general-legacy.rst:51 +msgid "**firewall all-ping** affects only to LOCAL and it always behaves in the most restrictive way" +msgstr "**firewall all-ping** afecta solo a LOCAL y siempre se comporta de la manera más restrictiva" + +#: ../../configuration/firewall/general.rst:106 +msgid "**firewall global-options all-ping** affects only to LOCAL and it always behaves in the most restrictive way" +msgstr "**firewall global-options all-ping** affects only to LOCAL and it always behaves in the most restrictive way" + +#: ../../configuration/service/dhcp-relay.rst:78 +msgid "**forward:** All packets are forwarded, relay information already present will be ignored." +msgstr "**reenviar:** Todos los paquetes se reenvían, la información de retransmisión ya presente se ignorará." + +#: ../../configuration/nat/nat44.rst:159 +msgid "**inbound-interface** - applicable only to :ref:`destination-nat`. It configures the interface which is used for the inside traffic the translation rule applies to." +msgstr "**interfaz de entrada** - aplicable solo a :ref:`destination-nat`. Configura la interfaz que se utiliza para el tráfico interno al que se aplica la regla de traducción." + +#: ../../configuration/interfaces/bonding.rst:161 +msgid "**layer2** - Uses XOR of hardware MAC addresses and packet type ID field to generate the hash. The formula is" +msgstr "**capa2**: utiliza XOR de direcciones MAC de hardware y campo de ID de tipo de paquete para generar el hash. la fórmula es" + +#: ../../configuration/interfaces/bonding.rst:174 +msgid "**layer2+3** - This policy uses a combination of layer2 and layer3 protocol information to generate the hash. Uses XOR of hardware MAC addresses and IP addresses to generate the hash. The formula is:" +msgstr "**layer2+3**: esta política utiliza una combinación de información de protocolo de capa 2 y capa 3 para generar el hash. Utiliza XOR de direcciones MAC de hardware y direcciones IP para generar el hash. La fórmula es:" + +#: ../../configuration/interfaces/bonding.rst:200 +msgid "**layer3+4** - This policy uses upper layer protocol information, when available, to generate the hash. This allows for traffic to a particular network peer to span multiple slaves, although a single connection will not span multiple slaves." +msgstr "**layer3+4**: esta política usa información de protocolo de capa superior, cuando está disponible, para generar el hash. Esto permite que el tráfico a un par de red en particular abarque múltiples esclavos, aunque una sola conexión no abarcará múltiples esclavos." + +#: ../../configuration/vpn/site2site_ipsec.rst:288 +msgid "**left**" +msgstr "**izquierda**" + +#: ../../configuration/protocols/isis.rst:87 +msgid "**level-1** - Act as a station (Level 1) router only." +msgstr "**nivel-1**: actúa solo como enrutador de estación (nivel 1)." + +#: ../../configuration/protocols/isis.rst:153 +msgid "**level-1** - Level-1 only adjacencies are formed." +msgstr "**level-1** - Solo se forman adyacencias de nivel 1." + +#: ../../configuration/protocols/isis.rst:88 +msgid "**level-1-2** - Act as a station (Level 1) router and area (Level 2) router." +msgstr "**level-1-2** - Actúa como enrutador de estación (Nivel 1) y enrutador de área (Nivel 2)." + +#: ../../configuration/protocols/isis.rst:154 +msgid "**level-1-2** - Level-1-2 adjacencies are formed" +msgstr "**level-1-2** - Se forman adyacencias de nivel 1-2" + +#: ../../configuration/protocols/isis.rst:89 +msgid "**level-2-only** - Act as an area (Level 2) router only." +msgstr "**solo nivel 2**: actúa solo como un enrutador de área (nivel 2)." + +#: ../../configuration/protocols/isis.rst:155 +msgid "**level-2-only** - Level-2 only adjacencies are formed" +msgstr "**solo nivel 2**: se forman adyacencias solo de nivel 2" + +#: ../../configuration/vpn/sstp.rst:105 +msgid "**local**: All authentication queries are handled locally." +msgstr "**local**: Todas las consultas de autenticación se manejan localmente." + +#: ../../configuration/interfaces/wireguard.rst:140 +msgid "**local side - commands**" +msgstr "**lado local - comandos**" + +#: ../../configuration/service/dns.rst:83 +msgid "**log-fail** In this mode, the recursor will attempt to validate all data it retrieves from authoritative servers, regardless of the client's DNSSEC desires, and will log the validation result. This mode can be used to determine the extra load and amount of possibly bogus answers before turning on full-blown validation. Responses to client queries are the same as with process." +msgstr "**log-fail** En este modo, el recursor intentará validar todos los datos que recupera de los servidores autorizados, independientemente de los deseos de DNSSEC del cliente, y registrará el resultado de la validación. Este modo se puede usar para determinar la carga adicional y la cantidad de respuestas posiblemente falsas antes de activar la validación completa. Las respuestas a las consultas de los clientes son las mismas que con el proceso." + +#: ../../configuration/protocols/isis.rst:100 +msgid "**narrow** - Use old style of TLVs with narrow metric." +msgstr "**estrecho**: use el estilo antiguo de TLV con métrica estrecha." + +#: ../../configuration/container/index.rst:119 +msgid "**net-admin**: Network operations (interface, firewall, routing tables)" +msgstr "**net-admin**: operaciones de red (interfaz, cortafuegos, tablas de enrutamiento)" + +#: ../../configuration/container/index.rst:120 +msgid "**net-bind-service**: Bind a socket to privileged ports (port numbers less than 1024)" +msgstr "**net-bind-service**: vincula un socket a puertos privilegiados (números de puerto inferiores a 1024)" + +#: ../../configuration/container/index.rst:121 +msgid "**net-raw**: Permission to create raw network sockets" +msgstr "**net-raw**: permiso para crear sockets de red sin procesar" + +#: ../../configuration/container/index.rst:100 +msgid "**no**: Do not restart containers on exit" +msgstr "**no**: no reinicie los contenedores al salir" + +#: ../../configuration/service/dns.rst:66 +msgid "**off** In this mode, no DNSSEC processing takes place. The recursor will not set the DNSSEC OK (DO) bit in the outgoing queries and will ignore the DO and AD bits in queries." +msgstr "**apagado** En este modo, no se lleva a cabo ningún procesamiento de DNSSEC. El recursor no establecerá el bit DNSSEC OK (DO) en las consultas salientes e ignorará los bits DO y AD en las consultas." + +#: ../../configuration/container/index.rst:101 +msgid "**on-failure**: Restart containers when they exit with a non-zero exit code, retrying indefinitely (default)" +msgstr "**en caso de error**: reiniciar los contenedores cuando salen con un código de salida distinto de cero, reintentando indefinidamente (predeterminado)" + +#: ../../configuration/nat/nat44.rst:149 +msgid "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to." +msgstr "**interfaz de salida** - aplicable solo a :ref:`source-nat`. Configura la interfaz que se utiliza para el tráfico externo al que se aplica esta regla de traducción." + +#: ../../configuration/vpn/sstp.rst:187 +msgid "**prefer** - ask client for mppe, if it rejects don't fail" +msgstr "**preferir** - preguntar al cliente por mppe, si lo rechaza no fallar" + +#: ../../configuration/service/dns.rst:77 +msgid "**process** When dnssec is set to process the behavior is similar to process-no-validate. However, the recursor will try to validate the data if at least one of the DO or AD bits is set in the query; in that case, it will set the AD-bit in the response when the data is validated successfully, or send SERVFAIL when the validation comes up bogus." +msgstr "**proceso** Cuando dnssec está configurado para procesar, el comportamiento es similar a procesar sin validar. Sin embargo, el recursor intentará validar los datos si al menos uno de los bits DO o AD está configurado en la consulta; en ese caso, establecerá el bit AD en la respuesta cuando los datos se validen con éxito, o enviará SERVFAIL cuando la validación resulte falsa." + +#: ../../configuration/service/dns.rst:70 +msgid "**process-no-validate** In this mode the recursor acts as a \"security aware, non-validating\" nameserver, meaning it will set the DO-bit on outgoing queries and will provide DNSSEC related RRsets (NSEC, RRSIG) to clients that ask for them (by means of a DO-bit in the query), except for zones provided through the auth-zones setting. It will not do any validation in this mode, not even when requested by the client." +msgstr "**procesar sin validar** En este modo, el recursor actúa como un servidor de nombres "consciente de la seguridad, que no valida", lo que significa que establecerá el bit DO en las consultas salientes y proporcionará RRsets relacionados con DNSSEC (NSEC, RRSIG) para clientes que las soliciten (mediante un DO-bit en la consulta), excepto las zonas proporcionadas a través de la configuración auth-zones. No realizará ninguna validación en este modo, ni siquiera cuando lo solicite el cliente." + +#: ../../configuration/nat/nat44.rst:169 +msgid "**protocol** - specify which types of protocols this translation rule applies to. Only packets matching the specified protocol are NATed. By default this applies to `all` protocols." +msgstr "**protocolo**: especifique a qué tipos de protocolos se aplica esta regla de traducción. Solo los paquetes que coinciden con el protocolo especificado reciben NAT. Por defecto, esto se aplica a `todos` los protocolos." + +#: ../../configuration/vpn/sstp.rst:103 +msgid "**radius**: All authentication queries are handled by a configured RADIUS server." +msgstr "**radius**: Todas las consultas de autenticación son manejadas por un servidor RADIUS configurado." + +#: ../../configuration/interfaces/wireguard.rst:190 +msgid "**remote side - commands**" +msgstr "**lado remoto - comandos**" + +#: ../../configuration/service/dhcp-relay.rst:81 +msgid "**replace:** Relay information already present in a packet is stripped and replaced with the router's own relay information set." +msgstr "**reemplazar:** la información de retransmisión que ya está presente en un paquete se elimina y se reemplaza con el propio conjunto de información de retransmisión del enrutador." + +#: ../../configuration/vpn/sstp.rst:186 +msgid "**require** - ask client for mppe, if it rejects drop connection" +msgstr "**requerir**: solicitar al cliente mppe, si rechaza la conexión de caída" + +#: ../../configuration/vpn/site2site_ipsec.rst:319 +msgid "**right**" +msgstr "**bien**" + +#: ../../configuration/container/index.rst:122 +msgid "**setpcap**: Capability sets (from bounded or inherited set)" +msgstr "**setpcap**: conjuntos de capacidades (del conjunto acotado o heredado)" + +#: ../../configuration/nat/nat44.rst:183 +msgid "**source** - specifies which packets the NAT translation rule applies to based on the packets source IP address and/or source port. Only matching packets are considered for NAT." +msgstr "**origen**: especifica a qué paquetes se aplica la regla de traducción de NAT según la dirección IP de origen de los paquetes y/o el puerto de origen. Solo los paquetes coincidentes se consideran para NAT." + +#: ../../configuration/container/index.rst:123 +msgid "**sys-admin**: Administation operations (quotactl, mount, sethostname, setdomainame)" +msgstr "**sys-admin**: Operaciones de administración (quotactl, mount, sethostname, setdomainname)" + +#: ../../configuration/container/index.rst:124 +msgid "**sys-time**: Permission to set system clock" +msgstr "**sys-time**: permiso para configurar el reloj del sistema" + +#: ../../configuration/protocols/isis.rst:101 +msgid "**transition** - Send and accept both styles of TLVs during transition." +msgstr "**transición**: envíe y acepte ambos estilos de TLV durante la transición." + +#: ../../configuration/protocols/igmp.rst:191 +msgid "**upstream:** The upstream network interface is the outgoing interface which is responsible for communicating to available multicast data sources. There can only be one upstream interface." +msgstr "**ascendente:** La interfaz de red ascendente es la interfaz de salida que es responsable de comunicarse con las fuentes de datos de multidifusión disponibles. Solo puede haber una interfaz ascendente." + +#: ../../configuration/service/dns.rst:90 +msgid "**validate** The highest mode of DNSSEC processing. In this mode, all queries will be validated and will be answered with a SERVFAIL in case of bogus data, regardless of the client's request." +msgstr "**validar** El modo más alto de procesamiento de DNSSEC. En este modo, todas las consultas serán validadas y respondidas con un SERVFAIL en caso de datos falsos, independientemente de la solicitud del cliente." + +#: ../../configuration/protocols/isis.rst:102 +msgid "**wide** - Use new style of TLVs to carry wider metric." +msgstr "**ancho**: use el nuevo estilo de TLV para llevar una métrica más amplia." + +#: ../../configuration/protocols/bgp.rst:143 +msgid "*bgpd* supports Multiprotocol Extension for BGP. So if a remote peer supports the protocol, *bgpd* can exchange IPv6 and/or multicast routing information." +msgstr "*bgpd* admite la extensión multiprotocolo para BGP. Entonces, si un par remoto admite el protocolo, *bgpd* puede intercambiar información de enrutamiento de IPv6 y/o multidifusión." + +#: ../../configuration/system/syslog.rst:112 +#: ../../configuration/system/syslog.rst:171 +#: ../../configuration/trafficpolicy/index.rst:267 +#: ../../configuration/trafficpolicy/index.rst:803 +#: ../../configuration/trafficpolicy/index.rst:878 +msgid "0" +msgstr "0" + +#: ../../configuration/trafficpolicy/index.rst:267 +msgid "000000" +msgstr "000000" + +#: ../../configuration/trafficpolicy/index.rst:269 +msgid "001010" +msgstr "001010" + +#: ../../configuration/trafficpolicy/index.rst:271 +msgid "001100" +msgstr "001100" + +#: ../../configuration/trafficpolicy/index.rst:273 +msgid "001110" +msgstr "001110" + +#: ../../configuration/trafficpolicy/index.rst:275 +msgid "010010" +msgstr "010010" + +#: ../../configuration/trafficpolicy/index.rst:277 +msgid "010100" +msgstr "010100" + +#: ../../configuration/trafficpolicy/index.rst:279 +msgid "010110" +msgstr "010110" + +#: ../../configuration/trafficpolicy/index.rst:281 +msgid "011010" +msgstr "011010" + +#: ../../configuration/trafficpolicy/index.rst:283 +msgid "011100" +msgstr "011100" + +#: ../../configuration/trafficpolicy/index.rst:285 +msgid "011110" +msgstr "011110" + +#: ../../_include/interface-ipv6.txt:79 +#: ../../_include/interface-ipv6.txt:79 +#: ../../_include/interface-ipv6.txt:79 +#: ../../_include/interface-ipv6.txt:79 +#: ../../_include/interface-ipv6.txt:79 +#: ../../_include/interface-ipv6.txt:79 +#: ../../_include/interface-ipv6.txt:79 +#: ../../_include/interface-ipv6.txt:79 +#: ../../_include/interface-ipv6.txt:79 +#: ../../_include/interface-ipv6.txt:79 +#: ../../_include/interface-ipv6.txt:79 +#: ../../_include/interface-ipv6.txt:79 +#: ../../_include/interface-ipv6.txt:79 +#: ../../_include/interface-ipv6.txt:79 +#: ../../_include/interface-ipv6.txt:79 +#: ../../_include/interface-ipv6.txt:79 +#: ../../_include/interface-ipv6.txt:79 +#: ../../_include/interface-ipv6.txt:79 +#: ../../_include/interface-ipv6.txt:79 +#: ../../_include/interface-ipv6.txt:79 +msgid "0: Disable DAD" +msgstr "0: Disable DAD" + +#: ../../configuration/highavailability/index.rst:267 +msgid "0 if not defined, which means no refreshing." +msgstr "0 si no está definido, lo que significa que no se actualiza." + +#: ../../configuration/highavailability/index.rst:249 +msgid "0 if not defined." +msgstr "0 si no está definido." + +#: ../../configuration/service/dhcp-server.rst:270 +#: ../../configuration/system/syslog.rst:114 +#: ../../configuration/system/syslog.rst:173 +#: ../../configuration/trafficpolicy/index.rst:801 +#: ../../configuration/trafficpolicy/index.rst:876 +msgid "1" +msgstr "1" + +#: ../../configuration/nat/nat44.rst:588 +msgid "1-to-1 NAT" +msgstr "NAT 1 a 1" + +#: ../../configuration/system/syslog.rst:132 +#: ../../configuration/trafficpolicy/index.rst:269 +#: ../../configuration/trafficpolicy/index.rst:876 +msgid "10" +msgstr "10" + +#: ../../configuration/interfaces/ethernet.rst:51 +msgid "100000 - 100 GBit/s" +msgstr "100000 - 100 GBit/s" + +#: ../../configuration/interfaces/ethernet.rst:47 +msgid "10000 - 10 GBit/s" +msgstr "10000 - 10 GBit/s" + +#: ../../configuration/trafficpolicy/index.rst:287 +msgid "100010" +msgstr "100010" + +#: ../../configuration/interfaces/ethernet.rst:44 +msgid "1000 - 1 GBit/s" +msgstr "1000 - 1 GBit/s" + +#: ../../configuration/trafficpolicy/index.rst:289 +msgid "100100" +msgstr "100100" + +#: ../../configuration/trafficpolicy/index.rst:291 +msgid "100110" +msgstr "100110" + +#: ../../configuration/interfaces/ethernet.rst:43 +msgid "100 - 100 MBit/s" +msgstr "100 - 100 MBit/s" + +#: ../../configuration/trafficpolicy/index.rst:265 +msgid "101110" +msgstr "101110" + +#: ../../configuration/nat/nat44.rst:38 +msgid "10.0.0.0 to 10.255.255.255 (CIDR: 10.0.0.0/8)" +msgstr "10.0.0.0 a 10.255.255.255 (CIDR: 10.0.0.0/8)" + +#: ../../configuration/interfaces/ethernet.rst:42 +msgid "10 - 10 MBit/s" +msgstr "10 - 10 MBit/s" + +#: ../../configuration/system/syslog.rst:134 +#: ../../configuration/trafficpolicy/index.rst:874 +msgid "11" +msgstr "11" + +#: ../../configuration/service/dhcp-server.rst:352 +msgid "119" +msgstr "119" + +#: ../../configuration/system/syslog.rst:136 +#: ../../configuration/trafficpolicy/index.rst:271 +#: ../../configuration/trafficpolicy/index.rst:872 +msgid "12" +msgstr "12" + +#: ../../configuration/service/dhcp-server.rst:357 +msgid "121, 249" +msgstr "121, 249" + +#: ../../configuration/service/dhcp-server.rst:337 +#: ../../configuration/system/syslog.rst:138 +#: ../../configuration/trafficpolicy/index.rst:870 +msgid "13" +msgstr "13" + +#: ../../configuration/system/syslog.rst:140 +#: ../../configuration/trafficpolicy/index.rst:273 +#: ../../configuration/trafficpolicy/index.rst:868 +msgid "14" +msgstr "14" + +#: ../../configuration/service/dhcp-server.rst:297 +#: ../../configuration/system/syslog.rst:142 +#: ../../configuration/trafficpolicy/index.rst:866 +msgid "15" +msgstr "15" + +#: ../../configuration/system/syslog.rst:144 +#: ../../configuration/trafficpolicy/index.rst:864 +msgid "16" +msgstr "dieciséis" + +#: ../../configuration/system/syslog.rst:146 +msgid "17" +msgstr "17" + +#: ../../configuration/nat/nat44.rst:39 +msgid "172.16.0.0 to 172.31.255.255 (CIDR: 172.16.0.0/12)" +msgstr "172.16.0.0 a 172.31.255.255 (CIDR: 172.16.0.0/12)" + +#: ../../configuration/system/syslog.rst:148 +#: ../../configuration/trafficpolicy/index.rst:275 +msgid "18" +msgstr "18" + +#: ../../configuration/service/dhcp-server.rst:302 +#: ../../configuration/system/syslog.rst:150 +msgid "19" +msgstr "19" + +#: ../../configuration/nat/nat44.rst:40 +msgid "192.168.0.0 to 192.168.255.255 (CIDR: 192.168.0.0/16)" +msgstr "192.168.0.0 a 192.168.255.255 (CIDR: 192.168.0.0/16)" + +#: ../../configuration/service/eventhandler.rst:32 +msgid "1. Create an event handler" +msgstr "1. Crea un controlador de eventos" + +#: ../../_include/interface-ipv6.txt:80 +#: ../../_include/interface-ipv6.txt:80 +#: ../../_include/interface-ipv6.txt:80 +#: ../../_include/interface-ipv6.txt:80 +#: ../../_include/interface-ipv6.txt:80 +#: ../../_include/interface-ipv6.txt:80 +#: ../../_include/interface-ipv6.txt:80 +#: ../../_include/interface-ipv6.txt:80 +#: ../../_include/interface-ipv6.txt:80 +#: ../../_include/interface-ipv6.txt:80 +#: ../../_include/interface-ipv6.txt:80 +#: ../../_include/interface-ipv6.txt:80 +#: ../../_include/interface-ipv6.txt:80 +#: ../../_include/interface-ipv6.txt:80 +#: ../../_include/interface-ipv6.txt:80 +#: ../../_include/interface-ipv6.txt:80 +#: ../../_include/interface-ipv6.txt:80 +#: ../../_include/interface-ipv6.txt:80 +#: ../../_include/interface-ipv6.txt:80 +#: ../../_include/interface-ipv6.txt:80 +msgid "1: Enable DAD (default)" +msgstr "1: Enable DAD (default)" + +#: ../../configuration/highavailability/index.rst:277 +msgid "1 if not defined." +msgstr "1 si no está definido." + +#: ../../configuration/service/dhcp-server.rst:276 +#: ../../configuration/system/syslog.rst:116 +#: ../../configuration/system/syslog.rst:178 +#: ../../configuration/trafficpolicy/index.rst:799 +#: ../../configuration/trafficpolicy/index.rst:874 +msgid "2" +msgstr "2" + +#: ../../configuration/system/syslog.rst:152 +#: ../../configuration/trafficpolicy/index.rst:277 +msgid "20" +msgstr "20" + +#: ../../configuration/system/syslog.rst:154 +msgid "21" +msgstr "21" + +#: ../../configuration/system/syslog.rst:156 +#: ../../configuration/trafficpolicy/index.rst:279 +msgid "22" +msgstr "22" + +#: ../../configuration/system/syslog.rst:158 +msgid "23" +msgstr "23" + +#: ../../configuration/interfaces/ethernet.rst:48 +msgid "25000 - 25 GBit/s" +msgstr "25000 - 25 GBit/s" + +#: ../../configuration/interfaces/ethernet.rst:45 +msgid "2500 - 2.5 GBit/s" +msgstr "2500 - 2,5 GBit/s" + +#: ../../configuration/service/dhcp-server.rst:362 +msgid "252" +msgstr "252" + +#: ../../configuration/trafficpolicy/index.rst:281 +msgid "26" +msgstr "26" + +#: ../../configuration/trafficpolicy/index.rst:283 +msgid "28" +msgstr "28" + +#: ../../configuration/vpn/openconnect.rst:59 +msgid "2FA OTP support" +msgstr "Soporte 2FA OTP" + +#: ../../configuration/service/eventhandler.rst:40 +msgid "2. Add regex to the script" +msgstr "2. Agregue expresiones regulares al script" + +#: ../../_include/interface-ipv6.txt:81 +#: ../../_include/interface-ipv6.txt:81 +#: ../../_include/interface-ipv6.txt:81 +#: ../../_include/interface-ipv6.txt:81 +#: ../../_include/interface-ipv6.txt:81 +#: ../../_include/interface-ipv6.txt:81 +#: ../../_include/interface-ipv6.txt:81 +#: ../../_include/interface-ipv6.txt:81 +#: ../../_include/interface-ipv6.txt:81 +#: ../../_include/interface-ipv6.txt:81 +#: ../../_include/interface-ipv6.txt:81 +#: ../../_include/interface-ipv6.txt:81 +#: ../../_include/interface-ipv6.txt:81 +#: ../../_include/interface-ipv6.txt:81 +#: ../../_include/interface-ipv6.txt:81 +#: ../../_include/interface-ipv6.txt:81 +#: ../../_include/interface-ipv6.txt:81 +#: ../../_include/interface-ipv6.txt:81 +#: ../../_include/interface-ipv6.txt:81 +#: ../../_include/interface-ipv6.txt:81 +msgid "2: Enable DAD, and disable IPv6 operation if MAC-based duplicate link-local address has been found." +msgstr "2: Enable DAD, and disable IPv6 operation if MAC-based duplicate link-local address has been found." + +#: ../../configuration/service/dhcp-server.rst:282 +#: ../../configuration/system/syslog.rst:118 +#: ../../configuration/system/syslog.rst:181 +#: ../../configuration/trafficpolicy/index.rst:797 +#: ../../configuration/trafficpolicy/index.rst:872 +msgid "3" +msgstr "3" + +#: ../../configuration/trafficpolicy/index.rst:285 +msgid "30" +msgstr "30" + +#: ../../configuration/trafficpolicy/index.rst:287 +msgid "34" +msgstr "34" + +#: ../../configuration/trafficpolicy/index.rst:289 +msgid "36" +msgstr "36" + +#: ../../configuration/trafficpolicy/index.rst:291 +msgid "38" +msgstr "38" + +#: ../../configuration/service/eventhandler.rst:51 +msgid "3. Add a full path to the script" +msgstr "3. Agregue una ruta completa al script" + +#: ../../configuration/service/dhcp-server.rst:287 +#: ../../configuration/system/syslog.rst:120 +#: ../../configuration/system/syslog.rst:183 +#: ../../configuration/trafficpolicy/index.rst:795 +#: ../../configuration/trafficpolicy/index.rst:870 +msgid "4" +msgstr "4" + +#: ../../configuration/interfaces/ethernet.rst:49 +msgid "40000 - 40 GBit/s" +msgstr "40000 - 40 GBit/s" + +#: ../../configuration/interfaces/wireless.rst:170 +msgid "40 MHz channels may switch their primary and secondary channels if needed or creation of 40 MHz channel maybe rejected based on overlapping BSSes. These changes are done automatically when hostapd is setting up the 40 MHz channel." +msgstr "Los canales de 40 MHz pueden cambiar sus canales primarios y secundarios si es necesario o la creación de un canal de 40 MHz puede rechazarse en función de los BSS superpuestos. Estos cambios se realizan automáticamente cuando hostapd está configurando el canal de 40 MHz." + +#: ../../configuration/service/dhcp-server.rst:307 +msgid "42" +msgstr "42" + +#: ../../configuration/service/dhcp-server.rst:312 +msgid "44" +msgstr "44" + +#: ../../configuration/trafficpolicy/index.rst:265 +msgid "46" +msgstr "46" + +#: ../../configuration/service/eventhandler.rst:60 +msgid "4. Add optional parameters" +msgstr "4. Agregar parámetros opcionales" + +#: ../../configuration/system/syslog.rst:122 +#: ../../configuration/system/syslog.rst:185 +#: ../../configuration/trafficpolicy/index.rst:793 +#: ../../configuration/trafficpolicy/index.rst:868 +msgid "5" +msgstr "5" + +#: ../../configuration/interfaces/ethernet.rst:50 +msgid "50000 - 50 GBit/s" +msgstr "50000 - 50 GBit/s" + +#: ../../configuration/interfaces/ethernet.rst:46 +msgid "5000 - 5 GBit/s" +msgstr "5000 - 5 GBit/s" + +#: ../../configuration/service/dhcp-server.rst:317 +msgid "54" +msgstr "54" + +#: ../../configuration/highavailability/index.rst:257 +#: ../../configuration/highavailability/index.rst:288 +msgid "5 if not defined." +msgstr "5 si no está definido." + +#: ../../configuration/service/dhcp-server.rst:292 +#: ../../configuration/system/syslog.rst:124 +#: ../../configuration/system/syslog.rst:189 +#: ../../configuration/trafficpolicy/index.rst:791 +#: ../../configuration/trafficpolicy/index.rst:866 +msgid "6" +msgstr "6" + +#: ../../configuration/service/dhcp-server.rst:327 +msgid "66" +msgstr "66" + +#: ../../configuration/loadbalancing/wan.rst:74 +msgid "66% of traffic is routed to eth0, eth1 gets 33% of traffic." +msgstr "El 66% del tráfico se enruta a eth0, eth1 obtiene el 33% del tráfico." + +#: ../../configuration/service/dhcp-server.rst:332 +msgid "67" +msgstr "67" + +#: ../../configuration/service/dhcp-server.rst:342 +msgid "69" +msgstr "69" + +#: ../../configuration/interfaces/tunnel.rst:81 +msgid "6in4 (SIT)" +msgstr "6 en 4 (SENTADO)" + +#: ../../configuration/interfaces/tunnel.rst:83 +msgid "6in4 uses tunneling to encapsulate IPv6 traffic over IPv4 links as defined in :rfc:`4213`. The 6in4 traffic is sent over IPv4 inside IPv4 packets whose IP headers have the IP protocol number set to 41. This protocol number is specifically designated for IPv6 encapsulation, the IPv4 packet header is immediately followed by the IPv6 packet being carried. The encapsulation overhead is the size of the IPv4 header of 20 bytes, therefore with an MTU of 1500 bytes, IPv6 packets of 1480 bytes can be sent without fragmentation. This tunneling technique is frequently used by IPv6 tunnel brokers like `Hurricane Electric`_." +msgstr "6in4 usa túneles para encapsular el tráfico IPv6 sobre enlaces IPv4 como se define en :rfc:`4213`. El tráfico 6in4 se envía a través de IPv4 dentro de paquetes IPv4 cuyos encabezados IP tienen el número de protocolo IP establecido en 41. Este número de protocolo está diseñado específicamente para la encapsulación IPv6, el encabezado del paquete IPv4 es seguido inmediatamente por el paquete IPv6 que se transporta. La sobrecarga de encapsulación es del tamaño del encabezado IPv4 de 20 bytes, por lo tanto, con una MTU de 1500 bytes, los paquetes IPv6 de 1480 bytes se pueden enviar sin fragmentación. Esta técnica de tunelización es utilizada con frecuencia por intermediarios de túneles IPv6 como `Hurricane Electric`_." + +#: ../../configuration/system/syslog.rst:126 +#: ../../configuration/system/syslog.rst:191 +#: ../../configuration/trafficpolicy/index.rst:789 +#: ../../configuration/trafficpolicy/index.rst:864 +msgid "7" +msgstr "7" + +#: ../../configuration/service/dhcp-server.rst:347 +msgid "70" +msgstr "70" + +#: ../../configuration/system/syslog.rst:128 +msgid "8" +msgstr "8" + +#: ../../_include/interface-vlan-8021q.txt:21 +#: ../../_include/interface-vlan-8021q.txt:21 +#: ../../_include/interface-vlan-8021q.txt:21 +#: ../../_include/interface-vlan-8021q.txt:21 +#: ../../_include/interface-vlan-8021q.txt:21 +#: ../../_include/interface-vlan-8021q.txt:21 +msgid "802.1q VLAN interfaces are represented as virtual sub-interfaces in VyOS. The term used for this is ``vif``." +msgstr "Las interfaces VLAN 802.1q se representan como subinterfaces virtuales en VyOS. El término utilizado para esto es ``vif``." + +#: ../../configuration/system/syslog.rst:130 +#: ../../configuration/trafficpolicy/index.rst:878 +msgid "9" +msgstr "9" + +#: ../../configuration/policy/route.rst:98 +msgid "<1-65535>: Numbered port." +msgstr "<1-65535>: Puerto numerado." + +#: ../../configuration/policy/extcommunity-list.rst:38 +msgid ": Extended community list regular expression." +msgstr ": Expresión regular de lista extendida de la comunidad." + +#: ../../configuration/policy/route.rst:71 +msgid ": IPv6 prefix to match." +msgstr ": Prefijo IPv6 para coincidir." + +#: ../../configuration/policy/route.rst:72 +msgid "-: IPv6 range to match." +msgstr "- : Rango de IPv6 para coincidir." + +#: ../../configuration/policy/route.rst:70 +msgid ": IPv6 address to match." +msgstr ": dirección IPv6 para hacer coincidir." + +#: ../../configuration/system/syslog.rst:230 +msgid "" +msgstr "" + +#: ../../configuration/interfaces/wireless.rst:251 +msgid " must be from 34 - 173. For 80 MHz channels it should be channel + 6." +msgstr "debe ser de 34 a 173. Para canales de 80 MHz, debe ser el canal + 6." + +#: ../../configuration/protocols/ospf.rst:346 +msgid " – area identifier through which a virtual link goes. – ABR router-id with which a virtual link is established. Virtual link must be configured on both routers." +msgstr "– identificador de área por donde pasa un enlace virtual. – ABR router-id con el que se establece un enlace virtual. El enlace virtual debe configurarse en ambos enrutadores." + +#: ../../configuration/policy/route.rst:97 +msgid ": Named port (any name in /etc/services, e.g., http)." +msgstr ": Puerto con nombre (cualquier nombre en /etc/services, por ejemplo, http)." + +#: ../../configuration/policy/extcommunity-list.rst:39 +msgid ": Route Target regular expression." +msgstr ": expresión regular de destino de ruta." + +#: ../../configuration/policy/extcommunity-list.rst:40 +msgid ": Site of Origin regular expression." +msgstr ": expresión regular del sitio de origen." + +#: ../../configuration/policy/route.rst:99 +msgid "-: Numbered port range (e.g., 1001-1005)." +msgstr "- : Intervalo de puertos numerados (p. ej., 1001-1005)." + +#: ../../configuration/policy/route.rst:63 +msgid ": Subnet to match." +msgstr ": Subred para hacer coincidir." + +#: ../../configuration/policy/route.rst:64 +msgid "-: IP range to match." +msgstr "- : rango de IP para coincidir." + +#: ../../configuration/policy/route.rst:62 +msgid ": IP address to match." +msgstr ": dirección IP para hacer coincidir." + +#: ../../configuration/protocols/static.rst:150 +msgid "ARP" +msgstr "ARP" + +#: ../../configuration/firewall/general.rst:309 +#: ../../configuration/firewall/general-legacy.rst:257 +msgid "A **domain group** represents a collection of domains." +msgstr "Un **grupo de dominio** representa una colección de dominios." + +#: ../../configuration/firewall/general.rst:291 +#: ../../configuration/firewall/general-legacy.rst:242 +msgid "A **mac group** represents a collection of mac addresses." +msgstr "Un **grupo mac** representa una colección de direcciones mac." + +#: ../../configuration/firewall/general.rst:266 +#: ../../configuration/firewall/general-legacy.rst:217 +msgid "A **port group** represents only port numbers, not the protocol. Port groups can be referenced for either TCP or UDP. It is recommended that TCP and UDP groups are created separately to avoid accidentally filtering unnecessary ports. Ranges of ports can be specified by using `-`." +msgstr "Un **grupo de puertos** representa solo números de puerto, no el protocolo. Se puede hacer referencia a los grupos de puertos para TCP o UDP. Se recomienda que los grupos TCP y UDP se creen por separado para evitar el filtrado accidental de puertos innecesarios. Los rangos de puertos se pueden especificar usando `-`." + +#: ../../configuration/trafficpolicy/index.rst:84 +msgid "A *bit* is written as **bit**," +msgstr "Un *bit* se escribe como **bit**," + +#: ../../configuration/protocols/rpki.rst:21 +msgid "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), Cloudflare's GoRTR_ and OctoRPKI_ (written in Go), and RIPE NCC's RPKI Validator_ (written in Java). The RTR protocol is described in :rfc:`8210`." +msgstr "Un enrutador que habla BGP como VyOS puede recuperar información de ROA del "software de usuario de confianza" RPKI (a menudo llamado simplemente "servidor RPKI" o "validador RPKI") mediante el uso del protocolo :abbr:`RTR (RPKI to Router)`. Hay varias implementaciones de código abierto para elegir, como Routinator_ de NLNetLabs (escrito en Rust), GoRTR_ y OctoRPKI_ de Cloudflare (escrito en Go) y RPKI Validator_ de RIPE NCC (escrito en Java). El protocolo RTR se describe en :rfc:`8210`." + +#: ../../configuration/protocols/bgp.rst:929 +msgid "A BGP confederation divides our AS into sub-ASes to reduce the number of required IBGP peerings. Within a sub-AS we still require full-mesh IBGP but between these sub-ASes we use something that looks like EBGP but behaves like IBGP (called confederation BGP). Confederation mechanism is described in :rfc:`5065`" +msgstr "Una confederación BGP divide nuestro AS en sub-AS para reducir la cantidad de interconexiones IBGP requeridas. Dentro de un sub-AS aún requerimos IBGP de malla completa, pero entre estos sub-AS usamos algo que se parece a EBGP pero se comporta como IBGP (llamado BGP de confederación). El mecanismo de confederación se describe en :rfc:`5065`" + +#: ../../configuration/interfaces/bridge.rst:9 +msgid "A Bridge is a way to connect two Ethernet segments together in a protocol independent way. Packets are forwarded based on Ethernet address, rather than IP address (like a router). Since forwarding is done at Layer 2, all protocols can go transparently through a bridge. The Linux bridge code implements a subset of the ANSI/IEEE 802.1d standard." +msgstr "Un puente es una forma de conectar dos segmentos de Ethernet de forma independiente del protocolo. Los paquetes se reenvían en función de la dirección Ethernet, en lugar de la dirección IP (como un enrutador). Dado que el reenvío se realiza en la Capa 2, todos los protocolos pueden pasar de forma transparente a través de un puente. El código puente de Linux implementa un subconjunto del estándar ANSI/IEEE 802.1d." + +#: ../../configuration/interfaces/tunnel.rst:108 +msgid "A GRE tunnel operates at layer 3 of the OSI model and is represented by IP protocol 47. The main benefit of a GRE tunnel is that you are able to carry multiple protocols inside the same tunnel. GRE also supports multicast traffic and supports routing protocols that leverage multicast to form neighbor adjacencies." +msgstr "Un túnel GRE opera en la capa 3 del modelo OSI y está representado por el protocolo IP 47. El principal beneficio de un túnel GRE es que puede transportar múltiples protocolos dentro del mismo túnel. GRE también admite tráfico de multidifusión y admite protocolos de enrutamiento que aprovechan la multidifusión para formar adyacencias vecinas." + +#: ../../configuration/firewall/general-legacy.rst:749 +msgid "A Rule-Set can be applied to every interface:" +msgstr "Se puede aplicar un conjunto de reglas a cada interfaz:" + +#: ../../configuration/service/dhcp-server.rst:631 +msgid "A SNTP server address can be specified for DHCPv6 clients." +msgstr "Se puede especificar una dirección de servidor SNTP para clientes DHCPv6." + +#: ../../configuration/vrf/index.rst:18 +msgid "A VRF device is created with an associated route table. Network interfaces are then enslaved to a VRF device." +msgstr "Se crea un dispositivo VRF con una tabla de rutas asociada. Luego, las interfaces de red se esclavizan a un dispositivo VRF." + +#: ../../configuration/interfaces/tunnel.rst:114 +msgid "A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created over either IPv4 (gre) or IPv6 (ip6gre)." +msgstr "Un túnel VyOS GRE puede transportar tráfico IPv4 e IPv6 y también se puede crear sobre IPv4 (gre) o IPv6 (ip6gre)." + +#: ../../configuration/service/dns.rst:149 +msgid "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com." +msgstr "Se requiere un enrutador VyOS con dos interfaces, eth0 (WAN) y eth1 (LAN), para implementar una configuración de DNS de horizonte dividido para example.com." + +#: ../../configuration/service/dhcp-server.rst:603 +msgid "A :abbr:`NIS (Network Information Service)` domain can be set to be used for DHCPv6 clients." +msgstr "Se puede configurar un dominio :abbr:`NIS (Servicio de información de red)` para que se use con clientes DHCPv6." + +#: ../../configuration/interfaces/tunnel.rst:121 +msgid "A basic configuration requires a tunnel source (source-address), a tunnel destination (remote), an encapsulation type (gre), and an address (ipv4/ipv6). Below is a basic IPv4 only configuration example taken from a VyOS router and a Cisco IOS router. The main difference between these two configurations is that VyOS requires you explicitly configure the encapsulation type. The Cisco router defaults to GRE IP otherwise it would have to be configured as well." +msgstr "Una configuración básica requiere un origen de túnel (dirección de origen), un destino de túnel (remoto), un tipo de encapsulación (gre) y una dirección (ipv4/ipv6). A continuación se muestra un ejemplo de configuración básica de solo IPv4 tomado de un enrutador VyOS y un enrutador Cisco IOS. La principal diferencia entre estas dos configuraciones es que VyOS requiere que configure explícitamente el tipo de encapsulación. El enrutador de Cisco tiene como valor predeterminado IP GRE; de lo contrario, también tendría que configurarse." + +#: ../../configuration/firewall/zone.rst:54 +msgid "A basic introduction to zone-based firewalls can be found `here `_, and an example at :ref:`examples-zone-policy`." +msgstr "A basic introduction to zone-based firewalls can be found `here `_, and an example at :ref:`examples-zone-policy`." + +#: ../../configuration/interfaces/bridge.rst:195 +#: ../../configuration/interfaces/bridge.rst:229 +msgid "A bridge named `br100`" +msgstr "Un puente llamado `br100`" + +#: ../../configuration/trafficpolicy/index.rst:147 +msgid "A class can have multiple match filters:" +msgstr "Una clase puede tener varios filtros de coincidencia:" + +#: ../../configuration/trafficpolicy/index.rst:307 +msgid "A common example is the case of some policies which, in order to be effective, they need to be applied to an interface that is directly connected where the bottleneck is. If your router is not directly connected to the bottleneck, but some hop before it, you can emulate the bottleneck by embedding your non-shaping policy into a classful shaping one so that it takes effect." +msgstr "Un ejemplo común es el caso de algunas políticas que, para ser efectivas, necesitan ser aplicadas a una interfaz que está conectada directamente donde está el cuello de botella. Si su enrutador no está conectado directamente al cuello de botella, pero algunos saltan antes de él, puede emular el cuello de botella incorporando su política de no modelado en una de modelado con clase para que surta efecto." + +#: ../../configuration/interfaces/openvpn.rst:538 +msgid "A complete LDAP auth OpenVPN configuration could look like the following example:" +msgstr "Una configuración OpenVPN de autenticación LDAP completa podría parecerse al siguiente ejemplo:" + +#: ../../configuration/vpn/sstp.rst:323 +msgid "A connection attempt will be shown as:" +msgstr "Un intento de conexión se mostrará como:" + +#: ../../configuration/interfaces/pppoe.rst:330 +msgid "A default route is automatically installed once the interface is up. To change this behavior use the ``no-default-route`` CLI option." +msgstr "Una ruta predeterminada se instala automáticamente una vez que la interfaz está activa. Para cambiar este comportamiento, utilice la opción CLI ``no-default-route``." + +#: ../../configuration/service/broadcast-relay.rst:22 +msgid "A description can be added for each and every unique relay ID. This is useful to distinguish between multiple different ports/appliactions." +msgstr "Se puede agregar una descripción para cada ID de relé único. Esto es útil para distinguir entre múltiples puertos/aplicaciones diferentes." + +#: ../../configuration/highavailability/index.rst:78 +msgid "A disabled group will be removed from the VRRP process and your router will not participate in VRRP for that VRID. It will disappear from operational mode commands output, rather than enter the backup state." +msgstr "Un grupo deshabilitado se eliminará del proceso VRRP y su enrutador no participará en VRRP para ese VRID. Desaparecerá de la salida de comandos del modo operativo, en lugar de ingresar al estado de respaldo." + +#: ../../configuration/system/host-name.rst:34 +msgid "A domain name is the label (name) assigned to a computer network and is thus unique. VyOS appends the domain name as a suffix to any unqualified name. For example, if you set the domain name `example.com`, and you would ping the unqualified name of `crux`, then VyOS qualifies the name to `crux.example.com`." +msgstr "Un nombre de dominio es la etiqueta (nombre) asignada a una red informática y, por lo tanto, es única. VyOS agrega el nombre de dominio como sufijo a cualquier nombre no calificado. Por ejemplo, si configura el nombre de dominio `example.com` y hace ping al nombre no calificado de `crux`, entonces VyOS califica el nombre como `crux.example.com`." + +#: ../../configuration/nat/nat44.rst:685 +msgid "A dummy interface for the provider-assigned IP;" +msgstr "Una interfaz ficticia para la IP asignada por el proveedor;" + +#: ../../configuration/highavailability/index.rst:426 +msgid "A firewall mark ``fwmark`` allows using multiple ports for high-availability virtual-server. It uses fwmark value." +msgstr "Una marca de firewall ``fwmark`` permite usar múltiples puertos para un servidor virtual de alta disponibilidad. Utiliza el valor fwmark." + +#: ../../configuration/interfaces/tunnel.rst:102 +msgid "A full example of a Tunnelbroker.net config can be found at :ref:`here `." +msgstr "Puede encontrar un ejemplo completo de una configuración de Tunnelbroker.net en :ref:`aquí `." + +#: ../../configuration/service/dhcp-server.rst:187 +msgid "A generic `` referencing this sync service." +msgstr "Un genérico ` ` que hace referencia a este servicio de sincronización." + +#: ../../configuration/system/host-name.rst:18 +msgid "A hostname is the label (name) assigned to a network device (a host) on a network and is used to distinguish one device from another on specific networks or over the internet. On the other hand this will be the name which appears on the command line prompt." +msgstr "Un nombre de host es la etiqueta (nombre) asignada a un dispositivo de red (un host) en una red y se usa para distinguir un dispositivo de otro en redes específicas o en Internet. Por otro lado, este será el nombre que aparecerá en la línea de comandos." + +#: ../../configuration/pki/index.rst:189 +msgid "A human readable description what this CA is about." +msgstr "Una descripción legible por humanos de qué se trata esta CA." + +#: ../../configuration/pki/index.rst:228 +msgid "A human readable description what this certificate is about." +msgstr "Una descripción legible por humanos de qué se trata este certificado." + +#: ../../configuration/interfaces/loopback.rst:17 +msgid "A lookback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." +msgstr "Una interfaz de búsqueda siempre está activa, por lo que podría usarse para administrar el tráfico o como origen/destino para y :abbr:`IGP (Protocolo de puerta de enlace interior)` como :ref:`routing-bgp` para que su enlace BGP interno no dependa en los estados del enlace físico y se pueden elegir múltiples rutas hacia el destino. Siempre se debe preferir una interfaz :ref:`dummy-interface` a una interfaz :ref:`loopback-interface`." + +#: ../../configuration/service/snmp.rst:42 +msgid "A managed device is a network node that implements an SNMP interface that allows unidirectional (read-only) or bidirectional (read and write) access to node-specific information. Managed devices exchange node-specific information with the NMSs. Sometimes called network elements, the managed devices can be any type of device, including, but not limited to, routers, access servers, switches, cable modems, bridges, hubs, IP telephones, IP video cameras, computer hosts, and printers." +msgstr "Un dispositivo administrado es un nodo de red que implementa una interfaz SNMP que permite el acceso unidireccional (solo lectura) o bidireccional (lectura y escritura) a información específica del nodo. Los dispositivos administrados intercambian información específica del nodo con los NMS. A veces llamados elementos de red, los dispositivos administrados pueden ser cualquier tipo de dispositivo, incluidos, entre otros, enrutadores, servidores de acceso, conmutadores, módems de cable, puentes, concentradores, teléfonos IP, cámaras de video IP, hosts informáticos e impresoras." + +#: ../../configuration/trafficpolicy/index.rst:154 +msgid "A match filter can contain multiple criteria and will match traffic if all those criteria are true." +msgstr "Un filtro de coincidencia puede contener múltiples criterios y coincidirá con el tráfico si todos esos criterios son verdaderos." + +#: ../../configuration/protocols/bfd.rst:138 +msgid "A monitored static route conditions the installation to the RIB on the BFD session running state: when BFD session is up the route is installed to RIB, but when the BFD session is down it is removed from the RIB." +msgstr "Una ruta estática supervisada condiciona la instalación en la RIB en el estado de ejecución de la sesión BFD: cuando la sesión BFD está activa, la ruta se instala en la RIB, pero cuando la sesión BFD está inactiva, se elimina de la RIB." + +#: ../../configuration/service/snmp.rst:54 +msgid "A network management station executes applications that monitor and control managed devices. NMSs provide the bulk of the processing and memory resources required for network management. One or more NMSs may exist on any managed network." +msgstr "Una estación de administración de red ejecuta aplicaciones que monitorean y controlan los dispositivos administrados. Los NMS proporcionan la mayor parte de los recursos de procesamiento y memoria necesarios para la gestión de la red. Uno o más NMS pueden existir en cualquier red administrada." + +#: ../../configuration/interfaces/bonding.rst:337 +msgid "A new interface becomes present ``Port-channel1``, all configuration like allowed VLAN interfaces, STP will happen here." +msgstr "Se presenta una nueva interfaz ``Port-channel1``, toda la configuración como las interfaces VLAN permitidas, STP ocurrirá aquí." + +#: ../../configuration/loadbalancing/wan.rst:79 +msgid "A packet rate limit can be set for a rule to apply the rule to traffic above or below a specified threshold. To configure the rate limiting use:" +msgstr "Se puede establecer un límite de tasa de paquetes para que una regla aplique la regla al tráfico por encima o por debajo de un umbral específico. Para configurar el uso de limitación de velocidad:" + +#: ../../configuration/protocols/bgp.rst:698 +msgid "A penalty of 1000 is assessed each time the route fails. When the penalties reach a predefined threshold (suppress-value), the router stops advertising the route." +msgstr "Se impone una penalización de 1000 cada vez que falla la ruta. Cuando las sanciones alcanzan un umbral predefinido (valor de supresión), el enrutador deja de anunciar la ruta." + +#: ../../configuration/interfaces/macsec.rst:44 +msgid "A physical interface is required to connect this MACsec instance to. Traffic leaving this interface will now be authenticated/encrypted." +msgstr "Se requiere una interfaz física para conectar esta instancia de MACsec. El tráfico que sale de esta interfaz ahora se autenticará/encriptará." + +#: ../../configuration/nat/nat44.rst:360 +msgid "A pool of addresses can be defined by using a hyphen between two IP addresses:" +msgstr "Se puede definir un grupo de direcciones usando un guión entre dos direcciones IP:" + +#: ../../configuration/firewall/general.rst:766 +#: ../../configuration/firewall/general-legacy.rst:506 +msgid "A port can be set with a port number or a name which is here defined: ``/etc/services``." +msgstr "Un puerto se puede configurar con un número de puerto o un nombre que se define aquí: ``/etc/services``." + +#: ../../configuration/service/dns.rst:115 +msgid "A query for which there is authoritatively no answer is cached to quickly deny a record's existence later on, without putting a heavy load on the remote server. In practice, caches can become saturated with hundreds of thousands of hosts which are tried only once." +msgstr "Una consulta para la que no hay una respuesta autorizada se almacena en caché para negar rápidamente la existencia de un registro más adelante, sin poner una carga pesada en el servidor remoto. En la práctica, los cachés pueden saturarse con cientos de miles de hosts que se prueban solo una vez." + +#: ../../configuration/vpn/dmvpn.rst:134 +msgid "A received NHRP Traffic Indication will trigger the resolution and establishment of a shortcut route." +msgstr "Una indicación de tráfico NHRP recibida activará la resolución y el establecimiento de una ruta de atajo." + +#: ../../configuration/vrf/index.rst:30 +msgid "A routing table ID can not be modified once it is assigned. It can only be changed by deleting and re-adding the VRF instance." +msgstr "Una ID de tabla de enrutamiento no se puede modificar una vez que se asigna. Solo se puede cambiar eliminando y volviendo a agregar la instancia de VRF." + +#: ../../configuration/firewall/general-legacy.rst:272 +msgid "A rule-set is a named collection of firewall rules that can be applied to an interface or a zone. Each rule is numbered, has an action to apply if the rule is matched, and the ability to specify the criteria to match. Data packets go through the rules from 1 - 999999, at the first match the action of the rule will be executed." +msgstr "Un conjunto de reglas es una colección con nombre de reglas de firewall que se pueden aplicar a una interfaz o una zona. Cada regla está numerada, tiene una acción para aplicar si la regla coincide y la capacidad de especificar los criterios para coincidir. Los paquetes de datos pasan por las reglas de 1 a 999999, en el primer partido se ejecutará la acción de la regla." + +#: ../../configuration/policy/route.rst:12 +msgid "A rule-set is a named collection of rules that can be applied to an interface. Each rule is numbered, has an action to apply if the rule is matched, and the ability to specify the criteria to match. Data packets go through the rules from 1 - 999999, at the first match the action of the rule will be executed." +msgstr "Un conjunto de reglas es una colección de reglas con nombre que se puede aplicar a una interfaz. Cada regla está numerada, tiene una acción para aplicar si la regla coincide y la capacidad de especificar los criterios para coincidir. Los paquetes de datos pasan por las reglas de 1 a 999999, en el primer partido se ejecutará la acción de la regla." + +#: ../../configuration/loadbalancing/wan.rst:250 +msgid "A script can be run when an interface state change occurs. Scripts are run from /config/scripts, for a different location specify the full path:" +msgstr "Se puede ejecutar un script cuando se produce un cambio de estado de la interfaz. Los scripts se ejecutan desde /config/scripts, para una ubicación diferente, especifique la ruta completa:" + +#: ../../configuration/protocols/segment-routing.rst:91 +#: ../../configuration/protocols/segment-routing.rst:169 +msgid "A segment ID that contains an IP address prefix calculated by an IGP in the service provider core network. Prefix SIDs are globally unique, this value indentify it" +msgstr "Un ID de segmento que contiene un prefijo de dirección IP calculado por un IGP en la red principal del proveedor de servicios. Los SID de prefijo son únicos globalmente, este valor lo identifica" + +#: ../../_include/interface-disable-flow-control.txt:11 +#: ../../_include/interface-disable-flow-control.txt:11 +#: ../../_include/interface-disable-flow-control.txt:11 +#: ../../_include/interface-disable-flow-control.txt:11 +#: ../../_include/interface-disable-flow-control.txt:11 +#: ../../_include/interface-disable-flow-control.txt:11 +#: ../../_include/interface-disable-flow-control.txt:11 +#: ../../_include/interface-disable-flow-control.txt:11 +#: ../../_include/interface-disable-flow-control.txt:11 +#: ../../_include/interface-disable-flow-control.txt:11 +msgid "A sending station (computer or network switch) may be transmitting data faster than the other end of the link can accept it. Using flow control, the receiving station can signal the sender requesting suspension of transmissions until the receiver catches up." +msgstr "Una estación de envío (computadora o conmutador de red) puede estar transmitiendo datos más rápido de lo que el otro extremo del enlace puede aceptarlos. Mediante el control de flujo, la estación receptora puede señalar al remitente solicitando la suspensión de las transmisiones hasta que el receptor se ponga al día." + +#: ../../configuration/service/dhcp-server.rst:659 +msgid "A shared network named ``NET1`` serves subnet ``2001:db8::/64``" +msgstr "Una red compartida llamada ``NET1`` sirve a la subred ``2001:db8::/64``" + +#: ../../configuration/protocols/bgp.rst:1145 +msgid "A simple BGP configuration via IPv6." +msgstr "Una configuración BGP simple a través de IPv6." + +#: ../../configuration/trafficpolicy/index.rst:769 +msgid "A simple Random Early Detection (RED) policy would start randomly dropping packets from a queue before it reaches its queue limit thus avoiding congestion. That is good for TCP connections as the gradual dropping of packets acts as a signal for the sender to decrease its transmission rate." +msgstr "Una política simple de detección temprana aleatoria (RED) comenzaría a descartar aleatoriamente paquetes de una cola antes de que alcance su límite de cola, evitando así la congestión. Eso es bueno para las conexiones TCP, ya que la eliminación gradual de paquetes actúa como una señal para que el remitente disminuya su velocidad de transmisión." + +#: ../../configuration/protocols/bgp.rst:1100 +msgid "A simple eBGP configuration:" +msgstr "Una configuración sencilla de eBGP:" + +#: ../../configuration/trafficpolicy/index.rst:1124 +msgid "A simple example of Shaper using priorities." +msgstr "Un ejemplo simple de Shaper usando prioridades." + +#: ../../configuration/trafficpolicy/index.rst:532 +msgid "A simple example of an FQ-CoDel policy working inside a Shaper one." +msgstr "Un ejemplo simple de una política FQ-CoDel que funciona dentro de una de Shaper." + +#: ../../configuration/nat/nat66.rst:28 +msgid "A single internal network and external network. Use the NAT66 device to connect a single internal network and public network, and the hosts in the internal network use IPv6 address prefixes that only support routing within the local range. When a host in the internal network accesses the external network, the source IPv6 address prefix in the message will be converted into a global unicast IPv6 address prefix by the NAT66 device." +msgstr "Una sola red interna y red externa. Utilice el dispositivo NAT66 para conectar una única red interna y una red pública, y los hosts de la red interna utilizan prefijos de dirección IPv6 que solo admiten el enrutamiento dentro del rango local. Cuando un host en la red interna accede a la red externa, el dispositivo NAT66 convertirá el prefijo de dirección IPv6 de origen en el mensaje en un prefijo de dirección IPv6 de unidifusión global." + +#: ../../configuration/interfaces/wireless.rst:19 +msgid "A station acts as a Wi-Fi client accessing the network through an available WAP" +msgstr "Una estación actúa como un cliente Wi-Fi accediendo a la red a través de un WAP disponible" + +#: ../../configuration/highavailability/index.rst:110 +msgid "A sync group allows VRRP groups to transition together." +msgstr "Un grupo de sincronización permite que los grupos VRRP realicen la transición juntos." + +#: ../../configuration/protocols/ospf.rst:1316 +msgid "A typical configuration using 2 nodes." +msgstr "Una configuración típica usando 2 nodos." + +#: ../../configuration/nat/nat44.rst:400 +msgid "A typical problem with using NAT and hosting public servers is the ability for internal systems to reach an internal server using it's external IP address. The solution to this is usually the use of split-DNS to correctly point host systems to the internal address when requests are made internally. Because many smaller networks lack DNS infrastructure, a work-around is commonly deployed to facilitate the traffic by NATing the request from internal hosts to the source address of the internal interface on the firewall." +msgstr "Un problema típico con el uso de NAT y el alojamiento de servidores públicos es la capacidad de los sistemas internos para llegar a un servidor interno utilizando su dirección IP externa. La solución a esto suele ser el uso de DNS dividido para señalar correctamente los sistemas host a la dirección interna cuando las solicitudes se realizan internamente. Debido a que muchas redes más pequeñas carecen de infraestructura de DNS, comúnmente se implementa una solución alternativa para facilitar el tráfico mediante NAT de la solicitud de los hosts internos a la dirección de origen de la interfaz interna en el firewall." + +#: ../../configuration/service/console-server.rst:40 +msgid "A user friendly alias for this connection. Can be used instead of the device name when connecting." +msgstr "Un alias fácil de usar para esta conexión. Se puede usar en lugar del nombre del dispositivo cuando se conecta." + +#: ../../configuration/service/console-server.rst:36 +msgid "A user friendly description identifying the connected peripheral." +msgstr "Una descripción fácil de usar que identifica el periférico conectado." + +#: ../../configuration/interfaces/bonding.rst:260 +msgid "A value of 0 disables ARP monitoring. The default value is 0." +msgstr "Un valor de 0 deshabilita la supervisión de ARP. El valor predeterminado es 0." + +#: ../../configuration/trafficpolicy/index.rst:943 +msgid "A very small buffer will soon start dropping packets." +msgstr "Un búfer muy pequeño pronto comenzará a descartar paquetes." + +#: ../../configuration/firewall/zone.rst:33 +msgid "A zone must be configured before an interface is assigned to it and an interface can be assigned to only a single zone." +msgstr "Una zona debe configurarse antes de que se le asigne una interfaz y una interfaz se puede asignar a una sola zona." + +#: ../../configuration/vpn/l2tp.rst:173 +msgid "Above command will use `10.0.0.3` as source IPv4 address for all RADIUS queries on this NAS." +msgstr "El comando anterior utilizará `10.0.0.3` como dirección IPv4 de origen para todas las consultas de RADIUS en este NAS." + +#: ../../configuration/system/acceleration.rst:5 +msgid "Acceleration" +msgstr "Aceleración" + +#: ../../configuration/service/console-server.rst:68 +msgid "Accept SSH connections for the given `` on TCP port ``. After successfull authentication the user will be directly dropped to the connected serial device." +msgstr "Aceptar conexiones SSH para el ` dado ` en el puerto TCP ` `. Después de una autenticación exitosa, el usuario será enviado directamente al dispositivo serial conectado." + +#: ../../configuration/service/conntrack-sync.rst:42 +msgid "Accept only certain protocols: You may want to replicate the state of flows depending on their layer 4 protocol." +msgstr "Acepte solo determinados protocolos: es posible que desee replicar el estado de los flujos en función de su protocolo de capa 4." + +#: ../../configuration/policy/access-list.rst:3 +msgid "Access List Policy" +msgstr "Política de lista de acceso" + +#: ../../configuration/policy/access-list.rst:16 +msgid "Access Lists" +msgstr "Listas de acceso" + +#: ../../configuration/system/syslog.rst:173 +msgid "Action must be taken immediately - A condition that should be corrected immediately, such as a corrupted system database." +msgstr "Se debe tomar acción inmediatamente: una condición que se debe corregir de inmediato, como una base de datos del sistema dañada." + +#: ../../configuration/system/option.rst:15 +msgid "Action which will be run once the ctrl-alt-del keystroke is received." +msgstr "Acción que se ejecutará una vez recibida la pulsación de tecla ctrl-alt-del." + +#: ../../configuration/firewall/general.rst:334 +#: ../../configuration/policy/route.rst:238 +msgid "Actions" +msgstr "Acciones" + +#: ../../configuration/interfaces/openvpn.rst:431 +msgid "Active Directory" +msgstr "Directorio Activo" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:135 +msgid "Active health check backend server" +msgstr "Servidor backend de comprobación de estado activo" + +#: ../../configuration/service/dns.rst:45 +msgid "Add NTA (negative trust anchor) for this domain. This must be set if the domain does not support DNSSEC." +msgstr "Agregue NTA (ancla de confianza negativa) para este dominio. Esto debe configurarse si el dominio no es compatible con DNSSEC." + +#: ../../configuration/interfaces/wireless.rst:105 +msgid "Add Power Constraint element to Beacon and Probe Response frames." +msgstr "Agregue el elemento Power Constraint a los marcos Beacon y Probe Response." + +#: ../../configuration/interfaces/l2tpv3.rst:113 +msgid "Add a forwarding rule matching UDP port on your internet router." +msgstr "Agregue una regla de reenvío que coincida con el puerto UDP en su enrutador de Internet." + +#: ../../configuration/container/index.rst:113 +msgid "Add a host device to the container." +msgstr "Agregue un dispositivo host al contenedor." + +#: ../../configuration/service/ssh.rst:84 +msgid "Add access-control directive to allow or deny users and groups. Directives are processed in the following order of precedence: ``deny-users``, ``allow-users``, ``deny-groups`` and ``allow-groups``." +msgstr "Agregue una directiva de control de acceso para permitir o denegar usuarios y grupos. Las directivas se procesan en el siguiente orden de precedencia: ``deny-users``, ``allow-users``, ``deny-groups`` y ``allow-groups``." + +#: ../../configuration/container/index.rst:58 +msgid "Add custom environment variables. Multiple environment variables are allowed. The following commands translate to \"-e key=value\" when the container is created." +msgstr "Agregue variables de entorno personalizadas. Se permiten múltiples variables de entorno. Los siguientes comandos se traducen a "-e clave=valor" cuando se crea el contenedor." + +#: ../../configuration/policy/examples.rst:109 +msgid "Add default routes for routing ``table 10`` and ``table 11``" +msgstr "Agregar rutas predeterminadas para enrutamiento ``tabla 10`` y ``tabla 11``" + +#: ../../configuration/policy/examples.rst:176 +msgid "Add multiple source IP in one rule with same priority" +msgstr "Agregue múltiples IP de origen en una regla con la misma prioridad" + +#: ../../configuration/service/webproxy.rst:147 +msgid "Add new port to SSL-ports acl. Ports included by default in SSL-ports acl: 443" +msgstr "Agregue un nuevo puerto a SSL-ports acl. Puertos incluidos por defecto en SSL-ports acl: 443" + +#: ../../configuration/service/webproxy.rst:142 +msgid "Add new port to Safe-ports acl. Ports included by default in Safe-ports acl: 21, 70, 80, 210, 280, 443, 488, 591, 777, 873, 1025-65535" +msgstr "Agregar nuevo puerto a Safe-ports acl. Puertos incluidos por defecto en Safe-ports acl: 21, 70, 80, 210, 280, 443, 488, 591, 777, 873, 1025-65535" + +#: ../../configuration/policy/route-map.rst:221 +msgid "Add or replace BGP community attribute in format ``<0-65535:0-65535>`` or from well-known community list" +msgstr "Agregue o reemplace el atributo de comunidad BGP en formato ``<0-65535:0-65535>`` o de una lista de comunidad conocida" + +#: ../../configuration/policy/route-map.rst:236 +msgid "Add or replace BGP large-community attribute in format ``<0-4294967295:0-4294967295:0-4294967295>``" +msgstr "Agregue o reemplace el atributo de comunidad grande BGP en formato ``<0-4294967295:0-4294967295:0-4294967295>``" + +#: ../../configuration/policy/examples.rst:116 +msgid "Add policy route matching VLAN source addresses" +msgstr "Agregue direcciones de origen de VLAN coincidentes de ruta de política" + +#: ../../configuration/pki/index.rst:217 +msgid "Add public key portion for the certificate named `name` to the VyOS CLI." +msgstr "Agregue una parte de la clave pública para el certificado llamado `nombre` a la CLI de VyOS." + +#: ../../configuration/pki/index.rst:193 +msgid "Add the CAs private key to the VyOS CLI. This should never leave the system, and is only required if you use VyOS as your certificate generator as mentioned above." +msgstr "Agregue la clave privada de las CA a la CLI de VyOS. Esto nunca debe salir del sistema y solo es necesario si usa VyOS como su generador de certificados como se mencionó anteriormente." + +#: ../../configuration/pki/index.rst:232 +msgid "Add the private key portion of this certificate to the CLI. This should never leave the system as it is used to decrypt the data." +msgstr "Agregue la parte de la clave privada de este certificado a la CLI. Esto nunca debe salir del sistema, ya que se utiliza para descifrar los datos." + +#: ../../configuration/pki/index.rst:174 +msgid "Add the public CA certificate for the CA named `name` to the VyOS CLI." +msgstr "Agregue el certificado de CA público para la CA denominada "nombre" a la CLI de VyOS." + +#: ../../configuration/vpn/openconnect.rst:169 +msgid "Adding a 2FA with an OTP-key" +msgstr "Agregar un 2FA con una clave OTP" + +#: ../../configuration/loadbalancing/reverse-proxy.rst:260 +msgid "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." +msgstr "Se establecen parámetros globales adicionales, incluido el límite de número máximo de conexiones de 4000 y una versión mínima de TLS de 1.3." + +#: ../../configuration/service/tftp-server.rst:35 +msgid "Additional option to run TFTP server in the :abbr:`VRF (Virtual Routing and Forwarding)` context" +msgstr "Opción adicional para ejecutar el servidor TFTP en el contexto :abbr:`VRF (Virtual Routing and Forwarding)`" + +#: ../../configuration/interfaces/openvpn.rst:415 +msgid "Additionally, each client needs a copy of ca cert and its own client key and cert files. The files are plaintext so they may be copied either manually from the CLI. Client key and cert files should be signed with the proper ca cert and generated on the server side." +msgstr "Además, cada cliente necesita una copia de ca cert y su propia clave de cliente y archivos de certificado. Los archivos son texto sin formato, por lo que pueden copiarse manualmente desde la CLI. Los archivos de clave y certificado del cliente deben firmarse con el certificado ca adecuado y generarse en el lado del servidor." + +#: ../../configuration/nat/nat44.rst:738 +msgid "Additionally, we want to use VPNs only on our eth1 interface (the external interface in the image above)" +msgstr "Además, queremos usar VPN solo en nuestra interfaz eth1 (la interfaz externa en la imagen de arriba)" + +#: ../../configuration/protocols/bgp.rst:296 +msgid "Additionally you should keep in mind that this feature fundamentally disables the ability to use widely deployed BGP features. BGP unnumbered, hostname support, AS4, Addpath, Route Refresh, ORF, Dynamic Capabilities, and graceful restart." +msgstr "Además, debe tener en cuenta que esta función desactiva fundamentalmente la capacidad de utilizar funciones BGP ampliamente implementadas. BGP sin numerar, soporte de nombre de host, AS4, Addpath, actualización de ruta, ORF, capacidades dinámicas y reinicio correcto." + +#: ../../configuration/highavailability/index.rst:59 +msgid "Address" +msgstr "DIRECCIÓN" + +#: ../../configuration/nat/nat44.rst:219 +msgid "Address Conversion" +msgstr "Conversión de direcciones" + +#: ../../configuration/protocols/bgp.rst:48 +msgid "Address Families" +msgstr "Familias de direcciones" + +#: ../../configuration/firewall/general.rst:199 +#: ../../configuration/firewall/general-legacy.rst:168 +msgid "Address Groups" +msgstr "Grupos de direcciones" + +#: ../../configuration/service/dhcp-server.rst:662 +msgid "Address pool shall be ``2001:db8::100`` through ``2001:db8::199``." +msgstr "El grupo de direcciones será ``2001:db8::100`` hasta ``2001:db8::199``." + +#: ../../configuration/service/dhcp-server.rst:652 +msgid "Address pools" +msgstr "Grupos de direcciones" + +#: ../../configuration/service/https.rst:42 +msgid "Address to listen for HTTPS requests" +msgstr "Dirección para escuchar solicitudes HTTPS" + +#: ../../configuration/container/index.rst:136 +msgid "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, Vyos will use docker.io as the container registry." +msgstr "Agrega el registro a la lista de registros de búsqueda no calificados. De forma predeterminada, para cualquier imagen que no incluya el registro en el nombre de la imagen, Vyos utilizará docker.io como registro contenedor." + +#: ../../configuration/protocols/bgp.rst:647 +msgid "Administrative Distance" +msgstr "Distancia administrativa" + +#: ../../configuration/nat/nat44.rst:289 +msgid "Advanced configuration can be used in order to apply source or destination NAT, and within a single rule, be able to define multiple translated addresses, so NAT balances the translations among them." +msgstr "Advanced configuration can be used in order to apply source or destination NAT, and within a single rule, be able to define multiple translated addresses, so NAT balances the translations among them." + +#: ../../configuration/interfaces/openvpn.rst:16 +msgid "Advantages of OpenVPN are:" +msgstr "Las ventajas de OpenVPN son:" + +#: ../../configuration/service/router-advert.rst:1 +msgid "Advertise DNS server per https://tools.ietf.org/html/rfc6106" +msgstr "Anuncie el servidor DNS por https://tools.ietf.org/html/rfc6106" + +#: ../../configuration/service/router-advert.rst:53 +msgid "Advertising a Prefix" +msgstr "Publicidad de un prefijo" + +#: ../../configuration/service/snmp.rst:165 +msgid "After commit the plaintext passwords will be hashed and stored in your configuration. The resulting CLI config will look like:" +msgstr "Después de confirmar, las contraseñas de texto sin formato se cifrarán y almacenarán en su configuración. La configuración de CLI resultante se verá así:" + +#: ../../configuration/vrf/index.rst:323 +msgid "After committing the configuration we can verify all leaked routes are installed, and try to ICMP ping PC1 from PC3." +msgstr "Después de confirmar la configuración, podemos verificar que todas las rutas filtradas estén instaladas e intentar hacer ping ICMP a la PC1 desde la PC3." + +#: ../../configuration/pki/index.rst:212 +msgid "After we have imported the CA certificate(s) we can now import and add certificates used by services on this router." +msgstr "Después de haber importado los certificados de CA, ahora podemos importar y agregar certificados utilizados por los servicios en este enrutador." + +#: ../../configuration/service/snmp.rst:39 +msgid "Agent - software which runs on managed devices" +msgstr "Agente: software que se ejecuta en dispositivos administrados" + +#: ../../configuration/system/syslog.rst:173 +msgid "Alert" +msgstr "Alerta" + +#: ../../configuration/highavailability/index.rst:346 +msgid "Algorithm" +msgstr "Algoritmo" + +#: ../../configuration/system/host-name.rst:13 +msgid "Aliases" +msgstr "Alias" + +#: ../../configuration/service/dns.rst:154 +msgid "All DNS requests for example.com must be forwarded to a DNS server at 192.0.2.254 and 2001:db8:cafe::1" +msgstr "Todas las solicitudes de DNS para ejemplo.com deben reenviarse a un servidor DNS en 192.0.2.254 y 2001:db8:cafe::1" + +#: ../../configuration/service/snmp.rst:204 +msgid "All SNMP MIBs are located in each image of VyOS here: ``/usr/share/snmp/mibs/``" +msgstr "Todas las MIB de SNMP se encuentran en cada imagen de VyOS aquí: ``/usr/share/snmp/mibs/``" + +#: ../../configuration/interfaces/wwan.rst:323 +msgid "All available WWAN cards have a build in, reprogrammable firmware. Most of the vendors provide a regular update to the firmware used in the baseband chip." +msgstr "Todas las tarjetas WWAN disponibles tienen un firmware reprogramable integrado. La mayoría de los proveedores brindan una actualización periódica del firmware utilizado en el chip de banda base." + +#: ../../configuration/vpn/sstp.rst:22 +msgid "All certificates should be stored on VyOS under ``/config/auth``. If certificates are not stored in the ``/config`` directory they will not be migrated during a software update." +msgstr "Todos los certificados deben almacenarse en VyOS en ``/config/auth``. Si los certificados no se almacenan en el directorio ``/config``, no se migrarán durante una actualización de software." + +#: ../../configuration/system/syslog.rst:110 +msgid "All facilities" +msgstr "Todas las instalaciones" + +#: ../../configuration/service/dhcp-relay.rst:11 +msgid "All interfaces used for the DHCP relay must be configured. This includes the uplink to the DHCP server." +msgstr "Todas las interfaces utilizadas para el relé DHCP deben configurarse. Esto incluye el enlace ascendente al servidor DHCP." + +#: ../../configuration/highavailability/index.rst:142 +msgid "All items in a sync group should be similarly configured. If one VRRP group is set to a different preemption delay or priority, it would result in an endless transition loop." +msgstr "Todos los elementos de un grupo de sincronización deben configurarse de manera similar. Si un grupo de VRRP se configura con un retraso o una prioridad de prioridad diferente, se produciría un ciclo de transición sin fin." + +#: ../../configuration/service/dns.rst:156 +msgid "All other DNS requests will be forwarded to a different set of DNS servers at 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff" +msgstr "Todas las demás solicitudes de DNS se reenviarán a un conjunto diferente de servidores DNS en 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff y 2001:db8::2:ffff" + +#: ../../configuration/service/webproxy.rst:134 +msgid "All reply sizes are accepted by default." +msgstr "Todos los tamaños de respuesta se aceptan de forma predeterminada." + +#: ../../configuration/system/task-scheduler.rst:10 +msgid "All scripts excecuted this way are executed as root user - this may be dangerous. Together with :ref:`command-scripting` this can be used for automating (re-)configuration." +msgstr "Todos los scripts ejecutados de esta manera se ejecutan como usuario root; esto puede ser peligroso. Junto con :ref:`command-scripting`, se puede usar para automatizar (re)configurar." + +#: ../../configuration/protocols/bgp.rst:241 +msgid "All these rules with OTC will help to detect and mitigate route leaks and happen automatically if local-role is set." +msgstr "Todas estas reglas con OTC ayudarán a detectar y mitigar las fugas de ruta y sucederán automáticamente si se establece el rol local." + +#: ../../configuration/interfaces/tunnel.rst:15 +msgid "All those protocols are grouped under ``interfaces tunnel`` in VyOS. Let's take a closer look at the protocols and options currently supported by VyOS." +msgstr "Todos esos protocolos están agrupados bajo ``túnel de interfaces`` en VyOS. Echemos un vistazo más de cerca a los protocolos y opciones compatibles actualmente con VyOS." + +#: ../../configuration/firewall/zone.rst:36 +msgid "All traffic between zones is affected by existing policies" +msgstr "Todo el tráfico entre zonas se ve afectado por las políticas existentes" + +#: ../../configuration/firewall/zone.rst:35 +msgid "All traffic to and from an interface within a zone is permitted." +msgstr "Se permite todo el tráfico hacia y desde una interfaz dentro de una zona." + +#: ../../configuration/vpn/pptp.rst:45 +msgid "All tunnel sessions can be checked via:" +msgstr "Todas las sesiones de túnel se pueden comprobar a través de:" + +#: ../../configuration/vpn/l2tp.rst:209 +msgid "Allocation clients ip addresses by RADIUS" +msgstr "Asignación de direcciones IP de clientes por RADIUS" + +#: ../../configuration/service/ssh.rst:121 +msgid "Allow ``ssh`` dynamic-protection." +msgstr "Permitir la protección dinámica ``ssh``." + +#: ../../configuration/service/webproxy.rst:70 +msgid "Allow access to sites in a domain without retrieving them from the Proxy cache. Specifying \"vyos.net\" will allow access to vyos.net but the pages accessed will not be cached. It useful for working around problems with \"If-Modified-Since\" checking at certain sites." +msgstr "Permita el acceso a los sitios de un dominio sin recuperarlos de la memoria caché del proxy. Especificar "vyos.net" permitirá el acceso a vyos.net pero las páginas a las que se acceda no se almacenarán en caché. Es útil para resolver problemas con la verificación "Si se modifica desde" en ciertos sitios." + +#: ../../configuration/protocols/bgp.rst:274 +msgid "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." +msgstr "Permita que bgp negocie la capacidad de próximo salto extendido con su par. Si está interconectando una dirección local de enlace IPv6, esta capacidad se activa automáticamente. Si está interconectando una dirección global IPv6, al activar este comando permitirá que BGP instale rutas IPv4 con nexthops IPv6 si no tiene IPv4 configurado en las interfaces." + +#: ../../configuration/service/dns.rst:346 +msgid "Allow explicit IPv6 address for the interface." +msgstr "Permita una dirección IPv6 explícita para la interfaz." + +#: ../../configuration/container/index.rst:32 +msgid "Allow host networking in a container. The network stack of the container is not isolated from the host and will use the host IP." +msgstr "Permitir redes de host en un contenedor. La pila de red del contenedor no está aislada del host y utilizará la IP del host." + +#: ../../configuration/protocols/bfd.rst:34 +msgid "Allow this BFD peer to not be directly connected" +msgstr "Permitir que este par BFD no se conecte directamente" + +#: ../../configuration/firewall/general.rst:1142 +#: ../../configuration/firewall/general-legacy.rst:694 +msgid "Allowed values fpr TCP flags: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, ``PSH``, ``ALL`` When specifying more than one flag, flags should be comma separated. The ``!`` negate the selected protocol." +msgstr "Valores permitidos para indicadores TCP: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, ``PSH``, ``ALL`` Al especificar más de una bandera, las banderas deben estar separadas por comas. El ``!`` niega el protocolo seleccionado." + +#: ../../configuration/interfaces/bridge.rst:162 +msgid "Allows specific VLAN IDs to pass through the bridge member interface. This can either be an individual VLAN id or a range of VLAN ids delimited by a hyphen." +msgstr "Permite que las ID de VLAN específicas pasen a través de la interfaz de miembro del puente. Puede ser una identificación de VLAN individual o un rango de identificaciones de VLAN delimitadas por un guión." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:73 +msgid "Allows to define URL path matching rules for a specific service." +msgstr "Permite definir reglas de coincidencia de ruta de URL para un servicio específico." + +#: ../../configuration/protocols/static.rst:69 +msgid "Allows you to configure the next-hop interface for an interface-based IPv4 static route. `` will be the next-hop interface where traffic is routed for the given ``." +msgstr "Le permite configurar la interfaz de siguiente salto para una ruta estática IPv4 basada en interfaz. ` ` será la interfaz de siguiente salto donde se enruta el tráfico para el ` dado `." + +#: ../../configuration/protocols/static.rst:89 +msgid "Allows you to configure the next-hop interface for an interface-based IPv6 static route. `` will be the next-hop interface where traffic is routed for the given ``." +msgstr "Le permite configurar la interfaz de siguiente salto para una ruta estática IPv6 basada en interfaz. ` ` será la interfaz de siguiente salto donde se enruta el tráfico para el ` dado `." + +#: ../../configuration/service/ssh.rst:157 +msgid "Already learned known_hosts files of clients need an update as the public key will change." +msgstr "Los archivos de hosts conocidos ya aprendidos de los clientes necesitan una actualización ya que la clave pública cambiará." + +#: ../../configuration/firewall/general.rst:382 +msgid "Also, **default-action** is an action that takes place whenever a packet does not match any rule in it's chain. For base chains, possible options for **default-action** are **accept** or **drop**." +msgstr "Also, **default-action** is an action that takes place whenever a packet does not match any rule in it's chain. For base chains, possible options for **default-action** are **accept** or **drop**." + +#: ../../configuration/service/dhcp-relay.rst:110 +msgid "Also, for backwards compatibility this configuration, which uses generic interface definition, is still valid:" +msgstr "Además, por compatibilidad con versiones anteriores, esta configuración, que utiliza una definición de interfaz genérica, sigue siendo válida:" + +#: ../../configuration/firewall/index.rst:15 +msgid "Also, for those who haven't updated to newer version, legacy documentation is still present and valid for all sagitta version prior to VyOS 1.4-rolling-202308040557:" +msgstr "Also, for those who haven't updated to newer version, legacy documentation is still present and valid for all sagitta version prior to VyOS 1.4-rolling-202308040557:" + +#: ../../configuration/nat/nat44.rst:276 +msgid "Also, in :ref:`destination-nat`, redirection to localhost is supported. The redirect statement is a special form of dnat which always translates the destination address to the local host’s one." +msgstr "Además, en :ref:`destination-nat`, se admite la redirección a localhost. La declaración de redirección es una forma especial de dnat que siempre traduce la dirección de destino a la del host local." + +#: ../../configuration/protocols/static.rst:138 +msgid "Alternate Routing Tables" +msgstr "Tablas de enrutamiento alternativas" + +#: ../../configuration/protocols/static.rst:142 +msgid "Alternate routing tables are used with policy based routing by utilizing :ref:`vrf`." +msgstr "Las tablas de enrutamiento alternativas se utilizan con el enrutamiento basado en políticas utilizando :ref:`vrf`." + +#: ../../configuration/interfaces/vxlan.rst:321 +msgid "Alternative to multicast, the remote IPv4 address of the VXLAN tunnel can be set directly. Let's change the Multicast example from above:" +msgstr "Como alternativa a la multidifusión, la dirección IPv4 remota del túnel VXLAN se puede configurar directamente. Cambiemos el ejemplo de multidifusión de arriba:" + +#: ../../configuration/service/dhcp-server.rst:130 +msgid "Always exclude this address from any defined range. This address will never be assigned by the DHCP server." +msgstr "Siempre excluya esta dirección de cualquier rango definido. Esta dirección nunca será asignada por el servidor DHCP." + +#: ../../configuration/firewall/general.rst:248 +msgid "An **interface group** represents a collection of interfaces." +msgstr "An **interface group** represents a collection of interfaces." + +#: ../../configuration/protocols/bgp.rst:26 +msgid "An AS is a connected group of one or more IP prefixes run by one or more network operators which has a SINGLE and CLEARLY DEFINED routing policy." +msgstr "Un AS es un grupo conectado de uno o más prefijos de IP administrados por uno o más operadores de red que tiene una política de enrutamiento ÚNICA y CLARAMENTE DEFINIDA." + +#: ../../configuration/trafficpolicy/index.rst:208 +msgid "An IPv4 TCP filter will only match packets with an IPv4 header length of 20 bytes (which is the majority of IPv4 packets anyway)." +msgstr "Un filtro IPv4 TCP solo coincidirá con los paquetes con una longitud de encabezado IPv4 de 20 bytes (que es la mayoría de los paquetes IPv4 de todos modos)." + +#: ../../configuration/service/snmp.rst:36 +msgid "An SNMP-managed network consists of three key components:" +msgstr "Una red administrada por SNMP consta de tres componentes clave:" + +#: ../../configuration/interfaces/bonding.rst:234 +msgid "An `` specifying which slave is the primary device. The specified device will always be the active slave while it is available. Only when the primary is off-line will alternate devices be used. This is useful when one slave is preferred over another, e.g., when one slave has higher throughput than another." +msgstr "un ` ` especificando qué esclavo es el dispositivo principal. El dispositivo especificado siempre será el esclavo activo mientras esté disponible. Solo cuando el principal esté fuera de línea se utilizarán dispositivos alternativos. Esto es útil cuando se prefiere un esclavo sobre otro, por ejemplo, cuando un esclavo tiene un mayor rendimiento que otro." + +#: ../../configuration/interfaces/wireguard.rst:90 +msgid "An additional layer of symmetric-key crypto can be used on top of the asymmetric crypto." +msgstr "Se puede usar una capa adicional de criptografía de clave simétrica además de la criptografía asimétrica." + +#: ../../configuration/interfaces/wireguard.rst:103 +msgid "An additional layer of symmetric-key crypto can be used on top of the asymmetric crypto. This command automatically creates for you the required CLI command to install this PSK for a given peer." +msgstr "Se puede usar una capa adicional de criptografía de clave simétrica además de la criptografía asimétrica. Este comando crea automáticamente para usted el comando CLI requerido para instalar este PSK para un par dado." + +#: ../../configuration/interfaces/wireguard.rst:247 +msgid "An additional layer of symmetric-key crypto can be used on top of the asymmetric crypto. This is optional." +msgstr "Se puede usar una capa adicional de criptografía de clave simétrica además de la criptografía asimétrica. Esto es opcional." + +#: ../../configuration/vpn/ipsec.rst:11 +msgid "An advantage of this scheme is that you get a real interface with its own address, which makes it easier to setup static routes or use dynamic routing protocols without having to modify IPsec policies. The other advantage is that it greatly simplifies router to router communication, which can be tricky with plain IPsec because the external outgoing address of the router usually doesn't match the IPsec policy of typical site-to-site setup and you need to add special configuration for it, or adjust the source address for outgoing traffic of your applications. GRE/IPsec has no such problem and is completely transparent for the applications." +msgstr "Una ventaja de este esquema es que obtiene una interfaz real con su propia dirección, lo que facilita la configuración de rutas estáticas o el uso de protocolos de enrutamiento dinámico sin tener que modificar las políticas de IPsec. La otra ventaja es que simplifica en gran medida la comunicación de enrutador a enrutador, lo que puede ser complicado con IPsec simple porque la dirección saliente externa del enrutador generalmente no coincide con la política de IPsec de la configuración típica de sitio a sitio y necesita agregar direcciones especiales. configuración para ello, o ajuste la dirección de origen para el tráfico saliente de sus aplicaciones. GRE/IPsec no tiene ese problema y es completamente transparente para las aplicaciones." + +#: ../../configuration/service/snmp.rst:50 +msgid "An agent is a network-management software module that resides on a managed device. An agent has local knowledge of management information and translates that information to or from an SNMP-specific form." +msgstr "Un agente es un módulo de software de administración de red que reside en un dispositivo administrado. Un agente tiene conocimiento local de la información de gestión y traduce esa información hacia o desde un formulario específico de SNMP." + +#: ../../configuration/protocols/ospf.rst:211 +msgid "An alternate command could be \"mpls-te on\" (Traffic Engineering)" +msgstr "Un comando alternativo podría ser "mpls-te on" (Ingeniería de tráfico)" + +#: ../../configuration/firewall/general-legacy.rst:424 +msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 and a zone-based firewall as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)" +msgstr "Se puede aplicar una máscara de red arbitraria a las direcciones de máscara para que solo coincidan con una parte específica. Esto es especialmente útil con IPv6 y un cortafuegos basado en zonas, ya que las reglas seguirán siendo válidas si el prefijo de IPv6 cambia y la parte del host de la dirección IPv6 del sistema es estática (por ejemplo, con SLAAC o direcciones IPv6 tokenizadas). `_)" + +#: ../../configuration/firewall/general-legacy.rst:424 +msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 and a zone-based firewall as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)." +msgstr "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 and a zone-based firewall as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)." + +#: ../../configuration/firewall/general.rst:624 +msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)" +msgstr "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)" + +#: ../../configuration/firewall/zone.rst:43 +msgid "An basic introduction to zone-based firewalls can be found `here `_, and an example at :ref:`examples-zone-policy`." +msgstr "Puede encontrar una introducción básica a los cortafuegos basados en zonas `aquí `_, y un ejemplo en :ref:`examples-zone-policy`." + +#: ../../configuration/interfaces/tunnel.rst:36 +#: ../../configuration/interfaces/tunnel.rst:54 +#: ../../configuration/interfaces/tunnel.rst:71 +#: ../../configuration/interfaces/tunnel.rst:93 +#: ../../configuration/interfaces/tunnel.rst:194 +#: ../../configuration/system/login.rst:195 +msgid "An example:" +msgstr "Un ejemplo:" + +#: ../../configuration/service/monitoring.rst:136 +msgid "An example of a configuration that sends ``telegraf`` metrics to remote ``InfluxDB 2``" +msgstr "Un ejemplo de una configuración que envía métricas de ``telegraf`` a ``InfluxDB 2`` remoto" + +#: ../../configuration/interfaces/bridge.rst:227 +msgid "An example of creating a VLAN-aware bridge is as follows:" +msgstr "Un ejemplo de creación de un puente compatible con VLAN es el siguiente:" + +#: ../../configuration/system/login.rst:149 +msgid "An example of key generation:" +msgstr "Un ejemplo de generación de claves:" + +#: ../../configuration/vpn/openconnect.rst:291 +msgid "An example of the data captured by a FREERADIUS server with sql accounting:" +msgstr "Un ejemplo de los datos capturados por un servidor FREERADIUS con contabilidad sql:" + +#: ../../configuration/service/dhcp-server.rst:475 +msgid "An option that takes a quoted string is set by replacing all quote characters with the string ``"`` inside the static-mapping-parameters value. The resulting line in dhcpd.conf will be ``option pxelinux.configfile \"pxelinux.cfg/01-00-15-17-44-2d-aa\";``." +msgstr "Una opción que toma una cadena entre comillas se establece reemplazando todos los caracteres de comillas con la cadena ``"`` dentro del valor de parámetros de mapeo estático. La línea resultante en dhcpd.conf será ``option pxelinux.configfile "pxelinux.cfg /01-00-15-17-44-2d-aa";``." + +#: ../../configuration/policy/route.rst:76 +msgid "And for ipv6:" +msgstr "Y para ipv6:" + +#: ../../configuration/system/ip.rst:84 +msgid "And the different IPv4 **reset** commands available:" +msgstr "Y los diferentes comandos IPv4 **reset** disponibles:" + +#: ../../configuration/interfaces/bonding.rst:185 +#: ../../configuration/interfaces/bonding.rst:214 +msgid "And then hash is reduced modulo slave count." +msgstr "Y luego hash se reduce el recuento de esclavos de módulo." + +#: ../../configuration/nat/nat44.rst:590 +msgid "Another term often used for DNAT is **1-to-1 NAT**. For a 1-to-1 NAT configuration, both DNAT and SNAT are used to NAT all traffic from an external IP address to an internal IP address and vice-versa." +msgstr "Otro término que se usa a menudo para DNAT es **NAT 1 a 1**. Para una configuración NAT 1 a 1, tanto DNAT como SNAT se utilizan para NAT todo el tráfico desde una dirección IP externa a una dirección IP interna y viceversa." + +#: ../../configuration/protocols/mpls.rst:63 +msgid "Another thing to keep in mind with LDP is that much like BGP, it is a protocol that runs on top of TCP. It however does not have an ability to do something like a refresh capability like BGPs route refresh capability. Therefore one might have to reset the neighbor for a capability change or a configuration change to work." +msgstr "Otra cosa a tener en cuenta con LDP es que, al igual que BGP, es un protocolo que se ejecuta sobre TCP. Sin embargo, no tiene la capacidad de hacer algo como una capacidad de actualización como la capacidad de actualización de ruta de BGP. Por lo tanto, es posible que deba restablecer el vecino para que funcione un cambio de capacidad o un cambio de configuración." + +#: ../../configuration/vrf/index.rst:52 +#: ../../configuration/vrf/index.rst:62 +msgid "Apply a route-map filter to routes for the specified protocol." +msgstr "Aplique un filtro de mapa de ruta a las rutas para el protocolo especificado." + +#: ../../configuration/system/ip.rst:39 +msgid "Apply a route-map filter to routes for the specified protocol. The following protocols can be used: any, babel, bgp, connected, eigrp, isis, kernel, ospf, rip, static, table" +msgstr "Aplique un filtro de mapa de ruta a las rutas para el protocolo especificado. Se pueden utilizar los siguientes protocolos: any, babel, bgp, connected, eigrp, isis, kernel, ospf, rip, static, table" + +#: ../../configuration/system/ipv6.rst:35 +msgid "Apply a route-map filter to routes for the specified protocol. The following protocols can be used: any, babel, bgp, connected, isis, kernel, ospfv3, ripng, static, table" +msgstr "Aplique un filtro de mapa de ruta a las rutas para el protocolo especificado. Se pueden utilizar los siguientes protocolos: any, babel, bgp, connected, isis, kernel, ospfv3, ripng, static, table" + +#: ../../configuration/policy/examples.rst:128 +msgid "Apply routing policy to **inbound** direction of out VLAN interfaces" +msgstr "Aplique la política de enrutamiento a la dirección **entrante** de las interfaces VLAN de salida" + +#: ../../configuration/firewall/zone.rst:82 +msgid "Applying a Rule-Set to a Zone" +msgstr "Aplicar un conjunto de reglas a una zona" + +#: ../../configuration/firewall/general-legacy.rst:747 +msgid "Applying a Rule-Set to an Interface" +msgstr "Aplicar un conjunto de reglas a una interfaz" + +#: ../../configuration/trafficpolicy/index.rst:1150 +msgid "Applying a traffic policy" +msgstr "Aplicar una política de tráfico" + +#: ../../configuration/protocols/ospf.rst:218 +#: ../../configuration/protocols/ospf.rst:1122 +msgid "Area Configuration" +msgstr "Configuración de área" + +#: ../../configuration/protocols/isis.rst:55 +msgid "Area identifier: ``0001`` IS-IS area number (numberical area ``1``)" +msgstr "Identificador de área: ``0001`` IS-IS número de área (área numérica ``1``)" + +#: ../../configuration/system/task-scheduler.rst:38 +msgid "Arguments which will be passed to the executable." +msgstr "Argumentos que se pasarán al ejecutable." + +#: ../../configuration/interfaces/bonding.rst:396 +msgid "Arista EOS" +msgstr "AristaEOS" + +#: ../../configuration/interfaces/bonding.rst:381 +msgid "Aruba/HP" +msgstr "Aruba/HP" + +#: ../../_include/interface-ip.txt:4 +#: ../../_include/interface-ipv6.txt:60 +#: ../../_include/interface-ip.txt:4 +#: ../../_include/interface-ipv6.txt:60 +#: ../../_include/interface-ip.txt:4 +#: ../../_include/interface-ipv6.txt:60 +#: ../../_include/interface-ip.txt:4 +#: ../../_include/interface-ipv6.txt:60 +#: ../../_include/interface-ip.txt:4 +#: ../../_include/interface-ipv6.txt:60 +#: ../../_include/interface-ip.txt:4 +#: ../../_include/interface-ipv6.txt:60 +#: ../../_include/interface-ip.txt:4 +#: ../../_include/interface-ipv6.txt:60 +#: ../../_include/interface-ip.txt:4 +#: ../../_include/interface-ipv6.txt:60 +#: ../../_include/interface-ip.txt:4 +#: ../../_include/interface-ipv6.txt:60 +#: ../../_include/interface-ip.txt:4 +#: ../../_include/interface-ipv6.txt:60 +#: ../../configuration/interfaces/pppoe.rst:194 +#: ../../configuration/interfaces/pppoe.rst:240 +#: ../../_include/interface-ip.txt:4 +#: ../../_include/interface-ipv6.txt:60 +#: ../../_include/interface-ip.txt:4 +#: ../../_include/interface-ipv6.txt:60 +#: ../../configuration/interfaces/sstp-client.rst:79 +#: ../../_include/interface-ip.txt:4 +#: ../../_include/interface-ipv6.txt:60 +#: ../../_include/interface-ip.txt:4 +#: ../../_include/interface-ipv6.txt:60 +#: ../../_include/interface-ip.txt:4 +#: ../../_include/interface-ipv6.txt:60 +#: ../../_include/interface-ip.txt:4 +#: ../../_include/interface-ipv6.txt:60 +#: ../../_include/interface-ip.txt:4 +#: ../../_include/interface-ipv6.txt:60 +#: ../../_include/interface-ip.txt:4 +#: ../../_include/interface-ipv6.txt:60 +#: ../../_include/interface-ip.txt:4 +#: ../../_include/interface-ipv6.txt:60 +#: ../../_include/interface-ip.txt:4 +#: ../../_include/interface-ipv6.txt:60 +msgid "As Internet wide PMTU discovery rarely works, we sometimes need to clamp our TCP MSS value to a specific value. This is a field in the TCP options part of a SYN packet. By setting the MSS value, you are telling the remote side unequivocally 'do not try to send me packets bigger than this value'." +msgstr "Como el descubrimiento de PMTU en Internet rara vez funciona, a veces necesitamos fijar nuestro valor TCP MSS a un valor específico. Este es un campo en la parte de opciones TCP de un paquete SYN. Al configurar el valor de MSS, le está diciendo al lado remoto inequívocamente 'no intente enviarme paquetes más grandes que este valor'." + +#: ../../configuration/vpn/sstp.rst:19 +msgid "As SSTP provides PPP via a SSL/TLS channel the use of either publically signed certificates as well as a private PKI is required." +msgstr "Dado que SSTP proporciona PPP a través de un canal SSL/TLS, se requiere el uso de certificados firmados públicamente, así como una PKI privada." + +#: ../../configuration/interfaces/vxlan.rst:61 +msgid "As VyOS is Linux based the default port used is not using 4789 as the default IANA-assigned destination UDP port number. Instead VyOS uses the Linux default port of 8472." +msgstr "Como VyOS está basado en Linux, el puerto predeterminado que se usa no usa 4789 como el número de puerto UDP de destino predeterminado asignado por IANA. En su lugar, VyOS usa el puerto predeterminado de Linux de 8472." + +#: ../../configuration/interfaces/vxlan.rst:34 +msgid "As VyOS is based on Linux and there was no official IANA port assigned for VXLAN, VyOS uses a default port of 8472. You can change the port on a per VXLAN interface basis to get it working across multiple vendors." +msgstr "Como VyOS se basa en Linux y no había un puerto IANA oficial asignado para VXLAN, VyOS usa un puerto predeterminado de 8472. Puede cambiar el puerto por interfaz VXLAN para que funcione con varios proveedores." + +#: ../../configuration/interfaces/wwan.rst:326 +msgid "As VyOS makes use of the QMI interface to connect to the WWAN modem cards, also the firmware can be reprogrammed." +msgstr "Como VyOS utiliza la interfaz QMI para conectarse a las tarjetas de módem WWAN, también se puede reprogramar el firmware." + +#: ../../configuration/trafficpolicy/index.rst:940 +msgid "As a reference: for 10mbit/s on Intel, you might need at least 10kbyte buffer if you want to reach your configured rate." +msgstr "Como referencia: para 10mbit/s en Intel, es posible que necesite al menos un búfer de 10kbyte si desea alcanzar su velocidad configurada." + +#: ../../configuration/interfaces/openvpn.rst:666 +msgid "As a result, the processing of each packet becomes more efficient, potentially leveraging hardware encryption offloading support available in the kernel." +msgstr "Como resultado, el procesamiento de cada paquete se vuelve más eficiente, aprovechando potencialmente el soporte de descarga de cifrado de hardware disponible en el kernel." + +#: ../../configuration/firewall/zone.rst:49 +msgid "As an alternative to applying policy to an interface directly, a zone-based firewall can be created to simplify configuration when multiple interfaces belong to the same security zone. Instead of applying rule-sets to interfaces, they are applied to source zone-destination zone pairs." +msgstr "Como alternativa a la aplicación directa de políticas a una interfaz, se puede crear un firewall basado en zonas para simplificar la configuración cuando varias interfaces pertenecen a la misma zona de seguridad. En lugar de aplicar conjuntos de reglas a las interfaces, se aplican a pares de zona de origen y zona de destino." + +#: ../../configuration/system/option.rst:80 +msgid "As more and more routers run on Hypervisors, expecially with a :abbr:`NOS (Network Operating System)` as VyOS, it makes fewer and fewer sense to use static resource bindings like ``smp-affinity`` as present in VyOS 1.2 and earlier to pin certain interrupt handlers to specific CPUs." +msgstr "A medida que más y más enrutadores se ejecutan en hipervisores, especialmente con un :abbr:`NOS (sistema operativo de red)` como VyOS, tiene cada vez menos sentido usar enlaces de recursos estáticos como ``smp-affinity`` como está presente en VyOS 1.2 y anteriores para anclar ciertos controladores de interrupción a CPU específicas." + +#: ../../configuration/nat/nat44.rst:26 +msgid "As network address translation modifies the IP address information in packets, NAT implementations may vary in their specific behavior in various addressing cases and their effect on network traffic. The specifics of NAT behavior are not commonly documented by vendors of equipment containing NAT implementations." +msgstr "Como la traducción de direcciones de red modifica la información de la dirección IP en los paquetes, las implementaciones de NAT pueden variar en su comportamiento específico en varios casos de direccionamiento y su efecto en el tráfico de la red. Los detalles del comportamiento de NAT no suelen estar documentados por los proveedores de equipos que contienen implementaciones de NAT." + +#: ../../configuration/interfaces/openvpn.rst:48 +msgid "As of VyOS 1.4, OpenVPN site-to-site mode can use either pre-shared keys or x.509 certificates." +msgstr "As of VyOS 1.4, OpenVPN site-to-site mode can use either pre-shared keys or x.509 certificates." + +#: ../../configuration/vpn/pptp.rst:10 +msgid "As per default and if not otherwise defined, mschap-v2 is being used for authentication and mppe 128-bit (stateless) for encryption. If no gateway-address is set within the configuration, the lowest IP out of the /24 client-ip-pool is being used. For instance, in the example below it would be 192.168.0.1." +msgstr "De forma predeterminada y si no se define lo contrario, se utiliza mschap-v2 para la autenticación y mppe de 128 bits (sin estado) para el cifrado. Si no se establece una dirección de puerta de enlace dentro de la configuración, se utiliza la IP más baja del grupo de ip de cliente /24. Por ejemplo, en el siguiente ejemplo sería 192.168.0.1." + +#: ../../configuration/trafficpolicy/index.rst:196 +msgid "As shown in the example above, one of the possibilities to match packets is based on marks done by the firewall, `that can give you a great deal of flexibility`_." +msgstr "Como se muestra en el ejemplo anterior, una de las posibilidades para hacer coincidir los paquetes se basa en las marcas realizadas por el firewall, `eso puede brindarle una gran flexibilidad`_." + +#: ../../configuration/trafficpolicy/index.rst:323 +msgid "As shown in the last command of the example above, the `queue-type` setting allows these combinations. You will be able to use it in many policies." +msgstr "Como se muestra en el último comando del ejemplo anterior, la configuración `tipo de cola` permite estas combinaciones. Podrás usarlo en muchas pólizas." + +#: ../../configuration/interfaces/tunnel.rst:69 +msgid "As the name implies, it's IPv4 encapsulated in IPv6, as simple as that." +msgstr "Como su nombre lo indica, es IPv4 encapsulado en IPv6, tan simple como eso." + +#: ../../configuration/vpn/l2tp.rst:36 +msgid "As well as the below to allow NAT-traversal (when NAT is detected by the VPN client, ESP is encapsulated in UDP for NAT-traversal):" +msgstr "Además de lo siguiente para permitir NAT-transversal (cuando el cliente VPN detecta NAT, ESP se encapsula en UDP para NAT-transversal):" + +#: ../../configuration/trafficpolicy/index.rst:997 +msgid "As with other policies, Round-Robin can embed_ another policy into a class through the ``queue-type`` setting." +msgstr "Al igual que con otras políticas, Round-Robin puede incrustar_ otra política en una clase a través de la configuración ``tipo de cola``." + +#: ../../configuration/trafficpolicy/index.rst:1076 +msgid "As with other policies, Shaper can embed_ other policies into its classes through the ``queue-type`` setting and then configure their parameters." +msgstr "Al igual que con otras políticas, Shaper puede incrustar_ otras políticas en sus clases a través de la configuración ``tipo de cola`` y luego configurar sus parámetros." + +#: ../../configuration/trafficpolicy/index.rst:718 +msgid "As with other policies, you can define different type of matching rules for your classes:" +msgstr "Al igual que con otras políticas, puede definir diferentes tipos de reglas de coincidencia para sus clases:" + +#: ../../configuration/trafficpolicy/index.rst:734 +msgid "As with other policies, you can embed_ other policies into the classes (and default) of your Priority Queue policy through the ``queue-type`` setting:" +msgstr "Al igual que con otras políticas, puede incrustar_ otras políticas en las clases (y por defecto) de su política Priority Queue a través de la configuración ``queue-type``:" + +#: ../../configuration/interfaces/vxlan.rst:264 +msgid "As you can see, Leaf2 and Leaf3 configuration is almost identical. There are lots of commands above, I'll try to into more detail below, command descriptions are placed under the command boxes:" +msgstr "Como puede ver, la configuración de Leaf2 y Leaf3 es casi idéntica. Hay muchos comandos arriba, trataré de dar más detalles a continuación, las descripciones de los comandos se colocan debajo de los cuadros de comando:" + +#: ../../configuration/firewall/general-legacy.rst:770 +msgid "As you can see in the example here, you can assign the same rule-set to several interfaces. An interface can only have one rule-set per chain." +msgstr "Como puede ver en el ejemplo aquí, puede asignar el mismo conjunto de reglas a varias interfaces. Una interfaz solo puede tener un conjunto de reglas por cadena." + +#: ../../configuration/interfaces/bridge.rst:35 +msgid "Assign `` interface to bridge ``. A completion helper will help you with all allowed interfaces which can be bridged. This includes :ref:`ethernet-interface`, :ref:`bond-interface`, :ref:`l2tpv3-interface`, :ref:`openvpn`, :ref:`vxlan-interface`, :ref:`wireless-interface`, :ref:`tunnel-interface` and :ref:`geneve-interface`." +msgstr "Asignar ` `interfaz para puente` `. Un asistente de finalización lo ayudará con todas las interfaces permitidas que se pueden conectar. Esto incluye :ref:`ethernet-interface`, :ref:`bond-interface`, :ref:`l2tpv3-interface`, :ref:`openvpn`, :ref:`vxlan-interface`, :ref:`wireless -interface`, :ref:`tunnel-interface` y :ref:`geneve-interface`." + +#: ../../configuration/loadbalancing/reverse-proxy.rst:86 +msgid "Assign a specific backend to a rule" +msgstr "Asignar un backend específico a una regla" + +#: ../../configuration/vrf/index.rst:79 +msgid "Assign interface identified by `` to VRF named ``." +msgstr "Asignar interfaz identificada por ` ` a VRF llamado ` `." + +#: ../../configuration/interfaces/bonding.rst:324 +msgid "Assign member interfaces to PortChannel" +msgstr "Asignar interfaces de miembros a PortChannel" + +#: ../../configuration/vpn/sstp.rst:80 +msgid "Assign static IP address to `` account." +msgstr "Asigne una dirección IP estática a ` ` cuenta." + +#: ../../configuration/service/dhcp-server.rst:111 +msgid "Assign the IP address to this machine for `