msgid "" msgstr "" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "X-Generator: Localazy (https://localazy.com)\n" "Project-Id-Version: VyOS Documentation\n" "Language: pt\n" "Plural-Forms: nplurals=2; plural=(n>=0 && n<=1) ? 0 : 1;\n" #: ../../configuration/policy/route.rst:74 msgid "!: Match everything except the specified prefix." msgstr "!: Match everything except the specified prefix." #: ../../configuration/policy/route.rst:75 msgid "!-: Match everything except the specified range." msgstr "!-: Match everything except the specified range." #: ../../configuration/policy/route.rst:73 msgid "!: Match everything except the specified address." msgstr "!: Match everything except the specified address." #: ../../configuration/policy/route.rst:66 msgid "!: Match everything except the specified subnet." msgstr "!: Match everything except the specified subnet." #: ../../configuration/policy/route.rst:67 msgid "!-: Match everything except the specified range." msgstr "!-: Match everything except the specified range." #: ../../configuration/policy/route.rst:65 msgid "!: Match everything except the specified address." msgstr "!: Match everything except the specified address." #: ../../configuration/service/router-advert.rst:1 msgid "\"Managed address configuration\" flag" msgstr "\"Managed address configuration\" flag" #: ../../configuration/service/router-advert.rst:1 msgid "\"Other configuration\" flag" msgstr "\"Other configuration\" flag" #: ../../configuration/firewall/flowtables.rst:5 msgid "###################ä############# Flowtables Firewall Configuration #################################" msgstr "###################ä############# Flowtables Firewall Configuration #################################" #: ../../configuration/protocols/babel.rst:146 msgid "**1-254** – interfaces with a channel number interfere with interfering interfaces and interfaces with the same channel number. **interfering** – interfering interfaces are assumed to interfere with all other channels except noninterfering channels. **noninterfering** – noninterfering interfaces are assumed to only interfere with themselves." msgstr "**1-254** – interfaces with a channel number interfere with interfering interfaces and interfaces with the same channel number. **interfering** – interfering interfaces are assumed to interfere with all other channels except noninterfering channels. **noninterfering** – noninterfering interfaces are assumed to only interfere with themselves." #: ../../configuration/system/flow-accounting.rst:106 msgid "**10** - :abbr:`IPFIX (IP Flow Information Export)` as per :rfc:`3917`" msgstr "**10** - :abbr:`IPFIX (IP Flow Information Export)` as per :rfc:`3917`" #: ../../configuration/interfaces/tunnel.rst:235 msgid "**1. Confirm IP connectivity between tunnel source-address and remote:**" msgstr "**1. Confirm IP connectivity between tunnel source-address and remote:**" #: ../../configuration/interfaces/tunnel.rst:250 msgid "**2. Confirm the link type has been set to GRE:**" msgstr "**2. Confirm the link type has been set to GRE:**" #: ../../configuration/interfaces/tunnel.rst:267 msgid "**3. Confirm IP connectivity across the tunnel:**" msgstr "**3. Confirm IP connectivity across the tunnel:**" #: ../../configuration/system/flow-accounting.rst:104 msgid "**5** - Most common version, but restricted to IPv4 flows only" msgstr "**5** - Most common version, but restricted to IPv4 flows only" #: ../../configuration/system/flow-accounting.rst:105 msgid "**9** - NetFlow version 9 (default)" msgstr "**9** - NetFlow version 9 (default)" #: ../../configuration/protocols/bgp.rst:75 msgid "**AS path length check**" msgstr "**AS path length check**" #: ../../configuration/service/dhcp-server.rst:175 msgid "**Active-active**: both DHCP servers will respond to DHCP requests. If ``mode`` is not defined, this is the default behavior." msgstr "**Active-active**: both DHCP servers will respond to DHCP requests. If ``mode`` is not defined, this is the default behavior." #: ../../configuration/service/dhcp-server.rst:178 msgid "**Active-passive**: only ``primary`` server will respond to DHCP requests. If this server goes offline, then ``secondary`` server will take place." msgstr "**Active-passive**: only ``primary`` server will respond to DHCP requests. If this server goes offline, then ``secondary`` server will take place." #: ../../configuration/protocols/bgp.rst:106 msgid "**Already-selected external check**" msgstr "**Already-selected external check**" #: ../../configuration/nat/cgnat.rst:47 msgid "**Application Compatibility**: Some applications and protocols may not work well with CGNAT due to their reliance on unique public IP addresses." msgstr "**Application Compatibility**: Some applications and protocols may not work well with CGNAT due to their reliance on unique public IP addresses." #: ../../configuration/trafficpolicy/index.rst:597 #: ../../configuration/trafficpolicy/index.rst:1299 msgid "**Applies to:** Inbound traffic." msgstr "**Applies to:** Inbound traffic." #: ../../configuration/trafficpolicy/index.rst:494 msgid "**Applies to:** Outbound Traffic." msgstr "**Applies to:** Outbound Traffic." #: ../../configuration/trafficpolicy/index.rst:405 #: ../../configuration/trafficpolicy/index.rst:437 #: ../../configuration/trafficpolicy/index.rst:672 #: ../../configuration/trafficpolicy/index.rst:741 #: ../../configuration/trafficpolicy/index.rst:817 #: ../../configuration/trafficpolicy/index.rst:966 #: ../../configuration/trafficpolicy/index.rst:1011 #: ../../configuration/trafficpolicy/index.rst:1070 #: ../../configuration/trafficpolicy/index.rst:1204 msgid "**Applies to:** Outbound traffic." msgstr "**Applies to:** Outbound traffic." #: ../../configuration/trafficpolicy/index.rst:32 msgid "**Apply the traffic policy to an interface ingress or egress**." msgstr "**Apply the traffic policy to an interface ingress or egress**." #: ../../configuration/firewall/index.rst:22 msgid "**Bridge Port?**: choose appropiate path based on if interface were the packet was received is part of a bridge, or not." msgstr "**Bridge Port?**: choose appropiate path based on if interface were the packet was received is part of a bridge, or not." #: ../../configuration/firewall/index.rst:28 msgid "**Bridge Port?**: choose appropriate path based on whether interface where the packet was received is part of a bridge, or not." msgstr "**Bridge Port?**: choose appropriate path based on whether interface where the packet was received is part of a bridge, or not." #: ../../configuration/nat/cgnat.rst:66 msgid "**Calculate the Number of Subscribers per Public IP**:" msgstr "**Calculate the Number of Subscribers per Public IP**:" #: ../../configuration/interfaces/tunnel.rst:137 msgid "**Cisco IOS Router:**" msgstr "**Cisco IOS Router:**" #: ../../configuration/service/pppoe-server.rst:66 msgid "**Client IP address via IP range definition**" msgstr "**Client IP address via IP range definition**" #: ../../configuration/service/pppoe-server.rst:89 msgid "**Client IP subnets via CIDR notation**" msgstr "**Client IP subnets via CIDR notation**" #: ../../configuration/protocols/bgp.rst:120 msgid "**Cluster-List length check**" msgstr "**Cluster-List length check**" #: ../../configuration/firewall/index.rst:35 msgid "**Conntrack Ignore**: rules defined under ``set system conntrack ignore [ipv4 | ipv6] ...``." msgstr "**Conntrack Ignore**: rules defined under ``set system conntrack ignore [ipv4 | ipv6] ...``." #: ../../configuration/firewall/index.rst:46 msgid "**Conntrack Ignore**: rules defined under ``set system conntrack ignore [ipv4 | ipv6] ...``. Starting from vyos-1.5-rolling-202406120020, configuration done in this section can be done in ``firewall [ipv4 | ipv6] prerouting ...``. For compatibility reasons, this feature is still present, but it will be removed in the future." msgstr "**Conntrack Ignore**: rules defined under ``set system conntrack ignore [ipv4 | ipv6] ...``. Starting from vyos-1.5-rolling-202406120020, configuration done in this section can be done in ``firewall [ipv4 | ipv6] prerouting ...``. For compatibility reasons, this feature is still present, but it will be removed in the future." #: ../../configuration/nat/cgnat.rst:40 msgid "**Cost-Effective**: Reduces the cost associated with acquiring additional public IPv4 addresses." msgstr "**Cost-Effective**: Reduces the cost associated with acquiring additional public IPv4 addresses." #: ../../configuration/trafficpolicy/index.rst:30 msgid "**Create a traffic policy**." msgstr "**Create a traffic policy**." #: ../../configuration/interfaces/wwan.rst:53 #: ../../_include/interface-common-with-dhcp.txt:9 #: ../../_include/interface-vlan-8021ad.txt:121 #: ../../_include/interface-vlan-8021q.txt:97 msgid "**DHCP(v6)**" msgstr "**DHCP(v6)**" #: ../../_include/interface-dhcpv6-prefix-delegation.txt:1 msgid "**DHCPv6 Prefix Delegation (PD)**" msgstr "**DHCPv6 Prefix Delegation (PD)**" #: ../../configuration/firewall/index.rst:55 msgid "**Destination NAT**: rules defined under ``set [nat | nat66] destination...``." msgstr "**Destination NAT**: rules defined under ``set [nat | nat66] destination...``." #: ../../configuration/firewall/index.rst:58 msgid "**Destination is the router?**: choose an appropriate path based on destination IP address. Transit forward continues to **forward**, while traffic where the destination IP address is configured on the router continues to **input**." msgstr "**Destination is the router?**: choose an appropriate path based on destination IP address. Transit forward continues to **forward**, while traffic where the destination IP address is configured on the router continues to **input**." #: ../../configuration/firewall/index.rst:43 msgid "**Destination is the router?**: choose appropiate path based on destination IP address. Transit forward continunes to **forward**, while traffic that destination IP address is configured on the router continues to **input**." msgstr "**Destination is the router?**: choose appropiate path based on destination IP address. Transit forward continunes to **forward**, while traffic that destination IP address is configured on the router continues to **input**." #: ../../configuration/firewall/index.rst:53 msgid "**Destination is the router?**: choose appropriate path based on destination IP address. Transit forward continues to **forward**, while traffic that destination IP address is configured on the router continues to **input**." msgstr "**Destination is the router?**: choose appropriate path based on destination IP address. Transit forward continues to **forward**, while traffic that destination IP address is configured on the router continues to **input**." #: ../../configuration/firewall/flowtables.rst:9 msgid "**Documentation under development**" msgstr "**Documentation under development**" #: ../../configuration/nat/cgnat.rst:62 msgid "**Estimate Ports Needed per Subscriber**:" msgstr "**Estimate Ports Needed per Subscriber**:" #: ../../configuration/trafficpolicy/index.rst:169 msgid "**Ethernet (protocol, destination address or source address)**" msgstr "**Ethernet (protocol, destination address or source address)**" #: ../../configuration/service/dhcp-server.rst:63 #: ../../configuration/service/dhcp-server.rst:158 #: ../../configuration/service/dhcp-server.rst:256 #: ../../configuration/service/dhcp-server.rst:652 #: ../../configuration/service/dhcp-server.rst:675 #: ../../configuration/service/dhcp-server.rst:717 msgid "**Example:**" msgstr "**Example:**" #: ../../configuration/protocols/bgp.rst:89 msgid "**External check**" msgstr "**External check**" #: ../../configuration/firewall/ipv4.rst:45 msgid "**Firewall Prerouting**: commands found under ``set firewall ipv4 prerouting raw ...``" msgstr "**Firewall Prerouting**: commands found under ``set firewall ipv4 prerouting raw ...``" #: ../../configuration/firewall/ipv6.rst:45 msgid "**Firewall Prerouting**: commands found under ``set firewall ipv6 prerouting raw ...``" msgstr "**Firewall Prerouting**: commands found under ``set firewall ipv6 prerouting raw ...``" #: ../../configuration/trafficpolicy/index.rst:175 msgid "**Firewall mark**" msgstr "**Firewall mark**" #: ../../configuration/firewall/index.rst:42 msgid "**Firewall prerouting**: rules defined under ``set firewall [ipv4 | ipv6] prerouting raw...``. All rules defined in this section are processed before connection tracking subsystem." msgstr "**Firewall prerouting**: rules defined under ``set firewall [ipv4 | ipv6] prerouting raw...``. All rules defined in this section are processed before connection tracking subsystem." #: ../../configuration/firewall/flowtables.rst:52 msgid "**Flowtable Reference:** https://docs.kernel.org/networking/nf_flowtable.html" msgstr "**Flowtable Reference:** https://docs.kernel.org/networking/nf_flowtable.html" #: ../../configuration/firewall/index.rst:199 msgid "**For more information** of Netfilter hooks and Linux networking packet flows can be found in `Netfilter-Hooks `_" msgstr "**For more information** of Netfilter hooks and Linux networking packet flows can be found in `Netfilter-Hooks `_" #: ../../configuration/firewall/index.rst:72 msgid "**Forward**: stage where transit traffic can be filtered and controlled. This includes ipv4 and ipv6 filtering rules, defined in:" msgstr "**Forward**: stage where transit traffic can be filtered and controlled. This includes ipv4 and ipv6 filtering rules, defined in:" #: ../../configuration/firewall/index.rst:86 msgid "**Forward (Bridge)**: stage where traffic that is trasspasing through the bridge is filtered and controlled:" msgstr "**Forward (Bridge)**: stage where traffic that is trasspasing through the bridge is filtered and controlled:" #: ../../configuration/firewall/index.rst:87 msgid "**Forward (Bridge)**: stage where traffic that is trespasing through the bridge is filtered and controlled:" msgstr "**Forward (Bridge)**: stage where traffic that is trespasing through the bridge is filtered and controlled:" #: ../../configuration/firewall/index.rst:110 msgid "**Forward (Bridge)**: stage where traffic that is trespassing through the bridge is filtered and controlled:" msgstr "**Forward (Bridge)**: stage where traffic that is trespassing through the bridge is filtered and controlled:" #: ../../configuration/firewall/flowtables.rst:84 msgid "**Hardware offload:** should be supported by the NICs used." msgstr "**Hardware offload:** should be supported by the NICs used." #: ../../configuration/protocols/bgp.rst:94 msgid "**IGP cost check**" msgstr "**IGP cost check**" #: ../../configuration/nat/cgnat.rst:38 msgid "**IPv4 Address Conservation**: CGNAT helps mitigate the exhaustion of IPv4 addresses by allowing multiple customers to share a single public IP address." msgstr "**IPv4 Address Conservation**: CGNAT helps mitigate the exhaustion of IPv4 addresses by allowing multiple customers to share a single public IP address." #: ../../configuration/trafficpolicy/index.rst:171 msgid "**IPv4 (DSCP value, maximum packet length, protocol, source address,** **destination address, source port, destination port or TCP flags)**" msgstr "**IPv4 (DSCP value, maximum packet length, protocol, source address,** **destination address, source port, destination port or TCP flags)**" #: ../../configuration/trafficpolicy/index.rst:173 msgid "**IPv6 (DSCP value, maximum payload length, protocol, source address,** **destination address, source port, destination port or TCP flags)**" msgstr "**IPv6 (DSCP value, maximum payload length, protocol, source address,** **destination address, source port, destination port or TCP flags)**" #: ../../configuration/trafficpolicy/index.rst:395 msgid "**If you are looking for a policy for your outbound traffic** but you don't know which one you need and you don't want to go through every possible policy shown here, **our bet is that highly likely you are looking for a** Shaper_ **policy and you want to** :ref:`set its queues ` **as FQ-CoDel**." msgstr "**If you are looking for a policy for your outbound traffic** but you don't know which one you need and you don't want to go through every possible policy shown here, **our bet is that highly likely you are looking for a** Shaper_ **policy and you want to** :ref:`set its queues ` **as FQ-CoDel**." #: ../../configuration/firewall/general-legacy.rst:9 msgid "**Important note:** This documentation is valid only for VyOS Sagitta prior to 1.4-rolling-202308040557" msgstr "**Important note:** This documentation is valid only for VyOS Sagitta prior to 1.4-rolling-202308040557" #: ../../configuration/firewall/general-legacy.rst:9 msgid "**Important note:** This documentation is valid only for VyOS Sagitta prior to 1.4-rolling-YYYYMMDDHHmm" msgstr "**Important note:** This documentation is valid only for VyOS Sagitta prior to 1.4-rolling-YYYYMMDDHHmm" #: ../../configuration/system/conntrack.rst:148 msgid "**Important note about conntrack ignore rules:** Starting from vyos-1.5-rolling-202406120020, ignore rules can be defined in ``set firewall [ipv4 | ipv6] prerouting raw ...``. It's expected that in the future the conntrack ignore rules will be removed." msgstr "**Important note about conntrack ignore rules:** Starting from vyos-1.5-rolling-202406120020, ignore rules can be defined in ``set firewall [ipv4 | ipv6] prerouting raw ...``. It's expected that in the future the conntrack ignore rules will be removed." #: ../../configuration/firewall/ipv4.rst:84 #: ../../configuration/firewall/ipv6.rst:84 msgid "**Important note about default-actions:** If a default action for any base chain is not defined, then the default action is set to **accept** for that chain. For custom chains, if the default action is not defined, then the default-action is set to **drop**" msgstr "**Important note about default-actions:** If a default action for any base chain is not defined, then the default action is set to **accept** for that chain. For custom chains, if the default action is not defined, then the default-action is set to **drop**" #: ../../configuration/firewall/ipv4.rst:84 #: ../../configuration/firewall/ipv6.rst:84 msgid "**Important note about default-actions:** If default action for any base chain is not defined, then the default action is set to **accept** for that chain. For custom chains, if default action is not defined, then the default-action is set to **drop**" msgstr "**Important note about default-actions:** If default action for any base chain is not defined, then the default action is set to **accept** for that chain. For custom chains, if default action is not defined, then the default-action is set to **drop**" #: ../../configuration/firewall/bridge.rst:143 #: ../../configuration/firewall/ipv4.rst:214 #: ../../configuration/firewall/ipv6.rst:214 msgid "**Important note about default-actions:** If default action for any base chain is not defined, then the default action is set to **accept** for that chain. For custom chains, if default action is not defined, then the default-action is set to **drop**." msgstr "**Important note about default-actions:** If default action for any base chain is not defined, then the default action is set to **accept** for that chain. For custom chains, if default action is not defined, then the default-action is set to **drop**." #: ../../configuration/firewall/general.rst:72 msgid "**Important note about default-actions:** If default action for any chain is not defined, then the default action is set to **accept** for that chain. Only for custom chains, the default action is set to **drop**." msgstr "**Important note about default-actions:** If default action for any chain is not defined, then the default action is set to **accept** for that chain. Only for custom chains, the default action is set to **drop**." #: ../../configuration/firewall/general.rst:404 msgid "**Important note about default-actions:** If default action for any chain is not defined, then the default action is set to **drop** for that chain." msgstr "**Important note about default-actions:** If default action for any chain is not defined, then the default action is set to **drop** for that chain." #: ../../configuration/firewall/bridge.rst:197 msgid "**Important note about default-actions:** If the default action for any base chain is not defined, then the default action is set to **accept** for that chain. For custom chains, if the default action is not defined, then the default-action is set to **drop**." msgstr "**Important note about default-actions:** If the default action for any base chain is not defined, then the default action is set to **accept** for that chain. For custom chains, if the default action is not defined, then the default-action is set to **drop**." #: ../../configuration/firewall/ipv4.rst:214 #: ../../configuration/firewall/ipv6.rst:214 msgid "**Important note about default-actions:** If the default action for any base chain is not defined, then the default action is set to **accept** for that chain. For custom chains if a default action is not defined then the default-action is set to **drop**." msgstr "**Important note about default-actions:** If the default action for any base chain is not defined, then the default action is set to **accept** for that chain. For custom chains if a default action is not defined then the default-action is set to **drop**." #: ../../configuration/firewall/general.rst:20 msgid "**Important note on usage of terms:** The firewall makes use of the terms `forward`, `input`, and `output` for firewall policy. More information of Netfilter hooks and Linux networking packet flows can be found in `Netfilter-Hooks `_" msgstr "**Important note on usage of terms:** The firewall makes use of the terms `forward`, `input`, and `output` for firewall policy. More information of Netfilter hooks and Linux networking packet flows can be found in `Netfilter-Hooks `_" #: ../../configuration/firewall/general-legacy.rst:24 msgid "**Important note on usage of terms:** The firewall makes use of the terms `in`, `out`, and `local` for firewall policy. Users experienced with netfilter often confuse `in` to be a reference to the `INPUT` chain, and `out` the `OUTPUT` chain from netfilter. This is not the case. These instead indicate the use of the `FORWARD` chain and either the input or output interface. The `INPUT` chain, which is used for local traffic to the OS, is a reference to as `local` with respect to its input interface." msgstr "**Important note on usage of terms:** The firewall makes use of the terms `in`, `out`, and `local` for firewall policy. Users experienced with netfilter often confuse `in` to be a reference to the `INPUT` chain, and `out` the `OUTPUT` chain from netfilter. This is not the case. These instead indicate the use of the `FORWARD` chain and either the input or output interface. The `INPUT` chain, which is used for local traffic to the OS, is a reference to as `local` with respect to its input interface." #: ../../configuration/firewall/index.rst:48 msgid "**Input**: stage where traffic destinated to the router itself can be filtered and controlled. This is where all rules for securing the router should take place. This includes ipv4 and ipv6 filtering rules, defined in:" msgstr "**Input**: stage where traffic destinated to the router itself can be filtered and controlled. This is where all rules for securing the router should take place. This includes ipv4 and ipv6 filtering rules, defined in:" #: ../../configuration/firewall/index.rst:63 msgid "**Input**: stage where traffic destined for the router itself can be filtered and controlled. This is where all rules for securing the router should take place. This includes ipv4 and ipv6 filtering rules, defined in:" msgstr "**Input**: stage where traffic destined for the router itself can be filtered and controlled. This is where all rules for securing the router should take place. This includes ipv4 and ipv6 filtering rules, defined in:" #: ../../configuration/firewall/index.rst:115 msgid "**Input (Bridge)**: stage where traffic destined for the bridge itself can be filtered and controlled:" msgstr "**Input (Bridge)**: stage where traffic destined for the bridge itself can be filtered and controlled:" #: ../../configuration/trafficpolicy/index.rst:170 msgid "**Interface name**" msgstr "**Interface name**" #: ../../configuration/vpn/site2site_ipsec.rst:306 msgid "**LEFT**" msgstr "**LEFT**" #: ../../configuration/vpn/site2site_ipsec.rst:290 msgid "**LEFT:** * WAN interface on `eth0.201` * `eth0.201` interface IP: `172.18.201.10/24` * `vti10` interface IP: `10.0.0.2/31` * `dum0` interface IP: `10.0.11.1/24` (for testing purposes)" msgstr "**LEFT:** * WAN interface on `eth0.201` * `eth0.201` interface IP: `172.18.201.10/24` * `vti10` interface IP: `10.0.0.2/31` * `dum0` interface IP: `10.0.11.1/24` (for testing purposes)" #: ../../configuration/firewall/bridge.rst:48 msgid "**Layer 3 bridge**: When an IP address is assigned to the bridge interface, and if traffic is sent to the router to this IP (for example using such IP as default gateway), then rules defined for **bridge firewall** won't match, and firewall analysis continues at **IP layer**." msgstr "**Layer 3 bridge**: When an IP address is assigned to the bridge interface, and if traffic is sent to the router to this IP (for example using such IP as default gateway), then rules defined for **bridge firewall** won't match, and firewall analysis continues at **IP layer**." #: ../../configuration/interfaces/vxlan.rst:235 msgid "**Leaf2 configuration:**" msgstr "**Leaf2 configuration:**" #: ../../configuration/interfaces/vxlan.rst:260 msgid "**Leaf3 configuration:**" msgstr "**Leaf3 configuration:**" #: ../../configuration/interfaces/tunnel.rst:159 msgid "**Linux systemd-networkd:**" msgstr "**Linux systemd-networkd:**" #: ../../configuration/protocols/bgp.rst:67 msgid "**Local preference check**" msgstr "**Local preference check**" #: ../../configuration/protocols/bgp.rst:71 msgid "**Local route check**" msgstr "**Local route check**" #: ../../configuration/protocols/bgp.rst:84 msgid "**MED check**" msgstr "**MED check**" #: ../../configuration/protocols/bgp.rst:98 msgid "**Multi-path check**" msgstr "**Multi-path check**" #: ../../configuration/protocols/bgp.rst:1215 msgid "**Node1:**" msgstr "**Node1:**" #: ../../configuration/protocols/bgp.rst:1243 msgid "**Node2:**" msgstr "**Node2:**" #: ../../configuration/protocols/ospf.rst:840 #: ../../configuration/protocols/ospf.rst:913 #: ../../configuration/protocols/ospf.rst:985 #: ../../configuration/protocols/ospf.rst:1350 #: ../../configuration/protocols/segment-routing.rst:281 msgid "**Node 1**" msgstr "**Node 1**" #: ../../configuration/protocols/babel.rst:192 #: ../../configuration/protocols/bgp.rst:1125 #: ../../configuration/protocols/bgp.rst:1152 #: ../../configuration/protocols/bgp.rst:1170 #: ../../configuration/protocols/bgp.rst:1198 #: ../../configuration/protocols/isis.rst:341 #: ../../configuration/protocols/isis.rst:416 #: ../../configuration/protocols/isis.rst:457 #: ../../configuration/protocols/isis.rst:495 #: ../../configuration/protocols/openfabric.rst:170 #: ../../configuration/protocols/ospf.rst:948 #: ../../configuration/protocols/ospf.rst:1320 #: ../../configuration/protocols/rip.rst:243 #: ../../configuration/protocols/segment-routing.rst:195 msgid "**Node 1:**" msgstr "**Node 1:**" #: ../../configuration/protocols/ospf.rst:850 #: ../../configuration/protocols/ospf.rst:930 #: ../../configuration/protocols/ospf.rst:1001 #: ../../configuration/protocols/ospf.rst:1365 #: ../../configuration/protocols/segment-routing.rst:296 msgid "**Node 2**" msgstr "**Node 2**" #: ../../configuration/protocols/babel.rst:202 #: ../../configuration/protocols/bgp.rst:1136 #: ../../configuration/protocols/bgp.rst:1158 #: ../../configuration/protocols/bgp.rst:1182 #: ../../configuration/protocols/bgp.rst:1204 #: ../../configuration/protocols/isis.rst:352 #: ../../configuration/protocols/isis.rst:432 #: ../../configuration/protocols/isis.rst:511 #: ../../configuration/protocols/openfabric.rst:181 #: ../../configuration/protocols/ospf.rst:1329 #: ../../configuration/protocols/rip.rst:251 #: ../../configuration/protocols/segment-routing.rst:211 msgid "**Node 2:**" msgstr "**Node 2:**" #: ../../configuration/policy/examples.rst:136 msgid "**OPTIONAL:** Exclude Inter-VLAN traffic (between VLAN10 and VLAN11) from PBR" msgstr "**OPTIONAL:** Exclude Inter-VLAN traffic (between VLAN10 and VLAN11) from PBR" #: ../../configuration/protocols/ospf.rst:731 msgid "**OSPF network routing table** – includes a list of acquired routes for all accessible networks (or aggregated area ranges) of OSPF system. \"IA\" flag means that route destination is in the area to which the router is not connected, i.e. it’s an inter-area path. In square brackets a summary metric for all links through which a path lies to this network is specified. \"via\" prefix defines a router-gateway, i.e. the first router on the way to the destination (next hop). **OSPF router routing table** – includes a list of acquired routes to all accessible ABRs and ASBRs. **OSPF external routing table** – includes a list of acquired routes that are external to the OSPF process. \"E\" flag points to the external link metric type (E1 – metric type 1, E2 – metric type 2). External link metric is printed in the \"/\" format." msgstr "**OSPF network routing table** – includes a list of acquired routes for all accessible networks (or aggregated area ranges) of OSPF system. \"IA\" flag means that route destination is in the area to which the router is not connected, i.e. it’s an inter-area path. In square brackets a summary metric for all links through which a path lies to this network is specified. \"via\" prefix defines a router-gateway, i.e. the first router on the way to the destination (next hop). **OSPF router routing table** – includes a list of acquired routes to all accessible ABRs and ASBRs. **OSPF external routing table** – includes a list of acquired routes that are external to the OSPF process. \"E\" flag points to the external link metric type (E1 – metric type 1, E2 – metric type 2). External link metric is printed in the \"/\" format." #: ../../configuration/protocols/failover.rst:65 msgid "**One gateway:**" msgstr "**One gateway:**" #: ../../configuration/protocols/bgp.rst:79 msgid "**Origin check**" msgstr "**Origin check**" #: ../../configuration/firewall/index.rst:64 msgid "**Output**: stage where traffic that is originated by the router itself can be filtered and controlled. Bare in mind that this traffic can be a new connection originted by a internal process running on VyOS router, such as NTP, or can be a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" msgstr "**Output**: stage where traffic that is originated by the router itself can be filtered and controlled. Bare in mind that this traffic can be a new connection originted by a internal process running on VyOS router, such as NTP, or can be a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" #: ../../configuration/firewall/index.rst:65 msgid "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externally through **input** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" msgstr "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externally through **input** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" #: ../../configuration/firewall/index.rst:74 msgid "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externally through **input** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 rules, and two different sections are present:" msgstr "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externally through **input** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 rules, and two different sections are present:" #: ../../configuration/firewall/index.rst:65 msgid "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **input** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" msgstr "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **input** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" #: ../../configuration/firewall/index.rst:65 msgid "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" msgstr "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on VyOS router, such as NTP, or a response to traffic received externaly through **inputt** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 filtering rules, defined in:" #: ../../configuration/firewall/index.rst:79 msgid "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on the VyOS router such as NTP, or a response to traffic received externally through **input** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 rules, and two different sections are present:" msgstr "**Output**: stage where traffic that originates from the router itself can be filtered and controlled. Bear in mind that this traffic can be a new connection originated by a internal process running on the VyOS router such as NTP, or a response to traffic received externally through **input** (for example response to an ssh login attempt to the router). This includes ipv4 and ipv6 rules, and two different sections are present:" #: ../../configuration/firewall/index.rst:90 msgid "**Output Filter**: ``set firewall [ipv4 | ipv6] output filter ...``." msgstr "**Output Filter**: ``set firewall [ipv4 | ipv6] output filter ...``." #: ../../configuration/firewall/ipv4.rst:81 msgid "**Output Filter**: ``set firewall ipv4 output filter ...``. Rules defined in this section are processed after connection tracking subsystem." msgstr "**Output Filter**: ``set firewall ipv4 output filter ...``. Rules defined in this section are processed after connection tracking subsystem." #: ../../configuration/firewall/ipv6.rst:81 msgid "**Output Filter**: ``set firewall ipv6 output filter ...``. Rules defined in this section are processed after connection tracking subsystem." msgstr "**Output Filter**: ``set firewall ipv6 output filter ...``. Rules defined in this section are processed after connection tracking subsystem." #: ../../configuration/firewall/index.rst:86 msgid "**Output Prerouting**: ``set firewall [ipv4 | ipv6] output filter ...``. As described in **Prerouting**, rules defined in this section are processed before connection tracking subsystem." msgstr "**Output Prerouting**: ``set firewall [ipv4 | ipv6] output filter ...``. As described in **Prerouting**, rules defined in this section are processed before connection tracking subsystem." #: ../../configuration/firewall/ipv4.rst:78 msgid "**Output Prerouting**: ``set firewall ipv4 output raw ...``. As described in **Prerouting**, rules defined in this section are processed before connection tracking subsystem." msgstr "**Output Prerouting**: ``set firewall ipv4 output raw ...``. As described in **Prerouting**, rules defined in this section are processed before connection tracking subsystem." #: ../../configuration/firewall/ipv6.rst:78 msgid "**Output Prerouting**: ``set firewall ipv6 output raw ...``. As described in **Prerouting**, rules defined in this section are processed before connection tracking subsystem." msgstr "**Output Prerouting**: ``set firewall ipv6 output raw ...``. As described in **Prerouting**, rules defined in this section are processed before connection tracking subsystem." #: ../../configuration/firewall/index.rst:120 msgid "**Output (Bridge)**: stage where traffic that originates from the bridge itself can be filtered and controlled:" msgstr "**Output (Bridge)**: stage where traffic that originates from the bridge itself can be filtered and controlled:" #: ../../configuration/protocols/bgp.rst:125 msgid "**Peer address**" msgstr "**Peer address**" #: ../../configuration/nat/cgnat.rst:46 msgid "**Performance Overheads**: The translation process can introduce latency and potential performance bottlenecks, especially under high load." msgstr "**Performance Overheads**: The translation process can introduce latency and potential performance bottlenecks, especially under high load." #: ../../configuration/firewall/index.rst:52 msgid "**Policy Route**: rules defined under ``set policy [route | route6] ...``." msgstr "**Policy Route**: rules defined under ``set policy [route | route6] ...``." #: ../../configuration/policy/examples.rst:5 msgid "**Policy definition:**" msgstr "**Policy definition:**" #: ../../configuration/nat/cgnat.rst:48 msgid "**Port Allocation Limits**: Each public IP address has a limited number of ports, which can be exhausted, affecting the ability to establish new connections." msgstr "**Port Allocation Limits**: Each public IP address has a limited number of ports, which can be exhausted, affecting the ability to establish new connections." #: ../../configuration/nat/cgnat.rst:49 msgid "**Port Control Protocol**: PCP is not implemented." msgstr "**Port Control Protocol**: PCP is not implemented." #: ../../configuration/firewall/index.rst:92 msgid "**Postrouting**: as in **Prerouting**, several actions defined in different parts of VyOS configuration are performed in this stage. This includes:" msgstr "**Postrouting**: as in **Prerouting**, several actions defined in different parts of VyOS configuration are performed in this stage. This includes:" #: ../../configuration/firewall/index.rst:29 msgid "**Prerouting**: All packets that are received by the router are processed in this stage, regardless of the destination of the packet. Starting from vyos-1.5-rolling-202406120020, a new section was added to firewall configuration. There are several actions that can be done in this stage, and currently these actions are also defined in different parts in VyOS configuration. Order is important, and relevant configuration that acts in this stage are:" msgstr "**Prerouting**: All packets that are received by the router are processed in this stage, regardless of the destination of the packet. Starting from vyos-1.5-rolling-202406120020, a new section was added to firewall configuration. There are several actions that can be done in this stage, and currently these actions are also defined in different parts in VyOS configuration. Order is important, and relevant configuration that acts in this stage are:" #: ../../configuration/firewall/index.rst:34 msgid "**Prerouting**: All packets that are received by the router are processed in this stage, regardless of the destination of the packet. Starting from vyos-1.5-rolling-202406120020, a new section was added to the firewall configuration. There are several actions that can be done in this stage, and currently these actions are also defined in different parts of the VyOS configuration. Order is important, and the relevant configuration that acts in this stage are:" msgstr "**Prerouting**: All packets that are received by the router are processed in this stage, regardless of the destination of the packet. Starting from vyos-1.5-rolling-202406120020, a new section was added to the firewall configuration. There are several actions that can be done in this stage, and currently these actions are also defined in different parts of the VyOS configuration. Order is important, and the relevant configuration that acts in this stage are:" #: ../../configuration/firewall/index.rst:29 msgid "**Prerouting**: several actions can be done in this stage, and currently these actions are defined in different parts in VyOS configuration. Order is important, and all these actions are performed before any actions defined under ``firewall`` section. Relevant configuration that acts in this stage are:" msgstr "**Prerouting**: several actions can be done in this stage, and currently these actions are defined in different parts in VyOS configuration. Order is important, and all these actions are performed before any actions defined under ``firewall`` section. Relevant configuration that acts in this stage are:" #: ../../configuration/firewall/index.rst:28 msgid "**Prerouting**: several actions can be done in this stage, and currently these actions are defined in different parts in vyos configuration. Order is important, and all these actions are performed before any actions define under ``firewall`` section. Relevant configuration that acts in this stage are:" msgstr "**Prerouting**: several actions can be done in this stage, and currently these actions are defined in different parts in vyos configuration. Order is important, and all these actions are performed before any actions define under ``firewall`` section. Relevant configuration that acts in this stage are:" #: ../../configuration/firewall/index.rst:97 msgid "**Prerouting (Bridge)**: all packets that are received by the bridge are processed in this stage, regardless of the destination of the packet. First filters can be applied here, and/or also configure rules for ignoring connection tracking system, and also apply policy routing using ``set`` option while defining the rule. The relevant configuration that acts in:" msgstr "**Prerouting (Bridge)**: all packets that are received by the bridge are processed in this stage, regardless of the destination of the packet. First filters can be applied here, and/or also configure rules for ignoring connection tracking system, and also apply policy routing using ``set`` option while defining the rule. The relevant configuration that acts in:" #: ../../configuration/firewall/index.rst:102 msgid "**Prerouting (Bridge)**: all packets that are received by the bridge are processed in this stage, regardless of the destination of the packet. First filters can be applied here, and/or also configure rules for ignoring connection tracking system. The relevant configuration that acts in:" msgstr "**Prerouting (Bridge)**: all packets that are received by the bridge are processed in this stage, regardless of the destination of the packet. First filters can be applied here, and/or also configure rules for ignoring connection tracking system. The relevant configuration that acts in:" #: ../../configuration/service/dhcp-server.rst:448 msgid "**Primary**" msgstr "**Primary**" #: ../../configuration/trafficpolicy/index.rst:493 msgid "**Queueing discipline** Fair/Flow Queue CoDel." msgstr "**Queueing discipline** Fair/Flow Queue CoDel." #: ../../configuration/trafficpolicy/index.rst:1010 msgid "**Queueing discipline:** Deficit Round Robin." msgstr "**Queueing discipline:** Deficit Round Robin." #: ../../configuration/trafficpolicy/index.rst:1203 msgid "**Queueing discipline:** Deficit mode." msgstr "**Queueing discipline:** Deficit mode." #: ../../configuration/trafficpolicy/index.rst:816 msgid "**Queueing discipline:** Generalized Random Early Drop." msgstr "**Queueing discipline:** Generalized Random Early Drop." #: ../../configuration/trafficpolicy/index.rst:1069 msgid "**Queueing discipline:** Hierarchical Token Bucket." msgstr "**Queueing discipline:** Hierarchical Token Bucket." #: ../../configuration/trafficpolicy/index.rst:596 msgid "**Queueing discipline:** Ingress policer." msgstr "**Queueing discipline:** Ingress policer." #: ../../configuration/trafficpolicy/index.rst:404 msgid "**Queueing discipline:** PFIFO (Packet First In First Out)." msgstr "**Queueing discipline:** PFIFO (Packet First In First Out)." #: ../../configuration/trafficpolicy/index.rst:740 msgid "**Queueing discipline:** PRIO." msgstr "**Queueing discipline:** PRIO." #: ../../configuration/trafficpolicy/index.rst:436 msgid "**Queueing discipline:** SFQ (Stochastic Fairness Queuing)." msgstr "**Queueing discipline:** SFQ (Stochastic Fairness Queuing)." #: ../../configuration/trafficpolicy/index.rst:915 msgid "**Queueing discipline:** Tocken Bucket Filter." msgstr "**Queueing discipline:** Tocken Bucket Filter." #: ../../configuration/trafficpolicy/index.rst:965 msgid "**Queueing discipline:** Token Bucket Filter." msgstr "**Queueing discipline:** Token Bucket Filter." #: ../../configuration/trafficpolicy/index.rst:671 msgid "**Queueing discipline:** netem (Network Emulator) + TBF (Token Bucket Filter)." msgstr "**Queueing discipline:** netem (Network Emulator) + TBF (Token Bucket Filter)." #: ../../configuration/interfaces/bonding.rst:460 #: ../../configuration/interfaces/macsec.rst:159 msgid "**R1**" msgstr "**R1**" #: ../../configuration/interfaces/macsec.rst:251 msgid "**R1 MACsec01**" msgstr "**R1 MACsec01**" #: ../../configuration/interfaces/macsec.rst:215 msgid "**R1 Static Key**" msgstr "**R1 Static Key**" #: ../../configuration/interfaces/bonding.rst:478 #: ../../configuration/interfaces/macsec.rst:171 msgid "**R2**" msgstr "**R2**" #: ../../configuration/interfaces/macsec.rst:269 msgid "**R2 MACsec02**" msgstr "**R2 MACsec02**" #: ../../configuration/interfaces/macsec.rst:228 msgid "**R2 Static Key**" msgstr "**R2 Static Key**" #: ../../configuration/service/pppoe-server.rst:91 msgid "**RADIUS based IP pools (Framed-IP-Address)**" msgstr "**RADIUS based IP pools (Framed-IP-Address)**" #: ../../configuration/service/pppoe-server.rst:115 msgid "**RADIUS sessions management DM/CoA**" msgstr "**RADIUS sessions management DM/CoA**" #: ../../configuration/vpn/site2site_ipsec.rst:346 msgid "**RIGHT**" msgstr "**RIGHT**" #: ../../configuration/vpn/site2site_ipsec.rst:296 msgid "**RIGHT:** * WAN interface on `eth0.202` * `eth0.201` interface IP: `172.18.202.10/24` * `vti10` interface IP: `10.0.0.3/31` * `dum0` interface IP: `10.0.12.1/24` (for testing purposes)" msgstr "**RIGHT:** * WAN interface on `eth0.202` * `eth0.201` interface IP: `172.18.202.10/24` * `vti10` interface IP: `10.0.0.3/31` * `dum0` interface IP: `10.0.12.1/24` (for testing purposes)" #: ../../configuration/protocols/bgp.rst:113 msgid "**Router-ID check**" msgstr "**Router-ID check**" #: ../../configuration/protocols/pim.rst:228 msgid "**Router 1**" msgstr "**Router 1**" #: ../../configuration/protocols/pim.rst:256 msgid "**Router 2**" msgstr "**Router 2**" #: ../../configuration/protocols/pim.rst:241 msgid "**Router 3**" msgstr "**Router 3**" #: ../../configuration/policy/examples.rst:36 msgid "**Routes learned after routing policy applied:**" msgstr "**Routes learned after routing policy applied:**" #: ../../configuration/policy/examples.rst:21 msgid "**Routes learned before routing policy applied:**" msgstr "**Routes learned before routing policy applied:**" #: ../../configuration/interfaces/bonding.rst:496 msgid "**SW1**" msgstr "**SW1**" #: ../../configuration/interfaces/bonding.rst:527 msgid "**SW2**" msgstr "**SW2**" #: ../../configuration/nat/cgnat.rst:39 msgid "**Scalability**: ISPs can support more customers without needing a proportional increase in public IP addresses." msgstr "**Scalability**: ISPs can support more customers without needing a proportional increase in public IP addresses." #: ../../configuration/service/dhcp-server.rst:458 msgid "**Secondary**" msgstr "**Secondary**" #: ../../configuration/vpn/ipsec.rst:285 msgid "**Setting up IPSec**" msgstr "**Setting up IPSec**" #: ../../configuration/vpn/ipsec.rst:261 msgid "**Setting up the GRE tunnel**" msgstr "**Setting up the GRE tunnel**" #: ../../configuration/firewall/index.rst:96 msgid "**Source NAT**: rules defined under ``set [nat | nat66] destination...``." msgstr "**Source NAT**: rules defined under ``set [nat | nat66] destination...``." #: ../../configuration/interfaces/vxlan.rst:212 msgid "**Spine1 Configuration:**" msgstr "**Spine1 Configuration:**" #: ../../configuration/protocols/ospf.rst:1380 msgid "**Status**" msgstr "**Status**" #: ../../configuration/protocols/ospf.rst:1338 msgid "**To see the redistributed routes:**" msgstr "**To see the redistributed routes:**" #: ../../configuration/nat/cgnat.rst:56 msgid "**Total Ports Available**:" msgstr "**Total Ports Available**:" #: ../../configuration/nat/cgnat.rst:45 msgid "**Traceability Issues**: Since multiple users share the same public IP address, tracking individual users for security and legal purposes can be challenging." msgstr "**Traceability Issues**: Since multiple users share the same public IP address, tracking individual users for security and legal purposes can be challenging." #: ../../configuration/protocols/failover.rst:85 msgid "**Two gateways and different metrics:**" msgstr "**Two gateways and different metrics:**" #: ../../configuration/trafficpolicy/index.rst:176 msgid "**VLAN ID**" msgstr "**VLAN ID**" #: ../../configuration/interfaces/tunnel.rst:128 #: ../../configuration/interfaces/tunnel.rst:149 msgid "**VyOS Router:**" msgstr "**VyOS Router:**" #: ../../configuration/protocols/bgp.rst:63 msgid "**Weight check**" msgstr "**Weight check**" #: ../../configuration/trafficpolicy/index.rst:1258 msgid "**(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows." msgstr "**(Default)** Flows are defined by the 5-tuple, fairness is applied over source and destination addresses and also over individual flows." #: ../../_include/interface-dhcp-options.txt:74 msgid "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24" msgstr "**address** can be specified multiple times, e.g. 192.168.100.1 and/or 192.168.100.0/24" #: ../../_include/interface-address-with-dhcp.txt:7 #: ../../_include/interface-address.txt:6 msgid "**address** can be specified multiple times as IPv4 and/or IPv6 address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64" msgstr "**address** can be specified multiple times as IPv4 and/or IPv6 address, e.g. 192.0.2.1/24 and/or 2001:db8::1/64" #: ../../configuration/service/pppoe-server.rst:499 #: ../../configuration/vpn/l2tp.rst:431 #: ../../configuration/vpn/pptp.rst:352 #: ../../configuration/vpn/sstp.rst:389 msgid "**allow** - Negotiate IPv4 only if client requests (Default value)" msgstr "**allow** - Negotiate IPv4 only if client requests (Default value)" #: ../../configuration/service/pppoe-server.rst:369 #: ../../configuration/vpn/l2tp.rst:296 #: ../../configuration/vpn/pptp.rst:217 #: ../../configuration/vpn/sstp.rst:254 msgid "**allow** - Negotiate IPv6 only if client requests" msgstr "**allow** - Negotiate IPv6 only if client requests" #: ../../configuration/container/index.rst:62 msgid "**allow-host-networks** cannot be used with **network**" msgstr "**allow-host-networks** cannot be used with **network**" #: ../../configuration/container/index.rst:133 msgid "**always**: Restart containers when they exit, regardless of status, retrying indefinitely" msgstr "**always**: Restart containers when they exit, regardless of status, retrying indefinitely" #: ../../configuration/service/dhcp-relay.rst:71 msgid "**append:** The relay agent is allowed to append its own relay information to a received DHCP packet, disregarding relay information already present in the packet." msgstr "**append:** The relay agent is allowed to append its own relay information to a received DHCP packet, disregarding relay information already present in the packet." #: ../../configuration/system/flow-accounting.rst:32 msgid "**application**: analyzes received flow data in the context of intrusion detection or traffic profiling, for example" msgstr "**application**: analyzes received flow data in the context of intrusion detection or traffic profiling, for example" #: ../../configuration/protocols/babel.rst:69 msgid "**auto** – automatically determines the interface type. **wired** – enables optimisations for wired interfaces. **wireless** – disables a number of optimisations that are only correct on wired interfaces. Specifying wireless is always correct, but may cause slower convergence and extra routing traffic." msgstr "**auto** – automatically determines the interface type. **wired** – enables optimisations for wired interfaces. **wireless** – disables a number of optimisations that are only correct on wired interfaces. Specifying wireless is always correct, but may cause slower convergence and extra routing traffic." #: ../../configuration/service/ids.rst:90 msgid "**ban-time** and **threshold**: these values are kept very low in order to easily identify and generate and attack." msgstr "**ban-time** and **threshold**: these values are kept very low in order to easily identify and generate and attack." #: ../../configuration/protocols/ospf.rst:435 msgid "**broadcast** – broadcast IP addresses distribution. **non-broadcast** – address distribution in NBMA networks topology. **point-to-multipoint** – address distribution in point-to-multipoint networks. **point-to-point** – address distribution in point-to-point networks." msgstr "**broadcast** – broadcast IP addresses distribution. **non-broadcast** – address distribution in NBMA networks topology. **point-to-multipoint** – address distribution in point-to-multipoint networks. **point-to-point** – address distribution in point-to-point networks." #: ../../configuration/protocols/ospf.rst:1175 msgid "**broadcast** – broadcast IP addresses distribution. **point-to-point** – address distribution in point-to-point networks." msgstr "**broadcast** – broadcast IP addresses distribution. **point-to-point** – address distribution in point-to-point networks." #: ../../configuration/service/pppoe-server.rst:423 #: ../../configuration/vpn/l2tp.rst:348 #: ../../configuration/vpn/pptp.rst:269 #: ../../configuration/vpn/sstp.rst:306 msgid "**calling-sid** - Calculate interface identifier from calling-station-id." msgstr "**calling-sid** - Calculate interface identifier from calling-station-id." #: ../../configuration/protocols/ospf.rst:121 msgid "**cisco** – a router will be considered as ABR if it has several configured links to the networks in different areas one of which is a backbone area. Moreover, the link to the backbone area should be active (working). **ibm** – identical to \"cisco\" model but in this case a backbone area link may not be active. **standard** – router has several active links to different areas. **shortcut** – identical to \"standard\" but in this model a router is allowed to use a connected areas topology without involving a backbone area for inter-area connections." msgstr "**cisco** – a router will be considered as ABR if it has several configured links to the networks in different areas one of which is a backbone area. Moreover, the link to the backbone area should be active (working). **ibm** – identical to \"cisco\" model but in this case a backbone area link may not be active. **standard** – router has several active links to different areas. **shortcut** – identical to \"standard\" but in this model a router is allowed to use a connected areas topology without involving a backbone area for inter-area connections." #: ../../configuration/system/flow-accounting.rst:30 msgid "**collector**: responsible for reception, storage and pre-processing of flow data received from a flow exporter" msgstr "**collector**: responsible for reception, storage and pre-processing of flow data received from a flow exporter" #: ../../configuration/protocols/ospf.rst:329 msgid "**default** – this area will be used for shortcutting only if ABR does not have a link to the backbone area or this link was lost. **enable** – the area will be used for shortcutting every time the route that goes through it is cheaper. **disable** – this area is never used by ABR for routes shortcutting." msgstr "**default** – this area will be used for shortcutting only if ABR does not have a link to the backbone area or this link was lost. **enable** – the area will be used for shortcutting every time the route that goes through it is cheaper. **disable** – this area is never used by ABR for routes shortcutting." #: ../../configuration/protocols/babel.rst:82 msgid "**default** – enable split-horizon on wired interfaces, and disable split-horizon on wireless interfaces. **enable** – enable split-horizon on this interfaces. **disable** – disable split-horizon on this interfaces." msgstr "**default** – enable split-horizon on wired interfaces, and disable split-horizon on wireless interfaces. **enable** – enable split-horizon on this interfaces. **disable** – disable split-horizon on this interfaces." #: ../../configuration/service/pppoe-server.rst:591 msgid "**deny**: Deny second session authorization." msgstr "**deny**: Deny second session authorization." #: ../../configuration/service/pppoe-server.rst:500 #: ../../configuration/vpn/l2tp.rst:432 #: ../../configuration/vpn/pptp.rst:353 #: ../../configuration/vpn/sstp.rst:390 msgid "**deny** - Do not negotiate IPv4" msgstr "**deny** - Do not negotiate IPv4" #: ../../configuration/service/pppoe-server.rst:370 #: ../../configuration/vpn/l2tp.rst:297 #: ../../configuration/vpn/pptp.rst:218 #: ../../configuration/vpn/sstp.rst:255 msgid "**deny** - Do not negotiate IPv6 (default value)" msgstr "**deny** - Do not negotiate IPv6 (default value)" #: ../../configuration/service/pppoe-server.rst:532 #: ../../configuration/vpn/l2tp.rst:465 #: ../../configuration/vpn/pptp.rst:385 #: ../../configuration/vpn/sstp.rst:423 msgid "**deny** - deny mppe" msgstr "**deny** - deny mppe" #: ../../configuration/nat/nat44.rst:213 msgid "**destination** - specify which packets the translation will be applied to, only based on the destination address and/or port number configured." msgstr "**destination** - specify which packets the translation will be applied to, only based on the destination address and/or port number configured." #: ../../_include/interface-address-with-dhcp.txt:9 msgid "**dhcp** interface address is received by DHCP from a DHCP server on this segment." msgstr "**dhcp** interface address is received by DHCP from a DHCP server on this segment." #: ../../_include/interface-address-with-dhcp.txt:11 msgid "**dhcpv6** interface address is received by DHCPv6 from a DHCPv6 server on this segment." msgstr "**dhcpv6** interface address is received by DHCPv6 from a DHCPv6 server on this segment." #: ../../configuration/service/pppoe-server.rst:590 msgid "**disable**: Disables session control." msgstr "**disable**: Disables session control." #: ../../configuration/service/dhcp-relay.rst:75 msgid "**discard:** Received packets which already contain relay information will be discarded." msgstr "**discard:** Received packets which already contain relay information will be discarded." #: ../../configuration/protocols/igmp-proxy.rst:23 msgid "**downstream:** Downstream network interfaces are the distribution interfaces to the destination networks, where multicast clients can join groups and receive multicast data. One or more downstream interfaces must be configured." msgstr "**downstream:** Downstream network interfaces are the distribution interfaces to the destination networks, where multicast clients can join groups and receive multicast data. One or more downstream interfaces must be configured." #: ../../configuration/system/flow-accounting.rst:28 msgid "**exporter**: aggregates packets into flows and exports flow records towards one or more flow collectors" msgstr "**exporter**: aggregates packets into flows and exports flow records towards one or more flow collectors" #: ../../configuration/firewall/general-legacy.rst:51 msgid "**firewall all-ping** affects only to LOCAL and it always behaves in the most restrictive way" msgstr "**firewall all-ping** affects only to LOCAL and it always behaves in the most restrictive way" #: ../../configuration/firewall/global-options.rst:36 msgid "**firewall global-options all-ping** affects only to LOCAL and it always behaves in the most restrictive way" msgstr "**firewall global-options all-ping** affects only to LOCAL and it always behaves in the most restrictive way" #: ../../configuration/service/dhcp-relay.rst:78 msgid "**forward:** All packets are forwarded, relay information already present will be ignored." msgstr "**forward:** All packets are forwarded, relay information already present will be ignored." #: ../../configuration/nat/nat44.rst:159 msgid "**inbound-interface** - applicable only to :ref:`destination-nat`. It configures the interface which is used for the inside traffic the translation rule applies to." msgstr "**inbound-interface** - applicable only to :ref:`destination-nat`. It configures the interface which is used for the inside traffic the translation rule applies to." #: ../../configuration/nat/nat44.rst:165 msgid "**inbound-interface** - applicable only to :ref:`destination-nat`. It configures the interface which is used for the inside traffic the translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." msgstr "**inbound-interface** - applicable only to :ref:`destination-nat`. It configures the interface which is used for the inside traffic the translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." #: ../../configuration/service/pppoe-server.rst:422 #: ../../configuration/vpn/l2tp.rst:347 #: ../../configuration/vpn/pptp.rst:268 #: ../../configuration/vpn/sstp.rst:305 msgid "**ipv4-addr** - Calculate interface identifier from IPv4 address." msgstr "**ipv4-addr** - Calculate interface identifier from IPv4 address." #: ../../configuration/service/ipoe-server.rst:90 msgid "**l2**: It means that clients are on same network where interface is.**(default)**" msgstr "**l2**: It means that clients are on same network where interface is.**(default)**" #: ../../configuration/service/ipoe-server.rst:92 msgid "**l3**: It means that client are behind some router." msgstr "**l3**: It means that client are behind some router." #: ../../configuration/interfaces/bonding.rst:166 msgid "**layer2** - Uses XOR of hardware MAC addresses and packet type ID field to generate the hash. The formula is" msgstr "**layer2** - Uses XOR of hardware MAC addresses and packet type ID field to generate the hash. The formula is" #: ../../configuration/interfaces/bonding.rst:179 msgid "**layer2+3** - This policy uses a combination of layer2 and layer3 protocol information to generate the hash. Uses XOR of hardware MAC addresses and IP addresses to generate the hash. The formula is:" msgstr "**layer2+3** - This policy uses a combination of layer2 and layer3 protocol information to generate the hash. Uses XOR of hardware MAC addresses and IP addresses to generate the hash. The formula is:" #: ../../configuration/interfaces/bonding.rst:205 msgid "**layer3+4** - This policy uses upper layer protocol information, when available, to generate the hash. This allows for traffic to a particular network peer to span multiple slaves, although a single connection will not span multiple slaves." msgstr "**layer3+4** - This policy uses upper layer protocol information, when available, to generate the hash. This allows for traffic to a particular network peer to span multiple slaves, although a single connection will not span multiple slaves." #: ../../configuration/vpn/site2site_ipsec.rst:288 msgid "**left**" msgstr "**left**" #: ../../configuration/protocols/isis.rst:87 msgid "**level-1** - Act as a station (Level 1) router only." msgstr "**level-1** - Act as a station (Level 1) router only." #: ../../configuration/protocols/isis.rst:153 msgid "**level-1** - Level-1 only adjacencies are formed." msgstr "**level-1** - Level-1 only adjacencies are formed." #: ../../configuration/protocols/isis.rst:88 msgid "**level-1-2** - Act as a station (Level 1) router and area (Level 2) router." msgstr "**level-1-2** - Act as a station (Level 1) router and area (Level 2) router." #: ../../configuration/protocols/isis.rst:154 msgid "**level-1-2** - Level-1-2 adjacencies are formed" msgstr "**level-1-2** - Level-1-2 adjacencies are formed" #: ../../configuration/protocols/isis.rst:89 msgid "**level-2-only** - Act as an area (Level 2) router only." msgstr "**level-2-only** - Act as an area (Level 2) router only." #: ../../configuration/protocols/isis.rst:155 msgid "**level-2-only** - Level-2 only adjacencies are formed" msgstr "**level-2-only** - Level-2 only adjacencies are formed" #: ../../configuration/service/ipoe-server.rst:65 #: ../../configuration/service/pppoe-server.rst:42 #: ../../configuration/vpn/l2tp.rst:31 #: ../../configuration/vpn/pptp.rst:32 #: ../../configuration/vpn/sstp.rst:58 msgid "**local**: All authentication queries are handled locally." msgstr "**local**: All authentication queries are handled locally." #: ../../configuration/service/ipoe-server.rst:93 msgid "**local**: It means that client are behind some router." msgstr "**local**: It means that client are behind some router." #: ../../configuration/interfaces/wireguard.rst:140 msgid "**local side - commands**" msgstr "**local side - commands**" #: ../../configuration/service/dns.rst:83 msgid "**log-fail** In this mode, the recursor will attempt to validate all data it retrieves from authoritative servers, regardless of the client's DNSSEC desires, and will log the validation result. This mode can be used to determine the extra load and amount of possibly bogus answers before turning on full-blown validation. Responses to client queries are the same as with process." msgstr "**log-fail** In this mode, the recursor will attempt to validate all data it retrieves from authoritative servers, regardless of the client's DNSSEC desires, and will log the validation result. This mode can be used to determine the extra load and amount of possibly bogus answers before turning on full-blown validation. Responses to client queries are the same as with process." #: ../../configuration/service/dns.rst:197 msgid "**lookup-a** A Flag." msgstr "**lookup-a** A Flag." #: ../../configuration/service/dns.rst:199 msgid "**lookup-srv** S flag." msgstr "**lookup-srv** S flag." #: ../../configuration/protocols/isis.rst:100 msgid "**narrow** - Use old style of TLVs with narrow metric." msgstr "**narrow** - Use old style of TLVs with narrow metric." #: ../../configuration/container/index.rst:162 msgid "**net-admin**: Network operations (interface, firewall, routing tables)" msgstr "**net-admin**: Network operations (interface, firewall, routing tables)" #: ../../configuration/container/index.rst:163 msgid "**net-bind-service**: Bind a socket to privileged ports (port numbers less than 1024)" msgstr "**net-bind-service**: Bind a socket to privileged ports (port numbers less than 1024)" #: ../../configuration/container/index.rst:165 msgid "**net-raw**: Permission to create raw network sockets" msgstr "**net-raw**: Permission to create raw network sockets" #: ../../configuration/container/index.rst:130 msgid "**no**: Do not restart containers on exit" msgstr "**no**: Do not restart containers on exit" #: ../../configuration/service/ipoe-server.rst:66 msgid "**noauth**: Authentication disabled" msgstr "**noauth**: Authentication disabled" #: ../../configuration/service/pppoe-server.rst:43 #: ../../configuration/vpn/pptp.rst:33 msgid "**noauth**: Authentication disabled." msgstr "**noauth**: Authentication disabled." #: ../../configuration/service/dns.rst:66 msgid "**off** In this mode, no DNSSEC processing takes place. The recursor will not set the DNSSEC OK (DO) bit in the outgoing queries and will ignore the DO and AD bits in queries." msgstr "**off** In this mode, no DNSSEC processing takes place. The recursor will not set the DNSSEC OK (DO) bit in the outgoing queries and will ignore the DO and AD bits in queries." #: ../../configuration/container/index.rst:131 msgid "**on-failure**: Restart containers when they exit with a non-zero exit code, retrying indefinitely (default)" msgstr "**on-failure**: Restart containers when they exit with a non-zero exit code, retrying indefinitely (default)" #: ../../configuration/service/dns.rst:201 msgid "**order** Rule order. Requires ``." msgstr "**order** Rule order. Requires ``." #: ../../configuration/nat/nat44.rst:149 msgid "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to." msgstr "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to." #: ../../configuration/nat/nat44.rst:149 msgid "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." msgstr "**outbound-interface** - applicable only to :ref:`source-nat`. It configures the interface which is used for the outside traffic that this translation rule applies to. Interface groups, inverted selection and wildcard, are also supported." #: ../../configuration/service/pppoe-server.rst:498 #: ../../configuration/vpn/l2tp.rst:430 #: ../../configuration/vpn/pptp.rst:351 #: ../../configuration/vpn/sstp.rst:388 msgid "**prefer** - Ask client for IPv4 negotiation, do not fail if it rejects" msgstr "**prefer** - Ask client for IPv4 negotiation, do not fail if it rejects" #: ../../configuration/service/pppoe-server.rst:368 #: ../../configuration/vpn/l2tp.rst:295 #: ../../configuration/vpn/pptp.rst:216 #: ../../configuration/vpn/sstp.rst:253 msgid "**prefer** - Ask client for IPv6 negotiation, do not fail if it rejects" msgstr "**prefer** - Ask client for IPv6 negotiation, do not fail if it rejects" #: ../../configuration/vpn/sstp.rst:204 msgid "**prefer** - ask client for mppe, if it rejects don't fail" msgstr "**prefer** - ask client for mppe, if it rejects don't fail" #: ../../configuration/service/pppoe-server.rst:531 #: ../../configuration/vpn/l2tp.rst:464 #: ../../configuration/vpn/pptp.rst:384 #: ../../configuration/vpn/sstp.rst:422 msgid "**prefer** - ask client for mppe, if it rejects don't fail. (Default value)" msgstr "**prefer** - ask client for mppe, if it rejects don't fail. (Default value)" #: ../../configuration/service/dns.rst:203 msgid "**preference** Rule preference. Requires ``. Defaults to 0 if not set." msgstr "**preference** Rule preference. Requires ``. Defaults to 0 if not set." #: ../../configuration/service/dns.rst:77 msgid "**process** When dnssec is set to process the behavior is similar to process-no-validate. However, the recursor will try to validate the data if at least one of the DO or AD bits is set in the query; in that case, it will set the AD-bit in the response when the data is validated successfully, or send SERVFAIL when the validation comes up bogus." msgstr "**process** When dnssec is set to process the behavior is similar to process-no-validate. However, the recursor will try to validate the data if at least one of the DO or AD bits is set in the query; in that case, it will set the AD-bit in the response when the data is validated successfully, or send SERVFAIL when the validation comes up bogus." #: ../../configuration/service/dns.rst:70 msgid "**process-no-validate** In this mode the recursor acts as a \"security aware, non-validating\" nameserver, meaning it will set the DO-bit on outgoing queries and will provide DNSSEC related RRsets (NSEC, RRSIG) to clients that ask for them (by means of a DO-bit in the query), except for zones provided through the auth-zones setting. It will not do any validation in this mode, not even when requested by the client." msgstr "**process-no-validate** In this mode the recursor acts as a \"security aware, non-validating\" nameserver, meaning it will set the DO-bit on outgoing queries and will provide DNSSEC related RRsets (NSEC, RRSIG) to clients that ask for them (by means of a DO-bit in the query), except for zones provided through the auth-zones setting. It will not do any validation in this mode, not even when requested by the client." #: ../../configuration/nat/nat44.rst:181 msgid "**protocol** - specify which types of protocols this translation rule applies to. Only packets matching the specified protocol are NATed. By default this applies to `all` protocols." msgstr "**protocol** - specify which types of protocols this translation rule applies to. Only packets matching the specified protocol are NATed. By default this applies to `all` protocols." #: ../../configuration/service/dns.rst:205 msgid "**protocol-specific** P flag." msgstr "**protocol-specific** P flag." #: ../../configuration/service/ipoe-server.rst:63 #: ../../configuration/service/pppoe-server.rst:40 #: ../../configuration/vpn/l2tp.rst:29 #: ../../configuration/vpn/pptp.rst:30 #: ../../configuration/vpn/sstp.rst:56 msgid "**radius**: All authentication queries are handled by a configured RADIUS server." msgstr "**radius**: All authentication queries are handled by a configured RADIUS server." #: ../../configuration/service/pppoe-server.rst:412 #: ../../configuration/service/pppoe-server.rst:420 #: ../../configuration/vpn/l2tp.rst:338 #: ../../configuration/vpn/l2tp.rst:345 #: ../../configuration/vpn/pptp.rst:259 #: ../../configuration/vpn/pptp.rst:266 #: ../../configuration/vpn/sstp.rst:296 #: ../../configuration/vpn/sstp.rst:303 msgid "**random** - Random interface identifier for IPv6" msgstr "**random** - Random interface identifier for IPv6" #: ../../configuration/service/dns.rst:207 msgid "**regexp** Regular expression. Requires ``." msgstr "**regexp** Regular expression. Requires ``." #: ../../configuration/interfaces/wireguard.rst:190 msgid "**remote side - commands**" msgstr "**remote side - commands**" #: ../../configuration/service/pppoe-server.rst:592 msgid "**replace**: Terminate first session when second is authorized **(default)**" msgstr "**replace**: Terminate first session when second is authorized **(default)**" #: ../../configuration/service/dhcp-relay.rst:81 msgid "**replace:** Relay information already present in a packet is stripped and replaced with the router's own relay information set." msgstr "**replace:** Relay information already present in a packet is stripped and replaced with the router's own relay information set." #: ../../configuration/service/dns.rst:209 msgid "**replacement** Replacement DNS name." msgstr "**replacement** Replacement DNS name." #: ../../configuration/service/pppoe-server.rst:497 #: ../../configuration/vpn/l2tp.rst:429 #: ../../configuration/vpn/pptp.rst:350 #: ../../configuration/vpn/sstp.rst:387 msgid "**require** - Require IPv4 negotiation" msgstr "**require** - Require IPv4 negotiation" #: ../../configuration/service/pppoe-server.rst:367 #: ../../configuration/vpn/l2tp.rst:294 #: ../../configuration/vpn/pptp.rst:215 #: ../../configuration/vpn/sstp.rst:252 msgid "**require** - Require IPv6 negotiation" msgstr "**require** - Require IPv6 negotiation" #: ../../configuration/service/pppoe-server.rst:530 #: ../../configuration/vpn/l2tp.rst:463 #: ../../configuration/vpn/pptp.rst:383 #: ../../configuration/vpn/sstp.rst:421 msgid "**require** - ask client for mppe, if it rejects drop connection" msgstr "**require** - ask client for mppe, if it rejects drop connection" #: ../../configuration/service/dns.rst:211 msgid "**resolve-uri** U flag." msgstr "**resolve-uri** U flag." #: ../../configuration/vpn/site2site_ipsec.rst:319 msgid "**right**" msgstr "**right**" #: ../../configuration/service/dns.rst:213 msgid "**service** Service type. Requires ``." msgstr "**service** Service type. Requires ``." #: ../../configuration/container/index.rst:166 msgid "**setpcap**: Capability sets (from bounded or inherited set)" msgstr "**setpcap**: Capability sets (from bounded or inherited set)" #: ../../configuration/service/ipoe-server.rst:98 msgid "**shared**: Multiple clients share the same network. **(default)**" msgstr "**shared**: Multiple clients share the same network. **(default)**" #: ../../configuration/nat/nat44.rst:195 msgid "**source** - specifies which packets the NAT translation rule applies to based on the packets source IP address and/or source port. Only matching packets are considered for NAT." msgstr "**source** - specifies which packets the NAT translation rule applies to based on the packets source IP address and/or source port. Only matching packets are considered for NAT." #: ../../configuration/container/index.rst:128 msgid "**sys-admin**: Administation operations (quotactl, mount, sethostname, setdomainame)" msgstr "**sys-admin**: Administation operations (quotactl, mount, sethostname, setdomainame)" #: ../../configuration/container/index.rst:167 msgid "**sys-admin**: Administration operations (quotactl, mount, sethostname, setdomainame)" msgstr "**sys-admin**: Administration operations (quotactl, mount, sethostname, setdomainame)" #: ../../configuration/container/index.rst:169 msgid "**sys-time**: Permission to set system clock" msgstr "**sys-time**: Permission to set system clock" #: ../../configuration/protocols/isis.rst:101 msgid "**transition** - Send and accept both styles of TLVs during transition." msgstr "**transition** - Send and accept both styles of TLVs during transition." #: ../../configuration/protocols/igmp-proxy.rst:19 msgid "**upstream:** The upstream network interface is the outgoing interface which is responsible for communicating to available multicast data sources. There can only be one upstream interface." msgstr "**upstream:** The upstream network interface is the outgoing interface which is responsible for communicating to available multicast data sources. There can only be one upstream interface." #: ../../configuration/service/dns.rst:90 msgid "**validate** The highest mode of DNSSEC processing. In this mode, all queries will be validated and will be answered with a SERVFAIL in case of bogus data, regardless of the client's request." msgstr "**validate** The highest mode of DNSSEC processing. In this mode, all queries will be validated and will be answered with a SERVFAIL in case of bogus data, regardless of the client's request." #: ../../configuration/service/ipoe-server.rst:99 msgid "**vlan**: One VLAN per client." msgstr "**vlan**: One VLAN per client." #: ../../configuration/protocols/isis.rst:102 msgid "**wide** - Use new style of TLVs to carry wider metric." msgstr "**wide** - Use new style of TLVs to carry wider metric." #: ../../configuration/service/pppoe-server.rst:413 #: ../../configuration/service/pppoe-server.rst:421 #: ../../configuration/vpn/l2tp.rst:339 #: ../../configuration/vpn/l2tp.rst:346 #: ../../configuration/vpn/pptp.rst:260 #: ../../configuration/vpn/pptp.rst:267 #: ../../configuration/vpn/sstp.rst:297 #: ../../configuration/vpn/sstp.rst:304 msgid "**x:x:x:x** - Specify interface identifier for IPv6" msgstr "**x:x:x:x** - Specify interface identifier for IPv6" #: ../../configuration/protocols/bgp.rst:143 msgid "*bgpd* supports Multiprotocol Extension for BGP. So if a remote peer supports the protocol, *bgpd* can exchange IPv6 and/or multicast routing information." msgstr "*bgpd* supports Multiprotocol Extension for BGP. So if a remote peer supports the protocol, *bgpd* can exchange IPv6 and/or multicast routing information." #: ../../configuration/system/syslog.rst:130 #: ../../configuration/system/syslog.rst:189 #: ../../configuration/trafficpolicy/index.rst:317 #: ../../configuration/trafficpolicy/index.rst:853 #: ../../configuration/trafficpolicy/index.rst:928 msgid "0" msgstr "0" #: ../../configuration/trafficpolicy/index.rst:317 msgid "000000" msgstr "000000" #: ../../configuration/trafficpolicy/index.rst:319 msgid "001010" msgstr "001010" #: ../../configuration/trafficpolicy/index.rst:321 msgid "001100" msgstr "001100" #: ../../configuration/trafficpolicy/index.rst:323 msgid "001110" msgstr "001110" #: ../../configuration/trafficpolicy/index.rst:325 msgid "010010" msgstr "010010" #: ../../configuration/trafficpolicy/index.rst:327 msgid "010100" msgstr "010100" #: ../../configuration/trafficpolicy/index.rst:329 msgid "010110" msgstr "010110" #: ../../configuration/trafficpolicy/index.rst:331 msgid "011010" msgstr "011010" #: ../../configuration/trafficpolicy/index.rst:333 msgid "011100" msgstr "011100" #: ../../configuration/trafficpolicy/index.rst:335 msgid "011110" msgstr "011110" #: ../../_include/interface-ipv6.txt:79 msgid "0: Disable DAD" msgstr "0: Disable DAD" #: ../../configuration/highavailability/index.rst:271 msgid "0 if not defined, which means no refreshing." msgstr "0 if not defined, which means no refreshing." #: ../../configuration/highavailability/index.rst:253 msgid "0 if not defined." msgstr "0 if not defined." #: ../../configuration/service/dhcp-server.rst:293 #: ../../configuration/system/syslog.rst:132 #: ../../configuration/system/syslog.rst:191 #: ../../configuration/trafficpolicy/index.rst:851 #: ../../configuration/trafficpolicy/index.rst:926 msgid "1" msgstr "1" #: ../../configuration/nat/nat44.rst:612 msgid "1-to-1 NAT" msgstr "1-to-1 NAT" #: ../../configuration/system/syslog.rst:150 #: ../../configuration/trafficpolicy/index.rst:319 #: ../../configuration/trafficpolicy/index.rst:926 msgid "10" msgstr "10" #: ../../configuration/interfaces/ethernet.rst:51 msgid "100000 - 100 GBit/s" msgstr "100000 - 100 GBit/s" #: ../../configuration/interfaces/ethernet.rst:47 msgid "10000 - 10 GBit/s" msgstr "10000 - 10 GBit/s" #: ../../configuration/trafficpolicy/index.rst:337 msgid "100010" msgstr "100010" #: ../../configuration/interfaces/ethernet.rst:44 msgid "1000 - 1 GBit/s" msgstr "1000 - 1 GBit/s" #: ../../configuration/trafficpolicy/index.rst:339 msgid "100100" msgstr "100100" #: ../../configuration/trafficpolicy/index.rst:341 msgid "100110" msgstr "100110" #: ../../configuration/interfaces/ethernet.rst:43 msgid "100 - 100 MBit/s" msgstr "100 - 100 MBit/s" #: ../../configuration/trafficpolicy/index.rst:315 msgid "101110" msgstr "101110" #: ../../configuration/nat/nat44.rst:38 msgid "10.0.0.0 to 10.255.255.255 (CIDR: 10.0.0.0/8)" msgstr "10.0.0.0 to 10.255.255.255 (CIDR: 10.0.0.0/8)" #: ../../configuration/interfaces/ethernet.rst:42 msgid "10 - 10 MBit/s" msgstr "10 - 10 MBit/s" #: ../../configuration/system/syslog.rst:152 #: ../../configuration/trafficpolicy/index.rst:924 msgid "11" msgstr "11" #: ../../configuration/service/dhcp-server.rst:375 msgid "119" msgstr "119" #: ../../configuration/system/syslog.rst:154 #: ../../configuration/trafficpolicy/index.rst:321 #: ../../configuration/trafficpolicy/index.rst:922 msgid "12" msgstr "12" #: ../../configuration/service/dhcp-server.rst:380 msgid "121, 249" msgstr "121, 249" #: ../../configuration/service/dhcp-server.rst:360 #: ../../configuration/system/syslog.rst:156 #: ../../configuration/trafficpolicy/index.rst:920 msgid "13" msgstr "13" #: ../../configuration/system/syslog.rst:158 #: ../../configuration/trafficpolicy/index.rst:323 #: ../../configuration/trafficpolicy/index.rst:918 msgid "14" msgstr "14" #: ../../configuration/service/dhcp-server.rst:320 #: ../../configuration/system/syslog.rst:160 #: ../../configuration/trafficpolicy/index.rst:916 msgid "15" msgstr "15" #: ../../configuration/system/syslog.rst:162 #: ../../configuration/trafficpolicy/index.rst:914 msgid "16" msgstr "16" #: ../../configuration/system/syslog.rst:164 msgid "17" msgstr "17" #: ../../configuration/nat/nat44.rst:39 msgid "172.16.0.0 to 172.31.255.255 (CIDR: 172.16.0.0/12)" msgstr "172.16.0.0 to 172.31.255.255 (CIDR: 172.16.0.0/12)" #: ../../configuration/system/syslog.rst:166 #: ../../configuration/trafficpolicy/index.rst:325 msgid "18" msgstr "18" #: ../../configuration/service/dhcp-server.rst:325 #: ../../configuration/system/syslog.rst:168 msgid "19" msgstr "19" #: ../../configuration/nat/nat44.rst:40 msgid "192.168.0.0 to 192.168.255.255 (CIDR: 192.168.0.0/16)" msgstr "192.168.0.0 to 192.168.255.255 (CIDR: 192.168.0.0/16)" #: ../../configuration/service/eventhandler.rst:32 msgid "1. Create an event handler" msgstr "1. Create an event handler" #: ../../configuration/firewall/flowtables.rst:145 msgid "1. First packet is received on eht0, with destination address 192.0.2.100, protocol tcp and destination port 1122. Assume such destination address is reachable through interface eth1." msgstr "1. First packet is received on eht0, with destination address 192.0.2.100, protocol tcp and destination port 1122. Assume such destination address is reachable through interface eth1." #: ../../configuration/firewall/flowtables.rst:145 msgid "1. First packet is received on eth0, with destination address 192.0.2.100, protocol tcp and destination port 1122. Assume such destination address is reachable through interface eth1." msgstr "1. First packet is received on eth0, with destination address 192.0.2.100, protocol tcp and destination port 1122. Assume such destination address is reachable through interface eth1." #: ../../configuration/firewall/flowtables.rst:145 msgid "1. Firstly, a packet is received on eth0, with destination address 192.0.2.100, protocol tcp and destination port 1122. Assume such destination address is reachable through interface eth1." msgstr "1. Firstly, a packet is received on eth0, with destination address 192.0.2.100, protocol tcp and destination port 1122. Assume such destination address is reachable through interface eth1." #: ../../configuration/firewall/groups.rst:345 msgid "1. Generate a new TCP connection with destination port 9990. As shown next, a new entry was added to dynamic firewall group **PN_01**" msgstr "1. Generate a new TCP connection with destination port 9990. As shown next, a new entry was added to dynamic firewall group **PN_01**" #: ../../_include/interface-ipv6.txt:80 msgid "1: Enable DAD (default)" msgstr "1: Enable DAD (default)" #: ../../configuration/highavailability/index.rst:281 msgid "1 if not defined." msgstr "1 if not defined." #: ../../configuration/service/dhcp-server.rst:299 #: ../../configuration/system/syslog.rst:134 #: ../../configuration/system/syslog.rst:196 #: ../../configuration/trafficpolicy/index.rst:849 #: ../../configuration/trafficpolicy/index.rst:924 msgid "2" msgstr "2" #: ../../configuration/system/syslog.rst:170 #: ../../configuration/trafficpolicy/index.rst:327 msgid "20" msgstr "20" #: ../../configuration/system/syslog.rst:172 msgid "21" msgstr "21" #: ../../configuration/system/syslog.rst:174 #: ../../configuration/trafficpolicy/index.rst:329 msgid "22" msgstr "22" #: ../../configuration/system/syslog.rst:176 msgid "23" msgstr "23" #: ../../configuration/interfaces/ethernet.rst:48 msgid "25000 - 25 GBit/s" msgstr "25000 - 25 GBit/s" #: ../../configuration/interfaces/ethernet.rst:45 msgid "2500 - 2.5 GBit/s" msgstr "2500 - 2.5 GBit/s" #: ../../configuration/service/dhcp-server.rst:385 msgid "252" msgstr "252" #: ../../configuration/trafficpolicy/index.rst:331 msgid "26" msgstr "26" #: ../../configuration/trafficpolicy/index.rst:333 msgid "28" msgstr "28" #: ../../configuration/vpn/openconnect.rst:59 msgid "2FA OTP support" msgstr "2FA OTP support" #: ../../configuration/service/eventhandler.rst:40 msgid "2. Add regex to the script" msgstr "2. Add regex to the script" #: ../../configuration/firewall/groups.rst:361 msgid "2. Generate a new TCP connection with destination port 9991. As shown next, a new entry was added to dynamic firewall group **PN_02**" msgstr "2. Generate a new TCP connection with destination port 9991. As shown next, a new entry was added to dynamic firewall group **PN_02**" #: ../../configuration/firewall/flowtables.rst:149 msgid "2. Since this is the first packet, connection status of this connection, so far is **new**. So neither rule 10 nor 20 are valid." msgstr "2. Since this is the first packet, connection status of this connection, so far is **new**. So neither rule 10 nor 20 are valid." #: ../../_include/interface-ipv6.txt:81 msgid "2: Enable DAD, and disable IPv6 operation if MAC-based duplicate link-local address has been found." msgstr "2: Enable DAD, and disable IPv6 operation if MAC-based duplicate link-local address has been found." #: ../../configuration/service/dhcp-server.rst:305 #: ../../configuration/system/syslog.rst:136 #: ../../configuration/system/syslog.rst:199 #: ../../configuration/trafficpolicy/index.rst:847 #: ../../configuration/trafficpolicy/index.rst:922 msgid "3" msgstr "3" #: ../../configuration/trafficpolicy/index.rst:335 msgid "30" msgstr "30" #: ../../configuration/trafficpolicy/index.rst:337 msgid "34" msgstr "34" #: ../../configuration/trafficpolicy/index.rst:339 msgid "36" msgstr "36" #: ../../configuration/trafficpolicy/index.rst:341 msgid "38" msgstr "38" #: ../../configuration/service/eventhandler.rst:51 msgid "3. Add a full path to the script" msgstr "3. Add a full path to the script" #: ../../configuration/firewall/groups.rst:377 msgid "3. Generate a new TCP connection with destination port 9992. As shown next, a new entry was added to dynamic firewall group **ALLOWED**" msgstr "3. Generate a new TCP connection with destination port 9992. As shown next, a new entry was added to dynamic firewall group **ALLOWED**" #: ../../configuration/service/dhcp-server.rst:310 #: ../../configuration/system/syslog.rst:138 #: ../../configuration/system/syslog.rst:201 #: ../../configuration/trafficpolicy/index.rst:845 #: ../../configuration/trafficpolicy/index.rst:920 msgid "4" msgstr "4" #: ../../configuration/interfaces/ethernet.rst:49 msgid "40000 - 40 GBit/s" msgstr "40000 - 40 GBit/s" #: ../../configuration/interfaces/wireless.rst:201 msgid "40 MHz channels may switch their primary and secondary channels if needed or creation of 40 MHz channel maybe rejected based on overlapping BSSes. These changes are done automatically when hostapd is setting up the 40 MHz channel." msgstr "40 MHz channels may switch their primary and secondary channels if needed or creation of 40 MHz channel maybe rejected based on overlapping BSSes. These changes are done automatically when hostapd is setting up the 40 MHz channel." #: ../../configuration/service/dhcp-server.rst:330 msgid "42" msgstr "42" #: ../../configuration/service/dhcp-server.rst:335 msgid "44" msgstr "44" #: ../../configuration/trafficpolicy/index.rst:315 msgid "46" msgstr "46" #: ../../configuration/service/eventhandler.rst:60 msgid "4. Add optional parameters" msgstr "4. Add optional parameters" #: ../../configuration/firewall/flowtables.rst:154 msgid "4. Once an answer from server 192.0.2.100 is seen in opposite direction, connection state will be triggered to **established**, so this reply is accepted in rule 20." msgstr "4. Once an answer from server 192.0.2.100 is seen in opposite direction, connection state will be triggered to **established**, so this reply is accepted in rule 20." #: ../../configuration/firewall/flowtables.rst:153 msgid "4. Once answer from server 192.0.2.100 is seen in opposite direction, connection state will be triggered to **established**, so this reply is accepted in rule 10." msgstr "4. Once answer from server 192.0.2.100 is seen in opposite direction, connection state will be triggered to **established**, so this reply is accepted in rule 10." #: ../../configuration/firewall/flowtables.rst:154 msgid "4. Once answer from server 192.0.2.100 is seen in opposite direction, connection state will be triggered to **established**, so this reply is accepted in rule 20." msgstr "4. Once answer from server 192.0.2.100 is seen in opposite direction, connection state will be triggered to **established**, so this reply is accepted in rule 20." #: ../../configuration/system/syslog.rst:140 #: ../../configuration/system/syslog.rst:203 #: ../../configuration/trafficpolicy/index.rst:843 #: ../../configuration/trafficpolicy/index.rst:918 msgid "5" msgstr "5" #: ../../configuration/interfaces/ethernet.rst:50 msgid "50000 - 50 GBit/s" msgstr "50000 - 50 GBit/s" #: ../../configuration/interfaces/ethernet.rst:46 msgid "5000 - 5 GBit/s" msgstr "5000 - 5 GBit/s" #: ../../configuration/service/dhcp-server.rst:340 msgid "54" msgstr "54" #: ../../configuration/firewall/flowtables.rst:158 msgid "5. Second packet for this connection is received by the router. Since connection state is **established**, then rule 10 is hit, and a new entry in the flowtable FT01 is added for this connection." msgstr "5. Second packet for this connection is received by the router. Since connection state is **established**, then rule 10 is hit, and a new entry in the flowtable FT01 is added for this connection." #: ../../configuration/firewall/flowtables.rst:158 msgid "5. The second packet for this connection is received by the router. Since connection state is **established**, then rule 10 is hit, and a new entry in the flowtable FT01 is added for this connection." msgstr "5. The second packet for this connection is received by the router. Since connection state is **established**, then rule 10 is hit, and a new entry in the flowtable FT01 is added for this connection." #: ../../configuration/highavailability/index.rst:261 #: ../../configuration/highavailability/index.rst:292 msgid "5 if not defined." msgstr "5 if not defined." #: ../../configuration/service/dhcp-server.rst:315 #: ../../configuration/system/syslog.rst:142 #: ../../configuration/system/syslog.rst:207 #: ../../configuration/trafficpolicy/index.rst:841 #: ../../configuration/trafficpolicy/index.rst:916 msgid "6" msgstr "6" #: ../../configuration/nat/cgnat.rst:69 msgid "64512 / 1000 ≈ 64 subscribers per public IP" msgstr "64512 / 1000 ≈ 64 subscribers per public IP" #: ../../configuration/service/dhcp-server.rst:350 msgid "66" msgstr "66" #: ../../configuration/loadbalancing/wan.rst:74 msgid "66% of traffic is routed to eth0, eth1 gets 33% of traffic." msgstr "66% of traffic is routed to eth0, eth1 gets 33% of traffic." #: ../../configuration/service/dhcp-server.rst:355 msgid "67" msgstr "67" #: ../../configuration/service/dhcp-server.rst:365 msgid "69" msgstr "69" #: ../../configuration/firewall/flowtables.rst:162 msgid "6. All subsecuent packets will skip traditional path, and will be offloaded and will use the **Fast Path**." msgstr "6. All subsecuent packets will skip traditional path, and will be offloaded and will use the **Fast Path**." #: ../../configuration/firewall/flowtables.rst:162 msgid "6. All the following packets will skip the traditional path, will be offloaded and use the **Fast Path**." msgstr "6. All the following packets will skip the traditional path, will be offloaded and use the **Fast Path**." #: ../../configuration/firewall/flowtables.rst:162 msgid "6. All the following packets will skip traditional path, and will be offloaded and will use the **Fast Path**." msgstr "6. All the following packets will skip traditional path, and will be offloaded and will use the **Fast Path**." #: ../../configuration/interfaces/tunnel.rst:81 msgid "6in4 (SIT)" msgstr "6in4 (SIT)" #: ../../configuration/interfaces/tunnel.rst:83 msgid "6in4 uses tunneling to encapsulate IPv6 traffic over IPv4 links as defined in :rfc:`4213`. The 6in4 traffic is sent over IPv4 inside IPv4 packets whose IP headers have the IP protocol number set to 41. This protocol number is specifically designated for IPv6 encapsulation, the IPv4 packet header is immediately followed by the IPv6 packet being carried. The encapsulation overhead is the size of the IPv4 header of 20 bytes, therefore with an MTU of 1500 bytes, IPv6 packets of 1480 bytes can be sent without fragmentation. This tunneling technique is frequently used by IPv6 tunnel brokers like `Hurricane Electric`_." msgstr "6in4 uses tunneling to encapsulate IPv6 traffic over IPv4 links as defined in :rfc:`4213`. The 6in4 traffic is sent over IPv4 inside IPv4 packets whose IP headers have the IP protocol number set to 41. This protocol number is specifically designated for IPv6 encapsulation, the IPv4 packet header is immediately followed by the IPv6 packet being carried. The encapsulation overhead is the size of the IPv4 header of 20 bytes, therefore with an MTU of 1500 bytes, IPv6 packets of 1480 bytes can be sent without fragmentation. This tunneling technique is frequently used by IPv6 tunnel brokers like `Hurricane Electric`_." #: ../../configuration/system/syslog.rst:144 #: ../../configuration/system/syslog.rst:209 #: ../../configuration/trafficpolicy/index.rst:839 #: ../../configuration/trafficpolicy/index.rst:914 msgid "7" msgstr "7" #: ../../configuration/service/dhcp-server.rst:370 msgid "70" msgstr "70" #: ../../configuration/system/syslog.rst:146 msgid "8" msgstr "8" #: ../../_include/interface-vlan-8021q.txt:21 msgid "802.1q VLAN interfaces are represented as virtual sub-interfaces in VyOS. The term used for this is ``vif``." msgstr "802.1q VLAN interfaces are represented as virtual sub-interfaces in VyOS. The term used for this is ``vif``." #: ../../configuration/system/syslog.rst:148 #: ../../configuration/trafficpolicy/index.rst:928 msgid "9" msgstr "9" #: ../../configuration/policy/route.rst:98 msgid "<1-65535>: Numbered port." msgstr "<1-65535>: Numbered port." #: ../../configuration/policy/extcommunity-list.rst:38 msgid ": Extended community list regular expression." msgstr ": Extended community list regular expression." #: ../../configuration/policy/route.rst:71 msgid ": IPv6 prefix to match." msgstr ": IPv6 prefix to match." #: ../../configuration/policy/route.rst:72 msgid "-: IPv6 range to match." msgstr "-: IPv6 range to match." #: ../../configuration/policy/route.rst:70 msgid ": IPv6 address to match." msgstr ": IPv6 address to match." #: ../../configuration/system/syslog.rst:248 msgid "" msgstr "" #: ../../configuration/interfaces/wireless.rst:286 msgid " must be from 34 - 173. For 80 MHz channels it should be channel + 6." msgstr " must be from 34 - 173. For 80 MHz channels it should be channel + 6." #: ../../configuration/interfaces/wireless.rst:381 #: ../../configuration/interfaces/wireless.rst:401 msgid " must be one of:" msgstr " must be one of:" #: ../../configuration/interfaces/wireless.rst:375 msgid " must be within 1..233. For 80 MHz channels it should be channel + 6 and for 160 MHz channels, it should be channel + 14." msgstr " must be within 1..233. For 80 MHz channels it should be channel + 6 and for 160 MHz channels, it should be channel + 14." #: ../../configuration/protocols/ospf.rst:346 msgid " – area identifier through which a virtual link goes. – ABR router-id with which a virtual link is established. Virtual link must be configured on both routers." msgstr " – area identifier through which a virtual link goes. – ABR router-id with which a virtual link is established. Virtual link must be configured on both routers." #: ../../configuration/policy/route.rst:97 msgid ": Named port (any name in /etc/services, e.g., http)." msgstr ": Named port (any name in /etc/services, e.g., http)." #: ../../configuration/policy/extcommunity-list.rst:39 msgid ": Route Target regular expression." msgstr ": Route Target regular expression." #: ../../configuration/policy/extcommunity-list.rst:40 msgid ": Site of Origin regular expression." msgstr ": Site of Origin regular expression." #: ../../configuration/policy/route.rst:99 msgid "-: Numbered port range (e.g., 1001-1005)." msgstr "-: Numbered port range (e.g., 1001-1005)." #: ../../configuration/policy/route.rst:63 msgid ": Subnet to match." msgstr ": Subnet to match." #: ../../configuration/policy/route.rst:64 msgid "-: IP range to match." msgstr "-: IP range to match." #: ../../configuration/policy/route.rst:62 msgid ": IP address to match." msgstr ": IP address to match." #: ../../configuration/pki/index.rst:283 msgid "ACME" msgstr "ACME" #: ../../configuration/pki/index.rst:312 msgid "ACME Directory Resource URI." msgstr "ACME Directory Resource URI." #: ../../configuration/service/https.rst:63 msgid "API" msgstr "API" #: ../../configuration/protocols/static.rst:183 msgid "ARP" msgstr "ARP" #: ../../configuration/firewall/groups.rst:128 msgid "A **domain group** represents a collection of domains." msgstr "A **domain group** represents a collection of domains." #: ../../configuration/firewall/groups.rst:110 msgid "A **mac group** represents a collection of mac addresses." msgstr "A **mac group** represents a collection of mac addresses." #: ../../configuration/firewall/groups.rst:85 msgid "A **port group** represents only port numbers, not the protocol. Port groups can be referenced for either TCP or UDP. It is recommended that TCP and UDP groups are created separately to avoid accidentally filtering unnecessary ports. Ranges of ports can be specified by using `-`." msgstr "A **port group** represents only port numbers, not the protocol. Port groups can be referenced for either TCP or UDP. It is recommended that TCP and UDP groups are created separately to avoid accidentally filtering unnecessary ports. Ranges of ports can be specified by using `-`." #: ../../configuration/trafficpolicy/index.rst:84 msgid "A *bit* is written as **bit**," msgstr "A *bit* is written as **bit**," #: ../../configuration/firewall/groups.rst:288 msgid "A 4 step port knocking example is shown next:" msgstr "A 4 step port knocking example is shown next:" #: ../../configuration/protocols/rpki.rst:21 msgid "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), Cloudflare's GoRTR_ and OctoRPKI_ (written in Go), and RIPE NCC's RPKI Validator_ (written in Java). The RTR protocol is described in :rfc:`8210`." msgstr "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), Cloudflare's GoRTR_ and OctoRPKI_ (written in Go), and RIPE NCC's RPKI Validator_ (written in Java). The RTR protocol is described in :rfc:`8210`." #: ../../configuration/protocols/rpki.rst:21 msgid "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), OpenBSD's rpki-client_ (written in C), and StayRTR_ (written in Go). The RTR protocol is described in :rfc:`8210`." msgstr "A BGP-speaking router like VyOS can retrieve ROA information from RPKI \"Relying Party software\" (often just called an \"RPKI server\" or \"RPKI validator\") by using :abbr:`RTR (RPKI to Router)` protocol. There are several open source implementations to choose from, such as NLNetLabs' Routinator_ (written in Rust), OpenBSD's rpki-client_ (written in C), and StayRTR_ (written in Go). The RTR protocol is described in :rfc:`8210`." #: ../../configuration/protocols/bgp.rst:951 msgid "A BGP confederation divides our AS into sub-ASes to reduce the number of required IBGP peerings. Within a sub-AS we still require full-mesh IBGP but between these sub-ASes we use something that looks like EBGP but behaves like IBGP (called confederation BGP). Confederation mechanism is described in :rfc:`5065`" msgstr "A BGP confederation divides our AS into sub-ASes to reduce the number of required IBGP peerings. Within a sub-AS we still require full-mesh IBGP but between these sub-ASes we use something that looks like EBGP but behaves like IBGP (called confederation BGP). Confederation mechanism is described in :rfc:`5065`" #: ../../configuration/interfaces/bridge.rst:9 msgid "A Bridge is a way to connect two Ethernet segments together in a protocol independent way. Packets are forwarded based on Ethernet address, rather than IP address (like a router). Since forwarding is done at Layer 2, all protocols can go transparently through a bridge. The Linux bridge code implements a subset of the ANSI/IEEE 802.1d standard." msgstr "A Bridge is a way to connect two Ethernet segments together in a protocol independent way. Packets are forwarded based on Ethernet address, rather than IP address (like a router). Since forwarding is done at Layer 2, all protocols can go transparently through a bridge. The Linux bridge code implements a subset of the ANSI/IEEE 802.1d standard." #: ../../configuration/interfaces/tunnel.rst:108 msgid "A GRE tunnel operates at layer 3 of the OSI model and is represented by IP protocol 47. The main benefit of a GRE tunnel is that you are able to carry multiple protocols inside the same tunnel. GRE also supports multicast traffic and supports routing protocols that leverage multicast to form neighbor adjacencies." msgstr "A GRE tunnel operates at layer 3 of the OSI model and is represented by IP protocol 47. The main benefit of a GRE tunnel is that you are able to carry multiple protocols inside the same tunnel. GRE also supports multicast traffic and supports routing protocols that leverage multicast to form neighbor adjacencies." #: ../../configuration/firewall/general-legacy.rst:749 msgid "A Rule-Set can be applied to every interface:" msgstr "A Rule-Set can be applied to every interface:" #: ../../configuration/service/dhcp-server.rst:620 msgid "A SNTP server address can be specified for DHCPv6 clients." msgstr "A SNTP server address can be specified for DHCPv6 clients." #: ../../configuration/vrf/index.rst:18 msgid "A VRF device is created with an associated route table. Network interfaces are then enslaved to a VRF device." msgstr "A VRF device is created with an associated route table. Network interfaces are then enslaved to a VRF device." #: ../../configuration/interfaces/tunnel.rst:114 msgid "A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created over either IPv4 (gre) or IPv6 (ip6gre)." msgstr "A VyOS GRE tunnel can carry both IPv4 and IPv6 traffic and can also be created over either IPv4 (gre) or IPv6 (ip6gre)." #: ../../configuration/service/dns.rst:243 msgid "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com." msgstr "A VyOS router with two interfaces - eth0 (WAN) and eth1 (LAN) - is required to implement a split-horizon DNS configuration for example.com." #: ../../configuration/service/dhcp-server.rst:592 msgid "A :abbr:`NIS (Network Information Service)` domain can be set to be used for DHCPv6 clients." msgstr "A :abbr:`NIS (Network Information Service)` domain can be set to be used for DHCPv6 clients." #: ../../configuration/interfaces/tunnel.rst:121 msgid "A basic configuration requires a tunnel source (source-address), a tunnel destination (remote), an encapsulation type (gre), and an address (ipv4/ipv6). Below is a basic IPv4 only configuration example taken from a VyOS router and a Cisco IOS router. The main difference between these two configurations is that VyOS requires you explicitly configure the encapsulation type. The Cisco router defaults to GRE IP otherwise it would have to be configured as well." msgstr "A basic configuration requires a tunnel source (source-address), a tunnel destination (remote), an encapsulation type (gre), and an address (ipv4/ipv6). Below is a basic IPv4 only configuration example taken from a VyOS router and a Cisco IOS router. The main difference between these two configurations is that VyOS requires you explicitly configure the encapsulation type. The Cisco router defaults to GRE IP otherwise it would have to be configured as well." #: ../../configuration/firewall/zone.rst:70 msgid "A basic introduction to zone-based firewalls can be found `here `_, and an example at :ref:`examples-zone-policy`." msgstr "A basic introduction to zone-based firewalls can be found `here `_, and an example at :ref:`examples-zone-policy`." #: ../../configuration/interfaces/bridge.rst:203 #: ../../configuration/interfaces/bridge.rst:237 msgid "A bridge named `br100`" msgstr "A bridge named `br100`" #: ../../configuration/container/index.rst:199 msgid "A brief description what this network is all about." msgstr "A brief description what this network is all about." #: ../../configuration/trafficpolicy/index.rst:147 msgid "A class can have multiple match filters:" msgstr "A class can have multiple match filters:" #: ../../configuration/trafficpolicy/index.rst:357 msgid "A common example is the case of some policies which, in order to be effective, they need to be applied to an interface that is directly connected where the bottleneck is. If your router is not directly connected to the bottleneck, but some hop before it, you can emulate the bottleneck by embedding your non-shaping policy into a classful shaping one so that it takes effect." msgstr "A common example is the case of some policies which, in order to be effective, they need to be applied to an interface that is directly connected where the bottleneck is. If your router is not directly connected to the bottleneck, but some hop before it, you can emulate the bottleneck by embedding your non-shaping policy into a classful shaping one so that it takes effect." #: ../../configuration/interfaces/openvpn.rst:542 msgid "A complete LDAP auth OpenVPN configuration could look like the following example:" msgstr "A complete LDAP auth OpenVPN configuration could look like the following example:" #: ../../configuration/service/ids.rst:84 msgid "A configuration example can be found in this section. In this simplified scenario, main things to be considered are:" msgstr "A configuration example can be found in this section. In this simplified scenario, main things to be considered are:" #: ../../configuration/vpn/sstp.rst:518 msgid "A connection attempt will be shown as:" msgstr "A connection attempt will be shown as:" #: ../../configuration/interfaces/pppoe.rst:343 msgid "A default route is automatically installed once the interface is up. To change this behavior use the ``no-default-route`` CLI option." msgstr "A default route is automatically installed once the interface is up. To change this behavior use the ``no-default-route`` CLI option." #: ../../configuration/service/broadcast-relay.rst:22 msgid "A description can be added for each and every unique relay ID. This is useful to distinguish between multiple different ports/appliactions." msgstr "A description can be added for each and every unique relay ID. This is useful to distinguish between multiple different ports/appliactions." #: ../../configuration/service/broadcast-relay.rst:22 msgid "A description can be added for each and every unique relay ID. This is useful to distinguish between multiple different ports/applications." msgstr "A description can be added for each and every unique relay ID. This is useful to distinguish between multiple different ports/applications." #: ../../configuration/highavailability/index.rst:78 msgid "A disabled group will be removed from the VRRP process and your router will not participate in VRRP for that VRID. It will disappear from operational mode commands output, rather than enter the backup state." msgstr "A disabled group will be removed from the VRRP process and your router will not participate in VRRP for that VRID. It will disappear from operational mode commands output, rather than enter the backup state." #: ../../configuration/system/host-name.rst:34 msgid "A domain name is the label (name) assigned to a computer network and is thus unique. VyOS appends the domain name as a suffix to any unqualified name. For example, if you set the domain name `example.com`, and you would ping the unqualified name of `crux`, then VyOS qualifies the name to `crux.example.com`." msgstr "A domain name is the label (name) assigned to a computer network and is thus unique. VyOS appends the domain name as a suffix to any unqualified name. For example, if you set the domain name `example.com`, and you would ping the unqualified name of `crux`, then VyOS qualifies the name to `crux.example.com`." #: ../../configuration/nat/nat44.rst:709 msgid "A dummy interface for the provider-assigned IP;" msgstr "A dummy interface for the provider-assigned IP;" #: ../../configuration/highavailability/index.rst:440 msgid "A firewall mark ``fwmark`` allows using multiple ports for high-availability virtual-server. It uses fwmark value." msgstr "A firewall mark ``fwmark`` allows using multiple ports for high-availability virtual-server. It uses fwmark value." #: ../../configuration/interfaces/tunnel.rst:102 msgid "A full example of a Tunnelbroker.net config can be found at :ref:`here `." msgstr "A full example of a Tunnelbroker.net config can be found at :ref:`here `." #: ../../configuration/service/dhcp-server.rst:201 msgid "A generic `` referencing this sync service." msgstr "A generic `` referencing this sync service." #: ../../configuration/system/host-name.rst:18 msgid "A hostname is the label (name) assigned to a network device (a host) on a network and is used to distinguish one device from another on specific networks or over the internet. On the other hand this will be the name which appears on the command line prompt." msgstr "A hostname is the label (name) assigned to a network device (a host) on a network and is used to distinguish one device from another on specific networks or over the internet. On the other hand this will be the name which appears on the command line prompt." #: ../../configuration/pki/index.rst:191 msgid "A human readable description what this CA is about." msgstr "A human readable description what this CA is about." #: ../../configuration/pki/index.rst:230 msgid "A human readable description what this certificate is about." msgstr "A human readable description what this certificate is about." #: ../../_include/interface-evpn-uplink.txt:7 msgid "A link can be setup for uplink tracking via the following example:" msgstr "A link can be setup for uplink tracking via the following example:" #: ../../configuration/interfaces/loopback.rst:17 msgid "A lookback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." msgstr "A lookback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." #: ../../configuration/interfaces/loopback.rst:17 msgid "A loopback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." msgstr "A loopback interface is always up, thus it could be used for management traffic or as source/destination for and :abbr:`IGP (Interior Gateway Protocol)` like :ref:`routing-bgp` so your internal BGP link is not dependent on physical link states and multiple routes can be chosen to the destination. A :ref:`dummy-interface` Interface should always be preferred over a :ref:`loopback-interface` interface." #: ../../configuration/service/snmp.rst:42 msgid "A managed device is a network node that implements an SNMP interface that allows unidirectional (read-only) or bidirectional (read and write) access to node-specific information. Managed devices exchange node-specific information with the NMSs. Sometimes called network elements, the managed devices can be any type of device, including, but not limited to, routers, access servers, switches, cable modems, bridges, hubs, IP telephones, IP video cameras, computer hosts, and printers." msgstr "A managed device is a network node that implements an SNMP interface that allows unidirectional (read-only) or bidirectional (read and write) access to node-specific information. Managed devices exchange node-specific information with the NMSs. Sometimes called network elements, the managed devices can be any type of device, including, but not limited to, routers, access servers, switches, cable modems, bridges, hubs, IP telephones, IP video cameras, computer hosts, and printers." #: ../../configuration/trafficpolicy/index.rst:154 msgid "A match filter can contain multiple criteria and will match traffic if all those criteria are true." msgstr "A match filter can contain multiple criteria and will match traffic if all those criteria are true." #: ../../configuration/trafficpolicy/index.rst:238 msgid "A match group can contain multiple criteria and inherit them in the same policy." msgstr "A match group can contain multiple criteria and inherit them in the same policy." #: ../../configuration/protocols/bfd.rst:145 msgid "A monitored static route conditions the installation to the RIB on the BFD session running state: when BFD session is up the route is installed to RIB, but when the BFD session is down it is removed from the RIB." msgstr "A monitored static route conditions the installation to the RIB on the BFD session running state: when BFD session is up the route is installed to RIB, but when the BFD session is down it is removed from the RIB." #: ../../configuration/service/snmp.rst:54 msgid "A network management station executes applications that monitor and control managed devices. NMSs provide the bulk of the processing and memory resources required for network management. One or more NMSs may exist on any managed network." msgstr "A network management station executes applications that monitor and control managed devices. NMSs provide the bulk of the processing and memory resources required for network management. One or more NMSs may exist on any managed network." #: ../../configuration/interfaces/bonding.rst:390 msgid "A new interface becomes present ``Port-channel1``, all configuration like allowed VLAN interfaces, STP will happen here." msgstr "A new interface becomes present ``Port-channel1``, all configuration like allowed VLAN interfaces, STP will happen here." #: ../../configuration/loadbalancing/wan.rst:79 msgid "A packet rate limit can be set for a rule to apply the rule to traffic above or below a specified threshold. To configure the rate limiting use:" msgstr "A packet rate limit can be set for a rule to apply the rule to traffic above or below a specified threshold. To configure the rate limiting use:" #: ../../configuration/firewall/flowtables.rst:45 msgid "A packet that finds a matching entry in the flowtable (flowtable hit) is transmitted to the output netdevice, hence, packets bypass the classic IP forwarding path and uses the **Fast Path** (orange circles path). The visible effect is that you do not see these packets from any of the Netfilter hooks coming after ingress. In case that there is no matching entry in the flowtable (flowtable miss), the packet follows the classic IP forwarding path." msgstr "A packet that finds a matching entry in the flowtable (flowtable hit) is transmitted to the output netdevice, hence, packets bypass the classic IP forwarding path and uses the **Fast Path** (orange circles path). The visible effect is that you do not see these packets from any of the Netfilter hooks coming after ingress. In case that there is no matching entry in the flowtable (flowtable miss), the packet follows the classic IP forwarding path." #: ../../configuration/protocols/bgp.rst:720 msgid "A penalty of 1000 is assessed each time the route fails. When the penalties reach a predefined threshold (suppress-value), the router stops advertising the route." msgstr "A penalty of 1000 is assessed each time the route fails. When the penalties reach a predefined threshold (suppress-value), the router stops advertising the route." #: ../../configuration/interfaces/macsec.rst:44 msgid "A physical interface is required to connect this MACsec instance to. Traffic leaving this interface will now be authenticated/encrypted." msgstr "A physical interface is required to connect this MACsec instance to. Traffic leaving this interface will now be authenticated/encrypted." #: ../../configuration/nat/nat44.rst:374 msgid "A pool of addresses can be defined by using a hyphen between two IP addresses:" msgstr "A pool of addresses can be defined by using a hyphen between two IP addresses:" #: ../../configuration/firewall/ipv4.rst:532 #: ../../configuration/firewall/ipv6.rst:519 msgid "A port can be set by number or name as defined in ``/etc/services``." msgstr "A port can be set by number or name as defined in ``/etc/services``." #: ../../configuration/firewall/ipv4.rst:532 #: ../../configuration/firewall/ipv6.rst:519 msgid "A port can be set with a port number or a name which is here defined: ``/etc/services``." msgstr "A port can be set with a port number or a name which is here defined: ``/etc/services``." #: ../../configuration/service/dns.rst:115 msgid "A query for which there is authoritatively no answer is cached to quickly deny a record's existence later on, without putting a heavy load on the remote server. In practice, caches can become saturated with hundreds of thousands of hosts which are tried only once." msgstr "A query for which there is authoritatively no answer is cached to quickly deny a record's existence later on, without putting a heavy load on the remote server. In practice, caches can become saturated with hundreds of thousands of hosts which are tried only once." #: ../../configuration/vpn/dmvpn.rst:134 msgid "A received NHRP Traffic Indication will trigger the resolution and establishment of a shortcut route." msgstr "A received NHRP Traffic Indication will trigger the resolution and establishment of a shortcut route." #: ../../configuration/vrf/index.rst:26 msgid "A routing table ID can not be modified once it is assigned. It can only be changed by deleting and re-adding the VRF instance." msgstr "A routing table ID can not be modified once it is assigned. It can only be changed by deleting and re-adding the VRF instance." #: ../../configuration/firewall/general-legacy.rst:272 msgid "A rule-set is a named collection of firewall rules that can be applied to an interface or a zone. Each rule is numbered, has an action to apply if the rule is matched, and the ability to specify the criteria to match. Data packets go through the rules from 1 - 999999, at the first match the action of the rule will be executed." msgstr "A rule-set is a named collection of firewall rules that can be applied to an interface or a zone. Each rule is numbered, has an action to apply if the rule is matched, and the ability to specify the criteria to match. Data packets go through the rules from 1 - 999999, at the first match the action of the rule will be executed." #: ../../configuration/policy/route.rst:12 msgid "A rule-set is a named collection of rules that can be applied to an interface. Each rule is numbered, has an action to apply if the rule is matched, and the ability to specify the criteria to match. Data packets go through the rules from 1 - 999999, at the first match the action of the rule will be executed." msgstr "A rule-set is a named collection of rules that can be applied to an interface. Each rule is numbered, has an action to apply if the rule is matched, and the ability to specify the criteria to match. Data packets go through the rules from 1 - 999999, at the first match the action of the rule will be executed." #: ../../configuration/loadbalancing/wan.rst:250 msgid "A script can be run when an interface state change occurs. Scripts are run from /config/scripts, for a different location specify the full path:" msgstr "A script can be run when an interface state change occurs. Scripts are run from /config/scripts, for a different location specify the full path:" #: ../../configuration/protocols/segment-routing.rst:91 #: ../../configuration/protocols/segment-routing.rst:169 msgid "A segment ID that contains an IP address prefix calculated by an IGP in the service provider core network. Prefix SIDs are globally unique, this value indentify it" msgstr "A segment ID that contains an IP address prefix calculated by an IGP in the service provider core network. Prefix SIDs are globally unique, this value indentify it" #: ../../_include/interface-disable-flow-control.txt:11 msgid "A sending station (computer or network switch) may be transmitting data faster than the other end of the link can accept it. Using flow control, the receiving station can signal the sender requesting suspension of transmissions until the receiver catches up." msgstr "A sending station (computer or network switch) may be transmitting data faster than the other end of the link can accept it. Using flow control, the receiving station can signal the sender requesting suspension of transmissions until the receiver catches up." #: ../../configuration/service/dhcp-server.rst:677 msgid "A shared network named ``NET1`` serves subnet ``2001:db8::/64``" msgstr "A shared network named ``NET1`` serves subnet ``2001:db8::/64``" #: ../../configuration/service/dhcp-server.rst:654 msgid "A shared network named ``PD-NET`` serves subnet ``2001:db8::/64``." msgstr "A shared network named ``PD-NET`` serves subnet ``2001:db8::/64``." #: ../../configuration/protocols/bgp.rst:1168 msgid "A simple BGP configuration via IPv6." msgstr "A simple BGP configuration via IPv6." #: ../../configuration/trafficpolicy/index.rst:819 msgid "A simple Random Early Detection (RED) policy would start randomly dropping packets from a queue before it reaches its queue limit thus avoiding congestion. That is good for TCP connections as the gradual dropping of packets acts as a signal for the sender to decrease its transmission rate." msgstr "A simple Random Early Detection (RED) policy would start randomly dropping packets from a queue before it reaches its queue limit thus avoiding congestion. That is good for TCP connections as the gradual dropping of packets acts as a signal for the sender to decrease its transmission rate." #: ../../configuration/protocols/bgp.rst:1123 msgid "A simple eBGP configuration:" msgstr "A simple eBGP configuration:" #: ../../configuration/trafficpolicy/index.rst:1174 msgid "A simple example of Shaper using priorities." msgstr "A simple example of Shaper using priorities." #: ../../configuration/trafficpolicy/index.rst:582 msgid "A simple example of an FQ-CoDel policy working inside a Shaper one." msgstr "A simple example of an FQ-CoDel policy working inside a Shaper one." #: ../../configuration/firewall/index.rst:14 msgid "A simplified traffic flow, based on Netfilter packet flow, is shown next, in order to have a full view and understanding of how packets are processed, and what possible paths can take." msgstr "A simplified traffic flow, based on Netfilter packet flow, is shown next, in order to have a full view and understanding of how packets are processed, and what possible paths can take." #: ../../configuration/firewall/index.rst:19 msgid "A simplified traffic flow diagram, based on Netfilter packet flow, is shown next, in order to have a full view and understanding of how packets are processed, and what possible paths traffic can take." msgstr "A simplified traffic flow diagram, based on Netfilter packet flow, is shown next, in order to have a full view and understanding of how packets are processed, and what possible paths traffic can take." #: ../../configuration/nat/nat66.rst:28 msgid "A single internal network and external network. Use the NAT66 device to connect a single internal network and public network, and the hosts in the internal network use IPv6 address prefixes that only support routing within the local range. When a host in the internal network accesses the external network, the source IPv6 address prefix in the message will be converted into a global unicast IPv6 address prefix by the NAT66 device." msgstr "A single internal network and external network. Use the NAT66 device to connect a single internal network and public network, and the hosts in the internal network use IPv6 address prefixes that only support routing within the local range. When a host in the internal network accesses the external network, the source IPv6 address prefix in the message will be converted into a global unicast IPv6 address prefix by the NAT66 device." #: ../../configuration/interfaces/wireless.rst:19 msgid "A station acts as a Wi-Fi client accessing the network through an available WAP" msgstr "A station acts as a Wi-Fi client accessing the network through an available WAP" #: ../../configuration/highavailability/index.rst:110 msgid "A sync group allows VRRP groups to transition together." msgstr "A sync group allows VRRP groups to transition together." #: ../../configuration/protocols/ospf.rst:1318 msgid "A typical configuration using 2 nodes." msgstr "A typical configuration using 2 nodes." #: ../../configuration/nat/nat44.rst:414 msgid "A typical problem with using NAT and hosting public servers is the ability for internal systems to reach an internal server using it's external IP address. The solution to this is usually the use of split-DNS to correctly point host systems to the internal address when requests are made internally. Because many smaller networks lack DNS infrastructure, a work-around is commonly deployed to facilitate the traffic by NATing the request from internal hosts to the source address of the internal interface on the firewall." msgstr "A typical problem with using NAT and hosting public servers is the ability for internal systems to reach an internal server using it's external IP address. The solution to this is usually the use of split-DNS to correctly point host systems to the internal address when requests are made internally. Because many smaller networks lack DNS infrastructure, a work-around is commonly deployed to facilitate the traffic by NATing the request from internal hosts to the source address of the internal interface on the firewall." #: ../../configuration/service/console-server.rst:40 msgid "A user friendly alias for this connection. Can be used instead of the device name when connecting." msgstr "A user friendly alias for this connection. Can be used instead of the device name when connecting." #: ../../configuration/service/console-server.rst:36 msgid "A user friendly description identifying the connected peripheral." msgstr "A user friendly description identifying the connected peripheral." #: ../../configuration/interfaces/bonding.rst:265 msgid "A value of 0 disables ARP monitoring. The default value is 0." msgstr "A value of 0 disables ARP monitoring. The default value is 0." #: ../../configuration/interfaces/pppoe.rst:152 msgid "A value of 296 works well on very slow links (40 bytes for TCP/IP header + 256 bytes of data)." msgstr "A value of 296 works well on very slow links (40 bytes for TCP/IP header + 256 bytes of data)." #: ../../configuration/trafficpolicy/index.rst:993 msgid "A very small buffer will soon start dropping packets." msgstr "A very small buffer will soon start dropping packets." #: ../../configuration/firewall/zone.rst:49 msgid "A zone must be configured before an interface is assigned to it and an interface can be assigned to only a single zone." msgstr "A zone must be configured before an interface is assigned to it and an interface can be assigned to only a single zone." #: ../../configuration/service/dns.rst:411 msgid "Above, command syntax isn noted to configure dynamic dns on a specific interface. It is possible to overlook the additional address option, web, when completeing those commands. ddclient_ has another way to determine the WAN IP address, using a web-based url to determine the external IP. Each of the commands above will need to be modified to use 'web' as the 'interface' specified if this functionality is to be utilized." msgstr "Above, command syntax isn noted to configure dynamic dns on a specific interface. It is possible to overlook the additional address option, web, when completeing those commands. ddclient_ has another way to determine the WAN IP address, using a web-based url to determine the external IP. Each of the commands above will need to be modified to use 'web' as the 'interface' specified if this functionality is to be utilized." #: ../../configuration/vpn/l2tp.rst:173 msgid "Above command will use `10.0.0.3` as source IPv4 address for all RADIUS queries on this NAS." msgstr "Above command will use `10.0.0.3` as source IPv4 address for all RADIUS queries on this NAS." #: ../../configuration/system/acceleration.rst:5 msgid "Acceleration" msgstr "Acceleration" #: ../../configuration/service/console-server.rst:68 msgid "Accept SSH connections for the given `` on TCP port ``. After successfull authentication the user will be directly dropped to the connected serial device." msgstr "Accept SSH connections for the given `` on TCP port ``. After successfull authentication the user will be directly dropped to the connected serial device." #: ../../configuration/service/conntrack-sync.rst:42 msgid "Accept only certain protocols: You may want to replicate the state of flows depending on their layer 4 protocol." msgstr "Accept only certain protocols: You may want to replicate the state of flows depending on their layer 4 protocol." #: ../../configuration/service/pppoe-server.rst:404 #: ../../configuration/vpn/pptp.rst:252 msgid "Accept peer interface identifier. By default is not defined." msgstr "Accept peer interface identifier. By default is not defined." #: ../../configuration/vpn/l2tp.rst:331 #: ../../configuration/vpn/sstp.rst:289 msgid "Accept peer interface identifier. By default this is not defined." msgstr "Accept peer interface identifier. By default this is not defined." #: ../../configuration/service/ipoe-server.rst:363 #: ../../configuration/service/pppoe-server.rst:555 #: ../../configuration/vpn/pptp.rst:408 msgid "Acceptable rate of connections (e.g. 1/min, 60/sec)" msgstr "Acceptable rate of connections (e.g. 1/min, 60/sec)" #: ../../configuration/policy/access-list.rst:3 msgid "Access List Policy" msgstr "Access List Policy" #: ../../configuration/policy/access-list.rst:16 msgid "Access Lists" msgstr "Access Lists" #: ../../configuration/system/syslog.rst:191 msgid "Action must be taken immediately - A condition that should be corrected immediately, such as a corrupted system database." msgstr "Action must be taken immediately - A condition that should be corrected immediately, such as a corrupted system database." #: ../../configuration/system/option.rst:15 msgid "Action which will be run once the ctrl-alt-del keystroke is received." msgstr "Action which will be run once the ctrl-alt-del keystroke is received." #: ../../configuration/firewall/bridge.rst:84 #: ../../configuration/firewall/ipv4.rst:105 #: ../../configuration/firewall/ipv6.rst:105 #: ../../configuration/policy/route.rst:238 msgid "Actions" msgstr "Actions" #: ../../configuration/interfaces/openvpn.rst:487 msgid "Active Directory" msgstr "Active Directory" #: ../../configuration/loadbalancing/haproxy.rst:142 msgid "Active health check backend server" msgstr "Active health check backend server" #: ../../configuration/service/dns.rst:45 msgid "Add NTA (negative trust anchor) for this domain. This must be set if the domain does not support DNSSEC." msgstr "Add NTA (negative trust anchor) for this domain. This must be set if the domain does not support DNSSEC." #: ../../configuration/interfaces/wireless.rst:129 msgid "Add Power Constraint element to Beacon and Probe Response frames." msgstr "Add Power Constraint element to Beacon and Probe Response frames." #: ../../configuration/interfaces/l2tpv3.rst:113 msgid "Add a forwarding rule matching UDP port on your internet router." msgstr "Add a forwarding rule matching UDP port on your internet router." #: ../../configuration/container/index.rst:156 msgid "Add a host device to the container." msgstr "Add a host device to the container." #: ../../configuration/service/ssh.rst:85 msgid "Add access-control directive to allow or deny users and groups. Directives are processed in the following order of precedence: ``deny-users``, ``allow-users``, ``deny-groups`` and ``allow-groups``." msgstr "Add access-control directive to allow or deny users and groups. Directives are processed in the following order of precedence: ``deny-users``, ``allow-users``, ``deny-groups`` and ``allow-groups``." #: ../../configuration/container/index.rst:83 msgid "Add custom environment variables. Multiple environment variables are allowed. The following commands translate to \"-e key=value\" when the container is created." msgstr "Add custom environment variables. Multiple environment variables are allowed. The following commands translate to \"-e key=value\" when the container is created." #: ../../configuration/policy/examples.rst:109 msgid "Add default routes for routing ``table 10`` and ``table 11``" msgstr "Add default routes for routing ``table 10`` and ``table 11``" #: ../../configuration/firewall/groups.rst:162 msgid "Add description to firewall groups:" msgstr "Add description to firewall groups:" #: ../../configuration/firewall/groups.rst:177 msgid "Add destination IP address of the connection to a dynamic address group:" msgstr "Add destination IP address of the connection to a dynamic address group:" #: ../../configuration/container/index.rst:184 msgid "Add metadata label for this container." msgstr "Add metadata label for this container." #: ../../configuration/policy/examples.rst:176 msgid "Add multiple source IP in one rule with same priority" msgstr "Add multiple source IP in one rule with same priority" #: ../../configuration/service/webproxy.rst:147 msgid "Add new port to SSL-ports acl. Ports included by default in SSL-ports acl: 443" msgstr "Add new port to SSL-ports acl. Ports included by default in SSL-ports acl: 443" #: ../../configuration/service/webproxy.rst:142 msgid "Add new port to Safe-ports acl. Ports included by default in Safe-ports acl: 21, 70, 80, 210, 280, 443, 488, 591, 777, 873, 1025-65535" msgstr "Add new port to Safe-ports acl. Ports included by default in Safe-ports acl: 21, 70, 80, 210, 280, 443, 488, 591, 777, 873, 1025-65535" #: ../../configuration/policy/route-map.rst:224 msgid "Add or replace BGP community attribute in format ``<0-65535:0-65535>`` or from well-known community list" msgstr "Add or replace BGP community attribute in format ``<0-65535:0-65535>`` or from well-known community list" #: ../../configuration/policy/route-map.rst:239 msgid "Add or replace BGP large-community attribute in format ``<0-4294967295:0-4294967295:0-4294967295>``" msgstr "Add or replace BGP large-community attribute in format ``<0-4294967295:0-4294967295:0-4294967295>``" #: ../../configuration/policy/examples.rst:116 msgid "Add policy route matching VLAN source addresses" msgstr "Add policy route matching VLAN source addresses" #: ../../configuration/pki/index.rst:219 msgid "Add public key portion for the certificate named `name` to the VyOS CLI." msgstr "Add public key portion for the certificate named `name` to the VyOS CLI." #: ../../configuration/firewall/groups.rst:188 msgid "Add source IP address of the connection to a dynamic address group:" msgstr "Add source IP address of the connection to a dynamic address group:" #: ../../configuration/pki/index.rst:195 msgid "Add the CAs private key to the VyOS CLI. This should never leave the system, and is only required if you use VyOS as your certificate generator as mentioned above." msgstr "Add the CAs private key to the VyOS CLI. This should never leave the system, and is only required if you use VyOS as your certificate generator as mentioned above." #: ../../configuration/vpn/remoteaccess_ipsec.rst:163 msgid "Add the commands from Snippet in the Windows side via PowerShell. Also import the root CA cert to the Windows “Trusted Root Certification Authorities” and establish the connection." msgstr "Add the commands from Snippet in the Windows side via PowerShell. Also import the root CA cert to the Windows “Trusted Root Certification Authorities” and establish the connection." #: ../../configuration/pki/index.rst:234 msgid "Add the private key portion of this certificate to the CLI. This should never leave the system as it is used to decrypt the data." msgstr "Add the private key portion of this certificate to the CLI. This should never leave the system as it is used to decrypt the data." #: ../../configuration/pki/index.rst:176 msgid "Add the public CA certificate for the CA named `name` to the VyOS CLI." msgstr "Add the public CA certificate for the CA named `name` to the VyOS CLI." #: ../../configuration/vpn/openconnect.rst:176 msgid "Adding a 2FA with an OTP-key" msgstr "Adding a 2FA with an OTP-key" #: ../../configuration/firewall/groups.rst:170 msgid "Adding elements to Dynamic Firewall Groups" msgstr "Adding elements to Dynamic Firewall Groups" #: ../../configuration/loadbalancing/haproxy.rst:354 msgid "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." msgstr "Additional global parameters are set, including the maximum number connection limit of 4000 and a minimum TLS version of 1.3." #: ../../configuration/service/tftp-server.rst:35 msgid "Additional option to run TFTP server in the :abbr:`VRF (Virtual Routing and Forwarding)` context" msgstr "Additional option to run TFTP server in the :abbr:`VRF (Virtual Routing and Forwarding)` context" #: ../../configuration/interfaces/openvpn.rst:415 msgid "Additionally, each client needs a copy of ca cert and its own client key and cert files. The files are plaintext so they may be copied either manually from the CLI. Client key and cert files should be signed with the proper ca cert and generated on the server side." msgstr "Additionally, each client needs a copy of ca cert and its own client key and cert files. The files are plaintext so they may be copied either manually from the CLI. Client key and cert files should be signed with the proper ca cert and generated on the server side." #: ../../configuration/interfaces/openvpn.rst:419 msgid "Additionally, each client needs a copy of ca cert and its own client key and cert files. The files are plaintext so they may be copied manually from the CLI. Client key and cert files should be signed with the proper ca cert and generated on the server side." msgstr "Additionally, each client needs a copy of ca cert and its own client key and cert files. The files are plaintext so they may be copied manually from the CLI. Client key and cert files should be signed with the proper ca cert and generated on the server side." #: ../../configuration/nat/nat44.rst:760 msgid "Additionally, we want to use VPNs only on our eth1 interface (the external interface in the image above)" msgstr "Additionally, we want to use VPNs only on our eth1 interface (the external interface in the image above)" #: ../../configuration/protocols/bgp.rst:296 msgid "Additionally you should keep in mind that this feature fundamentally disables the ability to use widely deployed BGP features. BGP unnumbered, hostname support, AS4, Addpath, Route Refresh, ORF, Dynamic Capabilities, and graceful restart." msgstr "Additionally you should keep in mind that this feature fundamentally disables the ability to use widely deployed BGP features. BGP unnumbered, hostname support, AS4, Addpath, Route Refresh, ORF, Dynamic Capabilities, and graceful restart." #: ../../configuration/highavailability/index.rst:59 msgid "Address" msgstr "Address" #: ../../configuration/nat/nat44.rst:231 msgid "Address Conversion" msgstr "Address Conversion" #: ../../configuration/protocols/bgp.rst:48 msgid "Address Families" msgstr "Address Families" #: ../../configuration/firewall/groups.rst:19 msgid "Address Groups" msgstr "Address Groups" #: ../../configuration/service/suricata.rst:42 msgid "Address groups are useful when you need to create rules that apply to specific IP addresses. For example, if you want to create a rule that monitors traffic going to or from a specific IP address, you can use the group name instead of the actual IP address. This simplifies rule management and makes the configuration more flexible." msgstr "Address groups are useful when you need to create rules that apply to specific IP addresses. For example, if you want to create a rule that monitors traffic going to or from a specific IP address, you can use the group name instead of the actual IP address. This simplifies rule management and makes the configuration more flexible." #: ../../configuration/service/dhcp-server.rst:656 #: ../../configuration/service/dhcp-server.rst:680 msgid "Address pool shall be ``2001:db8::100`` through ``2001:db8::199``." msgstr "Address pool shall be ``2001:db8::100`` through ``2001:db8::199``." #: ../../configuration/service/dhcp-server.rst:670 msgid "Address pools" msgstr "Address pools" #: ../../configuration/service/https.rst:33 msgid "Address to listen for HTTPS requests" msgstr "Address to listen for HTTPS requests" #: ../../configuration/container/index.rst:215 msgid "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, VyOS will use docker.io and quay.io as the container registry." msgstr "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, VyOS will use docker.io and quay.io as the container registry." #: ../../configuration/container/index.rst:141 msgid "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, Vyos will use docker.io as the container registry." msgstr "Adds registry to list of unqualified-search-registries. By default, for any image that does not include the registry in the image name, Vyos will use docker.io as the container registry." #: ../../configuration/interfaces/wireless.rst:129 msgid "Adds the Power Constraint information element to Beacon and Probe Response frames." msgstr "Adds the Power Constraint information element to Beacon and Probe Response frames." #: ../../configuration/protocols/bgp.rst:669 msgid "Administrative Distance" msgstr "Administrative Distance" #: ../../configuration/service/ipoe-server.rst:334 msgid "Advanced Interface Options" msgstr "Advanced Interface Options" #: ../../configuration/service/ipoe-server.rst:306 #: ../../configuration/service/pppoe-server.rst:447 #: ../../configuration/vpn/l2tp.rst:372 #: ../../configuration/vpn/pptp.rst:293 #: ../../configuration/vpn/sstp.rst:330 msgid "Advanced Options" msgstr "Advanced Options" #: ../../configuration/nat/nat44.rst:301 msgid "Advanced configuration can be used in order to apply source or destination NAT, and within a single rule, be able to define multiple translated addresses, so NAT balances the translations among them." msgstr "Advanced configuration can be used in order to apply source or destination NAT, and within a single rule, be able to define multiple translated addresses, so NAT balances the translations among them." #: ../../configuration/nat/cgnat.rst:36 msgid "Advantages of CGNAT" msgstr "Advantages of CGNAT" #: ../../configuration/interfaces/openvpn.rst:16 msgid "Advantages of OpenVPN are:" msgstr "Advantages of OpenVPN are:" #: ../../configuration/service/router-advert.rst:1 msgid "Advertise DNS server per https://tools.ietf.org/html/rfc6106" msgstr "Advertise DNS server per https://tools.ietf.org/html/rfc6106" #: ../../configuration/service/router-advert.rst:110 msgid "Advertisement Interval Option (specified by Mobile IPv6) is always included in Router Advertisements unless this option is set." msgstr "Advertisement Interval Option (specified by Mobile IPv6) is always included in Router Advertisements unless this option is set." #: ../../configuration/service/router-advert.rst:78 msgid "Advertising a NAT64 Prefix" msgstr "Advertising a NAT64 Prefix" #: ../../configuration/service/router-advert.rst:54 msgid "Advertising a Prefix" msgstr "Advertising a Prefix" #: ../../configuration/service/snmp.rst:165 msgid "After commit the plaintext passwords will be hashed and stored in your configuration. The resulting CLI config will look like:" msgstr "After commit the plaintext passwords will be hashed and stored in your configuration. The resulting CLI config will look like:" #: ../../configuration/vrf/index.rst:340 msgid "After committing the configuration we can verify all leaked routes are installed, and try to ICMP ping PC1 from PC3." msgstr "After committing the configuration we can verify all leaked routes are installed, and try to ICMP ping PC1 from PC3." #: ../../configuration/service/suricata.rst:32 msgid "After completing the service configuration in configuration mode, the main configuration file suricata.yaml is created, into which all specified parameters are added. Then, to ensure proper operation, the command :opcmd:`update suricata` must be run from operational mode, waiting for Suricata to update all its rules, which are used for analyzing traffic for threats and attacks." msgstr "After completing the service configuration in configuration mode, the main configuration file suricata.yaml is created, into which all specified parameters are added. Then, to ensure proper operation, the command :opcmd:`update suricata` must be run from operational mode, waiting for Suricata to update all its rules, which are used for analyzing traffic for threats and attacks." #: ../../configuration/vpn/remoteaccess_ipsec.rst:80 msgid "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this example are validated to work on Windows 10." msgstr "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this example are validated to work on Windows 10." #: ../../configuration/vpn/ipsec.rst:438 msgid "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this post are validated to work on both Windows 10 and iOS/iPadOS 14 to 17." msgstr "After the PKI certs are all set up we can start configuring our IPSec/IKE proposals used for key-exchange end data encryption. The used encryption ciphers and integrity algorithms vary from operating system to operating system. The ones used in this post are validated to work on both Windows 10 and iOS/iPadOS 14 to 17." #: ../../configuration/pki/index.rst:214 msgid "After we have imported the CA certificate(s) we can now import and add certificates used by services on this router." msgstr "After we have imported the CA certificate(s) we can now import and add certificates used by services on this router." #: ../../configuration/vpn/ipsec.rst:419 msgid "After you obtain your server certificate you can import it from a file on the local filesystem, or paste it into the CLI. Please note that when entering the certificate manually you need to strip the ``-----BEGIN KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate or key needs to be presented in a single line without line breaks (``\\n``)." msgstr "After you obtain your server certificate you can import it from a file on the local filesystem, or paste it into the CLI. Please note that when entering the certificate manually you need to strip the ``-----BEGIN KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate or key needs to be presented in a single line without line breaks (``\\n``)." #: ../../configuration/vpn/ipsec.rst:399 msgid "After you obtained your server certificate you can import it from a file on the local filesystem, or paste it into the CLI. Please note that when entering the certificate manually you need to strip the ``-----BEGIN KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate or key needs to be presented in a single line without line breaks (``\\n``)." msgstr "After you obtained your server certificate you can import it from a file on the local filesystem, or paste it into the CLI. Please note that when entering the certificate manually you need to strip the ``-----BEGIN KEY-----`` and ``-----END KEY-----`` tags. Also, the certificate or key needs to be presented in a single line without line breaks (``\\n``)." #: ../../configuration/service/snmp.rst:39 msgid "Agent - software which runs on managed devices" msgstr "Agent - software which runs on managed devices" #: ../../configuration/system/syslog.rst:191 msgid "Alert" msgstr "Alert" #: ../../configuration/highavailability/index.rst:360 msgid "Algorithm" msgstr "Algorithm" #: ../../configuration/system/host-name.rst:13 msgid "Aliases" msgstr "Aliases" #: ../../configuration/interfaces/bonding.rst:297 msgid "All-Active Multihoming is used for redundancy and load sharing. Servers are attached to two or more PEs and the links are bonded (link-aggregation). This group of server links is referred to as an :abbr:`ES (Ethernet Segment)`." msgstr "All-Active Multihoming is used for redundancy and load sharing. Servers are attached to two or more PEs and the links are bonded (link-aggregation). This group of server links is referred to as an :abbr:`ES (Ethernet Segment)`." #: ../../configuration/service/dns.rst:248 msgid "All DNS requests for example.com must be forwarded to a DNS server at 192.0.2.254 and 2001:db8:cafe::1" msgstr "All DNS requests for example.com must be forwarded to a DNS server at 192.0.2.254 and 2001:db8:cafe::1" #: ../../configuration/service/snmp.rst:204 msgid "All SNMP MIBs are located in each image of VyOS here: ``/usr/share/snmp/mibs/``" msgstr "All SNMP MIBs are located in each image of VyOS here: ``/usr/share/snmp/mibs/``" #: ../../configuration/interfaces/wwan.rst:323 msgid "All available WWAN cards have a build in, reprogrammable firmware. Most of the vendors provide a regular update to the firmware used in the baseband chip." msgstr "All available WWAN cards have a build in, reprogrammable firmware. Most of the vendors provide a regular update to the firmware used in the baseband chip." #: ../../configuration/interfaces/wwan.rst:324 msgid "All available WWAN cards have a built-in, reprogrammable firmware. Most vendors provide regular updates to firmware used in the baseband chip." msgstr "All available WWAN cards have a built-in, reprogrammable firmware. Most vendors provide regular updates to firmware used in the baseband chip." #: ../../configuration/vpn/sstp.rst:22 msgid "All certificates should be stored on VyOS under ``/config/auth``. If certificates are not stored in the ``/config`` directory they will not be migrated during a software update." msgstr "All certificates should be stored on VyOS under ``/config/auth``. If certificates are not stored in the ``/config`` directory they will not be migrated during a software update." #: ../../configuration/system/syslog.rst:128 msgid "All facilities" msgstr "All facilities" #: ../../configuration/service/dhcp-relay.rst:11 msgid "All interfaces used for the DHCP relay must be configured. This includes the uplink to the DHCP server." msgstr "All interfaces used for the DHCP relay must be configured. This includes the uplink to the DHCP server." #: ../../configuration/highavailability/index.rst:142 msgid "All items in a sync group should be similarly configured. If one VRRP group is set to a different preemption delay or priority, it would result in an endless transition loop." msgstr "All items in a sync group should be similarly configured. If one VRRP group is set to a different preemption delay or priority, it would result in an endless transition loop." #: ../../configuration/service/dns.rst:250 msgid "All other DNS requests will be forwarded to a different set of DNS servers at 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff" msgstr "All other DNS requests will be forwarded to a different set of DNS servers at 192.0.2.1, 192.0.2.2, 2001:db8::1:ffff and 2001:db8::2:ffff" #: ../../configuration/service/webproxy.rst:134 msgid "All reply sizes are accepted by default." msgstr "All reply sizes are accepted by default." #: ../../configuration/protocols/pim.rst:91 msgid "All routers in the PIM network must agree on these values." msgstr "All routers in the PIM network must agree on these values." #: ../../configuration/system/task-scheduler.rst:10 msgid "All scripts excecuted this way are executed as root user - this may be dangerous. Together with :ref:`command-scripting` this can be used for automating (re-)configuration." msgstr "All scripts excecuted this way are executed as root user - this may be dangerous. Together with :ref:`command-scripting` this can be used for automating (re-)configuration." #: ../../configuration/system/task-scheduler.rst:10 msgid "All scripts executed this way are executed as root user - this may be dangerous. Together with :ref:`command-scripting` this can be used for automating (re-)configuration." msgstr "All scripts executed this way are executed as root user - this may be dangerous. Together with :ref:`command-scripting` this can be used for automating (re-)configuration." #: ../../configuration/protocols/bgp.rst:241 msgid "All these rules with OTC will help to detect and mitigate route leaks and happen automatically if local-role is set." msgstr "All these rules with OTC will help to detect and mitigate route leaks and happen automatically if local-role is set." #: ../../configuration/interfaces/tunnel.rst:15 msgid "All those protocols are grouped under ``interfaces tunnel`` in VyOS. Let's take a closer look at the protocols and options currently supported by VyOS." msgstr "All those protocols are grouped under ``interfaces tunnel`` in VyOS. Let's take a closer look at the protocols and options currently supported by VyOS." #: ../../configuration/firewall/zone.rst:52 msgid "All traffic between zones is affected by existing policies" msgstr "All traffic between zones is affected by existing policies" #: ../../configuration/firewall/zone.rst:51 msgid "All traffic to and from an interface within a zone is permitted." msgstr "All traffic to and from an interface within a zone is permitted." #: ../../configuration/vpn/pptp.rst:45 msgid "All tunnel sessions can be checked via:" msgstr "All tunnel sessions can be checked via:" #: ../../configuration/service/ipoe-server.rst:230 #: ../../configuration/service/pppoe-server.rst:210 #: ../../configuration/vpn/l2tp.rst:236 #: ../../configuration/vpn/pptp.rst:176 #: ../../configuration/vpn/sstp.rst:209 msgid "Allocation clients ip addresses by RADIUS" msgstr "Allocation clients ip addresses by RADIUS" #: ../../configuration/service/ssh.rst:141 msgid "Allow ``ssh`` dynamic-protection." msgstr "Allow ``ssh`` dynamic-protection." #: ../../configuration/service/webproxy.rst:70 msgid "Allow access to sites in a domain without retrieving them from the Proxy cache. Specifying \"vyos.net\" will allow access to vyos.net but the pages accessed will not be cached. It useful for working around problems with \"If-Modified-Since\" checking at certain sites." msgstr "Allow access to sites in a domain without retrieving them from the Proxy cache. Specifying \"vyos.net\" will allow access to vyos.net but the pages accessed will not be cached. It useful for working around problems with \"If-Modified-Since\" checking at certain sites." #: ../../configuration/protocols/bgp.rst:274 msgid "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." msgstr "Allow bgp to negotiate the extended-nexthop capability with it’s peer. If you are peering over a IPv6 Link-Local address then this capability is turned on automatically. If you are peering over a IPv6 Global Address then turning on this command will allow BGP to install IPv4 routes with IPv6 nexthops if you do not have IPv4 configured on interfaces." #: ../../configuration/service/https.rst:113 msgid "Allow cross-origin requests from ``." msgstr "Allow cross-origin requests from ``." #: ../../configuration/service/dns.rst:456 msgid "Allow explicit IPv6 address for the interface." msgstr "Allow explicit IPv6 address for the interface." #: ../../configuration/container/index.rst:57 msgid "Allow host networking in a container. The network stack of the container is not isolated from the host and will use the host IP." msgstr "Allow host networking in a container. The network stack of the container is not isolated from the host and will use the host IP." #: ../../configuration/service/mdns.rst:43 msgid "Allow listing additional custom domains to be browsed (in addition to the default ``local``) so that they can be reflected." msgstr "Allow listing additional custom domains to be browsed (in addition to the default ``local``) so that they can be reflected." #: ../../configuration/protocols/bfd.rst:34 msgid "Allow this BFD peer to not be directly connected" msgstr "Allow this BFD peer to not be directly connected" #: ../../configuration/firewall/general-legacy.rst:694 msgid "Allowed values fpr TCP flags: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, ``PSH``, ``ALL`` When specifying more than one flag, flags should be comma separated. The ``!`` negate the selected protocol." msgstr "Allowed values fpr TCP flags: ``SYN``, ``ACK``, ``FIN``, ``RST``, ``URG``, ``PSH``, ``ALL`` When specifying more than one flag, flags should be comma separated. The ``!`` negate the selected protocol." #: ../../configuration/firewall/ipv4.rst:886 #: ../../configuration/firewall/ipv6.rst:876 #: ../../configuration/system/conntrack.rst:172 msgid "Allowed values fpr TCP flags: ``ack``, ``cwr``, ``ecn``, ``fin``, ``psh``, ``rst``, ``syn`` and ``urg``. Multiple values are supported, and for inverted selection use ``not``, as shown in the example." msgstr "Allowed values fpr TCP flags: ``ack``, ``cwr``, ``ecn``, ``fin``, ``psh``, ``rst``, ``syn`` and ``urg``. Multiple values are supported, and for inverted selection use ``not``, as shown in the example." #: ../../configuration/interfaces/bridge.rst:170 msgid "Allows specific VLAN IDs to pass through the bridge member interface. This can either be an individual VLAN id or a range of VLAN ids delimited by a hyphen." msgstr "Allows specific VLAN IDs to pass through the bridge member interface. This can either be an individual VLAN id or a range of VLAN ids delimited by a hyphen." #: ../../configuration/loadbalancing/haproxy.rst:85 msgid "Allows to define URL path matching rules for a specific service." msgstr "Allows to define URL path matching rules for a specific service." #: ../../configuration/protocols/static.rst:92 msgid "Allows you to configure the next-hop interface for an interface-based IPv4 static route. `` will be the next-hop interface where traffic is routed for the given ``." msgstr "Allows you to configure the next-hop interface for an interface-based IPv4 static route. `` will be the next-hop interface where traffic is routed for the given ``." #: ../../configuration/protocols/static.rst:112 msgid "Allows you to configure the next-hop interface for an interface-based IPv6 static route. `` will be the next-hop interface where traffic is routed for the given ``." msgstr "Allows you to configure the next-hop interface for an interface-based IPv6 static route. `` will be the next-hop interface where traffic is routed for the given ``." #: ../../configuration/service/ssh.rst:177 msgid "Already learned known_hosts files of clients need an update as the public key will change." msgstr "Already learned known_hosts files of clients need an update as the public key will change." #: ../../configuration/firewall/ipv4.rst:190 #: ../../configuration/firewall/ipv6.rst:190 msgid "Also, **default-action** is an action that takes place whenever a packet does not match any rule in it's chain. For base chains, possible options for **default-action** are **accept** or **drop**." msgstr "Also, **default-action** is an action that takes place whenever a packet does not match any rule in it's chain. For base chains, possible options for **default-action** are **accept** or **drop**." #: ../../configuration/firewall/bridge.rst:171 msgid "Also, **default-action** is an action that takes place whenever a packet does not match any rule in its' chain. For base chains, possible options for **default-action** are **accept** or **drop**." msgstr "Also, **default-action** is an action that takes place whenever a packet does not match any rule in its' chain. For base chains, possible options for **default-action** are **accept** or **drop**." #: ../../configuration/service/dhcp-relay.rst:110 msgid "Also, for backwards compatibility this configuration, which uses generic interface definition, is still valid:" msgstr "Also, for backwards compatibility this configuration, which uses generic interface definition, is still valid:" #: ../../configuration/firewall/index.rst:15 msgid "Also, for those who haven't updated to newer version, legacy documentation is still present and valid for all sagitta version prior to VyOS 1.4-rolling-202308040557:" msgstr "Also, for those who haven't updated to newer version, legacy documentation is still present and valid for all sagitta version prior to VyOS 1.4-rolling-202308040557:" #: ../../configuration/firewall/bridge.rst:146 msgid "Also, if action is set to ``queue``, use next command to specify the queue options. Possible options are ``bypass`` and ``fanout``:" msgstr "Also, if action is set to ``queue``, use next command to specify the queue options. Possible options are ``bypass`` and ``fanout``:" #: ../../configuration/nat/nat44.rst:288 msgid "Also, in :ref:`destination-nat`, redirection to localhost is supported. The redirect statement is a special form of dnat which always translates the destination address to the local host’s one." msgstr "Also, in :ref:`destination-nat`, redirection to localhost is supported. The redirect statement is a special form of dnat which always translates the destination address to the local host’s one." #: ../../configuration/firewall/groups.rst:200 msgid "Also, specific timeout can be defined per rule. In case rule gets a hit, source or destinatination address will be added to the group, and this element will remain in the group until timeout expires. If no timeout is defined, then the element will remain in the group until next reboot, or until a new commit that changes firewall configuration is done." msgstr "Also, specific timeout can be defined per rule. In case rule gets a hit, source or destinatination address will be added to the group, and this element will remain in the group until timeout expires. If no timeout is defined, then the element will remain in the group until next reboot, or until a new commit that changes firewall configuration is done." #: ../../configuration/firewall/groups.rst:199 msgid "Also, specific timeouts can be defined per rule. In case rule gets a hit, a source or destinatination address will be added to the group, and this element will remain in the group until the timeout expires. If no timeout is defined, then the element will remain in the group until next reboot, or until a new commit that changes firewall configuration is done." msgstr "Also, specific timeouts can be defined per rule. In case rule gets a hit, a source or destinatination address will be added to the group, and this element will remain in the group until the timeout expires. If no timeout is defined, then the element will remain in the group until next reboot, or until a new commit that changes firewall configuration is done." #: ../../configuration/protocols/static.rst:171 msgid "Alternate Routing Tables" msgstr "Alternate Routing Tables" #: ../../configuration/protocols/static.rst:175 msgid "Alternate routing tables are used with policy based routing by utilizing :ref:`vrf`." msgstr "Alternate routing tables are used with policy based routing by utilizing :ref:`vrf`." #: ../../configuration/interfaces/vxlan.rst:342 msgid "Alternative to multicast, the remote IPv4 address of the VXLAN tunnel can be set directly. Let's change the Multicast example from above:" msgstr "Alternative to multicast, the remote IPv4 address of the VXLAN tunnel can be set directly. Let's change the Multicast example from above:" #: ../../configuration/interfaces/vxlan.rst:342 msgid "Alternatively to multicast, the remote IPv4 address of the VXLAN tunnel can be set directly. Let's change the Multicast example from above:" msgstr "Alternatively to multicast, the remote IPv4 address of the VXLAN tunnel can be set directly. Let's change the Multicast example from above:" #: ../../configuration/service/dhcp-server.rst:132 msgid "Always exclude this address from any defined range. This address will never be assigned by the DHCP server." msgstr "Always exclude this address from any defined range. This address will never be assigned by the DHCP server." #: ../../configuration/firewall/groups.rst:67 msgid "An **interface group** represents a collection of interfaces." msgstr "An **interface group** represents a collection of interfaces." #: ../../configuration/protocols/bgp.rst:26 msgid "An AS is a connected group of one or more IP prefixes run by one or more network operators which has a SINGLE and CLEARLY DEFINED routing policy." msgstr "An AS is a connected group of one or more IP prefixes run by one or more network operators which has a SINGLE and CLEARLY DEFINED routing policy." #: ../../configuration/interfaces/bonding.rst:301 msgid "An Ethernet Segment can be configured by specifying a system-MAC and a local discriminator or a complete ESINAME against the bond interface on the PE." msgstr "An Ethernet Segment can be configured by specifying a system-MAC and a local discriminator or a complete ESINAME against the bond interface on the PE." #: ../../configuration/trafficpolicy/index.rst:208 msgid "An IPv4 TCP filter will only match packets with an IPv4 header length of 20 bytes (which is the majority of IPv4 packets anyway)." msgstr "An IPv4 TCP filter will only match packets with an IPv4 header length of 20 bytes (which is the majority of IPv4 packets anyway)." #: ../../configuration/service/snmp.rst:36 msgid "An SNMP-managed network consists of three key components:" msgstr "An SNMP-managed network consists of three key components:" #: ../../configuration/interfaces/bonding.rst:239 msgid "An `` specifying which slave is the primary device. The specified device will always be the active slave while it is available. Only when the primary is off-line will alternate devices be used. This is useful when one slave is preferred over another, e.g., when one slave has higher throughput than another." msgstr "An `` specifying which slave is the primary device. The specified device will always be the active slave while it is available. Only when the primary is off-line will alternate devices be used. This is useful when one slave is preferred over another, e.g., when one slave has higher throughput than another." #: ../../configuration/interfaces/wireguard.rst:90 msgid "An additional layer of symmetric-key crypto can be used on top of the asymmetric crypto." msgstr "An additional layer of symmetric-key crypto can be used on top of the asymmetric crypto." #: ../../configuration/interfaces/wireguard.rst:103 msgid "An additional layer of symmetric-key crypto can be used on top of the asymmetric crypto. This command automatically creates for you the required CLI command to install this PSK for a given peer." msgstr "An additional layer of symmetric-key crypto can be used on top of the asymmetric crypto. This command automatically creates for you the required CLI command to install this PSK for a given peer." #: ../../configuration/interfaces/wireguard.rst:103 msgid "An additional layer of symmetric-key crypto can be used on top of the asymmetric crypto. This command automatically creates the required CLI command to install this PSK for a given peer." msgstr "An additional layer of symmetric-key crypto can be used on top of the asymmetric crypto. This command automatically creates the required CLI command to install this PSK for a given peer." #: ../../configuration/interfaces/wireguard.rst:247 msgid "An additional layer of symmetric-key crypto can be used on top of the asymmetric crypto. This is optional." msgstr "An additional layer of symmetric-key crypto can be used on top of the asymmetric crypto. This is optional." #: ../../configuration/vpn/ipsec.rst:11 msgid "An advantage of this scheme is that you get a real interface with its own address, which makes it easier to setup static routes or use dynamic routing protocols without having to modify IPsec policies. The other advantage is that it greatly simplifies router to router communication, which can be tricky with plain IPsec because the external outgoing address of the router usually doesn't match the IPsec policy of a typical site-to-site setup and you would need to add special configuration for it, or adjust the source address of the outgoing traffic of your applications. GRE/IPsec has no such problem and is completely transparent for applications." msgstr "An advantage of this scheme is that you get a real interface with its own address, which makes it easier to setup static routes or use dynamic routing protocols without having to modify IPsec policies. The other advantage is that it greatly simplifies router to router communication, which can be tricky with plain IPsec because the external outgoing address of the router usually doesn't match the IPsec policy of a typical site-to-site setup and you would need to add special configuration for it, or adjust the source address of the outgoing traffic of your applications. GRE/IPsec has no such problem and is completely transparent for applications." #: ../../configuration/vpn/ipsec.rst:11 msgid "An advantage of this scheme is that you get a real interface with its own address, which makes it easier to setup static routes or use dynamic routing protocols without having to modify IPsec policies. The other advantage is that it greatly simplifies router to router communication, which can be tricky with plain IPsec because the external outgoing address of the router usually doesn't match the IPsec policy of typical site-to-site setup and you need to add special configuration for it, or adjust the source address for outgoing traffic of your applications. GRE/IPsec has no such problem and is completely transparent for the applications." msgstr "An advantage of this scheme is that you get a real interface with its own address, which makes it easier to setup static routes or use dynamic routing protocols without having to modify IPsec policies. The other advantage is that it greatly simplifies router to router communication, which can be tricky with plain IPsec because the external outgoing address of the router usually doesn't match the IPsec policy of typical site-to-site setup and you need to add special configuration for it, or adjust the source address for outgoing traffic of your applications. GRE/IPsec has no such problem and is completely transparent for the applications." #: ../../configuration/service/snmp.rst:50 msgid "An agent is a network-management software module that resides on a managed device. An agent has local knowledge of management information and translates that information to or from an SNMP-specific form." msgstr "An agent is a network-management software module that resides on a managed device. An agent has local knowledge of management information and translates that information to or from an SNMP-specific form." #: ../../configuration/protocols/ospf.rst:211 msgid "An alternate command could be \"mpls-te on\" (Traffic Engineering)" msgstr "An alternate command could be \"mpls-te on\" (Traffic Engineering)" #: ../../configuration/firewall/ipv4.rst:421 msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion." msgstr "An arbitrary netmask can be applied to mask addresses to only match against a specific portion." #: ../../configuration/firewall/general-legacy.rst:424 msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 and a zone-based firewall as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)" msgstr "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 and a zone-based firewall as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)" #: ../../configuration/firewall/general-legacy.rst:424 msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 and a zone-based firewall as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)." msgstr "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 and a zone-based firewall as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)." #: ../../configuration/firewall/ipv6.rst:371 msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)" msgstr "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)" #: ../../configuration/firewall/ipv6.rst:395 msgid "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)" msgstr "An arbitrary netmask can be applied to mask addresses to only match against a specific portion. This is particularly useful with IPv6 as rules will remain valid if the IPv6 prefix changes and the host portion of systems IPv6 address is static (for example, with SLAAC or `tokenised IPv6 addresses `_)" #: ../../configuration/firewall/zone.rst:43 msgid "An basic introduction to zone-based firewalls can be found `here `_, and an example at :ref:`examples-zone-policy`." msgstr "An basic introduction to zone-based firewalls can be found `here `_, and an example at :ref:`examples-zone-policy`." #: ../../configuration/interfaces/openvpn.rst:768 #: ../../configuration/interfaces/tunnel.rst:36 #: ../../configuration/interfaces/tunnel.rst:54 #: ../../configuration/interfaces/tunnel.rst:71 #: ../../configuration/interfaces/tunnel.rst:93 #: ../../configuration/interfaces/tunnel.rst:194 #: ../../configuration/system/login.rst:199 msgid "An example:" msgstr "An example:" #: ../../configuration/service/monitoring.rst:166 msgid "An example of a configuration that sends ``telegraf`` metrics to remote ``InfluxDB 2``" msgstr "An example of a configuration that sends ``telegraf`` metrics to remote ``InfluxDB 2``" #: ../../configuration/interfaces/bridge.rst:235 msgid "An example of creating a VLAN-aware bridge is as follows:" msgstr "An example of creating a VLAN-aware bridge is as follows:" #: ../../configuration/system/login.rst:153 msgid "An example of key generation:" msgstr "An example of key generation:" #: ../../configuration/vpn/openconnect.rst:298 msgid "An example of the data captured by a FREERADIUS server with sql accounting:" msgstr "An example of the data captured by a FREERADIUS server with sql accounting:" #: ../../configuration/service/dhcp-server.rst:475 msgid "An option that takes a quoted string is set by replacing all quote characters with the string ``"`` inside the static-mapping-parameters value. The resulting line in dhcpd.conf will be ``option pxelinux.configfile \"pxelinux.cfg/01-00-15-17-44-2d-aa\";``." msgstr "An option that takes a quoted string is set by replacing all quote characters with the string ``"`` inside the static-mapping-parameters value. The resulting line in dhcpd.conf will be ``option pxelinux.configfile \"pxelinux.cfg/01-00-15-17-44-2d-aa\";``." #: ../../configuration/firewall/flowtables.rst:143 msgid "Analysis on what happens for desired connection:" msgstr "Analysis on what happens for desired connection:" #: ../../configuration/firewall/bridge.rst:462 msgid "And, to print only bridge firewall information:" msgstr "And, to print only bridge firewall information:" #: ../../configuration/firewall/ipv4.rst:75 msgid "And base chain for traffic generated by the router is ``set firewall ipv4 output ...``, where two sub-chains are available: **filter** and **raw**:" msgstr "And base chain for traffic generated by the router is ``set firewall ipv4 output ...``, where two sub-chains are available: **filter** and **raw**:" #: ../../configuration/firewall/ipv4.rst:58 msgid "And base chain for traffic generated by the router is ``set firewall ipv4 output filter ...``" msgstr "And base chain for traffic generated by the router is ``set firewall ipv4 output filter ...``" #: ../../configuration/firewall/ipv6.rst:58 msgid "And base chain for traffic generated by the router is ``set firewall ipv6 output filter ...``" msgstr "And base chain for traffic generated by the router is ``set firewall ipv6 output filter ...``" #: ../../configuration/firewall/ipv6.rst:75 msgid "And base chain for traffic generated by the router is ``set firewall ipv6 output filter ...``, where two sub-chains are available: **filter** and **raw**:" msgstr "And base chain for traffic generated by the router is ``set firewall ipv6 output filter ...``, where two sub-chains are available: **filter** and **raw**:" #: ../../configuration/service/ids.rst:138 msgid "And content of the script:" msgstr "And content of the script:" #: ../../configuration/policy/route.rst:76 msgid "And for ipv6:" msgstr "And for ipv6:" #: ../../configuration/firewall/bridge.rst:63 msgid "And for traffic that originates from the bridge itself, the base chain is **output**, base command is ``set firewall bridge output filter ...``, and the path is:" msgstr "And for traffic that originates from the bridge itself, the base chain is **output**, base command is ``set firewall bridge output filter ...``, and the path is:" #: ../../configuration/firewall/groups.rst:263 msgid "And next, some configuration example where groups are used:" msgstr "And next, some configuration example where groups are used:" #: ../../configuration/firewall/bridge.rst:514 msgid "And op-mode commands:" msgstr "And op-mode commands:" #: ../../configuration/firewall/ipv4.rst:75 msgid "And the base chain for traffic generated by the router is ``set firewall ipv4 output ...``, where two sub-chains are available: **filter** and **raw**:" msgstr "And the base chain for traffic generated by the router is ``set firewall ipv4 output ...``, where two sub-chains are available: **filter** and **raw**:" #: ../../configuration/firewall/ipv6.rst:75 msgid "And the base chain for traffic generated by the router is ``set firewall ipv6 output ...``, where two sub-chains are available: **filter** and **raw**:" msgstr "And the base chain for traffic generated by the router is ``set firewall ipv6 output ...``, where two sub-chains are available: **filter** and **raw**:" #: ../../configuration/system/ip.rst:97 msgid "And the different IPv4 **reset** commands available:" msgstr "And the different IPv4 **reset** commands available:" #: ../../configuration/interfaces/bonding.rst:190 #: ../../configuration/interfaces/bonding.rst:219 msgid "And then hash is reduced modulo slave count." msgstr "And then hash is reduced modulo slave count." #: ../../configuration/nat/nat44.rst:614 msgid "Another term often used for DNAT is **1-to-1 NAT**. For a 1-to-1 NAT configuration, both DNAT and SNAT are used to NAT all traffic from an external IP address to an internal IP address and vice-versa." msgstr "Another term often used for DNAT is **1-to-1 NAT**. For a 1-to-1 NAT configuration, both DNAT and SNAT are used to NAT all traffic from an external IP address to an internal IP address and vice-versa." #: ../../configuration/protocols/mpls.rst:63 msgid "Another thing to keep in mind with LDP is that much like BGP, it is a protocol that runs on top of TCP. It however does not have an ability to do something like a refresh capability like BGPs route refresh capability. Therefore one might have to reset the neighbor for a capability change or a configuration change to work." msgstr "Another thing to keep in mind with LDP is that much like BGP, it is a protocol that runs on top of TCP. It however does not have an ability to do something like a refresh capability like BGPs route refresh capability. Therefore one might have to reset the neighbor for a capability change or a configuration change to work." #: ../../configuration/vpn/ipsec.rst:553 msgid "Apple iOS/iPadOS (14.2+)" msgstr "Apple iOS/iPadOS (14.2+)" #: ../../configuration/vpn/ipsec.rst:569 msgid "Apple iOS/iPadOS expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." msgstr "Apple iOS/iPadOS expects the server name to be also used in the server's certificate common name, so it's best to use this DNS name for your VPN connection." #: ../../configuration/vrf/index.rst:48 #: ../../configuration/vrf/index.rst:58 msgid "Apply a route-map filter to routes for the specified protocol." msgstr "Apply a route-map filter to routes for the specified protocol." #: ../../configuration/system/ip.rst:39 msgid "Apply a route-map filter to routes for the specified protocol. The following protocols can be used: any, babel, bgp, connected, eigrp, isis, kernel, ospf, rip, static, table" msgstr "Apply a route-map filter to routes for the specified protocol. The following protocols can be used: any, babel, bgp, connected, eigrp, isis, kernel, ospf, rip, static, table" #: ../../configuration/system/ipv6.rst:35 msgid "Apply a route-map filter to routes for the specified protocol. The following protocols can be used: any, babel, bgp, connected, isis, kernel, ospfv3, ripng, static, table" msgstr "Apply a route-map filter to routes for the specified protocol. The following protocols can be used: any, babel, bgp, connected, isis, kernel, ospfv3, ripng, static, table" #: ../../configuration/policy/examples.rst:128 msgid "Apply routing policy to **inbound** direction of out VLAN interfaces" msgstr "Apply routing policy to **inbound** direction of out VLAN interfaces" #: ../../configuration/firewall/zone.rst:98 msgid "Applying a Rule-Set to a Zone" msgstr "Applying a Rule-Set to a Zone" #: ../../configuration/firewall/general-legacy.rst:747 msgid "Applying a Rule-Set to an Interface" msgstr "Applying a Rule-Set to an Interface" #: ../../configuration/trafficpolicy/index.rst:1268 msgid "Applying a traffic policy" msgstr "Applying a traffic policy" #: ../../configuration/protocols/ospf.rst:218 #: ../../configuration/protocols/ospf.rst:1122 msgid "Area Configuration" msgstr "Area Configuration" #: ../../configuration/protocols/isis.rst:55 msgid "Area identifier: ``0001`` IS-IS area number (numberical area ``1``)" msgstr "Area identifier: ``0001`` IS-IS area number (numberical area ``1``)" #: ../../configuration/protocols/isis.rst:55 msgid "Area identifier: ``0001`` IS-IS area number (numerical area ``1``)" msgstr "Area identifier: ``0001`` IS-IS area number (numerical area ``1``)" #: ../../configuration/protocols/openfabric.rst:45 msgid "Area identifier: ``0001`` OpenFabric area number (numerical area ``1``)" msgstr "Area identifier: ``0001`` OpenFabric area number (numerical area ``1``)" #: ../../configuration/system/task-scheduler.rst:38 msgid "Arguments which will be passed to the executable." msgstr "Arguments which will be passed to the executable." #: ../../configuration/interfaces/bonding.rst:449 msgid "Arista EOS" msgstr "Arista EOS" #: ../../configuration/interfaces/bonding.rst:434 msgid "Aruba/HP" msgstr "Aruba/HP" #: ../../configuration/interfaces/pppoe.rst:207 #: ../../configuration/interfaces/pppoe.rst:253 #: ../../configuration/interfaces/sstp-client.rst:79 #: ../../_include/interface-ip.txt:4 #: ../../_include/interface-ipv6.txt:60 msgid "As Internet wide PMTU discovery rarely works, we sometimes need to clamp our TCP MSS value to a specific value. This is a field in the TCP options part of a SYN packet. By setting the MSS value, you are telling the remote side unequivocally 'do not try to send me packets bigger than this value'." msgstr "As Internet wide PMTU discovery rarely works, we sometimes need to clamp our TCP MSS value to a specific value. This is a field in the TCP options part of a SYN packet. By setting the MSS value, you are telling the remote side unequivocally 'do not try to send me packets bigger than this value'." #: ../../configuration/vpn/sstp.rst:19 msgid "As SSTP provides PPP via a SSL/TLS channel the use of either publically signed certificates as well as a private PKI is required." msgstr "As SSTP provides PPP via a SSL/TLS channel the use of either publically signed certificates as well as a private PKI is required." #: ../../configuration/vpn/sstp.rst:19 msgid "As SSTP provides PPP via a SSL/TLS channel the use of either publicly signed certificates or private PKI is required." msgstr "As SSTP provides PPP via a SSL/TLS channel the use of either publicly signed certificates or private PKI is required." #: ../../configuration/interfaces/vxlan.rst:61 msgid "As VyOS is Linux based the default port used is not using 4789 as the default IANA-assigned destination UDP port number. Instead VyOS uses the Linux default port of 8472." msgstr "As VyOS is Linux based the default port used is not using 4789 as the default IANA-assigned destination UDP port number. Instead VyOS uses the Linux default port of 8472." #: ../../configuration/interfaces/vxlan.rst:34 msgid "As VyOS is based on Linux and there was no official IANA port assigned for VXLAN, VyOS uses a default port of 8472. You can change the port on a per VXLAN interface basis to get it working across multiple vendors." msgstr "As VyOS is based on Linux and there was no official IANA port assigned for VXLAN, VyOS uses a default port of 8472. You can change the port on a per VXLAN interface basis to get it working across multiple vendors." #: ../../configuration/firewall/index.rst:12 msgid "As VyOS is based on Linux it leverages its firewall. The Netfilter project created iptables and its successor nftables for the Linux kernel to work directly on packet data flows. This now extends the concept of zone-based security to allow for manipulating the data at multiple stages once accepted by the network interface and the driver before being handed off to the destination (e.g., a web server OR another device)." msgstr "As VyOS is based on Linux it leverages its firewall. The Netfilter project created iptables and its successor nftables for the Linux kernel to work directly on packet data flows. This now extends the concept of zone-based security to allow for manipulating the data at multiple stages once accepted by the network interface and the driver before being handed off to the destination (e.g., a web server OR another device)." #: ../../configuration/interfaces/wwan.rst:326 msgid "As VyOS makes use of the QMI interface to connect to the WWAN modem cards, also the firmware can be reprogrammed." msgstr "As VyOS makes use of the QMI interface to connect to the WWAN modem cards, also the firmware can be reprogrammed." #: ../../configuration/interfaces/wwan.rst:327 msgid "As VyOS makes use of the QMI interface to connect to the WWAN modem cards, the firmware can be reprogrammed." msgstr "As VyOS makes use of the QMI interface to connect to the WWAN modem cards, the firmware can be reprogrammed." #: ../../configuration/trafficpolicy/index.rst:990 msgid "As a reference: for 10mbit/s on Intel, you might need at least 10kbyte buffer if you want to reach your configured rate." msgstr "As a reference: for 10mbit/s on Intel, you might need at least 10kbyte buffer if you want to reach your configured rate." #: ../../configuration/interfaces/openvpn.rst:807 msgid "As a result, the processing of each packet becomes more efficient, potentially leveraging hardware encryption offloading support available in the kernel." msgstr "As a result, the processing of each packet becomes more efficient, potentially leveraging hardware encryption offloading support available in the kernel." #: ../../configuration/firewall/zone.rst:65 msgid "As an alternative to applying policy to an interface directly, a zone-based firewall can be created to simplify configuration when multiple interfaces belong to the same security zone. Instead of applying rule-sets to interfaces, they are applied to source zone-destination zone pairs." msgstr "As an alternative to applying policy to an interface directly, a zone-based firewall can be created to simplify configuration when multiple interfaces belong to the same security zone. Instead of applying rule-sets to interfaces, they are applied to source zone-destination zone pairs." #: ../../configuration/firewall/groups.rst:230 msgid "As any other firewall group, dynamic firewall groups can be used in firewall rules as matching options. For example:" msgstr "As any other firewall group, dynamic firewall groups can be used in firewall rules as matching options. For example:" #: ../../configuration/vpn/ipsec.rst:543 msgid "As both Microsoft Windows and Apple iOS/iPadOS only support a certain set of encryption ciphers and integrity algorithms we will validate the configured IKE/ESP proposals and only list the compatible ones to the user — if multiple are defined. If there are no matching proposals found — we can not generate a profile for you." msgstr "As both Microsoft Windows and Apple iOS/iPadOS only support a certain set of encryption ciphers and integrity algorithms we will validate the configured IKE/ESP proposals and only list the compatible ones to the user — if multiple are defined. If there are no matching proposals found — we can not generate a profile for you." #: ../../configuration/firewall/flowtables.rst:109 msgid "As described, first packet will be evaluated by all the firewall path, so desired connection should be explicitely accepted. Same thing should be taken into account for traffic in reverse order. In most cases state policies are used in order to accept connection in reverse patch." msgstr "As described, first packet will be evaluated by all the firewall path, so desired connection should be explicitely accepted. Same thing should be taken into account for traffic in reverse order. In most cases state policies are used in order to accept connection in reverse patch." #: ../../configuration/firewall/flowtables.rst:110 msgid "As described, first packet will be evaluated by all the firewall path, so desired connection should be explicitly accepted. Same thing should be taken into account for traffic in reverse order. In most cases state policies are used in order to accept connection in reverse patch." msgstr "As described, first packet will be evaluated by all the firewall path, so desired connection should be explicitly accepted. Same thing should be taken into account for traffic in reverse order. In most cases state policies are used in order to accept connection in reverse patch." #: ../../configuration/firewall/flowtables.rst:110 msgid "As described, the first packet will be evaluated by the firewall path, so a desired connection should be explicitly accepted. Same thing should be taken into account for traffic in reverse order. In most cases state policies are used in order to accept a connection in the reverse path." msgstr "As described, the first packet will be evaluated by the firewall path, so a desired connection should be explicitly accepted. Same thing should be taken into account for traffic in reverse order. In most cases state policies are used in order to accept a connection in the reverse path." #: ../../configuration/system/option.rst:130 msgid "As more and more routers run on Hypervisors, expecially with a :abbr:`NOS (Network Operating System)` as VyOS, it makes fewer and fewer sense to use static resource bindings like ``smp-affinity`` as present in VyOS 1.2 and earlier to pin certain interrupt handlers to specific CPUs." msgstr "As more and more routers run on Hypervisors, expecially with a :abbr:`NOS (Network Operating System)` as VyOS, it makes fewer and fewer sense to use static resource bindings like ``smp-affinity`` as present in VyOS 1.2 and earlier to pin certain interrupt handlers to specific CPUs." #: ../../configuration/nat/nat44.rst:26 msgid "As network address translation modifies the IP address information in packets, NAT implementations may vary in their specific behavior in various addressing cases and their effect on network traffic. The specifics of NAT behavior are not commonly documented by vendors of equipment containing NAT implementations." msgstr "As network address translation modifies the IP address information in packets, NAT implementations may vary in their specific behavior in various addressing cases and their effect on network traffic. The specifics of NAT behavior are not commonly documented by vendors of equipment containing NAT implementations." #: ../../configuration/interfaces/openvpn.rst:48 msgid "As of VyOS 1.4, OpenVPN site-to-site mode can use either pre-shared keys or x.509 certificates." msgstr "As of VyOS 1.4, OpenVPN site-to-site mode can use either pre-shared keys or x.509 certificates." #: ../../configuration/vpn/pptp.rst:10 msgid "As per default and if not otherwise defined, mschap-v2 is being used for authentication and mppe 128-bit (stateless) for encryption. If no gateway-address is set within the configuration, the lowest IP out of the /24 client-ip-pool is being used. For instance, in the example below it would be 192.168.0.1." msgstr "As per default and if not otherwise defined, mschap-v2 is being used for authentication and mppe 128-bit (stateless) for encryption. If no gateway-address is set within the configuration, the lowest IP out of the /24 client-ip-pool is being used. For instance, in the example below it would be 192.168.0.1." #: ../../configuration/firewall/groups.rst:245 msgid "As said before, once firewall groups are created, they can be referenced either in firewall, nat, nat66 and/or policy-route rules." msgstr "As said before, once firewall groups are created, they can be referenced either in firewall, nat, nat66 and/or policy-route rules." #: ../../configuration/trafficpolicy/index.rst:196 msgid "As shown in the example above, one of the possibilities to match packets is based on marks done by the firewall, `that can give you a great deal of flexibility`_." msgstr "As shown in the example above, one of the possibilities to match packets is based on marks done by the firewall, `that can give you a great deal of flexibility`_." #: ../../configuration/trafficpolicy/index.rst:373 msgid "As shown in the last command of the example above, the `queue-type` setting allows these combinations. You will be able to use it in many policies." msgstr "As shown in the last command of the example above, the `queue-type` setting allows these combinations. You will be able to use it in many policies." #: ../../configuration/firewall/index.rst:223 msgid "As the example image below shows, the device now needs rules to allow/block traffic to or from the services running on the device that have open connections on that interface." msgstr "As the example image below shows, the device now needs rules to allow/block traffic to or from the services running on the device that have open connections on that interface." #: ../../configuration/firewall/index.rst:182 msgid "As the example image below shows, the device was configured with rules blocking inbound or outbound traffic on each interface." msgstr "As the example image below shows, the device was configured with rules blocking inbound or outbound traffic on each interface." #: ../../configuration/interfaces/tunnel.rst:69 msgid "As the name implies, it's IPv4 encapsulated in IPv6, as simple as that." msgstr "As the name implies, it's IPv4 encapsulated in IPv6, as simple as that." #: ../../configuration/vpn/l2tp.rst:86 msgid "As well as the below to allow NAT-traversal (when NAT is detected by the VPN client, ESP is encapsulated in UDP for NAT-traversal):" msgstr "As well as the below to allow NAT-traversal (when NAT is detected by the VPN client, ESP is encapsulated in UDP for NAT-traversal):" #: ../../configuration/trafficpolicy/index.rst:1047 msgid "As with other policies, Round-Robin can embed_ another policy into a class through the ``queue-type`` setting." msgstr "As with other policies, Round-Robin can embed_ another policy into a class through the ``queue-type`` setting." #: ../../configuration/trafficpolicy/index.rst:1126 msgid "As with other policies, Shaper can embed_ other policies into its classes through the ``queue-type`` setting and then configure their parameters." msgstr "As with other policies, Shaper can embed_ other policies into its classes through the ``queue-type`` setting and then configure their parameters." #: ../../configuration/trafficpolicy/index.rst:768 msgid "As with other policies, you can define different type of matching rules for your classes:" msgstr "As with other policies, you can define different type of matching rules for your classes:" #: ../../configuration/trafficpolicy/index.rst:784 msgid "As with other policies, you can embed_ other policies into the classes (and default) of your Priority Queue policy through the ``queue-type`` setting:" msgstr "As with other policies, you can embed_ other policies into the classes (and default) of your Priority Queue policy through the ``queue-type`` setting:" #: ../../configuration/interfaces/vxlan.rst:285 msgid "As you can see, Leaf2 and Leaf3 configuration is almost identical. There are lots of commands above, I'll try to into more detail below, command descriptions are placed under the command boxes:" msgstr "As you can see, Leaf2 and Leaf3 configuration is almost identical. There are lots of commands above, I'll try to into more detail below, command descriptions are placed under the command boxes:" #: ../../configuration/interfaces/vxlan.rst:285 msgid "As you can see, the Leaf2 and Leaf3 configurations are almost identical. There are lots of commands above, I'll try to go into more detail below. Command descriptions are placed under the command boxes:" msgstr "As you can see, the Leaf2 and Leaf3 configurations are almost identical. There are lots of commands above, I'll try to go into more detail below. Command descriptions are placed under the command boxes:" #: ../../configuration/firewall/general-legacy.rst:770 msgid "As you can see in the example here, you can assign the same rule-set to several interfaces. An interface can only have one rule-set per chain." msgstr "As you can see in the example here, you can assign the same rule-set to several interfaces. An interface can only have one rule-set per chain." #: ../../configuration/interfaces/bridge.rst:35 msgid "Assign `` interface to bridge ``. A completion helper will help you with all allowed interfaces which can be bridged. This includes :ref:`ethernet-interface`, :ref:`bond-interface`, :ref:`l2tpv3-interface`, :ref:`openvpn`, :ref:`vxlan-interface`, :ref:`wireless-interface`, :ref:`tunnel-interface` and :ref:`geneve-interface`." msgstr "Assign `` interface to bridge ``. A completion helper will help you with all allowed interfaces which can be bridged. This includes :ref:`ethernet-interface`, :ref:`bond-interface`, :ref:`l2tpv3-interface`, :ref:`openvpn`, :ref:`vxlan-interface`, :ref:`wireless-interface`, :ref:`tunnel-interface` and :ref:`geneve-interface`." #: ../../configuration/loadbalancing/haproxy.rst:98 msgid "Assign a specific backend to a rule" msgstr "Assign a specific backend to a rule" #: ../../configuration/vpn/l2tp.rst:384 #: ../../configuration/vpn/sstp.rst:342 msgid "Assign a static IP address to `` account." msgstr "Assign a static IP address to `` account." #: ../../configuration/vrf/index.rst:94 msgid "Assign interface identified by `` to VRF named ``." msgstr "Assign interface identified by `` to VRF named ``." #: ../../configuration/interfaces/bonding.rst:377 msgid "Assign member interfaces to PortChannel" msgstr "Assign member interfaces to PortChannel" #: ../../configuration/service/pppoe-server.rst:460 #: ../../configuration/vpn/pptp.rst:305 msgid "Assign static IP address to `` account." msgstr "Assign static IP address to `` account." #: ../../configuration/service/dhcp-server.rst:113 msgid "Assign the IP address to this machine for `