From a362d1b248d7cbfd820055eff7e0cc5c616aed6f Mon Sep 17 00:00:00 2001 From: erkin Date: Fri, 10 Sep 2021 21:27:14 +0300 Subject: Update conntrack modules syntax --- docs/configexamples/ha.rst | 16 ++++++---------- 1 file changed, 6 insertions(+), 10 deletions(-) (limited to 'docs/configexamples') diff --git a/docs/configexamples/ha.rst b/docs/configexamples/ha.rst index 25d066b0..90f52108 100644 --- a/docs/configexamples/ha.rst +++ b/docs/configexamples/ha.rst @@ -306,21 +306,17 @@ public interface. set nat source rule 10 translation address '203.0.113.1' -Configure conntrack-sync and disable helpers +Configure conntrack-sync and enable helpers -------------------------------------------- -Most conntrack modules cause more problems than they're worth, especially in a -complex network. Turn them off by default, and if you need to turn them on -later, you can do so. +Conntrack modules are disabled by default because they cause more problems +than they're worth, especially in a complex network. You can enable them +manually if you wish. .. code-block:: none - set system conntrack modules ftp disable - set system conntrack modules gre disable - set system conntrack modules nfs disable - set system conntrack modules pptp disable - set system conntrack modules sip disable - set system conntrack modules tftp disable + set system conntrack modules ftp + set system conntrack modules gre Now enable replication between nodes. Replace eth0.201 with bond0.201 on the hardware router. -- cgit v1.2.3